set log4j to 2.17.1
@@ -186,7 +186,7 @@ dependencies {
implementation("org.apache.logging.log4j:log4j-core") {
version {
strictly("[2.17, 3[")
- prefer("2.17.0")
+ prefer("2.17.1")
}
because("CVE-2021-44228, CVE-2021-45046, CVE-2021-45105: Log4j vulnerable to remote code execution and other critical security vulnerabilities")
}
