[KAFKA-10591] kafka_2.13-2.6.0 vulnerabilities

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 2.6.0
• Labels: vulnerabilities
• Assignee: Unassigned
• Reporter: Manvindar
• Created: 09/Oct/20 07:54
• Updated: 09/Oct/20 09:22
• Resolved: 09/Oct/20 09:22

Description

I scanned Kafka image in Anchore and got few vulnerabilities, is there a fix for them or its is false positive? 
Two of them are in log4j-1.2.17, can we bump it to version 2?