Kafka 2.3.0 and later bundle jersey 2.28. Since 2.28, jersey changed the license type from CDDL/GPLv2+CPE to EPLv2. But in Kafka 2.5.0's LICENSE file https://github.com/apache/kafka/blob/2.5/LICENSE, it still said
"This distribution has a binary dependency on jersey, which is available under the CDDL".
This should be corrected ASAP.