1. 2cd27ed Correct historical context of deserialization FAQ (#43) by Piotr P. Karwasz · 2 days ago main main-site-pro
  2. 2c59090 Update project name from 'Log4j' to 'Apache Log4j' (#42) by Sebb · 11 days ago
  3. 348238e Add Ramanathan Muthu to sponsors list (#41) by Ramanathan · 7 weeks ago
  4. 3dc5d36 Add CVE-2026-49844 and update CVE-2026-34481 (#40) by Piotr P. Karwasz · 7 weeks ago
  5. 3b57d79 Add Sinks section to the common threat model (#38) by Piotr P. Karwasz · 7 weeks ago
  6. eff2560 Emeritus 2026 - 2 (#39) by Jan Friedrich · 8 weeks ago
  7. fc9012f Emeritus 2026 (#37) by Jan Friedrich · 8 weeks ago
  8. b17e4d5 fixed log4net link (#36) by Jan Friedrich · 9 weeks ago
  9. c3de070 Restructure threat-model sources by controller (#32) by Piotr P. Karwasz · 9 weeks ago
  10. 5c3044a added Grzegorz Dziadkiewicz to team-list.adoc (#35) by Jan Friedrich · 10 weeks ago
  11. c1bd315 Add Ramanathan to team list (#33) by Ramanathan · 3 months ago
  12. c63061e Extend CRLF non-finding to the Syslog layout and appender (#31) by Piotr P. Karwasz · 3 months ago
  13. b257481 Add adversary model and revision section to common threat model (#30) by Piotr P. Karwasz · 3 months ago
  14. f4b1a4f Add threat model and FAQ entry about deserialization (#29) by Piotr P. Karwasz · 4 months ago
  15. c2ab131 Bump workflows to `gha/v0` branch (#28) by Piotr P. Karwasz · 4 months ago
  16. d289b04 Add CVE-2018-1285 to VDR (#25) by Jan Friedrich · 4 months ago
  17. f880062 Add CVE-2018-1285 (log4net XXE via config file) to vulnerabilities page (#24) by Jan Friedrich · 4 months ago
  18. bafaa2f Add CVEs for the 2026-04 releases (#22) by Piotr P. Karwasz · 5 months ago
  19. 5b84615 Add Security FAQ (#21) by Piotr P. Karwasz · 5 months ago
  20. 98e7ad2 Retire Log4j Scala (#20) by Volkan Yazıcı · 7 months ago
  21. 6e9a77c Remove redundant `target-path` in `deploy-site.yaml` (#19) by Volkan Yazıcı · 8 months ago
  22. c14079f Fix `deploy-site.yaml` as suggested by @Humbedooh[1] (#18) by Volkan Yazıcı · 8 months ago
  23. c4cb322 Use the `Apache` prefix consistently in prose (#17) by Volkan Yazıcı · 8 months ago
  24. bcbe66c Set `target-path` to `content` in `deploy-site.yaml` (#16) by Volkan Yazıcı · 8 months ago
  25. 45e3a7a Remove `update-stats.yaml` (#15) by Volkan Yazıcı · 8 months ago
  26. fee7e57 Migrate project to Antora (#14) by Volkan Yazıcı · 8 months ago
  27. 9e1295d docs: add CVE-2025-68161 details by Piotr P. Karwasz · 8 months ago
  28. f366483 Fix copy/paste error by Piotr P. Karwasz · 1 year ago
  29. 7ec0650 docs: add CVE-2025-54813 details by Piotr P. Karwasz · 1 year ago
  30. dddf1b9 docs: add CVE-2025-54812 details by Piotr P. Karwasz · 1 year ago
  31. 5950fea docs: use level-1 headers in _vulnerabilities.adoc by Piotr P. Karwasz · 1 year ago
  32. 08090d7 chore: relocate `vdr.xml` to `main` branch by Piotr P. Karwasz · 1 year ago
  33. c5fca4e Proofread CVE fix versions in `vdr.xml` (#7) by Piotr P. Karwasz · 1 year ago
  34. 74e7b0a feat: move `2.xml` to `vdr.xml` by Piotr P. Karwasz · 1 year ago
  35. f827651 feat: move `1.xml` to `vdr.xml` by Piotr P. Karwasz · 1 year ago
  36. b94dbbc feat: remove old BOM Exchange API links by Piotr P. Karwasz · 1 year ago
  37. 82514d0 Remove sbomlink reference, add maintenance links by Arnout Engelen · 2 years, 9 months ago
  38. d4dad41 Add `cpe` and `purl` to `log4j-core` component (apache/logging-log4j2#1707) by Volkan Yazıcı · 2 years, 10 months ago
  39. 9414b17 Fix CVE-2020-9488 IDs by Volkan Yazıcı · 2 years, 10 months ago
  40. 4ffe483 Add support for SBOM versioning by Piotr P. Karwasz · 2 years, 10 months ago
  41. bff676c Emulate current BOM Exchange API by Piotr P. Karwasz · 2 years, 10 months ago
  42. 4697418 Switch to CVSSv2 for CVE-2017-5645 (apache/logging-log4j2#1707) by Volkan Yazıcı · 2 years, 10 months ago
  43. 3737e37 Add symbolic links by Piotr P. Karwasz · 2 years, 10 months ago
  44. 3838951 Initial VDR (apache/logging-log4j2#1707) by Volkan Yazıcı · 2 years, 10 months ago
  45. ed177e2 Proofread CVE fix versions (#6) by Piotr P. Karwasz · 1 year ago
  46. fef1633 fix: mangling -> tampering by Piotr P. Karwasz · 1 year, 1 month ago
  47. 25acddf fix: improve trusted sources by Piotr P. Karwasz · 1 year, 1 month ago
  48. 615d767 fix: improve introduction by Piotr P. Karwasz · 1 year, 1 month ago
  49. f76bab7 Apply suggestions from code review by Piotr P. Karwasz · 1 year, 1 month ago
  50. 3a01bb3 Improves Threat Model by Piotr P. Karwasz · 1 year, 5 months ago
  51. d48a31e feat(blog): Add post on VEX files and the new VEX Initiative (#11) by Piotr P. Karwasz · 1 year, 1 month ago
  52. 4f08288 Fix alphabetic order by Piotr P. Karwasz · 1 year, 5 months ago
  53. f0d94e9 Add Davyd and update Sponsor links by Piotr P. Karwasz · 1 year, 5 months ago
  54. a521a2e Bump Jekyll to 4.4.1 by Piotr P. Karwasz · 1 year, 5 months ago
  55. ea24a84 Upgrade Jekyll docker file by Piotr P. Karwasz · 1 year, 5 months ago
  56. 44638b2 Fix header comments by Piotr P. Karwasz · 1 year, 5 months ago
  57. 50c7bd8 fixd broken additional statements by Christian Grobmeier · 1 year, 5 months ago
  58. b554479 Welcome Jeff! by Piotr P. Karwasz · 1 year, 5 months ago
  59. ec36b46 Remove illegal Jekyll option by Piotr P. Karwasz · 1 year, 6 months ago
  60. 011db4c Fix links in DOAP file by Piotr P. Karwasz · 1 year, 6 months ago
  61. d2f96a4 Update actions in `update-stats.yaml` by Volkan Yazıcı · 1 year, 7 months ago
  62. 5d476da Welcome Jay! by Piotr P. Karwasz · 1 year, 7 months ago
  63. dd082d4 Revert "Fix DID address" by Piotr P. Karwasz · 1 year, 9 months ago
  64. 19e0c48 Fix DID address by Piotr P. Karwasz · 1 year, 9 months ago
  65. 3f325a4 Force inclusion of `.well-known` by Piotr P. Karwasz · 1 year, 9 months ago
  66. 5132aac Add AT protocol well-known endpoint by Piotr P. Karwasz · 1 year, 9 months ago
  67. 5b3a2c9 Clarify the policy for not project-specific support inquiries (apache/logging-log4j2#3098) by Volkan Yazıcı · 1 year, 11 months ago
  68. 6c98a1a Improve release verification instructions (apache/logging-log4j2#3099) by Volkan Yazıcı · 1 year, 11 months ago
  69. 8911b7b corrected flume url by Christian Grobmeier · 1 year, 11 months ago
  70. 2f4db06 moved flume to dormant by Christian Grobmeier · 1 year, 11 months ago
  71. 618fbb2 Change the NuGet organization by Volkan Yazıcı · 2 years ago
  72. 0822cf9 Add `log4j-plugins-0.1.0.adoc` schema by Piotr P. Karwasz · 2 years ago
  73. 40ddf4d separated log4net threat model (#4) by Jan Friedrich · 2 years ago
  74. 392127b improved wording by Christian Grobmeier · 2 years, 1 month ago
  75. 231c3c3 rewrote blog post on yeswehack by Christian Grobmeier · 2 years, 1 month ago
  76. e38b514 Corrected website requirements by Christian Grobmeier · 2 years, 1 month ago
  77. 813cb84 fixed title in RSS by Christian Grobmeier · 2 years, 1 month ago
  78. 896757d fixed typo in log4net issue tracker link by Jan Friedrich · 2 years, 1 month ago
  79. dbb14e1 corrected link name by Christian Grobmeier · 2 years, 1 month ago
  80. 5b4e5e3 minor fixes by Christian Grobmeier · 2 years, 1 month ago
  81. e3b763a reschedule other blogs by Christian Grobmeier · 2 years, 1 month ago
  82. b5d26d7 added blog post for Jan by Christian Grobmeier · 2 years, 1 month ago
  83. 4f6c5d0 added draft for the new log4j bug bounty by Christian Grobmeier · 2 years, 1 month ago
  84. 2ace138 Merge branch 'main' of github.com:apache/logging-site by Christian Grobmeier · 2 years, 1 month ago
  85. 44521fc added missing links to conform with ASF guidelines by Christian Grobmeier · 2 years, 1 month ago
  86. 2a7b7af Jan Friedrich PMC Member by Piotr P. Karwasz · 2 years, 1 month ago
  87. a90f25c added license information to plugin by Christian Grobmeier · 2 years, 1 month ago
  88. 65717d9 added information on buildbot building by Christian Grobmeier · 2 years, 1 month ago
  89. 3b76ecb Merge pull request #3 from apache/youtube_embed by Christian Grobmeier · 2 years, 1 month ago
  90. 0e8db1b corrected placeholder image by Christian Grobmeier · 2 years, 1 month ago
  91. 44d9d20 added placeholder for youtube video by Christian Grobmeier · 2 years, 1 month ago
  92. 0232bf9 added pixelmator template for placeholders by Christian Grobmeier · 2 years, 1 month ago
  93. 298ab18 added support for CSS formatting by Christian Grobmeier · 2 years, 1 month ago
  94. 5ed290b draft & testing for youtube embed for jekyll by Christian Grobmeier · 2 years, 1 month ago
  95. 6f54b04 fixed typos by Christian Grobmeier · 2 years, 1 month ago
  96. b913382 added important links early by Christian Grobmeier · 2 years, 1 month ago
  97. 8bd1b45 fixed typos by Christian Grobmeier · 2 years, 1 month ago
  98. f3c9e7b removed obsolete image by Christian Grobmeier · 2 years, 1 month ago
  99. 396c2b0 Fix link to my site by Piotr P. Karwasz · 2 years, 1 month ago
  100. b7d77b5 Thank you Volkan for your service as PMC chair by Piotr P. Karwasz · 2 years, 2 months ago