diff --git a/2021/21xxx/CVE-2021-21290.json b/2021/21xxx/CVE-2021-21290.json
index 5d92d2df7d7..e2be4a1c496 100644
--- a/2021/21xxx/CVE-2021-21290.json
+++ b/2021/21xxx/CVE-2021-21290.json
@@ -91,6 +91,16 @@
                 "refsource": "MLIST",
                 "name": "[debian-lts-announce] 20210211 [SECURITY] [DLA 2555-1] netty security update",
                 "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00016.html"
+            },
+            {
+                "refsource": "MLIST",
+                "name": "[kafka-jira] 20210301 [jira] [Created] (KAFKA-12389) Upgrade of netty-codec due to CVE-2021-21290",
+                "url": "https://lists.apache.org/thread.html/rc488f80094872ad925f0c73d283d4c00d32def81977438e27a3dc2bb@%3Cjira.kafka.apache.org%3E"
+            },
+            {
+                "refsource": "MLIST",
+                "name": "[kafka-dev] 20210301 [jira] [Created] (KAFKA-12389) Upgrade of netty-codec due to CVE-2021-21290",
+                "url": "https://lists.apache.org/thread.html/r2748097ea4b774292539cf3de6e3b267fc7a88d6c8ec40f4e2e87bd4@%3Cdev.kafka.apache.org%3E"
             }
         ]
     },