Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.11
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.11
Next non-vulnerable version 1.11.13
Latest non-vulnerable version 2.0.14
Risk score 10.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-p6xc-xr62-6r2g
Aliases:
CVE-2021-45105
Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not …
1.11.12
Vulnerable
GHSA-8489-44mv-ggj8
Aliases:
CVE-2021-44832
Improper Input Validation and Injection in Apache Log4j2 Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and …
1.11.13
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-7rjr-3q55-vv33
Incomplete fix for Apache Log4j vulnerability # Impact The fix to address [CVE-2021-44228](https://nvd.nist.gov/vuln/detail/CVE-2021-44228) in Apache Log4j 2.15.0 was incomplete in … CVE-2021-45046