PATH:/resources/log4j-vulnerability-resource-center
QUERY:
DOMAIN:www.sonatype.com
Not addressing Log4shell issues are looking at more than downtime or reputation damage. U.S. regulators are considering lawsuits to enforce security.
Organizations need to be aware of Log4j not only in the software they produce, but also in the software they use. Any software written in Java is very likely to contain Log4j somewhere in its stack.
Sonatype's Java and Apache Software Foundation experts give another update on how the Log4j exploit is evolving, the number of variants we're seeing and share new trends in Log4j downloads.
Produce a Software Bill of Materials and catalog all of the components in your application.
Find and fix critical security, performance, reliability, and style issues in developer code.
Detect publicly disclosed vulnerabilities contained within your project’s dependencies
Ready to Try Sonatype?
Secure and automate your software supply chain.
