@ColinTheMathmo I had quite a few enquiries of this kind when the Log4j vulnerability happened five years ago. I've been expecting at least one or two about PHP.
(I'm secretly hoping someone will demand I check that PuTTY makes no use of the number 4…)