Re: Sprint-boot 1.5.x with maven is affected por log4j vulnerability?

Hello Piotr, So the solution for `ch.qos.logback:logback-core` would be to add this dependency: ch.qos.logback logback-core 1.2.11 El mié, 30 mar 2022 a la(s) 02:42, Piotr P. Karwasz (piotr.karw...@gmail.com) escribió: > Hello Juan, > > On Tue, 29 Mar 2022 at 23:00,

Sprint-boot 1.5.x with maven is affected por log4j vulnerability?

I have a maven project with spring-boot 1.5.21.RELEASE. Run the command: mvn dependency:tree | grep log4j [INFO] | | | \- org.slf4j:log4j-over-slf4j:jar:1.7.26:compile [INFO] | | | \- org.slf4j:log4j-over-slf4j:jar:1.7.26:compile [INFO] | | | \-