org.apache.spark:spark-core_2.12 need to be upgraded to avoid critical CVE issue. Need to support Spark3.4.0 