Maven / PACKAGE INTELLIGENCE
org.apache.logging.log4j:log4j-core
Follow this packageGet the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.
Check the version you ship.
Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.
Advisories & recorded fixes
medium6.9
Ecosystem versions
From 2.7 before 2.25.4
Fixed in 2.25.4
43 explicitly affected versions
2.10.0, 2.11.0, 2.11.1, 2.11.2, 2.12.0, 2.12.1, 2.12.2, 2.12.3, 2.12.4, 2.13.0, 2.13.1, 2.13.2, 2.13.3, 2.14.0, 2.14.1, 2.15.0, 2.16.0, 2.17.0, 2.17.1, 2.17.2, 2.18.0, 2.19.0, 2.20.0, 2.21.0, 2.21.1, 2.22.0, 2.22.1, 2.23.0, 2.23.1, 2.24.0, 2.24.1, 2.24.2, 2.24.3, 2.25.0, 2.25.1, 2.25.2, 2.25.3, 2.7, 2.8, 2.8.1, 2.8.2, 2.9.0, 2.9.1
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "2.7"
},
{
"fixed": "2.25.4"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.10.0",
"2.11.0",
"2.11.1",
"2.11.2",
"2.12.0",
"2.12.1",
"2.12.2",
"2.12.3",
"2.12.4",
"2.13.0",
"2.13.1",
"2.13.2",
"2.13.3",
"2.14.0",
"2.14.1",
"2.15.0",
"2.16.0",
"2.17.0",
"2.17.1",
"2.17.2",
"2.18.0",
"2.19.0",
"2.20.0",
"2.21.0",
"2.21.1",
"2.22.0",
"2.22.1",
"2.23.0",
"2.23.1",
"2.24.0",
"2.24.1",
"2.24.2",
"2.24.3",
"2.25.0",
"2.25.1",
"2.25.2",
"2.25.3",
"2.7",
"2.8",
"2.8.1",
"2.8.2",
"2.9.0",
"2.9.1"
]
}Ecosystem versions
From 3.0.0-beta1 through 3.0.0-beta2 (inclusive)
No fix recorded for this interval.
2 explicitly affected versions
3.0.0-beta1, 3.0.0-beta2
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "3.0.0-beta1"
},
{
"last_affected": "3.0.0-beta2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.0.0-beta1",
"3.0.0-beta2"
]
}