[GHSA-w35j-pv5h-q9q9] Apache Log4j's JsonTemplateLayout produces invalid JSON output when log events contain non-finite floating-point values

[ppkarwasz]

Updates

• Affected products
• Description
• Summary

Comments

• Fixed formatting, based on the HTML version of the advisory: https://cveawg.mitre.org/api/cve/CVE-2026-34481
• Fixed affected range: in the 3.x branch versions lessThanOrEqual 3.0.0-beta3 are affected.

[Copilot]

Pull request overview

Updates the OSV advisory for GHSA-w35j-pv5h-q9q9 / CVE-2026-34481 to improve the written description and correct the affected version range representation for the 3.x pre-release line.

Changes:

• Refines the advisory summary and details text (formatting and clarity).
• Corrects the 3.x affected range by changing the event from fixed: 3.0.0-beta3 to last_affected: 3.0.0-beta3.
• Updates the advisory modified timestamp.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

modified was updated, but database_specific.github_reviewed_at remains 2026-04-10T21:16:54Z, which is now earlier than the advisory's modified timestamp (2026-04-10T21:16:55Z). Since github_reviewed_at is defined as the timestamp of the last curator review, it should be updated to be >= modified (typically matching it) to avoid inconsistent metadata.