Vulnerabilities for com.databricks:databricks-jdbc:3.4.1 jar
We are reporting two groups of Snyk-identified security vulnerabilities in com.databricks:databricks-jdbc:3.4.1 caused by shaded/embedded dependencies that cannot be remediated by consumers through standard dependency management overrides.Why We Cann...
- 325 Views
- 1 replies
- 0 kudos
Latest Reply
@psjava31955 , thanks for the detailed writeup, and you've got the mechanism exactly right. The uber jar (com.databricks:databricks-jdbc) is shaded, so those artifacts are relocated inside the jar. BOM overrides, resolutionStrategy, and dependencyMan...
- 0 kudos