Yes, I was about to post the same. You can also directly check Jetty version on Kafka 4.0.0 tag: https://github.com/apache/kafka/blob/4.0.0/gradle/dependencies.gradle#L71
On Mon, May 19, 2025 at 4:57 PM Steven Schlansker <stevenschlans...@gmail.com> wrote: > > > > On May 16, 2025, at 12:04 AM, Sahil Sharma D > > <sahil.d.sha...@ericsson.com.INVALID> wrote: > > > > Hi Team, > > > > I noticed that Jetty has been upgraded to version 11.x in Kafka 4.0.0. > > According to the Jetty website, version 11.x has already reached its end of > > life (EOL). Could you clarify how any future issues or CVEs related to > > version 11.x will be addressed? > > > > Additionally, I would like to know if there is a plan to upgrade Jetty to > > version 12.x in upcoming releases. > > Hi Sahil, I think your premise may be mistaken - I am no authority on the > project, but some searching around leads you to > https://cwiki.apache.org/confluence/display/KAFKA/KIP-1032%3A+Upgrade+to+Jakarta+and+JavaEE+10+in+Kafka+4.0 > which is implemented as > https://github.com/apache/kafka/pull/16754 > > indicating that Kafka 4 indeed already uses Jetty 12 > > Best, > Steven >
