kaikramer / keystore-explorer

KeyStore Explorer is a free GUI replacement for the Java command-line utilities keytool and jarsigner.
https://keystore-explorer.org/
GNU General Public License v3.0
1.7k stars 275 forks source link

Log4j Vulnerability #324

Closed safari62 closed 2 years ago

safari62 commented 2 years ago

Hallo together,

I have a question. Is the Keystore Explorer affected by Apache Log4j in any way? Thanx a lot in advance!

Tom

jpstotz commented 2 years ago

You can simply check it yourself, just execute gradlew dependencies on the kse source code and you will not find any reference to log4j.

Another way is to search the project in Github for log4j https://github.com/kaikramer/keystore-explorer/search?q=log4j - again no result.

kaikramer commented 2 years ago

Yep, KSE does not use log4j and is therefore not affected by Log4Shell.