Vulnerabilities in Apache Log4j 2.9.1