We currently are using Jackson 2.10.5 but a vulnerability has been detected and fixed in 2.10.5.1 which Apache Kafka 2.8 has updated to as well. These should be aligned.