# Are there Log4J Vulnerabilities in Keycloak?

**URL:** https://forum.keycloak.org/t/are-there-log4j-vulnerabilities-in-keycloak/12540
**Category:** Getting advice
**Created:** [December 10, 2021, 4:16pm UTC](https://forum.keycloak.org/t/are-there-log4j-vulnerabilities-in-keycloak/12540 "2021-12-10T16:16:36Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![melancholia](https://avatars.discourse-cdn.com/v4/letter/m/dbc845/32.png) [@melancholia](https://forum.keycloak.org/u/melancholia)
#### Post date: [December 10, 2021, 4:16pm UTC](https://forum.keycloak.org/t/are-there-log4j-vulnerabilities-in-keycloak/12540/1 "2021-12-10T16:16:36Z")

</div>

Woke up this morning. My inbox was flooded by log4j vulnerability queries:[https://blog.cloudflare.com/cve-2021-44228-log4j-rce-0-day-mitigation/](https://blog.cloudflare.com/cve-2021-44228-log4j-rce-0-day-mitigation/)

Does it impact Keycloak in anyway? Which versions?

Thanks you.

---

<div class="post-metadata">

### Author: ![dasniko](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dasniko/32/2969_2.png) [@dasniko](https://forum.keycloak.org/u/dasniko)
#### Post date: [December 10, 2021, 4:34pm UTC](https://forum.keycloak.org/t/are-there-log4j-vulnerabilities-in-keycloak/12540/2 "2021-12-10T16:34:20Z")

</div>

> **[Keycloak is NOT affected by the Log4j remote code injection vulnerability...](https://github.com/keycloak/keycloak/discussions/9078)**
>
> Keycloak does not include the Log4j libraries that are affected by the recent remote code injection vulnerability, and for this reason is NOT affected by this vulnerability. Even though the Log4j A...