Hi Graylog Team, Our security team has flagged the following dependency ‘apache.servicemix.bundles.dom4j:1.6.1_5’ as vulnerable in Graylog <= 3.0.0 . Is Graylog likely to be affected by this vulnerability? Thanks

Dom4J Vulnerability

system (system) Closed March 4, 2019, 6:33am 3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Question about Log4j Vulnerability CVE-2021-44228 Graylog Central (peer support)	19	4259	January 5, 2022
Log4j Vulnerability CVE-2021-44228 Graylog Central (peer support)	7	5151	December 27, 2021
Graylog Announcements Nov 2021 Updates and Upcoming Events	4	553	March 22, 2022
Log4J Vulnerability still exist? Graylog Central (peer support)	2	294	August 5, 2022
Graylog.jar version low Graylog Central (peer support)	4	461	February 22, 2022