Over 40% of Log4j Downloads Are Vulnerable Versions of the Software The data point is a reminder of why fixing the widespread vulnerability will take a long time.