search

powa-team / powa-web

PoWA user interface
http://powa.readthedocs.io/
73 stars 31 forks source link

Does Powa use Apache log4j internally? #150

Closed hrawulwa closed 2 years ago

hrawulwa commented 2 years ago

Does Powa use Apache log4j internally anywhere within the tool? Our security team has asked to identify any existence of Ingrianlog4j-api-2.10.0.jar and Ingrianlog4j-core-2.10.0.jar and upgrade the latest version of log4j (2.16), in order to fix vulnerabilities.

Thanks Hari

rjuju commented 2 years ago

Hi,

log4j is a java library, and powa relies on either C / plpgsql extensions or python code. Nothing in powa uses log4j.

hrawulwa commented 2 years ago

Great, thanks for the confirmation.