GHSA lookup
GHSA-LOG4J2-4255-MARSHALLEDOBJECT
Pruva has a verified reproduction for GHSA-LOG4J2-4255-MARSHALLEDOBJECT: Apache Log4j2 serialized LogEvent filter bypass to conditional RCE. The canonical evidence record is REPRO-2026-00338.
REPRO
REPRO-2026-00338
Package
org.apache.logging.log4j:log4j-core · maven
Severity
CRITICAL
Status
published