> On May 16, 2025, at 12:04 AM, Sahil Sharma D > <sahil.d.sha...@ericsson.com.INVALID> wrote: > > Hi Team, > > I noticed that Jetty has been upgraded to version 11.x in Kafka 4.0.0. > According to the Jetty website, version 11.x has already reached its end of > life (EOL). Could you clarify how any future issues or CVEs related to > version 11.x will be addressed? > > Additionally, I would like to know if there is a plan to upgrade Jetty to > version 12.x in upcoming releases.
Hi Sahil, I think your premise may be mistaken - I am no authority on the project, but some searching around leads you to https://cwiki.apache.org/confluence/display/KAFKA/KIP-1032%3A+Upgrade+to+Jakarta+and+JavaEE+10+in+Kafka+4.0 which is implemented as https://github.com/apache/kafka/pull/16754 indicating that Kafka 4 indeed already uses Jetty 12 Best, Steven