Athena coalition discloses first 14 'silent' Java vulnerabilities

Chainguard's Athena coalition publicly disclosed its first findings: 14 'silent' vulnerabilities across Java projects, including one critical and one high-severity flaw. The bugs were fixed upstream but never received a CVE, leaving older versions exposed and invisible to scanners.

• 14 Java vulnerabilities, one critical and one high-severity
• Fixed upstream but never assigned a CVE
• Free patches published in Chainguard's public GitHub repo
• Adoption is a one-line lockfile change, no version upgrade