CVE-2021-44228 – https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4422...

Also linked from https://logging.apache.org/log4j/2.x/security.html