http://www.perlmonks.org?node_id=11139871


in reply to Re: Log4Shell and Log::Log4perl
in thread Log4Shell and Log::Log4perl

I don't know what you're getting at exactly...

I wanted an explanation as to why it is not vulnerable. What you said is a fine explanation: i.e., 1) it implements v1 API of Log4j (and not v2) and 2) it is pure Perl and does not call Log4j's java jars. Fine, thanks.