>=2.0-beta9 vulnerabilities

CVEs whose affected-version data names the >=2.0-beta9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2021-44228Critical· 10.0CISA KEV0dayPoC

Log4Shell: JNDI RCE in Apache Log4j 2

Log4j 2 evaluates ${jndi:...} lookups in logged strings, allowing an attacker who controls any logged value to load and execute remote code via LDAP/RMI. Trivial to exploit, ubiquitous, and mass-exploited within hours of disclosure.

▾ HadalApache · Log4j 2JavaEPSS 100%via NVD