One third of Java projects based on the Log4j library continue to use vulnerable versions.
Veracode has published the results of a study on the relevance of critical vulnerabilities in the Log4j Java library identified in the past two years. By examining 38,278 applications used in 3,866 organizations, researchers at Veracode found that 38% of them are using vulnerable versions of Log4j. The main reason for continuing to use outdated code is the inclusion of old libraries in projects or the labor intensity of migrating from already unsupported branches […]
