3 ms·
Heh, good spot. Funny enough, it was upgraded to log4j2 somewhat recently in https://github.com/prevayler/prevayler/issues/24 https://github.com/prevayler/preva
by testplzignore 5y ago
Heh, good spot. Funny enough, it was upgraded to log4j2 somewhat recently in https://github.com/prevayler/prevayler/issues/24 https://github.com/prevayler/prevayler/issues/24 to remediate CVE-2019-17571, which it probably wasn't even vulnerable to. I wonder how many other people did the same thing. I wish security advisories did a better job explaining the circumstances of when something is exploitable.