Log4Shell

What do you do when the majority of software in the world is vulnerable to a remote code execution exploit via the logger? The one type of system the majority of programs run. How can we get better as an industry to benefit from sharing our code but also keeping our code up to date? Can we show restraint in adding features? Can we improve our quality and review processes to find these types of mistakes sooner?