Is log4javascript vulnerable to Apache Log4j (Java logging library) remote code execution CVE-2021-44228?

2k Views Asked by At

Typescript is using log4javascript, is it the same as log4j? If yes, how can we keep our application secure?

1

There are 1 best solutions below

0
Simulant On BEST ANSWER

log4javascript is a JavaScript dependency (as the name already says). log4j is a Java dependency and only this is vulnerable. log4javascript is not vulnerable to CVE-2021-44228 and a JavaScript program cannot depend on the Java library log4j. The languages are not compatible.