maven

org.ops4j.pax.logging:pax-logging-log4j2

5 Total advisories

5 Vulnerabilities

0 Malware

Dependency scanning

Check whether org.ops4j.pax.logging:pax-logging-log4j2 is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

MEDIUM 6.6

Maven

CVE-2021-44832

Improper Input Validation and Injection in Apache Log4j2

Jan 4, 2022

HIGH 8.6

Maven

CVE-2021-45105

Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion

Dec 18, 2021

CRITICAL 9.0

Maven KEV

CVE-2021-45046

Incomplete fix for Apache Log4j vulnerability

Dec 14, 2021

CRITICAL 10.0

Maven KEV

CVE-2021-44228

Remote code injection in Log4j

Dec 10, 2021

UNKNOWN

Maven

GHSA-xxfh-x98p-j8fr

Remote code injection in Log4j (through pax-logging-log4j2)

Dec 10, 2021

Browse more Maven advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes