About the Log4j vulnerabilities

Are any of our logging crates prone to the same kinds of attacks?
I’m sitting here wondering how and why a logging library even needs a shell and I don’t get it. Do we have anything like that in the rust ecosystem?