log4net vulnerabilities (NuGet)

3 vulnerabilities.

• log4net NuGet Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters CVE-2026-40021 Fix available 6.3 MediumApril 10, 2026
• log4net NuGet XML External Entity attack in log4net CVE-2018-1285 Public exploitFix available EPSS 17.8% 9.8 CriticalMay 11, 2020
• log4net NuGet Apache log4net format string vulnerability causes DoS CVE-2006-0743 Fix available 5.0 MediumMarch 9, 2006