PkgRadar

Maven · repo1.maven.org

com.asbestosstar:crashdetector

Java Unsafe Deserialize: ObjectInputStream / XStream.fromXML — untrusted deserialization sink.

Why PkgRadar flagged 1.1

SeveritySignalEvidence
mediumJava Unsafe DeserializeObjectInputStream / XStream.fromXML — untrusted deserialization sink. · com/asbestosstar/crashdetector/gui/tipos/arbol/ArbolDeModsGUI.java
mediumJava Dynamic ClassloadURLClassLoader / defineClass — runs attacker-provided bytecode. · com/asbestosstar/crashdetector/CargadorExtensiones.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/asbestosstar/crashdetector/MonitorDePID.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/asbestosstar/crashdetector/analizador/general/Drivers.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/asbestosstar/crashdetector/gui/tipos/consola/ConsolaDesarrolladorGUITL.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/asbestosstar/crashdetector/gui/tipos/gpu/GPUFixGUI.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/asbestosstar/crashdetector/gui/tipos/scriptide/lsp/ScriptIntellisenseLsp4j.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/asbestosstar/crashdetector/lanzer/CDLauncher.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/asbestosstar/crashdetector/bajo/hw/cpu/intel/ValidadorMicrocodigo.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/asbestosstar/crashdetector/bajo/hw/gpu/ValidadorGPU.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/asbestosstar/crashdetector/buscarparajava/BuscarParaJava8Windows.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/asbestosstar/crashdetector/buscarparajava/BuscarParaJava8Unix.java

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1Review1022026-06-13

Block this in CI

PkgRadar gates com.asbestosstar:crashdetector (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven com.asbestosstar:[email protected]