elasticsearch-rest-client is using an old non-maintained version of httpasyncclient-4.1.4.jar
#1,308 创建于 2021年9月28日
仓库指标
- Star
- (8,123 star)
- PR 合并指标
- (平均合并 5天 9小时) (30 天内合并 266 个 PR)
描述
When I use latest rest client, it brings with it a dependency of an old async http client (httpasyncclient-4.1.4.jar). This client is no longer maintained. See its github page: https://github.com/apache/httpasyncclient
Not only this is a security risk, I also believe that using this old client causes multiple issues, and also related to : https://github.com/spring-projects/spring-data-elasticsearch/issues/1387 https://github.com/spring-projects/spring-data-elasticsearch/issues/1948
The expected solution: elasticsearch-rest-client should use the latest modern http client 5.x, which has the same functionality. https://github.com/apache/httpcomponents-client