{"action":"Upgrade org.apache.logging.log4j:log4j-core to 2.3.2 (2.3.x), 2.12.4 (2.12.x) or 2.17.1 (2.17.x) or later.","affected":[{"fixed":"2.3.2","introduced":"2.0-beta7"},{"fixed":"2.12.4","introduced":"2.4"},{"fixed":"2.17.1","introduced":"2.13.0"}],"component":"org.apache.logging.log4j:log4j-core","cve_ids":["CVE-2021-44832"],"ecosystem":"Maven","epss":0.97906,"exploited":false,"fixed_versions":["2.3.2","2.12.4","2.17.1"],"ghsa_id":"GHSA-8489-44mv-ggj8","id":"tcs_01M5N8KQF3J6G62772QW783PYZ","modified_at":"2026-06-09T10:45:14.253296471Z","published_at":"2022-01-04T16:14:20Z","references":["https://osv.dev/vulnerability/GHSA-8489-44mv-ggj8","https://nvd.nist.gov/vuln/detail/CVE-2021-44832","https://cert-portal.siemens.com/productcert/pdf/ssa-784507.pdf","https://github.com/apache/logging-log4j2","https://issues.apache.org/jira/browse/LOG4J2-3293","https://lists.apache.org/thread/s1o5vlo78ypqxnzn6p8zf6t9shtq5143","https://lists.debian.org/debian-lts-announce/2021/12/msg00036.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T57MPJUW3MA6QGWZRTMCHHMMPQNVKGFC","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T57MPJUW3MA6QGWZRTMCHHMMPQNVKGFC","https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd","https://security.netapp.com/advisory/ntap-20220104-0001","https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","http://www.openwall.com/lists/oss-security/2021/12/28/1"],"severity":{"label":"medium","score":6.6},"sources":[{"source":"osv","source_id":"GHSA-8489-44mv-ggj8","url":"https://osv.dev/vulnerability/GHSA-8489-44mv-ggj8"}],"summary":"Improper Input Validation and Injection in Apache Log4j2"}