Due to a secondary security notice from apache we have compiled against log4j version 2.16.0.

log4j update notices: https://logging.apache.org/log4j/2.x/changes-report.html#a2.16.0

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45046