There are CVEs but no stable version with patchs.

There is a 1.8.0-beta2 which is not perfect (2018-03-21) and a 1.8.0-beta3 not published.

-> http://mailman.qos.ch/pipermail/slf4j-user/2019-February/001700.html
-> http://mailman.qos.ch/pipermail/slf4j-dev/2019-February/005115.html

A lot of softwares use slf4j 1.7.25 but not with CVEs patchs because no new stable version, why?

Can you release a stable version with CVEs patches?

Soon one year after...