Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.logging.log4j:log4j-api

1 known vulnerability (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1 · 1 medium
Dependents
227
Registry
Maven Central

Advisories 1

  • CVE-2026-49844Medium 6.3

    Apache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson()

    Affected: from 2.13.1, fixed in 2.25.5; from 2.26.0, fixed in 2.26.1; from 3.0.0-alpha1, through 3.0.0-beta2; from 2.13.1, fixed in 2.25.5; from 2.26.0, fixed in 2.26.1.