Log4j 2.x vulnerability - UPDATED