`org.apache.logging.log4j:log4j-core`

Ecosystem:
maven

Package URL:
pkg:maven/org.apache.logging.log4j:log4j-core

Total PRs:
778 Dependabot PRs

Latest PR:
8 days ago

Unique Repositories:
335 repositories

Unique Repos (30 days):
13 repositories

Security Advisories

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

GHSA-vwqq-5vrc-xw9h CVE-2020-9488 LOW published over 5 years ago • updated 3 days ago

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender prior to version 2.13.2. This could allow an SMTPS connection t...

Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion

GHSA-p6xc-xr62-6r2g CVE-2021-45105 HIGH published almost 4 years ago • updated 3 days ago

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not protect from uncontrolled recursion from self-referential lookups. This...

View all 6 advisories

Recent PRs

RSS Feed

Bump the dev-dependencies group with 5 updates

wolpert/gamelib #69

2.25.1 → 2.25.2 Patch PR

Merged 2 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

tinylog-org/tinylog #834

2.25.1 → 2.25.2 Patch PR

Merged 2 months ago

build(deps): bump the gradle-production-dependencies group across 2 directories with 9 updates

dastagiridev-tech/opentelemetry-demo #19

2.25.1 → 2.25.2 Patch PR

Open 2 months ago 1 comment

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

secure-software-engineering/PathExpression #73

2.25.1 → 2.25.2 Patch PR

Open 2 months ago

Bump the gradle group with 8 updates

smithy-lang/smithy-java #880

2.25.1 → 2.25.2 Patch PR

Open 2 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

DavideD/hibernate-reactive #105

2.25.1 → 2.25.2 Patch PR

Open 2 months ago

Bump the build-dependencies group across 1 directory with 48 updates

kchobantonov/hibernate-search #256

2.24.3 → 2.25.2 Minor PR

Open 3 months ago 1 comment

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

Navio1430/LibreLoginProd #47

2.25.1 → 2.25.2 Patch PR

Open 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2 in /JeezyCore

MineralStudios/mineralCore #68

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Bump the build-dependencies group with 8 updates

hibernate/hibernate-validator #1713

2.25.1 → 2.25.2 Patch PR

Open 3 months ago

chore(deps): bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

ravirajmcet/questdb #150

2.25.1 → 2.25.2 Patch PR

Open 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

reactiverse/reactiverse-contextual-logging #168

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

reactiverse/vertx-maven-plugin #693

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Build(deps): Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

OpenFeign/querydsl #1377

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago 1 comment

Maven(deps): Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

vitruv-tools/Vitruv-DSLs #308

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago 1 comment

Bump org.apache.logging.log4j:log4j-core from 2.25.0 to 2.25.2

forcedotcom/dataloader #1640

2.25.0 → 2.25.2 Patch PR

Open 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.2

njacksonnie/SeleniumTestFX #36

2.24.3 → 2.25.2 Minor PR

Open 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2 in /cinema2k

reinhapa/TweetWallFX-Voxxed-Days #211

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

ViaVersion/ViaProxy #479

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Bump the dev-dependencies group in /symja_android_library with 4 updates

axkr/symja_android_library #1223

2.25.1 → 2.25.2 Patch PR

Open 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

jnidzwetzki/bboxdb #613

2.25.1 → 2.25.2 Patch PR

Open 3 months ago

Chore(deps): Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

informatici/openhospital-core #1533

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

xeraa/integration-test-demo #233

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.2

vy/log4j2-redis-appender #227

2.24.3 → 2.25.2 Minor PR

Open 3 months ago

build(deps): bump the gradle-production-dependencies group across 2 directories with 6 updates

AcheampongStephen/OpenTelemetry #13

2.25.1 → 2.25.2 Patch PR

Closed 3 months ago 1 comment

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

lars-sh/budget-aggregator #5

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

chore(deps): bump org.apache.logging.log4j:log4j-core from 2.14.1 to 2.17.1

bsomozadeltasac/demo-clase-5 #2

2.14.1 → 2.17.1 Minor PR

Open 3 months ago

chore(deps): bump org.apache.logging.log4j:log4j-core from 2.14.1 to 2.17.1

juliopa29/demo-clase-55 #1

2.14.1 → 2.17.1 Minor PR

Open 3 months ago

chore(deps): bump org.apache.logging.log4j:log4j-core from 2.14.1 to 2.17.1

FernandoLCM/demo-clase-5 #1

2.14.1 → 2.17.1 Minor PR

Open 3 months ago

chore(deps): bump org.apache.logging.log4j:log4j-core from 2.14.1 to 2.17.1

ChrisADR/demo-clase-5 #1

2.14.1 → 2.17.1 Minor PR

Open 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2 in the logging group

hibernate/hibernate-models #155

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

hibernate/hibernate-reactive #2529

2.25.1 → 2.25.2 Patch PR

Open 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

hibernate/hibernate-reactive #2524

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.2

ozangunalp/kafka-native #336

2.24.3 → 2.25.2 Minor PR

Open 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

mirolm/LoginSecurity-2 #124

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

sullis/microbenchmarks-java #183

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

sullis/java-enum-playground #57

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Bump the build-dependencies group with 17 updates

hibernate/hibernate-search #4820

2.25.1 → 2.25.2 Patch PR

Open 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.23.+ to 2.25.2

ZeyDie/Vivox-JDK #25

2.23.+ → 2.25.2 Minor PR

Open 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

flyingsaucerproject/flyingsaucer #574

2.25.1 → 2.25.2 Patch PR

Open 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

LittleProxy/LittleProxy #622

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Bump the gradle-all group across 1 directory with 25 updates

ambarishvrao/opensearch-migrations-public #5

2.25.1 → 2.25.2 Patch PR

Closed 3 months ago 1 comment

Bump org.apache.logging.log4j:log4j-core from 2.14.0 to 2.25.2

ishita2104/dep-scanner #7

2.14.0 → 2.25.2 Minor PR

Open 3 months ago

Maven(deps): Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

vitruv-tools/Vitruv-Change #316

2.25.1 → 2.25.2 Patch PR

Open 3 months ago 1 comment

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

danygold/dependencies #263

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

teruteru128/Dynmap-Multiserver #182

2.25.1 → 2.25.2 Patch PR

Open 3 months ago

Bump the dependencies group across 1 directory with 10 updates

lucko/bytebin #60

2.25.1 → 2.25.2 Patch PR

Open 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.2

logzio/logzio-log4j2-appender #101

2.24.3 → 2.25.2 Minor PR

Open 3 months ago

Bump org.apache.logging.log4j:log4j-core from 2.17.1 to 2.25.2

fiteroxygen/fineract-template #123

2.17.1 → 2.25.2 Minor PR

Open 3 months ago

chore(deps): bump the maven-minor group with 10 updates

l3s-learnweb/learnweb #575

2.25.1 → 2.25.2 Patch PR

Merged 3 months ago

Package Details

Name:	`org.apache.logging.log4j:log4j-core`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.apache.logging.log4j:log4j-core`
JSON API:	View JSON

Security Advisories

6

Active advisories

CRITICAL 2

HIGH 2

MODERATE 1

LOW 1

View All maven Advisories

Package Information

Description:

The Apache Log4j Implementation

Repository:	https://github.com/apache/logging-log4j2
Homepage:	https://logging.apache.org/log4j/3.x/
Latest Release:	`2.24.3` 12 months ago
Dependent Repos:	82,953
Dependent Packages:	8,839
Ranking:	Top 0.0126% by dependent repos Top 0.0068% by dependent pkgs

PR Status

Open 391 (50.3%)

Merged 214 (27.5%)

Closed 167 (21.5%)

PR Types

Minor 432 (55.5%)

Major 1 (0.1%)

Patch 320 (41.1%)

org.apache.logging.log4j:log4j-core

Security Advisories

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

Incomplete fix for Apache Log4j vulnerability

Apache Log4j 1.x (EOL) allows Denial of Service (DoS)

Remote code injection in Log4j

Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion

Recent PRs

Package Details

Security Advisories

6

Package Information

PR Status

PR Types

`org.apache.logging.log4j:log4j-core`