> For the complete documentation index, see [llms.txt](https://docs.wproofreader.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.wproofreader.com/v6.11.1/faq/technical/security/does-cve-2021-44228-log4j-2-vulnerability-affect-webspellchecker-products.md).

# Does CVE-2021-44228 (Log4j 2 vulnerability) affect WebSpellChecker products?

The short answer is NO.

We confirm that [CVE-2021-44228](https://nvd.nist.gov/vuln/detail/CVE-2021-44228) (Log4j2 vulnerability) issue **doesn't affect the WebSpellChecker software**. Neither the WebSpellChecker core nor its libraries (like LanguageTool) use this utility in the newer product versions. Thus, no actions are required in regards to the WebSpellChecker software.

There are older versions of the WebSpellChecker package that were shipped with the special **Java servlet** (spellcheck.war or wscservice.war) component that used older versions of Log4j utility (specifically version 1.2.17). That version is not affected.