Log4j’s Wakeup Call: How To Be Vigilant?
Over this weekend, Google’s open-source team scanned Maven Central, the largest Java package repository, and found that 35,863 Java packages use versions of the Apache Log4j library. The good news is that the open-source community has responded well and has already fixed 4,620 (13%) of the packages. But, fixing all the vulnerabilities would take several…