Hi - We have a vulnerability that is assigned to this version of Log4J (2.25.3) bundled with Ready API version 4.1.0. I have been waiting for an update of Log4j but it has not been forthcoming..
Can we expect an update of Log4J to 2.25.4 or greater soon please so that I can update our security team ?
Thanks,
Kevin.
StaffHey Kevin,
Thanks for your report, the ReadyAPI team are aware and have this on their radar for 4.2.0 release, due mid August.
In the meantime, you are welcome to update the JAR file directly, although we have not currently tested this (I imagine there is no impact being a patch release). If you do, you are welcome to report back if there are any issues, or to let others know that you were able to without a hitch.
Cheers,
Yousaf
