OpenDistro for ES V 1.9.0 with vulnerable components

Open Distro V 1.9.0 when scanned with OSS scanning tools is showing usage of some vulnerable components.
Apache CXF3.2.2
Apache Kafkav2.0.1
Bouncy Castle Provider - FIPS1.0.1
jQuery3.4.1

is there any plan to fix them and release upgraded version?