Re: Maven Dependency Plugin - Log4j vulnerabilities

2022-03-04 Thread Juraj Veverka
>> Failed to read artifact descriptor for log4j:log4j:jar:1.2.12: >> >> >> >> Failed to read artifact descriptor for log4j:log4j:jar:1.2.12: >> >> _artifact descriptor_ >> >> >> >> -- >> >> Piotrek >> >> &g

Re: Maven Dependency Plugin - Log4j vulnerabilities

2022-02-28 Thread Juraj Veverka
) and log4j vulnerability is found there. Kind regards Juraj Veverka On Mon, Feb 28, 2022 at 1:32 PM Juraj Veverka wrote: > Hi David > > Many thanks for your email, I really appreciate your reply. This is an > isolated example of the problem. > https://github.com/jveverka/mvn-depende

Re: Maven Dependency Plugin - Log4j vulnerabilities

2022-02-28 Thread Juraj Veverka
Hi David Many thanks for your email, I really appreciate your reply. This is an isolated example of the problem. https://github.com/jveverka/mvn-dependency-log4j You can find all repro steps there. In case of any questions, feel free to contact me. Kind regards Juraj Veverka On Mon, Feb 28