This post is about the Log4j vulnerability recorded at
https://cve.mitre.org/cgi-bin/cvename.c ... 2021-45046
You should determine whether your application is using log4j, and if so, address the documented risk.
By way of background, in v3 of Nov 2013, docx4j switched from log4j to slf4j. This means that for docx4j 3.0 onwards, the choice of logging implementation has been up to you: you could choose to use log4j, or eg logback ...

Global announcements