Description
There are several new CVEs for log4j1 now.
As it is not suitable to upgrade to log4j2 for 2.x releases, let's replace the log4j1 dependencies with reload4j.
Attachments
Issue Links
- links to
There are several new CVEs for log4j1 now.
As it is not suitable to upgrade to log4j2 for 2.x releases, let's replace the log4j1 dependencies with reload4j.