Codebase list apache-log4j2 / run/0cc601a4-e8ed-485e-b14f-d7667735a2c2/main SECURITY.md
run/0cc601a4-e8ed-485e-b14f-d7667735a2c2/main

Tree @run/0cc601a4-e8ed-485e-b14f-d7667735a2c2/main (Download .tar.gz)

SECURITY.md @run/0cc601a4-e8ed-485e-b14f-d7667735a2c2/main — raw · history · blame 

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
# Security Policy

## Supported Versions

Only the most recent release of Apache Log4j 2 is supported.

## Reporting a Vulnerability

If you have encountered an unlisted security vulnerability or other unexpected behaviour that has security impact, please report them privately to the [Log4j Security Team](mailto:private@logging.apache.org).

## Past Vulnerabilities

See [Apache Log4j Security Vulnerabilities](https://logging.apache.org/log4j/2.x/security.html).