[VL]Three Vulnerabilities issues(icu, guava, snakeyaml) in SONATYPES
Open
bug
triage
- Dominant language
- Scala
- Stars
- 1.6k
- Forks
- 657
- Avg merge
- 2d 14h
- Merged PRs (30d)
- 80
Description
### Backend
VL (Velox)
### Bug description
SONATYPE report 7 threats from 3 related libraries.
https://sbom.sonatype.com/report/T1-118f0f57da8c6b3097cc-803c9bef85ae41-1702610466-13600986cd964c319bba81bd8a1ea028
This may block when releasing jar via SONATYPE and with potential security issue.
### Spark version
Spark-3.2.x
### Spark configurations
_No response_
### System information
_No response_
### Relevant logs
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.