Apache “Commons Configuration” patches Log4Shell-style bug – what you need to know Posted 3 years ago by Paul Ducklin It's a bit like Log4J, but for configuration files, not for logging.