Back to mods
Log4jExploitPatch project artwork

CurseForge · Minecraft mod

Log4jExploitPatch

NukeJndiLookupFromLog4j - Prevents a major vulnerability from being abused

Choose a version Pick your version below, then grab the matching file.

Quick answer

Which Log4jExploitPatch release matches 1.5.0 Forge?

Updated 2 years ago
Best match for your filters nukejndilookupfromlog4j-1.0.0.jar
Game version 1.7.6, 1.9.1, 1.9.3
Loader Forge

Log4jExploitPatch nukejndilookupfromlog4j-1.0.0.jar targets 1.7.6, 1.9.1, 1.9.3 with Forge. The project page does not say whether this file belongs on the client, dedicated server, or both. No extra mods listed for this file.

Where it goes

Is Log4jExploitPatch required on the client, server, or both?

The project page does not say whether this file belongs on the client, dedicated server, or both.

Client Source doesn’t say
Dedicated server Source doesn’t say
Loader for this release Forge
Required install it here Optional supported, not mandatory Not supported do not install here Source doesn’t say do not assume

The source does not explicitly classify this release as client-only or server-only.

What else does Log4jExploitPatch nukejndilookupfromlog4j-1.0.0.jar need?

nukejndilookupfromlog4j-1.0.0.jar on 1.5.0 Forge. Every mod below is checked against that same setup.

No extra mods listed for this file

This file does not list any required mods. Do not add a library just because a different file uses it.

This file does not list any required or optional mods.

Before you install it

Add Log4jExploitPatch without breaking your instance.

Built for Log4jExploitPatch nukejndilookupfromlog4j-1.0.0.jar on 1.5.0 Forge. Pick another file and the loader, install side or required mods may change.

  1. 01

    Stick to this file

    Use nukejndilookupfromlog4j-1.0.0.jar. It targets 1.7.6, 1.9.1, 1.9.3 with Forge; another release may have different loader, side or dependency requirements.

  2. 02

    Bring the mods it needs

    This file does not list any required mods. Do not add a library just because a different file uses it.

  3. 03

    Put it on the correct side

    The project page does not say whether this file belongs on the client, dedicated server, or both.

  4. 04

    Pick the file you checked

    Use the “Get this file” button beside nukejndilookupfromlog4j-1.0.0.jar. It opens that exact file at the source.

About this project

What does Log4jExploitPatch add?

CAN BE INSTALLED ON THE SERVER-SIDE ONLY

This mod fixes a major vulnerability introduced by log4j through its JndiLookup, more information here

By installing this mod, you'll prevent this particular vulnerability from being abused. This mod is targeted towards any Minecraft versions below 1.13 at the moment.

Project description from CurseForge.

Pick your setup

Log4jExploitPatch by Minecraft version and loader

Choose the version and loader you play, then open the matching release.

48 available setups

Showing the newest 12 of 48 game versions. Older files are in the list below.

Check the dependencies, then try the file in a copied instance before changing a world you care about.

Recent files

Log4jExploitPatch versions and loaders

1 of 1 releases match

Looking for an older file? The official CurseForge project page is in Resources.