Is there any way you could upgrade to the very latest Log4J v2 or switch to Logback? Security software scans is flagging this plugin due to usage of Log4j v1. Or maybe I could create a PR if you would be amenable to that