Log4j download dashboard
Sonatype Vulnerability Scanner
Produce a Software Bill of Materials and catalog all of the components in your application.
OSS Index
Detect publicly disclosed vulnerabilities contained within your project’s dependencies
“This new Log4j vulnerability is likely going to be another “flashbulb memory” event in the timeline of significant vulnerabilities. It is the most widely used logging framework in the Java ecosystem.”
"This is akin to someone figuring out mailing a letter into your post box with a specific address written on it allows them to open all your doors in your house.”