Pink arrow right
Back to all posts
Erik Weibust
Erik Weibust
Senior Engineering Manager
. . .
Log4j 2.17.x: Five Unpatched CVEs Now Resolved with NES for Apache Log4j 2
Security
May 7, 2026
Log4j 2.17.x: Five Unpatched CVEs Now Resolved with NES for Apache Log4j 2
HeroDevs releases a drop-in replacement for Log4j 2.17.x patching two TLS hostname verification bypasses and three log pipeline vulnerabilities with no upstream fix available.