Is slf4j affected by log4shell?

Question

Everyone is looking at log4j. Is the slf4j framework actually also affected by log4shell? I haven't found anything about it yet.

Answer 1

please read their official statement http://slf4j.org/log4shell.html

in short: SLF4J is just a logging API, if your actual binding uses an affected log4j version then you're "in".