Log4j flaw hunt shows how complicated the software supply chain really is

A new analysis shows why the Log4j flaw for Java web applications will haunt tech people for years.