Security upgrade org.slf4j:slf4j-log4j12 from 1.7.25 to 1.7.34 (Critical CVSS) #392
Description
Current "org.slf4j:slf4j-log4j12" version is vulnerable to the following:
- SQL Injection SNYK-JAVA-LOG4J-2342645 (High)
- Deserialization of Untrusted Data SNYK-JAVA-LOG4J-572732 (Critical)
singer/pom.xml
Recommendation:
Please make sure that the libraries are kept up to date to avoid known exploits being implemented. Specifically, please make sure to update:
org.slf4j:slf4j-log4j12: 1.7.25 -> 1.7.34