hudi-bot opened a new issue, #17197:
URL: https://github.com/apache/hudi/issues/17197

   Upgrading jackson-databind to 2.15.2 to matchup with Hadoop jackson-databind
   
   Hudi is using jackson-databind version as 2.10.0, but jackson-databind 
version used in hadoop is 2.15.2. And it is overriding the hudi 
jackson-databind version.
   
   Also, version 2.10.0 pull couple of *CRITICAL* CVEs. To address these 
problems we can upgrade jackson-databind version to 2.15.2.
   
   ## JIRA info
   
   - Link: https://issues.apache.org/jira/browse/HUDI-9781
   - Type: Improvement
   - Fix version(s):
     - 1.0.2


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to