search

karma-runner / karma

Spectacular Test Runner for JavaScript
http://karma-runner.github.io
MIT License
11.95k stars 1.71k forks source link

Log4j security issue #3731

Closed bsansone closed 2 years ago

bsansone commented 2 years ago

Hi, there has been a 0-day exploit found in log4j see https://www.lunasec.io/docs/blog/log4j-zero-day/ it looks like this package has it as a dependency, is there any concern for users that have installed this package as a dev dependency? Thank you.

devoto13 commented 2 years ago

The link is talking about log4j2 package for Java, while we use log4js package for JavaScript. Therefore we don't use the affected package and karma users are not affected.