streams for Apache Kafka 2/log4j-core
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Apache Log4j Core: `verifyHostName` attribute silently ignored in TLS configuration | org.apache.logging.log4j:log4j-coreRed Hat AI Inference Server/redhat-user-workloads/rhaiis-cuda-ubi9-3-2-2 | MavenRed Hat | Medium | Fix reported | |
| Apache Log4j Core: log injection in `Rfc5424Layout` due to silent configuration incompatibility | org.apache.logging.log4j:log4j-coreRed Hat AI Inference Server/redhat-user-workloads/rhaiis-cuda-ubi9-3-3 | MavenRed Hat | Medium | Fix reported | |
| Apache Log4j does not verify the TLS hostname in its Socket Appender | org.apache.logging.log4j:log4j-coreLogging Subsystem for Red Hat OpenShift/log4j-core | MavenRed Hat | Medium | Fix reported |