Comment Comment by EdwardDiego Kafka is still on log4j1. It's only vulnerable if you're using a JMSAppender. parent EdwardDiego 4 years ago