https://readme.security/why-log4j-wont-go-away-5-key-questions-on-the-bombshell-vulnerability-2810ac3f91f6