Staging Environment:
Content and features may be unstable or change without notice.
VulnerableCode
.
io
Documentation
Advisory To-Dos
Pipeline Dashboard
API
About
VulnerableCode is a free and open database of software package vulnerabilities.
Live chat at
https://gitter.im/aboutcode-org/vulnerablecode
Source code and support at
https://github.com/nexB/vulnerablecode
Docs at
https://vulnerablecode.readthedocs.org/
Sponsored by NLnet
https://nlnet.nl/project/vulnerabilitydatabase/
for
https://www.aboutcode.org/
v40.2.0
Vulnerable and Fixing Package details for Advisory:
GHSA-vp98-w2p3-mv35
Affected
Fixed by
pkg:maven/org.apache.logging.log4j/log4j-core@1.0.4
pkg:maven/org.apache.logging.log4j/log4j-core@2.0-alpha1
pkg:maven/org.apache.logging.log4j/log4j-core@2.0-alpha2
pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta1
pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta2
pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta3
pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta4
pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta5
pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta6
pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta7
pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta8
pkg:maven/org.apache.logging.log4j/log4j-core@2.0-beta9
pkg:maven/org.apache.logging.log4j/log4j-core@2.0-rc1
pkg:maven/org.apache.logging.log4j/log4j-core@2.0-rc2
pkg:maven/org.apache.logging.log4j/log4j-core@2.0
pkg:maven/log4j/log4j@1.0.4
pkg:maven/log4j/log4j@1.1.3
pkg:maven/log4j/log4j@1.2.4
pkg:maven/log4j/log4j@1.2.5
pkg:maven/log4j/log4j@1.2.6
pkg:maven/log4j/log4j@1.2.7
pkg:maven/log4j/log4j@1.2.8
pkg:maven/log4j/log4j@1.2.9
pkg:maven/log4j/log4j@1.2.11
pkg:maven/log4j/log4j@1.2.12
pkg:maven/log4j/log4j@1.2.13
pkg:maven/log4j/log4j@1.2.14
pkg:maven/log4j/log4j@1.2.15
pkg:maven/log4j/log4j@1.2.16
pkg:maven/log4j/log4j@1.2.17
pkg:maven/log4j/log4j@2.0