Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
Community Members
Community Events
Community Groups

Sourcetree Log4j vulnerability

Dear Atlassian Support-Team,

currently there is a critical vulnerability Critical vulnerability in log4j published (CVE-2021-44228) in Java issued by BSI with alert level red.
Could you please so be kind to let us know if your application "Sourcetree", that we have in use, is affected by this vulnerability and please answer the following questions:

- Is there already a patch for this application?

- If there is no patch, is there at least a workaround to temporarily close the vulnerability?

- What is the version of the log4j java module you are using ?

- Is it possible to update to a higher version of this log4j java module (version >= 2.15) ?


Attached is the link to the vulnerability reported by BSI:

Thanks and regards
Valerian Lieder (IT)

1 answer

SourceTree is not using log4j an hence is not affected by this vulnerability.

Suggest an answer

Log in or Sign up to answer
Community showcase
Published in Sourcetree

Bug Fix: Sourcetree for Windows authentication error when updating to app password

Hello Sourcetree users!!! With the recent removal of Bitbucket Cloud account passwords for app passwords (please see our Bitbucket Cloud community post for details on why we made this change for se...

78,713 views 134 29
Read article

Atlassian Community Events