Does Sikuli use log4j 2.x? latest vulnerability - Answer is NO

Asked by Chetan

------------- info
In some dependency of SikuliX log4j is mentioned as a dependency, but the version is 1.2.17.
Since the vulnerable version is log4j 2.x, it is correct, that SikuliX neither uses nor depends on the vulnerable log4j.
hence nothing to do with SikuliX.
-----------------------------------

rejectly a venerability was detected in log4j. wanted to check if sikuli used log4j or it is impacted in any way
https://www.randori.com/blog/cve-2021-44228/

Thanks
Chetan

Question information

Language:
English Edit question
Status:
Solved
For:
SikuliX Edit question
Assignee:
No assignee Edit question
Solved by:
Chetan
Solved:
Last query:
Last reply:
Revision history for this message
Chetan (cshamdas) said :
#1

no