PkgRadar

Maven · repo1.maven.org

com.checkmarx:cx-client-common

Java Process Spawn: Runtime.exec / ProcessBuilder — process spawning.

Why PkgRadar flagged 2026.2.32

SeveritySignalEvidence
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · com/cx/restclient/ast/SpawnScaResolver.java
mediumRemote Payloadmatched "cUrl " · com/cx/restclient/ast/AstScaClient.java
mediumRemote Payloadmatched "cUrl " · com/cx/restclient/configuration/CxScanConfig.java

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.2.32Review112026-06-15

Block this in CI

PkgRadar gates com.checkmarx:cx-client-common (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven com.checkmarx:[email protected]
Start free — 25 scans / moView full evidence