3 ms·

for what it's worth, the log4j vulnerability was due to some obscure feature that nobody uses. unlikely you'd even write such code.