Find Log4Shell vulnerabilities in your unmanaged and shaded jars with the Snyk CLI
ID: 82a0532b-a553-5cdf-9141-8a44201fce97
STIX ID: report--82a0532b-a553-5cdf-9141-8a44201fce97
Feed Name: Snyk Blog
Threat Score
Snyk introduced a new CLI command, 'snyk log4shell' (available in Snyk CLI v1.796+), that scans built Java artifacts (.jar, .war, fat JARs) to detect embedded or repackaged instances of Log4j vulnerable to CVE-2021-44228 and CVE-2021-45046, complementing existing manifest- and signature-based scans and providing links to remediation guidance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.