Update dependency org.apache.logging.log4j:log4j-core to v2.25.4 (main) - #242
Open
mend-for-github-com[bot] wants to merge 1 commit into
Open
Mend for GitHub.com / WhiteSource Security Check
succeeded
May 26, 2026 in 2m 14s
Security Report
❗️Scan Incomplete: The scan completed with partial failure. The integration encountered issues with one or more projects in this repository, preventing their scan. The errors occurred in the following package managers: gradle,sbt,php. Consequently, there may be gaps in the coverage of open-source dependencies used in the repository.
Scan Details Report
gradle
/tmp/ws-scm/comms-router/test/demo-helper/play-helper/build.gradle
| Step | Level | Description | Details |
|---|---|---|---|
| Preparing the project for scan | ⚠Warn | One or more of the installations failed | failed running mend init script (mendDeps): NOTE: Picked up JDK_JAVA_OPTIONS: --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/sun.reflect.generics.reflectiveObjects=ALL-UNNAMED FAILURE: Build failed with an exception. * Where: Build file '/tmp/ws-scm/comms-router/test/demo-helper/play-helper/build.gradle' line: 2 * What went wrong: Plugin [id: 'play'] was not found in any o... |
https://vonagecc.jfrog.io/artifactory
| Step | Level | Description | Details |
|---|---|---|---|
| Checking registry connectivity | ⚠Warn | Problem occurred while connecting to the private registry host server, private registry returned 401 - Unauthorized | {"errors":[{"code":"UNAUTHORIZED","message":"Invalid token, parse"}]} |
https://vonagecc.jfrog.io/artifactory/maven
| Step | Level | Description | Details |
|---|---|---|---|
| Checking registry connectivity | ⚠Warn | Problem occurred while connecting to the private registry host server, private registry returned 401 - Unauthorized | {"errors":[{"code":"UNAUTHORIZED","message":"Invalid token, parse"}]} |
✔️ 👍 You have successfully remediated 8 vulnerabilities in this branch:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2021-44832 | log4j-core-2.8.2.jar |
| CVE-2020-9488 | log4j-core-2.8.2.jar |
| CVE-2021-45105 | log4j-core-2.8.2.jar |
| CVE-2021-44228 | log4j-core-2.8.2.jar |
| CVE-2026-34479 | log4j-core-2.8.2.jar |
| CVE-2021-45046 | log4j-core-2.8.2.jar |
| CVE-2026-34480 | log4j-core-2.8.2.jar |
| CVE-2025-68161 | log4j-core-2.8.2.jar |
Base branch total remaining vulnerabilities: 197
Base branch commit: 4e5656db54be4b22481fe3774c2caeba51bac190
Total libraries scanned: 234
Scan token: 89a5ef5bac904498b2c1a426d8e11ce2
Loading