Components Vulnerabilities Pricing MCP API

Find vulnerabilities. Fix fast with AI.

Search components by package, version, or CVE to get started.

Get full component data and automated fixes with Sonatype Guide.

Sign up for free

org.apache.logging.log4j

log4j-bom

2.25.5

log4j-bom 2.25.5

org.apache.logging.log4j

PublishedJul 1, 2026•Policy

compliance

Developer Trust Score

Recommended Version:x.y.z

Recommended upgrade that meets your policy.

Compare Versions

Policy Compliance

Vulnerabilities: vulnerabilities
License: license
Malware: malware

Vulnerabilities

0Critical

0High

0Medium

0Low

License

License: license
Type: type

org.apache.logging.log4j/log4j-bom 2.25.5 | Sonatype Guide | Sonatype Guide