# Changelog for Elasticsearch Service Sink Connector for Confluent Platform ## Version 15.1.3 * [PR-934](https://github.com/confluentinc/kafka-connect-elasticsearch/pull/934) - CC-42331: Updated `com.fasterxml.jackson.core:jackson-databind` to 2.21.5 to fix CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, and CVE-2026-54515 * [PR-930](https://github.com/confluentinc/kafka-connect-elasticsearch/pull/930) - CC-42849: Fixed multiple issues where sensitive data (Kafka record keys, connection credentials embedded in `connection.url`, and record content) could be written to connector logs during error handling and version-conflict scenarios * [PR-921](https://github.com/confluentinc/kafka-connect-elasticsearch/pull/921) - CC-36331: Improved connector validation to clearly distinguish user configuration errors from system errors, making connector creation failures easier to diagnose ## Version 15.1.2 * [PR-916](https://github.com/confluentinc/kafka-connect-elasticsearch/pull/916) - CC-38403: Bumped `org.apache.logging.log4j:log4j-core` to 2.25.4 to fix CVE-2025-68161 * [PR-916](https://github.com/confluentinc/kafka-connect-elasticsearch/pull/916) - CC-38403: Bumped `org.apache.logging.log4j:log4j-core` to 2.25.4 to fix CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480, and CVE-2026-34481 * [PR-916](https://github.com/confluentinc/kafka-connect-elasticsearch/pull/916) - CC-39548: Bumped `com.fasterxml.jackson.core:jackson-core` to 2.18.6 to address GHSA-72hv-8253-57qq ## Version 15.1.1 * [PR-909](https://github.com/confluentinc/kafka-connect-elasticsearch/pull/909) - [CC-38106] Upgraded `lz4-java` to `v1.10.1` to fix CVE-2025-12183. Dependency group changed to `at.yawk.lz` from `org.lz4`. ## Version 15.1.0 * [PR-905](https://github.com/confluentinc/kafka-connect-elasticsearch/pull/905) - feat: Added configurable maximum limit for topic-to-external-resource mappings”