Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.logging.log4j/log4j@2.3.2
purl pkg:maven/org.apache.logging.log4j/log4j@2.3.2
Next non-vulnerable version 2.12.3
Latest non-vulnerable version 2.17.0
Risk score 10.0
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-fxph-q3j8-mv87
Aliases:
CVE-2017-5645
Deserialization of Untrusted Data in Log4j In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP …
2.8.2
Vulnerable
2.8.2
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-vwqq-5vrc-xw9h
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender prior to version 2.13.2. This could allow an … CVE-2020-9488
CVE-2021-44228
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') JNDI features used in configuration, log messages, … GHSA-jfh8-c2jp-5v3q