Forum Discussion

oneagh's avatar
oneagh
New Contributor
2 months ago

Log4j vulnerability (CVE-2025-68161)

Hi everyone, I’ve tested the latest version of SoapUI (v5.9.1) and noticed that it is still using Log4j v2.17.1 Could you please confirm whether there are plans to upgrade the Log4j component to a ...
Reporting
Securebear532's avatar
Securebear532
New Contributor
27 days ago

Hi!

I need an update regarding both a timeline for the update and mitigation actions for version 5.9.1. Please get back to me with this information.

  • yousaf's avatar
    yousaf
    Icon for Staff rankStaff
    16 days ago

    Hi,

    Sorry for the late reply,

    If you are position to build SoapUI from source, then you can apply the changes in this pull request, which will address the issue, and will be included in the next release

    https://github.com/SmartBear/soapui/pull/886

    This