It's important to note that the fixes applied by this issue only guarantee that Javassist is compatible. The changes needed for ByteBuddy are more intricate and the ByteBuddy devs are looking into ways to add better support for a security manager enabled environment. Gail Badner, this means the tests under WF will need to explicitly enable Javassist when using ORM 5.3+ until we get a ByteBuddy fix.