https://orbitbrain.com/blog/critical-apache-commons-text-flaw-compared-to-log4shell-but-not-as-widespread/