CVE-2020-9493: Apache Chainsaw

Critical severity, CVSS 9.8. EPSS: 4.6% chance of exploitation in the next 30 days.

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution.

Affected products

• Apache Chainsaw: before 2.1.0 (fixed in 2.1.0)
• Apache LOG4J: from 1.2, before 2.0 (fixed in 2.0)
• Qos RELOAD4J: before 1.2.18.1 (fixed in 1.2.18.1)

Published 2021-06-16. Last modified 2026-10-07.