{"action":"Upgrade com.splunk.logging:splunk-library-javalogging to 1.6.2-0-0 (1.6.x) or 1.11.1 (1.11.x) or later.","affected":[{"fixed":"1.11.1","introduced":"1.7.0"},{"fixed":"1.6.2-0-0","introduced":"0"}],"component":"com.splunk.logging:splunk-library-javalogging","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["1.11.1","1.6.2-0-0"],"ghsa_id":"GHSA-94g7-hpv8-h9qm","id":"tcs_01M5N8P32BBEX4E98PZNAE2ZF8","modified_at":"2025-08-07T14:10:22Z","published_at":"2021-12-14T21:46:35Z","references":["https://osv.dev/vulnerability/GHSA-94g7-hpv8-h9qm","https://github.com/splunk/splunk-library-javalogging/security/advisories/GHSA-94g7-hpv8-h9qm","https://github.com/splunk/splunk-library-javalogging"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-94g7-hpv8-h9qm","url":"https://osv.dev/vulnerability/GHSA-94g7-hpv8-h9qm"}],"summary":"Remote code injection in Log4j"}