This past Thursday, December 9th, a 0-day exploit in the Java logging library, log4j (version 2) was discovered. This vulnerability results in Remote Code Execution by logging a certain string.

It then provides examples of non-compliant and compliant code. "These detectors work with Java and Python code and, for Java, are not limited to the Log4j library," AWS notes.