Is Columbus susceptible to the Log4j vulnerability?