Hello
Pax Logging 1.11.6 and 2.0.3 were released with single upgrade of log4j2 libraries (and shaded classes) to version 2.13.2 due to CVE-2020-9488 (https://issues.apache.org/jira/browse/LOG4J2-2819).