Skip to content
This repository was archived by the owner on Jan 7, 2026. It is now read-only.

spark-3.5: mark jackson-core GHSA-wf8f-6423-gfxg as pending-upstream-fix #19330

Merged
AmberArcadia merged 1 commit into from
Jun 11, 2025
Merged

spark-3.5: mark jackson-core GHSA-wf8f-6423-gfxg as pending-upstream-fix #19330

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions spark-3.5.advisories.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -239,6 +239,10 @@ advisories:
componentType: java-archive
componentLocation: /usr/lib/spark/jars/hadoop-client-runtime-3.3.6.jar
scanner: grype
- timestamp: 2025-06-11T22:29:39Z
type: pending-upstream-fix
data:
note: jackson-core upgrade to 2.13.0+ requires incompatible Hadoop infrastructure changes including DynConstructors utility class. Waiting for Apache Spark and Hadoop to officially support jackson-core 2.13.0+ in future releases.

- id: CGA-5hff-fh2h-5q22
aliases:
Expand Down
Loading