library log4j release is bundled in jitsi and is affected by a security issue. https://github.com/jitsi/jitsi/tree/master/lib/bundle
Wrong CVE and Bug 29771 covers this.
Resolution: (none) => INVALIDStatus: NEW => RESOLVED