Hacker News new | ask | show | jobs
by zorr 1649 days ago
Yes, recent Spring-boot projects include log4j-to-slf4j, slf4j-api, logback-core and logback-classic which AFAIK are not vulnerable.