# CircleCI and Log4j (CVE-2021-44228)

**URL:** <https://discuss.circleci.com/t/circleci-and-log4j-cve-2021-44228/42256>\
**Category:** Build Environment\
**Tags:** security\
**Created:** [December 13, 2021, 3:26pm UTC](https://discuss.circleci.com/t/circleci-and-log4j-cve-2021-44228/42256 "2021-12-13T15:26:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![wawrzek](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/wawrzek/32/28906_2.png) [@wawrzek](https://discuss.circleci.com/u/wawrzek)\
**Post date:** [December 13, 2021, 3:27pm UTC](https://discuss.circleci.com/t/circleci-and-log4j-cve-2021-44228/42256/1 "2021-12-13T15:27:00Z")

</div>

I try to understand if latest CVE for Log4j in any way affect CirecleCI pipeline.

---

<div class="post-metadata">

**Author:** ![nbialostosky](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/nbialostosky/32/24962_2.png) [@nbialostosky](https://discuss.circleci.com/u/nbialostosky)\
**Post date:** [December 13, 2021, 5:30pm UTC](https://discuss.circleci.com/t/circleci-and-log4j-cve-2021-44228/42256/2 "2021-12-13T17:30:25Z")

</div>

Hi @wawrzek – welcome to Discuss!

We just posted an announcement about this here:

> [@CircleCI / Log4j Information \[CVE-2021-44228\]](https://discuss.circleci.com/t/circleci-log4j-information-cve-2021-44228/42259):
>
> On December 10th, 2021, CircleCI became aware of a vulnerability in the common Java library, log4j. After a thorough review of our codebase, software, and infrastructure, we do not have reason to believe that this vulnerability has been exploited. We have identified 23 repositories and 3 services which either included or referenced the library, and have confirmed that the security vectors which are exposed by this vulnerability are not expressible in our environment. This includes our usage of …

If you have any additional questions, please let me know!

-Nick

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/circleci/original/3X/5/1/511608acda8e85906e15909b57bd0a46c1dbe291.png) [@system](https://discuss.circleci.com/u/system)\
**Post date:** [December 23, 2021, 5:30pm UTC](https://discuss.circleci.com/t/circleci-and-log4j-cve-2021-44228/42256/3 "2021-12-23T17:30:52Z")

</div>

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.