Skip to content

False Positive on log4j-over-slf4j-1.7.30.jar #2703

@holubec-petr

Description

@holubec-petr

False positive on library log4j-over-slf4j-1.7.30.jar - reported as cpe:2.3:a:apache:log4j:*:*:*:*:*:*:*:*
Reported as CVE-2020-9488

implementation(group = "org.slf4j", name = "log4j-over-slf4j", version = "1.7.30")
implementation(group = "org.apache.logging.log4j", name = "log4j-core", version = "2.13.3")

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions