JDK 17 is required for Broadleaf release trains 2.0.0-GA, and beyond.
To review the security related content, see 2.0.3 notes for the full details.