Log4J vulnerability

Log4J is a Java Library, not a JavaScript library

It will not be used by any node-red apps