Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.logging.log4j/log4j@2.0-alpha1
purl pkg:maven/org.apache.logging.log4j/log4j@2.0-alpha1
Next non-vulnerable version 2.12.3
Latest non-vulnerable version 2.17.0
Risk score 1.6
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-vwqq-5vrc-xw9h
Aliases:
CVE-2020-9488
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender prior to version 2.13.2. This could allow an …
2.3.2
Vulnerable
CVE-2022-23307

Deserialization of Untrusted Data CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw …
2.0
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2019-17571
Deserialization of Untrusted Data Included in Log4j is a `SocketServer` class that is vulnerable to deserialization of untrusted data which …