Skip to content

Commit e3166cd

Browse files
Update README.md
1 parent 96fc4f1 commit e3166cd

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ java -jar log4j-detector-2021.12.15.jar ./samples
5454

5555
# This Scanner Only Reports Hits Against The `log4j-core` Library. What About `log4j-api`?
5656

57-
Many scanners (including GitHub's own [Dependabot](/dependabot)) currently report both "`log4j-core`" and "`log4j-api`" libraries as vulnerable. These scanners are incorrect. There is currently no existing version of the "`log4j-api`" library that can be exploited by any of these vulnerabilities.
57+
Many scanners (including GitHub's own [Dependabot](https://github.com/dependabot)) currently report both "`log4j-core`" and "`log4j-api`" libraries as vulnerable. These scanners are incorrect. There is currently no existing version of the "`log4j-api`" library that can be exploited by any of these vulnerabilities.
5858

5959
At MergeBase we pride ourselves on our scan accuracy. You're already busy enough patching all your systems to upgrade `log4j-core`. We don't want you to waste your time with false positives. That's why we don't report any hits against `log4j-api`.
6060

0 commit comments

Comments
 (0)