See https://www.cve.org/CVERecord?id=CVE-2024-23454. Versions of Hadoop before 3.4.0 are affected by this CVE. kafka-connect-s3 uses Hadoop version 3.3.6.