Top New Best Ask Show Jobs

35% of Log4j downloads are grabbing the vulnerable version | Hacker News Reader

35% of Log4j downloads are grabbing the vulnerable version

writing.gonze.com

19 points·lucasgonze··4 comments

Open articleView on HN

Begging the question of why the vulnerable version is still available to be grabbed in the first place?

this, companies who are hosting known vulnerable libraries should be charged criminally imo

That's one of the open questions. YES. Absolutely.

Deleting them would break builds ;)

Reply on news.ycombinator.com