Over on POI and in other libraries throughout the Java land, there's a problem with log4j2 that may or may not affect us.
The POI discussion is here: https://lists.apache.org/thread/bkb5y7mj3v3sld9sbk4r6jgmccs4k61j The log4j2 issues are here: https://github.com/apache/logging-log4j2/issues/3143 https://github.com/apache/logging-log4j2/issues/3196 Will this be a problem for us? Should we downgrade? Best, Tim
