Skip to content

Update log4j2.version - #19

Open
dev-mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/log4j2.version
Open

Update log4j2.version#19
dev-mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/log4j2.version

Conversation

@dev-mend-for-github-com

@dev-mend-for-github-com dev-mend-for-github-com Bot commented Apr 26, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Type Update Change
org.apache.logging.log4j:log4j-core (source) compile minor 2.21.12.25.4
org.apache.logging.log4j:log4j-api (source) compile minor 2.21.12.25.5

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability Reachability
Medium Medium 5.8 CVE-2026-34478
Medium Medium 5.8 CVE-2026-34480
Medium Medium 4.0 CVE-2025-68161

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability Reachability
Medium Medium 5.8 CVE-2026-49844

  • If you want to rebase/retry this PR, check this box

@dev-mend-for-github-com dev-mend-for-github-com Bot added the security fix Security fix generated by Mend label Apr 26, 2026
@dev-mend-for-github-com dev-mend-for-github-com Bot changed the title Update dependency org.apache.logging.log4j:log4j-core to v2.25.4 Update log4j2.version Jun 22, 2026
@dev-mend-for-github-com dev-mend-for-github-com Bot changed the title Update log4j2.version Update dependency org.apache.logging.log4j:log4j-core to v2.25.4 Jul 13, 2026
@dev-mend-for-github-com
dev-mend-for-github-com Bot force-pushed the whitesource-remediate/log4j2.version branch from 3983c71 to 8d81dc2 Compare September 9, 2026 12:46
@dev-mend-for-github-com dev-mend-for-github-com Bot changed the title Update dependency org.apache.logging.log4j:log4j-core to v2.25.4 Update log4j2.version Sep 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants