title: Hibernate Jboss logging and Log4j CVE Vulnerability
body: <p>I'm working on a Spring boot project, and i'm checking if it's concerned by this vulnerabilty,<br>
  I don't have any Log4j core dependency,<br>
  But i'm using hibernate core 5.0.12 that use jboss logging 3.3.1<br>
  And when i checked the jboss logging dependency, i see the log4j:<br>
  &lt;version.org.apache.log4j&gt;1.2.16&lt;/version.org.apache.log4j&gt;<br>
  &lt;version.org.apache.logging.log4j&gt;2.0&lt;/version.org.apache.logging.log4j&gt;<br>
  And i'm not using the jboss loggin for my logs, i'm using Slf4j,<br>
  So, shall i exlude this jboss logging dependency from my project ?<br></p>
  <p>thank you in advance</p>