Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.9
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.10.9
Next non-vulnerable version 1.11.13
Latest non-vulnerable version 2.0.14
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-xxfh-x98p-j8fr
Aliases:
GMS-2021-75
Remote code injection in Log4j (through pax-logging-log4j2) ### Impact Remote Code Execution. ### Patches Users of pax-logging 1.11.9 should update …
1.11.10
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-p6xc-xr62-6r2g
Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not … CVE-2021-45105
GHSA-8489-44mv-ggj8
Improper Input Validation and Injection in Apache Log4j2 Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and … CVE-2021-44832