Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion CVSS base score is 3.1 (HIGH severity). The EPSS exploit prediction model gives this CVE a 71.4% probability of exploitation in the next 30 days, placing it in the 99th percentile of all tracked vulnerabilities. This vulnerability is not currently on the CISA Known Exploited Vulnerabilities catalog. Affects 7 packages across the dependency graph; review the affected version ranges below and upgrade to a fixed release where available.