Tag

log4j-maven-dependency

Safeguard articles tagged "log4j-maven-dependency" — guides, analysis, and best practices for software supply chain and application security.

1 article

DevSecOps

Log4j Maven Dependency: How to Find, Fix, and Pin It Safely

A practical guide to the Log4j Maven dependency: how to detect log4j-core in your tree, why 2.17.1 is the version to target, and how to pin it for good.

Jan 22, 20255 min read