IBM and Red Hat Remediate More Than 400 Previously Unknown Open Source Vulnerabilities
IBM, Tuesday, October 6th, 2026
IBM and Red Hat's Lightwell fixed 400+ previously unknown Java library flaws, and Lightwell Clearinghouse is now GA.
IBM and Red Hat announced that Lightwell has identified and remediated more than 400 previously unknown vulnerabilities in widely used Java libraries.
The companies also made Lightwell Clearinghouse generally available, letting enterprise customers submit specific open source dependencies for priority review and remediation.
They warn that autonomous AI agents can chain lower-risk weaknesses into serious attacks, so organizations need tested fixes that work with versions already in production, not just detection.