Elasticsearch-oss:6.6.2 Java Security Manager enabled by default?

Welcome to our community! :smiley:

Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31 has a bunch of info on the impacted versions.