Package
spark-fips-3.5-scala-2.12
Component
jackson-core
Latest update
7.5
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
jackson-core and jackson-databind are shaded inside the prebuilt parquet-jackson-1.15.2.jar (relocated to shaded.parquet.com.fasterxml.jackson; bundles 2.18.1). spark-fips-3.5 builds with Java 8: parquet 1.16.0 is the last Java 8 release and still shades an affected jackson (2.19.2), and parquet 1.17+ is Java 11 bytecode that Spark 3.5's enforce-bytecode-version rule rejects. Awaiting a Java 8 compatible parquet release that bundles a fixed jackson. The standalone jackson jars, the spark-3.5.8-yarn-shuffle.jar copy and hadoop-client-runtime-3.3.6-cg0.jar are fixed with jackson 2.21.7.
Status