# Vulnerability in Log4j used by VERDI

**URL:** <https://forum.cmascenter.org/t/vulnerability-in-log4j-used-by-verdi/2882>\
**Category:** VERDI\
**Created:** [December 14, 2021, 7:41pm UTC](https://forum.cmascenter.org/t/vulnerability-in-log4j-used-by-verdi/2882 "2021-12-14T19:41:45Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![lizadams](https://avatars.discourse-cdn.com/v4/letter/l/49beb7/32.png) [@lizadams](https://forum.cmascenter.org/u/lizadams)\
**Post date:** [December 17, 2021, 4:13pm UTC](https://forum.cmascenter.org/t/vulnerability-in-log4j-used-by-verdi/2882/3 "2021-12-17T16:13:08Z")

</div>

VERDI has been updated to use lob4j 2.16 to eliminate the security vulnerability.  
Please see the release announcement and remove older versions of VERDI and replace with VERDI v2.1.1

> [@VERDI\_2.1.1 Release (December 2021)](https://forum.cmascenter.org/t/verdi-2-1-1-release-december-2021/2912):
>
> Important Vulnerability Update for VERDI 2.1.1 (December 2021) VERDI 2.1.1 release to patch and upgrade VERDI with log4j 2.0.16 to remove message lookup capability to eliminate the log4shell security vulnerability: [Log4j – Apache Log4j Security Vulnerabilities](https://logging.apache.org/log4j/2.x/security.html) REPLACE ALL PRIOR versions of VERDI with this patched release version. Additional bug fixes with this patched version. Fixed Polar Stereographic Projection Issue for Tile Plot Display of WRF Files. [https://www.cmascenter.org/verdi/](https://www.cmascenter.org/verdi/) …

Thank you,  
Liz

---

_[View the full topic](https://forum.cmascenter.org/t/vulnerability-in-log4j-used-by-verdi/2882)._