Patching poms for log4j

Spencer Suttonrequested to merge
log4j-vuln-fix into master

Part of the #19 (closed) series

Edited by David Diederich

Merge request reports