streams for Apache Kafka/log4j
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Improper validation of certificate with host mismatch in Apache Log4j SMTP appender | org.apache.logging.log4j:log4j-coreorg.apache.logging.log4j:log4j | MavenRed Hat | Low | Fix reported | |
| Apache Log4j 1.x (EOL) allows Denial of Service (DoS) | log4j:log4jorg.apache.logging.log4j:log4j-core | MavenRed Hat | High | Fix reported | |
| JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data | log4j:log4jorg.zenframework.z8.dependencies.commons:log4j-1.2.17 | MavenRed Hat | High | No fix reported |