Comments (7)
ok, we will try replace it in the next minor version.
from milvus-sdk-java.
@yhmo Fastjson is forbidden to use in my company. As far as I know, this jar is forbidden in many companies. So it is better to fix it in the next version
from milvus-sdk-java.
@king1302217
This article mentioned "To fully remediate CVE-2022-25845, we recommend upgrading Fastjson to the latest version, which is currently 1.2.83."
The java sdk is using this version:
Line 96 in 64e42bf
So, can we say it is safe now?
from milvus-sdk-java.
@yhmo Our company also prohibits the use of Fastjson, and we have the same requirement. Can you optimize and upgrade it
from milvus-sdk-java.
Currently, the com.alibaba.fastjson.JSONObject
is used as input of InsertParam/UpsertParam/InsertRowsParam and output of SearchResultsWrapper/QueryResultsWrapper. If we replace it with gson.JsonObject
, will cause lots of impact on users' client code.
from milvus-sdk-java.
Yes, but i think it is very necessary to fix because many companies prohibit the use of Fastjson. So hope we can upgrade in next version. @yhmo
from milvus-sdk-java.
Note:
The work of replacing FastJson with Gson is not ready. Today we released two new minor versions v2.3.7/v2.4.1 to fix some blocking issues.
Replacing FastJson with Gson is postponed to the next minor version.
from milvus-sdk-java.
Related Issues (20)
- Exception in thread "main" java.lang.NoSuchMethodError: java.nio.ByteBuffer.rewind()Ljava/nio/ByteBuffer; HOT 9
- Loading collection console log keeps looping with errors in milvus-sdk-java 2.4.0 HOT 3
- Iterators and range_filter error (when no range filter is specified) HOT 19
- Is there any interface in the Java Sdk that can clear a collection? HOT 3
- When a SearchIteratorParam is initialized via withParams, calling build() raises an error HOT 2
- 关于查询milvus的向量精度问题 HOT 17
- 数组字段支持索引吗? 没有索引查询起来很慢,怎么搞 HOT 4
- milvus集群版search压力倾斜 HOT 4
- Support AlterDatabase api
- How to support connection pooling in milvus-java-sdk?(如何在milvus-java-sdk中支持连接池?) HOT 3
- 集合别名相关内容疑问
- [v2]-Use the milvusClientV2.describeCollection interface to view the vector of bf16/float16/sparse vector type. The vectorFieldName in the return value is empty. HOT 1
- Does milvus support search data by json field condition? HOT 2
- [v2][BFloat16Vector]--The search return result is empty, but the query return is correct。
- 能否在SDK中增加EmbeddingModels和Rerankers相关接口,同时做好归一化,目前看只有PY的sdk存在。 HOT 9
- milvus-sdk-java 2.3.5版本后,引入了hadoop-client依赖,其中slf4j-reload4j-1.7.36.jar与logback-classic-1.2.12.jar存在冲突,有好的解决方案吗? HOT 3
- java sdk中dataType为DataType.Bool的字段无法使用STL_SORT索引,但是文档中是可以支持 HOT 2
- Java SDK中使用MilvusClientV2的search(SearchReq request)方法返回的结果中score字段名变成了distance HOT 3
- io.milvus.v2的包下载地址不清楚求解答? HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from milvus-sdk-java.