Mailtrap’s response to Log4j vulnerability CVE-2021-44228

Mailtrap Application

For your information, we’d like to state that Mailtrap is not impacted by this vulnerability.

Mailtrap is not using Java or Log4j.

So the service itself, as well as your data/accounts, are safe from exploiting this issue.

Hosting providers Mailtrap uses

Mailtrap team evaluated our hosting providers. 

Amazon AWS

AWS fixed the services that Mailtrap uses.

More details: https://aws.amazon.com/security/security-bulletins/AWS-2021-006/

Google Cloud

Services related to Mailtrap are not affected by Log4j 2 Vulnerability (CVE-2021-44228).

More details: https://cloud.google.com/log4j2-security-advisory

Cloudways

The issue is resolved on Dec 27th. No customer data is shared with this provider.

More details: https://status.cloudways.com/