Typescript is using log4javascript, is it the same as log4j? If yes, how can we keep our application secure?
CodePudding user response:
log4javascript is a JavaScript dependency (as the name already says). log4j is a Java dependency and only this is vulnerable. log4javascript is not vulnerable to CVE-2021-44228 and a JavaScript program cannot depend on the Java library log4j. The languages are not compatible.