Apache Software Foundation Apache Log4j 1 to Log4j 2 bridge

• CVE-2026-34479 Medium 6.9 Apache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden characters 0.5%