PkgRadar

Maven · repo1.maven.org

com.github.psi-probe:psi-probe-core

Java Jndi Lookup: JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family).

Why PkgRadar flagged 5.4.0

SeveritySignalEvidence
mediumJava Jndi LookupJNDI / Naming.lookup — remote class-loading primitive (Log4Shell family). · psiprobe/beans/ResourceResolverBean.java
mediumJava Dynamic ClassloadURLClassLoader / defineClass — runs attacker-provided bytecode. · psiprobe/AbstractTomcatContainer.java

Scanned versions

VersionVerdictScoreScanned (UTC)
5.4.0Review222026-06-11

Block this in CI

PkgRadar gates com.github.psi-probe:psi-probe-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven com.github.psi-probe:[email protected]