GHSA-4f7c-pmjv-c25wPublished

Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters

Exact source revision recorded 23 Oct 2026 16:01:25 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

osv · GHSA-4f7c-pmjv-c25w

Published

log4net

NuGet

ECOSYSTEM · introduced 0 → fixed 3.3.0

27 explicitly affected versions

1.2.10, 1.2.11, 2.0.0, 2.0.1, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16, 2.0.17, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.1.0, 3.2.0

Original source record · Cite this exact observation · Complete original publisher JSON