Elastic APM uses a Java agent to collect application performance metrics and sends it to the Elastic APM server, which means it will use Java instrumentation for underlying metrics in JVM.
My question is:
Is there any vulnerability issue or security risk for using it?