[DepShield] Usage of org.apache.logging.log4j:log4j-core:2.7 results in vulnerability to [CVE-2017-5645] Deserialization of Untrusted Data

[sonatype-depshield]

This application's usage of org.apache.logging.log4j:log4j-core:2.7 causes a vulnerability to [CVE-2017-5645] Deserialization of Untrusted Data with a CVSS score of 9.8. Details about the vulnerability are available on the OSS Index page for [CVE-2017-5645] Deserialization of Untrusted Data.

_{This is an automated GitHub Issue created by Sonatype DepShield. GitHub Apps, including DepShield, can be managed from the Developer settings of the repository administrators.}

[sonatype-depshield]

Thank you for being an early adopter of DepShield. In an effort provide a
more component-centric view of vulnerabilities we are consolidating your
issue(s), moving them to a new format, and closing this issue. You can
find the new issue here: #8