Jetty security defect

[Jackson, Douglas]

Hi!
There seems to be a security defect against the Jetty Server used by karaf 
4.3.0.
In order to avoid it, we would need to upgrade to 9.4.36 or similar.
Are there any plans to upgrade the Jetty used by karaf 4.3.x?
Thanks,
Doug