Staging Environment:
Content and features may be unstable or change without notice.
VulnerableCode
.
io
Documentation
Advisory To-Dos
Pipeline Dashboard
API
About
VulnerableCode is a free and open database of software package vulnerabilities.
Live chat at
https://gitter.im/aboutcode-org/vulnerablecode
Source code and support at
https://github.com/nexB/vulnerablecode
Docs at
https://vulnerablecode.readthedocs.org/
Sponsored by NLnet
https://nlnet.nl/project/vulnerabilitydatabase/
for
https://www.aboutcode.org/
v40.2.0
Vulnerable and Fixing Package details for Advisory:
GHSA-h383-gmxw-35v2
Affected
Fixed by
pkg:maven/org.apache.logging.log4j/log4j-core@2.7
pkg:maven/org.apache.logging.log4j/log4j-core@2.8
pkg:maven/org.apache.logging.log4j/log4j-core@2.8.1
pkg:maven/org.apache.logging.log4j/log4j-core@2.8.2
pkg:maven/org.apache.logging.log4j/log4j-core@2.9.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.9.1
pkg:maven/org.apache.logging.log4j/log4j-core@2.10.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.11.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.11.1
pkg:maven/org.apache.logging.log4j/log4j-core@2.11.2
pkg:maven/org.apache.logging.log4j/log4j-core@2.12.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.12.1
pkg:maven/org.apache.logging.log4j/log4j-core@2.12.2
pkg:maven/org.apache.logging.log4j/log4j-core@2.12.3
pkg:maven/org.apache.logging.log4j/log4j-core@2.12.4
pkg:maven/org.apache.logging.log4j/log4j-core@2.13.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.13.1
pkg:maven/org.apache.logging.log4j/log4j-core@2.13.2
pkg:maven/org.apache.logging.log4j/log4j-core@2.13.3
pkg:maven/org.apache.logging.log4j/log4j-core@2.14.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1
pkg:maven/org.apache.logging.log4j/log4j-core@2.15.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.16.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.17.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1
pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2
pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.21.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.21.1
pkg:maven/org.apache.logging.log4j/log4j-core@2.22.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.22.1
pkg:maven/org.apache.logging.log4j/log4j-core@2.23.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1
pkg:maven/org.apache.logging.log4j/log4j-core@2.24.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.24.1
pkg:maven/org.apache.logging.log4j/log4j-core@2.24.2
pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3
pkg:maven/org.apache.logging.log4j/log4j-core@2.25.0
pkg:maven/org.apache.logging.log4j/log4j-core@2.25.1
pkg:maven/org.apache.logging.log4j/log4j-core@2.25.2
pkg:maven/org.apache.logging.log4j/log4j-core@2.25.3
pkg:maven/org.apache.logging.log4j/log4j-core@2.25.4
pkg:maven/org.apache.logging.log4j/log4j-core@3.0.0-beta1
pkg:maven/org.apache.logging.log4j/log4j-core@3.0.0-beta2
There are no reported fixed by versions.