Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

springboot 2.X已经停更了 目前已经出现了很多CVE问题 希望可以将server服务升级到boot3.X版本并支持一下虚拟线程 这样性能肯定会提高一些 安全性也有保障 #6736

Open
JavaLionLi opened this issue Aug 7, 2024 · 2 comments

Comments

@JavaLionLi
Copy link
Contributor

Why you need it?

Is your feature request related to a problem? Please describe in details

How it could be?

A clear and concise description of what you want to happen. You can explain more about input of the feature, and output of it.

Other related information

Add any other context or screenshots about the feature request here.

@JavaLionLi JavaLionLi changed the title springboot 2.X已经停更了 目前已经出现了很多CVE问题 希望可以将控制台升级到boot3.X版本并支持一下虚拟线程 这样性能肯定会提高一些 安全性也有保障 springboot 2.X已经停更了 目前已经出现了很多CVE问题 希望可以将server升级到boot3.X版本并支持一下虚拟线程 这样性能肯定会提高一些 安全性也有保障 Aug 7, 2024
@JavaLionLi JavaLionLi changed the title springboot 2.X已经停更了 目前已经出现了很多CVE问题 希望可以将server升级到boot3.X版本并支持一下虚拟线程 这样性能肯定会提高一些 安全性也有保障 springboot 2.X已经停更了 目前已经出现了很多CVE问题 希望可以将server服务升级到boot3.X版本并支持一下虚拟线程 这样性能肯定会提高一些 安全性也有保障 Aug 7, 2024
@funky-eyes
Copy link
Contributor

我们已经在计划中,并且会将spring-web相关依赖全部移除,改为spring-core+netty-http来实现。
We are currently planning to remove all spring-web related dependencies and transition to using spring-core along with netty-http for implementation.

@linghengqian
Copy link
Member

linghengqian commented Oct 11, 2024

We are currently planning to remove all spring-web related dependencies and transition to using spring-core along with netty-http for implementation.

org.graalvm.nativeimage.MissingReflectionRegistrationError: The program tried to reflectively access class

   org.apache.logging.log4j.spi.ExtendedLogger

 without it being registered for runtime reflection. Add org.apache.logging.log4j.spi.ExtendedLogger to the reflection metadata to solve this problem. See https://www.graalvm.org/latest/reference-manual/native-image/metadata/#reflection for help.
  [email protected]/java.lang.Class.forName(DynamicHub.java:1377)
  org.apache.commons.logging.LogAdapter.isPresent(LogAdapter.java:107)
  org.apache.commons.logging.LogAdapter.<clinit>(LogAdapter.java:51)
  org.apache.commons.logging.LogFactory.getLog(LogFactory.java:67)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants