JMSAppender used on Logstash 2.3.4 and Elasticsearch 2.3.4

2.X is EOL and no longer supported. Please upgrade as a matter of urgency.

Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31 has more info.