scalanlp / breeze

Breeze is a numerical processing library for Scala.
www.scalanlp.org
Apache License 2.0
3.44k stars 691 forks source link

Updating Log4j version to 2.17.0 because of CVE-2021-45105 vulnerability. #830

Closed jeremie1112 closed 2 years ago

jeremie1112 commented 2 years ago

Update Log4j version to 2.17.0 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45105

dlwh commented 2 years ago

Thanks! I'm not like super worried about it since it's a test dependency, but I appreciate it nonetheless!

jeremie1112 commented 2 years ago

No worries ! We always need to update to safety :smile: