# Security Update: Log4j Security Vulnerability

**URL:** <https://forum.mattermost.com/t/security-update-log4j-security-vulnerability/12695>\
**Category:** Announcements\
**Created:** [December 14, 2021, 4:55pm UTC](https://forum.mattermost.com/t/security-update-log4j-security-vulnerability/12695 "2021-12-14T16:55:44Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![DSchalla](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/dschalla/32/2603_2.png) [@DSchalla](https://forum.mattermost.com/u/DSchalla)\
**Post date:** [December 14, 2021, 4:55pm UTC](https://forum.mattermost.com/t/security-update-log4j-security-vulnerability/12695/1 "2021-12-14T16:55:44Z")

</div>

Mattermost would like to share a quick update that our services and products are NOT affected by the Log4j security vulnerability (also now known as “Log4Shell” or CVE-2021-44228).

Log4j is used in many forms of open-source software, however, none of the Mattermost code, products or services are impacted.

Although the Mattermost Security Team does not publicly confirm when our services or products are not affected by any new vulnerabilities, we are making an exception due to the widespread exposures and criticality of this instance. For additional information regarding our vulnerability processes feel free to review our [Responsible Disclosure Policy](https://mattermost.com/security-vulnerability-report/) and [Bug Bounty Program](https://hackerone.com/mattermost).

We thank you for your time, and please reach out to [security@mattermost.com](mailto:security@mattermost.com) with any questions.