WS-2017-0291

Affected version of org.apache.kafka:connect-runtime from 0.9.0.0 up to and including 0.11.0.0, are vulnerable to Deserialization of Untrusted Data via FileOffsetBackingStore...