3 ms·
Log4Shell Lives
- johnthuss 4y agoA large part of this problem is caused by the ubiquitous use of transitive dependency resolvers in Java build tools like maven and gradle. Developers are not even aware that log4j is one of their dependencies because they are not using it directly, only transitively.