December 14, 2021 at 3:45 AMPadlet does not use log4j in the software we write. That being said, as log4j is commonly used, we are in the midst of investigating software that we integrate with to determine if we are subject to the vulnerability and if so, evaluate impact and act to patch the affected software.
In the meantime, we are systematically going through our list of subprocessors to ascertain if they too have been impacted by the log4j vulnerability.
We will publish updates on our status page as soon as we have more clarity.