is GELF J affected via log4j 2 vulnerability?

t0xa / gelfj

Graylog Extended Log Format (GELF) implementation in Java and log4j appender without any dependencies.

https://github.com/t0xa/gelfj/wiki

Other

186 stars 116 forks source link

Open marif1989 opened 2 years ago

marif1989 commented 2 years ago

is GELF J affected via log4j 2 vulnerability? just asking as question?

Please provide the more details if possible.

t0xa commented 2 years ago

Hello @marif1989

Gelfj is not using log2j2 and it's not affected by Log4Shell.

It uses an older version of log4j which has its own vulnerabilities. You can check the pom.xml and gradle.build for version details.

I'm no longer support this library. Please don't use it and migrate to supported: https://github.com/mp911de/logstash-gelf.

Anton