The bug, a vulnerability in a widely used Java-logging library calledApache Log4j, was discovered in December 2021.

The White House didn’t immediately respond to a request for comment.