Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.apache.logging.log4j:log4j-core

Ecosystem:
maven
Package URL:
pkg:maven/org.apache.logging.log4j:log4j-core
Total PRs:
778 Dependabot PRs
Latest PR:
8 days ago
Unique Repositories:
335 repositories
Unique Repos (30 days):
13 repositories
Security Advisories
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender
GHSA-vwqq-5vrc-xw9h CVE-2020-9488 LOW published over 5 years ago • updated 3 days ago
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender prior to version 2.13.2. This could allow an SMTPS connection t...
Incomplete fix for Apache Log4j vulnerability
GHSA-7rjr-3q55-vv33 CVE-2021-45046 CRITICAL published almost 4 years ago • updated 7 days ago
# Impact The fix to address [CVE-2021-44228](https://nvd.nist.gov/vuln/detail/CVE-2021-44228) in Apache Log4j 2.15.0 was incomplete in certain non...
Apache Log4j 1.x (EOL) allows Denial of Service (DoS)
GHSA-vp98-w2p3-mv35 CVE-2023-26464 HIGH published over 2 years ago • updated 3 days ago
** UNSUPPORTED WHEN ASSIGNED ** When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages ...
Remote code injection in Log4j
GHSA-jfh8-c2jp-5v3q CVE-2021-44228 CRITICAL published almost 4 years ago • updated 3 days ago
# Summary Log4j versions prior to 2.16.0 are subject to a remote code execution vulnerability via the ldap JNDI parser. As per [Apache's Log4j sec...
Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion
GHSA-p6xc-xr62-6r2g CVE-2021-45105 HIGH published almost 4 years ago • updated 3 days ago
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not protect from uncontrolled recursion from self-referential lookups. This...
View all 6 advisories
Recent PRs
RSS Feed
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

yuzawa-san/onnxruntime-java #324

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
yuzawa-san
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

Abdelrhman-Ellithy/Ellithium #224

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
Abdelrhman-Ellithy
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

micrometer-metrics/micrometer #6752

2.25.1 → 2.25.2 Patch PR
Merged 3 months ago
micrometer-metrics
Bump org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.2

VerkhovtsovPavel/Sandbox #55

2.24.3 → 2.25.2 Minor PR
Open 3 months ago
VerkhovtsovPavel
build(deps): bump the gradle-production-dependencies group across 2 directories with 6 updates

open-telemetry/opentelemetry-demo #2579

2.25.1 → 2.25.2 Patch PR
Merged 3 months ago
open-telemetry
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

megbailey/ButterDB #67

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
megbailey
Bump org.apache.logging.log4j:log4j-core from 2.23.1 to 2.25.2

Borewit/lizzy #169

2.23.1 → 2.25.2 Minor PR
Open 3 months ago
Borewit
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

felleslosninger/eid-log-event #413

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
felleslosninger
deps: bump org.apache.logging.log4j:log4j-core from 2.19.0 to 2.25.2

Finally-A-Decent/Trashcan #38

2.19.0 → 2.25.2 Minor PR
Open 3 months ago
Finally-A-Decent
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

rjaros87/JWTTestKit #48

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
rjaros87
chore(deps-dev): Bump org.apache.logging.log4j:log4j-core from 2.25.0 to 2.25.2

sventorben/kommons #30

2.25.0 → 2.25.2 Patch PR
Merged 3 months ago
sventorben
Maven(deps): Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

vitruv-tools/Vitruv #798

2.25.1 → 2.25.2 Patch PR
Merged 3 months ago
vitruv-tools
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

MineralStudios/Mineral-Bot #128

2.25.1 → 2.25.2 Patch PR
Merged 3 months ago
MineralStudios
Bump org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.2

NASA-PDS/pds3-product-tools #89

2.24.3 → 2.25.2 Minor PR
Open 3 months ago 1 comment
NASA-PDS
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

SingingBush/jogl-examples #80

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
SingingBush
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2 in /_simple

harawata/mybatis-issues #526

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
harawata
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2 in /_spring

harawata/mybatis-issues #525

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
harawata
Bump org.apache.logging.log4j:log4j-core from 2.12.4 to 2.25.2

eddyv73/demo-java #23

2.12.4 → 2.25.2 Minor PR
Open 3 months ago
eddyv73
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

conorheffron/cron-job-sample #89

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
conorheffron
Bump the test group with 2 updates

hibernate/hibernate-test-case-templates #578

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
hibernate
chore(deps): Bump the all group across 1 directory with 36 updates

risingwavelabs/risingwave #23279

2.25.1 → 2.25.2 Patch PR
Closed 3 months ago 1 comment
risingwavelabs
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

apache/logging-log4j-jmx-gui #51

2.25.1 → 2.25.2 Patch PR
Merged 3 months ago
apache
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

deadjdona/youtube-comment-suite-up #62

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
deadjdona
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

pkiraly/qa-catalogue #684

2.25.1 → 2.25.2 Patch PR
Merged 3 months ago
pkiraly
Bump org.apache.logging.log4j:log4j-core from 2.15.0 to 2.17.1

hazelcast/hazelcast-remote-controller #77

2.15.0 → 2.17.1 Minor PR
Open 3 months ago
hazelcast
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

CloneWith/opsu #161

2.25.1 → 2.25.2 Patch PR
Merged 3 months ago
CloneWith
Bump the maven-patch-group group across 1 directory with 15 updates

rvesse/jena #186

2.25.0 → 2.25.2 Patch PR
Closed 3 months ago 1 comment
rvesse
Bump org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.2

mpeterka/spring-ws-mtom #58

2.24.3 → 2.25.2 Minor PR
Open 3 months ago
mpeterka
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

leonchen83/redis-replicator #92

2.25.1 → 2.25.2 Patch PR
Open 3 months ago 4 comments
leonchen83
chore(deps-dev): bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

sitepark/ies-graphql-extension-api #158

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
sitepark
Bump the log4j group with 4 updates

VEuPathDB/vdi-service #487

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
VEuPathDB
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

smeup/jariko #787

2.25.1 → 2.25.2 Patch PR
Merged 3 months ago
smeup
build(deps): bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2 in /JavaIM

JavaIM/JavaIM #284

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
JavaIM
build(deps): bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

JavaIM/JavaIM #283

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
JavaIM
Bump org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.2

2dgirlismywaifu/Legacy_Key_Generator #24

2.24.3 → 2.25.2 Minor PR
Open 3 months ago
2dgirlismywaifu
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

dkorobtsov/plinter #135

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
dkorobtsov
Bump org.apache.logging.log4j:log4j-core from 2.17.2 to 2.25.2

GoogleCloudPlatform/auto-data-tokenize #154

2.17.2 → 2.25.2 Minor PR
Open 3 months ago
GoogleCloudPlatform
Bump the production-dependencies group across 1 directory with 23 updates

nitrite/nitrite-java #1160

2.25.0 → 2.25.2 Patch PR
Open 3 months ago 2 comments
nitrite
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

ashr123/red-alert-listener #362

2.25.1 → 2.25.2 Patch PR
Merged 3 months ago
ashr123
Bump org.apache.logging.log4j:log4j-core from 2.25.0 to 2.25.2

cip4/Bambi #127

2.25.0 → 2.25.2 Patch PR
Merged 3 months ago
cip4
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

lars-sh/election-results #301

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
lars-sh
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

eclipse-ee4j/glassfish-grizzly-ahc #110

2.25.1 → 2.25.2 Patch PR
Merged 3 months ago
eclipse-ee4j
Bump org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.2

Venslor/VenomClient-Celestial-Fork #22

2.24.3 → 2.25.2 Minor PR
Open 3 months ago
Venslor
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

nbauma109/jd-util #95

2.25.1 → 2.25.2 Patch PR
Merged 3 months ago 1 comment
nbauma109
Bump org.apache.logging.log4j:log4j-core from 2.25.1 to 2.25.2

AdminOfThis/Util #444

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
AdminOfThis
Bump the log4j group with 3 updates

VEuPathDB/lib-jaxrs-container-core #83

2.25.1 → 2.25.2 Patch PR
Open 3 months ago
VEuPathDB
chore(deps): bump org.apache.logging.log4j:log4j-core from 2.21.1 to 2.25.2 in /builder

smals-jy/evs #817

2.21.1 → 2.25.2 Minor PR
Open 3 months ago 2 comments
smals-jy
chore(deps): bump org.apache.logging.log4j:log4j-core from 2.21.1 to 2.25.2 in /core

smals-jy/evs #811

2.21.1 → 2.25.2 Minor PR
Open 3 months ago 1 comment
smals-jy
chore(deps): bump org.apache.logging.log4j:log4j-core from 2.21.1 to 2.25.2 in /ehconnector

smals-jy/evs #810

2.21.1 → 2.25.2 Minor PR
Closed 3 months ago 1 comment
smals-jy
Bump the dev-dependencies group across 1 directory with 21 updates

NASA-PDS/registry-legacy-solr #216

2.24.0 → 2.25.2 Minor PR
Open 3 months ago
NASA-PDS
Package Details
Name: org.apache.logging.log4j:log4j-core
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.apache.logging.log4j:log4j-core
JSON API: View JSON
Security Advisories

6

Active advisories
CRITICAL 2
HIGH 2
MODERATE 1
LOW 1
View All maven Advisories
Package Information
Description:

The Apache Log4j Implementation

Repository: https://github.com/apache/logging-log4j2
Homepage: https://logging.apache.org/log4j/3.x/
Latest Release: 2.24.3
12 months ago
Dependent Repos: 82,953
Dependent Packages: 8,839
Ranking: Top 0.0126% by dependent repos Top 0.0068% by dependent pkgs
PR Status
Open 391 (50.3%)
Merged 214 (27.5%)
Closed 167 (21.5%)
PR Types
Minor 432 (55.5%)
Major 1 (0.1%)
Patch 320 (41.1%)