# Recent Critical vulnerability in Apache log4j

**URL:** <https://discuss.prometheus.io/t/recent-critical-vulnerability-in-apache-log4j/649>\
**Category:** General Help/Support\
**Created:** [December 13, 2021, 12:17pm UTC](https://discuss.prometheus.io/t/recent-critical-vulnerability-in-apache-log4j/649 "2021-12-13T12:17:27Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sohail](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@Sohail](https://discuss.prometheus.io/u/Sohail)\
**Post date:** [December 13, 2021, 12:17pm UTC](https://discuss.prometheus.io/t/recent-critical-vulnerability-in-apache-log4j/649/1 "2021-12-13T12:17:27Z")

</div>

Since log4j is vulnerable I need to know if prometheus uses apache log4j . Can someone please help me on this.

---

<div class="post-metadata">

**Author:** ![stuart](https://dub1.discourse-cdn.com/flex017/user_avatar/discuss.prometheus.io/stuart/32/18_2.png) [@stuart](https://discuss.prometheus.io/u/stuart)\
**Post date:** [December 13, 2021, 12:54pm UTC](https://discuss.prometheus.io/t/recent-critical-vulnerability-in-apache-log4j/649/2 "2021-12-13T12:54:08Z")

</div>

Please see this reply: [Logs4j CVE-2021-44228 Vulnerability - #2 by stuart](https://discuss.prometheus.io/t/logs4j-cve-2021-44228-vulnerability/647/2)

---

<div class="post-metadata">

**Author:** ![Sohail](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@Sohail](https://discuss.prometheus.io/u/Sohail)\
**Post date:** [December 13, 2021, 1:01pm UTC](https://discuss.prometheus.io/t/recent-critical-vulnerability-in-apache-log4j/649/3 "2021-12-13T13:01:55Z")

</div>

Thank you stuart