Maven · repo1.maven.org
io.orqueio.bpm:orqueio-engine
Java Jndi Lookup: JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family).
Why PkgRadar flagged 2.0.5
| Severity | Signal | Evidence |
|---|---|---|
| medium | Java Jndi Lookup | JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family). · io/orqueio/bpm/application/impl/EjbProcessApplication.java |
| medium | Java Jndi Lookup | JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family). · io/orqueio/bpm/application/impl/JakartaEjbProcessApplication.java |
| medium | Java Jndi Lookup | JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family). · io/orqueio/bpm/application/impl/AbstractEjbProcessApplication.java |
| medium | Java Jndi Lookup | JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family). · io/orqueio/bpm/engine/impl/cfg/JtaProcessEngineConfiguration.java |
| medium | Java Jndi Lookup | JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family). · io/orqueio/bpm/engine/impl/cfg/JakartaTransactionProcessEngineConfiguration.java |
| medium | Java Jndi Lookup | JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family). · io/orqueio/bpm/engine/impl/cfg/ProcessEngineConfigurationImpl.java |
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · io/orqueio/bpm/engine/impl/ant/LaunchThread.java |
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · io/orqueio/bpm/engine/impl/bpmn/behavior/ShellActivityBehavior.java |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.0.5 | Review | 80 | 2026-06-18 |
Block this in CI
pkgradar gate --ecosystem maven io.orqueio.bpm:[email protected]