Maven/org.ops4j.pax.logging:pax-logging-log4j2: critical
Remote code injection in Log4j (through pax-logging-log4j2)
Action: Upgrade org.ops4j.pax.logging:pax-logging-log4j2 to 1.11.10 (1.x) or 2.0.11 (2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.11 | - |
| 0 | 1.11.10 | - |
Fixed versions
| 2.0.11 | 1.11.10 |
Sources
- osv: GHSA-xxfh-x98p-j8fr
- https://github.com/ops4j/org.ops4j.pax.logging/security/advisories/GHSA-xxfh-x98p-j8fr
- https://github.com/advisories/GHSA-jfh8-c2jp-5v3q
- https://github.com/ops4j/org.ops4j.pax.logging
published · modified · JSON