Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-vp98-w2p3-mv35
  • Maven/log4j:log4j
  • Maven/org.apache.logging.log4j:log4j-core
 Apache Log4j 1.x (EOL) allows Denial of Service (DoS) 10 Mar 2023
  • Fix available
  • Severity - 7.5 (High)
GHSA-w9p3-5cr8-m3jj
  • Maven/log4j:log4j
  • Maven/org.zenframework.z8.dependencies.commons:log4j-1.2.17
 Deserialization of Untrusted Data in Log4j 1.x 21 Jan 2022
  • No fix available
  • Severity - 8.8 (High)
GHSA-65fg-84f6-3jq3
  • Maven/log4j:log4j
  • Maven/org.zenframework.z8.dependencies.commons:log4j-1.2.17
 SQL Injection in Log4j 1.2.x 21 Jan 2022
  • No fix available
  • Severity - 9.8 (Critical)
GHSA-f7vh-qwp3-x37m
  • Maven/log4j:log4j
  • Maven/org.zenframework.z8.dependencies.commons:log4j-1.2.17
 Deserialization of Untrusted Data in Apache Log4j 19 Jan 2022
  • No fix available
  • Severity - 9.8 (Critical)
GHSA-fp5r-v3w9-4333
  • Maven/log4j:log4j
  • Maven/org.zenframework.z8.dependencies.commons:log4j-1.2.17
 JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data 14 Dec 2021
  • No fix available
  • Severity - 7.5 (High)
GHSA-2qrg-x229-3v8q
  • Maven/log4j:log4j
  • Maven/org.zenframework.z8.dependencies.commons:log4j-1.2.17
 Deserialization of Untrusted Data in Log4j 06 Jan 2020
  • No fix available
  • Severity - 9.8 (Critical)