AL
Product
Apache Log4j API
by Apache Software Foundation · last CVE Jul 10, 2026
1
CVEs
0
On KEV
5.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add Apache Log4j API to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-49844
5.9
1%
Jul 10
Apache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson()
Affected: 2.13.1 before 2.25.5; 2.26.0 before 2.26.1; 3.0.0-alpha1 through 3.0.0-beta2
Showing 1