apache / apache/rocketmq-spring

Upgrade fastjson to 1.2.83 in 2.2.2

Open
#552 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
2.3k
Forks
943
PR merge metrics
No merged PRs in 30d

Description

**FEATURE REQUEST**

1. Please describe the feature you are requesting.
Upgrade fastjson to 1.2.83 in 2.2.2

2. Provide any additional detail on your proposed use case for this feature.
In our production, server side is using 4.8.0. Client side is using 2.2.2 which is based on rocketmq-all 4.9.3 version. These was vulnerability in fastjson so our security department request us repair. We noticed fastjson upgraded in 2.2.3, but 2.2.3 is based on rocketmq-all 5.0 version. That means if we upgrade to 2.2.3, we have to use rocketmq-all 5.0 version. We think this is big change for us. We worry about whether these is any potential compatibility issue. So we proposed upgrading fastjson to 1.2.83 in 2.2.2.

4. Indicate the importance of this issue to you (blocker, must-have, should-have, nice-to-have). Are you currently using any workarounds to address this issue?
blocker for us. We have no workaround currently.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.