reduce CDS java security vulnerabilities