---
title: "Open Foris Collect and log4j"
url: "https://openforis.support/questions/3918/open-foris-collect-and-log4j"
tags: ["collect"]
status: "answered"
score: 0
answer_count: 1
asked: "2024-03-14T08:42:33"
last_activity: "2024-03-14T10:19:57"
source: "Open Foris Support - Q&A Forum"
license: "Copyright Open Foris, 2026. Some rights reserved under creative commons license."
---

# Open Foris Collect and log4j

Asked by NLPA on 2024-03-14

Dear Open Foris Team,

as far as I have seen, Open Foris Collect uses the Java library log4j. At the end of 2021, a serious security vulnerability was discovered in the Java library log4j. Has this security vulnerability been closed in the current version 4.0.89 for Windows or does this problem still exist?

With kind regards


## Answer (score 1, by Stefano (OF) on 2024-03-14)

Link: https://openforis.support/questions/3918/open-foris-collect-and-log4j/3919

Dear user,  
There were vulnerabilities in versions of log4j previous to 2.17.0 (18/12/2021) but they were fixed alredy in version 2.17.1 and Collect 4.0.89 uses version 2.20.0 (not the latest one, but it's from 21/02/2023), so it's not affected by this problem.  
Many thanks for having raised this question and put an alert on that, it's always good to have a double check on these kind of issues.  
Many thanks,  
Open Foris Team