tongtaodragon opened a new issue, #552:
URL: https://github.com/apache/rocketmq-spring/issues/552

   **FEATURE REQUEST**
   
   1. Please describe the feature you are requesting.
   Upgrade fastjson to 1.2.83 in 2.2.2
   
   2. Provide any additional detail on your proposed use case for this feature.
   In our production, server side is using 4.8.0. Client side is using 2.2.2 
which is based on rocketmq-all 4.9.3 version. These was  vulnerability in 
fastjson so our security department request us repair. We noticed fastjson 
upgraded in 2.2.3, but 2.2.3 is based on rocketmq-all 5.0 version. That means 
if we upgrade to 2.2.3, we have to use rocketmq-all 5.0 version. We think this 
is big change for us. We worry about whether these is any potential 
compatibility issue. So we proposed upgrading fastjson to 1.2.83 in 2.2.2.
   
   4. Indicate the importance of this issue to you (blocker, must-have, 
should-have, nice-to-have). Are you currently using any workarounds to address 
this issue?
   blocker for us. We have no workaround currently.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to