Datomic and Log4j CVE-2021-44228. No vulnerability in Datomic

Datomic does not use log4j. Datomic does not have dependency on log4j. Datomic includes a bridge log4j-over-slf4j which is only included for customers who use log4j. Therefore there is no Datomic level vulnerability unless you introduced log4j in your app.

For more information regarding this vulnerability, please see: http://www.slf4j.org/log4shell.html

2 Likes