apache log4j 1 2 api vulnerabilities (CVE)

CVE records published for apache log4j 1 2 api, newest first. Follow to get an email when a new one appears.

1 results

6.9Medium

CVE-2026-34479 7 months ago

Apache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters

Apache Software Foundation Apache Log4j 1 to Log4j 2 bridge

The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard, producing malformed XML output. Conforming XML parsers are required to reject documents containing such characters with a fatal error, …