Home > Blockchain >  Is log4javascript vulnerable to Apache Log4j (Java logging library) remote code execution CVE-2021-4
Is log4javascript vulnerable to Apache Log4j (Java logging library) remote code execution CVE-2021-4

Time:12-21

Typescript is using log4javascript, is it the same as log4j? If yes, how can we keep our application secure?

CodePudding user response:

log4javascript is a JavaScript dependency (as the name already says). log4j is a Java dependency and only this is vulnerable. log4javascript is not vulnerable to CVE-2021-44228 and a JavaScript program cannot depend on the Java library log4j. The languages are not compatible.

  • Related