https://vulert.com/blog/10-commandments-of-java-security-vulnerability/