See https://logging.apache.org/log4j/2.x/security.html It graduated to be tracked on its own.
Activity
TG1999 commentedon Feb 6, 2024
It's in CycloneDX json format https://logging.apache.org/log4j/2.x/security.html#vulnerabilities
Add Apache Log4j security advisories importer aboutcode-org#586