Apache Chainsaw vulnerabilities

• apache chainsaw, log4j, apache software foundation log4j 1.x +24 more +26 more A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• apache chainsaw, log4j, qos reload4j +2 more Java deserialization in Chainsaw CVE-2020-9493 Fix available 9.8 CriticalJune 16, 2021