5 known vulnerabilities have been recorded for org.apache.logging.log4j:log4j-core in Maven (Java). The current safest known version is 2.25.3. Each finding is enriched with EPSS exploit probability and CISA KEV exploitation status so you can prioritize remediation by real-world risk.