Public Static Final Field References Mutable Object
CWE-607 · Variant · Draft
A public or protected static final field references a mutable object, which allows the object to be changed by malicious code, or accidentally from another package.