Package
spark-3.5-scala-2.13
Component
jackson-databind
Latest update
7.5
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
jackson-core and jackson-databind are shaded inside the prebuilt parquet-jackson-1.15.2.jar (relocated to shaded.parquet.com.fasterxml.jackson; bundles 2.18.1). Spark 3.5 enforces Java 8 bytecode for dependencies (enforceBytecodeVersion maxJdkVersion 1.8): parquet 1.16.0 is the last Java 8 release and still shades an affected jackson (2.19.2), and parquet 1.17+ is Java 11 bytecode. Awaiting a Java 8 compatible parquet release that bundles a fixed jackson. The standalone jackson jars and the spark-3.5.9-yarn-shuffle.jar copy are fixed with jackson 2.21.7.
Status