>  I really don't think we need to point to non-log4j projects on this page.

That is so true. If only there was a way to release log4j 1.x with CVE
fixes. Sure it would make third-party mentions irrelevant.

Vladimir

Reply via email to