IBM and Red Hat say Lightwell remediated 400+ previously unknown open-source vulnerabilities and make Clearinghouse generally available

What changed

IBM and Red Hat announced on October 6 that Lightwell had identified and remediated more than 400 previously unknown vulnerabilities across widely used Java libraries. Lightwell Clearinghouse is now generally available, allowing enterprises to submit critical open-source dependencies for priority review, remediation and backports. The companies say applicable fixes are contributed upstream after responsible disclosure. The 400+ figure is a project-reported result rather than an independent industry count.