[SECURITY] RCE 0-day in log4j - Conclusion: Lombok itself not affected #3063
Description
Describe the bug
In log4j library was discovered a 0-day exploit that results in Remote Code Execution (RCE) by logging a certain string. The vulnerability impacts Apache Log4j 2 versions 2.0 to 2.14.1.
Additional context
https://www.randori.com/blog/cve-2021-44228/
Expected behavior
Immediate update of log4j library to the latest version (right now it is 2.15.0 according to the changelog)