From a051452fe6ec3e2b99a1919b09143da09f61c70d Mon Sep 17 00:00:00 2001
From: chrislu <chris.lu@gmail.com>
Date: Sat, 22 Nov 2025 17:55:03 -0800
Subject: [PATCH] security: upgrade Apache ZooKeeper to 3.9.3

- Upgrade from 3.9.1 to 3.9.3
- Fixes GHSA-g93m-8x6h-g5gv: Authentication bypass in Admin Server
- Fixes GHSA-r978-9m6m-6gm6: Information disclosure in persistent watchers
- Fixes GHSA-2hmj-97jw-28jh: Insufficient permission check in snapshot/restore
- Addresses high and moderate severity vulnerabilities
---
 test/java/spark/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/test/java/spark/pom.xml b/test/java/spark/pom.xml
index 0c769dc05..566b482af 100644
--- a/test/java/spark/pom.xml
+++ b/test/java/spark/pom.xml
@@ -121,7 +121,7 @@
             <dependency>
                 <groupId>org.apache.zookeeper</groupId>
                 <artifactId>zookeeper</artifactId>
-                <version>3.9.1</version>
+                <version>3.9.3</version>
             </dependency>
 
             <!-- Apache Commons - Fix CVEs -->