I am looking for the JSTL documentation which should be at that page I was led to believe.I think not. I think that is the namespace URL for the XML declarations. There isn't, and I doubt there ever was, anything actually there.
I would gratefully appreciate confirmation that JSTL still lives even though Sun Micro Systems was sold to Oracle.Well of course it does, but you're asking in the wrong place, see below.
Am I safe from all the CVEs known to hackers?I don't know what you mean by CVE, and I don't know that anybody in the software industry has ever guaranteed anything in the last sixty years or so, let alone that you are 'safe', but it is clear from recent product history that security issues are being worked on very actively indeed.
Also can someone tell me why the details of the updates seem so hidden?Everyone else seems to find them.
These must really be awfully bad security exploits that do mega damage.such as? Or are you just spreading some unceetainty of your own?
Applets are essentially dead?No, they are still part of the platform, and people are still using them.
Also can someone here confirm that JSTL is still supported by Oracle?Well of course it is, but you're asking in the wrong place. Thisnis a user-to-user forum. If you want an official statement from Oracle ask them through the proper channels. This isn't one of them.
Here is an idea for Oracle. Why not add a status on any phased out technology like JSTL - (Deprecated) or something like that so it does not become a surprise it has become legacy code.And that's just putting words in my mouth. I said legacy, not deprecated or phased out. Its old. People don't tend to use it anymore because there are far better alternatives. Its still happily included in the JEE6 spec if you are so inclined to keep using it and will likely still be in the upcoming JEE7 spec too, but I'd suggest you keep up with the times and move ahead like the rest of the world.