Application Insights Java SDK 2.6.4
Updates applicationinsights-logging-log4j2
artifact to not pull in Log4j 2 dependency on its own. Users should already be bringing their own version of Log4j 2 (and should be upgrading that version or applying the mitigation steps from CVE-2021-44228). The update ensures that users have to bring their own version of Log4j 2 (#2002).
Please see #2008 for any other questions about Log4j 2.