cisagov/log4j-affected-db resource

Health v2 · maintenance only

Flags: no_releases archived

Adoption not part of the score

1123 stars · 275 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A CISA-maintained, community-sourced list of software affected by the Log4j vulnerability (CVE-2021-44228, Log4Shell), along with official mitigation guidance and links. It serves as a reference database for identifying and remediating Log4j exposure across products.

Use cases

• check if a vendor product is affected by log4shell
• find software impacted by CVE-2021-44228
• get official CISA guidance on mitigating log4j
• build an inventory of log4j-affected software for incident response
• verify which applications need log4j upgrades

When to choose

• you need a community-sourced reference of Log4j-affected products during incident response
• you want authoritative CISA mitigation guidance and alerts in one place
• you are auditing your software supply chain for Log4j exposure

When to avoid

• you need automated scanning or detection of Log4j in your own codebase
• you need up-to-the-minute vulnerability data beyond the Log4j incident
• you require machine-readable SBOM tooling rather than a curated list

Facets

dataset · maturity maintenance

security vulnerability-scanning developer-tools security developer-tools awesome-lists cross-platform log4j log4shell cve-2021-44228 cisa vulnerability-database supply-chain-security

Member repositories

For agents

markdown · JSON · MCP: product_card(name="cisagov/log4j-affected-db")