I didn't see a section for Security related topics, and apologize if this is the wrong area to post this question.
Is log4j used in Octoprint or any plugins?
https://www.cisa.gov/news/2021/12/11/statement-cisa-director-easterly-log4j-vulnerability
https://nvd.nist.gov/vuln/detail/CVE-2021-44228
No, OctoPrint is written in Python, Log4j is a Java logging framework and everything is still secure.
@foosel put a message in discord announcements earlier - might be worth doing the same on the forum as well, since I don't see questions like this being the last.
done (some text so I can post this) 
