Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.logging.log4j/log4j-core@2.7.0
purl pkg:maven/org.apache.logging.log4j/log4j-core@2.7.0
Tags Ghost
Next non-vulnerable version 2.25.4
Latest non-vulnerable version 2.25.4
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2026-34479
Aliases:
GHSA-h383-gmxw-35v2
Apache Log4j 1 to Log4j 2 bridge: silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters …
2.25.4
Not vulnerable
This package is not known to fix any advisories.