apache / apache/rocketmq-spring
Upgrade fastjson to 1.2.83 in 2.2.2
- Dominant language
- Java
- Stars
- 2.3k
- Forks
- 943
- PR merge metrics
- No merged PRs in 30d
Description
**FEATURE REQUEST**
1. Please describe the feature you are requesting.
Upgrade fastjson to 1.2.83 in 2.2.2
2. Provide any additional detail on your proposed use case for this feature.
In our production, server side is using 4.8.0. Client side is using 2.2.2 which is based on rocketmq-all 4.9.3 version. These was vulnerability in fastjson so our security department request us repair. We noticed fastjson upgraded in 2.2.3, but 2.2.3 is based on rocketmq-all 5.0 version. That means if we upgrade to 2.2.3, we have to use rocketmq-all 5.0 version. We think this is big change for us. We worry about whether these is any potential compatibility issue. So we proposed upgrading fastjson to 1.2.83 in 2.2.2.
4. Indicate the importance of this issue to you (blocker, must-have, should-have, nice-to-have). Are you currently using any workarounds to address this issue?
blocker for us. We have no workaround currently.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.