fixing security issues (#451)

CVE-2024-47561 related to Apache Avro
CVE-2025-27818 related to Apache Kafka

Fixing fossa security issues:
CVE-2025-52999, CVE-2024-7254, CVE-2025-48924

Author: pszkamruk-splunk

dependency-reduced-pom.xml

@@ -205,17 +205,17 @@
     </plugins>
   </reporting>
   <properties>
-    <junit.jupiter.version>5.9.2</junit.jupiter.version>
-    <sonar.coverage.jacoco.xmlReportPaths>${project.build.directory}/site/jacoco/jacoco.xml</sonar.coverage.jacoco.xmlReportPaths>
-    <slf4j.version>2.0.7</slf4j.version>
-    <junit.version>4.13.2</junit.version>
     <java.version>1.8</java.version>
+    <maven.compiler.source>1.8</maven.compiler.source>
+    <junit.jupiter.version>5.9.2</junit.jupiter.version>
+    <jackson.version>2.15.0</jackson.version>
+    <kafka.version>3.9.1</kafka.version>
+    <junit.platform.version>1.9.2</junit.platform.version>
     <maven.compiler.target>1.8</maven.compiler.target>
-    <kafka.version>3.4.0</kafka.version>
+    <slf4j.version>2.0.7</slf4j.version>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-    <jackson.version>2.14.2</jackson.version>
+    <junit.version>4.13.2</junit.version>
     <junit.vintage.version>5.9.2</junit.vintage.version>
-    <maven.compiler.source>1.8</maven.compiler.source>
-    <junit.platform.version>1.9.2</junit.platform.version>
+    <sonar.coverage.jacoco.xmlReportPaths>${project.build.directory}/site/jacoco/jacoco.xml</sonar.coverage.jacoco.xmlReportPaths>
   </properties>
 </project>

pom.xml

@@ -18,8 +18,8 @@
         <junit.jupiter.version>5.9.2</junit.jupiter.version>
         <junit.vintage.version>5.9.2</junit.vintage.version>
         <junit.platform.version>1.9.2</junit.platform.version>
-        <jackson.version>2.14.2</jackson.version>
-        <kafka.version>3.4.0</kafka.version>
+        <jackson.version>2.15.0</jackson.version>
+        <kafka.version>3.9.1</kafka.version>
         <slf4j.version>2.0.7</slf4j.version>
         <sonar.coverage.jacoco.xmlReportPaths>${project.build.directory}/site/jacoco/jacoco.xml</sonar.coverage.jacoco.xmlReportPaths>
     </properties>
@@ -154,7 +154,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-lang3</artifactId>
-            <version>3.12.0</version>
+            <version>3.18.0</version>
             <scope>compile</scope>
         </dependency>
         <!-- https://mvnrepository.com/artifact/io.confluent/kafka-connect-protobuf-converter -->
@@ -167,7 +167,7 @@
         <dependency>
             <groupId>com.google.protobuf</groupId>
             <artifactId>protobuf-java</artifactId>
-            <version>3.22.2</version>
+            <version>3.25.5</version>
         </dependency>
         <!-- https://mvnrepository.com/artifact/com.google.code.gson/gson -->
         <dependency>
@@ -199,7 +199,7 @@
         <dependency>
             <groupId>org.apache.avro</groupId>
             <artifactId>avro</artifactId>
-            <version>1.11.3</version>
+            <version>1.11.4</version>
         </dependency>
         <dependency>
             <groupId>org.jacoco</groupId>