CVE-2021-45046 and CVE-2021-44228 due to the presence of log4j-core-2.6.jar

thomasnordquist / MQTT-Explorer

An all-round MQTT client that provides a structured topic overview

https://mqtt-explorer.com

Other

2.99k stars 287 forks source link

CVE-2021-45046 and CVE-2021-44228 due to the presence of log4j-core-2.6.jar #837

Open IGitYou opened 1 week ago

IGitYou commented 1 week ago

was flagged for having two critical vulnerabilities (CVE-2021-45046 and CVE-2021-44228) due to the presence of X:\program files\mqttfx\lib\log4j-core-2.6.jar in mqtt-explorer v0.3.5

I am told it needs to be updated to 2.15 or greater. Can you update this so I can keep this application on my machine?