If code has been in production for decades, it must be safe right? Not in the age of AI-driven threats, with IBM and Red Hat finding and fixing a previously-unknown vulnerability within Jakarta XML Binding (JAXB) , making it the first publicly-disclosed novel CVE from Lightwell.
Some good news however, is that I suspect Java usage is probably shrinking anyway at this point (other than variants, such as those used on Android)
Anyone still here eagerly still coding in Java?