Remote code injection in Log4j (through pax-logging-log4j2)
ImpactRemote Code Execution.PatchesUsers of pax-logging 1.11.9 should update to 1.11.10.
Users of pax-logging 2.0.10 should update to 2.0.11.WorkaroundsSet system property `-Dlog4j2.formatMsgNoLookups=true`Referenceshttps://github.com/advisories/GHSA-jfh8-c2jp-5v3q