Apache “Commons Configuration” patches Log4Shell-style bug – what you need to know

It’s a bit like Log4J, but for configuration files, not for logging.