Chainguard Libraries for Java

AI frontier models are accelerating the discovery of vulnerabilities in Java applications at a pace that teams can’t keep up with. If your team is stuck on older Java versions that are hard to upgrade, you need support to remediate those vulnerabilities so you can get time back in your day to build.

In the July 2026 Learning Lab, Manfred Moser shares the details behind Chainguard Libraries for Java, with an overview of how to start using remediated versions directly with Apache Maven, Gradle, or your current repository manager configuration. For every Chainguard-built version, he shows you how to pull SBOMs and provenance to demonstrate the integrity of your third-party artifacts.

Manfred covers and demonstrates the following new features:

• CVE remediation for Spring Framework and other libraries
• Protected fallback to Maven Central
• Cooldown policy

The lab uses a hands-on demo project to migrate a typical Maven build to Chainguard Libraries.

Sections

• 0:00 Introduction and agenda

Resources

• Demo project on GitHub
• Slide deck
• Chainguard Libraries documentation