[KAFKA-14986] security vulnerability in jose4j-0.7.9.jar

• Type: Bug
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Affects Version/s: 3.3.1
• Labels: security-issue vulnerabilities
• Flags: Patch, Important
• External issue URL: https://www.mend.io/vulnerability-database/WS-2023-0116
• Assignee: Unassigned
• Reporter: masood
• Created: 11/May/23 06:33
• Updated: 11/May/23 06:34

Description

Kafka has a depenedency on the jose4j-0.7.9.jar 
jose4j-0.7.9.jar  has been identified with the WS-2023-0116.

https://www.mend.io/vulnerability-database/WS-2023-0116

could you please confirm is Kafka impacted by this security vulnerability.