Comment by Neikius

Much worse. Log4j was hard to exploit and worked only in specific condions. And it was bad. This is something else.