An authenticated user with access to Livy's REST or JDBC interface can submit a Spark session or batch job with crafted configuration values. Two weaknesses combine ...

This issue is caused by the v3.2.0-BETA Docker image missing the --add-opens JVM options required for JDK 17+. Root Cause: JRaft uses reflection to access java.util.ArrayList.elementData, which is ...