Maven · repo1.maven.org
se.deversity.async-test-lib:async-test-lib
Java Unsafe Deserialize: ObjectInputStream / XStream.fromXML — untrusted deserialization sink.
Why PkgRadar flagged 1.7.0-RC1
| Severity | Signal | Evidence |
|---|---|---|
| medium | Java Unsafe Deserialize | ObjectInputStream / XStream.fromXML — untrusted deserialization sink. · se/deversity/asynctest/benchmark/BenchmarkComparator.java |
| medium | Java Process Spawn | Runtime.exec / ProcessBuilder — process spawning. · se/deversity/asynctest/diagnostics/UncommittedChangesDetector.java |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.7.0-RC1 | Review | 35 | 2026-06-13 |
Block this in CI
pkgradar gate --ecosystem maven se.deversity.async-test-lib:[email protected]