Is Mosquitto vulnerable to log4J exploit?

Mosquitto MQTT Broker
1

Hi Treasured colleagues

Is there any reason to think Moqsuitto would be affected by the log4shell exploit?
Tech Solvency: The Story So Far: CVE-2021-44228 (Log4Shell log4j vulnerability).

I don’t see any Java in the mosquitto github repo but I still want to check with the experts. Better to be safe than sorry with our critical services.

2

Hi,

No, Mosquitto makes no use of Java whatsoever so it is unaffected.

Regards,

Roger

3

Thanks so much for your quick reply. Appreciate it.