Hi shuiboye -
Could you post the contents of the emails with the Sling team (or a link to the mailing list, if it was on-list)? That might help move this ticket along.
(I'm not a logback dev, this got flagged by our vulnerability scanner)