Log4j vulnerability

[kevinferns8]

Hello guys, Any Idea if ANTLR 4 affected by any of the recent log4j security vulnerabilities. Seen an issue saying antl4 uses log4j(#3428)

[parrt]

I don't remember us using it anywhere but maybe one of the libraries we use for building has it. Certainly is not in the runtime. :)