JDK 22 adds 10 new root CA certificates, a new asymmetric key interface, and a -XshowSettings option for displaying security settings. In a March 20 blog post on Oracle’s inside.java web page ...

With the passing of JSR-375, the implementation of Java EE security tasks, such as performing authentication and interacting with identity stores, will be greatly simplified.

Yet another Java flaw allows “complete” bypass of security sandbox Flaw in last three Java versions, 8 years worth, puts a billion users at risk.