Skip to content

Commit 9d3fdfb

Browse files
Update log4j version to 2.15.0
This is to safeguard users of java-spdx-library against a vulnerability (CVE-2021-44228) which could potentially allow remote code execution. Signed-off-by: Sebastian Crane <[email protected]>
1 parent b46eb77 commit 9d3fdfb

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -93,7 +93,7 @@
9393
<dependency>
9494
<groupId>org.apache.logging.log4j</groupId>
9595
<artifactId>log4j-slf4j-impl</artifactId>
96-
<version>2.10.0</version>
96+
<version>2.15.0</version>
9797
</dependency>
9898
<dependency>
9999
<groupId>org.apache.commons</groupId>

0 commit comments

Comments
 (0)