problem: vulnerability in log4j < v2.15 (CVE-2021-44228)
rel: https://www.lunasec.io/docs/blog/log4j-zero-day/
This commit is contained in:
@@ -3,7 +3,7 @@ detekt = "1.18.1"
|
||||
etherjar = "0.11.1"
|
||||
groovy = "2.5.14"
|
||||
protoc = "3.9.0"
|
||||
slf4j = "1.7.25"
|
||||
slf4j = "1.7.32"
|
||||
jackson = "2.11.0"
|
||||
grpc = "1.38.0"
|
||||
reactive-grpc = "1.2.0"
|
||||
@@ -99,7 +99,7 @@ reactor-grpc-stub = "com.salesforce.servicelibs:reactor-grpc-stub:1.2.0"
|
||||
slf4j-api = { module = "org.slf4j:slf4j-api", version.ref = "slf4j" }
|
||||
slf4j-jul = { module = "org.slf4j:jul-to-slf4j", version.ref = "slf4j" }
|
||||
slf4j-jcl = { module = "org.slf4j:jcl-over-slf4j", version.ref = "slf4j" }
|
||||
log4j-slf4j = "org.apache.logging.log4j:log4j-slf4j-impl:2.11.1"
|
||||
log4j-slf4j = "org.apache.logging.log4j:log4j-slf4j-impl:2.15.0"
|
||||
|
||||
snake-yaml = "org.yaml:snakeyaml:1.24"
|
||||
|
||||
|
||||
Reference in New Issue
Block a user