CVE-2021-44832

Advisory

Aws-analytics-reference-architecture 1.14.1 and prior includes a version of 'log4j' affected by a medium severity vulnerability.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

[1.8.7](https://github.com/aws-samples/aws-analytics-reference-architecture/compare/v1.8.6...v1.8.7) (2022-01-03)


Bug Fixes

* bump to log4j 2.17 to avoid vulnerability ([220](https://github.com/aws-samples/aws-analytics-reference-architecture/issues/220)) ([efdfb74](https://github.com/aws-samples/aws-analytics-reference-architecture/commit/efdfb7430ac004f4ece45cbdc122b9d672b7ab65))
* upgrade license year ([230](https://github.com/aws-samples/aws-analytics-reference-architecture/issues/230)) ([c8ce6a3](https://github.com/aws-samples/aws-analytics-reference-architecture/commit/c8ce6a3110e88a868a8c750b8b13d1d96438df98))

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44832