javax.sql.rowset.serial.SerialJavaObject::getFields throws NPE when caller is null if the security manager is present. The caller's class loader is used to determine if package access permission check is needed.

Since security manager is deprecated for removal (JEP 411) and setting the security manager is disallowed by default in Java 18, I'm inclined to propose do nothing for this issue.

This issue is created as a tracking purpose.