[Bug]: KafkaIO pulls dependency vulnerable to CVE-2024-26308 and CVE-2024-25710

[stankiewicz]

What happened?

Add KafkaIO as dependency to pom.

https://mvnrepository.com/artifact/io.confluent/kafka-schema-registry-client/7.6.0 has 2 vulnerabilities.

There is 7.6.3 available.

Issue Priority

Priority: 2 (default / most bugs should be filed as P2)

Issue Components

• Component: Python SDK
• Component: Java SDK
• Component: Go SDK
• Component: Typescript SDK
• Component: IO connector
• Component: Beam YAML
• Component: Beam examples
• Component: Beam playground
• Component: Beam katas
• Component: Website
• Component: Infrastructure
• Component: Spark Runner
• Component: Flink Runner
• Component: Samza Runner
• Component: Twister2 Runner
• Component: Hazelcast Jet Runner
• Component: Google Cloud Dataflow Runner

[stankiewicz]

.take-issue