Apache Log4j API: Improper encoding of non-finite floating-point values during MapMessage JSON serialization

Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue affects Apache Log4j API versions 2.13.1 through 2.25.4 and version 2.26.0. The fix for CVE-2026-34481 did not cover all code paths: wh...

CVE-2026-34481 vulnerabilities

Vulnerabilities for packages: solr, apache-pulsar, flink, neo4j, spark, strimzi-kafka-operator...

CVE-2026-34481 vulnerabilities

Vulnerabilities for packages: apache-pulsar, hadoop-fips, kafka-bridge, neo4j, camunda, apache-pulsar-fips, spark-kubernetes-operator-fips, camunda-zeebe, spark, spark-kubernetes-operator, strimzi-kafka-operator, spark-fips, wso2is, flink, apache-camel-karavan-devmode, solr, kafka-bridge-fips...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1130 more potentially affected by CVE-2026-34481 via org.apache.logging.log4j:log4j-layout-template-json (>=2.14.0, <=3.0.0-beta3)

org.apache.logging.log4j:log4j-layout-template-json MAVEN version =2.14.0, =2.6.0-looktech.1, =2.6.0-looktech.1, =2.6.0-looktech.1, =2.6.0-looktech.1, =2.6.0-looktech.1, =2.6.0-looktech.1, =2.6.0-looktech.1, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-34481 Source...