[ https://issues.apache.org/jira/browse/AXIS2-6025?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17488934#comment-17488934 ]
Robert Lazarski commented on AXIS2-6025: ---------------------------------------- Ah I did miss it, thanks! > testkit uses log4jv2 version that has CVEs > ------------------------------------------ > > Key: AXIS2-6025 > URL: https://issues.apache.org/jira/browse/AXIS2-6025 > Project: Axis2 > Issue Type: Improvement > Reporter: PJ Fanning > Priority: Major > > A lot of people are very sensitive about applications that still use versions > of log4j with CVEs. > v2.14.x used in: > https://github.com/apache/axis-axis2-java-core/blob/master/modules/transport/testkit/pom.xml -- This message was sent by Atlassian Jira (v8.20.1#820001) --------------------------------------------------------------------- To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org For additional commands, e-mail: java-dev-h...@axis.apache.org