Not sure if this is a security issue. It probably isn't, since compat-openssl10 is standard RHEL8 package. It looks a bit weird, having to install this. If you don't, this happens:

Suppressed: java.lang.UnsatisfiedLinkError: /tmp/libnetty_tcnative_linux_x86_646076116811446961256.so: libssl.so.10: cannot open shared object file: No such file or directory

and the tcnative code is not used.