fix(sec): upgrade org.apache.logging.log4j:log4j-core to 2.17.1

[CN-You]

What happened？

There are 6 security vulnerabilities found in org.apache.logging.log4j:log4j-core 2.8

• CVE-2020-9488
• CVE-2021-44832
• CVE-2021-45105
• CVE-2017-5645
• CVE-2021-44228
• CVE-2021-45046

What did I do？

Upgrade org.apache.logging.log4j:log4j-core from 2.8 to 2.17.1 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS

[sofastack-bot[bot]]

Hi @CN-You, welcome to SOFAStack community, Please sign Contributor License Agreement!

After you signed CLA, we will automatically sync the status of this pull request in 3 minutes.