OpenJDK Vulnerabilities

Vulnerabilities in OpenJDK source code are handled by the OpenJDK Vulnerability Group, who coordinate fixes and releases.

How to report a vulnerability

We welcome reports of vulnerabilities in the JDK. To submit a report, please send e-mail to