This one is tricky (https://github.com/OpenAPITools/jackson-databind-nullable/issues/25). Will fix a bit later.
bump jackson-databind from 2.10.2 to 2.13.0 in the kafka-ui-api
Request review and update the bump jackson-databind from 2.10.2 to latest supported version.

Latest versions may be found here:
https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind

jackson-databind 2.10.2 is vulnerable to the following CVEs:
https://nvd.nist.gov/vuln/detail/CVE-2020-25649

Vulnerabilities identified using Prisma Twistlock Scans against the kafka-ui-api-0.2.1.jar file conducted on 10 November 2021.

Jar file was extracted and files were located here:  \kafka-ui-api-0.2.1\BOOT-INF\lib\

note: This jar also contains 1.3.61 versions for these related files which may also need updating: jackson-annotations, jackson-core, jackson-dataformat-cbor, jackson-datatype-guava, jackson-datatype-jdk8, jackson-datatype-joda,jackson-datatype-jsr310 and jackson-module-parameter-names
pom.xml
pom.xml
diff --git a/pom.xml b/pom.xml
index cb5bf344660..a410b6bff07 100644
--- a/pom.xml
+++ b/pom.xml
@@ -15,7 +15,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 
         <spring-boot.version>2.5.6</spring-boot.version>
-        <jackson-databind-nullable.version>0.2.1</jackson-databind-nullable.version>
+        <jackson-databind-nullable.version>0.2.2</jackson-databind-nullable.version>
         <org.mapstruct.version>1.4.2.Final</org.mapstruct.version>
         <org.projectlombok.version>1.18.20</org.projectlombok.version>
         <org.projectlombok.e2e-checks.version>1.18.20</org.projectlombok.e2e-checks.version>
