ghc-automation-staging-parallel-4-p1 / 3429894_rerun_3_429_failed

0 stars 0 forks source link

Update dependency org.apache.logging.log4j:log4j-core to v2.12.4 - autoclosed #8

Closed staging-whitesource-for-github-com[bot] closed 6 hours ago

staging-whitesource-for-github-com[bot] commented 6 hours ago

This PR contains the following updates:

Package Type Update Change
org.apache.logging.log4j:log4j-core (source) compile minor 2.8.2 -> 2.12.4

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
Critical 10.0 CVE-2021-44228 #6
Critical 9.0 CVE-2021-45046 #3
Medium 6.6 CVE-2021-44832 #7
Medium 5.9 CVE-2021-45105 #5
Low 3.7 CVE-2020-9488 #4