7 Jackson CVEs in One Day: AI-Assisted Security Research
Seven jackson-databind vulnerabilities, one researcher, one day. Two critical RCEs. This is AI-assisted security research in practice.
Every article on foojay.io, newest first: OpenJDK, the JVM, Java tooling and the ecosystem around them, written by the Java community.

Steve Poole
1,818 viewsSeven jackson-databind vulnerabilities, one researcher, one day. Two critical RCEs. This is AI-assisted security research in practice.

Matteo Rossi
282 viewsThis is the third and final article in the series. Part 1 covered the RAG foundation — loading runbooks into a vector store and grounding …

Andrea Peruffo
2,054 viewsA few weeks ago, we wrote about a new generation of Java libraries powered by WebAssembly. SQLite, QuickJS, Protocol Buffers, the Ruby Prism …

Why Your Codebase Is Forcing AI to Underperform, and What to Do About It Your AI coding assistant is only as good as the codebase it works …

Shai Almog
284 viewsThis week adds a native Linux desktop port, an Apple Watch and Wear OS port, a visual Game Builder with a high-level gaming API, and …

Aicha Laafia
1,203 views65 million years ago, dinosaurs didn't adapt. They're gone. Your JDK 7 app is giving the same energy. 🫠 I spent a year and a half migrating …

Graeme Robinson
459 viewsAnd why MongoDB might be a better relational database than you ever realized. Design reviews are one-on-one meetings where MongoDB experts …

Igor De Souza
662 viewsWhen developing Java applications for Raspberry Pi, Pi4J is one of the most popular libraries for accessing GPIO, I2C, SPI, PWM, and other …

The June 2026 Azul Payara release ships a critical security fix across every supported branch, Jakarta EE 11 GA libraries, and key updates …

Cristobal Escobar
421 viewsBoxLang 1.14.0 ships a lot of exciting features - Dynamic Sets, Ranges, Inner Classes, JSONPath navigation - but one quietly powerful …