Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.6
purl pkg:maven/org.ops4j.pax.logging/pax-logging-log4j2@1.11.6
Next non-vulnerable version 1.11.13
Latest non-vulnerable version 2.0.14
Risk score 10.0
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-xxfh-x98p-j8fr
Aliases:
GMS-2021-75
Remote code injection in Log4j (through pax-logging-log4j2) ### Impact Remote Code Execution. ### Patches Users of pax-logging 1.11.9 should update …
1.11.10
Vulnerable
GHSA-jfh8-c2jp-5v3q
Aliases:
CVE-2021-44228
Remote code injection in Log4j # Summary Log4j versions prior to 2.16.0 are subject to a remote code execution vulnerability …
1.11.10
Vulnerable
GHSA-p6xc-xr62-6r2g
Aliases:
CVE-2021-45105
Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not …
1.11.12
Vulnerable
GHSA-8489-44mv-ggj8
Aliases:
CVE-2021-44832
Improper Input Validation and Injection in Apache Log4j2 Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and …
1.11.13
Not vulnerable
GHSA-7rjr-3q55-vv33
Aliases:
CVE-2021-45046
Incomplete fix for Apache Log4j vulnerability # Impact The fix to address [CVE-2021-44228](https://nvd.nist.gov/vuln/detail/CVE-2021-44228) in Apache Log4j 2.15.0 was incomplete in …
1.11.11
Vulnerable
1.11.11
Vulnerable
This package is not known to fix any advisories.