There was recently found a major exploit in Log4J with what RCE and other stuff just like crashing is probably possible. It also affects the clients.

The plugin blocks this server-, and clientside and logs the attempt to the console. Protecting the players and the server by blocking outgoing chat packets which contains the vulnerability. It also removes logging of the Log4J vulnerability serverside entirely.

Requires ProtocolLib