com.github.javadev:authenticationsdk (0.0.5) potentially affected by CVE-2020-9488 via org.apache.logging.log4j:log4j (2.3)

org.apache.logging.log4j:log4j MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.logging.log4j:log4j and may be impacted: - com.github.javadev:authenticationsdk 0.0.5 Source cves: CVE-2020-9488 Source advisory:...

com.github.javadev:authenticationsdk (0.0.5) potentially affected by CVE-2020-9488 via org.apache.logging.log4j:log4j (2.3)

org.apache.logging.log4j:log4j MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.logging.log4j:log4j and may be impacted: - com.github.javadev:authenticationsdk 0.0.5 Source cves: CVE-2020-9488 Source advisory:...

ch.cern.sparkmeasure:spark-measure_2.11 (0.11), com.foreks:vertx-config-launcher (>=0.9.0, <=0.9.4) +6 more potentially affected by CVE-2017-5645 via org.apache.logging.log4j:log4j (>=2.3, <=2.8)

org.apache.logging.log4j:log4j MAVEN version =2.3, =0.9.0, =0.1.0, =0.1.7, =0.2.4, =0.2.4, =1.0.0, =1.2.0 Source cves: CVE-2017-5645 Source advisory: GHSA-FXPH-Q3J8-MV87...