Apache Log4j does not verify the TLS hostname in its Socket Appender
Moderate severity
GitHub Reviewed
Published
Dec 18, 2025
to the GitHub Advisory Database
•
Updated Dec 19, 2025
Give feedback on Dependabot alerts