# Elasticsearch 5.6.6 security vulnerability log4j

**URL:** https://discuss.elastic.co/t/elasticsearch-5-6-6-security-vulnerability-log4j/291821
**Category:** Elasticsearch
**Created:** [December 14, 2021, 3:01pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-6-security-vulnerability-log4j/291821 "2021-12-14T15:01:08Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![William1](https://avatars.discourse-cdn.com/v4/letter/w/b4bc9f/32.png) [@William1](https://discuss.elastic.co/u/William1)
#### Post date: [December 14, 2021, 3:01pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-6-security-vulnerability-log4j/291821/1 "2021-12-14T15:01:08Z")

</div>

Hello all,  
I would like to ask if we can keep our current version 5.6.6 and setting the JVM option, in order to mitigate this vulnerability? This since upgrading is not possible.  
Thanks for your help!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 11, 2022, 3:01pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-6-security-vulnerability-log4j/291821/2 "2022-01-11T15:01:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.