PkgRadar

Maven · repo1.maven.org

org.forgerock:forgerock-core

Java Process Spawn: Runtime.exec / ProcessBuilder — process spawning.

Why PkgRadar flagged 4.8.6

SeveritySignalEvidence
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · org/forgerock/android/auth/detector/SystemPropertyDetector.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · org/forgerock/android/auth/detector/CommandDetector.java
mediumJava Process SpawnRuntime.exec / ProcessBuilder — process spawning. · org/forgerock/android/auth/detector/PermissionDetector.java

Scanned versions

VersionVerdictScoreScanned (UTC)
4.8.6Review222026-06-16

Block this in CI

PkgRadar gates org.forgerock:forgerock-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven org.forgerock:[email protected]