Skip to content

Update dependency org.apache.logging.log4j:log4j-core to v2.17.1#1

Open
mend-for-github-com[bot] wants to merge 1 commit intodevfrom
whitesource-remediate/org.apache.logging.log4j-log4j-core-2.x
Open

Update dependency org.apache.logging.log4j:log4j-core to v2.17.1#1
mend-for-github-com[bot] wants to merge 1 commit intodevfrom
whitesource-remediate/org.apache.logging.log4j-log4j-core-2.x

Conversation

@mend-for-github-com
Copy link
Copy Markdown

@mend-for-github-com mend-for-github-com bot commented Feb 4, 2022

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
org.apache.logging.log4j:log4j-core (source) 2.17.0 -> 2.17.1 age adoption passing confidence

By merging this PR, the issue #15 will be automatically resolved and closed:

Severity CVSS Score CVE
Medium Medium 6.6 CVE-2021-44832

  • If you want to rebase/retry this PR, click this checkbox.

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Feb 4, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/org.apache.logging.log4j-log4j-core-2.x branch from 70db8f4 to 9948f54 Compare March 23, 2022 09:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by WhiteSource

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants