Started by
Alex89912
on
Topic category: Troubleshooting, bugs, and solutions
Only a few minutes before i checked my pc I found Log4j (Last Vulnerability OF THE YEAR for Java) and when I checked on a website what was the vesrsoins affected, I found that it was one of them.
Here is the proof from the apache website (Creator of Log4j)
(Sorry btw I just screenshotted only 1 of the 3 lines of where it was on my computer)
Edited by Alex89912 on Tue, 11/01/2022 - 17:01
You should report this on the mcreator github to get more attention
I suggest checking the source code, where you can see we (MCreator software) use 2.19.0 which is not vulnerable: https://github.com/MCreator/MCreator/blob/b88d5a3d8f231806e58fbc2e11210453e5de322c/build.gradle#L73
The version you are showing is from Gradle caches for the test environment. Those libs are managed by MC/FG and we have no control over them.