log4j status

[baflo]

Hi,

I'm browsing all our dependencies for Java projects due to the log4j exploit. I could not find any hints you may be using log4j, but could you give a short stateement on this?

Cheers
Florian

[gessnerfl]

@baflo: fake-smtp-server is not using log4j for logging. It is based on spring boot which is using slf4j and logback as logging frameworks. Some third party libraries might include the log4j-api. However this is not affected by the log4j exploit. The log4j exploit belongs to log4j-core library.

[baflo]

Thanks 👍