Lucee is not affected by the Log4j JNDI exploit CVE-2021-44228

that 1.2.18 is interesting, but it’s impossible to evaluate due to whitespace/reformatting changes