Log4j 2.16 High Severity Vulnerability (CVE-2021-45105) Discovered

This advisory describes a Denial of Service vulnerability in Log4j (CVE-2021-45105) that can cause full application crashes and is rated High (7.5); it recommends upgrading to Log4j 2.17.1 (with at least 2.16.0 to mitigate earlier RCE issues), notes there are no known mature PoCs or active exploits at the time of writing, and provides context on why multiple Log4j issues have been rapidly disclosed and how teams should prepare.