Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
MODNCIP-46: Replace slf4j-log4j12 by log4j-slf4j-impl fixing vulns
Replace org.slf4j:slf4j-log4j12:1.7.13 by org.apache.logging.log4j:log4j-slf4j-impl:2.19.0. org.slf4j:slf4j-log4j12 has log4j:log4j as transitive dependency. log4j:log4j has reached its end of life 2015 and is no longer supported. log4j:log4j has multiple security vulnerabilities: https://nvd.nist.gov/vuln/detail/CVE-2022-23305 https://nvd.nist.gov/vuln/detail/CVE-2022-23302 https://nvd.nist.gov/vuln/detail/CVE-2021-4104 https://nvd.nist.gov/vuln/detail/CVE-2019-17571 Migrating from log4j:log4j to org.apache.logging.log4j:log4j-slf4j-impl fixes them.
- Loading branch information