3 ms·
Not keeping up with patch versions of your runtime. As other comments mentioned even with a patched JDK you are still vulnerable in other ways, but the specifi
by charrondev 5y ago
Not keeping up with patch versions of your runtime.
As other comments mentioned even with a patched JDK you are still vulnerable in other ways, but the specific method this whole thread is about seems to have patches in Java 8 and 11 releases.
I understand that lagging new major releases by years and be prudent for different apps, but there is no excuse not to be updating your patch versions.