# Is the kafka-connect docker image confluentinc/cp-kafka-connect-base:5.5.0 affected by the log4j vulnerability https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228?

**URL:** <https://forum.confluent.io/t/is-the-kafka-connect-docker-image-confluentinc-cp-kafka-connect-base-5-5-0-affected-by-the-log4j-vulnerability-https-cve-mitre-org-cgi-bin-cvename-cgi-name-cve-2021-44228/3643>\
**Category:** Kafka Connect\
**Created:** [13 December 2021 14:24 UTC](https://forum.confluent.io/t/is-the-kafka-connect-docker-image-confluentinc-cp-kafka-connect-base-5-5-0-affected-by-the-log4j-vulnerability-https-cve-mitre-org-cgi-bin-cvename-cgi-name-cve-2021-44228/3643 "2021-12-13T14:24:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Marcos\_Carbonell](https://avatars.discourse-cdn.com/v4/letter/m/5fc32e/32.png) [@Marcos\_Carbonell](https://forum.confluent.io/u/Marcos_Carbonell)\
**Post date:** [13 December 2021 14:24 UTC](https://forum.confluent.io/t/is-the-kafka-connect-docker-image-confluentinc-cp-kafka-connect-base-5-5-0-affected-by-the-log4j-vulnerability-https-cve-mitre-org-cgi-bin-cvename-cgi-name-cve-2021-44228/3643/1 "2021-12-13T14:24:24Z")

</div>

Hello!

Given the information disclosed last week about the log4j vulnerability we are wondering if our kafka-connect image is affected by it too.

Docker Image: confluentinc/cp-kafka-connect-base:5.5.0

Thanks!

---

<div class="post-metadata">

**Author:** ![vnadkarni](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.confluent.io/vnadkarni/32/1839_2.png) [@vnadkarni](https://forum.confluent.io/u/vnadkarni)\
**Post date:** [14 December 2021 12:59 UTC](https://forum.confluent.io/t/is-the-kafka-connect-docker-image-confluentinc-cp-kafka-connect-base-5-5-0-affected-by-the-log4j-vulnerability-https-cve-mitre-org-cgi-bin-cvename-cgi-name-cve-2021-44228/3643/2 "2021-12-14T12:59:35Z")

</div>

Hi @Marcos_Carbonell , Check out this advisory by Confluent: [https://support.confluent.io/hc/en-us/articles/4412615410580-CVE-2021-44228-log4j2-vulnerability](https://support.confluent.io/hc/en-us/articles/4412615410580-CVE-2021-44228-log4j2-vulnerability).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex019/uploads/confluentcommunity/original/1X/c49438c90c9df282e9996fdf6971be890c71b65a.svg) [@system](https://forum.confluent.io/u/system)\
**Post date:** [21 December 2021 13:00 UTC](https://forum.confluent.io/t/is-the-kafka-connect-docker-image-confluentinc-cp-kafka-connect-base-5-5-0-affected-by-the-log4j-vulnerability-https-cve-mitre-org-cgi-bin-cvename-cgi-name-cve-2021-44228/3643/3 "2021-12-21T13:00:18Z")

</div>

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.