There were only 3 services using affected library (Log4j). cl-labelwise-controller which using dependency that includes also affected library but is not used primary for logging cl-worker which is using library but is protected from the vulnerability since external users cannot interact with the service. elasticsearch which on latest versions which we have installed should not be affected as per official announcement