Unity 3.7.1 bundling an updated log4j library with a fix for the CVE-2021-44228 vulnerability was published today.

If you can’t update immediately follow the instructions from the previous post Log4j vulnerability.