OpenJDK mujs package dependency

[Phoong, Stanley Cheong Kwan]

Hi,

I've discovered that OpenJDK 9, 10 and 11 contains mujs inside lib/modules.

Mujs is discovered to contain multiple vulnerabilities.
CVE-2019-11413
CVE-2019-11412
CVE-2019-11411
CVE-2016-9109
CVE-2016-9108
CVE-2016-7564
CVE-2016-7563
CVE-2016-10132
CVE-2017-5628
CVE-2017-5627
CVE-2016-10141
CVE-2016-10133

However, upon inspection, I could not determine nor find any traces of mujs nor mupdf inside OpenJDK9,10 and 11.

Does anyone know where is mujs or mupdf being included inside OpenJDK 9, 10 or 11?

Stanley Phoong