org.ops4j.pax.logging:pax-logging-log4j2

Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.

At a glance

Advisory	Affected versions	Latest version
GHSA-7rjr-3q55-vv33 Incomplete fix for Apache Log4j vulnerability	`1.8.0 – < 1.9.2 ; 1.10.0 – < 1.10.8 ; 1.11.0 – < 1.11.11 ; …`	Not affected
GHSA-8489-44mv-ggj8 Improper Input Validation and Injection in Apache Log4j2	`1.8.0 – < 1.9.2 ; 1.10.0 – < 1.10.9 ; 1.11.0 – < 1.11.13 ; …`	Not affected
GHSA-jfh8-c2jp-5v3q Remote code injection in Log4j	`1.8.0 – < 1.9.2 ; 1.10.0 – < 1.10.8 ; 1.11.0 – < 1.11.10 ; …`	Not affected
GHSA-p6xc-xr62-6r2g Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion	`1.8.0 – < 1.9.2 ; 1.10.0 – < 1.10.9 ; 1.11.0 – < 1.11.12 ; …`	Not affected
GHSA-xxfh-x98p-j8fr Remote code injection in Log4j (through pax-logging-log4j2)	`2.0.0 – < 2.0.11 ; < 1.11.10`	Affected

Source	Licence