Apache Software Foundation Apache Log4j JSON Template Layout vulnerabilities (CVE)

CVE records published for Apache Software Foundation Apache Log4j JSON Template Layout, newest first. Follow to get an email when a new one appears.

1 results

6.3Medium

CVE-2026-34481 7 months ago

Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout

Apache Software Foundation Apache Log4j JSON Template Layout

Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-point values (NaN, Infinity, or -Infini…