You are viewing a plain text version of this content. The canonical link for it is here.
- [NOT-VULNERABILITY] `log4j.configuration` enables the Log4j 1.x configuration parser by design - posted by "Piotr P. Karwasz" <pi...@mailing.copernik.eu> on 2026/09/13 20:59:28 UTC, 1 replies.
- [HARDENING] `NoSqlAppender` writes `MapMessage` keys, including CouchDB reserved names, verbatim - posted by "Piotr P. Karwasz" <pi...@mailing.copernik.eu> on 2026/09/25 06:56:28 UTC, 0 replies.
- [HARDENING] `Ssl` falls back to the JVM default trust store when its `TrustStore` element fails to load - posted by "Piotr P. Karwasz" <pi...@mailing.copernik.eu> on 2026/09/25 06:57:55 UTC, 0 replies.
- [NOT-VULNERABILITY] `HtmlLayout` does not neutralize Unicode bidirectional control characters - posted by "Piotr P. Karwasz" <pi...@mailing.copernik.eu> on 2026/09/25 06:59:31 UTC, 0 replies.
- [HARDENING] `verifyHostName` defaults to `false` in the `Ssl` element and `log4j2.sslVerifyHostName` - posted by "Piotr P. Karwasz" <pi...@mailing.copernik.eu> on 2026/09/25 07:00:28 UTC, 0 replies.
- [NOT-VULNERABILITY] `DatagramOutputStream` copies its whole buffer on every write - posted by "Piotr P. Karwasz" <pi...@mailing.copernik.eu> on 2026/09/25 07:02:54 UTC, 0 replies.
- [NOT-VULNERABILITY] `%rEx{short.*}` fails on a root cause with an empty stack trace - posted by "Piotr P. Karwasz" <pi...@mailing.copernik.eu> on 2026/09/25 07:06:07 UTC, 0 replies.
- [NOT-VULNERABILITY] `Rfc5424Layout` emits the `MSGID` and `SD-ID` fields unsanitized by design - posted by "Piotr P. Karwasz" <pi...@mailing.copernik.eu> on 2026/09/25 07:08:33 UTC, 0 replies.
- [NOT-VULNERABILITY] `MapMessage` JSON output renders `BigInteger` values as floating-point numbers - posted by "Piotr P. Karwasz" <pi...@mailing.copernik.eu> on 2026/09/25 07:10:56 UTC, 0 replies.
- [NOT-VULNERABILITY] `JndiManager` shares one JNDI environment between all callers - posted by "Piotr P. Karwasz" <pi...@mailing.copernik.eu> on 2026/09/29 22:31:42 UTC, 0 replies.