I patched the hs server on sunday. elastic search was the big open one. nothing else really uses java.
but, we're seeing some python packages at work may have dependency chains all the way back in to the os like cx_oracle to connect to oralce from python may run some cython or jar files behind the chain.... still working on it. ugh.