In the fallout following the release of CVE-2021-44228, we've had numerous queries asking whether Thinkst Canary is affected by this vulnerability.
The answer is a straightforward No. We don't ship any Java code, so neither the Thinkst Canary device nor the Console uses the Apache Log4j library.