[CALCITE-6229] Upgrade json-path version to 2.9.0

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.37.0
• Labels: pull-request-available
• Assignee: Unassigned
• Reporter: Will Noble
• Created: 26/Jan/24 00:19
• Updated: 06/May/24 22:19
• Resolved: 26/Jan/24 03:32

Description

There is a CVE: https://osv.dev/vulnerability/GHSA-pfh2-hfmq-phg5

Probably not critical for most users since it would be strange for unsanitized user input to make it into the JSON parser through Calcite, but should be easy to patch.

Issue Links

• links to: GitHub Pull Request #3651