July 08, 2022 Apache “Commons Configuration” patches Log4Shell-style bug – what you need to know It's a bit like Log4J, but for configuration files, not for logging. Naked Security
