vert-x3 / vertx-kafka-client

Reactive Kafka Client for Vert.x
Apache License 2.0
84 stars 82 forks source link

Upgrade to Kafka 3.4.0, Debezium 2.1.4.Final, JUnit 4.13.2 #238

Closed julianladisch closed 1 year ago

julianladisch commented 1 year ago

The upgrade of kafka-client from 3.0.2 to 3.4.0 fixes Deserialization of Untrusted Data: https://nvd.nist.gov/vuln/detail/CVE-2023-25194

aesteve commented 1 year ago

Rebasing with master should fix the CI issue I suppose? (Debezium needing Java 11)

I was working on #242 and saw your work, we should favor this version I think (which upgrades Debezium as well).

vietj commented 1 year ago

@julianladisch can you rebase on latest master to have the CI passing ?