Listen to one who suffered from log4shell as a free time maintainer (and who got blamed by big companies not paying anything to support it, just to remind everybody about this too).
Wow, #log4shell memories today with the #PHP security disclosure. Behind #Java servers are usually a lot more people than behind PHP servers. I know what that s*** means, so stay calm, everyone, and update. Or take it offline while you fix it. It costs money, but it may be worth it. Stay safe.