Override the woodstox version to address CVEs
<kafka-clients.version>2.8.1</kafka-clients.version>
<snakeyaml.version>1.33</snakeyaml.version>
<guava.version>31.1-jre</guava.version>
+ <woodstox-core.version>6.5.0</woodstox-core.version>
<!-- Kafka Connect -->
<connect.version>2.8.1</connect.version>
<version>${guava.version}</version>
</dependency>
+ <dependency>
+ <groupId>com.fasterxml.woodstox</groupId>
+ <artifactId>woodstox-core</artifactId>
+ <version>${woodstox-core.version}</version>
+ </dependency>
+
<!-- Tests -->
<dependency>
<groupId>io.confluent</groupId>
