Version 3.5.1 of Kafka for JUnit has been released. It contains a fix for CVE-2020-8908 in a transitive dependency.
Changelog
See the changelog on GitHub.
Bugfixes
Get it
You can obtain the binaries from Maven central or include the dependency using the following Maven coordinates in your build.
Maven
<dependency>
<groupId>net.mguenther.kafka</groupId>
<artifactId>kafka-junit</artifactId>
<version>3.5.1</version>
</dependency>
Gradle
compile 'net.mguenther.kafka:kafka-junit:3.5.1'