Skip to content

Remove Fastjson from the driver - #656

Merged
Nicole00 merged 1 commit into
vesoft-inc:devfrom
xiajingchun:security/remove-fastjson
Sep 3, 2026
Merged

Remove Fastjson from the driver#656
Nicole00 merged 1 commit into
vesoft-inc:devfrom
xiajingchun:security/remove-fastjson

Conversation

@xiajingchun

Copy link
Copy Markdown

Removes the Fastjson dependency from the Java driver and replaces authentication-option serialization with a local JSON serializer for string values.

Also includes the previously validated security upgrades:

  • gRPC runtime and generator: 1.75.0
  • Protobuf runtime and protoc: 3.25.5

Validation: mvn -pl client -DskipTests compile

Replace Fastjson authentication option serialization with a local string-map JSON serializer and remove the Fastjson dependency. Keep the gRPC and Protobuf vulnerability updates in the same security change.
@Nicole00
Nicole00 merged commit e94259c into vesoft-inc:dev Sep 3, 2026
2 checks passed
xiajingchun added a commit that referenced this pull request Sep 3, 2026
* Remove Fastjson from the driver (#656)

Replace Fastjson authentication option serialization with a local string-map JSON serializer and remove the Fastjson dependency. Keep the gRPC and Protobuf vulnerability updates in the same security change.

* update version

---------

Co-authored-by: jingchun.xia <6269380+xiajingchun@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants