Lombok is not affected by this, as it is not an annotation processor. The most popular annotation processor that I've seen "in the wild" is the Hibernate Metam

Lombok is not affected by this, as it is not an annotation processor. The most popular annotation processor that I've seen "in the wild" is the Hibernate Metamodel Generator (https://hibernate.org/orm/tooling/ https://hibernate.org/orm/tooling/). Also, Immutables (https://immutables.github.io/ https://immutables.github.io/), my favorite Lombok alternative, is affected. Of note, you can bypass this more-security-concious approach by just passing `-prof:full` to javac.