{"action":"Upgrade log4j:log4j to 2.0 or later.","affected":[{"fixed":"2.0","introduced":"1.0.4"}],"component":"log4j:log4j","cve_ids":["CVE-2023-26464"],"ecosystem":"Maven","epss":0.01905,"exploited":false,"fixed_versions":["2.0"],"ghsa_id":"GHSA-vp98-w2p3-mv35","id":"tcs_01M5N9EFFKJ4KEFGASZADQ9D6S","modified_at":"2025-09-02T22:25:25Z","published_at":"2023-03-10T15:30:43Z","references":["https://osv.dev/vulnerability/GHSA-vp98-w2p3-mv35","https://nvd.nist.gov/vuln/detail/CVE-2023-26464","https://github.com/apache/logging-log4j2","https://lists.apache.org/thread/wkx6grrcjkh86crr49p4blc1v1nflj3t","https://security.netapp.com/advisory/ntap-20230505-0008"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-vp98-w2p3-mv35#Maven/log4j:log4j","url":"https://osv.dev/vulnerability/GHSA-vp98-w2p3-mv35"}],"summary":"Apache Log4j 1.x (EOL) allows Denial of Service (DoS)"}