Log4j issue

DS-5 IED has Log4j security vulnerability? if yes, how to fix it?