the jrs-rest-java-client library uses log4j 1.2.17, EOL since 2015. Maybe upgrade to 2.17.1
jrs-rest-java-client has log4j 1.2.17 in its pom.xml. https://github.com/Jaspersoft/jrs-rest-java-client/blob/master/pom.xml That version when End-of-Life in 2015, and it has CVE's that Apache isn't going to fix. With all the press about the Log4S...