Wavefront proxy version 10.10 and earlier is impacted by a Log4j vulnerability — CVE-2021-44228. VMware Security Advisory (VMSA): CVE-2021-44228 – VMSA-2021-0028 discusses this vulnerability and its impact on VMware products.

Wavefront proxy version 10.11 and later use a version of Log4j that addresses this vulnerability.

Wavefront is a high-performance streaming analytics platform for monitoring and optimizing your environment and applications.

The Wavefront Proxy is a light-weight Java application that you send your metrics, histograms, and trace data to. It handles batching and transmission of your data to the Wavefront service in a secure, fast, and reliable manner.

• Java 8, 9, 10 or 11 (11 recommended)
• Maven

• pkg: Build and runtime packaging for the Wavefront proxy.
• proxy: Wavefront Proxy source code.

Please refer to the project page for further details.

git clone https://github.com/wavefronthq/wavefront-proxy
cd wavefront-proxy
mvn -f proxy clean install -DskipTests

Public contributions are always welcome. Please feel free to report issues or submit pull requests.