PT-2021-17786

Name of the Vulnerable Software and Affected Versions: Eclipse Openj9 versions prior to 0.25.0 Description: The issue arises from the usage of the jdk.internal.reflect.ConstantPool API, which in some cases causes the JVM to pre-resolve certain constant pool entries. This allows a user to call...

CVE-2021-28167: Missing Initialization of Resource

In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool entries. This allows a user to call static methods or access static members without running the class initialization method, and may allow a us...