Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.logging.log4j/log4j@2.15.0
purl pkg:maven/org.apache.logging.log4j/log4j@2.15.0
Next non-vulnerable version 2.17.0
Latest non-vulnerable version 2.17.0
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2021-45046

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') It was found that the fix to …
2.12.3
Not vulnerable
2.3.1
Vulnerable
2.17.0
Not vulnerable
2.12.3
Not vulnerable
2.3.1
Vulnerable
2.17.0
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2021-44228
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') JNDI features used in configuration, log messages, … GHSA-jfh8-c2jp-5v3q