Merge pull request apache#511 from cldrn/patch-1

[WW-5151] Bump to 2.15.0 to fix log4j vulnerability
fp024 · Dec 12, 2021 · 764d3c0 · 764d3c0
2 parents 1948cca + 4620ea4
commit 764d3c0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pom.xml b/pom.xml
@@ -111,7 +111,7 @@
         <asm.version>9.2</asm.version>
         <jackson.version>2.10.5</jackson.version>
         <jackson-databind.version>2.10.5.1</jackson-databind.version>
-        <log4j2.version>2.13.3</log4j2.version>
+        <log4j2.version>2.15.0</log4j2.version>
         <ognl.version>3.2.20</ognl.version>
         <slf4j.version>1.7.30</slf4j.version>
         <spring.platformVersion>4.3.29.RELEASE</spring.platformVersion>