Maven · repo1.maven.org
jakarta.persistence:jakarta.persistence-api
Java Jndi Lookup: JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family).
Why PkgRadar flagged 4.0.0-M5
| Severity | Signal | Evidence |
|---|---|---|
| medium | Java Jndi Lookup | JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family). · jakarta/persistence/PersistenceAgent.java |
| medium | Java Jndi Lookup | JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family). · jakarta/persistence/PersistenceContext.java |
| medium | Java Jndi Lookup | JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family). · jakarta/persistence/PersistenceUnit.java |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
4.0.0-M5 | Review | 35 | 2026-06-12 |
Block this in CI
pkgradar gate --ecosystem maven jakarta.persistence:[email protected]