Apache Log4j JSON Template Layout vulnerabilities

1 known vulnerability in Apache Log4j JSON Template Layout from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache Log4j JSON Template Layout: Improper Encoding or Escaping of Output

  CVE-2026-34481Apr 10, 2026Apache

  Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-point values (NaN, Infinity, or -Infinity