esdk-obs-java-bundle dependency log4j-core version2.13.3 is unsafe

huaweicloud / huaweicloud-sdk-java-obs

The OBS SDK for Java, which is used for accessing Object Storage Service

Other

131 stars 116 forks source link

esdk-obs-java-bundle dependency log4j-core version2.13.3 is unsafe #140

Open ishyper opened 8 months ago

ishyper commented 8 months ago

log4j-core(jar) version more than equals 2.13.0","log4j-core(jar) version less than 2.16.0","log4j-core(jar) extendField.jndi_class_not_exist equals false

liqiuqiu111 commented 7 months ago

两个方案： 1.排除原来的低版本，引入这个版本log4j-core-2.18.0.jar； 2.升级SDK版本到3.23.9；