PkgRadar

Maven · repo1.maven.org

org.lucee:ehcache

Java Unsafe Deserialize

Why PkgRadar flagged 2.10.9.2-BETA

SeveritySignalEvidence
mediumJava Unsafe Deserializeorg/lucee/extension/cache/eh/remote/Converter.java
mediumJava Unsafe Deserializeorg/lucee/extension/cache/eh/remote/soap/SoapCacheEntry.java

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
2.10.9.2-BETAReview402026-06-22

Block this in CI

PkgRadar gates org.lucee:ehcache (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven org.lucee:[email protected]
org.lucee:ehcache — Maven security scan | PkgRadar