Spectra Assure
Community
Docs
warningRisk: Hardening
Scanned: about 23 hours ago

Language Support for Java(TM) by Red Hat

Artifact:
latest
key project
Top 100
Java Linting, Intellisense, formatting, refactoring, Maven/Gradle support and more...
License: Copyleft (EPL-2.0)
Published: about 23 hours ago
Publisher: redhat
Visit Github
See on Visual Studio Code

SAFE Assessment

Compliance

Licenses
1 weak copyleft linked components
Secrets
43 debugging symbols found

Security

Vulnerabilities
2 medium severity vulnerabilities
Hardening
10 baseline mitigations missing

Threats

Tampering
No evidence of software tampering
Malware
No evidence of malware inclusion

INCIDENTS:

List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2025/10/29
All detected vulnerabilities are fixable
Run the update/upgrade command in your package manager to resolve the detected vulnerabilities
CVSS Score
CVE
Name
Tags
critical
9.8
CVE-2017-1000487
—
Fix Available
Vulnerability Triaged
high
7.5
CVE-2022-4244
—
Fix Available
Vulnerability Triaged
medium
6.1
CVE-2022-36033
—
Exploits Exist
Fix Available
medium
4.3
CVE-2022-4245
—
Fix Available
Vulnerability Triaged
medium
4.3
CVE-2024-47554
—
Fix Available

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.