shivangigarg1 opened a new issue, #10893:
URL: https://github.com/apache/hudi/issues/10893

   **_Tips before filing an issue_**
   
   - Have you gone through our [FAQs](https://hudi.apache.org/learn/faq/)? yes
   
   - Join the mailing list to engage in conversations and get faster support at 
[email protected].
   
   - If you have triaged this as a bug, then file an 
[issue](https://issues.apache.org/jira/projects/HUDI/issues) directly.
   
   **Describe the problem you faced**
   
   Twistlock scan tool reported multiple critical and high vulnerabilities 
issue for hudi jar
   
![image](https://github.com/apache/hudi/assets/163825637/73bebbff-8fbd-4ed2-bdbb-5dc64cc9560f)
   Tried upgrading fasterxml.version in pom.xml and build it. But, the final 
package still gets the old version of jackson-databind - `2.4.0` and is not 
picking the right one.
   
   Are there any pointers resolve these vulnerabilities?
   
   **Environment Description**
   
   * Hudi version : 0.14.0
   
   * Spark version : 3.4
   
   * Hive version : 2.3.1
   
   * Hadoop version : 2.10.1
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to