We recently announced the release of Vulnerabilities Reports in Private StackShare. It's a single view of all the open vulnerabilities across all your repos/tech stacks. You can now use this report to understand whether or not the latest Log4j vulnerability, now named "Log4Shell", is present in any of your repos and tech stacks with a simple search.

What is Log4Shell/Log4j?

Log4J is an open source Java-based logging utility that allows you to control logging behavior and is often used as an audit logging framework. Log4j is used by thousands, possibly even millions of apps.

is a critical zero-day vulnerability that surfaced on Thursday, December 9th 2021, when it was exploited in the wild in remote-code compromises against Minecraft servers through Log4j. This vulnerability affects some of the and the list of affected web properties is only expected to grow as more discover that they are vulnerable.