diff --git a/README.md b/README.md
index f03f6e5d..4eca7a54 100644
--- a/README.md
+++ b/README.md
@@ -140,6 +140,10 @@ By default, the container will download the latest version of the "vanilla" [Min
 
 <!--te-->
 
+## Mitigated Log4jShell Vulnerability
+
+**Please ensure you have pulled the latest image** since [all official mitigations](https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition) are automatically applied by the container startup process.
+
 ## Looking for a Bedrock Dedicated Server
 
 For Minecraft clients running on consoles, mobile, or native Windows, you'll need to