From bd5cd0347b2f8b89c174f3b5b1419ab19d1abcca Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 27 Apr 2026 18:06:08 +0000
Subject: [PATCH] fix: upgrade org.apache.logging.log4j:log4j-core from 2.7 to
 2.25.4

Snyk has created this PR to upgrade org.apache.logging.log4j:log4j-core from 2.7 to 2.25.4.

See this package in maven:
org.apache.logging.log4j:log4j-core

See this project in Snyk:
https://app.snyk.io/org/gwunleong.lee/project/6d8f8930-2793-4d67-b2df-cc34344f7a1d?utm_source=github&utm_medium=referral&page=upgrade-pr
---
 todolist-goof/todolist-web-struts/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/todolist-goof/todolist-web-struts/pom.xml b/todolist-goof/todolist-web-struts/pom.xml
index e58874f827..64c410714a 100644
--- a/todolist-goof/todolist-web-struts/pom.xml
+++ b/todolist-goof/todolist-web-struts/pom.xml
@@ -27,7 +27,7 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.7</version>
+            <version>2.25.4</version>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>