Is this library is vulnerable via jndilookup mechanism as in log4j 2.x?
dineshr93 opened this issue · 1 comments
dineshr93 commented
Hello
From http://logback.qos.ch/news.html they have made some changes in response to vulnerabilities present in LOG4j
I'd like to know if this lib is free of such vulnerabilities as well officially.
Thanks.
tony19 commented
logback-android
is not impacted by this vulnerability because it has never supported JNDI.