Changelog for Elasticsearch Service Sink Connector for Confluent Platform

Version 15.1.3

PR-934 - CC-42331: Updated com.fasterxml.jackson.core:jackson-databind to 2.21.5 to fix CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, and CVE-2026-54515
PR-930 - CC-42849: Fixed multiple issues where sensitive data (Kafka record keys, connection credentials embedded in connection.url, and record content) could be written to connector logs during error handling and version-conflict scenarios
PR-921 - CC-36331: Improved connector validation to clearly distinguish user configuration errors from system errors, making connector creation failures easier to diagnose

PR-916 - CC-38403: Bumped org.apache.logging.log4j:log4j-core to 2.25.4 to fix CVE-2025-68161
PR-916 - CC-38403: Bumped org.apache.logging.log4j:log4j-core to 2.25.4 to fix CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480, and CVE-2026-34481
PR-916 - CC-39548: Bumped com.fasterxml.jackson.core:jackson-core to 2.18.6 to address GHSA-72hv-8253-57qq

PR-909 - [CC-38106] Upgraded lz4-java to v1.10.1 to fix CVE-2025-12183. Dependency group changed to at.yawk.lz from org.lz4.

PR-905 - feat: Added configurable maximum limit for topic-to-external-resource mappings”