Maven · repo1.maven.org
org.jboss.weld:weld-core-impl
Java Dynamic Classload: URLClassLoader / defineClass — runs attacker-provided bytecode.
Why PkgRadar flagged 7.0.0.Beta2
| Severity | Signal | Evidence |
|---|---|---|
| medium | Java Dynamic Classload | URLClassLoader / defineClass — runs attacker-provided bytecode. · org/jboss/weld/bean/proxy/ProxyFactory.java |
| medium | Java Dynamic Classload | URLClassLoader / defineClass — runs attacker-provided bytecode. · org/jboss/weld/bean/proxy/DummyClassFactoryImpl.java |
| medium | Java Dynamic Classload | URLClassLoader / defineClass — runs attacker-provided bytecode. · org/jboss/weld/bean/proxy/util/WeldDefaultProxyServices.java |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
7.0.0.Beta2 | Review | 50 | 2026-06-10 |
Block this in CI
pkgradar gate --ecosystem maven org.jboss.weld:[email protected]