[PARQUET-2300] Update jackson-core 2.13.4 to a version without CVE PRISMA-2023-0067

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.13.0
• Fix Version/s: 1.14.0
• Component/s: parquet-mr
• Assignee: Gang Wu
• Reporter: Gianluca Vagnoni
• Created: 22/May/23 09:29
• Updated: 28/Nov/23 22:26
• Resolved: 28/Nov/23 22:26

Description

The library "parquet-jackson" version 1.13.0 and 1.13.1 contains the vulnerability PRISMA-2023-0067 (https://github.com/FasterXML/jackson-core/pull/827) (https://github.com/IBM/ibm-cos-sdk-java/issues/58)

Please upgrade the shaded library to jackson-core version 2.15.0 to fix it.