Log4j is part of Java Application Servers. GURU do not use Java to serve your website.

Log4j exists in some ancillary applications which support other GURU services, such as search for email or Elasticsearch for application search indexing. These services are not accessible by unauthenticated users and are only interfaced by either internal clients or your website applications.

GURU apply all vendor-issued package updates automatically, so where a vendor issues an update to a package such as Log4j, it is applied.