We are pleased to announce the release of Nexus Repository 3.37.1 and Nexus Repository 2.14.21!
What’s New and Noteworthy in Nexus Repository?
These releases upgrade Nexus Repository 2 and 3 to the latest version of logback.
This is a precautionary release, and there is no known exploit of Repository via logback at this time. Nexus Repository is also not vulnerable to the recent log4shell vulnerability. For more information, please see the Sonatype Product Log4j Vulnerability Status page.