Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.logging.log4j:log4j-1.2-api

1 known vulnerability (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1 · 1 medium
Registry
Maven Central

Advisories 1

  • CVE-2026-34479Medium 6.9

    Apache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters

    Affected: from 2.7, fixed in 2.25.4; from 3.0.0-alpha1, through 3.0.0-beta2.