# log4j-cve-2021-44228 Exposure?

**URL:** <https://forums.balena.io/t/log4j-cve-2021-44228-exposure/350544>\
**Category:** Product support\
**Created:** [December 14, 2021, 6:06pm UTC](https://forums.balena.io/t/log4j-cve-2021-44228-exposure/350544 "2021-12-14T18:06:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bkosniknh](https://avatars.discourse-cdn.com/v4/letter/b/45deac/32.png) [@bkosniknh](https://forums.balena.io/u/bkosniknh)\
**Post date:** [December 14, 2021, 6:06pm UTC](https://forums.balena.io/t/log4j-cve-2021-44228-exposure/350544/1 "2021-12-14T18:06:03Z")

</div>

Hello,

Im being asked by clients to get confirmation that none of our vendors have exposure the Log4J zero day vulnerability. Ive confirmed that my containers are safe and dont leverage the library, can you confirm that the hostOS, Supervisor and Web App does or does not have a vulnerability and if it does, it has or will be addressed.

---

<div class="post-metadata">

**Author:** ![Lizzieepton](https://sea2.discourse-cdn.com/balena/user_avatar/forums.balena.io/lizzieepton/32/5393_2.png) [@Lizzieepton](https://forums.balena.io/u/Lizzieepton)\
**Post date:** [December 15, 2021, 4:14pm UTC](https://forums.balena.io/t/log4j-cve-2021-44228-exposure/350544/2 "2021-12-15T16:14:01Z")

</div>

Hi @bkosniknh Yes we can confirm, none of our code is impacted (cloud and devices). We do however use other service providers such as AWS, so their exposure is out of our hands. AWS seems to have already implemented mitigations for these vulnerabilities in their systems.

---

<div class="post-metadata">

**Author:** ![bkosniknh](https://avatars.discourse-cdn.com/v4/letter/b/45deac/32.png) [@bkosniknh](https://forums.balena.io/u/bkosniknh)\
**Post date:** [December 15, 2021, 7:27pm UTC](https://forums.balena.io/t/log4j-cve-2021-44228-exposure/350544/4 "2021-12-15T19:27:33Z")

</div>

Thank you so much, I appreciate you getting back to me.