{"action":"Upgrade org.ops4j.pax.logging:pax-logging-log4j2 to 1.11.10 (1.x) or 2.0.11 (2.x) or later.","affected":[{"fixed":"2.0.11","introduced":"2.0.0"},{"fixed":"1.11.10","introduced":"0"}],"component":"org.ops4j.pax.logging:pax-logging-log4j2","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["2.0.11","1.11.10"],"ghsa_id":"GHSA-xxfh-x98p-j8fr","id":"tcs_01M5N9K6AEP9EG0VTCCNSV60YA","modified_at":"2024-12-02T05:49:25.675395Z","published_at":"2021-12-10T20:15:37Z","references":["https://osv.dev/vulnerability/GHSA-xxfh-x98p-j8fr","https://github.com/ops4j/org.ops4j.pax.logging/security/advisories/GHSA-xxfh-x98p-j8fr","https://github.com/advisories/GHSA-jfh8-c2jp-5v3q","https://github.com/ops4j/org.ops4j.pax.logging"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-xxfh-x98p-j8fr","url":"https://osv.dev/vulnerability/GHSA-xxfh-x98p-j8fr"}],"summary":"Remote code injection in Log4j (through pax-logging-log4j2)"}