https://bugzilla.redhat.com/show_bug.cgi?id=2030945
--- Comment #14 from Mikolaj Izdebski mizdebsk@redhat.com --- There are no plans to patch log4j package in CentOS Stream 9. It was removed in June on my request: https://issues.redhat.com/browse/CS-626