search

swri-robotics / bag-database

A server that catalogs bag files and provides a web-based UI for accessing them.
Other
342 stars 71 forks source link

Is bag database or one of its dependencies affected by log4j vulnerability? #167

Closed AndreasR30 closed 2 years ago

AndreasR30 commented 2 years ago

Hello,

do you think bag database or any of its dependencies is affected by recent log4j vulnerability?

Thank you very much

pjreed commented 2 years ago

No, the bag database uses logback as its logging mechanism, which is unaffected by log4j's vulnerabilities (http://logback.qos.ch/).

danthony06 commented 2 years ago

Correct, we are unaffected by the log4j vulnerability.

AndreasR30 commented 2 years ago

That are great news. Thank you very much.