search

EventStore / EventStoreDB-Client-Java

Official Asynchronous Java 8+ Client Library for EventStoreDB 20.6+
https://eventstore.com
Apache License 2.0
63 stars 20 forks source link

Log4Shell vulnerability checks #121

Closed YoEight closed 2 years ago

YoEight commented 2 years ago

We run Grype on both the source code and the latest Jar and the result is the Java gPRC client is not exposed to Log4Shell. We also doubled-checked that we don't even have a dependency to log4j, even transitively.

jageall commented 2 years ago

thanks @YoEight , closing this but it should answer any questions people have about it