From 0d1c13d1d3af59ca3ea3d8f5ed454a86efd94cbc Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 12 Feb 2026 16:51:33 +0000
Subject: [PATCH] fix: upgrade org.apache.logging.log4j:log4j-core from 2.10.0
 to 2.25.3

Snyk has created this PR to upgrade org.apache.logging.log4j:log4j-core from 2.10.0 to 2.25.3.

See this package in maven:
org.apache.logging.log4j:log4j-core

See this project in Snyk:
https://app.snyk.io/org/t438879/project/a828c819-90ef-4d56-abc1-5c6ca125f6bb?utm_source=github&utm_medium=referral&page=upgrade-pr
---
 mall-backend/backend-watchclient/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mall-backend/backend-watchclient/pom.xml b/mall-backend/backend-watchclient/pom.xml
index dd345c77..9705576c 100644
--- a/mall-backend/backend-watchclient/pom.xml
+++ b/mall-backend/backend-watchclient/pom.xml
@@ -111,7 +111,7 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.10.0</version>
+            <version>2.25.3</version>
             <scope>compile</scope>
         </dependency>