Four years after Log4Shell, 14% of affected artifacts are still being downloaded in vulnerable versions. OpenSSF's Chief ...