Zero-day-exploit in log4j2 which is part of elasticsearch

Please report security issues to security@elastic.co as per the online instructions