Describe the bug, including details regarding any error messages, version, and platform.
jackson-core <= 2.18.5 has been identified with a vulnerability: GHSA-72hv-8253-57qq
As parquet-jackson re-bundles/shades jackson-core and still has the module-info.class mentioning jackson-core, parquet-jackson is now flagged as vulnerable by trivy (the vulnerability scanner that we use).
Do you have plans of releasing a version of parquet-jackson that includes at least 2.18.6 of jackson-core?
Component(s)
No response
Describe the bug, including details regarding any error messages, version, and platform.
jackson-core <= 2.18.5 has been identified with a vulnerability: GHSA-72hv-8253-57qq
As parquet-jackson re-bundles/shades jackson-core and still has the module-info.class mentioning jackson-core, parquet-jackson is now flagged as vulnerable by trivy (the vulnerability scanner that we use).
Do you have plans of releasing a version of parquet-jackson that includes at least 2.18.6 of jackson-core?
Component(s)
No response