-
Notifications
You must be signed in to change notification settings - Fork 35
Open
Description
The pom.xml file shows that java-sparkpost is at Log4J 2.17.0
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
<version>2.17.0</version>
</dependency>
Can this bumped to Log4J 2.17.1? The new version is the latest to address CVE-2021-44228
dan-tr
Metadata
Metadata
Assignees
Labels
No labels