There are CVEs but no stable version with patchs.
There is a 1.8.0-beta2 which is not perfect (2018-03-21) and a 1.8.0-beta3 not published.
A lot of softwares use slf4j 1.7.25 but not with CVEs patchs because no new stable version, why?
Can you release a stable version with CVEs patches?
Soon one year after...