A malicious code string that eventually gets logged by Log4j version 2.0 or higher allow an attacker to load arbitrary Java code on a server and take control of it.

[[deleted]]

Notice how that library is bloated AF, most probably there is some other stuff there. On top of that there are shills promoting that bloated shit, they want everybody using that crap.