# \[RELEASE\] Kafka Connect ScyllaDB Sink Connector v1.1.5

**URL:** <https://forum.scylladb.com/t/release-kafka-connect-scylladb-sink-connector-v1-1-5/5386>\
**Category:** Release Notes\
**Tags:** release, open-source, kafka\
**Created:** [May 26, 2026, 5:25pm UTC](https://forum.scylladb.com/t/release-kafka-connect-scylladb-sink-connector-v1-1-5/5386 "2026-05-26T17:25:06Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![nikagra](https://sea2.discourse-cdn.com/flex016/user_avatar/forum.scylladb.com/nikagra/32/1923_2.png) [@nikagra](https://forum.scylladb.com/u/nikagra)\
**Post date:** [May 26, 2026, 5:25pm UTC](https://forum.scylladb.com/t/release-kafka-connect-scylladb-sink-connector-v1-1-5/5386/1 "2026-05-26T17:25:06Z")

</div>

Hi everyone,

We’re happy to announce the release of **Kafka Connect ScyllaDB Sink Connector v1.1.5**. This is a patch release focused on **security remediations** for transitive dependencies.

### What’s Changed

- **CVE-2026-35554 (Kafka Clients):** A race condition in the Kafka Java producer buffer pool could cause silent message misrouting and data corruption. Fixed by bumping `kafka-clients` to 3.9.2. ([#163](https://github.com/scylladb/kafka-connect-scylladb/pull/163))
- **CVE-2026-42583 (Netty):** `Lz4FrameDecoder` in netty-codec prior to 4.1.133.Final allocates up to 32 MB per block before decompression, allowing a peer to trigger memory exhaustion (DoS) with a crafted LZ4 header. Fixed by overriding netty to 4.1.133.Final. ([#165](https://github.com/scylladb/kafka-connect-scylladb/pull/165))
- **Jackson** updated to 2.21.3. ([#157](https://github.com/scylladb/kafka-connect-scylladb/pull/157))
- **ScyllaDB Java Driver** updated to 4.19.0.9. ([#159](https://github.com/scylladb/kafka-connect-scylladb/pull/159))

### Who should upgrade

This release is recommended for **all users** , especially those running in environments exposed to untrusted network peers (due to the Netty DoS fix) or producing to multiple topics (due to the Kafka data corruption fix).

### Links

- **Full Changelog:** [Comparing 1.1.4...1.1.5 · scylladb/kafka-connect-scylladb · GitHub](https://github.com/scylladb/kafka-connect-scylladb/compare/1.1.4...1.1.5)
- **GitHub Release:** [Release 1.1.5 · scylladb/kafka-connect-scylladb · GitHub](https://github.com/scylladb/kafka-connect-scylladb/releases/tag/1.1.5)

As always, feel free to report any issues on [GitHub](https://github.com/scylladb/kafka-connect-scylladb/issues).