2 A final static field that is
3 defined in an interface references a mutable
4 object such as an array or hashtable.
5 This mutable object could
6 be changed by malicious code or
7 by accident from another package.
8 To solve this, the field needs to be moved to a class
9 and made package protected
11 this vulnerability.</p>