Yes, Java is one big security risk. If it was me I would accept the Avast alert, albeit they are annoying, and just wait for the next update, I’m sure it will be along soon