CVE‑2025‑12183 this vulnerability compression.type for topic and producer

Ops
1

Please assist to check the compression.type configuration for Kafka Broker and also at topic level to assess if CVE‐2025‐12183 is affecting applications.

This is with regards to the latest vulnerability found related to Kafka:

Sonatype CVE Feed - CVE‐2025‐12183

6

The lz4-java dependency was upgraded from 1.8.0 to 1.10.1 as part of the Apache Kafka 4.1 release and also backported to 3.9.2 (JIRA, GitHub).