title: What is the easiest way in Maven pom.xml to upgrade all usages of log4j2 to 2.15.0, including dependencies using log4j2? See CVE-2021-44228
body: <p>A severe security vulnerability was found for log4j2 &lt;= 2.14.1 (see <a href="https://nvd.nist.gov/vuln/detail/CVE-2021-44228" rel="nofollow noreferrer">https://nvd.nist.gov/vuln/detail/CVE-2021-44228</a>). How can I update the pom.xml of a Spring Boot application to make sure that all (recursive) usages of log4j2 use version 2.15.0?</p>