3 ms·

Looks like it uses Log4j: https://github.com/prevayler/prevayler/blob/f52736da5a2d7d87ef7a5cc4c2d0597df535b1cc/pom.xml#L197 https://github.com/prevayler/prevayl

• testplzignore 5y ago
  Heh, good spot. Funny enough, it was upgraded to log4j2 somewhat recently in https://github.com/prevayler/prevayler/issues/24 https://github.com/prevayler/prevayler/issues/24 to remediate CVE-2019-17571, which it probably wasn't even vulnerable to. I wonder how many other people did the same thing. I wish security advisories did a better job explaining the circumstances of when something is exploitable.