The US Cybersecurity and Infrastructure Security Agency added the Log4j vulnerability to its Known Exploited Vulnerabilities Catalog.
Article Link: CISA orders federal civilian agencies to patch Log4j vulnerability and 12 others by December 24 | ZDNet