CGA-cwf8-x2j8-62fg

Attempts to build with newer version result in build failures; upstream maintainer will need to make code changes to work with later versions

The dependency responsible for this CVE is a transitive dependency where the version of said dependency is not explicitly defined in the project but rather brought in under the hadoop-client-runtime jar. This requires upstream maintainers to implement a fix.