Ditto. Even things like Java flight recorder are open source now and work with any JDK distribution.

YOLO =3

https://openjdk.org/groups/vulnerability/advisories/

https://app.opencve.io/cve/?product=openjdk&vendor=oracle