High severity vulnerabilities CVE-2024-29857 , CVE-2024-30171 and CVE-2024-30172 detected in ksql

[bhargavyk2002]

Hi,
Anchore scan has detected 3 vulnerabilities from the package 'org.bouncycastle', These are being flagged as High severity even though no vulnerability score is present in NVD database.

1. CVE-2024-29857
2. CVE-2024-30171
3. CVE-2024-30172

These packages are present in ksql as a dependency
org.bouncycastle:bcprov-jdk18on:jar
bouncycastle:bcpkix-jdk18on:jar

The mitigation is to upgrade to the fixed version i.e. 1.78
Are there any plans to upgrade these packages?