# Elastic image 8.5.3 Vulnerabilities **URL:** \ **Category:** Elasticsearch\ **Tags:** docker\ **Created:** [January 30, 2023, 5:38pm UTC](https://discuss.elastic.co/t/elastic-image-8-5-3-vulnerabilities/324259 "2023-01-30T17:38:29Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![rajn27](https://avatars.discourse-cdn.com/v4/letter/r/db5fbb/32.png) [@rajn27](https://discuss.elastic.co/u/rajn27)\ **Post date:** [January 30, 2023, 5:38pm UTC](https://discuss.elastic.co/t/elastic-image-8-5-3-vulnerabilities/324259/1 "2023-01-30T17:38:29Z")
We are downloading elastic images of docker hub. Elastic image is showing log4j vulnerabilities in 8.5.3 and 8.6 the images released in Dec 2022 and Jan2023. These vulnerabilities were addressed a year ago in dec 2021. Can you please confirm these are false positives. We use sysdig scanner Severity CriticalReported by[National Vulnerability Database](https://nvd.nist.gov/vuln/detail/CVE-2021-44228) Package org.apache.logging.log4j:log4j-slf4j-impl - 2.12.4JAVA In Use Package Path /usr/share/elasticsearch/modules/apm/elastic-apm-agent-1.33.0.jar ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 30, 2023, 9:35pm UTC](https://discuss.elastic.co/t/elastic-image-8-5-3-vulnerabilities/324259/2 "2023-01-30T21:35:33Z")
Welcome to our community! 😃 As per [Security issues | Elastic](https://elastic.co/community/security), please email [security@elastic.co](mailto:security@elastic.co) for questions regarding issues. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 27, 2023, 9:36pm UTC](https://discuss.elastic.co/t/elastic-image-8-5-3-vulnerabilities/324259/3 "2023-02-27T21:36:32Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.