GitHub

Using log4j-to-slf4j in a web application incorrectly sets a value in a ThreadLocal in org.apache.logging.slf4j.SLF4JLogger

We have a web application packaged as a .war file deployed in Tomcat 11. The web application uses logback as the main logger and slf4j as a facade. Then we use log4j-to-slf4j as a bridge to redirect ...
GitHub

False positive on tomcat-embed-logging-log4j v7.0.70

False positive on tomcat-embed-logging-log4j v7.0.70 - reported as cpe:/a:apache:tomcat:4.0.0 org.apache.tomcat.embed tomcat-embed-logging-log4j 7.0.70 I noticed this because I also have an app under ...
RDS

Apache Tomcat 6.0

This is the top-level entry point of the documentation bundle for the Apache Tomcat Servlet/JSP container. Apache Tomcat version 6.0 implements the Servlet 2.5 and JavaServer Pages 2.1 specifications ...