is Harbor vulnerable to log4j attack !??

[alimp5]

examples:
GHSA-jfh8-c2jp-5v3q
https://confluence.atlassian.com/kb/faq-for-cve-2021-44228-1103069406.html

[sokesekken]

agree, this would be nice to know, also, I see that trivy can find vournabilities when scanning images in harbor, but it would be nice to generate a list of all images with this vournability.

[niemand-de]

It's crucial to know if Harbor is affected by CVE-2021-44228.

Thanks for your comments in advance.

@ywk253100 @wy65701436 @reasonerjt @steven-zou @wknet123 @ninjadq

[mk3rnb8]

agree, it is an important issue and I'm keen to know if harbor is vulnerable.

[wy65701436]

Per our scanning result, this CVE does not impact Harbor OSS.

[YAMLcase]

Just the due dilligence I've performed, it seems not:

• log4j search in code only brings up this discussion and an issue.
• 0% of Harbor code written in Java.