google / log4jscanner

A log4j vulnerability filesystem scanner and Go package for analyzing JAR files.

google/log4jscanner Issues

False negative for old libraries version
Updated 2 years ago1
Scan does not catch log4j log4j-1.2.12.jar
Updated 2 years ago
Error scanning - negative offset
Closed 2 years ago3
release assets archives contain potentially dangerous "." folder
Closed 2 years ago
False positive with current detection method
Closed 2 years ago3
Replace io.ReadAll usage with pre-allocated buffers of appropriate size
Closed 3 years ago3
Rewrite should back up the original jar(s) by default
Updated 3 years ago5
Please support remediation of CVE-2021-4104 by removing JMSAppender.class as well
Closed 3 years ago4
Add Support for Additional Java Binary Types
Updated 3 years ago1
test flutter app issue
Closed 3 years ago
"cannot find package" when building or installing through go install command
Closed 3 years ago1
sudo: log4jscanner: command not found
Closed 3 years ago2
Dependency Error While Building
Closed 3 years ago
Can it scan vulnerabilities of other log conpoments, such Logback and java.util.logging.Logger?
Closed 3 years ago2
scanner fails if /tmp is on a different filesystem than the filesystem being scanned on linux
Closed 3 years ago2
Support executable JARs
Closed 3 years ago1
readdir META-INF/versions/9: not implemented
Closed 3 years ago7
Add install instructions
Closed 3 years ago
Release precompiled binaries
Closed 3 years ago
log4jscanner should be able to scan a single file
Updated 3 years ago