Maven · repo1.maven.org
org.miaixz:bus-core
Java Jndi Lookup: JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family).
Why PkgRadar flagged 8.6.13
| Severity | Signal | Evidence |
|---|---|---|
| medium | Java Jndi Lookup | JNDI / Naming.lookup — remote class-loading primitive (Log4Shell family). · org/miaixz/bus/core/lang/Keys.java |
| medium | Java Dynamic Classload | URLClassLoader / defineClass — runs attacker-provided bytecode. · org/miaixz/bus/core/lang/loader/classloader/ResourceClassLoader.java |
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · org/miaixz/bus/core/xyz/RuntimeKit.java |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
8.6.13 | Review | 85 | 2026-06-14 |
Block this in CI
pkgradar gate --ecosystem maven org.miaixz:[email protected]