Lightstreamer affected by the Log4j zero-day vulnerability?

tomas.walek-ext@sgcib.com

Dear all,
can you kindly confirm that Lightstreamer is not affected by the recent log4j zero-day vulnerabilty and that no patching is necessary? As far as I have seen Lightstreamer is using Logback instead of log4j, which means also to my understanding that no code is shared with Log4j version 2.x, which is affected by this vulnerability.
Thank you in advance.

Alessandro Alinone

Hi Tomas,
You are right. Lightstreamer uses log4back instead of log4j and is not vulnerable to Log4Shell exploit.
We will send you an email with more details in a while.