search

mulesoft-catalyst / mule-sonarqube-plugin

The Mule SonarQube Plugin provides the capability to do code inspecting and taking project metrics from a mule project using SonarQube.
The Unlicense
48 stars 69 forks source link

Creating a new release with the update of Log4j 2.17.2 for CVE-2021-44832 #46

Closed schneider-de-com closed 2 years ago

schneider-de-com commented 2 years ago

By using log4j-slf4j-impl in version 2.17.0, the mule-sonarqube-plugin is still vulnerable to the Log4J vulnerability (CVE-2021-44832).

@fperezpa please create a new release, preferably with Log4J version 2.17.2, as further improvements have been implemented here.