Maven · repo1.maven.org
net.xdob.directory.jdbm:apacheds-jdbm1
Java Unsafe Deserialize: ObjectInputStream / XStream.fromXML — untrusted deserialization sink.
Why PkgRadar flagged 2.0.0-M5
| Severity | Signal | Evidence |
|---|---|---|
| medium | Java Unsafe Deserialize | ObjectInputStream / XStream.fromXML — untrusted deserialization sink. · jdbm/btree/BPage.java |
| medium | Java Unsafe Deserialize | ObjectInputStream / XStream.fromXML — untrusted deserialization sink. · jdbm/helper/Serialization.java |
| medium | Java Unsafe Deserialize | ObjectInputStream / XStream.fromXML — untrusted deserialization sink. · jdbm/recman/TransactionManager.java |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.0.0-M5 | Review | 50 | 2026-06-19 |
Block this in CI
pkgradar gate --ecosystem maven net.xdob.directory.jdbm:[email protected]