[SECURITY] Package vulnerability: com.fasterxml.jackson.core:jackson-databind

[vkatrychenko]

Description

We use Snyk to protect our infrastructure from vulnerabilities. Recently, we received a report from Snyk and the spark-operator was mentioned there.

Also, I scanned the docker image with trivy. Here is the report:
report.txt

Reproduction Code [Required]

The issue is relevant for v1beta2-1.4.6-3.5.0 and v1beta2-1.6.2-3.5.0

Steps to reproduce the behavior:
Pull the docker image to your local machine and run security scan. You can use Trivy or other services.

Expected behavior

High and Critical vulnerabilities should not be detected.

Actual behavior

High and Critical vulnerabilities were founded

Environment & Versions

• Spark Operator App version: v1beta2-1.4.6-3.5.0
• Helm Chart Version:
• Kubernetes Version: 1.27
• Apache Spark version:

Additional context