GitHub Security Lab: Java: Static initialization vector

This bug was reported directly to GitHub Security Lab...