By now, most everyone in the tech world has heard about the Apache Log4j library vulnerability. While we are experts about all things GIS, we won’t pretend to have all the answers to this problem. However, in the essence of transparency and helping to spread the word, we want to share some general takeaways on what we know and some helpful links for more information.