[
https://issues.apache.org/jira/browse/HUDI-9781?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
ASF GitHub Bot updated HUDI-9781:
---------------------------------
Labels: pull-request-available (was: )
> Upgrading jackson-databind to 2.15.2 to matchup with Hadoop jackson-databind
> ----------------------------------------------------------------------------
>
> Key: HUDI-9781
> URL: https://issues.apache.org/jira/browse/HUDI-9781
> Project: Apache Hudi
> Issue Type: Improvement
> Reporter: Deepak Panda
> Priority: Minor
> Labels: pull-request-available
> Fix For: 1.0.2
>
>
> Upgrading jackson-databind to 2.15.2 to matchup with Hadoop jackson-databind
> Hudi is using jackson-databind version as 2.10.0, but jackson-databind
> version used in hadoop is 2.15.2. And it is overriding the hudi
> jackson-databind version.
> Also, version 2.10.0 pull couple of *CRITICAL* CVEs. To address these
> problems we can upgrade jackson-databind version to 2.15.2.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
