You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@shiro.apache.org by "Lenny Primak (Jira)" <ji...@apache.org> on 2022/01/14 03:31:00 UTC

[jira] [Created] (SHIRO-842) shiro-web depends on older log4j

Lenny Primak created SHIRO-842:
----------------------------------

             Summary: shiro-web depends on older log4j
                 Key: SHIRO-842
                 URL: https://issues.apache.org/jira/browse/SHIRO-842
             Project: Shiro
          Issue Type: Dependency upgrade
          Components: Web
    Affects Versions: 1.8.0
            Reporter: Lenny Primak


shiro-web has a very old log4j dependency  (log4j:log4j)

Snyk is reporting as a critical security issue (not sure it's actually is)

Shiro should upgrade to the latest 1.x (or 2.x) if necessary



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org
For additional commands, e-mail: issues-help@shiro.apache.org