Is Strapi 3 affected by the OpenSSl 3 vulnerability?

I am not sure if it has authentication features, but if so, wouldn’t it be plausible to assume that Strapi3 ships with openssl? (I am not a developer…)