Product · Apache Software Foundation

Apache Log4j 1 to Log4j 2 bridge

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.9

CVE-2026-34479

Apache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters

The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard, producing malformed XML output. Conforming XML parsers are required to reject documents containing such characters with a fatal error, …

Apache Software Foundation Apache Log4j 1 to Log4j 2 bridge druid logstash-9.3-iamguarded-compat Debian Ubuntu Wolfi Maven

Apr 10, 2026