Official Github Link: https://github.com/tronprotocol/java-tron/releases/tag/GreatVoyage-v4.4.6
Note: This is a Non-mandatory upgrade
- Update for a security vulnerability in
fastjson
https://github.com/alibaba/fastjson/wiki/security_update_20220523
two improvements are suggested:- upgrade java-tron to 4.4.6
- no upgrade. Just turn off autoType, add jvm startup parameters
-Dfastjson.parser.safeMode=true
Changes
- Upgrade fastjson version
Beauty in things exists in the mind which contemplates them.
— David Hume