Maven/com.splunk.logging:splunk-library-javalogging: critical
Remote code injection in Log4j
Action: Upgrade com.splunk.logging:splunk-library-javalogging to 1.6.2-0-0 (1.6.x) or 1.11.1 (1.11.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.0 | 1.11.1 | - |
| 0 | 1.6.2-0-0 | - |
Fixed versions
| 1.11.1 | 1.6.2-0-0 |
Sources
- osv: GHSA-94g7-hpv8-h9qm
- https://github.com/splunk/splunk-library-javalogging/security/advisories/GHSA-94g7-hpv8-h9qm
- https://github.com/splunk/splunk-library-javalogging
published · modified · JSON