Vulnerabilities of Apache Software Foundation Apache Log4j 1 to Log4j 2 bridge
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-34479 | The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0… | 6.9 Medium | Apr 10, 2026 |