Log4j’s security patch, which was meant to fix its flaws, also carries a critical vulnerability. Log4j's security patch, which was meant to fix its flaws that could potentially spread malware, turns out to be carrying a critical vulnerability as well.