problem: vulnerability in log4j < v2.15 (CVE-2021-44228)
rel: https://www.lunasec.io/docs/blog/log4j-zero-day/
This commit is contained in:
@@ -3,7 +3,7 @@ detekt = "1.18.1"
|
|||||||
etherjar = "0.11.1"
|
etherjar = "0.11.1"
|
||||||
groovy = "2.5.14"
|
groovy = "2.5.14"
|
||||||
protoc = "3.9.0"
|
protoc = "3.9.0"
|
||||||
slf4j = "1.7.25"
|
slf4j = "1.7.32"
|
||||||
jackson = "2.11.0"
|
jackson = "2.11.0"
|
||||||
grpc = "1.38.0"
|
grpc = "1.38.0"
|
||||||
reactive-grpc = "1.2.0"
|
reactive-grpc = "1.2.0"
|
||||||
@@ -99,7 +99,7 @@ reactor-grpc-stub = "com.salesforce.servicelibs:reactor-grpc-stub:1.2.0"
|
|||||||
slf4j-api = { module = "org.slf4j:slf4j-api", version.ref = "slf4j" }
|
slf4j-api = { module = "org.slf4j:slf4j-api", version.ref = "slf4j" }
|
||||||
slf4j-jul = { module = "org.slf4j:jul-to-slf4j", version.ref = "slf4j" }
|
slf4j-jul = { module = "org.slf4j:jul-to-slf4j", version.ref = "slf4j" }
|
||||||
slf4j-jcl = { module = "org.slf4j:jcl-over-slf4j", version.ref = "slf4j" }
|
slf4j-jcl = { module = "org.slf4j:jcl-over-slf4j", version.ref = "slf4j" }
|
||||||
log4j-slf4j = "org.apache.logging.log4j:log4j-slf4j-impl:2.11.1"
|
log4j-slf4j = "org.apache.logging.log4j:log4j-slf4j-impl:2.15.0"
|
||||||
|
|
||||||
snake-yaml = "org.yaml:snakeyaml:1.24"
|
snake-yaml = "org.yaml:snakeyaml:1.24"
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user