Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all ):
dependency-check version : 12.2.0
Report Generated On : Mon, 19 Jan 2026 20:30:10 GMT
Dependencies Scanned : 276 (148 unique)
Vulnerable Dependencies : 4
Vulnerabilities Found : 24
Vulnerabilities Suppressed : 0
...
NVD API Last Checked : 2026-01-19T20:29:50Z
NVD API Last Modified : 2026-01-19T20:15:49Z
Summary
Summary of Vulnerable Dependencies (click to show all)
* indicates the dependency has a known exploited vulnerability
ant-1.10.8.jar
File Path: /home/runner/.m2/repository/org/apache/ant/ant/1.10.8/ant-1.10.8.jar
MD5: 4492182f592ad9779a5de60e3f0ea3c4
SHA1: ae148abb0532b685c5eeb22fdec9d124e89be5de
SHA256: b96b46fd2b4b00e42684c3085b0d16dde975e7b8e64822b0bf52edf5fd387d8d
Referenced In Project/Scope: waffle-jetty-jakarta:provided
ant-1.10.8.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.glassfish.web/jakarta.servlet.jsp@3.0.0
Evidence
Type Source Name Value Confidence
Vendor file name ant High
Vendor jar package name ant Highest
Vendor jar package name apache Highest
Vendor manifest: org/apache/tools/ant/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid ant Highest
Vendor pom artifactid ant Low
Vendor pom groupid org.apache.ant Highest
Vendor pom name Apache Ant Core High
Vendor pom parent-artifactid ant-parent Low
Vendor pom url https://ant.apache.org/ Highest
Product file name ant High
Product jar package name ant Highest
Product jar package name apache Highest
Product jar package name tools Highest
Product manifest: org/apache/tools/ant/ Implementation-Title org.apache.tools.ant Medium
Product manifest: org/apache/tools/ant/ Specification-Title Apache Ant Medium
Product pom artifactid ant Highest
Product pom groupid org.apache.ant Highest
Product pom name Apache Ant Core High
Product pom parent-artifactid ant-parent Medium
Product pom url https://ant.apache.org/ Medium
Version file version 1.10.8 High
Version manifest: org/apache/tools/ant/ Implementation-Version 1.10.8 Medium
Version pom version 1.10.8 Highest
Related Dependencies
ant-launcher-1.10.8.jar
File Path: /home/runner/.m2/repository/org/apache/ant/ant-launcher/1.10.8/ant-launcher-1.10.8.jar
MD5: bbb5ba492c747a8e669c17b3e2120550
SHA1: 2ca8688d2dad5694237576db782b37279989614d
SHA256: 5d22f62885a0c8d721a9002e9a00c84381365f65296ed9c8ef78415e8a9fc2a1
pkg:maven/org.apache.ant/ant-launcher@1.10.8
CVE-2020-11979 suppress
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
CWE-379 Creation of Temporary File in Directory with Insecure Permissions, NVD-CWE-Other
CVSSv3:
Base Score: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A
CVSSv2:
Base Score: MEDIUM (5.0)
Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N
References:
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc%40%3Cdev.creadur.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0304781e%40%3Cdev.creadur.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r2306b67f20c24942b872b0a41fbdc9330e8467388158bcd19c1094e0%40%3Cdev.creadur.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r4ca33fad3fb39d130cda287d5a60727d9e706e6f2cf2339b95729490%40%3Cdev.creadur.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r5e1cdd79f019162f76414708b2092acad0a6703d666d72d717319305%40%3Cdev.creadur.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/raaeddc41da8f3afb1cb224876084a45f68e437a0afd9889a707e4b0c%40%3Cdev.creadur.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rbfe9ba28b74f39f46ec1bbbac3bef313f35017cf3aac13841a84483a%40%3Cdev.creadur.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AALW42FWNQ35F7KB3JVRC6NBVV7AAYYI/
af854a3a-2127-422b-91ae-364da2661108 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYBRN5C2RW7JRY75IB7Q7ZVKZCHWAQWS/
af854a3a-2127-422b-91ae-364da2661108 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3NRQQ7ECII4ZNGW7GBC225LVYMPQEKB/
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
security@apache.org - https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc%40%3Cdev.creadur.apache.org%3E
security@apache.org - https://lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0304781e%40%3Cdev.creadur.apache.org%3E
security@apache.org - https://lists.apache.org/thread.html/r2306b67f20c24942b872b0a41fbdc9330e8467388158bcd19c1094e0%40%3Cdev.creadur.apache.org%3E
security@apache.org - https://lists.apache.org/thread.html/r4ca33fad3fb39d130cda287d5a60727d9e706e6f2cf2339b95729490%40%3Cdev.creadur.apache.org%3E
security@apache.org - https://lists.apache.org/thread.html/r5e1cdd79f019162f76414708b2092acad0a6703d666d72d717319305%40%3Cdev.creadur.apache.org%3E
security@apache.org - https://lists.apache.org/thread.html/raaeddc41da8f3afb1cb224876084a45f68e437a0afd9889a707e4b0c%40%3Cdev.creadur.apache.org%3E
security@apache.org - https://lists.apache.org/thread.html/rbfe9ba28b74f39f46ec1bbbac3bef313f35017cf3aac13841a84483a%40%3Cdev.creadur.apache.org%3E
security@apache.org - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AALW42FWNQ35F7KB3JVRC6NBVV7AAYYI/
security@apache.org - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYBRN5C2RW7JRY75IB7Q7ZVKZCHWAQWS/
security@apache.org - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3NRQQ7ECII4ZNGW7GBC225LVYMPQEKB/
security@apache.org - MAILING_LIST,VENDOR_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - THIRD_PARTY_ADVISORY
security@apache.org - THIRD_PARTY_ADVISORY
Vulnerable Software & Versions: (show all )
CVE-2021-36373 suppress
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.
CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-Other
CVSSv3:
Base Score: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:1.8/RC:R/MAV:A
CVSSv2:
Base Score: MEDIUM (4.3)
Vector: /AV:N/AC:M/Au:N/C:N/I:N/A:P
References:
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r27919fd4db07c487239c1d9771f480d89ce5ee2750aa9447309b709a%40%3Ccommits.groovy.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r544c9e8487431768465b8b2d13982c75123109bd816acf839d46010d%40%3Ccommits.groovy.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rad36f470647c5a7c02dd78c9973356d2840766d132b597b6444e373a%40%3Cnotifications.groovy.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rf4bb79751a02889623195715925e4fd8932dd3c97e0ade91395a96c6%40%3Cdev.myfaces.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - NOT_APPLICABLE
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
security@apache.org - https://lists.apache.org/thread.html/r27919fd4db07c487239c1d9771f480d89ce5ee2750aa9447309b709a%40%3Ccommits.groovy.apache.org%3E
security@apache.org - https://lists.apache.org/thread.html/r544c9e8487431768465b8b2d13982c75123109bd816acf839d46010d%40%3Ccommits.groovy.apache.org%3E
security@apache.org - https://lists.apache.org/thread.html/rad36f470647c5a7c02dd78c9973356d2840766d132b597b6444e373a%40%3Cnotifications.groovy.apache.org%3E
security@apache.org - https://lists.apache.org/thread.html/rf4bb79751a02889623195715925e4fd8932dd3c97e0ade91395a96c6%40%3Cdev.myfaces.apache.org%3E
security@apache.org - MAILING_LIST,VENDOR_ADVISORY
security@apache.org - NOT_APPLICABLE
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,VENDOR_ADVISORY
security@apache.org - THIRD_PARTY_ADVISORY
Vulnerable Software & Versions: (show all )
CVE-2021-36374 suppress
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.
CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-Other
CVSSv3:
Base Score: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:1.8/RC:R/MAV:A
CVSSv2:
Base Score: MEDIUM (4.3)
Vector: /AV:N/AC:M/Au:N/C:N/I:N/A:P
References:
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r27919fd4db07c487239c1d9771f480d89ce5ee2750aa9447309b709a%40%3Ccommits.groovy.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r544c9e8487431768465b8b2d13982c75123109bd816acf839d46010d%40%3Ccommits.groovy.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rad36f470647c5a7c02dd78c9973356d2840766d132b597b6444e373a%40%3Cnotifications.groovy.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rf4bb79751a02889623195715925e4fd8932dd3c97e0ade91395a96c6%40%3Cdev.myfaces.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
security@apache.org - https://lists.apache.org/thread.html/r27919fd4db07c487239c1d9771f480d89ce5ee2750aa9447309b709a%40%3Ccommits.groovy.apache.org%3E
security@apache.org - https://lists.apache.org/thread.html/r544c9e8487431768465b8b2d13982c75123109bd816acf839d46010d%40%3Ccommits.groovy.apache.org%3E
security@apache.org - https://lists.apache.org/thread.html/rad36f470647c5a7c02dd78c9973356d2840766d132b597b6444e373a%40%3Cnotifications.groovy.apache.org%3E
security@apache.org - https://lists.apache.org/thread.html/rf4bb79751a02889623195715925e4fd8932dd3c97e0ade91395a96c6%40%3Cdev.myfaces.apache.org%3E
security@apache.org - MAILING_LIST,VENDOR_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,VENDOR_ADVISORY
security@apache.org - THIRD_PARTY_ADVISORY
Vulnerable Software & Versions: (show all )
asm-9.9.1.jar
Description:
ASM, a very small and fast Java bytecode manipulation framework
License:
BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.9.1/asm-9.9.1.jar
MD5: 1888ad1f49038441bb2d12aa6dffe396
SHA1: 2ceea6ab43bcae1979b2a6d85fc0ca429877e5ab
SHA256: 6f3828a215c920059a5efa2fb55c233d6c54ec5cadca99ce1b1bdd10077c7ddd
Referenced In Projects/Scopes:
waffle-jetty:provided
waffle-jetty-jakarta:provided
asm-9.9.1.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.ow2.asm/asm-commons@9.9.1
pkg:maven/org.ow2.asm/asm-commons@9.9.1
Evidence
Type Source Name Value Confidence
Vendor file name asm High
Vendor jar package name asm Highest
Vendor jar package name objectweb Highest
Vendor Manifest bundle-docurl http://asm.ow2.org Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Vendor Manifest bundle-symbolicname org.objectweb.asm Medium
Vendor pom artifactid asm Highest
Vendor pom artifactid asm Low
Vendor pom developer email ebruneton@free.fr Low
Vendor pom developer email eu@javatx.org Low
Vendor pom developer email forax@univ-mlv.fr Low
Vendor pom developer id ebruneton Medium
Vendor pom developer id eu Medium
Vendor pom developer id forax Medium
Vendor pom developer name Eric Bruneton Medium
Vendor pom developer name Eugene Kuleshov Medium
Vendor pom developer name Remi Forax Medium
Vendor pom groupid org.ow2.asm Highest
Vendor pom name asm High
Vendor pom organization name OW2 High
Vendor pom organization url http://www.ow2.org/ Medium
Vendor pom parent-artifactid ow2 Low
Vendor pom parent-groupid org.ow2 Medium
Vendor pom url http://asm.ow2.io/ Highest
Product file name asm High
Product jar package name asm Highest
Product jar package name objectweb Highest
Product Manifest bundle-docurl http://asm.ow2.org Low
Product Manifest Bundle-Name org.objectweb.asm Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Product Manifest bundle-symbolicname org.objectweb.asm Medium
Product Manifest Implementation-Title ASM, a very small and fast Java bytecode manipulation framework High
Product pom artifactid asm Highest
Product pom developer email ebruneton@free.fr Low
Product pom developer email eu@javatx.org Low
Product pom developer email forax@univ-mlv.fr Low
Product pom developer id ebruneton Low
Product pom developer id eu Low
Product pom developer id forax Low
Product pom developer name Eric Bruneton Low
Product pom developer name Eugene Kuleshov Low
Product pom developer name Remi Forax Low
Product pom groupid org.ow2.asm Highest
Product pom name asm High
Product pom organization name OW2 Low
Product pom organization url http://www.ow2.org/ Low
Product pom parent-artifactid ow2 Medium
Product pom parent-groupid org.ow2 Medium
Product pom url http://asm.ow2.io/ Medium
Version file version 9.9.1 High
Version Manifest Bundle-Version 9.9.1 High
Version Manifest Implementation-Version 9.9.1 High
Version pom parent-version 9.9.1 Low
Version pom version 9.9.1 Highest
pkg:maven/org.ow2.asm/asm@9.9.1
(Confidence :High)
asm-commons-9.9.1.jar
Description:
Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework
License:
BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm-commons/9.9.1/asm-commons-9.9.1.jar
MD5: 7e0ef716c43d92d29e666f820df24e2c
SHA1: ab35de4c537184a09339069f1a3b3aacf2289149
SHA256: c2319e014ce7199f2b7f7d56d6bb991863168c3f4b6cd6c9f542a4937ef7ef88
Referenced In Projects/Scopes:
waffle-jetty:provided
waffle-jetty-jakarta:provided
asm-commons-9.9.1.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jetty@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name asm-commons High
Vendor jar package name asm Highest
Vendor jar package name commons Highest
Vendor jar package name objectweb Highest
Vendor Manifest bundle-docurl http://asm.ow2.org Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Vendor Manifest bundle-symbolicname org.objectweb.asm.commons Medium
Vendor Manifest module-requires org.objectweb.asm;transitive=true,org.objectweb.asm.tree;transitive=true Low
Vendor pom artifactid asm-commons Highest
Vendor pom artifactid asm-commons Low
Vendor pom developer email ebruneton@free.fr Low
Vendor pom developer email eu@javatx.org Low
Vendor pom developer email forax@univ-mlv.fr Low
Vendor pom developer id ebruneton Medium
Vendor pom developer id eu Medium
Vendor pom developer id forax Medium
Vendor pom developer name Eric Bruneton Medium
Vendor pom developer name Eugene Kuleshov Medium
Vendor pom developer name Remi Forax Medium
Vendor pom groupid org.ow2.asm Highest
Vendor pom name asm-commons High
Vendor pom organization name OW2 High
Vendor pom organization url http://www.ow2.org/ Medium
Vendor pom parent-artifactid ow2 Low
Vendor pom parent-groupid org.ow2 Medium
Vendor pom url http://asm.ow2.io/ Highest
Product file name asm-commons High
Product jar package name asm Highest
Product jar package name commons Highest
Product jar package name objectweb Highest
Product Manifest bundle-docurl http://asm.ow2.org Low
Product Manifest Bundle-Name org.objectweb.asm.commons Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Product Manifest bundle-symbolicname org.objectweb.asm.commons Medium
Product Manifest Implementation-Title Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework High
Product Manifest module-requires org.objectweb.asm;transitive=true,org.objectweb.asm.tree;transitive=true Low
Product pom artifactid asm-commons Highest
Product pom developer email ebruneton@free.fr Low
Product pom developer email eu@javatx.org Low
Product pom developer email forax@univ-mlv.fr Low
Product pom developer id ebruneton Low
Product pom developer id eu Low
Product pom developer id forax Low
Product pom developer name Eric Bruneton Low
Product pom developer name Eugene Kuleshov Low
Product pom developer name Remi Forax Low
Product pom groupid org.ow2.asm Highest
Product pom name asm-commons High
Product pom organization name OW2 Low
Product pom organization url http://www.ow2.org/ Low
Product pom parent-artifactid ow2 Medium
Product pom parent-groupid org.ow2 Medium
Product pom url http://asm.ow2.io/ Medium
Version file version 9.9.1 High
Version Manifest Bundle-Version 9.9.1 High
Version Manifest Implementation-Version 9.9.1 High
Version pom parent-version 9.9.1 Low
Version pom version 9.9.1 Highest
pkg:maven/org.ow2.asm/asm-commons@9.9.1
(Confidence :High)
asm-tree-9.9.1.jar
Description:
Tree API of ASM, a very small and fast Java bytecode manipulation framework
License:
BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm-tree/9.9.1/asm-tree-9.9.1.jar
MD5: 7eb17cd0d09b03fbe473e51edfc6e4d2
SHA1: b6b1b3366296163b4b1f540731aad0a2baa484d8
SHA256: 0f3555096b720b820bbacab0b515589bee0200bee099bda14c561738ae837ba1
Referenced In Projects/Scopes:
waffle-jetty:provided
waffle-jetty-jakarta:provided
asm-tree-9.9.1.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.ow2.asm/asm-commons@9.9.1
pkg:maven/org.ow2.asm/asm-commons@9.9.1
Evidence
Type Source Name Value Confidence
Vendor file name asm-tree High
Vendor jar package name asm Highest
Vendor jar package name objectweb Highest
Vendor jar package name tree Highest
Vendor Manifest bundle-docurl http://asm.ow2.org Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Vendor Manifest bundle-symbolicname org.objectweb.asm.tree Medium
Vendor Manifest module-requires org.objectweb.asm;transitive=true Low
Vendor pom artifactid asm-tree Highest
Vendor pom artifactid asm-tree Low
Vendor pom developer email ebruneton@free.fr Low
Vendor pom developer email eu@javatx.org Low
Vendor pom developer email forax@univ-mlv.fr Low
Vendor pom developer id ebruneton Medium
Vendor pom developer id eu Medium
Vendor pom developer id forax Medium
Vendor pom developer name Eric Bruneton Medium
Vendor pom developer name Eugene Kuleshov Medium
Vendor pom developer name Remi Forax Medium
Vendor pom groupid org.ow2.asm Highest
Vendor pom name asm-tree High
Vendor pom organization name OW2 High
Vendor pom organization url http://www.ow2.org/ Medium
Vendor pom parent-artifactid ow2 Low
Vendor pom parent-groupid org.ow2 Medium
Vendor pom url http://asm.ow2.io/ Highest
Product file name asm-tree High
Product jar package name asm Highest
Product jar package name objectweb Highest
Product jar package name tree Highest
Product Manifest bundle-docurl http://asm.ow2.org Low
Product Manifest Bundle-Name org.objectweb.asm.tree Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Product Manifest bundle-symbolicname org.objectweb.asm.tree Medium
Product Manifest Implementation-Title Tree API of ASM, a very small and fast Java bytecode manipulation framework High
Product Manifest module-requires org.objectweb.asm;transitive=true Low
Product pom artifactid asm-tree Highest
Product pom developer email ebruneton@free.fr Low
Product pom developer email eu@javatx.org Low
Product pom developer email forax@univ-mlv.fr Low
Product pom developer id ebruneton Low
Product pom developer id eu Low
Product pom developer id forax Low
Product pom developer name Eric Bruneton Low
Product pom developer name Eugene Kuleshov Low
Product pom developer name Remi Forax Low
Product pom groupid org.ow2.asm Highest
Product pom name asm-tree High
Product pom organization name OW2 Low
Product pom organization url http://www.ow2.org/ Low
Product pom parent-artifactid ow2 Medium
Product pom parent-groupid org.ow2 Medium
Product pom url http://asm.ow2.io/ Medium
Version file version 9.9.1 High
Version Manifest Bundle-Version 9.9.1 High
Version Manifest Implementation-Version 9.9.1 High
Version pom parent-version 9.9.1 Low
Version pom version 9.9.1 Highest
pkg:maven/org.ow2.asm/asm-tree@9.9.1
(Confidence :High)
bcprov-jdk18on-1.82.jar
Description:
The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains the JCA/JCE provider and low-level API for the BC Java version 1.82 for Java 1.8 and later.
License:
Bouncy Castle Licence: https://www.bouncycastle.org/licence.html
File Path: /home/runner/.m2/repository/org/bouncycastle/bcprov-jdk18on/1.82/bcprov-jdk18on-1.82.jar
MD5: 73520ba13118979db17136db32a8c401
SHA1: e1118397395d21909a1b7b15120d0c2a68d7fd0c
SHA256: 14cde2fdfaa8890480a8e5b67aceef0c90f96682c1e23c133bafdc9e0b3255ce
Referenced In Projects/Scopes:
waffle-shiro:provided
waffle-shiro-jakarta:provided
bcprov-jdk18on-1.82.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.apache.shiro/shiro-web@2.0.6
pkg:maven/org.apache.shiro/shiro-web@2.0.6
Evidence
Type Source Name Value Confidence
Vendor file name bcprov-jdk18on High
Vendor jar package name bc Highest
Vendor jar package name bouncycastle Highest
Vendor jar package name crypto Highest
Vendor jar package name jce Highest
Vendor jar package name org Highest
Vendor jar package name provider Highest
Vendor Manifest application-library-allowable-codebase * Low
Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low
Vendor Manifest bundle-symbolicname bcprov Medium
Vendor Manifest caller-allowable-codebase * Low
Vendor Manifest codebase * Low
Vendor Manifest multi-release true Low
Vendor Manifest permissions all-permissions Low
Vendor Manifest trusted-library true Low
Vendor pom artifactid bcprov-jdk18on Highest
Vendor pom artifactid bcprov-jdk18on Low
Vendor pom developer email feedback-crypto@bouncycastle.org Low
Vendor pom developer id feedback-crypto Medium
Vendor pom developer name The Legion of the Bouncy Castle Inc. Medium
Vendor pom groupid org.bouncycastle Highest
Vendor pom name Bouncy Castle Provider High
Vendor pom url https://www.bouncycastle.org/download/bouncy-castle-java/ Highest
Product file name bcprov-jdk18on High
Product jar package name bc Highest
Product jar package name bouncycastle Highest
Product jar package name crypto Highest
Product jar package name jce Highest
Product jar package name org Highest
Product jar package name provider Highest
Product Manifest application-library-allowable-codebase * Low
Product Manifest Bundle-Name bcprov Medium
Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low
Product Manifest bundle-symbolicname bcprov Medium
Product Manifest caller-allowable-codebase * Low
Product Manifest codebase * Low
Product Manifest multi-release true Low
Product Manifest permissions all-permissions Low
Product Manifest trusted-library true Low
Product pom artifactid bcprov-jdk18on Highest
Product pom developer email feedback-crypto@bouncycastle.org Low
Product pom developer id feedback-crypto Low
Product pom developer name The Legion of the Bouncy Castle Inc. Low
Product pom groupid org.bouncycastle Highest
Product pom name Bouncy Castle Provider High
Product pom url https://www.bouncycastle.org/download/bouncy-castle-java/ Medium
Version file version 1.82 High
Version Manifest Bundle-Version 1.82 High
Version pom version 1.82 Highest
byte-buddy-1.18.4.jar
Description:
Byte Buddy is a Java library for creating Java classes at run time.
This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy/1.18.4/byte-buddy-1.18.4.jar
MD5: 8ce9e8aa44bb803d907d90126ac90b8d
SHA1: 663e2e22268f372e3209f9e212a43ca1c150ab43
SHA256: 9c828fa0adc9d607eaaa79259c2eae28eeb013bee656651b323ae15d448bde18
Referenced In Projects/Scopes:
waffle-tests:compile
waffle-tests-jakarta:compile
byte-buddy-1.18.4.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.mockito/mockito-core@5.21.0
pkg:maven/org.mockito/mockito-core@5.21.0
Evidence
Type Source Name Value Confidence
Vendor file name byte-buddy High
Vendor jar package name asm Highest
Vendor jar package name build Highest
Vendor jar package name bytebuddy Highest
Vendor jar package name net Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid byte-buddy Highest
Vendor pom artifactid byte-buddy Low
Vendor pom groupid net.bytebuddy Highest
Vendor pom name Byte Buddy (without dependencies) High
Vendor pom parent-artifactid byte-buddy-parent Low
Product file name byte-buddy High
Product jar package name asm Highest
Product jar package name build Highest
Product jar package name bytebuddy Highest
Product jar package name net Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium
Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium
Product Manifest multi-release true Low
Product pom artifactid byte-buddy Highest
Product pom groupid net.bytebuddy Highest
Product pom name Byte Buddy (without dependencies) High
Product pom parent-artifactid byte-buddy-parent Medium
Version file version 1.18.4 High
Version Manifest Bundle-Version 1.18.4 High
Version pom version 1.18.4 Highest
pkg:maven/net.bytebuddy/byte-buddy@1.18.4
(Confidence :High)
byte-buddy-agent-1.18.4.jar
Description:
The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy-agent/1.18.4/byte-buddy-agent-1.18.4.jar
MD5: 1825f4cba6f1f602d1f9d7e558e896f1
SHA1: 7ef8cd821c4a69426fa7c99a6070b8b1b02e3abf
SHA256: f22dd13a5a501fa84948d9332e9624794dbb3532f843a30d2faaeba5e5078953
Referenced In Projects/Scopes:
waffle-tests:compile
waffle-tests-jakarta:compile
byte-buddy-agent-1.18.4.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.mockito/mockito-core@5.21.0
pkg:maven/org.mockito/mockito-core@5.21.0
Evidence
Type Source Name Value Confidence
Vendor file name byte-buddy-agent High
Vendor jar package name agent Highest
Vendor jar package name bytebuddy Highest
Vendor jar package name net Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium
Vendor Manifest can-redefine-classes true Low
Vendor Manifest can-retransform-classes true Low
Vendor Manifest can-set-native-method-prefix true Low
Vendor Manifest multi-release true Low
Vendor pom artifactid byte-buddy-agent Highest
Vendor pom artifactid byte-buddy-agent Low
Vendor pom groupid net.bytebuddy Highest
Vendor pom name Byte Buddy agent High
Vendor pom parent-artifactid byte-buddy-parent Low
Product file name byte-buddy-agent High
Product jar package name agent Highest
Product jar package name bytebuddy Highest
Product jar package name net Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest Bundle-Name Byte Buddy agent Medium
Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium
Product Manifest can-redefine-classes true Low
Product Manifest can-retransform-classes true Low
Product Manifest can-set-native-method-prefix true Low
Product Manifest multi-release true Low
Product pom artifactid byte-buddy-agent Highest
Product pom groupid net.bytebuddy Highest
Product pom name Byte Buddy agent High
Product pom parent-artifactid byte-buddy-parent Medium
Version file version 1.18.4 High
Version Manifest Bundle-Version 1.18.4 High
Version pom version 1.18.4 Highest
pkg:maven/net.bytebuddy/byte-buddy-agent@1.18.4
(Confidence :High)
byte-buddy-agent-1.18.4.jar: attach_hotspot_windows.dll
File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy-agent/1.18.4/byte-buddy-agent-1.18.4.jar/win32-x86-64/attach_hotspot_windows.dll
MD5: 053a783e5777c6a9867c27d51af89677
SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76
SHA256: 16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20
Referenced In Projects/Scopes:
waffle-tests:compile
waffle-tests-jakarta:compile
Evidence
Type Source Name Value Confidence
Vendor file name attach_hotspot_windows High
Product file name attach_hotspot_windows High
byte-buddy-agent-1.18.4.jar: attach_hotspot_windows.dll
File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy-agent/1.18.4/byte-buddy-agent-1.18.4.jar/win32-x86/attach_hotspot_windows.dll
MD5: fbca33102ac97be0ed496c0f78e466b3
SHA1: c4df05146a86a6d073769bb697d550ef42518ed5
SHA256: 810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72
Referenced In Projects/Scopes:
waffle-tests:compile
waffle-tests-jakarta:compile
Evidence
Type Source Name Value Confidence
Vendor file name attach_hotspot_windows High
Product file name attach_hotspot_windows High
caffeine-3.2.3.jar
Description:
A high performance caching library
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/github/ben-manes/caffeine/caffeine/3.2.3/caffeine-3.2.3.jar
MD5: 0258f45d43968523cc11beeb01b240f2
SHA1: c097f0f6d21a0e6db88ea55836e26419b30dfe19
SHA256: ca70c90a5d1ce1511880ce9c93d4ad22108f61111d3daf91eb52762b571bd179
Referenced In Projects/Scopes:
waffle-demo-form:compile
waffle-tests:compile
waffle-jna:compile
waffle-demo-mixed-post-jakarta:provided
waffle-spring-boot-autoconfigure3:compile
waffle-spring-boot-autoconfigure4:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-filter-jakarta:compile
waffle-spring-boot-starter3:compile
waffle-demo-mixed:provided
waffle-demo-form-jakarta:compile
waffle-demo-negotiate-jakarta:provided
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-tests-jakarta:compile
waffle-demo-mixed-post:provided
waffle-demo-jaas:compile
waffle-spring-security7:compile
waffle-jna-jakarta:compile
waffle-demo-negotiate:provided
waffle-demo-filter:compile
waffle-demo-spring-form-jakarta:compile
waffle-spring-security5:compile
waffle-tomcat11:compile
waffle-spring-security6:compile
waffle-tomcat10:compile
waffle-shiro:compile
waffle-demo-spring-boot-filter3:compile
waffle-demo-jaas-jakarta:compile
waffle-demo-spring-boot-filter4:compile
waffle-demo-spring-form:compile
waffle-demo-mixed-jakarta:provided
waffle-jetty-jakarta:compile
waffle-demo-spring-boot-filter2:compile
waffle-distro-jakarta:runtime
waffle-shiro-jakarta:compile
waffle-tomcat9:compile
waffle-jetty:compile
waffle-demo-spring-filter:compile
caffeine-3.2.3.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat10@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-negotiate-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat9@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-negotiate@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed-post@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-post-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name caffeine High
Vendor jar package name cache Highest
Vendor jar package name caffeine Highest
Vendor jar package name github Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium
Vendor pom artifactid caffeine Highest
Vendor pom artifactid caffeine Low
Vendor pom developer email ben.manes@gmail.com Low
Vendor pom developer id ben-manes Medium
Vendor pom developer name Ben Manes Medium
Vendor pom groupid com.github.ben-manes.caffeine Highest
Vendor pom name Caffeine cache High
Vendor pom url ben-manes/caffeine Highest
Product file name caffeine High
Product jar package name cache Highest
Product jar package name caffeine Highest
Product jar package name github Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest Bundle-Name com.github.ben-manes.caffeine Medium
Product Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium
Product Manifest Implementation-Title A high performance caching library High
Product pom artifactid caffeine Highest
Product pom developer email ben.manes@gmail.com Low
Product pom developer id ben-manes Low
Product pom developer name Ben Manes Low
Product pom groupid com.github.ben-manes.caffeine Highest
Product pom name Caffeine cache High
Product pom url ben-manes/caffeine High
Version file version 3.2.3 High
Version Manifest Bundle-Version 3.2.3 High
Version Manifest Implementation-Version 3.2.3 High
Version pom version 3.2.3 Highest
pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3
(Confidence :High)
checker-qual-3.53.0.jar
Description:
checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.
License:
The MIT License: http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/org/checkerframework/checker-qual/3.53.0/checker-qual-3.53.0.jar
MD5: d1ee2a3366a19a8fff01208da2adb48e
SHA1: af1105964a03d7ed8aaf8ea2cb6ec0da7ec6c7a6
SHA256: 7ca002815d92fad79e966b375c2ee7b2b4bf953024bc9a5d5e0c59df13ff5af8
Referenced In Projects/Scopes:
waffle-demo-form:compile
waffle-tests:compile
waffle-jna:compile
waffle-demo-mixed-post-jakarta:provided
waffle-spring-boot-autoconfigure3:compile
waffle-spring-boot-autoconfigure4:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-filter-jakarta:compile
waffle-spring-boot-starter3:compile
waffle-demo-mixed:provided
waffle-demo-form-jakarta:compile
waffle-demo-negotiate-jakarta:provided
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-tests-jakarta:compile
waffle-demo-mixed-post:provided
waffle-demo-jaas:compile
waffle-spring-security7:compile
waffle-jna-jakarta:compile
waffle-demo-negotiate:provided
waffle-demo-filter:compile
waffle-demo-spring-form-jakarta:compile
waffle-spring-security5:compile
waffle-tomcat11:compile
waffle-spring-security6:compile
waffle-tomcat10:compile
waffle-shiro:compile
waffle-demo-spring-boot-filter3:compile
waffle-demo-jaas-jakarta:compile
waffle-demo-spring-boot-filter4:compile
waffle-demo-spring-form:compile
waffle-demo-mixed-jakarta:provided
waffle-jetty-jakarta:compile
waffle-demo-spring-boot-filter2:compile
waffle-distro-jakarta:runtime
waffle-shiro-jakarta:compile
waffle-tomcat9:compile
waffle-jetty:compile
waffle-demo-spring-filter:compile
checker-qual-3.53.0.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.hazendaz.jmockit/jmockit@2.1.0
pkg:maven/com.github.hazendaz.jmockit/jmockit@2.1.0
pkg:maven/com.github.hazendaz.jmockit/jmockit@2.1.0
pkg:maven/com.github.hazendaz.jmockit/jmockit@2.1.0
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.hazendaz.jmockit/jmockit@2.1.0
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.hazendaz.jmockit/jmockit@2.1.0
pkg:maven/com.github.hazendaz.jmockit/jmockit@2.1.0
pkg:maven/com.github.hazendaz.jmockit/jmockit@2.1.0
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.hazendaz.jmockit/jmockit@2.1.0
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.hazendaz.jmockit/jmockit@2.1.0
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.hazendaz.jmockit/jmockit@2.1.0
pkg:maven/com.github.hazendaz.jmockit/jmockit@2.1.0
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name checker-qual High
Vendor jar package name checker Highest
Vendor jar package name checkerframework Highest
Vendor jar package name framework Highest
Vendor jar package name qual Highest
Vendor Manifest bundle-symbolicname checker-qual Medium
Vendor Manifest implementation-url https://checkerframework.org Low
Vendor pom artifactid checker-qual Highest
Vendor pom artifactid checker-qual Low
Vendor pom developer email mernst@cs.washington.edu Low
Vendor pom developer email smillst@cs.washington.edu Low
Vendor pom developer id mernst Medium
Vendor pom developer id smillst Medium
Vendor pom developer name Michael Ernst Medium
Vendor pom developer name Suzanne Millstein Medium
Vendor pom developer org University of Washington Medium
Vendor pom developer org URL https://www.cs.washington.edu/ Medium
Vendor pom groupid org.checkerframework Highest
Vendor pom name Checker Qual High
Vendor pom url https://checkerframework.org/ Highest
Product file name checker-qual High
Product jar package name checker Highest
Product jar package name checkerframework Highest
Product jar package name framework Highest
Product jar package name qual Highest
Product Manifest Bundle-Name checker-qual Medium
Product Manifest bundle-symbolicname checker-qual Medium
Product Manifest implementation-url https://checkerframework.org Low
Product pom artifactid checker-qual Highest
Product pom developer email mernst@cs.washington.edu Low
Product pom developer email smillst@cs.washington.edu Low
Product pom developer id mernst Low
Product pom developer id smillst Low
Product pom developer name Michael Ernst Low
Product pom developer name Suzanne Millstein Low
Product pom developer org University of Washington Low
Product pom developer org URL https://www.cs.washington.edu/ Low
Product pom groupid org.checkerframework Highest
Product pom name Checker Qual High
Product pom url https://checkerframework.org/ Medium
Version file version 3.53.0 High
Version Manifest Bundle-Version 3.53.0 High
Version Manifest Implementation-Version 3.53.0 High
Version pom version 3.53.0 Highest
pkg:maven/org.checkerframework/checker-qual@3.53.0
(Confidence :High)
com.github.waffle.demo.jakarta:waffle-demo-filter-jakarta:3.6.0-SNAPSHOT
Description:
Filter Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo-jakarta/waffle-demo-filter-jakarta/pom.xml
Referenced In Project/Scope: waffle-distro-jakarta
com.github.waffle.demo.jakarta:waffle-demo-filter-jakarta:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-filter-jakarta Low
Vendor project groupid com.github.waffle.demo.jakarta Highest
Product file name pom High
Product project artifactid waffle-demo-filter-jakarta Highest
Product project groupid com.github.waffle.demo.jakarta Low
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-filter-jakarta@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo.jakarta:waffle-demo-form-jakarta:3.6.0-SNAPSHOT
Description:
Form Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo-jakarta/waffle-demo-form-jakarta/pom.xml
Referenced In Project/Scope: waffle-distro-jakarta
com.github.waffle.demo.jakarta:waffle-demo-form-jakarta:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-form-jakarta Low
Vendor project groupid com.github.waffle.demo.jakarta Highest
Product file name pom High
Product project artifactid waffle-demo-form-jakarta Highest
Product project groupid com.github.waffle.demo.jakarta Low
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-form-jakarta@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo.jakarta:waffle-demo-jaas-jakarta:3.6.0-SNAPSHOT
Description:
Jaas Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo-jakarta/waffle-demo-jaas-jakarta/pom.xml
Referenced In Project/Scope: waffle-distro-jakarta
com.github.waffle.demo.jakarta:waffle-demo-jaas-jakarta:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-jaas-jakarta Low
Vendor project groupid com.github.waffle.demo.jakarta Highest
Product file name pom High
Product project artifactid waffle-demo-jaas-jakarta Highest
Product project groupid com.github.waffle.demo.jakarta Low
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-jaas-jakarta@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo.jakarta:waffle-demo-mixed-jakarta:3.6.0-SNAPSHOT
Description:
Mixed Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo-jakarta/waffle-demo-mixed-jakarta/pom.xml
Referenced In Project/Scope: waffle-distro-jakarta
com.github.waffle.demo.jakarta:waffle-demo-mixed-jakarta:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-mixed-jakarta Low
Vendor project groupid com.github.waffle.demo.jakarta Highest
Product file name pom High
Product project artifactid waffle-demo-mixed-jakarta Highest
Product project groupid com.github.waffle.demo.jakarta Low
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-jakarta@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo.jakarta:waffle-demo-mixed-post-jakarta:3.6.0-SNAPSHOT
Description:
Mixed Post Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo-jakarta/waffle-demo-mixed-post-jakarta/pom.xml
Referenced In Project/Scope: waffle-distro-jakarta
com.github.waffle.demo.jakarta:waffle-demo-mixed-post-jakarta:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-mixed-post-jakarta Low
Vendor project groupid com.github.waffle.demo.jakarta Highest
Product file name pom High
Product project artifactid waffle-demo-mixed-post-jakarta Highest
Product project groupid com.github.waffle.demo.jakarta Low
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-post-jakarta@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo.jakarta:waffle-demo-negotiate-jakarta:3.6.0-SNAPSHOT
Description:
Negotiate Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo-jakarta/waffle-demo-negotiate-jakarta/pom.xml
Referenced In Project/Scope: waffle-distro-jakarta
com.github.waffle.demo.jakarta:waffle-demo-negotiate-jakarta:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-negotiate-jakarta Low
Vendor project groupid com.github.waffle.demo.jakarta Highest
Product file name pom High
Product project artifactid waffle-demo-negotiate-jakarta Highest
Product project groupid com.github.waffle.demo.jakarta Low
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-negotiate-jakarta@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo.jakarta:waffle-demo-spring-boot-filter3:3.6.0-SNAPSHOT
Description:
Spring Boot Filter 3 Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo-jakarta/waffle-demo-spring-boot-filter3/pom.xml
Referenced In Project/Scope: waffle-distro-jakarta
com.github.waffle.demo.jakarta:waffle-demo-spring-boot-filter3:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-spring-boot-filter3 Low
Vendor project groupid com.github.waffle.demo.jakarta Highest
Product file name pom High
Product project artifactid waffle-demo-spring-boot-filter3 Highest
Product project groupid com.github.waffle.demo.jakarta Low
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter3@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo.jakarta:waffle-demo-spring-filter-jakarta:3.6.0-SNAPSHOT
Description:
Spring Filter Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo-jakarta/waffle-demo-spring-filter-jakarta/pom.xml
Referenced In Project/Scope: waffle-distro-jakarta
com.github.waffle.demo.jakarta:waffle-demo-spring-filter-jakarta:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-spring-filter-jakarta Low
Vendor project groupid com.github.waffle.demo.jakarta Highest
Product file name pom High
Product project artifactid waffle-demo-spring-filter-jakarta Highest
Product project groupid com.github.waffle.demo.jakarta Low
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-filter-jakarta@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo.jakarta:waffle-demo-spring-form-jakarta:3.6.0-SNAPSHOT
Description:
Spring Form Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo-jakarta/waffle-demo-spring-form-jakarta/pom.xml
Referenced In Project/Scope: waffle-distro-jakarta
com.github.waffle.demo.jakarta:waffle-demo-spring-form-jakarta:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-spring-form-jakarta Low
Vendor project groupid com.github.waffle.demo.jakarta Highest
Product file name pom High
Product project artifactid waffle-demo-spring-form-jakarta Highest
Product project groupid com.github.waffle.demo.jakarta Low
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-form-jakarta@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo:waffle-demo-filter:3.6.0-SNAPSHOT
Description:
Filter Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo/waffle-demo-filter/pom.xml
Referenced In Project/Scope: waffle-distro
com.github.waffle.demo:waffle-demo-filter:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-filter Low
Vendor project groupid com.github.waffle.demo Highest
Product file name pom High
Product project artifactid waffle-demo-filter Highest
Product project groupid com.github.waffle.demo Low
pkg:maven/com.github.waffle.demo/waffle-demo-filter@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo:waffle-demo-form:3.6.0-SNAPSHOT
Description:
Form Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo/waffle-demo-form/pom.xml
Referenced In Project/Scope: waffle-distro
com.github.waffle.demo:waffle-demo-form:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-form Low
Vendor project groupid com.github.waffle.demo Highest
Product file name pom High
Product project artifactid waffle-demo-form Highest
Product project groupid com.github.waffle.demo Low
pkg:maven/com.github.waffle.demo/waffle-demo-form@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo:waffle-demo-jaas:3.6.0-SNAPSHOT
Description:
Jaas Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo/waffle-demo-jaas/pom.xml
Referenced In Project/Scope: waffle-distro
com.github.waffle.demo:waffle-demo-jaas:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-jaas Low
Vendor project groupid com.github.waffle.demo Highest
Product file name pom High
Product project artifactid waffle-demo-jaas Highest
Product project groupid com.github.waffle.demo Low
pkg:maven/com.github.waffle.demo/waffle-demo-jaas@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo:waffle-demo-mixed-post:3.6.0-SNAPSHOT
Description:
Mixed Post Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo/waffle-demo-mixed-post/pom.xml
Referenced In Project/Scope: waffle-distro
com.github.waffle.demo:waffle-demo-mixed-post:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-mixed-post Low
Vendor project groupid com.github.waffle.demo Highest
Product file name pom High
Product project artifactid waffle-demo-mixed-post Highest
Product project groupid com.github.waffle.demo Low
pkg:maven/com.github.waffle.demo/waffle-demo-mixed-post@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo:waffle-demo-mixed:3.6.0-SNAPSHOT
Description:
Mixed Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo/waffle-demo-mixed/pom.xml
Referenced In Project/Scope: waffle-distro
com.github.waffle.demo:waffle-demo-mixed:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-mixed Low
Vendor project groupid com.github.waffle.demo Highest
Product file name pom High
Product project artifactid waffle-demo-mixed Highest
Product project groupid com.github.waffle.demo Low
pkg:maven/com.github.waffle.demo/waffle-demo-mixed@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo:waffle-demo-negotiate:3.6.0-SNAPSHOT
Description:
Negotiate Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo/waffle-demo-negotiate/pom.xml
Referenced In Project/Scope: waffle-distro
com.github.waffle.demo:waffle-demo-negotiate:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-negotiate Low
Vendor project groupid com.github.waffle.demo Highest
Product file name pom High
Product project artifactid waffle-demo-negotiate Highest
Product project groupid com.github.waffle.demo Low
pkg:maven/com.github.waffle.demo/waffle-demo-negotiate@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo:waffle-demo-spring-boot-filter2:3.6.0-SNAPSHOT
Description:
Spring Boot Filter 2 Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo/waffle-demo-spring-boot-filter2/pom.xml
Referenced In Project/Scope: waffle-distro
com.github.waffle.demo:waffle-demo-spring-boot-filter2:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-spring-boot-filter2 Low
Vendor project groupid com.github.waffle.demo Highest
Product file name pom High
Product project artifactid waffle-demo-spring-boot-filter2 Highest
Product project groupid com.github.waffle.demo Low
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo:waffle-demo-spring-filter:3.6.0-SNAPSHOT
Description:
Spring Filter Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo/waffle-demo-spring-filter/pom.xml
Referenced In Project/Scope: waffle-distro
com.github.waffle.demo:waffle-demo-spring-filter:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-spring-filter Low
Vendor project groupid com.github.waffle.demo Highest
Product file name pom High
Product project artifactid waffle-demo-spring-filter Highest
Product project groupid com.github.waffle.demo Low
pkg:maven/com.github.waffle.demo/waffle-demo-spring-filter@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle.demo:waffle-demo-spring-form:3.6.0-SNAPSHOT
Description:
Spring Form Demo for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-demo/waffle-demo-spring-form/pom.xml
Referenced In Project/Scope: waffle-distro
com.github.waffle.demo:waffle-demo-spring-form:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-demo-spring-form Low
Vendor project groupid com.github.waffle.demo Highest
Product file name pom High
Product project artifactid waffle-demo-spring-form Highest
Product project groupid com.github.waffle.demo Low
pkg:maven/com.github.waffle.demo/waffle-demo-spring-form@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-jetty-jakarta:3.6.0-SNAPSHOT
Description:
Jetty Jakarta integration for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-jetty-jakarta/pom.xml
Referenced In Project/Scope: waffle-distro-jakarta
com.github.waffle:waffle-jetty-jakarta:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-jetty-jakarta Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-jetty-jakarta Highest
Product project groupid com.github.waffle Low
com.github.waffle:waffle-jetty:3.6.0-SNAPSHOT
Description:
Jetty integration for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-jetty/pom.xml
Referenced In Project/Scope: waffle-distro
com.github.waffle:waffle-jetty:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-jetty Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-jetty Highest
Product project groupid com.github.waffle Low
com.github.waffle:waffle-jna-jakarta:3.6.0-SNAPSHOT
Description:
WAFFLE JNA Jakarta Pakage implementation
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-jna-jakarta/pom.xml
Referenced In Projects/Scopes:
waffle-spring-boot-autoconfigure4
waffle-spring-boot-starter3
waffle-spring-boot-starter4
waffle-spring-boot-autoconfigure3
waffle-shiro-jakarta
waffle-tomcat10
waffle-jetty-jakarta
waffle-tomcat11
waffle-demo-filter-jakarta
waffle-demo-spring-form-jakarta
waffle-distro-jakarta
waffle-spring-security7
waffle-spring-security6
waffle-demo-mixed-jakarta
waffle-demo-negotiate-jakarta
waffle-demo-spring-filter-jakarta
waffle-tests-jakarta
waffle-demo-mixed-post-jakarta
waffle-demo-form-jakarta
waffle-demo-spring-boot-filter4
waffle-demo-spring-boot-filter3
waffle-demo-jaas-jakarta
com.github.waffle:waffle-jna-jakarta:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-post-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-filter-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-form-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-negotiate-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-shiro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tests-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-filter-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-jaas-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-form-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat10@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat11@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-jna-jakarta Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-jna-jakarta Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-jna:3.6.0-SNAPSHOT
Description:
WAFFLE JNA implementation
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-jna/pom.xml
Referenced In Projects/Scopes:
waffle-demo-spring-form
waffle-demo-negotiate
waffle-demo-jaas
waffle-shiro
waffle-demo-spring-boot-filter2
waffle-demo-form
waffle-tests
waffle-spring-boot-starter2
waffle-demo-mixed-post
waffle-spring-boot-autoconfigure2
waffle-distro
waffle-spring-security5
waffle-tomcat9
waffle-demo-spring-filter
waffle-demo-mixed
waffle-jetty
waffle-demo-filter
com.github.waffle:waffle-jna:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-negotiate@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed-post@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jetty@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat9@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-filter@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-form@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-form@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-shiro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tests@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-filter@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-jaas@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-jna Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-jna Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-shiro-jakarta:3.6.0-SNAPSHOT
Description:
Shiro Jakarta Integration for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-shiro-jakarta/pom.xml
Referenced In Project/Scope: waffle-distro-jakarta
com.github.waffle:waffle-shiro-jakarta:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-shiro-jakarta Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-shiro-jakarta Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-shiro-jakarta@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-shiro:3.6.0-SNAPSHOT
Description:
Shiro integration for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-shiro/pom.xml
Referenced In Project/Scope: waffle-distro
com.github.waffle:waffle-shiro:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-shiro Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-shiro Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-shiro@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-spring-boot-autoconfigure2:3.6.0-SNAPSHOT
Description:
Spring Boot 2 Autoconfigure for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-spring-boot2/waffle-spring-boot-autoconfigure2/pom.xml
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter2
waffle-spring-boot-starter2
waffle-distro
com.github.waffle:waffle-spring-boot-autoconfigure2:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-spring-boot-autoconfigure2 Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-spring-boot-autoconfigure2 Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-spring-boot-autoconfigure3:3.6.0-SNAPSHOT
Description:
Spring Boot 3 Autoconfigure for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-spring-boot3/waffle-spring-boot-autoconfigure3/pom.xml
Referenced In Projects/Scopes:
waffle-spring-boot-starter3
waffle-distro-jakarta
waffle-demo-spring-boot-filter3
com.github.waffle:waffle-spring-boot-autoconfigure3:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-spring-boot-autoconfigure3 Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-spring-boot-autoconfigure3 Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure3@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-spring-boot-autoconfigure4:3.6.0-SNAPSHOT
Description:
Spring Boot 4 Autoconfigure for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-spring-boot4/waffle-spring-boot-autoconfigure4/pom.xml
Referenced In Projects/Scopes:
waffle-distro-jakarta
waffle-spring-boot-starter4
waffle-demo-spring-boot-filter4
com.github.waffle:waffle-spring-boot-autoconfigure4:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-boot-starter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter4@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-spring-boot-autoconfigure4 Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-spring-boot-autoconfigure4 Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure4@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-spring-boot-starter2:3.6.0-SNAPSHOT
Description:
Spring Boot 2 Starter for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-spring-boot2/waffle-spring-boot-starter2/pom.xml
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter2
waffle-distro
com.github.waffle:waffle-spring-boot-starter2:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-spring-boot-starter2 Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-spring-boot-starter2 Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-spring-boot-starter3:3.6.0-SNAPSHOT
Description:
Spring Boot 3 Starter for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-spring-boot3/waffle-spring-boot-starter3/pom.xml
Referenced In Projects/Scopes:
waffle-distro-jakarta
waffle-demo-spring-boot-filter3
com.github.waffle:waffle-spring-boot-starter3:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter3@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-spring-boot-starter3 Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-spring-boot-starter3 Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-spring-boot-starter4:3.6.0-SNAPSHOT
Description:
Spring Boot 4 Starter for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-spring-boot4/waffle-spring-boot-starter4/pom.xml
Referenced In Projects/Scopes:
waffle-distro-jakarta
waffle-demo-spring-boot-filter4
com.github.waffle:waffle-spring-boot-starter4:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-spring-boot-starter4 Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-spring-boot-starter4 Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-spring-boot-starter4@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-spring-security5:3.6.0-SNAPSHOT
Description:
Spring Security 5 integration for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-spring-security5/pom.xml
Referenced In Projects/Scopes:
waffle-demo-spring-form
waffle-demo-spring-boot-filter2
waffle-spring-boot-starter2
waffle-spring-boot-autoconfigure2
waffle-distro
waffle-demo-spring-filter
com.github.waffle:waffle-spring-security5:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo/waffle-demo-spring-form@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-filter@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-spring-security5 Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-spring-security5 Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-spring-security6:3.6.0-SNAPSHOT
Description:
Spring Security 6 integration for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-spring-security6/pom.xml
Referenced In Projects/Scopes:
waffle-demo-spring-form-jakarta
waffle-spring-boot-starter3
waffle-distro-jakarta
waffle-spring-boot-autoconfigure3
waffle-demo-spring-filter-jakarta
waffle-demo-spring-boot-filter3
com.github.waffle:waffle-spring-security6:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-filter-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-form-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-spring-security6 Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-spring-security6 Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-spring-security7:3.6.0-SNAPSHOT
Description:
Spring Security 7 integration for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-spring-security7/pom.xml
Referenced In Projects/Scopes:
waffle-spring-boot-autoconfigure4
waffle-distro-jakarta
waffle-spring-boot-starter4
waffle-demo-spring-boot-filter4
com.github.waffle:waffle-spring-security7:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter4@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-spring-security7 Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-spring-security7 Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-tomcat10:3.6.0-SNAPSHOT
Description:
Tomcat 10 integration for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-tomcat10/pom.xml
Referenced In Projects/Scopes:
waffle-demo-filter-jakarta
waffle-distro-jakarta
waffle-demo-mixed-jakarta
waffle-demo-negotiate-jakarta
waffle-demo-mixed-post-jakarta
com.github.waffle:waffle-tomcat10:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-negotiate-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-filter-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-post-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-tomcat10 Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-tomcat10 Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-tomcat10@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-tomcat11:3.6.0-SNAPSHOT
Description:
Tomcat 11 integration for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-tomcat11/pom.xml
Referenced In Project/Scope: waffle-distro-jakarta
com.github.waffle:waffle-tomcat11:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-tomcat11 Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-tomcat11 Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-tomcat11@3.6.0-SNAPSHOT
(Confidence :Highest)
com.github.waffle:waffle-tomcat9:3.6.0-SNAPSHOT
Description:
Tomcat 9 integration for WAFFLE
License:
MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-tomcat9/pom.xml
Referenced In Projects/Scopes:
waffle-demo-negotiate
waffle-demo-filter
waffle-demo-mixed-post
waffle-distro
waffle-demo-mixed
com.github.waffle:waffle-tomcat9:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo/waffle-demo-negotiate@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-filter@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed-post@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name pom High
Vendor project artifactid waffle-tomcat9 Low
Vendor project groupid com.github.waffle Highest
Product file name pom High
Product project artifactid waffle-tomcat9 Highest
Product project groupid com.github.waffle Low
pkg:maven/com.github.waffle/waffle-tomcat9@3.6.0-SNAPSHOT
(Confidence :Highest)
commons-beanutils-1.11.0.jar
Description:
Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar
MD5: 32ed51f196dfda19e0dc1ce53eeed29e
SHA1: ac03ea606d13de04c2e4508227680faff151f491
SHA256: 9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709
Referenced In Projects/Scopes:
waffle-shiro:provided
waffle-shiro-jakarta:provided
commons-beanutils-1.11.0.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-shiro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-shiro-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name commons-beanutils High
Vendor jar package name apache Highest
Vendor jar package name beanutils Highest
Vendor jar package name commons Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-beanutils Low
Vendor Manifest bundle-symbolicname org.apache.commons.commons-beanutils Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest Implementation-Vendor-Id org.apache Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-beanutils Highest
Vendor pom artifactid commons-beanutils Low
Vendor pom developer email britter@apache.org Low
Vendor pom developer email chtompki@apache.org Low
Vendor pom developer email craigmcc@apache.org Low
Vendor pom developer email dion@apache.org Low
Vendor pom developer email epugh@apache.org Low
Vendor pom developer email geirm@apache.org Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer email jcarman@apache.org Low
Vendor pom developer email jconlon@apache.org Low
Vendor pom developer email jstrachan@apache.org Low
Vendor pom developer email morgand@apache.org Low
Vendor pom developer email mvdb@apache.org Low
Vendor pom developer email niallp@apache.org Low
Vendor pom developer email rdonkin@apache.org Low
Vendor pom developer email rwaldhoff@apache.org Low
Vendor pom developer email sanders@apache.org Low
Vendor pom developer email scolebourne@apache.org Low
Vendor pom developer email skitching@apache.org Low
Vendor pom developer email stain@apache.org Low
Vendor pom developer email tobrien@apache.org Low
Vendor pom developer email yoavs@apache.org Low
Vendor pom developer id britter Medium
Vendor pom developer id chtompki Medium
Vendor pom developer id craigmcc Medium
Vendor pom developer id dion Medium
Vendor pom developer id epugh Medium
Vendor pom developer id geirm Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id jcarman Medium
Vendor pom developer id jconlon Medium
Vendor pom developer id jstrachan Medium
Vendor pom developer id morgand Medium
Vendor pom developer id mvdb Medium
Vendor pom developer id niallp Medium
Vendor pom developer id rdonkin Medium
Vendor pom developer id rwaldhoff Medium
Vendor pom developer id sanders Medium
Vendor pom developer id scolebourne Medium
Vendor pom developer id skitching Medium
Vendor pom developer id stain Medium
Vendor pom developer id tobrien Medium
Vendor pom developer id yoavs Medium
Vendor pom developer name Benedikt Ritter Medium
Vendor pom developer name Craig McClanahan Medium
Vendor pom developer name David Eric Pugh Medium
Vendor pom developer name Dion Gillard Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Geir Magnusson Jr. Medium
Vendor pom developer name James Carman Medium
Vendor pom developer name James Strachan Medium
Vendor pom developer name John E. Conlon Medium
Vendor pom developer name Martin van den Bemt Medium
Vendor pom developer name Morgan James Delagrange Medium
Vendor pom developer name Niall Pemberton Medium
Vendor pom developer name Rob Tompkins Medium
Vendor pom developer name Robert Burrell Donkin Medium
Vendor pom developer name Rodney Waldhoff Medium
Vendor pom developer name Scott Sanders Medium
Vendor pom developer name Simon Kitching Medium
Vendor pom developer name Stephen Colebourne Medium
Vendor pom developer name Stian Soiland-Reyes Medium
Vendor pom developer name Tim O'Brien Medium
Vendor pom developer name Yoav Shapira Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid commons-beanutils Highest
Vendor pom name Apache Commons BeanUtils High
Vendor pom parent-artifactid commons-parent Low
Vendor pom parent-groupid org.apache.commons Medium
Vendor pom url https://commons.apache.org/proper/commons-beanutils Highest
Product file name commons-beanutils High
Product jar package name apache Highest
Product jar package name beanutils Highest
Product jar package name commons Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-beanutils Low
Product Manifest Bundle-Name Apache Commons BeanUtils Medium
Product Manifest bundle-symbolicname org.apache.commons.commons-beanutils Medium
Product Manifest Implementation-Title Apache Commons BeanUtils High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons BeanUtils Medium
Product pom artifactid commons-beanutils Highest
Product pom developer email britter@apache.org Low
Product pom developer email chtompki@apache.org Low
Product pom developer email craigmcc@apache.org Low
Product pom developer email dion@apache.org Low
Product pom developer email epugh@apache.org Low
Product pom developer email geirm@apache.org Low
Product pom developer email ggregory at apache.org Low
Product pom developer email jcarman@apache.org Low
Product pom developer email jconlon@apache.org Low
Product pom developer email jstrachan@apache.org Low
Product pom developer email morgand@apache.org Low
Product pom developer email mvdb@apache.org Low
Product pom developer email niallp@apache.org Low
Product pom developer email rdonkin@apache.org Low
Product pom developer email rwaldhoff@apache.org Low
Product pom developer email sanders@apache.org Low
Product pom developer email scolebourne@apache.org Low
Product pom developer email skitching@apache.org Low
Product pom developer email stain@apache.org Low
Product pom developer email tobrien@apache.org Low
Product pom developer email yoavs@apache.org Low
Product pom developer id britter Low
Product pom developer id chtompki Low
Product pom developer id craigmcc Low
Product pom developer id dion Low
Product pom developer id epugh Low
Product pom developer id geirm Low
Product pom developer id ggregory Low
Product pom developer id jcarman Low
Product pom developer id jconlon Low
Product pom developer id jstrachan Low
Product pom developer id morgand Low
Product pom developer id mvdb Low
Product pom developer id niallp Low
Product pom developer id rdonkin Low
Product pom developer id rwaldhoff Low
Product pom developer id sanders Low
Product pom developer id scolebourne Low
Product pom developer id skitching Low
Product pom developer id stain Low
Product pom developer id tobrien Low
Product pom developer id yoavs Low
Product pom developer name Benedikt Ritter Low
Product pom developer name Craig McClanahan Low
Product pom developer name David Eric Pugh Low
Product pom developer name Dion Gillard Low
Product pom developer name Gary Gregory Low
Product pom developer name Geir Magnusson Jr. Low
Product pom developer name James Carman Low
Product pom developer name James Strachan Low
Product pom developer name John E. Conlon Low
Product pom developer name Martin van den Bemt Low
Product pom developer name Morgan James Delagrange Low
Product pom developer name Niall Pemberton Low
Product pom developer name Rob Tompkins Low
Product pom developer name Robert Burrell Donkin Low
Product pom developer name Rodney Waldhoff Low
Product pom developer name Scott Sanders Low
Product pom developer name Simon Kitching Low
Product pom developer name Stephen Colebourne Low
Product pom developer name Stian Soiland-Reyes Low
Product pom developer name Tim O'Brien Low
Product pom developer name Yoav Shapira Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid commons-beanutils Highest
Product pom name Apache Commons BeanUtils High
Product pom parent-artifactid commons-parent Medium
Product pom parent-groupid org.apache.commons Medium
Product pom url https://commons.apache.org/proper/commons-beanutils Medium
Version file version 1.11.0 High
Version Manifest Bundle-Version 1.11.0 High
Version Manifest Implementation-Version 1.11.0 High
Version pom parent-version 1.11.0 Low
Version pom version 1.11.0 Highest
commons-logging-1.3.5.jar
Description:
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
well-known logging systems.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-logging/commons-logging/1.3.5/commons-logging-1.3.5.jar
MD5: 9ca067b073153c86c2da350c0f2cdf70
SHA1: a3fcc5d3c29b2b03433aa2d2f2d2c1b1638924a1
SHA256: 6d7a744e4027649fbb50895df9497d109f98c766a637062fe8d2eabbb3140ba4
Referenced In Projects/Scopes:
waffle-spring-boot-autoconfigure3:compile
waffle-spring-security7:compile
waffle-spring-boot-autoconfigure4:compile
waffle-demo-spring-form-jakarta:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-security5:compile
waffle-spring-boot-starter2:compile
waffle-spring-security6:compile
waffle-shiro-jakarta:provided
waffle-spring-boot-autoconfigure2:compile
waffle-spring-boot-starter3:compile
waffle-demo-spring-boot-filter3:compile
waffle-shiro:provided
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-demo-spring-form:compile
waffle-demo-spring-boot-filter2:compile
waffle-distro-jakarta:runtime
waffle-demo-spring-filter:compile
commons-logging-1.3.5.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure4@3.6.0-SNAPSHOT
pkg:maven/commons-beanutils/commons-beanutils@1.11.0
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/commons-beanutils/commons-beanutils@1.11.0
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure3@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name commons-logging High
Vendor jar package name apache Highest
Vendor jar package name commons Highest
Vendor jar package name logging Highest
Vendor Manifest automatic-module-name org.apache.commons.logging Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-logging/ Low
Vendor Manifest bundle-symbolicname org.apache.commons.commons-logging Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid commons-logging Highest
Vendor pom artifactid commons-logging Low
Vendor pom developer email baliuka@apache.org Low
Vendor pom developer email costin@apache.org Low
Vendor pom developer email craigmcc@apache.org Low
Vendor pom developer email dennisl@apache.org Low
Vendor pom developer email donaldp@apache.org Low
Vendor pom developer email ggregory at apache.org Low
Vendor pom developer email morgand@apache.org Low
Vendor pom developer email rdonkin@apache.org Low
Vendor pom developer email rsitze@apache.org Low
Vendor pom developer email rwaldhoff@apache.org Low
Vendor pom developer email sanders@apache.org Low
Vendor pom developer email skitching@apache.org Low
Vendor pom developer email tn@apache.org Low
Vendor pom developer id baliuka Medium
Vendor pom developer id bstansberry Medium
Vendor pom developer id costin Medium
Vendor pom developer id craigmcc Medium
Vendor pom developer id dennisl Medium
Vendor pom developer id donaldp Medium
Vendor pom developer id ggregory Medium
Vendor pom developer id morgand Medium
Vendor pom developer id rdonkin Medium
Vendor pom developer id rsitze Medium
Vendor pom developer id rwaldhoff Medium
Vendor pom developer id sanders Medium
Vendor pom developer id skitching Medium
Vendor pom developer id tn Medium
Vendor pom developer name Brian Stansberry Medium
Vendor pom developer name Costin Manolache Medium
Vendor pom developer name Craig McClanahan Medium
Vendor pom developer name Dennis Lundberg Medium
Vendor pom developer name Gary Gregory Medium
Vendor pom developer name Juozas Baliuka Medium
Vendor pom developer name Morgan Delagrange Medium
Vendor pom developer name Peter Donald Medium
Vendor pom developer name Richard Sitze Medium
Vendor pom developer name Robert Burrell Donkin Medium
Vendor pom developer name Rodney Waldhoff Medium
Vendor pom developer name Scott Sanders Medium
Vendor pom developer name Simon Kitching Medium
Vendor pom developer name Thomas Neidhart Medium
Vendor pom developer org Apache Medium
Vendor pom developer org The Apache Software Foundation Medium
Vendor pom developer org URL https://www.apache.org/ Medium
Vendor pom groupid commons-logging Highest
Vendor pom name Apache Commons Logging High
Vendor pom parent-artifactid commons-parent Low
Vendor pom parent-groupid org.apache.commons Medium
Vendor pom url https://commons.apache.org/proper/commons-logging/ Highest
Product file name commons-logging High
Product jar package name apache Highest
Product jar package name commons Highest
Product jar package name logging Highest
Product Manifest automatic-module-name org.apache.commons.logging Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://commons.apache.org/proper/commons-logging/ Low
Product Manifest Bundle-Name Apache Commons Logging Medium
Product Manifest bundle-symbolicname org.apache.commons.commons-logging Medium
Product Manifest Implementation-Title Apache Commons Logging High
Product Manifest multi-release true Low
Product Manifest specification-title Apache Commons Logging Medium
Product pom artifactid commons-logging Highest
Product pom developer email baliuka@apache.org Low
Product pom developer email costin@apache.org Low
Product pom developer email craigmcc@apache.org Low
Product pom developer email dennisl@apache.org Low
Product pom developer email donaldp@apache.org Low
Product pom developer email ggregory at apache.org Low
Product pom developer email morgand@apache.org Low
Product pom developer email rdonkin@apache.org Low
Product pom developer email rsitze@apache.org Low
Product pom developer email rwaldhoff@apache.org Low
Product pom developer email sanders@apache.org Low
Product pom developer email skitching@apache.org Low
Product pom developer email tn@apache.org Low
Product pom developer id baliuka Low
Product pom developer id bstansberry Low
Product pom developer id costin Low
Product pom developer id craigmcc Low
Product pom developer id dennisl Low
Product pom developer id donaldp Low
Product pom developer id ggregory Low
Product pom developer id morgand Low
Product pom developer id rdonkin Low
Product pom developer id rsitze Low
Product pom developer id rwaldhoff Low
Product pom developer id sanders Low
Product pom developer id skitching Low
Product pom developer id tn Low
Product pom developer name Brian Stansberry Low
Product pom developer name Costin Manolache Low
Product pom developer name Craig McClanahan Low
Product pom developer name Dennis Lundberg Low
Product pom developer name Gary Gregory Low
Product pom developer name Juozas Baliuka Low
Product pom developer name Morgan Delagrange Low
Product pom developer name Peter Donald Low
Product pom developer name Richard Sitze Low
Product pom developer name Robert Burrell Donkin Low
Product pom developer name Rodney Waldhoff Low
Product pom developer name Scott Sanders Low
Product pom developer name Simon Kitching Low
Product pom developer name Thomas Neidhart Low
Product pom developer org Apache Low
Product pom developer org The Apache Software Foundation Low
Product pom developer org URL https://www.apache.org/ Low
Product pom groupid commons-logging Highest
Product pom name Apache Commons Logging High
Product pom parent-artifactid commons-parent Medium
Product pom parent-groupid org.apache.commons Medium
Product pom url https://commons.apache.org/proper/commons-logging/ Medium
Version file version 1.3.5 High
Version Manifest Bundle-Version 1.3.5 High
Version Manifest Implementation-Version 1.3.5 High
Version pom parent-version 1.3.5 Low
Version pom version 1.3.5 Highest
pkg:maven/commons-logging/commons-logging@1.3.5
(Confidence :High)
ecj-3.44.0.jar
Description:
Eclipse Compiler for Java(TM)
License:
EPL-2.0: https://www.eclipse.org/legal/epl-2.0/
File Path: /home/runner/.m2/repository/org/eclipse/jdt/ecj/3.44.0/ecj-3.44.0.jar
MD5: 8d0d2b80bc3d9431f0bdf3037f3d5954
SHA1: a4e1c9f58954801783e1b49d2f281000f814a779
SHA256: 14c46ddc2e511c46c998da728f6a80f13a689c920f3832402f7ad150f6a6188d
Referenced In Projects/Scopes:
waffle-jetty:provided
waffle-jetty-jakarta:provided
ecj-3.44.0.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jetty@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name ecj High
Vendor jar package name compiler Highest
Vendor jar package name core Highest
Vendor jar package name eclipse Highest
Vendor jar package name jdt Highest
Vendor Manifest automatic-module-name org.eclipse.jdt.core.compiler.batch Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-activationpolicy lazy Low
Vendor Manifest bundle-requiredexecutionenvironment JavaSE-17 Low
Vendor Manifest bundle-symbolicname org.eclipse.jdt.core.compiler.batch Medium
Vendor pom artifactid ecj Highest
Vendor pom artifactid ecj Low
Vendor pom groupid org.eclipse.jdt Highest
Vendor pom name Eclipse Compiler for Java(TM) High
Vendor pom organization name Eclipse Foundation High
Vendor pom organization url https://www.eclipse.org Medium
Vendor pom url eclipse-jdt/eclipse.jdt.core/ Highest
Product file name ecj High
Product jar package name compiler Highest
Product jar package name core Highest
Product jar package name eclipse Highest
Product jar package name jdt Highest
Product Manifest automatic-module-name org.eclipse.jdt.core.compiler.batch Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-activationpolicy lazy Low
Product Manifest Bundle-Name Eclipse Compiler for Java(TM) Medium
Product Manifest bundle-requiredexecutionenvironment JavaSE-17 Low
Product Manifest bundle-symbolicname org.eclipse.jdt.core.compiler.batch Medium
Product pom artifactid ecj Highest
Product pom groupid org.eclipse.jdt Highest
Product pom name Eclipse Compiler for Java(TM) High
Product pom organization name Eclipse Foundation Low
Product pom organization url https://www.eclipse.org Low
Product pom url eclipse-jdt/eclipse.jdt.core/ High
Version file version 3.44.0 High
Version pom version 3.44.0 Highest
pkg:maven/org.eclipse.jdt/ecj@3.44.0
(Confidence :High)
encoder-1.3.1.jar
Description:
The OWASP Encoders package is a collection of high-performance low-overhead
contextual encoders, that when utilized correctly, is an effective tool in
preventing Web Application security vulnerabilities such as Cross-Site
Scripting.
License:
http://www.opensource.org/licenses/BSD-3-Clause
File Path: /home/runner/.m2/repository/org/owasp/encoder/encoder/1.3.1/encoder-1.3.1.jar
MD5: c826f7776c4d03adcbf1a2bceef84627
SHA1: 1ebf20e19ddc3fa952f4e2af220a20b085ce87ba
SHA256: c9c56c8970c7cb11b231913ba5190ce930f8fd4fac2bd918810642dc3848e757
Referenced In Projects/Scopes:
waffle-shiro:provided
waffle-shiro-jakarta:provided
encoder-1.3.1.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.apache.shiro/shiro-web@2.0.6
pkg:maven/org.apache.shiro/shiro-web@2.0.6
Evidence
Type Source Name Value Confidence
Vendor file name encoder High
Vendor jar package name encoder Highest
Vendor jar package name encoders Highest
Vendor jar package name owasp Highest
Vendor Manifest automatic-module-name org.owasp.encoder Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl https://www.owasp.org/ Low
Vendor Manifest bundle-symbolicname org.owasp.encoder Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid encoder Highest
Vendor pom artifactid encoder Low
Vendor pom groupid org.owasp.encoder Highest
Vendor pom name Java Encoder High
Vendor pom parent-artifactid encoder-parent Low
Product file name encoder High
Product jar package name encoder Highest
Product jar package name encoders Highest
Product jar package name owasp Highest
Product Manifest automatic-module-name org.owasp.encoder Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl https://www.owasp.org/ Low
Product Manifest Bundle-Name Java Encoder Medium
Product Manifest bundle-symbolicname org.owasp.encoder Medium
Product Manifest multi-release true Low
Product pom artifactid encoder Highest
Product pom groupid org.owasp.encoder Highest
Product pom name Java Encoder High
Product pom parent-artifactid encoder-parent Medium
Version file version 1.3.1 High
Version Manifest Bundle-Version 1.3.1 High
Version pom version 1.3.1 Highest
pkg:maven/org.owasp.encoder/encoder@1.3.1
(Confidence :High)
error_prone_annotations-2.46.0.jar
Description:
Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.
License:
Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.46.0/error_prone_annotations-2.46.0.jar
MD5: d0dabea249c067d21d7eb997fbdf5c99
SHA1: 4ecb5d2392c38c46e6cb65e1bf60be708d97005d
SHA256: b67be81ff4b956401146e14eaf1526bc435a9480f2546e91eb45b796631a8a99
Referenced In Projects/Scopes:
waffle-demo-mixed-post-jakarta:provided
waffle-spring-security7:provided
waffle-jna:provided
waffle-tomcat11:provided
waffle-spring-boot4:provided
waffle-demo-spring-form:provided
waffle-bom:provided
waffle-shiro:provided
waffle-spring-boot-autoconfigure2:provided
waffle-demo-spring-filter:provided
waffle-demo-filter-jakarta:provided
waffle-demo-mixed-post:provided
waffle-demo-parent-jakarta:provided
waffle-jetty-jakarta:provided
waffle-spring-boot-starter4:provided
waffle-demo-spring-boot-filter4:provided
waffle-spring-boot3:provided
waffle-demo-parent:provided
waffle-spring-boot-starter2:provided
waffle-distro-jakarta:provided
waffle-jetty:provided
waffle-spring-boot-starter3:provided
waffle-demo-jaas:provided
waffle-demo-spring-form-jakarta:provided
waffle-bom-jakarta:provided
waffle-spring-boot-autoconfigure4:provided
waffle-demo-form-jakarta:provided
waffle-demo-filter:provided
waffle-demo-spring-boot-filter3:provided
waffle-shiro-jakarta:provided
waffle-demo-mixed:provided
waffle-jna-jakarta:provided
waffle-spring-security5:provided
waffle-spring-boot2:provided
waffle-demo-negotiate-jakarta:provided
waffle-demo-form:provided
waffle-distro:provided
waffle-tests:provided
waffle:provided
waffle-tests-jakarta:provided
waffle-demo-negotiate:provided
waffle-spring-security6:provided
waffle-tomcat9:provided
waffle-demo-spring-filter-jakarta:provided
waffle-spring-boot-autoconfigure3:provided
waffle-tomcat10:provided
waffle-demo-jaas-jakarta:provided
waffle-demo-spring-boot-filter2:provided
waffle-demo-mixed-jakarta:provided
error_prone_annotations-2.46.0.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-shiro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed-post@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-form@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-filter@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-form-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-filter@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-negotiate-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-filter-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-post-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat11@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tests@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-negotiate@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-parent-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-bom-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat9@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jetty@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat10@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-parent@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-bom@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-shiro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-form@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-filter-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-jaas@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-jaas-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tests-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-form-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name error_prone_annotations High
Vendor jar package name annotations Highest
Vendor jar package name errorprone Highest
Vendor jar package name google Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://errorprone.info/error_prone_annotations Low
Vendor Manifest bundle-symbolicname com.google.errorprone.annotations Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid error_prone_annotations Highest
Vendor pom artifactid error_prone_annotations Low
Vendor pom groupid com.google.errorprone Highest
Vendor pom name error-prone annotations High
Vendor pom parent-artifactid error_prone_parent Low
Product file name error_prone_annotations High
Product jar package name annotations Highest
Product jar package name errorprone Highest
Product jar package name google Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://errorprone.info/error_prone_annotations Low
Product Manifest Bundle-Name error-prone annotations Medium
Product Manifest bundle-symbolicname com.google.errorprone.annotations Medium
Product Manifest multi-release true Low
Product pom artifactid error_prone_annotations Highest
Product pom groupid com.google.errorprone Highest
Product pom name error-prone annotations High
Product pom parent-artifactid error_prone_parent Medium
Version file version 2.46.0 High
Version Manifest Bundle-Version 2.46.0 High
Version pom version 2.46.0 Highest
pkg:maven/com.google.errorprone/error_prone_annotations@2.46.0
(Confidence :High)
expressly-6.0.0.jar
Description:
Jakarta Expression Language Implementation
License:
https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/expressly/expressly/6.0.0/expressly-6.0.0.jar
MD5: e19bad48904a955072a576f0efea554b
SHA1: 0524fa43fa48fc68fb62604cf14ce71b31caf7c0
SHA256: 86ee67c7040278bac5204b571f738b8b859f014ceb5f896bd935bacbdaf33cb9
Referenced In Project/Scope: waffle-jetty-jakarta:provided
expressly-6.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name expressly High
Vendor jar package name expressly Highest
Vendor jar package name glassfish Highest
Vendor Manifest automatic-module-name org.glassfish.expressly Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname org.glassfish.expressly Medium
Vendor Manifest extension-name org.glassfish.expressly Medium
Vendor Manifest Implementation-Vendor ${vendorName} High
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid expressly Highest
Vendor pom artifactid expressly Low
Vendor pom developer email expressly-dev@eclipse.org Low
Vendor pom developer id jakarta-ee4j-expressly Medium
Vendor pom developer name Eclipse Expressly Developers Medium
Vendor pom developer org Eclipse Foundation Medium
Vendor pom groupid org.glassfish.expressly Highest
Vendor pom name Eclipse Expressly High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.expressly Highest
Product file name expressly High
Product jar package name expressly Highest
Product jar package name glassfish Highest
Product Manifest automatic-module-name org.glassfish.expressly Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Eclipse Expressly Medium
Product Manifest bundle-symbolicname org.glassfish.expressly Medium
Product Manifest extension-name org.glassfish.expressly Medium
Product pom artifactid expressly Highest
Product pom developer email expressly-dev@eclipse.org Low
Product pom developer id jakarta-ee4j-expressly Low
Product pom developer name Eclipse Expressly Developers Low
Product pom developer org Eclipse Foundation Low
Product pom groupid org.glassfish.expressly Highest
Product pom name Eclipse Expressly High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.expressly Medium
Version file version 6.0.0 High
Version Manifest Bundle-Version 6.0.0 High
Version Manifest Implementation-Version 6.0.0 High
Version pom parent-version 6.0.0 Low
Version pom version 6.0.0 Highest
pkg:maven/org.glassfish.expressly/expressly@6.0.0
(Confidence :High)
j2objc-annotations-3.1.jar
Description:
A set of annotations that provide additional information to the J2ObjC
translator to modify the result of translation.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.1/j2objc-annotations-3.1.jar
MD5: abe8bd3abff622b9a8b15c3a737aa741
SHA1: a892ca9507839bbdb900d64310ac98256cab992f
SHA256: 84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Projects/Scopes:
waffle-demo-mixed-post-jakarta:provided
waffle-spring-security7:provided
waffle-jna:provided
waffle-tomcat11:provided
waffle-spring-boot4:provided
waffle-demo-spring-form:provided
waffle-bom:provided
waffle-shiro:provided
waffle-spring-boot-autoconfigure2:provided
waffle-demo-spring-filter:provided
waffle-demo-filter-jakarta:provided
waffle-demo-mixed-post:provided
waffle-demo-parent-jakarta:provided
waffle-jetty-jakarta:provided
waffle-spring-boot-starter4:provided
waffle-demo-spring-boot-filter4:provided
waffle-spring-boot3:provided
waffle-demo-parent:provided
waffle-spring-boot-starter2:provided
waffle-distro-jakarta:provided
waffle-jetty:provided
waffle-spring-boot-starter3:provided
waffle-demo-jaas:provided
waffle-demo-spring-form-jakarta:provided
waffle-bom-jakarta:provided
waffle-spring-boot-autoconfigure4:provided
waffle-demo-form-jakarta:provided
waffle-demo-filter:provided
waffle-demo-spring-boot-filter3:provided
waffle-shiro-jakarta:provided
waffle-demo-mixed:provided
waffle-jna-jakarta:provided
waffle-spring-security5:provided
waffle-spring-boot2:provided
waffle-demo-negotiate-jakarta:provided
waffle-demo-form:provided
waffle-distro:provided
waffle-tests:provided
waffle:provided
waffle-tests-jakarta:provided
waffle-demo-negotiate:provided
waffle-spring-security6:provided
waffle-tomcat9:provided
waffle-demo-spring-filter-jakarta:provided
waffle-spring-boot-autoconfigure3:provided
waffle-tomcat10:provided
waffle-demo-jaas-jakarta:provided
waffle-demo-spring-boot-filter2:provided
waffle-demo-mixed-jakarta:provided
j2objc-annotations-3.1.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-negotiate-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-form-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-negotiate@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-shiro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-filter@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-bom@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jetty@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat9@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tests-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-parent@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-shiro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-filter-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tests@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-form@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-post-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-jaas-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-form-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat11@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed-post@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-parent-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-filter@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-filter-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-form@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat10@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-jaas@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-bom-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name j2objc-annotations High
Vendor jar package name annotations Highest
Vendor jar package name google Highest
Vendor jar package name j2objc Highest
Vendor Manifest build-jdk-spec 22 Low
Vendor Manifest multi-release true Low
Vendor pom artifactid j2objc-annotations Highest
Vendor pom artifactid j2objc-annotations Low
Vendor pom developer email tball@google.com Low
Vendor pom developer id tomball Medium
Vendor pom developer name Tom Ball Medium
Vendor pom developer org Google Medium
Vendor pom developer org URL https://www.google.com Medium
Vendor pom groupid com.google.j2objc Highest
Vendor pom name J2ObjC Annotations High
Vendor pom url google/j2objc/ Highest
Product file name j2objc-annotations High
Product jar package name annotations Highest
Product jar package name google Highest
Product jar package name j2objc Highest
Product Manifest build-jdk-spec 22 Low
Product Manifest multi-release true Low
Product pom artifactid j2objc-annotations Highest
Product pom developer email tball@google.com Low
Product pom developer id tomball Low
Product pom developer name Tom Ball Low
Product pom developer org Google Low
Product pom developer org URL https://www.google.com Low
Product pom groupid com.google.j2objc Highest
Product pom name J2ObjC Annotations High
Product pom url google/j2objc/ High
Version file version 3.1 High
Version pom version 3.1 Highest
pkg:maven/com.google.j2objc/j2objc-annotations@3.1
(Confidence :High)
jackson-annotations-2.20.jar
Description:
Core annotations used for value types, used by Jackson data binding package.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-annotations/2.20/jackson-annotations-2.20.jar
MD5: b901def3c20752817f27130e4b8d6640
SHA1: 6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c
SHA256: 959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
jackson-annotations-2.20.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.1
Evidence
Type Source Name Value Confidence
Vendor file name jackson-annotations High
Vendor jar package name fasterxml Highest
Vendor jar package name jackson Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-annotations Highest
Vendor pom artifactid jackson-annotations Low
Vendor pom groupid com.fasterxml.jackson.core Highest
Vendor pom name Jackson-annotations High
Vendor pom parent-artifactid jackson-parent Low
Vendor pom parent-groupid com.fasterxml.jackson Medium
Vendor pom url FasterXML/jackson Highest
Product file name jackson-annotations High
Product hint analyzer product java8 Highest
Product hint analyzer product modules Highest
Product jar package name fasterxml Highest
Product jar package name jackson Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Product Manifest Bundle-Name Jackson-annotations Medium
Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium
Product Manifest Implementation-Title Jackson-annotations High
Product Manifest specification-title Jackson-annotations Medium
Product pom artifactid jackson-annotations Highest
Product pom groupid com.fasterxml.jackson.core Highest
Product pom name Jackson-annotations High
Product pom parent-artifactid jackson-parent Medium
Product pom parent-groupid com.fasterxml.jackson Medium
Product pom url FasterXML/jackson High
Version file version 2.20 High
Version Manifest Implementation-Version 2.20 High
Version pom version 2.20 Highest
pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20
(Confidence :High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.20:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jackson-annotations-2.21.jar
Description:
Core annotations used for value types, used by Jackson data binding package.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-annotations/2.21/jackson-annotations-2.21.jar
MD5: e0d0c3e7300954f73e43c67d933aaea4
SHA1: b1bc1868bf02dc0bd6c7836257a036a331005309
SHA256: 53ca085f4a150f703f49e1aabd935bd03b43e1ea3d55d135438292af22cef56b
Referenced In Projects/Scopes:
waffle-distro:runtime
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
jackson-annotations-2.21.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
Evidence
Type Source Name Value Confidence
Vendor file name jackson-annotations High
Vendor jar package name fasterxml Highest
Vendor jar package name jackson Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-annotations Highest
Vendor pom artifactid jackson-annotations Low
Vendor pom groupid com.fasterxml.jackson.core Highest
Vendor pom name Jackson-annotations High
Vendor pom parent-artifactid jackson-parent Low
Vendor pom parent-groupid com.fasterxml.jackson Medium
Vendor pom url FasterXML/jackson Highest
Product file name jackson-annotations High
Product hint analyzer product java8 Highest
Product hint analyzer product modules Highest
Product jar package name fasterxml Highest
Product jar package name jackson Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Product Manifest Bundle-Name Jackson-annotations Medium
Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium
Product Manifest Implementation-Title Jackson-annotations High
Product Manifest specification-title Jackson-annotations Medium
Product pom artifactid jackson-annotations Highest
Product pom groupid com.fasterxml.jackson.core Highest
Product pom name Jackson-annotations High
Product pom parent-artifactid jackson-parent Medium
Product pom parent-groupid com.fasterxml.jackson Medium
Product pom url FasterXML/jackson High
Version file version 2.21 High
Version Manifest Implementation-Version 2.21 High
Version pom version 2.21 Highest
pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21
(Confidence :High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.21:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jackson-core-2.19.4.jar
Description:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.19.4/jackson-core-2.19.4.jar
MD5: 6957ee67737918a9650f801f1a6d1fe1
SHA1: a720ca9b800742699e041c3890f3731fe516085e
SHA256: 466ae4dc4f7054f51525f4211df411d9a64d65cc169995d32bf49e20e6f586e5
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-distro-jakarta:runtime
jackson-core-2.19.4.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter3@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jackson-core High
Vendor jar package name base Highest
Vendor jar package name com Highest
Vendor jar package name core Highest
Vendor jar package name fasterxml Highest
Vendor jar package name jackson Highest
Vendor jar package name json Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low
Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-core Highest
Vendor pom artifactid jackson-core Low
Vendor pom groupid com.fasterxml.jackson.core Highest
Vendor pom name Jackson-core High
Vendor pom parent-artifactid jackson-base Low
Vendor pom parent-groupid com.fasterxml.jackson Medium
Vendor pom url FasterXML/jackson-core Highest
Product file name jackson-core High
Product hint analyzer product java8 Highest
Product hint analyzer product modules Highest
Product jar package name base Highest
Product jar package name com Highest
Product jar package name core Highest
Product jar package name fasterxml Highest
Product jar package name jackson Highest
Product jar package name json Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low
Product Manifest Bundle-Name Jackson-core Medium
Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium
Product Manifest Implementation-Title Jackson-core High
Product Manifest multi-release true Low
Product Manifest specification-title Jackson-core Medium
Product pom artifactid jackson-core Highest
Product pom groupid com.fasterxml.jackson.core Highest
Product pom name Jackson-core High
Product pom parent-artifactid jackson-base Medium
Product pom parent-groupid com.fasterxml.jackson Medium
Product pom url FasterXML/jackson-core High
Version file version 2.19.4 High
Version Manifest Bundle-Version 2.19.4 High
Version Manifest Implementation-Version 2.19.4 High
Version pom version 2.19.4 Highest
Related Dependencies
jackson-annotations-2.19.4.jar
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-annotations/2.19.4/jackson-annotations-2.19.4.jar
MD5: d676ca7a5c3f6d2d3f2c32c57cfd5a52
SHA1: bbb09b1e7f7f5108890270eb701cb3ddef991c05
SHA256: ab26383fa3c10c0df1ffd1bb035d81161c059b1af71927d73c24473c058baa16
pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.4
jackson-datatype-jdk8-2.19.4.jar
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.19.4/jackson-datatype-jdk8-2.19.4.jar
MD5: fe21cfa5ef77f1abe83c3365e8ee7688
SHA1: 90d304bcdb1a4bacb6f4347be625d75300973c60
SHA256: c0e0dc3039f9a37a099b2602838f833ea8c15c56445a0eb5463d0c7e0c355da2
pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.19.4
jackson-datatype-jsr310-2.19.4.jar
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.19.4/jackson-datatype-jsr310-2.19.4.jar
MD5: b85dc514029abd7235fa0cdd7b2c919d
SHA1: 3cbcf2e636a6b062772299bf19a347536e58c4df
SHA256: 070af4d7c345cf975ff783138050678e6194e5bb88ab489385d0311a5fcb1585
pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.19.4
jackson-module-parameter-names-2.19.4.jar
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/module/jackson-module-parameter-names/2.19.4/jackson-module-parameter-names-2.19.4.jar
MD5: e1db337e1fef503be9023f59db9ccf43
SHA1: 502dfea4c83502f444837b3d040a51e8475f15f2
SHA256: 91a1f2f1b595c4d5c902a7d6d383354a3ba9bf87b19bdf1d473f55306f79c6e5
pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.19.4
pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.4
(Confidence :High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.19.4:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jackson-core-2.21.0.jar
Description:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.21.0/jackson-core-2.21.0.jar
MD5: eeaf6f2d71789f1c04ba944aeaa8e18e
SHA1: 1f7c3f82e6e2ef5def0a12d7dd754e26f0c0ae28
SHA256: e22604bcd9b24e462d5df102007cb06e1ed811e86f1ce6081ca62f385f2db87b
Referenced In Projects/Scopes:
waffle-distro:runtime
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
jackson-core-2.21.0.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jackson-core High
Vendor jar package name base Highest
Vendor jar package name com Highest
Vendor jar package name core Highest
Vendor jar package name fasterxml Highest
Vendor jar package name jackson Highest
Vendor jar package name json Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low
Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-core Highest
Vendor pom artifactid jackson-core Low
Vendor pom groupid com.fasterxml.jackson.core Highest
Vendor pom name Jackson-core High
Vendor pom parent-artifactid jackson-base Low
Vendor pom parent-groupid com.fasterxml.jackson Medium
Vendor pom url FasterXML/jackson-core Highest
Product file name jackson-core High
Product hint analyzer product java8 Highest
Product hint analyzer product modules Highest
Product jar package name base Highest
Product jar package name com Highest
Product jar package name core Highest
Product jar package name fasterxml Highest
Product jar package name jackson Highest
Product jar package name json Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low
Product Manifest Bundle-Name Jackson-core Medium
Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium
Product Manifest Implementation-Title Jackson-core High
Product Manifest multi-release true Low
Product Manifest specification-title Jackson-core Medium
Product pom artifactid jackson-core Highest
Product pom groupid com.fasterxml.jackson.core Highest
Product pom name Jackson-core High
Product pom parent-artifactid jackson-base Medium
Product pom parent-groupid com.fasterxml.jackson Medium
Product pom url FasterXML/jackson-core High
Version file version 2.21.0 High
Version Manifest Bundle-Version 2.21.0 High
Version Manifest Implementation-Version 2.21.0 High
Version pom version 2.21.0 Highest
Related Dependencies
jackson-datatype-jdk8-2.21.0.jar
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.21.0/jackson-datatype-jdk8-2.21.0.jar
MD5: c51b64b76723fb0cfb7071404dd15205
SHA1: 2ec52647d5af910c27b34991b3127c34ae7319ca
SHA256: c80ea021476de24903da7a5596989b3b5469aac2a727348878d1079960d26700
pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.21.0
jackson-datatype-jsr310-2.21.0.jar
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.21.0/jackson-datatype-jsr310-2.21.0.jar
MD5: 87cbf6f62ac03289225809efd6fb6698
SHA1: 019aeeb3523112059e0ee7a859d337c0842f10af
SHA256: b350169a3b2cc53d781541fe1bfbc0f00c978d185884da79b8330be8fb7aefeb
pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.21.0
jackson-module-parameter-names-2.21.0.jar
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/module/jackson-module-parameter-names/2.21.0/jackson-module-parameter-names-2.21.0.jar
MD5: 0d6824d21733600cecfb66c60cc07460
SHA1: e955528dc6ac6f35539ac7002b20204233dd4e27
SHA256: cd0be4c0b760cdebf96f6a02bda8fc31a93ac01c94b331bfbc440abb3ed6ff0e
pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.21.0
pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.0
(Confidence :High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.21.0:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jackson-core-3.0.3.jar
Description:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/tools/jackson/core/jackson-core/3.0.3/jackson-core-3.0.3.jar
MD5: 5abfa2ee36fa2833fe40521f851dc08a
SHA1: d208ec73d6a17667a0462cfc3237076a087bc936
SHA256: 4149bb2b3bbffb5339089174e26f454081e6a01a104d24b22f78a16b948799eb
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
jackson-core-3.0.3.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.1
Evidence
Type Source Name Value Confidence
Vendor file name jackson-core High
Vendor jar package name base Highest
Vendor jar package name core Highest
Vendor jar package name jackson Highest
Vendor jar package name json Highest
Vendor jar package name tools Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low
Vendor Manifest bundle-symbolicname tools.jackson.core.jackson-core Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id tools.jackson.core Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-core Highest
Vendor pom artifactid jackson-core Low
Vendor pom developer email tatu@fasterxml.com Low
Vendor pom developer id cowtowncoder Medium
Vendor pom developer name Tatu Saloranta Medium
Vendor pom groupid tools.jackson.core Highest
Vendor pom name Jackson-core High
Vendor pom parent-artifactid jackson-base Low
Vendor pom parent-groupid tools.jackson Medium
Vendor pom url FasterXML/jackson-core Highest
Product file name jackson-core High
Product jar package name 17 Highest
Product jar package name base Highest
Product jar package name core Highest
Product jar package name jackson Highest
Product jar package name json Highest
Product jar package name tools Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low
Product Manifest Bundle-Name Jackson-core Medium
Product Manifest bundle-symbolicname tools.jackson.core.jackson-core Medium
Product Manifest Implementation-Title Jackson-core High
Product Manifest multi-release true Low
Product Manifest specification-title Jackson-core Medium
Product pom artifactid jackson-core Highest
Product pom developer email tatu@fasterxml.com Low
Product pom developer id cowtowncoder Low
Product pom developer name Tatu Saloranta Low
Product pom groupid tools.jackson.core Highest
Product pom name Jackson-core High
Product pom parent-artifactid jackson-base Medium
Product pom parent-groupid tools.jackson Medium
Product pom url FasterXML/jackson-core High
Version file version 3.0.3 High
Version Manifest Bundle-Version 3.0.3 High
Version Manifest Implementation-Version 3.0.3 High
Version pom version 3.0.3 Highest
pkg:maven/tools.jackson.core/jackson-core@3.0.3
(Confidence :High)
jackson-databind-2.19.4.jar
Description:
General data-binding functionality for Jackson: works on core streaming API
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.19.4/jackson-databind-2.19.4.jar
MD5: 11866a41e8db8fc1219fccb98c5ddd38
SHA1: 7a39bf9257b726b90b80f27fa3f5174bc75162a5
SHA256: b781c431be870deb0bf84421e99e774c256a701f4ba678df80248f55cd16ff74
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-distro-jakarta:runtime
jackson-databind-2.19.4.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter3@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jackson-databind High
Vendor jar package name databind Highest
Vendor jar package name fasterxml Highest
Vendor jar package name jackson Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-databind Highest
Vendor pom artifactid jackson-databind Low
Vendor pom groupid com.fasterxml.jackson.core Highest
Vendor pom name jackson-databind High
Vendor pom parent-artifactid jackson-base Low
Vendor pom parent-groupid com.fasterxml.jackson Medium
Vendor pom url FasterXML/jackson Highest
Product file name jackson-databind High
Product hint analyzer product java8 Highest
Product hint analyzer product modules Highest
Product jar package name databind Highest
Product jar package name fasterxml Highest
Product jar package name jackson Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Product Manifest Bundle-Name jackson-databind Medium
Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium
Product Manifest Implementation-Title jackson-databind High
Product Manifest multi-release true Low
Product Manifest specification-title jackson-databind Medium
Product pom artifactid jackson-databind Highest
Product pom groupid com.fasterxml.jackson.core Highest
Product pom name jackson-databind High
Product pom parent-artifactid jackson-base Medium
Product pom parent-groupid com.fasterxml.jackson Medium
Product pom url FasterXML/jackson High
Version file version 2.19.4 High
Version Manifest Bundle-Version 2.19.4 High
Version Manifest Implementation-Version 2.19.4 High
Version pom version 2.19.4 Highest
jackson-databind-2.21.0.jar
Description:
General data-binding functionality for Jackson: works on core streaming API
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.21.0/jackson-databind-2.21.0.jar
MD5: 6da51758193ce8b00c39e742010b6c45
SHA1: a6b96ee168ca8734a293b6dc70acd5d495119521
SHA256: 0057817ee40bc71544072dc2a3ba575ef91dce53a2d87489bde91c05f3a22621
Referenced In Projects/Scopes:
waffle-distro:runtime
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
jackson-databind-2.21.0.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jackson-databind High
Vendor jar package name databind Highest
Vendor jar package name fasterxml Highest
Vendor jar package name jackson Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium
Vendor Manifest multi-release true Low
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-databind Highest
Vendor pom artifactid jackson-databind Low
Vendor pom groupid com.fasterxml.jackson.core Highest
Vendor pom name jackson-databind High
Vendor pom parent-artifactid jackson-base Low
Vendor pom parent-groupid com.fasterxml.jackson Medium
Vendor pom url FasterXML/jackson Highest
Product file name jackson-databind High
Product hint analyzer product java8 Highest
Product hint analyzer product modules Highest
Product jar package name databind Highest
Product jar package name fasterxml Highest
Product jar package name jackson Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Product Manifest Bundle-Name jackson-databind Medium
Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium
Product Manifest Implementation-Title jackson-databind High
Product Manifest multi-release true Low
Product Manifest specification-title jackson-databind Medium
Product pom artifactid jackson-databind Highest
Product pom groupid com.fasterxml.jackson.core Highest
Product pom name jackson-databind High
Product pom parent-artifactid jackson-base Medium
Product pom parent-groupid com.fasterxml.jackson Medium
Product pom url FasterXML/jackson High
Version file version 2.21.0 High
Version Manifest Bundle-Version 2.21.0 High
Version Manifest Implementation-Version 2.21.0 High
Version pom version 2.21.0 Highest
jackson-databind-3.0.3.jar
Description:
General data-binding functionality for Jackson: works on core streaming API
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/tools/jackson/core/jackson-databind/3.0.3/jackson-databind-3.0.3.jar
MD5: 445adbd3b97c9638f393d8e3787ba293
SHA1: c024f05711e311341d4338cbb7905696e20921f8
SHA256: dfbb79130910decf063125c1e693a39c5ec8fb8b478d7f39671901d47ce7f6a2
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
jackson-databind-3.0.3.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.1
Evidence
Type Source Name Value Confidence
Vendor file name jackson-databind High
Vendor jar package name databind Highest
Vendor jar package name jackson Highest
Vendor jar package name tools Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Vendor Manifest bundle-symbolicname tools.jackson.core.jackson-databind Medium
Vendor Manifest Implementation-Vendor FasterXML High
Vendor Manifest Implementation-Vendor-Id tools.jackson.core Medium
Vendor Manifest specification-vendor FasterXML Low
Vendor pom artifactid jackson-databind Highest
Vendor pom artifactid jackson-databind Low
Vendor pom groupid tools.jackson.core Highest
Vendor pom name jackson-databind High
Vendor pom parent-artifactid jackson-base Low
Vendor pom parent-groupid tools.jackson Medium
Vendor pom url FasterXML/jackson Highest
Product file name jackson-databind High
Product jar package name databind Highest
Product jar package name jackson Highest
Product jar package name tools Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low
Product Manifest Bundle-Name jackson-databind Medium
Product Manifest bundle-symbolicname tools.jackson.core.jackson-databind Medium
Product Manifest Implementation-Title jackson-databind High
Product Manifest specification-title jackson-databind Medium
Product pom artifactid jackson-databind Highest
Product pom groupid tools.jackson.core Highest
Product pom name jackson-databind High
Product pom parent-artifactid jackson-base Medium
Product pom parent-groupid tools.jackson Medium
Product pom url FasterXML/jackson High
Version file version 3.0.3 High
Version Manifest Bundle-Version 3.0.3 High
Version Manifest Implementation-Version 3.0.3 High
Version pom version 3.0.3 Highest
jakarta.annotation-api-1.3.5.jar
Description:
Jakarta Annotations API
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/1.3.5/jakarta.annotation-api-1.3.5.jar
MD5: 8b165cf58df5f8c2a222f637c0a07c97
SHA1: 59eb84ee0d616332ff44aba065f3888cf002cd2d
SHA256: 85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a
Referenced In Projects/Scopes:
waffle-distro:runtime
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
jakarta.annotation-api-1.3.5.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.annotation-api High
Vendor jar package name annotation Highest
Vendor Manifest automatic-module-name java.annotation Medium
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.annotation-api Medium
Vendor Manifest extension-name jakarta.annotation Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest Implementation-Vendor-Id org.glassfish Medium
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.annotation-api Highest
Vendor pom artifactid jakarta.annotation-api Low
Vendor pom developer name Linda De Michiel Medium
Vendor pom developer org Oracle Corp. Medium
Vendor pom groupid jakarta.annotation Highest
Vendor pom name Jakarta Annotations API High
Vendor pom parent-artifactid ca-parent Low
Vendor pom url https://projects.eclipse.org/projects/ee4j.ca Highest
Product file name jakarta.annotation-api High
Product jar package name annotation Highest
Product Manifest automatic-module-name java.annotation Medium
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Annotations API Medium
Product Manifest bundle-symbolicname jakarta.annotation-api Medium
Product Manifest extension-name jakarta.annotation Medium
Product pom artifactid jakarta.annotation-api Highest
Product pom developer name Linda De Michiel Low
Product pom developer org Oracle Corp. Low
Product pom groupid jakarta.annotation Highest
Product pom name Jakarta Annotations API High
Product pom parent-artifactid ca-parent Medium
Product pom url https://projects.eclipse.org/projects/ee4j.ca Medium
Version file version 1.3.5 High
Version Manifest Bundle-Version 1.3.5 High
Version Manifest Implementation-Version 1.3.5 High
Version pom version 1.3.5 Highest
pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5
(Confidence :High)
cpe:2.3:a:oracle:projects:1.3.5:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jakarta.annotation-api-2.1.1.jar
Description:
Jakarta Annotations API
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/2.1.1/jakarta.annotation-api-2.1.1.jar
MD5: 5dac2f68e8288d0add4dc92cb161711d
SHA1: 48b9bda22b091b1f48b13af03fe36db3be6e1ae3
SHA256: 5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-distro-jakarta:runtime
waffle-spring-boot-starter3:compile
jakarta.annotation-api-2.1.1.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.annotation-api High
Vendor jar package name annotation Highest
Vendor jar package name jakarta Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.annotation-api Medium
Vendor Manifest extension-name jakarta.annotation Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest Implementation-Vendor-Id org.glassfish Medium
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.annotation-api Highest
Vendor pom artifactid jakarta.annotation-api Low
Vendor pom developer name Dmitry Kornilov Medium
Vendor pom developer name Linda De Michiel Medium
Vendor pom developer org Oracle Corp. Medium
Vendor pom groupid jakarta.annotation Highest
Vendor pom name Jakarta Annotations API High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.ca Highest
Product file name jakarta.annotation-api High
Product jar package name annotation Highest
Product jar package name jakarta Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Annotations API Medium
Product Manifest bundle-symbolicname jakarta.annotation-api Medium
Product Manifest extension-name jakarta.annotation Medium
Product pom artifactid jakarta.annotation-api Highest
Product pom developer name Dmitry Kornilov Low
Product pom developer name Linda De Michiel Low
Product pom developer org Oracle Corp. Low
Product pom groupid jakarta.annotation Highest
Product pom name Jakarta Annotations API High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.ca Medium
Version file version 2.1.1 High
Version Manifest Bundle-Version 2.1.1 High
Version Manifest Implementation-Version 2.1.1 High
Version pom parent-version 2.1.1 Low
Version pom version 2.1.1 Highest
pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1
(Confidence :High)
cpe:2.3:a:oracle:projects:2.1.1:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jakarta.annotation-api-3.0.0.jar
Description:
Jakarta Annotations API
License:
EPL 2.0: https://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/3.0.0/jakarta.annotation-api-3.0.0.jar
MD5: 7faffaab962918da4cf5ddfd76609dd2
SHA1: 54f928fadec906a99d558536756d171917b9d936
SHA256: b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2
Referenced In Projects/Scopes:
waffle-jetty:provided
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
waffle-spring-boot-starter4:compile
waffle-jetty-jakarta:provided
jakarta.annotation-api-3.0.0.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-security@4.0.1
pkg:maven/com.github.waffle/waffle-jetty@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter@4.0.1
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.annotation-api High
Vendor jar package name annotation Highest
Vendor jar package name jakarta Highest
Vendor Manifest build-jdk-spec 18 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.annotation-api Medium
Vendor Manifest extension-name jakarta.annotation Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest Implementation-Vendor-Id org.glassfish Medium
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.annotation-api Highest
Vendor pom artifactid jakarta.annotation-api Low
Vendor pom developer name Dmitry Kornilov Medium
Vendor pom developer name Linda De Michiel Medium
Vendor pom developer org Oracle Corp. Medium
Vendor pom groupid jakarta.annotation Highest
Vendor pom name Jakarta Annotations API High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.ca Highest
Product file name jakarta.annotation-api High
Product jar package name annotation Highest
Product jar package name jakarta Highest
Product Manifest build-jdk-spec 18 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Annotations API Medium
Product Manifest bundle-symbolicname jakarta.annotation-api Medium
Product Manifest extension-name jakarta.annotation Medium
Product pom artifactid jakarta.annotation-api Highest
Product pom developer name Dmitry Kornilov Low
Product pom developer name Linda De Michiel Low
Product pom developer org Oracle Corp. Low
Product pom groupid jakarta.annotation Highest
Product pom name Jakarta Annotations API High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.ca Medium
Version file version 3.0.0 High
Version Manifest Bundle-Version 3.0.0 High
Version Manifest Implementation-Version 3.0.0 High
Version pom parent-version 3.0.0 Low
Version pom version 3.0.0 Highest
pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0
(Confidence :High)
cpe:2.3:a:oracle:projects:3.0.0:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jakarta.el-3.0.4.jar
Description:
Jakarta Expression Language provides a specification document, API, reference implementation and TCK
that describes an expression language for Java applications.
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/jakarta.el/3.0.4/jakarta.el-3.0.4.jar
MD5: a4ff0d711c405e054f8166c2ea893e0e
SHA1: f48473482c0e3e714f87186d9305bcae30b7f5cb
SHA256: 3b8d4311b47fb47d168ad4338b6649a7cc21d5066b9765bd28ebca93148064be
Referenced In Project/Scope: waffle-jetty:provided
jakarta.el-3.0.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-jetty@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.el High
Vendor jar package name el Highest
Vendor jar package name expression Highest
Vendor jar package name javax Highest
Vendor jar package name sun Highest
Vendor jar (hint) package name oracle Highest
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname com.sun.el.javax.el Medium
Vendor Manifest extension-name javax.el Medium
Vendor Manifest Implementation-Vendor Oracle Corporation High
Vendor Manifest specification-vendor Oracle Corporation Low
Vendor pom artifactid jakarta.el Highest
Vendor pom artifactid jakarta.el Low
Vendor pom developer id yaminikb Medium
Vendor pom developer name Yamini K B Medium
Vendor pom developer org Oracle Corporation Medium
Vendor pom developer org URL http://www.oracle.com/ Medium
Vendor pom groupid org.glassfish Highest
Vendor pom name Jakarta Expression Language 3.0 High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.el Highest
Product file name jakarta.el High
Product jar package name el Highest
Product jar package name expression Highest
Product jar package name javax Highest
Product jar package name sun Highest
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Expression Language 3.0 Medium
Product Manifest bundle-symbolicname com.sun.el.javax.el Medium
Product Manifest extension-name javax.el Medium
Product pom artifactid jakarta.el Highest
Product pom developer id yaminikb Low
Product pom developer name Yamini K B Low
Product pom developer org Oracle Corporation Low
Product pom developer org URL http://www.oracle.com/ Low
Product pom groupid org.glassfish Highest
Product pom name Jakarta Expression Language 3.0 High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.el Medium
Version file version 3.0.4 High
Version Manifest Bundle-Version 3.0.4 High
Version Manifest Implementation-Version 3.0.4 High
Version pom parent-version 3.0.4 Low
Version pom version 3.0.4 Highest
pkg:maven/org.glassfish/jakarta.el@3.0.4
(Confidence :High)
cpe:2.3:a:eclipse:jakarta_expression_language:3.0.4:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jakarta.el-api-6.0.1.jar
Description:
Jakarta Expression Language defines an expression language for Java applications
License:
https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/el/jakarta.el-api/6.0.1/jakarta.el-api-6.0.1.jar
MD5: a98f097e059552a75748fcdd067e5c16
SHA1: c7c4a2eb1e40e0ff45ab5e2e52bd77d8c7a75176
SHA256: 7e84b5bed49de32b79cc5e85d90b6f5adb1a953ac67283adbb41c1e297f9c605
Referenced In Projects/Scopes:
waffle-jetty:provided
waffle-jetty-jakarta:provided
jakarta.el-api-6.0.1.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jetty@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.el-api High
Vendor jar package name el Highest
Vendor jar package name expression Highest
Vendor jar package name jakarta Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.el-api Medium
Vendor Manifest extension-name jakarta.el Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.el-api Highest
Vendor pom artifactid jakarta.el-api Low
Vendor pom developer email el-dev@eclipse.org Low
Vendor pom developer id jakarta-ee4j-el Medium
Vendor pom developer name Jakarta Expression Language Developers Medium
Vendor pom developer org Eclipse Foundation Medium
Vendor pom groupid jakarta.el Highest
Vendor pom name Jakarta Expression Language API High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.el Highest
Product file name jakarta.el-api High
Product jar package name el Highest
Product jar package name expression Highest
Product jar package name jakarta Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Expression Language API Medium
Product Manifest bundle-symbolicname jakarta.el-api Medium
Product Manifest extension-name jakarta.el Medium
Product pom artifactid jakarta.el-api Highest
Product pom developer email el-dev@eclipse.org Low
Product pom developer id jakarta-ee4j-el Low
Product pom developer name Jakarta Expression Language Developers Low
Product pom developer org Eclipse Foundation Low
Product pom groupid jakarta.el Highest
Product pom name Jakarta Expression Language API High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.el Medium
Version file version 6.0.1 High
Version Manifest Bundle-Version 6.0.1 High
Version Manifest Implementation-Version 6.0.1 High
Version pom parent-version 6.0.1 Low
Version pom version 6.0.1 Highest
pkg:maven/jakarta.el/jakarta.el-api@6.0.1
(Confidence :High)
cpe:2.3:a:eclipse:jakarta_expression_language:6.0.1:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jakarta.servlet-api-4.0.2.jar
Description:
Java(TM) Servlet 4.0 API Design Specification
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/servlet/jakarta.servlet-api/4.0.2/jakarta.servlet-api-4.0.2.jar
MD5: 75523dea16c815e4b111796ea1679b1b
SHA1: 60da427ed588aa0cf70cb6cb7209c31e83069364
SHA256: 0cd32c92320ae92c8692ef326dfeef756e97760251fca0c45472f299f1c3c916
Referenced In Project/Scope: waffle-jetty:provided
jakarta.servlet-api-4.0.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.glassfish.web/jakarta.servlet.jsp.jstl@1.2.6
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.servlet-api High
Vendor jar package name javax Highest
Vendor jar package name servlet Highest
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.servlet-api Medium
Vendor Manifest extension-name javax.servlet Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest Implementation-Vendor-Id org.glassfish Medium
Vendor Manifest specification-vendor Oracle Corporation Low
Vendor pom artifactid jakarta.servlet-api Highest
Vendor pom artifactid jakarta.servlet-api Low
Vendor pom developer id yaminikb Medium
Vendor pom developer name Yamini K B Medium
Vendor pom developer org Oracle Corporation Medium
Vendor pom developer org URL http://www.oracle.com/ Medium
Vendor pom groupid jakarta.servlet Highest
Vendor pom name Java Servlet API High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.servlet Highest
Product file name jakarta.servlet-api High
Product jar package name javax Highest
Product jar package name servlet Highest
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Java Servlet API Medium
Product Manifest bundle-symbolicname jakarta.servlet-api Medium
Product Manifest extension-name javax.servlet Medium
Product pom artifactid jakarta.servlet-api Highest
Product pom developer id yaminikb Low
Product pom developer name Yamini K B Low
Product pom developer org Oracle Corporation Low
Product pom developer org URL http://www.oracle.com/ Low
Product pom groupid jakarta.servlet Highest
Product pom name Java Servlet API High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.servlet Medium
Version file version 4.0.2 High
Version Manifest Implementation-Version 4.0.2 High
Version pom parent-version 4.0.2 Low
Version pom version 4.0.2 Highest
jakarta.servlet-api-4.0.4.jar
Description:
Jakarta Servlet 4.0
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/servlet/jakarta.servlet-api/4.0.4/jakarta.servlet-api-4.0.4.jar
MD5: f5d1d7a29978e4ae0be5a456ee1c65c3
SHA1: b8a1142e04838fe54194049c6e7a18dae8f9b960
SHA256: 586e27706c21258f5882f43be06904f49b02db9ac54e345d393fe4a32494d127
Referenced In Projects/Scopes:
waffle-jna:provided
waffle-demo-negotiate:provided
waffle-demo-filter:provided
waffle-demo-parent:provided
waffle-demo-mixed:provided
waffle-demo-spring-form:provided
waffle-spring-security5:provided
waffle-shiro:provided
waffle-demo-spring-boot-filter2:provided
waffle-demo-jaas:provided
waffle-demo-spring-filter:provided
waffle-demo-mixed-post:provided
waffle-demo-form:provided
waffle-tests:provided
jakarta.servlet-api-4.0.4.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-jaas@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed-post@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-negotiate@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-filter@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-form@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-form@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-parent@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-filter@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-shiro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tests@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.servlet-api High
Vendor jar package name javax Highest
Vendor jar package name servlet Highest
Vendor Manifest automatic-module-name java.servlet Medium
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.servlet-api Medium
Vendor Manifest extension-name javax.servlet Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest Implementation-Vendor-Id org.eclipse Medium
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.servlet-api Highest
Vendor pom artifactid jakarta.servlet-api Low
Vendor pom developer id yaminikb Medium
Vendor pom developer name Yamini K B Medium
Vendor pom developer org Oracle Corporation Medium
Vendor pom developer org URL http://www.oracle.com/ Medium
Vendor pom groupid jakarta.servlet Highest
Vendor pom name Jakarta Servlet High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.servlet Highest
Product file name jakarta.servlet-api High
Product jar package name javax Highest
Product jar package name servlet Highest
Product Manifest automatic-module-name java.servlet Medium
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Servlet Medium
Product Manifest bundle-symbolicname jakarta.servlet-api Medium
Product Manifest extension-name javax.servlet Medium
Product pom artifactid jakarta.servlet-api Highest
Product pom developer id yaminikb Low
Product pom developer name Yamini K B Low
Product pom developer org Oracle Corporation Low
Product pom developer org URL http://www.oracle.com/ Low
Product pom groupid jakarta.servlet Highest
Product pom name Jakarta Servlet High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.servlet Medium
Version file version 4.0.4 High
Version Manifest Implementation-Version 4.0.4 High
Version pom parent-version 4.0.4 Low
Version pom version 4.0.4 Highest
pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4
(Confidence :High)
cpe:2.3:a:oracle:projects:4.0.4:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jakarta.servlet-api-6.0.0.jar
Description:
Jakarta Servlet 6.0
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/servlet/jakarta.servlet-api/6.0.0/jakarta.servlet-api-6.0.0.jar
MD5: 4bcb3175ed9b7aa3f038d082879ec2a8
SHA1: abecc699286e65035ebba9844c03931357a6a963
SHA256: c034eb1afb158987dbb53a5fea0cadf611c8dae8daadd59c44d9d5ab70129cef
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jakarta.servlet-api-6.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.1.5
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.servlet-api High
Vendor jar package name jakarta Highest
Vendor jar package name servlet Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.servlet-api Medium
Vendor Manifest extension-name jakarta.servlet Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest Implementation-Vendor-Id org.eclipse Medium
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.servlet-api Highest
Vendor pom artifactid jakarta.servlet-api Low
Vendor pom developer id yaminikb Medium
Vendor pom developer name Yamini K B Medium
Vendor pom developer org Oracle Corporation Medium
Vendor pom developer org URL http://www.oracle.com/ Medium
Vendor pom groupid jakarta.servlet Highest
Vendor pom name Jakarta Servlet High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.servlet Highest
Product file name jakarta.servlet-api High
Product jar package name jakarta Highest
Product jar package name servlet Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Servlet Medium
Product Manifest bundle-symbolicname jakarta.servlet-api Medium
Product Manifest extension-name jakarta.servlet Medium
Product pom artifactid jakarta.servlet-api Highest
Product pom developer id yaminikb Low
Product pom developer name Yamini K B Low
Product pom developer org Oracle Corporation Low
Product pom developer org URL http://www.oracle.com/ Low
Product pom groupid jakarta.servlet Highest
Product pom name Jakarta Servlet High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.servlet Medium
Version file version 6.0.0 High
Version Manifest Bundle-Version 6.0.0 High
Version Manifest Implementation-Version 6.0.0 High
Version pom parent-version 6.0.0 Low
Version pom version 6.0.0 Highest
pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0
(Confidence :High)
cpe:2.3:a:oracle:projects:6.0.0:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jakarta.servlet-api-6.1.0.jar
Description:
Jakarta Servlet 6.1
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/servlet/jakarta.servlet-api/6.1.0/jakarta.servlet-api-6.1.0.jar
MD5: 314c930b3e40ac1abc3529c7c9942f09
SHA1: 1169a246913fe3823782af7943e7a103634867c5
SHA256: 8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter4:provided
waffle-demo-mixed-post-jakarta:provided
waffle-spring-security7:provided
waffle-demo-form-jakarta:provided
waffle-tests-jakarta:provided
waffle-spring-security6:provided
waffle-demo-spring-boot-filter3:provided
waffle-demo-spring-filter-jakarta:provided
waffle-shiro-jakarta:provided
waffle-jna-jakarta:provided
waffle-demo-jaas-jakarta:provided
waffle-demo-filter-jakarta:provided
waffle-demo-negotiate-jakarta:provided
waffle-demo-mixed-jakarta:provided
waffle-demo-parent-jakarta:provided
waffle-demo-spring-form-jakarta:provided
jakarta.servlet-api-6.1.0.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tests-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-shiro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-filter-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-post-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-form-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-form-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-negotiate-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-parent-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-jaas-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-filter-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.servlet-api High
Vendor jar package name jakarta Highest
Vendor jar package name servlet Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.servlet-api Medium
Vendor Manifest extension-name jakarta.servlet Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest Implementation-Vendor-Id org.eclipse Medium
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.servlet-api Highest
Vendor pom artifactid jakarta.servlet-api Low
Vendor pom developer id yaminikb Medium
Vendor pom developer name Yamini K B Medium
Vendor pom developer org Oracle Corporation Medium
Vendor pom developer org URL http://www.oracle.com/ Medium
Vendor pom groupid jakarta.servlet Highest
Vendor pom name Jakarta Servlet High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.servlet Highest
Product file name jakarta.servlet-api High
Product jar package name jakarta Highest
Product jar package name servlet Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Servlet Medium
Product Manifest bundle-symbolicname jakarta.servlet-api Medium
Product Manifest extension-name jakarta.servlet Medium
Product pom artifactid jakarta.servlet-api Highest
Product pom developer id yaminikb Low
Product pom developer name Yamini K B Low
Product pom developer org Oracle Corporation Low
Product pom developer org URL http://www.oracle.com/ Low
Product pom groupid jakarta.servlet Highest
Product pom name Jakarta Servlet High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.servlet Medium
Version file version 6.1.0 High
Version Manifest Bundle-Version 6.1.0 High
Version Manifest Implementation-Version 6.1.0 High
Version pom parent-version 6.1.0 Low
Version pom version 6.1.0 Highest
pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0
(Confidence :High)
cpe:2.3:a:oracle:projects:6.1.0:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jakarta.servlet.jsp-2.3.6.jar
Description:
JavaServer Pages API
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/web/jakarta.servlet.jsp/2.3.6/jakarta.servlet.jsp-2.3.6.jar
MD5: 16d8baeceb5503f066c61582085c75cb
SHA1: 13192d5874b787c0ce0c70b35e95181e8b683a1c
SHA256: 990af769158db75833fe8b4d1e56ea778246bc3c6522d434369f1a0bcebf8582
Referenced In Project/Scope: waffle-jetty:provided
jakarta.servlet.jsp-2.3.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-jetty@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.servlet.jsp High
Vendor jar package name api Highest
Vendor jar package name glassfish Highest
Vendor jar package name jsp Highest
Vendor jar package name servlet Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname org.glassfish.web.jakarta.servlet.jsp Medium
Vendor Manifest extension-name javax.servlet.jsp Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.servlet.jsp Highest
Vendor pom artifactid jakarta.servlet.jsp Low
Vendor pom developer id yaminikb Medium
Vendor pom developer name Yamini K B Medium
Vendor pom developer org Oracle Corporation Medium
Vendor pom developer org URL http://www.oracle.com Medium
Vendor pom groupid org.glassfish.web Highest
Vendor pom name JSP implementation High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.jsp Highest
Product file name jakarta.servlet.jsp High
Product jar package name api Highest
Product jar package name glassfish Highest
Product jar package name jsp Highest
Product jar package name servlet Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name JSP implementation Medium
Product Manifest bundle-symbolicname org.glassfish.web.jakarta.servlet.jsp Medium
Product Manifest extension-name javax.servlet.jsp Medium
Product pom artifactid jakarta.servlet.jsp Highest
Product pom developer id yaminikb Low
Product pom developer name Yamini K B Low
Product pom developer org Oracle Corporation Low
Product pom developer org URL http://www.oracle.com Low
Product pom groupid org.glassfish.web Highest
Product pom name JSP implementation High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.jsp Medium
Version file version 2.3.6 High
Version Manifest Bundle-Version 2.3.6 High
Version Manifest Implementation-Version 2.3.6 High
Version pom parent-version 2.3.6 Low
Version pom version 2.3.6 Highest
jakarta.servlet.jsp-3.0.0.jar
Description:
JavaServer Pages API
License:
https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/web/jakarta.servlet.jsp/3.0.0/jakarta.servlet.jsp-3.0.0.jar
MD5: fca522b72282d53d0819af32a5a2ec9c
SHA1: a1b306dd295439765d0fd2f9b00a48501c892b88
SHA256: 7dde5d9789c030401c80bdfdbcc7a021665a451ba6f4ebdc033196cb7c8dee2a
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jakarta.servlet.jsp-3.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.servlet.jsp High
Vendor jar package name api Highest
Vendor jar package name glassfish Highest
Vendor jar package name jsp Highest
Vendor jar package name servlet Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname org.glassfish.web.jakarta.servlet.jsp Medium
Vendor Manifest extension-name jakarta.servlet.jsp Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.servlet.jsp Highest
Vendor pom artifactid jakarta.servlet.jsp Low
Vendor pom developer email jsp-dev@eclipse.org Low
Vendor pom developer id jakarta-ee4j-jsp Medium
Vendor pom developer name Jakarta Server Pages Developers Medium
Vendor pom developer org Eclipse Foundation Medium
Vendor pom groupid org.glassfish.web Highest
Vendor pom name Jakarta Server Pages implementation High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.jsp Highest
Product file name jakarta.servlet.jsp High
Product jar package name api Highest
Product jar package name glassfish Highest
Product jar package name jsp Highest
Product jar package name servlet Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Server Pages implementation Medium
Product Manifest bundle-symbolicname org.glassfish.web.jakarta.servlet.jsp Medium
Product Manifest extension-name jakarta.servlet.jsp Medium
Product pom artifactid jakarta.servlet.jsp Highest
Product pom developer email jsp-dev@eclipse.org Low
Product pom developer id jakarta-ee4j-jsp Low
Product pom developer name Jakarta Server Pages Developers Low
Product pom developer org Eclipse Foundation Low
Product pom groupid org.glassfish.web Highest
Product pom name Jakarta Server Pages implementation High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.jsp Medium
Version file version 3.0.0 High
Version Manifest Bundle-Version 3.0.0 High
Version Manifest Implementation-Version 3.0.0 High
Version pom parent-version 3.0.0 Low
Version pom version 3.0.0 Highest
pkg:maven/org.glassfish.web/jakarta.servlet.jsp@3.0.0
(Confidence :High)
jakarta.servlet.jsp-api-4.0.0.jar
Description:
Jakarta Server Pages API
License:
https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/servlet/jsp/jakarta.servlet.jsp-api/4.0.0/jakarta.servlet.jsp-api-4.0.0.jar
MD5: 6fddc938119e00e6f934c1b37120e338
SHA1: a8de3741b91ba7427306104979ab2f084e831438
SHA256: 873b7d0c2b5734ef8847634299b67ce879080cdece8426147522c4db8e37c14e
Referenced In Projects/Scopes:
waffle-jetty:provided
waffle-jetty-jakarta:provided
jakarta.servlet.jsp-api-4.0.0.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jetty@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.servlet.jsp-api High
Vendor jar package name jakarta Highest
Vendor jar package name jsp Highest
Vendor jar package name servlet Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.servlet.jsp-api Medium
Vendor Manifest extension-name jakarta.servlet.jsp Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.servlet.jsp-api Highest
Vendor pom artifactid jakarta.servlet.jsp-api Low
Vendor pom developer email jsp-dev@eclipse.org Low
Vendor pom developer id jakarta-ee4j-jsp Medium
Vendor pom developer name Jakarta Server Pages Developers Medium
Vendor pom developer org Eclipse Foundation Medium
Vendor pom groupid jakarta.servlet.jsp Highest
Vendor pom name Jakarta Server Pages API High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.jsp Highest
Product file name jakarta.servlet.jsp-api High
Product jar package name jakarta Highest
Product jar package name jsp Highest
Product jar package name servlet Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Server Pages API Medium
Product Manifest bundle-symbolicname jakarta.servlet.jsp-api Medium
Product Manifest extension-name jakarta.servlet.jsp Medium
Product pom artifactid jakarta.servlet.jsp-api Highest
Product pom developer email jsp-dev@eclipse.org Low
Product pom developer id jakarta-ee4j-jsp Low
Product pom developer name Jakarta Server Pages Developers Low
Product pom developer org Eclipse Foundation Low
Product pom groupid jakarta.servlet.jsp Highest
Product pom name Jakarta Server Pages API High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.jsp Medium
Version file version 4.0.0 High
Version Manifest Bundle-Version 4.0.0 High
Version Manifest Implementation-Version 4.0.0 High
Version pom parent-version 4.0.0 Low
Version pom version 4.0.0 Highest
pkg:maven/jakarta.servlet.jsp/jakarta.servlet.jsp-api@4.0.0
(Confidence :High)
jakarta.servlet.jsp.jstl-1.2.6.jar
Description:
JavaServer Pages(TM) Standard Tag Library API
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/web/jakarta.servlet.jsp.jstl/1.2.6/jakarta.servlet.jsp.jstl-1.2.6.jar
MD5: 7058e8ed0b161b729e6134784750d22b
SHA1: f5a092de3b2b087c14ca4b8d6f2c77a1f6802828
SHA256: 3b697c6cdf4d28de185e07d63f3682728b5a2b1dd229f5f9deb9b930d64b484a
Referenced In Project/Scope: waffle-jetty:provided
jakarta.servlet.jsp.jstl-1.2.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-jetty@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.servlet.jsp.jstl High
Vendor jar package name oracle Highest
Vendor jar package name org Highest
Vendor jar package name standard Highest
Vendor jar package name tag Highest
Vendor jar (hint) package name sun Highest
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname org.glassfish.web.jakarta.servlet.jsp.jstl Medium
Vendor Manifest extension-name javax.servlet.jsp.jstl Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest originally-created-by 1.8.0_181 (Oracle Corporation) Low
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.servlet.jsp.jstl Highest
Vendor pom artifactid jakarta.servlet.jsp.jstl Low
Vendor pom developer id yaminikb Medium
Vendor pom developer name Yamini K B Medium
Vendor pom developer org Oracle Corporation Medium
Vendor pom developer org URL http://www.oracle.com/ Medium
Vendor pom groupid org.glassfish.web Highest
Vendor pom name JavaServer Pages (TM) TagLib Implementation High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.jstl Highest
Product file name jakarta.servlet.jsp.jstl High
Product jar package name oracle Highest
Product jar package name org Highest
Product jar package name standard Highest
Product jar package name tag Highest
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name JavaServer Pages (TM) TagLib Implementation Medium
Product Manifest bundle-symbolicname org.glassfish.web.jakarta.servlet.jsp.jstl Medium
Product Manifest extension-name javax.servlet.jsp.jstl Medium
Product Manifest originally-created-by 1.8.0_181 (Oracle Corporation) Low
Product pom artifactid jakarta.servlet.jsp.jstl Highest
Product pom developer id yaminikb Low
Product pom developer name Yamini K B Low
Product pom developer org Oracle Corporation Low
Product pom developer org URL http://www.oracle.com/ Low
Product pom groupid org.glassfish.web Highest
Product pom name JavaServer Pages (TM) TagLib Implementation High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.jstl Medium
Version file version 1.2.6 High
Version Manifest Bundle-Version 1.2.6 High
Version Manifest Implementation-Version 1.2.6 High
Version pom parent-version 1.2.6 Low
Version pom version 1.2.6 Highest
jakarta.servlet.jsp.jstl-3.0.1.jar
Description:
Jakarta Standard Tag Library Implementation
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/web/jakarta.servlet.jsp.jstl/3.0.1/jakarta.servlet.jsp.jstl-3.0.1.jar
MD5: 3f6511c0066616415b9ed23a018b1cde
SHA1: 078909a1354585b2a7a2d3b4e348fceff8b6d180
SHA256: 5cc6e60b9e74d38c25fe4f2d22dfd40577f5b8396bc885f7061cd2c525a43b86
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jakarta.servlet.jsp.jstl-3.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.servlet.jsp.jstl High
Vendor jar package name eclipse Highest
Vendor jar package name org Highest
Vendor jar package name standard Highest
Vendor jar package name tag Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname org.glassfish.web.jakarta.servlet.jsp.jstl Medium
Vendor Manifest extension-name jakarta.servlet.jsp.jstl Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.servlet.jsp.jstl Highest
Vendor pom artifactid jakarta.servlet.jsp.jstl Low
Vendor pom developer id yaminikb Medium
Vendor pom developer name Yamini K B Medium
Vendor pom developer org Oracle Corporation Medium
Vendor pom developer org URL http://www.oracle.com/ Medium
Vendor pom groupid org.glassfish.web Highest
Vendor pom name Jakarta Standard Tag Library Implementation High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.jstl Highest
Product file name jakarta.servlet.jsp.jstl High
Product jar package name eclipse Highest
Product jar package name org Highest
Product jar package name standard Highest
Product jar package name tag Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name Jakarta Standard Tag Library Implementation Medium
Product Manifest bundle-symbolicname org.glassfish.web.jakarta.servlet.jsp.jstl Medium
Product Manifest extension-name jakarta.servlet.jsp.jstl Medium
Product pom artifactid jakarta.servlet.jsp.jstl Highest
Product pom developer id yaminikb Low
Product pom developer name Yamini K B Low
Product pom developer org Oracle Corporation Low
Product pom developer org URL http://www.oracle.com/ Low
Product pom groupid org.glassfish.web Highest
Product pom name Jakarta Standard Tag Library Implementation High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.jstl Medium
Version file version 3.0.1 High
Version Manifest Bundle-Version 3.0.1 High
Version Manifest Implementation-Version 3.0.1 High
Version pom parent-version 3.0.1 Low
Version pom version 3.0.1 Highest
jakarta.servlet.jsp.jstl-api-1.2.4.jar
Description:
JavaServer Pages(TM) Standard Tag Library API
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/servlet/jsp/jstl/jakarta.servlet.jsp.jstl-api/1.2.4/jakarta.servlet.jsp.jstl-api-1.2.4.jar
MD5: 5b4683c3a614b37a5de721817e792024
SHA1: 9d23cda192df1192894277fd9d0710abb61329af
SHA256: 57122ab0151f82e716d825e65627e8064eb108dbeaafafa780687d61d5359454
Referenced In Project/Scope: waffle-jetty:provided
jakarta.servlet.jsp.jstl-api-1.2.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.glassfish.web/jakarta.servlet.jsp.jstl@1.2.6
Evidence
Type Source Name Value Confidence
Vendor file name jakarta.servlet.jsp.jstl-api High
Vendor jar package name javax Highest
Vendor jar package name jsp Highest
Vendor jar package name jstl Highest
Vendor jar package name servlet Highest
Vendor Manifest bundle-docurl https://www.eclipse.org Low
Vendor Manifest bundle-symbolicname jakarta.servlet.jsp.jstl-api Medium
Vendor Manifest extension-name javax.servlet.jsp.jstl Medium
Vendor Manifest Implementation-Vendor Eclipse Foundation High
Vendor Manifest originally-created-by 1.8.0_181 (Oracle Corporation) Low
Vendor Manifest specification-vendor Eclipse Foundation Low
Vendor pom artifactid jakarta.servlet.jsp.jstl-api Highest
Vendor pom artifactid jakarta.servlet.jsp.jstl-api Low
Vendor pom developer id yaminikb Medium
Vendor pom developer name Yamini K B Medium
Vendor pom developer org Oracle Corporation Medium
Vendor pom developer org URL http://www.oracle.com/ Medium
Vendor pom groupid jakarta.servlet.jsp.jstl Highest
Vendor pom name JavaServer Pages(TM) Standard Tag Library API High
Vendor pom parent-artifactid project Low
Vendor pom parent-groupid org.eclipse.ee4j Medium
Vendor pom url https://projects.eclipse.org/projects/ee4j.jstl Highest
Product file name jakarta.servlet.jsp.jstl-api High
Product jar package name javax Highest
Product jar package name jsp Highest
Product jar package name jstl Highest
Product jar package name servlet Highest
Product Manifest bundle-docurl https://www.eclipse.org Low
Product Manifest Bundle-Name JavaServer Pages(TM) Standard Tag Library API Medium
Product Manifest bundle-symbolicname jakarta.servlet.jsp.jstl-api Medium
Product Manifest extension-name javax.servlet.jsp.jstl Medium
Product Manifest originally-created-by 1.8.0_181 (Oracle Corporation) Low
Product pom artifactid jakarta.servlet.jsp.jstl-api Highest
Product pom developer id yaminikb Low
Product pom developer name Yamini K B Low
Product pom developer org Oracle Corporation Low
Product pom developer org URL http://www.oracle.com/ Low
Product pom groupid jakarta.servlet.jsp.jstl Highest
Product pom name JavaServer Pages(TM) Standard Tag Library API High
Product pom parent-artifactid project Medium
Product pom parent-groupid org.eclipse.ee4j Medium
Product pom url https://projects.eclipse.org/projects/ee4j.jstl Medium
Version file version 1.2.4 High
Version Manifest Bundle-Version 1.2.4 High
Version Manifest Implementation-Version 1.2.4 High
Version pom parent-version 1.2.4 Low
Version pom version 1.2.4 Highest
jdtcore-3.1.0.jar
File Path: /home/runner/.m2/repository/eclipse/jdtcore/3.1.0/jdtcore-3.1.0.jar
MD5: d1651bf9048165f304e7877f1eaad6dc
SHA1: c5e3e72ae7220118c3da808628ec7016d4d8aef2
SHA256: b163be93b2131f97dd23ee03c935b34f48c17e74d8f60b644747528ea024e88e
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jdtcore-3.1.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.glassfish.web/jakarta.servlet.jsp@3.0.0
Evidence
Type Source Name Value Confidence
Vendor file name jdtcore High
Vendor jar package name core Highest
Vendor jar package name eclipse Highest
Vendor jar package name jdt Highest
Vendor Manifest bundle-localization plugin Low
Vendor Manifest bundle-symbolicname org.eclipse.jdt.core; singleton:=true Medium
Vendor Manifest eclipse-autostart true Low
Vendor pom artifactid jdtcore Highest
Vendor pom artifactid jdtcore Low
Vendor pom groupid eclipse Highest
Vendor pom name jdtcore High
Product file name jdtcore High
Product jar package name core Highest
Product jar package name eclipse Highest
Product jar package name jdt Highest
Product Manifest bundle-localization plugin Low
Product Manifest Bundle-Name %pluginName Medium
Product Manifest bundle-symbolicname org.eclipse.jdt.core; singleton:=true Medium
Product Manifest eclipse-autostart true Low
Product pom artifactid jdtcore Highest
Product pom groupid eclipse Highest
Product pom name jdtcore High
Version file version 3.1.0 High
Version Manifest Bundle-Version 3.1.0 High
Version pom version 3.1.0 Highest
pkg:maven/eclipse/jdtcore@3.1.0
(Confidence :High)
jdtcore-3.1.0.jar: jdtCompilerAdapter.jar
File Path: /home/runner/.m2/repository/eclipse/jdtcore/3.1.0/jdtcore-3.1.0.jar/jdtCompilerAdapter.jar
MD5: e66287f3ce15029d202ffc9c2dc3aa77
SHA1: a9d9eb99b7920dd3ee24d601a26cd7e473b0bf6e
SHA256: c79595d136ba157fc63286bf29cee69f6ab09cf2b9005ce70ae7eb01431115d9
Referenced In Project/Scope: waffle-jetty-jakarta:provided
Evidence
Type Source Name Value Confidence
Vendor file name jdtCompilerAdapter High
Vendor jar package name core Low
Vendor jar package name eclipse Low
Vendor jar package name jdt Low
Product file name jdtCompilerAdapter High
Product jar package name core Low
Product jar package name jdt Low
jetty-io-12.1.5.jar
Description:
Jetty module for Core :: IO
License:
EPL-2.0 OR Apache-2.0
https://www.eclipse.org/legal/epl-2.0/, https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-io/12.1.5/jetty-io-12.1.5.jar
MD5: 7dc223f8ff9aa14da8de2c4802153215
SHA1: de8db8fc9b571209b9d46321acf920238e02c143
SHA256: 9c388018412d9bd9a1b9c35ca373e25fd845706f82549f2a7039ae9fefb45e69
Referenced In Projects/Scopes:
waffle-jetty:provided
waffle-jetty-jakarta:provided
jetty-io-12.1.5.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.eclipse.jetty/jetty-client@12.1.5
pkg:maven/org.eclipse.jetty/jetty-client@12.1.5
Evidence
Type Source Name Value Confidence
Vendor file name jetty-io High
Vendor jar package name eclipse Highest
Vendor jar package name io Highest
Vendor jar package name jetty Highest
Vendor Manifest build-jdk-spec 25 Low
Vendor Manifest bundle-copyright Copyright (c) 1995 Mort Bay Consulting Pty Ltd and others. Low
Vendor Manifest bundle-docurl https://jetty.org/ Low
Vendor Manifest bundle-symbolicname org.eclipse.jetty.io Medium
Vendor Manifest Implementation-Vendor Eclipse Jetty Project High
Vendor Manifest url https://jetty.org/ Low
Vendor pom artifactid jetty-io Highest
Vendor pom artifactid jetty-io Low
Vendor pom groupid org.eclipse.jetty Highest
Vendor pom name Core :: IO High
Vendor pom parent-artifactid jetty-core Low
Product file name jetty-io High
Product jar package name eclipse Highest
Product jar package name io Highest
Product jar package name jetty Highest
Product Manifest build-jdk-spec 25 Low
Product Manifest bundle-copyright Copyright (c) 1995 Mort Bay Consulting Pty Ltd and others. Low
Product Manifest bundle-docurl https://jetty.org/ Low
Product Manifest Bundle-Name Core :: IO Medium
Product Manifest bundle-symbolicname org.eclipse.jetty.io Medium
Product Manifest url https://jetty.org/ Low
Product pom artifactid jetty-io Highest
Product pom groupid org.eclipse.jetty Highest
Product pom name Core :: IO High
Product pom parent-artifactid jetty-core Medium
Version file version 12.1.5 High
Version Manifest Bundle-Version 12.1.5 High
Version Manifest Implementation-Version 12.1.5 High
Version pom version 12.1.5 Highest
Related Dependencies
jetty-server-12.1.5.jar
Description:
The legacy jetty server artifact.
License:
EPL-2.0 OR Apache-2.0
https://www.eclipse.org/legal/epl-2.0/, https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-server/12.1.5/jetty-server-12.1.5.jar
MD5: f56663610098daa47c5138401a5762fe
SHA1: df890fa50e1de86bb130113a59baf874d647b5dd
SHA256: e0964741f132de3bdb48ca59c4b9bb8555f966d46b660c8c88f1e157cedbaa02
Referenced In Projects/Scopes:
waffle-jetty:provided
waffle-jetty-jakarta:provided
jetty-server-12.1.5.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.1.5
pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-servlet@12.1.5
Evidence
Type Source Name Value Confidence
Vendor file name jetty-server High
Vendor jar package name eclipse Highest
Vendor jar package name jetty Highest
Vendor jar package name server Highest
Vendor Manifest build-jdk-spec 25 Low
Vendor Manifest bundle-copyright Copyright (c) 1995 Mort Bay Consulting Pty Ltd and others. Low
Vendor Manifest bundle-docurl https://jetty.org/ Low
Vendor Manifest bundle-symbolicname org.eclipse.jetty.server Medium
Vendor Manifest Implementation-Vendor Eclipse Jetty Project High
Vendor Manifest url https://jetty.org/ Low
Vendor pom artifactid jetty-server Highest
Vendor pom artifactid jetty-server Low
Vendor pom groupid org.eclipse.jetty Highest
Vendor pom name Core :: Server High
Vendor pom parent-artifactid jetty-core Low
Product file name jetty-server High
Product jar package name eclipse Highest
Product jar package name jetty Highest
Product jar package name server Highest
Product Manifest build-jdk-spec 25 Low
Product Manifest bundle-copyright Copyright (c) 1995 Mort Bay Consulting Pty Ltd and others. Low
Product Manifest bundle-docurl https://jetty.org/ Low
Product Manifest Bundle-Name Core :: Server Medium
Product Manifest bundle-symbolicname org.eclipse.jetty.server Medium
Product Manifest url https://jetty.org/ Low
Product pom artifactid jetty-server Highest
Product pom groupid org.eclipse.jetty Highest
Product pom name Core :: Server High
Product pom parent-artifactid jetty-core Medium
Version file version 12.1.5 High
Version Manifest Bundle-Version 12.1.5 High
Version Manifest Implementation-Version 12.1.5 High
Version pom version 12.1.5 Highest
jetty-servlet-api-4.0.6.jar
Description:
Combined servlet api and schemas for use in JPMS and OSGi environments
License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/jetty/toolchain/jetty-servlet-api/4.0.6/jetty-servlet-api-4.0.6.jar
MD5: d63413e02885c25d0129e3d2936606f6
SHA1: 959c5d83d08f5cddf56caff749e48b735193191b
SHA256: d90bf1f8a9d2ba89f4510bb51e1516dcf94ef6dc034e00f233654abdd78f2210
Referenced In Project/Scope: waffle-jetty:provided
jetty-servlet-api-4.0.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-apache-jsp@12.1.5
Evidence
Type Source Name Value Confidence
Vendor file name jetty-servlet-api High
Vendor jar package name servlet Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-docurl https://eclipse.org/jetty Low
Vendor Manifest bundle-requiredexecutionenvironment JavaSE-11 Low
Vendor Manifest bundle-symbolicname org.eclipse.jetty.servlet-api Medium
Vendor pom artifactid jetty-servlet-api Highest
Vendor pom artifactid jetty-servlet-api Low
Vendor pom groupid org.eclipse.jetty.toolchain Highest
Vendor pom name Jetty :: Servlet API and Schemas for JPMS and OSGi High
Vendor pom parent-artifactid jetty-toolchain Low
Product file name jetty-servlet-api High
Product jar package name servlet Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest bundle-docurl https://eclipse.org/jetty Low
Product Manifest Bundle-Name Eclipse Jetty Servlet API and Schemas for JPMS and OSGi Medium
Product Manifest bundle-requiredexecutionenvironment JavaSE-11 Low
Product Manifest bundle-symbolicname org.eclipse.jetty.servlet-api Medium
Product pom artifactid jetty-servlet-api Highest
Product pom groupid org.eclipse.jetty.toolchain Highest
Product pom name Jetty :: Servlet API and Schemas for JPMS and OSGi High
Product pom parent-artifactid jetty-toolchain Medium
Version file version 4.0.6 High
Version Manifest Bundle-Version 4.0.6 High
Version pom parent-version 4.0.6 Low
Version pom version 4.0.6 Highest
pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6
(Confidence :High)
jna-5.18.1.jar
Description:
Java Native Access
License:
LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.18.1/jna-5.18.1.jar
MD5: cb531ec131e1c68c045b5d45fe5b9878
SHA1: b27ba04287cc4abe769642fe8318d39fc89bf937
SHA256: 260c4b1e22b1db9e110ee441c4f13ce115f841fa48c41d78750986214b395557
Referenced In Projects/Scopes:
waffle-demo-form:compile
waffle-tests:compile
waffle-jna:compile
waffle-demo-mixed-post-jakarta:provided
waffle-spring-boot-autoconfigure3:compile
waffle-spring-boot-autoconfigure4:compile
waffle-bom:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-filter-jakarta:compile
waffle-spring-boot-starter3:compile
waffle-demo-mixed:provided
waffle-demo-form-jakarta:compile
waffle-demo-negotiate-jakarta:provided
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-tests-jakarta:compile
waffle-bom-jakarta:compile
waffle-demo-mixed-post:provided
waffle-demo-jaas:compile
waffle-spring-security7:compile
waffle-jna-jakarta:compile
waffle-demo-negotiate:provided
waffle-demo-filter:compile
waffle-demo-spring-form-jakarta:compile
waffle-spring-security5:compile
waffle-tomcat11:compile
waffle-spring-security6:compile
waffle-tomcat10:compile
waffle-shiro:compile
waffle-demo-spring-boot-filter3:compile
waffle-demo-jaas-jakarta:compile
waffle-demo-spring-boot-filter4:compile
waffle-demo-spring-form:compile
waffle-demo-mixed-jakarta:provided
waffle-jetty-jakarta:compile
waffle-demo-spring-boot-filter2:compile
waffle-distro-jakarta:runtime
waffle-shiro-jakarta:compile
waffle-tomcat9:compile
waffle-jetty:compile
waffle-demo-spring-filter:compile
jna-5.18.1.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-bom-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat9@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat10@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-bom@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jna High
Vendor jar package name jna Highest
Vendor jar package name native Highest
Vendor jar package name sun Highest
Vendor jar (hint) package name oracle Highest
Vendor Manifest automatic-module-name com.sun.jna Medium
Vendor Manifest bundle-activationpolicy lazy Low
Vendor Manifest bundle-category jni Low
Vendor Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low
Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low
Vendor Manifest bundle-symbolicname com.sun.jna Medium
Vendor Manifest Implementation-Vendor JNA Development Team High
Vendor Manifest specification-vendor JNA Development Team Low
Vendor pom artifactid jna Highest
Vendor pom artifactid jna Low
Vendor pom developer email mblaesing@doppel-helix.eu Low
Vendor pom developer id twall Medium
Vendor pom developer name Matthias Bläsing Medium
Vendor pom developer name Timothy Wall Medium
Vendor pom groupid net.java.dev.jna Highest
Vendor pom name Java Native Access High
Vendor pom url java-native-access/jna Highest
Product file name jna High
Product jar package name jna Highest
Product jar package name library Highest
Product jar package name native Highest
Product jar package name sun Highest
Product jar package name win32 Highest
Product Manifest automatic-module-name com.sun.jna Medium
Product Manifest bundle-activationpolicy lazy Low
Product Manifest bundle-category jni Low
Product Manifest Bundle-Name jna Medium
Product Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low
Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low
Product Manifest bundle-symbolicname com.sun.jna Medium
Product Manifest Implementation-Title com.sun.jna High
Product Manifest specification-title Java Native Access (JNA) Medium
Product pom artifactid jna Highest
Product pom developer email mblaesing@doppel-helix.eu Low
Product pom developer id twall Low
Product pom developer name Matthias Bläsing Low
Product pom developer name Timothy Wall Low
Product pom groupid net.java.dev.jna Highest
Product pom name Java Native Access High
Product pom url java-native-access/jna High
Version file version 5.18.1 High
Version Manifest Bundle-Version 5.18.1 High
Version pom version 5.18.1 Highest
pkg:maven/net.java.dev.jna/jna@5.18.1
(Confidence :High)
cpe:2.3:a:oracle:java_se:5.18.1:*:*:*:*:*:*:*
(Confidence :Low)
suppress
jna-5.18.1.jar: jnidispatch.dll
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.18.1/jna-5.18.1.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: 302945a811fd8e21bcdd5226c73b6f74
SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607c
SHA256: b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699d
Referenced In Projects/Scopes:
waffle-demo-form:compile
waffle-tests:compile
waffle-jna:compile
waffle-demo-mixed-post-jakarta:provided
waffle-spring-boot-autoconfigure3:compile
waffle-spring-boot-autoconfigure4:compile
waffle-bom:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-filter-jakarta:compile
waffle-spring-boot-starter3:compile
waffle-demo-mixed:provided
waffle-demo-form-jakarta:compile
waffle-demo-negotiate-jakarta:provided
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-tests-jakarta:compile
waffle-bom-jakarta:compile
waffle-demo-mixed-post:provided
waffle-demo-jaas:compile
waffle-spring-security7:compile
waffle-jna-jakarta:compile
waffle-demo-negotiate:provided
waffle-demo-filter:compile
waffle-demo-spring-form-jakarta:compile
waffle-spring-security5:compile
waffle-tomcat11:compile
waffle-spring-security6:compile
waffle-tomcat10:compile
waffle-shiro:compile
waffle-demo-spring-boot-filter3:compile
waffle-demo-jaas-jakarta:compile
waffle-demo-spring-boot-filter4:compile
waffle-demo-spring-form:compile
waffle-demo-mixed-jakarta:provided
waffle-jetty-jakarta:compile
waffle-demo-spring-boot-filter2:compile
waffle-distro-jakarta:runtime
waffle-shiro-jakarta:compile
waffle-tomcat9:compile
waffle-jetty:compile
waffle-demo-spring-filter:compile
Evidence
Type Source Name Value Confidence
Vendor file name jnidispatch High
Product file name jnidispatch High
jna-5.18.1.jar: jnidispatch.dll
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.18.1/jna-5.18.1.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 2d2475f1f026dd54e9f3e787ae4f81da
SHA1: 27ff882ac271db547aee520b38e3ba9aa91e136c
SHA256: 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
Referenced In Projects/Scopes:
waffle-demo-form:compile
waffle-tests:compile
waffle-jna:compile
waffle-demo-mixed-post-jakarta:provided
waffle-spring-boot-autoconfigure3:compile
waffle-spring-boot-autoconfigure4:compile
waffle-bom:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-filter-jakarta:compile
waffle-spring-boot-starter3:compile
waffle-demo-mixed:provided
waffle-demo-form-jakarta:compile
waffle-demo-negotiate-jakarta:provided
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-tests-jakarta:compile
waffle-bom-jakarta:compile
waffle-demo-mixed-post:provided
waffle-demo-jaas:compile
waffle-spring-security7:compile
waffle-jna-jakarta:compile
waffle-demo-negotiate:provided
waffle-demo-filter:compile
waffle-demo-spring-form-jakarta:compile
waffle-spring-security5:compile
waffle-tomcat11:compile
waffle-spring-security6:compile
waffle-tomcat10:compile
waffle-shiro:compile
waffle-demo-spring-boot-filter3:compile
waffle-demo-jaas-jakarta:compile
waffle-demo-spring-boot-filter4:compile
waffle-demo-spring-form:compile
waffle-demo-mixed-jakarta:provided
waffle-jetty-jakarta:compile
waffle-demo-spring-boot-filter2:compile
waffle-distro-jakarta:runtime
waffle-shiro-jakarta:compile
waffle-tomcat9:compile
waffle-jetty:compile
waffle-demo-spring-filter:compile
Evidence
Type Source Name Value Confidence
Vendor file name jnidispatch High
Product file name jnidispatch High
jna-5.18.1.jar: jnidispatch.dll
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.18.1/jna-5.18.1.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: 0caa1ef75a807f9dde05084fa2219a5c
SHA1: 2f5e1cd82cde192905c7510ce99037b67d980640
SHA256: 752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44
Referenced In Projects/Scopes:
waffle-demo-form:compile
waffle-tests:compile
waffle-jna:compile
waffle-demo-mixed-post-jakarta:provided
waffle-spring-boot-autoconfigure3:compile
waffle-spring-boot-autoconfigure4:compile
waffle-bom:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-filter-jakarta:compile
waffle-spring-boot-starter3:compile
waffle-demo-mixed:provided
waffle-demo-form-jakarta:compile
waffle-demo-negotiate-jakarta:provided
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-tests-jakarta:compile
waffle-bom-jakarta:compile
waffle-demo-mixed-post:provided
waffle-demo-jaas:compile
waffle-spring-security7:compile
waffle-jna-jakarta:compile
waffle-demo-negotiate:provided
waffle-demo-filter:compile
waffle-demo-spring-form-jakarta:compile
waffle-spring-security5:compile
waffle-tomcat11:compile
waffle-spring-security6:compile
waffle-tomcat10:compile
waffle-shiro:compile
waffle-demo-spring-boot-filter3:compile
waffle-demo-jaas-jakarta:compile
waffle-demo-spring-boot-filter4:compile
waffle-demo-spring-form:compile
waffle-demo-mixed-jakarta:provided
waffle-jetty-jakarta:compile
waffle-demo-spring-boot-filter2:compile
waffle-distro-jakarta:runtime
waffle-shiro-jakarta:compile
waffle-tomcat9:compile
waffle-jetty:compile
waffle-demo-spring-filter:compile
Evidence
Type Source Name Value Confidence
Vendor file name jnidispatch High
Product file name jnidispatch High
jna-platform-5.18.1.jar
Description:
Java Native Access Platform
License:
LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-platform/5.18.1/jna-platform-5.18.1.jar
MD5: a7af00779ec98bfe22dfb07b1532830d
SHA1: dd817f391efc492041c9ae91127527c13750a789
SHA256: ad14c1b1ec4f43d396231219dfa635ebf828f738eac9f890ea1bc07795892d9a
Referenced In Projects/Scopes:
waffle-demo-form:compile
waffle-tests:compile
waffle-jna:compile
waffle-demo-mixed-post-jakarta:provided
waffle-spring-boot-autoconfigure3:compile
waffle-spring-boot-autoconfigure4:compile
waffle-bom:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-filter-jakarta:compile
waffle-spring-boot-starter3:compile
waffle-demo-mixed:provided
waffle-demo-form-jakarta:compile
waffle-demo-negotiate-jakarta:provided
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-tests-jakarta:compile
waffle-bom-jakarta:compile
waffle-demo-mixed-post:provided
waffle-demo-jaas:compile
waffle-spring-security7:compile
waffle-jna-jakarta:compile
waffle-demo-negotiate:provided
waffle-demo-filter:compile
waffle-demo-spring-form-jakarta:compile
waffle-spring-security5:compile
waffle-tomcat11:compile
waffle-spring-security6:compile
waffle-tomcat10:compile
waffle-shiro:compile
waffle-demo-spring-boot-filter3:compile
waffle-demo-jaas-jakarta:compile
waffle-demo-spring-boot-filter4:compile
waffle-demo-spring-form:compile
waffle-demo-mixed-jakarta:provided
waffle-jetty-jakarta:compile
waffle-demo-spring-boot-filter2:compile
waffle-distro-jakarta:runtime
waffle-shiro-jakarta:compile
waffle-tomcat9:compile
waffle-jetty:compile
waffle-demo-spring-filter:compile
jna-platform-5.18.1.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-tomcat9@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-bom-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-bom@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat10@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name jna-platform High
Vendor jar package name jna Highest
Vendor jar package name platform Highest
Vendor jar package name sun Highest
Vendor jar (hint) package name oracle Highest
Vendor Manifest automatic-module-name com.sun.jna.platform Medium
Vendor Manifest bundle-category jni Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low
Vendor Manifest bundle-symbolicname com.sun.jna.platform Medium
Vendor Manifest Implementation-Vendor JNA Development Team High
Vendor Manifest specification-vendor JNA Development Team Low
Vendor pom artifactid jna-platform Highest
Vendor pom artifactid jna-platform Low
Vendor pom developer email mblaesing@doppel-helix.eu Low
Vendor pom developer id twall Medium
Vendor pom developer name Matthias Bläsing Medium
Vendor pom developer name Timothy Wall Medium
Vendor pom groupid net.java.dev.jna Highest
Vendor pom name Java Native Access Platform High
Vendor pom url java-native-access/jna Highest
Product file name jna-platform High
Product jar package name jna Highest
Product jar package name platform Highest
Product jar package name sun Highest
Product Manifest automatic-module-name com.sun.jna.platform Medium
Product Manifest bundle-category jni Low
Product Manifest Bundle-Name jna-platform Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low
Product Manifest bundle-symbolicname com.sun.jna.platform Medium
Product Manifest Implementation-Title com.sun.jna High
Product Manifest specification-title Java Native Access (JNA) Medium
Product pom artifactid jna-platform Highest
Product pom developer email mblaesing@doppel-helix.eu Low
Product pom developer id twall Low
Product pom developer name Matthias Bläsing Low
Product pom developer name Timothy Wall Low
Product pom groupid net.java.dev.jna Highest
Product pom name Java Native Access Platform High
Product pom url java-native-access/jna High
Version file version 5.18.1 High
Version Manifest Bundle-Version 5.18.1 High
Version pom version 5.18.1 Highest
pkg:maven/net.java.dev.jna/jna-platform@5.18.1
(Confidence :High)
jspecify-1.0.0.jar
Description:
An artifact of well-named and well-specified annotations to power static analysis checks
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar
MD5: 9133aba420d0ca3b001dbb6ae9992cf6
SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507
SHA256: 1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab
Referenced In Projects/Scopes:
waffle-demo-form:compile
waffle-tests:compile
waffle-jna:compile
waffle-demo-mixed-post-jakarta:provided
waffle-spring-boot-autoconfigure3:compile
waffle-spring-boot-autoconfigure4:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-filter-jakarta:compile
waffle-spring-boot-starter3:compile
waffle-demo-mixed:provided
waffle-demo-form-jakarta:compile
waffle-demo-negotiate-jakarta:provided
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-tests-jakarta:compile
waffle-demo-mixed-post:provided
waffle-demo-jaas:compile
waffle-spring-security7:compile
waffle-jna-jakarta:compile
waffle-demo-negotiate:provided
waffle-demo-filter:compile
waffle-demo-spring-form-jakarta:compile
waffle-spring-security5:compile
waffle-tomcat11:compile
waffle-spring-security6:compile
waffle-tomcat10:compile
waffle-shiro:compile
waffle-demo-spring-boot-filter3:compile
waffle-demo-jaas-jakarta:compile
waffle-demo-spring-boot-filter4:compile
waffle-demo-spring-form:compile
waffle-demo-mixed-jakarta:provided
waffle-jetty-jakarta:compile
waffle-demo-spring-boot-filter2:compile
waffle-distro-jakarta:runtime
waffle-shiro-jakarta:compile
waffle-tomcat9:compile
waffle-jetty:compile
waffle-demo-spring-filter:compile
jspecify-1.0.0.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.1
pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.1
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3
pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.springframework/spring-core@7.0.3
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3
pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3
pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3
pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.1
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.2
Evidence
Type Source Name Value Confidence
Vendor file name jspecify High
Vendor jar package name annotations Highest
Vendor jar package name jspecify Highest
Vendor Manifest bundle-docurl https://jspecify.dev/docs/start-here Low
Vendor Manifest bundle-symbolicname org.jspecify.jspecify Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid jspecify Highest
Vendor pom artifactid jspecify Low
Vendor pom developer email kevinb9n@gmail.com Low
Vendor pom developer id kevinb9n Medium
Vendor pom developer name Kevin Bourrillion Medium
Vendor pom groupid org.jspecify Highest
Vendor pom name JSpecify annotations High
Vendor pom url http://jspecify.org/ Highest
Product file name jspecify High
Product jar package name annotations Highest
Product jar package name jspecify Highest
Product Manifest bundle-docurl https://jspecify.dev/docs/start-here Low
Product Manifest Bundle-Name JSpecify annotations Medium
Product Manifest bundle-symbolicname org.jspecify.jspecify Medium
Product Manifest multi-release true Low
Product pom artifactid jspecify Highest
Product pom developer email kevinb9n@gmail.com Low
Product pom developer id kevinb9n Low
Product pom developer name Kevin Bourrillion Low
Product pom groupid org.jspecify Highest
Product pom name JSpecify annotations High
Product pom url http://jspecify.org/ Medium
Version file version 1.0.0 High
Version Manifest Bundle-Version 1.0.0 High
Version Manifest Implementation-Version 1.0.0 High
Version pom version 1.0.0 Highest
pkg:maven/org.jspecify/jspecify@1.0.0
(Confidence :High)
jsr305-3.0.2.jar
Description:
JSR305 Annotations for Findbugs
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256: 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Projects/Scopes:
waffle-demo-mixed-post-jakarta:provided
waffle-spring-security7:provided
waffle-jna:provided
waffle-tomcat11:provided
waffle-spring-boot4:provided
waffle-demo-spring-form:provided
waffle-bom:provided
waffle-shiro:provided
waffle-spring-boot-autoconfigure2:provided
waffle-demo-spring-filter:provided
waffle-demo-filter-jakarta:provided
waffle-demo-mixed-post:provided
waffle-demo-parent-jakarta:provided
waffle-jetty-jakarta:provided
waffle-spring-boot-starter4:provided
waffle-demo-spring-boot-filter4:provided
waffle-spring-boot3:provided
waffle-demo-parent:provided
waffle-spring-boot-starter2:provided
waffle-distro-jakarta:provided
waffle-jetty:provided
waffle-spring-boot-starter3:provided
waffle-demo-jaas:provided
waffle-demo-spring-form-jakarta:provided
waffle-bom-jakarta:provided
waffle-spring-boot-autoconfigure4:provided
waffle-demo-form-jakarta:provided
waffle-demo-filter:provided
waffle-demo-spring-boot-filter3:provided
waffle-shiro-jakarta:provided
waffle-demo-mixed:provided
waffle-jna-jakarta:provided
waffle-spring-security5:provided
waffle-spring-boot2:provided
waffle-demo-negotiate-jakarta:provided
waffle-demo-form:provided
waffle-distro:provided
waffle-tests:provided
waffle:provided
waffle-tests-jakarta:provided
waffle-demo-negotiate:provided
waffle-spring-security6:provided
waffle-tomcat9:provided
waffle-demo-spring-filter-jakarta:provided
waffle-spring-boot-autoconfigure3:provided
waffle-tomcat10:provided
waffle-demo-jaas-jakarta:provided
waffle-demo-spring-boot-filter2:provided
waffle-demo-mixed-jakarta:provided
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
Evidence
Type Source Name Value Confidence
Vendor file name jsr305 High
Vendor Manifest bundle-symbolicname org.jsr-305 Medium
Vendor pom artifactid jsr305 Highest
Vendor pom artifactid jsr305 Low
Vendor pom groupid com.google.code.findbugs Highest
Vendor pom name FindBugs-jsr305 High
Vendor pom url http://findbugs.sourceforge.net/ Highest
Product file name jsr305 High
Product Manifest Bundle-Name FindBugs-jsr305 Medium
Product Manifest bundle-symbolicname org.jsr-305 Medium
Product pom artifactid jsr305 Highest
Product pom groupid com.google.code.findbugs Highest
Product pom name FindBugs-jsr305 High
Product pom url http://findbugs.sourceforge.net/ Medium
Version file version 3.0.2 High
Version Manifest Bundle-Version 3.0.2 High
Version pom version 3.0.2 Highest
pkg:maven/com.google.code.findbugs/jsr305@3.0.2
(Confidence :High)
jul-to-slf4j-1.7.36.jar
Description:
JUL to SLF4J bridge
File Path: /home/runner/.m2/repository/org/slf4j/jul-to-slf4j/1.7.36/jul-to-slf4j-1.7.36.jar
MD5: 2a3fe73e6cafe8f102facaf2dd65353f
SHA1: ed46d81cef9c412a88caef405b58f93a678ff2ca
SHA256: 9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de
Referenced In Projects/Scopes:
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
jul-to-slf4j-1.7.36.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
Evidence
Type Source Name Value Confidence
Vendor file name jul-to-slf4j High
Vendor jar package name bridge Highest
Vendor jar package name slf4j Highest
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Vendor Manifest bundle-symbolicname jul.to.slf4j Medium
Vendor pom artifactid jul-to-slf4j Highest
Vendor pom artifactid jul-to-slf4j Low
Vendor pom groupid org.slf4j Highest
Vendor pom name JUL to SLF4J bridge High
Vendor pom parent-artifactid slf4j-parent Low
Vendor pom url http://www.slf4j.org Highest
Product file name jul-to-slf4j High
Product jar package name bridge Highest
Product jar package name slf4j Highest
Product Manifest build-jdk-spec 1.8 Low
Product Manifest Bundle-Name jul-to-slf4j Medium
Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low
Product Manifest bundle-symbolicname jul.to.slf4j Medium
Product pom artifactid jul-to-slf4j Highest
Product pom groupid org.slf4j Highest
Product pom name JUL to SLF4J bridge High
Product pom parent-artifactid slf4j-parent Medium
Product pom url http://www.slf4j.org Medium
Version file version 1.7.36 High
Version Manifest Bundle-Version 1.7.36 High
Version Manifest Implementation-Version 1.7.36 High
Version pom version 1.7.36 Highest
pkg:maven/org.slf4j/jul-to-slf4j@1.7.36
(Confidence :High)
jul-to-slf4j-2.0.17.jar
Description:
JUL to SLF4J bridge
License:
https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/jul-to-slf4j/2.0.17/jul-to-slf4j-2.0.17.jar
MD5: a42936c56611e4794c42908fb3d3a647
SHA1: 524cb6ccc2b68a57604750e1ab8b13b5a786a6aa
SHA256: a7afcd23b9cfd1475e55c94f943b808c5922035e7e2c2a5c65a487a4106bc538
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-distro-jakarta:runtime
waffle-spring-boot-starter3:compile
jul-to-slf4j-2.0.17.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter-security@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
pkg:maven/org.springframework.boot/spring-boot-starter@4.0.1
Evidence
Type Source Name Value Confidence
Vendor file name jul-to-slf4j High
Vendor jar package name bridge Highest
Vendor jar package name slf4j Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl http://www.slf4j.org Low
Vendor Manifest bundle-symbolicname jul.to.slf4j Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid jul-to-slf4j Highest
Vendor pom artifactid jul-to-slf4j Low
Vendor pom groupid org.slf4j Highest
Vendor pom name JUL to SLF4J bridge High
Vendor pom parent-artifactid slf4j-parent Low
Vendor pom url http://www.slf4j.org Highest
Product file name jul-to-slf4j High
Product jar package name bridge Highest
Product jar package name slf4j Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl http://www.slf4j.org Low
Product Manifest Bundle-Name JUL to SLF4J bridge Medium
Product Manifest bundle-symbolicname jul.to.slf4j Medium
Product Manifest Implementation-Title jul-to-slf4j High
Product Manifest multi-release true Low
Product pom artifactid jul-to-slf4j Highest
Product pom groupid org.slf4j Highest
Product pom name JUL to SLF4J bridge High
Product pom parent-artifactid slf4j-parent Medium
Product pom url http://www.slf4j.org Medium
Version file version 2.0.17 High
Version Manifest Bundle-Version 2.0.17 High
Version Manifest Implementation-Version 2.0.17 High
Version pom version 2.0.17 Highest
pkg:maven/org.slf4j/jul-to-slf4j@2.0.17
(Confidence :High)
log4j-api-2.25.3.jar
Description:
The logging API of the Log4j project.
Library and application code can log through this API.
It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases.
Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.
License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-api/2.25.3/log4j-api-2.25.3.jar
MD5: 7061652b4274beeaa657ec908e83f491
SHA1: fb385330d89c2d61058ef649403f214633569205
SHA256: e886682920fa0fb9d6eb6395dcb4de088443f8646c89c5e5846e168e327f406f
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
waffle-distro-jakarta:runtime
waffle-spring-boot-starter3:compile
log4j-api-2.25.3.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/org.springframework.boot/spring-boot-starter-security@4.0.1
pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
Evidence
Type Source Name Value Confidence
Vendor file name log4j-api High
Vendor jar package name apache Highest
Vendor jar package name log4j Highest
Vendor jar package name logging Highest
Vendor jar package name org Highest
Vendor jar package name simple Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-activationpolicy lazy Low
Vendor Manifest bundle-symbolicname org.apache.logging.log4j.api Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release true Low
Vendor Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.util.PropertySource";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.EnvironmentPropertySource",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.SystemPropertiesPropertySource" Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid log4j-api Highest
Vendor pom artifactid log4j-api Low
Vendor pom groupid org.apache.logging.log4j Highest
Vendor pom name Apache Log4j API High
Vendor pom parent-artifactid log4j Low
Vendor pom url https://logging.apache.org/log4j/2.x/ Highest
Product file name log4j-api High
Product jar package name apache Highest
Product jar package name log4j Highest
Product jar package name logging Highest
Product jar package name org Highest
Product jar package name simple Highest
Product jar package name util Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-activationpolicy lazy Low
Product Manifest Bundle-Name Apache Log4j API Medium
Product Manifest bundle-symbolicname org.apache.logging.log4j.api Medium
Product Manifest Implementation-Title Apache Log4j API High
Product Manifest multi-release true Low
Product Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.util.PropertySource";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.EnvironmentPropertySource",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.SystemPropertiesPropertySource" Low
Product Manifest specification-title Apache Log4j API Medium
Product pom artifactid log4j-api Highest
Product pom groupid org.apache.logging.log4j Highest
Product pom name Apache Log4j API High
Product pom parent-artifactid log4j Medium
Product pom url https://logging.apache.org/log4j/2.x/ Medium
Version file version 2.25.3 High
Version Manifest Bundle-Version 2.25.3 High
Version Manifest Implementation-Version 2.25.3 High
Version pom version 2.25.3 Highest
log4j-to-slf4j-2.25.3.jar
Description:
Forwards the Log4j API calls to SLF4J.
(Refer to the `log4j-slf4j[2]-impl` artifacts for forwarding SLF4J to the Log4j API.)
License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-to-slf4j/2.25.3/log4j-to-slf4j-2.25.3.jar
MD5: f515a81b64474e5faf389ab8611e123a
SHA1: 30adfb40cca243ec88cf7ec1fddb411ab55faa4f
SHA256: 90a09280390c54a28ac1514ded7c5293f3fe62f4448bf371b4e2415272e67a3d
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
waffle-distro-jakarta:runtime
waffle-spring-boot-starter3:compile
log4j-to-slf4j-2.25.3.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-security@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
pkg:maven/org.springframework.boot/spring-boot-starter@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
Evidence
Type Source Name Value Confidence
Vendor file name log4j-to-slf4j High
Vendor jar package name apache Highest
Vendor jar package name logging Highest
Vendor jar package name slf4j Highest
Vendor Manifest build-jdk-spec 17 Low
Vendor Manifest bundle-activationpolicy lazy Low
Vendor Manifest bundle-symbolicname org.apache.logging.log4j.to.slf4j Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest multi-release false Low
Vendor Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.spi.Provider";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.spi.Provider";register:="org.apache.logging.slf4j.SLF4JProvider" Low
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid log4j-to-slf4j Highest
Vendor pom artifactid log4j-to-slf4j Low
Vendor pom groupid org.apache.logging.log4j Highest
Vendor pom name Log4j API to SLF4J Adapter High
Vendor pom parent-artifactid log4j Low
Vendor pom url https://logging.apache.org/log4j/2.x/ Highest
Product file name log4j-to-slf4j High
Product jar package name apache Highest
Product jar package name logging Highest
Product jar package name slf4j Highest
Product jar package name slf4jprovider Highest
Product Manifest build-jdk-spec 17 Low
Product Manifest bundle-activationpolicy lazy Low
Product Manifest Bundle-Name Log4j API to SLF4J Adapter Medium
Product Manifest bundle-symbolicname org.apache.logging.log4j.to.slf4j Medium
Product Manifest Implementation-Title Log4j API to SLF4J Adapter High
Product Manifest multi-release false Low
Product Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.spi.Provider";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.spi.Provider";register:="org.apache.logging.slf4j.SLF4JProvider" Low
Product Manifest specification-title Log4j API to SLF4J Adapter Medium
Product pom artifactid log4j-to-slf4j Highest
Product pom groupid org.apache.logging.log4j Highest
Product pom name Log4j API to SLF4J Adapter High
Product pom parent-artifactid log4j Medium
Product pom url https://logging.apache.org/log4j/2.x/ Medium
Version file version 2.25.3 High
Version Manifest Bundle-Version 2.25.3 High
Version Manifest Implementation-Version 2.25.3 High
Version pom version 2.25.3 Highest
pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.25.3
(Confidence :High)
logback-core-1.5.22.jar
Description:
logback-core module
License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html
File Path: /home/runner/.m2/repository/ch/qos/logback/logback-core/1.5.22/logback-core-1.5.22.jar
MD5: a001d8dfa6910cbeb38fa7714778a046
SHA1: 7c3ee4420b36bd499fa4f9f18a81d54a64fe0218
SHA256: 7561b7a525364612966ff3823f8c62a81a3262742d455301f479273ef55570b8
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
waffle-spring-boot-starter4:compile
waffle-spring-boot-starter3:compile
logback-core-1.5.22.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/org.springframework.boot/spring-boot-starter-security@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/org.springframework.boot/spring-boot-starter@4.0.1
Evidence
Type Source Name Value Confidence
Vendor file name logback-core High
Vendor jar package name ch Highest
Vendor jar package name core Highest
Vendor jar package name logback Highest
Vendor jar package name qos Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl http://www.qos.ch Low
Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium
Vendor Manifest Implementation-Vendor QOS.ch High
Vendor Manifest multi-release true Low
Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low
Vendor Manifest specification-vendor QOS.ch Low
Vendor pom artifactid logback-core Highest
Vendor pom artifactid logback-core Low
Vendor pom groupid ch.qos.logback Highest
Vendor pom name Logback Core Module High
Vendor pom parent-artifactid logback-parent Low
Product file name logback-core High
Product jar package name 21 Highest
Product jar package name ch Highest
Product jar package name core Highest
Product jar package name logback Highest
Product jar package name qos Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl http://www.qos.ch Low
Product Manifest Bundle-Name Logback Core Module Medium
Product Manifest bundle-symbolicname ch.qos.logback.core Medium
Product Manifest Implementation-Title Logback Core Module High
Product Manifest multi-release true Low
Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low
Product Manifest specification-title Logback Core Module Medium
Product pom artifactid logback-core Highest
Product pom groupid ch.qos.logback Highest
Product pom name Logback Core Module High
Product pom parent-artifactid logback-parent Medium
Version file version 1.5.22 High
Version Manifest Bundle-Version 1.5.22 High
Version Manifest Implementation-Version 1.5.22 High
Version pom version 1.5.22 Highest
Related Dependencies
logback-classic-1.5.22.jar
File Path: /home/runner/.m2/repository/ch/qos/logback/logback-classic/1.5.22/logback-classic-1.5.22.jar
MD5: eeb5c0f0a24fd772111fab1dd559038d
SHA1: b5212de704deea1a38a41a2bf8de274e7c9cd653
SHA256: 875f31c4b4dc49808e503490701a21cee3e7279800d9c76601da82685342e54b
pkg:maven/ch.qos.logback/logback-classic@1.5.22
logback-core-1.5.25.jar
Description:
logback-core module
License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html
File Path: /home/runner/.m2/repository/ch/qos/logback/logback-core/1.5.25/logback-core-1.5.25.jar
MD5: 6a1c2feb8e1ecb20417a4d0e74c9ad51
SHA1: 137f4ae0af7acaa0f9600a2ca18ddc9f3a0b899b
SHA256: aeb86d749936a960a1ec897aa821fe611ab6b105f1170ad334ae5eadc4bd689c
Referenced In Projects/Scopes:
waffle-demo-form:compile
waffle-demo-filter:compile
waffle-demo-spring-form-jakarta:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-filter-jakarta:compile
waffle-demo-parent:compile
waffle-demo-form-jakarta:compile
waffle-demo-negotiate:compile
waffle-demo-jaas-jakarta:compile
waffle-demo-mixed:compile
waffle-demo-mixed-post-jakarta:compile
waffle-distro:runtime
waffle-demo-jaas:compile
waffle-demo-parent-jakarta:compile
waffle-demo-spring-form:compile
waffle-demo-negotiate-jakarta:compile
waffle-demo-mixed-post:compile
waffle-demo-spring-boot-filter2:compile
waffle-distro-jakarta:runtime
waffle-demo-mixed-jakarta:compile
waffle-demo-spring-filter:compile
logback-core-1.5.25.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
Evidence
Type Source Name Value Confidence
Vendor file name logback-core High
Vendor jar package name ch Highest
Vendor jar package name core Highest
Vendor jar package name logback Highest
Vendor jar package name qos Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl http://www.qos.ch Low
Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium
Vendor Manifest Implementation-Vendor QOS.ch High
Vendor Manifest multi-release true Low
Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low
Vendor Manifest specification-vendor QOS.ch Low
Vendor pom artifactid logback-core Highest
Vendor pom artifactid logback-core Low
Vendor pom groupid ch.qos.logback Highest
Vendor pom name Logback Core Module High
Vendor pom parent-artifactid logback-parent Low
Product file name logback-core High
Product jar package name 21 Highest
Product jar package name ch Highest
Product jar package name core Highest
Product jar package name logback Highest
Product jar package name qos Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl http://www.qos.ch Low
Product Manifest Bundle-Name Logback Core Module Medium
Product Manifest bundle-symbolicname ch.qos.logback.core Medium
Product Manifest Implementation-Title Logback Core Module High
Product Manifest multi-release true Low
Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low
Product Manifest specification-title Logback Core Module Medium
Product pom artifactid logback-core Highest
Product pom groupid ch.qos.logback Highest
Product pom name Logback Core Module High
Product pom parent-artifactid logback-parent Medium
Version file version 1.5.25 High
Version Manifest Bundle-Version 1.5.25 High
Version Manifest Implementation-Version 1.5.25 High
Version pom version 1.5.25 Highest
Related Dependencies
logback-classic-1.5.25.jar
File Path: /home/runner/.m2/repository/ch/qos/logback/logback-classic/1.5.25/logback-classic-1.5.25.jar
MD5: ecd0a349fd799f57f28e52c3f713d479
SHA1: 20c4bbe98fb58f50ee1ca6befd7e7731f13a19d3
SHA256: 93163d85a0972e3d4813385af2d037bc94eed0542c4d74abc131830c84af070e
pkg:maven/ch.qos.logback/logback-classic@1.5.25
micrometer-commons-1.14.14.jar
Description:
Module containing common code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.14.14/micrometer-commons-1.14.14.jar
MD5: ec8cbe42e95facf35d38d9732db13883
SHA1: 36825a740b56307f2a069f7f794e6f33bb83baba
SHA256: 01a7a93945e194464c861a483853cecfc8fc70a27a97e7a786fa6a2dbb6e6359
Referenced In Projects/Scopes:
waffle-demo-spring-form-jakarta:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-security6:compile
waffle-distro-jakarta:runtime
micrometer-commons-1.14.14.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/org.springframework/spring-context@6.2.15
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name micrometer-commons High
Vendor jar package name common Highest
Vendor jar package name io Highest
Vendor jar package name micrometer Highest
Vendor Manifest automatic-module-name micrometer.commons Medium
Vendor Manifest branch HEAD Low
Vendor Manifest build-date 2025-12-08_08:18:42 Low
Vendor Manifest build-date-utc 2025-12-08T08:18:42.064607058Z Low
Vendor Manifest build-host bef28d2baecb Low
Vendor Manifest build-job deploy Low
Vendor Manifest build-number 59850 Low
Vendor Manifest build-timezone Etc/UTC Low
Vendor Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/59850 Low
Vendor Manifest built-os Linux Low
Vendor Manifest built-status release Low
Vendor Manifest bundle-symbolicname micrometer-commons Medium
Vendor Manifest change d8a46b5 Low
Vendor Manifest full-change d8a46b5a7080738e6f9afd623cfdfcf984f44185 Low
Vendor Manifest module-email tludwig@vmware.com Low
Vendor Manifest module-origin micrometer-metrics/micrometer.git Low
Vendor Manifest module-owner tludwig@vmware.com Low
Vendor Manifest module-source /micrometer-commons Low
Vendor pom artifactid micrometer-commons Highest
Vendor pom artifactid micrometer-commons Low
Vendor pom developer email tludwig@vmware.com Low
Vendor pom developer id shakuzen Medium
Vendor pom developer name Tommy Ludwig Medium
Vendor pom groupid io.micrometer Highest
Vendor pom name micrometer-commons High
Vendor pom url micrometer-metrics/micrometer Highest
Product file name micrometer-commons High
Product jar package name common Highest
Product jar package name io Highest
Product jar package name micrometer Highest
Product Manifest automatic-module-name micrometer.commons Medium
Product Manifest branch HEAD Low
Product Manifest build-date 2025-12-08_08:18:42 Low
Product Manifest build-date-utc 2025-12-08T08:18:42.064607058Z Low
Product Manifest build-host bef28d2baecb Low
Product Manifest build-job deploy Low
Product Manifest build-number 59850 Low
Product Manifest build-timezone Etc/UTC Low
Product Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/59850 Low
Product Manifest built-os Linux Low
Product Manifest built-status release Low
Product Manifest Bundle-Name micrometer-commons Medium
Product Manifest bundle-symbolicname micrometer-commons Medium
Product Manifest change d8a46b5 Low
Product Manifest full-change d8a46b5a7080738e6f9afd623cfdfcf984f44185 Low
Product Manifest Implementation-Title io.micrometer#micrometer-commons;1.14.14 High
Product Manifest module-email tludwig@vmware.com Low
Product Manifest module-origin micrometer-metrics/micrometer.git Low
Product Manifest module-owner tludwig@vmware.com Low
Product Manifest module-source /micrometer-commons Low
Product pom artifactid micrometer-commons Highest
Product pom developer email tludwig@vmware.com Low
Product pom developer id shakuzen Low
Product pom developer name Tommy Ludwig Low
Product pom groupid io.micrometer Highest
Product pom name micrometer-commons High
Product pom url micrometer-metrics/micrometer High
Version file version 1.14.14 High
Version Manifest Bundle-Version 1.14.14 High
Version Manifest Implementation-Version 1.14.14 High
Version pom version 1.14.14 Highest
pkg:maven/io.micrometer/micrometer-commons@1.14.14
(Confidence :High)
micrometer-commons-1.15.7.jar
Description:
Module containing common code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.15.7/micrometer-commons-1.15.7.jar
MD5: 8df4ab0ef754b802275916b0b98bf7b2
SHA1: 4f4ddbb4363ddb191633751607efb8a18707559c
SHA256: bf8118b3fdc498855679bf01df4cbdf2b78fc8ef561b9faff648c4ceb2a24179
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-spring-boot-starter3:compile
micrometer-commons-1.15.7.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name micrometer-commons High
Vendor jar package name common Highest
Vendor jar package name io Highest
Vendor jar package name micrometer Highest
Vendor Manifest automatic-module-name micrometer.commons Medium
Vendor Manifest branch HEAD Low
Vendor Manifest build-date 2025-12-08_10:11:20 Low
Vendor Manifest build-date-utc 2025-12-08T10:11:20.208522313Z Low
Vendor Manifest build-host b5adb8bc4705 Low
Vendor Manifest build-job deploy Low
Vendor Manifest build-number 59889 Low
Vendor Manifest build-timezone Etc/UTC Low
Vendor Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/59889 Low
Vendor Manifest built-os Linux Low
Vendor Manifest built-status release Low
Vendor Manifest bundle-symbolicname micrometer-commons Medium
Vendor Manifest change e8dd176 Low
Vendor Manifest full-change e8dd176ffe60d6ea068c7f536e5662278499cd8f Low
Vendor Manifest module-email tludwig@vmware.com Low
Vendor Manifest module-origin micrometer-metrics/micrometer.git Low
Vendor Manifest module-owner tludwig@vmware.com Low
Vendor Manifest module-source /micrometer-commons Low
Vendor pom artifactid micrometer-commons Highest
Vendor pom artifactid micrometer-commons Low
Vendor pom developer email tludwig@vmware.com Low
Vendor pom developer id shakuzen Medium
Vendor pom developer name Tommy Ludwig Medium
Vendor pom groupid io.micrometer Highest
Vendor pom name micrometer-commons High
Vendor pom url micrometer-metrics/micrometer Highest
Product file name micrometer-commons High
Product jar package name common Highest
Product jar package name io Highest
Product jar package name micrometer Highest
Product Manifest automatic-module-name micrometer.commons Medium
Product Manifest branch HEAD Low
Product Manifest build-date 2025-12-08_10:11:20 Low
Product Manifest build-date-utc 2025-12-08T10:11:20.208522313Z Low
Product Manifest build-host b5adb8bc4705 Low
Product Manifest build-job deploy Low
Product Manifest build-number 59889 Low
Product Manifest build-timezone Etc/UTC Low
Product Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/59889 Low
Product Manifest built-os Linux Low
Product Manifest built-status release Low
Product Manifest Bundle-Name micrometer-commons Medium
Product Manifest bundle-symbolicname micrometer-commons Medium
Product Manifest change e8dd176 Low
Product Manifest full-change e8dd176ffe60d6ea068c7f536e5662278499cd8f Low
Product Manifest Implementation-Title io.micrometer#micrometer-commons;1.15.7 High
Product Manifest module-email tludwig@vmware.com Low
Product Manifest module-origin micrometer-metrics/micrometer.git Low
Product Manifest module-owner tludwig@vmware.com Low
Product Manifest module-source /micrometer-commons Low
Product pom artifactid micrometer-commons Highest
Product pom developer email tludwig@vmware.com Low
Product pom developer id shakuzen Low
Product pom developer name Tommy Ludwig Low
Product pom groupid io.micrometer Highest
Product pom name micrometer-commons High
Product pom url micrometer-metrics/micrometer High
Version file version 1.15.7 High
Version Manifest Bundle-Version 1.15.7 High
Version Manifest Implementation-Version 1.15.7 High
Version pom version 1.15.7 Highest
pkg:maven/io.micrometer/micrometer-commons@1.15.7
(Confidence :High)
micrometer-commons-1.16.1.jar
Description:
Module containing common code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.16.1/micrometer-commons-1.16.1.jar
MD5: 23e0b713e3ed971c92eea68f8074d72d
SHA1: 1b14b7052dd88e35625b3f5505f9bb8a9b0fedb8
SHA256: 6c668165cb7204dcc48ff67a30e276c71304b92f3ed746ecaf98b1ea6b672fbb
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
waffle-spring-boot-starter4:compile
micrometer-commons-1.16.1.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-boot-starter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name micrometer-commons High
Vendor jar package name common Highest
Vendor jar package name io Highest
Vendor jar package name micrometer Highest
Vendor Manifest automatic-module-name micrometer.commons Medium
Vendor Manifest branch HEAD Low
Vendor Manifest build-date 2025-12-08_20:33:14 Low
Vendor Manifest build-date-utc 2025-12-08T20:33:14.227668117Z Low
Vendor Manifest build-host b8894f464959 Low
Vendor Manifest build-job deploy Low
Vendor Manifest build-number 59905 Low
Vendor Manifest build-timezone Etc/UTC Low
Vendor Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/59905 Low
Vendor Manifest built-os Linux Low
Vendor Manifest built-status release Low
Vendor Manifest bundle-symbolicname micrometer-commons Medium
Vendor Manifest change 0550e76 Low
Vendor Manifest full-change 0550e769cb9b4f15cff86c1e503fce8ae03ef84f Low
Vendor Manifest module-email tludwig@vmware.com Low
Vendor Manifest module-origin micrometer-metrics/micrometer.git Low
Vendor Manifest module-owner tludwig@vmware.com Low
Vendor Manifest module-source /micrometer-commons Low
Vendor pom artifactid micrometer-commons Highest
Vendor pom artifactid micrometer-commons Low
Vendor pom developer email tludwig@vmware.com Low
Vendor pom developer id shakuzen Medium
Vendor pom developer name Tommy Ludwig Medium
Vendor pom groupid io.micrometer Highest
Vendor pom name micrometer-commons High
Vendor pom url micrometer-metrics/micrometer Highest
Product file name micrometer-commons High
Product jar package name common Highest
Product jar package name io Highest
Product jar package name micrometer Highest
Product Manifest automatic-module-name micrometer.commons Medium
Product Manifest branch HEAD Low
Product Manifest build-date 2025-12-08_20:33:14 Low
Product Manifest build-date-utc 2025-12-08T20:33:14.227668117Z Low
Product Manifest build-host b8894f464959 Low
Product Manifest build-job deploy Low
Product Manifest build-number 59905 Low
Product Manifest build-timezone Etc/UTC Low
Product Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/59905 Low
Product Manifest built-os Linux Low
Product Manifest built-status release Low
Product Manifest Bundle-Name micrometer-commons Medium
Product Manifest bundle-symbolicname micrometer-commons Medium
Product Manifest change 0550e76 Low
Product Manifest full-change 0550e769cb9b4f15cff86c1e503fce8ae03ef84f Low
Product Manifest Implementation-Title io.micrometer#micrometer-commons;1.16.1 High
Product Manifest module-email tludwig@vmware.com Low
Product Manifest module-origin micrometer-metrics/micrometer.git Low
Product Manifest module-owner tludwig@vmware.com Low
Product Manifest module-source /micrometer-commons Low
Product pom artifactid micrometer-commons Highest
Product pom developer email tludwig@vmware.com Low
Product pom developer id shakuzen Low
Product pom developer name Tommy Ludwig Low
Product pom groupid io.micrometer Highest
Product pom name micrometer-commons High
Product pom url micrometer-metrics/micrometer High
Version file version 1.16.1 High
Version Manifest Bundle-Version 1.16.1 High
Version Manifest Implementation-Version 1.16.1 High
Version pom version 1.16.1 Highest
pkg:maven/io.micrometer/micrometer-commons@1.16.1
(Confidence :High)
micrometer-commons-1.16.2.jar
Description:
Module containing common code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.16.2/micrometer-commons-1.16.2.jar
MD5: 88a7a0a883e27eb8b12a744968d55c9a
SHA1: 58670637cb6e0c5fc855950fed827149779da226
SHA256: 0ba6c40a25d7779c1162d54dd0b39ef7aabc9c20214238f0c28036c9099901d7
Referenced In Project/Scope: waffle-spring-security7:compile
micrometer-commons-1.16.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework/spring-context@7.0.3
Evidence
Type Source Name Value Confidence
Vendor file name micrometer-commons High
Vendor jar package name common Highest
Vendor jar package name io Highest
Vendor jar package name micrometer Highest
Vendor Manifest automatic-module-name micrometer.commons Medium
Vendor Manifest branch HEAD Low
Vendor Manifest build-date 2026-01-12_20:19:47 Low
Vendor Manifest build-date-utc 2026-01-12T20:19:47.493449647Z Low
Vendor Manifest build-host 075035fb996f Low
Vendor Manifest build-job deploy Low
Vendor Manifest build-number 61465 Low
Vendor Manifest build-timezone Etc/UTC Low
Vendor Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/61465 Low
Vendor Manifest built-os Linux Low
Vendor Manifest built-status release Low
Vendor Manifest bundle-symbolicname micrometer-commons Medium
Vendor Manifest change 6286e85 Low
Vendor Manifest full-change 6286e854f943bce9a2daf1214ce3cef6c7aad84d Low
Vendor Manifest module-email tludwig@vmware.com Low
Vendor Manifest module-origin micrometer-metrics/micrometer.git Low
Vendor Manifest module-owner tludwig@vmware.com Low
Vendor Manifest module-source /micrometer-commons Low
Vendor pom artifactid micrometer-commons Highest
Vendor pom artifactid micrometer-commons Low
Vendor pom developer email tludwig@vmware.com Low
Vendor pom developer id shakuzen Medium
Vendor pom developer name Tommy Ludwig Medium
Vendor pom groupid io.micrometer Highest
Vendor pom name micrometer-commons High
Vendor pom url micrometer-metrics/micrometer Highest
Product file name micrometer-commons High
Product jar package name common Highest
Product jar package name io Highest
Product jar package name micrometer Highest
Product Manifest automatic-module-name micrometer.commons Medium
Product Manifest branch HEAD Low
Product Manifest build-date 2026-01-12_20:19:47 Low
Product Manifest build-date-utc 2026-01-12T20:19:47.493449647Z Low
Product Manifest build-host 075035fb996f Low
Product Manifest build-job deploy Low
Product Manifest build-number 61465 Low
Product Manifest build-timezone Etc/UTC Low
Product Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/61465 Low
Product Manifest built-os Linux Low
Product Manifest built-status release Low
Product Manifest Bundle-Name micrometer-commons Medium
Product Manifest bundle-symbolicname micrometer-commons Medium
Product Manifest change 6286e85 Low
Product Manifest full-change 6286e854f943bce9a2daf1214ce3cef6c7aad84d Low
Product Manifest Implementation-Title io.micrometer#micrometer-commons;1.16.2 High
Product Manifest module-email tludwig@vmware.com Low
Product Manifest module-origin micrometer-metrics/micrometer.git Low
Product Manifest module-owner tludwig@vmware.com Low
Product Manifest module-source /micrometer-commons Low
Product pom artifactid micrometer-commons Highest
Product pom developer email tludwig@vmware.com Low
Product pom developer id shakuzen Low
Product pom developer name Tommy Ludwig Low
Product pom groupid io.micrometer Highest
Product pom name micrometer-commons High
Product pom url micrometer-metrics/micrometer High
Version file version 1.16.2 High
Version Manifest Bundle-Version 1.16.2 High
Version Manifest Implementation-Version 1.16.2 High
Version pom version 1.16.2 Highest
pkg:maven/io.micrometer/micrometer-commons@1.16.2
(Confidence :High)
micrometer-observation-1.14.14.jar
Description:
Module containing Observation related code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.14.14/micrometer-observation-1.14.14.jar
MD5: 73cba12752d5ef01b970b9a55d44b0c2
SHA1: 97685eb32ca64551cce5ab4489a61cb22cb00530
SHA256: 3668626463091489e1961e9e42b10ccd8cd54d1a4509543575234b2ebd0881cf
Referenced In Projects/Scopes:
waffle-demo-spring-form-jakarta:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-security6:compile
waffle-distro-jakarta:runtime
micrometer-observation-1.14.14.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework/spring-context@6.2.15
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name micrometer-observation High
Vendor jar package name io Highest
Vendor jar package name micrometer Highest
Vendor jar package name observation Highest
Vendor Manifest automatic-module-name micrometer.observation Medium
Vendor Manifest branch HEAD Low
Vendor Manifest build-date 2025-12-08_08:18:42 Low
Vendor Manifest build-date-utc 2025-12-08T08:18:42.479535301Z Low
Vendor Manifest build-host bef28d2baecb Low
Vendor Manifest build-job deploy Low
Vendor Manifest build-number 59850 Low
Vendor Manifest build-timezone Etc/UTC Low
Vendor Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/59850 Low
Vendor Manifest built-os Linux Low
Vendor Manifest built-status release Low
Vendor Manifest bundle-symbolicname micrometer-observation Medium
Vendor Manifest change d8a46b5 Low
Vendor Manifest full-change d8a46b5a7080738e6f9afd623cfdfcf984f44185 Low
Vendor Manifest module-email tludwig@vmware.com Low
Vendor Manifest module-origin micrometer-metrics/micrometer.git Low
Vendor Manifest module-owner tludwig@vmware.com Low
Vendor Manifest module-source /micrometer-observation Low
Vendor pom artifactid micrometer-observation Highest
Vendor pom artifactid micrometer-observation Low
Vendor pom developer email tludwig@vmware.com Low
Vendor pom developer id shakuzen Medium
Vendor pom developer name Tommy Ludwig Medium
Vendor pom groupid io.micrometer Highest
Vendor pom name micrometer-observation High
Vendor pom url micrometer-metrics/micrometer Highest
Product file name micrometer-observation High
Product jar package name io Highest
Product jar package name micrometer Highest
Product jar package name observation Highest
Product Manifest automatic-module-name micrometer.observation Medium
Product Manifest branch HEAD Low
Product Manifest build-date 2025-12-08_08:18:42 Low
Product Manifest build-date-utc 2025-12-08T08:18:42.479535301Z Low
Product Manifest build-host bef28d2baecb Low
Product Manifest build-job deploy Low
Product Manifest build-number 59850 Low
Product Manifest build-timezone Etc/UTC Low
Product Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/59850 Low
Product Manifest built-os Linux Low
Product Manifest built-status release Low
Product Manifest Bundle-Name micrometer-observation Medium
Product Manifest bundle-symbolicname micrometer-observation Medium
Product Manifest change d8a46b5 Low
Product Manifest full-change d8a46b5a7080738e6f9afd623cfdfcf984f44185 Low
Product Manifest Implementation-Title io.micrometer#micrometer-observation;1.14.14 High
Product Manifest module-email tludwig@vmware.com Low
Product Manifest module-origin micrometer-metrics/micrometer.git Low
Product Manifest module-owner tludwig@vmware.com Low
Product Manifest module-source /micrometer-observation Low
Product pom artifactid micrometer-observation Highest
Product pom developer email tludwig@vmware.com Low
Product pom developer id shakuzen Low
Product pom developer name Tommy Ludwig Low
Product pom groupid io.micrometer Highest
Product pom name micrometer-observation High
Product pom url micrometer-metrics/micrometer High
Version file version 1.14.14 High
Version Manifest Bundle-Version 1.14.14 High
Version Manifest Implementation-Version 1.14.14 High
Version pom version 1.14.14 Highest
pkg:maven/io.micrometer/micrometer-observation@1.14.14
(Confidence :High)
micrometer-observation-1.15.7.jar
Description:
Module containing Observation related code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.15.7/micrometer-observation-1.15.7.jar
MD5: 142407ad0b6073a6b6c60d477d4e4049
SHA1: f1b617aa0056e4f5266d30f6126113c1b82b1365
SHA256: 6cb1072c6d3e429eeddda077aa13b36da87f8abc975df75b43ac62a0d36748ce
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-spring-boot-starter3:compile
micrometer-observation-1.15.7.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
Evidence
Type Source Name Value Confidence
Vendor file name micrometer-observation High
Vendor jar package name io Highest
Vendor jar package name micrometer Highest
Vendor jar package name observation Highest
Vendor Manifest automatic-module-name micrometer.observation Medium
Vendor Manifest branch HEAD Low
Vendor Manifest build-date 2025-12-08_10:11:20 Low
Vendor Manifest build-date-utc 2025-12-08T10:11:20.636638012Z Low
Vendor Manifest build-host b5adb8bc4705 Low
Vendor Manifest build-job deploy Low
Vendor Manifest build-number 59889 Low
Vendor Manifest build-timezone Etc/UTC Low
Vendor Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/59889 Low
Vendor Manifest built-os Linux Low
Vendor Manifest built-status release Low
Vendor Manifest bundle-symbolicname micrometer-observation Medium
Vendor Manifest change e8dd176 Low
Vendor Manifest full-change e8dd176ffe60d6ea068c7f536e5662278499cd8f Low
Vendor Manifest module-email tludwig@vmware.com Low
Vendor Manifest module-origin micrometer-metrics/micrometer.git Low
Vendor Manifest module-owner tludwig@vmware.com Low
Vendor Manifest module-source /micrometer-observation Low
Vendor pom artifactid micrometer-observation Highest
Vendor pom artifactid micrometer-observation Low
Vendor pom developer email tludwig@vmware.com Low
Vendor pom developer id shakuzen Medium
Vendor pom developer name Tommy Ludwig Medium
Vendor pom groupid io.micrometer Highest
Vendor pom name micrometer-observation High
Vendor pom url micrometer-metrics/micrometer Highest
Product file name micrometer-observation High
Product jar package name io Highest
Product jar package name micrometer Highest
Product jar package name observation Highest
Product Manifest automatic-module-name micrometer.observation Medium
Product Manifest branch HEAD Low
Product Manifest build-date 2025-12-08_10:11:20 Low
Product Manifest build-date-utc 2025-12-08T10:11:20.636638012Z Low
Product Manifest build-host b5adb8bc4705 Low
Product Manifest build-job deploy Low
Product Manifest build-number 59889 Low
Product Manifest build-timezone Etc/UTC Low
Product Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/59889 Low
Product Manifest built-os Linux Low
Product Manifest built-status release Low
Product Manifest Bundle-Name micrometer-observation Medium
Product Manifest bundle-symbolicname micrometer-observation Medium
Product Manifest change e8dd176 Low
Product Manifest full-change e8dd176ffe60d6ea068c7f536e5662278499cd8f Low
Product Manifest Implementation-Title io.micrometer#micrometer-observation;1.15.7 High
Product Manifest module-email tludwig@vmware.com Low
Product Manifest module-origin micrometer-metrics/micrometer.git Low
Product Manifest module-owner tludwig@vmware.com Low
Product Manifest module-source /micrometer-observation Low
Product pom artifactid micrometer-observation Highest
Product pom developer email tludwig@vmware.com Low
Product pom developer id shakuzen Low
Product pom developer name Tommy Ludwig Low
Product pom groupid io.micrometer Highest
Product pom name micrometer-observation High
Product pom url micrometer-metrics/micrometer High
Version file version 1.15.7 High
Version Manifest Bundle-Version 1.15.7 High
Version Manifest Implementation-Version 1.15.7 High
Version pom version 1.15.7 Highest
pkg:maven/io.micrometer/micrometer-observation@1.15.7
(Confidence :High)
micrometer-observation-1.16.1.jar
Description:
Module containing Observation related code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.16.1/micrometer-observation-1.16.1.jar
MD5: 924c696548bc1f9402233ef74b4a591f
SHA1: 659a6aa16a5e541de071ef7ba6cb7ef35d59ce2a
SHA256: 2511718a303d086fd5fd0befc65db87e456894e1d9cdeef4f9c4eaf28b428bc0
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
waffle-spring-boot-starter4:compile
micrometer-observation-1.16.1.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-boot-starter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name micrometer-observation High
Vendor jar package name io Highest
Vendor jar package name micrometer Highest
Vendor jar package name observation Highest
Vendor Manifest automatic-module-name micrometer.observation Medium
Vendor Manifest branch HEAD Low
Vendor Manifest build-date 2025-12-08_20:33:14 Low
Vendor Manifest build-date-utc 2025-12-08T20:33:14.662922809Z Low
Vendor Manifest build-host b8894f464959 Low
Vendor Manifest build-job deploy Low
Vendor Manifest build-number 59905 Low
Vendor Manifest build-timezone Etc/UTC Low
Vendor Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/59905 Low
Vendor Manifest built-os Linux Low
Vendor Manifest built-status release Low
Vendor Manifest bundle-symbolicname micrometer-observation Medium
Vendor Manifest change 0550e76 Low
Vendor Manifest full-change 0550e769cb9b4f15cff86c1e503fce8ae03ef84f Low
Vendor Manifest module-email tludwig@vmware.com Low
Vendor Manifest module-origin micrometer-metrics/micrometer.git Low
Vendor Manifest module-owner tludwig@vmware.com Low
Vendor Manifest module-source /micrometer-observation Low
Vendor pom artifactid micrometer-observation Highest
Vendor pom artifactid micrometer-observation Low
Vendor pom developer email tludwig@vmware.com Low
Vendor pom developer id shakuzen Medium
Vendor pom developer name Tommy Ludwig Medium
Vendor pom groupid io.micrometer Highest
Vendor pom name micrometer-observation High
Vendor pom url micrometer-metrics/micrometer Highest
Product file name micrometer-observation High
Product jar package name io Highest
Product jar package name micrometer Highest
Product jar package name observation Highest
Product Manifest automatic-module-name micrometer.observation Medium
Product Manifest branch HEAD Low
Product Manifest build-date 2025-12-08_20:33:14 Low
Product Manifest build-date-utc 2025-12-08T20:33:14.662922809Z Low
Product Manifest build-host b8894f464959 Low
Product Manifest build-job deploy Low
Product Manifest build-number 59905 Low
Product Manifest build-timezone Etc/UTC Low
Product Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/59905 Low
Product Manifest built-os Linux Low
Product Manifest built-status release Low
Product Manifest Bundle-Name micrometer-observation Medium
Product Manifest bundle-symbolicname micrometer-observation Medium
Product Manifest change 0550e76 Low
Product Manifest full-change 0550e769cb9b4f15cff86c1e503fce8ae03ef84f Low
Product Manifest Implementation-Title io.micrometer#micrometer-observation;1.16.1 High
Product Manifest module-email tludwig@vmware.com Low
Product Manifest module-origin micrometer-metrics/micrometer.git Low
Product Manifest module-owner tludwig@vmware.com Low
Product Manifest module-source /micrometer-observation Low
Product pom artifactid micrometer-observation Highest
Product pom developer email tludwig@vmware.com Low
Product pom developer id shakuzen Low
Product pom developer name Tommy Ludwig Low
Product pom groupid io.micrometer Highest
Product pom name micrometer-observation High
Product pom url micrometer-metrics/micrometer High
Version file version 1.16.1 High
Version Manifest Bundle-Version 1.16.1 High
Version Manifest Implementation-Version 1.16.1 High
Version pom version 1.16.1 Highest
pkg:maven/io.micrometer/micrometer-observation@1.16.1
(Confidence :High)
micrometer-observation-1.16.2.jar
Description:
Module containing Observation related code
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.16.2/micrometer-observation-1.16.2.jar
MD5: 1413f8bded8e76ee94f9b7e0e7e26b23
SHA1: c076389e612fe3702628527c21a13743acafddfc
SHA256: d75994254246410ddb9a712c48215c8a400ae63af0b7b14cbefaccf79b87f9e1
Referenced In Project/Scope: waffle-spring-security7:compile
micrometer-observation-1.16.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework/spring-context@7.0.3
Evidence
Type Source Name Value Confidence
Vendor file name micrometer-observation High
Vendor jar package name io Highest
Vendor jar package name micrometer Highest
Vendor jar package name observation Highest
Vendor Manifest automatic-module-name micrometer.observation Medium
Vendor Manifest branch HEAD Low
Vendor Manifest build-date 2026-01-12_20:19:47 Low
Vendor Manifest build-date-utc 2026-01-12T20:19:47.858920430Z Low
Vendor Manifest build-host 075035fb996f Low
Vendor Manifest build-job deploy Low
Vendor Manifest build-number 61465 Low
Vendor Manifest build-timezone Etc/UTC Low
Vendor Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/61465 Low
Vendor Manifest built-os Linux Low
Vendor Manifest built-status release Low
Vendor Manifest bundle-symbolicname micrometer-observation Medium
Vendor Manifest change 6286e85 Low
Vendor Manifest full-change 6286e854f943bce9a2daf1214ce3cef6c7aad84d Low
Vendor Manifest module-email tludwig@vmware.com Low
Vendor Manifest module-origin micrometer-metrics/micrometer.git Low
Vendor Manifest module-owner tludwig@vmware.com Low
Vendor Manifest module-source /micrometer-observation Low
Vendor pom artifactid micrometer-observation Highest
Vendor pom artifactid micrometer-observation Low
Vendor pom developer email tludwig@vmware.com Low
Vendor pom developer id shakuzen Medium
Vendor pom developer name Tommy Ludwig Medium
Vendor pom groupid io.micrometer Highest
Vendor pom name micrometer-observation High
Vendor pom url micrometer-metrics/micrometer Highest
Product file name micrometer-observation High
Product jar package name io Highest
Product jar package name micrometer Highest
Product jar package name observation Highest
Product Manifest automatic-module-name micrometer.observation Medium
Product Manifest branch HEAD Low
Product Manifest build-date 2026-01-12_20:19:47 Low
Product Manifest build-date-utc 2026-01-12T20:19:47.858920430Z Low
Product Manifest build-host 075035fb996f Low
Product Manifest build-job deploy Low
Product Manifest build-number 61465 Low
Product Manifest build-timezone Etc/UTC Low
Product Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/61465 Low
Product Manifest built-os Linux Low
Product Manifest built-status release Low
Product Manifest Bundle-Name micrometer-observation Medium
Product Manifest bundle-symbolicname micrometer-observation Medium
Product Manifest change 6286e85 Low
Product Manifest full-change 6286e854f943bce9a2daf1214ce3cef6c7aad84d Low
Product Manifest Implementation-Title io.micrometer#micrometer-observation;1.16.2 High
Product Manifest module-email tludwig@vmware.com Low
Product Manifest module-origin micrometer-metrics/micrometer.git Low
Product Manifest module-owner tludwig@vmware.com Low
Product Manifest module-source /micrometer-observation Low
Product pom artifactid micrometer-observation Highest
Product pom developer email tludwig@vmware.com Low
Product pom developer id shakuzen Low
Product pom developer name Tommy Ludwig Low
Product pom groupid io.micrometer Highest
Product pom name micrometer-observation High
Product pom url micrometer-metrics/micrometer High
Version file version 1.16.2 High
Version Manifest Bundle-Version 1.16.2 High
Version Manifest Implementation-Version 1.16.2 High
Version pom version 1.16.2 Highest
pkg:maven/io.micrometer/micrometer-observation@1.16.2
(Confidence :High)
mockito-core-5.21.0.jar
Description:
Mockito mock objects library core API and implementation
License:
MIT: https://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/org/mockito/mockito-core/5.21.0/mockito-core-5.21.0.jar
MD5: eaa03e4fb5717c19f2eb649d2a96f0cf
SHA1: 121287b8287464a5a7af2e47d5dbc49ca38a892f
SHA256: 03db23de742cbca42aa3d6127fdace560fac37b036d931870801f84c288bd286
Referenced In Projects/Scopes:
waffle-tests:compile
waffle-tests-jakarta:compile
mockito-core-5.21.0.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-tests-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tests@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name mockito-core High
Vendor jar package name and Highest
Vendor jar package name api Highest
Vendor jar package name mockito Highest
Vendor Manifest bundle-symbolicname org.mockito.mockito-core Medium
Vendor Manifest can-retransform-classes true Low
Vendor pom artifactid mockito-core Highest
Vendor pom artifactid mockito-core Low
Vendor pom developer id bric3 Medium
Vendor pom developer id mockitoguy Medium
Vendor pom developer id raphw Medium
Vendor pom developer id TimvdLippe Medium
Vendor pom developer name Brice Dutheil Medium
Vendor pom developer name Rafael Winterhalter Medium
Vendor pom developer name Szczepan Faber Medium
Vendor pom developer name Tim van der Lippe Medium
Vendor pom groupid org.mockito Highest
Vendor pom name mockito-core High
Vendor pom url mockito/mockito Highest
Product file name mockito-core High
Product jar package name and Highest
Product jar package name api Highest
Product jar package name mockito Highest
Product Manifest Bundle-Name Mockito Mock Library for Java. Core bundle requires Byte Buddy and Objenesis. Medium
Product Manifest bundle-symbolicname org.mockito.mockito-core Medium
Product Manifest can-retransform-classes true Low
Product pom artifactid mockito-core Highest
Product pom developer id bric3 Low
Product pom developer id mockitoguy Low
Product pom developer id raphw Low
Product pom developer id TimvdLippe Low
Product pom developer name Brice Dutheil Low
Product pom developer name Rafael Winterhalter Low
Product pom developer name Szczepan Faber Low
Product pom developer name Tim van der Lippe Low
Product pom groupid org.mockito Highest
Product pom name mockito-core High
Product pom url mockito/mockito High
Version file version 5.21.0 High
Version Manifest Bundle-Version 5.21.0 High
Version pom version 5.21.0 Highest
pkg:maven/org.mockito/mockito-core@5.21.0
(Confidence :High)
mortbay-apache-el-10.1.48.jar
Description:
A rebundling of Apache Tomcat Jasper to remove the tomcat server dependencies, so that the JSP engine can be used by the Eclipse Jetty project.
License:
http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/mortbay/jasper/mortbay-apache-el/10.1.48/mortbay-apache-el-10.1.48.jar
MD5: 108da75741c791cf0f07cc5a8dabf859
SHA1: 80effa98ff84bd4d8d7b00beca355115f651ac44
SHA256: a514b46b243264b6a6d829d330773bbb7b88bd96d1a029d3f4a1b5333be1fdfb
Referenced In Project/Scope: waffle-jetty-jakarta:provided
mortbay-apache-el-10.1.48.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-apache-jsp@12.1.5
Evidence
Type Source Name Value Confidence
Vendor file name mortbay-apache-el High
Vendor jar package name apache Highest
Vendor jar package name el Highest
Vendor Manifest automatic-module-name org.mortbay.apache.el Medium
Vendor Manifest build-jdk-spec 25 Low
Vendor Manifest bundle-docurl https://eclipse.dev/jetty/ Low
Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low
Vendor Manifest bundle-symbolicname org.mortbay.jasper.mortbay-apache-el Medium
Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High
Vendor Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low
Vendor Manifest url http://www.eclipse.org/jetty Low
Vendor pom artifactid mortbay-apache-el Highest
Vendor pom artifactid mortbay-apache-el Low
Vendor pom groupid org.mortbay.jasper Highest
Vendor pom name MortBay :: Apache EL :: Implementation High
Vendor pom parent-artifactid jasper-jsp Low
Product file name mortbay-apache-el High
Product jar package name apache Highest
Product jar package name el Highest
Product jar package name expressionfactoryimpl Highest
Product Manifest automatic-module-name org.mortbay.apache.el Medium
Product Manifest build-jdk-spec 25 Low
Product Manifest bundle-docurl https://eclipse.dev/jetty/ Low
Product Manifest Bundle-Name Mortbay Apache EL Implementation Medium
Product Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low
Product Manifest bundle-symbolicname org.mortbay.jasper.mortbay-apache-el Medium
Product Manifest provide-capability osgi.serviceloader;osgi.serviceloader="jakarta.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low
Product Manifest url http://www.eclipse.org/jetty Low
Product pom artifactid mortbay-apache-el Highest
Product pom groupid org.mortbay.jasper Highest
Product pom name MortBay :: Apache EL :: Implementation High
Product pom parent-artifactid jasper-jsp Medium
Version file version 10.1.48 High
Version Manifest Bundle-Version 10.1.48 High
Version Manifest Implementation-Version 10.1.48 High
Version pom version 10.1.48 Highest
pkg:maven/org.mortbay.jasper/mortbay-apache-el@10.1.48
(Confidence :High)
cpe:2.3:a:eclipse:jetty:10.1.48:*:*:*:*:*:*:*
(Confidence :Low)
suppress
cpe:2.3:a:jetty:jetty:10.1.48:*:*:*:*:*:*:*
(Confidence :Low)
suppress
cpe:2.3:a:mortbay:jetty:10.1.48:*:*:*:*:*:*:*
(Confidence :Low)
suppress
cpe:2.3:a:mortbay_jetty:jetty:10.1.48:*:*:*:*:*:*:*
(Confidence :Low)
suppress
mortbay-apache-el-9.0.111.jar
Description:
A rebundling of Apache Tomcat Jasper to remove the tomcat server dependencies, so that the JSP engine can be used by the Eclipse Jetty project.
License:
http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/mortbay/jasper/mortbay-apache-el/9.0.111/mortbay-apache-el-9.0.111.jar
MD5: 2b45155ffc38a4fe5d79ec6b4faafc32
SHA1: c374c62a07578442e4a649c8a5d01cac082685bf
SHA256: c1773366f32e50addf14f6fb1ea4da28547f0373389e093883664d36ec5e83a1
Referenced In Project/Scope: waffle-jetty:provided
mortbay-apache-el-9.0.111.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-apache-jsp@12.1.5
Evidence
Type Source Name Value Confidence
Vendor file name mortbay-apache-el High
Vendor jar package name apache Highest
Vendor jar package name el Highest
Vendor Manifest automatic-module-name org.mortbay.apache.el Medium
Vendor Manifest build-jdk-spec 25 Low
Vendor Manifest bundle-docurl https://eclipse.dev/jetty/ Low
Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low
Vendor Manifest bundle-symbolicname org.mortbay.jasper.mortbay-apache-el Medium
Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High
Vendor Manifest url http://www.eclipse.org/jetty Low
Vendor pom artifactid mortbay-apache-el Highest
Vendor pom artifactid mortbay-apache-el Low
Vendor pom groupid org.mortbay.jasper Highest
Vendor pom name MortBay :: Apache EL :: API and Implementation High
Vendor pom parent-artifactid jasper-jsp Low
Product file name mortbay-apache-el High
Product jar package name apache Highest
Product jar package name el Highest
Product Manifest automatic-module-name org.mortbay.apache.el Medium
Product Manifest build-jdk-spec 25 Low
Product Manifest bundle-docurl https://eclipse.dev/jetty/ Low
Product Manifest Bundle-Name Mortbay Apache EL API and Implementation Medium
Product Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low
Product Manifest bundle-symbolicname org.mortbay.jasper.mortbay-apache-el Medium
Product Manifest url http://www.eclipse.org/jetty Low
Product pom artifactid mortbay-apache-el Highest
Product pom groupid org.mortbay.jasper Highest
Product pom name MortBay :: Apache EL :: API and Implementation High
Product pom parent-artifactid jasper-jsp Medium
Version file version 9.0.111 High
Version Manifest Bundle-Version 9.0.111 High
Version Manifest Implementation-Version 9.0.111 High
Version pom version 9.0.111 Highest
pkg:maven/org.mortbay.jasper/mortbay-apache-el@9.0.111
(Confidence :High)
cpe:2.3:a:eclipse:jetty:9.0.111:*:*:*:*:*:*:*
(Confidence :Low)
suppress
cpe:2.3:a:jetty:jetty:9.0.111:*:*:*:*:*:*:*
(Confidence :Low)
suppress
cpe:2.3:a:mortbay:jetty:9.0.111:*:*:*:*:*:*:*
(Confidence :Low)
suppress
cpe:2.3:a:mortbay_jetty:jetty:9.0.111:*:*:*:*:*:*:*
(Confidence :Low)
suppress
CVE-2017-7657 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request.
CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), CWE-190 Integer Overflow or Wraparound
CVSSv3:
Base Score: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A
CVSSv2:
Base Score: HIGH (7.5)
Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
Vulnerable Software & Versions: (show all )
CVE-2017-7658 suppress
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization.
CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv3:
Base Score: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A
CVSSv2:
Base Score: HIGH (7.5)
Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
Vulnerable Software & Versions: (show all )
CVE-2017-7656 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response.
CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), NVD-CWE-noinfo
CVSSv3:
Base Score: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A
CVSSv2:
Base Score: MEDIUM (5.0)
Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N
References:
Vulnerable Software & Versions: (show all )
CVE-2017-9735 suppress
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords.
CWE-203 Observable Discrepancy
CVSSv3:
Base Score: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A
CVSSv2:
Base Score: MEDIUM (5.0)
Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/36870f6c51f5bc25e6f7bb1fcace0e57e81f1524019b11f466738559%40%3Ccommon-dev.hadoop.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/f887a5978f5e4c62b9cfe876336628385cff429e796962649649ec8a%40%3Ccommon-issues.hadoop.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY
cve@mitre.org - https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E
cve@mitre.org - https://lists.apache.org/thread.html/36870f6c51f5bc25e6f7bb1fcace0e57e81f1524019b11f466738559%40%3Ccommon-dev.hadoop.apache.org%3E
cve@mitre.org - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
cve@mitre.org - https://lists.apache.org/thread.html/f887a5978f5e4c62b9cfe876336628385cff429e796962649649ec8a%40%3Ccommon-issues.hadoop.apache.org%3E
cve@mitre.org - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
cve@mitre.org - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E
cve@mitre.org - ISSUE_TRACKING,MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - ISSUE_TRACKING,PATCH,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY,VDB_ENTRY
Vulnerable Software & Versions: (show all )
CVE-2021-28165 suppress
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
CWE-400 Uncontrolled Resource Consumption, CWE-755 Improper Handling of Exceptional Conditions, CWE-551 Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
CVSSv3:
Base Score: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A
CVSSv2:
Base Score: HIGH (7.8)
Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:C
References:
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a%40%3Cissues.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7%40%3Cjira.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2%40%3Ccommits.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3%40%3Cjira.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4%40%3Cissues.hbase.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287%40%3Cissues.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78%40%3Ccommits.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb%40%3Ccommits.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a%40%3Cjira.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225%40%3Cissues.hbase.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b%40%3Cdev.hbase.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155%40%3Ccommits.pulsar.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959%40%3Cdev.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94%40%3Cissues.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7%40%3Cdev.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812%40%3Cjira.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7%40%3Cdev.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f%40%3Cjira.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7%40%3Cjira.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d%40%3Cissues.hbase.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36%40%3Ccommits.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da%40%3Cissues.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1%40%3Cjira.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81%40%3Cissues.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc%40%3Ccommits.pulsar.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913%40%3Cissues.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424%40%3Cissues.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449%40%3Cissues.hbase.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f%40%3Cissues.hbase.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486%40%3Cissues.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825%40%3Cjira.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020%40%3Cjira.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77%40%3Ccommits.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f%40%3Ccommits.pulsar.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97%40%3Ccommits.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38%40%3Cjira.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e%40%3Cjira.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa%40%3Cissues.hbase.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f%40%3Ccommits.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1%40%3Ccommits.hbase.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b%40%3Cissues.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e%40%3Cdev.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed%40%3Ccommits.pulsar.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743%40%3Creviews.spark.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - NOT_APPLICABLE,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
emo@eclipse.org - https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a%40%3Cissues.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7%40%3Cjira.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2%40%3Ccommits.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3%40%3Cjira.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4%40%3Cissues.hbase.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287%40%3Cissues.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78%40%3Ccommits.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb%40%3Ccommits.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a%40%3Cjira.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225%40%3Cissues.hbase.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b%40%3Cdev.hbase.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155%40%3Ccommits.pulsar.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959%40%3Cdev.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94%40%3Cissues.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7%40%3Cdev.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812%40%3Cjira.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7%40%3Cdev.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f%40%3Cjira.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7%40%3Cjira.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d%40%3Cissues.hbase.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36%40%3Ccommits.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da%40%3Cissues.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1%40%3Cjira.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81%40%3Cissues.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc%40%3Ccommits.pulsar.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913%40%3Cissues.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424%40%3Cissues.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449%40%3Cissues.hbase.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f%40%3Cissues.hbase.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486%40%3Cissues.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825%40%3Cjira.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020%40%3Cjira.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77%40%3Ccommits.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f%40%3Ccommits.pulsar.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97%40%3Ccommits.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38%40%3Cjira.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e%40%3Cjira.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa%40%3Cissues.hbase.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f%40%3Ccommits.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1%40%3Ccommits.hbase.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b%40%3Cissues.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e%40%3Cdev.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed%40%3Ccommits.pulsar.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743%40%3Creviews.spark.apache.org%3E
emo@eclipse.org - EXPLOIT,THIRD_PARTY_ADVISORY
emo@eclipse.org - MAILING_LIST,THIRD_PARTY_ADVISORY
emo@eclipse.org - MAILING_LIST,THIRD_PARTY_ADVISORY
emo@eclipse.org - NOT_APPLICABLE,THIRD_PARTY_ADVISORY
emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY
emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY
emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY
emo@eclipse.org - THIRD_PARTY_ADVISORY
Vulnerable Software & Versions: (show all )
CVE-2022-2048 suppress
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests.
CWE-664 Improper Control of a Resource Through its Lifetime, NVD-CWE-Other, CWE-410 Insufficient Resource Pool
CVSSv3:
Base Score: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A
CVSSv2:
Base Score: MEDIUM (5.0)
Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P
References:
Vulnerable Software & Versions: (show all )
CVE-2023-44487 suppress
CISA Known Exploited Vulnerability:
Product: IETF HTTP/2
Name: HTTP/2 Rapid Reset Attack Vulnerability
Date Added: 2023-10-10
Description: HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-10-31
Notes: This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487; https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/; https://nvd.nist.gov/vuln/detail/CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CWE-400 Uncontrolled Resource Consumption, NVD-CWE-noinfo
CVSSv3:
Base Score: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A
References:
134c704f-9b21-4f2e-91b3-4a467353bcc0 - US_GOVERNMENT_RESOURCE
af854a3a-2127-422b-91ae-364da2661108 - BROKEN_LINK
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,MITIGATION,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PATCH
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,PRESS/MEDIA_COVERAGE
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,PATCH,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,RELEASE_NOTES,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MITIGATION,PATCH,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MITIGATION,PATCH,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MITIGATION,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH
af854a3a-2127-422b-91ae-364da2661108 - PATCH
af854a3a-2127-422b-91ae-364da2661108 - PATCH
af854a3a-2127-422b-91ae-364da2661108 - PATCH,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PRESS/MEDIA_COVERAGE
af854a3a-2127-422b-91ae-364da2661108 - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PRODUCT
af854a3a-2127-422b-91ae-364da2661108 - PRODUCT
af854a3a-2127-422b-91ae-364da2661108 - PRODUCT,RELEASE_NOTES
af854a3a-2127-422b-91ae-364da2661108 - PRODUCT,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - RELEASE_NOTES
af854a3a-2127-422b-91ae-364da2661108 - RELEASE_NOTES
af854a3a-2127-422b-91ae-364da2661108 - RELEASE_NOTES,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - RELEASE_NOTES,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY
cve@mitre.org - BROKEN_LINK
cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY
cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING
cve@mitre.org - ISSUE_TRACKING,MITIGATION,VENDOR_ADVISORY
cve@mitre.org - ISSUE_TRACKING,PATCH
cve@mitre.org - ISSUE_TRACKING,PATCH
cve@mitre.org - ISSUE_TRACKING,PATCH
cve@mitre.org - ISSUE_TRACKING,PATCH
cve@mitre.org - ISSUE_TRACKING,PATCH
cve@mitre.org - ISSUE_TRACKING,PATCH
cve@mitre.org - ISSUE_TRACKING,PATCH
cve@mitre.org - ISSUE_TRACKING,PATCH
cve@mitre.org - ISSUE_TRACKING,PATCH
cve@mitre.org - ISSUE_TRACKING,PATCH
cve@mitre.org - ISSUE_TRACKING,PATCH
cve@mitre.org - ISSUE_TRACKING,PATCH
cve@mitre.org - ISSUE_TRACKING,PATCH
cve@mitre.org - ISSUE_TRACKING,PRESS/MEDIA_COVERAGE
cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY
cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY
cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST
cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,PATCH,VENDOR_ADVISORY
cve@mitre.org - MAILING_LIST,RELEASE_NOTES,VENDOR_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY
cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY
cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY
cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY
cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY
cve@mitre.org - MITIGATION,VENDOR_ADVISORY
cve@mitre.org - PATCH
cve@mitre.org - PATCH
cve@mitre.org - PATCH
cve@mitre.org - PATCH,VENDOR_ADVISORY
cve@mitre.org - PATCH,VENDOR_ADVISORY
cve@mitre.org - PRESS/MEDIA_COVERAGE
cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY
cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY
cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY
cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY
cve@mitre.org - PRODUCT
cve@mitre.org - PRODUCT
cve@mitre.org - PRODUCT,RELEASE_NOTES
cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY
cve@mitre.org - RELEASE_NOTES
cve@mitre.org - RELEASE_NOTES
cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY
cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY
cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY
cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY
cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE
cve@mitre.org - THIRD_PARTY_ADVISORY,VENDOR_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY,VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
cve@mitre.org - VENDOR_ADVISORY
Vulnerable Software & Versions: (show all )
CVE-2024-9823 suppress
There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory finally.
CWE-400 Uncontrolled Resource Consumption
CVSSv3:
Base Score: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A
References:
Vulnerable Software & Versions: (show all )
CVE-2020-27216 suppress
In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the attacker wins the race then they will have read and write permission to the subdirectory used to unpack web applications, including their WEB-INF/lib jar files and JSP files. If any code is ever executed out of this temporary directory, this can lead to a local privilege escalation vulnerability.
CWE-378 Creation of Temporary File With Insecure Permissions, CWE-379 Creation of Temporary File in Directory with Insecure Permissions, NVD-CWE-Other
CVSSv3:
Base Score: HIGH (7.0)
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:1.0/RC:R/MAV:A
CVSSv2:
Base Score: MEDIUM (4.4)
Vector: /AV:L/AC:M/Au:N/C:P/I:P/A:P
References:
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r0259b14ae69b87821e27fed1f5333ea86018294fd31aab16b1fac84e%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r07525dc424ed69b3919618599e762f9ac03791490ca9d724f2241442%40%3Cdev.felix.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r09b345099b4f88d2bed7f195a96145849243fb4e53661aa3bcf4c176%40%3Cissues.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r0d7ad4f02c44d5d53a9ffcbca7ff4a8138241322da9c5c35b5429630%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r0d95e01f52667f44835c40f6dea72bb4397f33cd70a564ea74f3836d%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r0df8fe10fc36028cf6d0381ab66510917d0d68bc5ef7042001d03830%40%3Cdev.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r0e9efe032cc65433251ee6470c66c334d4e7db9101e24cf91a3961f2%40%3Ccommits.directory.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r0f5e9b93133ef3aaf31484bc3e15cc4b85f8af0fe4de2dacd9379d72%40%3Cdev.felix.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r100c5c7586a23a19fdb54d8a32e17cd0944bdaa46277b35c397056f6%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r171846414347ec5fed38241a9f8a009bd2c89d902154c6102b1fb39a%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r185d10aae8161c08726f3ba9a1f1c47dfb97624ea6212fa217173204%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r18b6f10d9939419bae9c225d5058c97533cb376c9d6d0a0733ddd48d%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r19e8b338af511641d211ff45c43646fe1ae19dc9897d69939c09cabe%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r1d40368a309f9d835dcdd900249966e4fcbdf98c1cc4c84db2cd9964%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r1d45051310b11c6d6476f20d71b08ea97cb76846cbf61d196bac1c3f%40%3Cdev.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r1dbb87c9255ecefadd8de514fa1d35c1d493c0527d7672cf40505d04%40%3Ccommits.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r1ed79516bd6d248ea9f0e704dbfd7de740d5a75b71c7be8699fec824%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r1ef28b89ff0281c87ba3a7659058789bf28a99b8074191f1c3678db8%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r1fe31643fc34b4a33ae3d416d92c271aa97663f1782767d25e1d9ff8%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r2122537d3f9beb0ce59f44371a951b226406719919656ed000984bd0%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r279254a1bd6434c943da52000476f307e62b6910755387aeca1ec9a1%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r2aa316d008dab9ae48350b330d15dc1b863ea2a933558fbfc42b91a6%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r2d17b2a4803096ba427f3575599ea29b55f5cf9dbc1f12ba044cae1a%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r2e02700f7cfecb213de50be83e066086bea90278cd753db7fdc2ccff%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r2f732ee49d00610683ab5ddb4692ab25136b00bfd132ca3a590218a9%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r3042a9dd2973aa229e52d022df7813e4d74b67df73bfa6d97bb0caf8%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r336b1694a01858111e4625fb9ab2b07ad43a64a525cf6402e06aa6bf%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r351298dd39fc1ab63303be94b0c0d08acd72b17448e0346d7386189b%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc3bd7b65fabcc21%40%3Ccommits.samza.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r382870d6ccfd60533eb0d980688261723ed8a0704dafa691c4e9aa68%40%3Ccommits.iotdb.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r3a763de620be72b6d74f46ec4bf39c9f35f8a0b39993212c0ac778ec%40%3Ccommits.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r3b0ce1549a1ccdd7e51ec66daf8d54d46f1571edbda88ed09c96d7da%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r3e05ab0922876e74fea975d70af82b98580f4c14ba643c4f8a9e3a94%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r3f32cb4965239399c22497a0aabb015b28b2372d4897185a6ef0ccd7%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r407c316f6113dfc76f7bb3cb1693f08274c521064a92e5214197548e%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r4179c71908778cc0598ee8ee1eaed9b88fc5483c65373f45e087f650%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r44115ebfbf3b7d294d7a75f2d30bcc822dab186ebbcc2dce11915ca9%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r4946ffd86ad6eb7cb7863311235c914cb41232380de8d9dcdb3c115c%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r4f29fb24639ebc5d15fc477656ebc2b3aa00fcfbe197000009c26b40%40%3Cissues.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r503045a75f4419d083cb63ac89e765d6fb8b10c7dacc0c54fce07cff%40%3Creviews.iotdb.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r547bb14c88c5da2588d853ed3030be0109efa537dd797877dff14afd%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r5494fdaf4a0a42a15c49841ba7ae577d466d09239ee1050458da0f29%40%3Cjira.kafka.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r556787f1ab14da034d79dfff0c123c05877bbe89ef163fd359b4564c%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r568d354961fa88f206dc345411fb11d245c6dc1a8da3e80187fc6706%40%3Cdev.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r58f5b14dc5ae43583db3a7e872419aca97ebe47bcd7f7334f4128016%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r59e0878013d329dcc481eeafebdb0ee445b1e2852d0c4827b1ddaff2%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r5a07f274f355c914054c7357ad6d3456ffaca064f26cd780acb90a9a%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r5a9462096c71593e771602beb0e69357adb5175d9a5c18d5181e0ab4%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r6236ae4adc401e3b2f2575c22865f2f6c6ea9ff1d7b264b40d9602af%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r66e99d973fd79ddbcb3fbdb24f4767fe9b911f5b0abb05d7b6f65801%40%3Ccommits.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r6b83ca85c8f9a6794b1f85bc70d1385ed7bc1ad07750d0977537154a%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r6dfa64ecc3d67c1a71c08bfa04064549179d499f8e20a8285c57bd51%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r6f51a654ac2e67e3d1c65a8957cbbb127c3f15b64b4fcd626df03633%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r70f8bcccd304bd66c1aca657dbfc2bf11f73add9032571b01f1f733d%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r71da5f51ef04cb95abae560425dce9667740cbd567920f516f76efb7%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r73b5a9b677b707bbb7c1469ea746312c47838b312603bada9e382bba%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r761a52f1e214efec286ee80045d0012e955eebaa72395ad62cccbcfc%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r769411eb43dd9ef77665700deb7fc491fc3ceb532914260c90b56f2f%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r77dd041d8025a869156481d2268c67ad17121f64e31f9b4a1a220145%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r7bdc83513c12db1827b79b8d57a7a0975a25d28bc6c5efe590ec1e02%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r7da5ae60d7973e8894cfe92f49ecb5b47417eefab4c77cc87514d3cf%40%3Cdev.felix.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r8045eedd6bb74efcd8e01130796adbab98ee4a0d1273509fb1f2077a%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r819857361f5a156e90d6d06ccf6c41026bc99030d60d0804be3a9957%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r827d17bf6900eddc686f4b6ee16fc5e52ca0070f8df7612222c40ac5%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r874688141495df766e62be095f1dfb0bf4a24ca0340d8e0215c03fab%40%3Cissues.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r87b0c69fef09277333a7e1716926d1f237d462e143a335854ddd922f%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r87d8337300a635d66f0bb838bf635cdfcbba6b92c608a7813adbf4f4%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r8866f0cd2a3b319288b7eea20ac137b9f260c813d10ee2db88b65d32%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r8cacf91ae1b17cc6531d20953c52fa52f6fd3191deb3383446086ab7%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r8dd01541fc49d24ec223365a9974231cbd7378b749247a89b0a52210%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r8fead0144bb84d8714695c43607dca9c5101aa028a431ec695882fe5%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r90b5ac6e2bf190a5297bda58c7ec76d01cd86ff050b2470fcd9f4b35%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r911c1879258ebf98bca172c0673350eb7ea6569ca1735888d4cb7adc%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r916b6542bd5b15a8a7ff8fc14a0e0331e8e3e9d682f22768ae71d775%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r93b240be16e642579ed794325bae31b040e1af896ecc12466642e19d%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r93d5e81e879120d8d87925dbdd4045cb3afa9b066f4370f60b626ce3%40%3Ccommits.druid.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r9b790fe3a93121199f41258474222f15002b2f729495aa7ecbf90718%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r9c010b79140452294292379183e7fe8e3533c5bb4db3f3fb39a6df61%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r9cc76b98f87738791b8ec3736755f92444d3c8cb26bd4e4ffdb5c1cc%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r9cd444f944241dc26d9b8b007fe8971ed7f005b56befef7a4f4fb827%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r9d9b4b93df7f92cdf1147db0fc169be1776c93d1fbc63bc65721fffd%40%3Cdev.knox.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/r9f8c45a2a4540911cd8bd0485f67e8091883c9234d7a3aeb349c46c1%40%3Creviews.iotdb.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/ra1f19625cc67ac1b459c558f2ea5647d71ce51c6fe4f4cb03baec849%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/ra55e04d5a73afcb8383f4386e2b26832c6e3972e53827021ab885943%40%3Ccommits.shiro.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/ra5b7313d8cc9411db6790adfba33f2cf0665cb77adb7b02043c95867%40%3Cdev.felix.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/raa9c370ab42d737e93bc1795bb6a2187d7c60210cd5e3b3ce8f3c484%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rad255c736fad46135f1339408cb0147d0671e45c376c3be85ceeec1a%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rae15d73cabef55bad148e4e6449b05da95646a2a8db3fc938e858dff%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/raf9c581b793c30ff8f55f2415c7bd337eb69775aae607bf9ed1b16fb%40%3Cdev.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rafb023a7c61180a1027819678eb2068b0b60cd5c2559cb8490e26c81%40%3Cissues.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rb077d35f2940191daeefca0d6449cddb2e9d06bcf8f5af4da2df3ca2%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rb5f2558ea2ac63633dfb04db1e8a6ea6bb1a2b8614899095e16c6233%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rb69b1d7008a4b3de5ce5867e41a455693907026bc70ead06867aa323%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rb7e159636b26156f6ef2b2a1a79b3ec9a026923b5456713e68f7c18e%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rb81a018f83fe02c95a2138a7bb4f1e1677bd7e1fc1e7024280c2292d%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rb8ad3745cb94c60d44cc369aff436eaf03dbc93112cefc86a2ed53ba%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rb8c007f87dc57731a7b9a3b05364530422535b7e0bc6a0c5b68d4d55%40%3Cdev.felix.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rbc5a622401924fadab61e07393235838918228b3d8a1a6704295b032%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rbc5a8d7a0a13bc8152d427a7e9097cdeb139c6cfe111b2f00f26d16b%40%3Cissues.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rbf99e4495461099cad9aa62e0164f8f25a7f97b791b4ace56e375f8d%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rc1646894341450fdc4f7e96a88f5e2cf18d8004714f98aec6b831b3e%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rc1d9b8e9d17749d4d2b9abaaa72c422d090315bd6bc0ae73a16abc1c%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rc2e24756d28580eeac811c5c6a12012c9f424b6e5bffb89f98ee3d03%40%3Cdev.felix.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rc44d1147f78496ec9932a38b28795ff4fd0c4fa6e3b6f5cc33c14d29%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rc4b972ea10c5a65c6a88a6e233778718ab9af7f484affdd5e5de0cff%40%3Ccommits.felix.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rc77918636d8744d50312e4f67ba2e01f47db3ec5144540df8745cb38%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rc8dd95802be0cca8d7d0929c0c8484ede384ecb966b2a9dc7197b089%40%3Creviews.iotdb.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rc9d2ab8a6c7835182f20b01104798e67c75db655c869733a0713a590%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rccedec4cfd5df6761255b71349e3b7c27ee0745bd33698a71b1775cf%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rcdcf32952397c83a1d617a8c9cd5c15c98b8d0d38a607972956bde7e%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rcdd56ab4255801a0964dcce3285e87f2c6994e6469e189f6836f34e3%40%3Cnotifications.iotdb.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rcfb95a7c69c4b9c082ea1918e812dfc45aa0d1e120fd47f68251a336%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rcff5caebfd535195276aaabc1b631fd55a4ff6b14e2bdfe33f18ff91%40%3Creviews.iotdb.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rd58b60ab2e49ebf21022e59e280feb25899ff785c88f31fe314aa5b9%40%3Ccommits.shiro.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rd7e62e2972a41c2658f41a824b8bdd15644d80fcadc51fe7b7c855de%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rdbf1cd0ab330c032f3a09b453cb6405dccc905ad53765323bddab957%40%3Cissues.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rdddb4b06e86fd58a1beda132f22192af2f9b56aae8849cb3767ccd55%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rde11c433675143d8d27551c3d9e821fe1955f1551a518033d3716553%40%3Cdev.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rde782fd8e133f7e04e50c8aaa4774df524367764eb5b85bf60d96747%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/re08b03cd1754b32f342664eead415af48092c630c8e3e0deba862a26%40%3Ccommits.shiro.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/re5706141ca397587f7ee0f500a39ccc590a41f802fc125fc135cb92f%40%3Cnotifications.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/ree506849c4f04376793b1a3076bc017da60b8a2ef2702dc214ff826f%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/refbbb0eb65c185d1fa491cee08ac8ed32708ce3b269133a6da264317%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rf00ea6376f3d0e8b8f62cf6d4a4f28b24e27193acd2c851f618aa41e%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rf3bc023a7cc729aeac72f482e2eeeab9008aa6b1dadbeb3f45320cae%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rfd9f102864a039f7fda64a580dfe1a342d65d7b723ca06dc9fbceb31%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rfe5caef1fd6cf4b8ceac1b63c33195f2908517b665c946c020d3fbd6%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rfe6ba83d14545e982400dea89e68b10113cb5202a3dcb558ce64842d%40%3Cissues.zookeeper.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - https://lists.apache.org/thread.html/rff0ad6a7dac2182421e2db2407e44fbb61a89904adfd91538f21fbf8%40%3Cissues.beam.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,MITIGATION,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,PATCH,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - NOT_APPLICABLE,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
emo@eclipse.org - https://lists.apache.org/thread.html/r0259b14ae69b87821e27fed1f5333ea86018294fd31aab16b1fac84e%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r07525dc424ed69b3919618599e762f9ac03791490ca9d724f2241442%40%3Cdev.felix.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r09b345099b4f88d2bed7f195a96145849243fb4e53661aa3bcf4c176%40%3Cissues.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r0d7ad4f02c44d5d53a9ffcbca7ff4a8138241322da9c5c35b5429630%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r0d95e01f52667f44835c40f6dea72bb4397f33cd70a564ea74f3836d%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r0df8fe10fc36028cf6d0381ab66510917d0d68bc5ef7042001d03830%40%3Cdev.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r0e9efe032cc65433251ee6470c66c334d4e7db9101e24cf91a3961f2%40%3Ccommits.directory.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r0f5e9b93133ef3aaf31484bc3e15cc4b85f8af0fe4de2dacd9379d72%40%3Cdev.felix.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r100c5c7586a23a19fdb54d8a32e17cd0944bdaa46277b35c397056f6%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r171846414347ec5fed38241a9f8a009bd2c89d902154c6102b1fb39a%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r185d10aae8161c08726f3ba9a1f1c47dfb97624ea6212fa217173204%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r18b6f10d9939419bae9c225d5058c97533cb376c9d6d0a0733ddd48d%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r19e8b338af511641d211ff45c43646fe1ae19dc9897d69939c09cabe%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r1d40368a309f9d835dcdd900249966e4fcbdf98c1cc4c84db2cd9964%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r1d45051310b11c6d6476f20d71b08ea97cb76846cbf61d196bac1c3f%40%3Cdev.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r1dbb87c9255ecefadd8de514fa1d35c1d493c0527d7672cf40505d04%40%3Ccommits.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r1ed79516bd6d248ea9f0e704dbfd7de740d5a75b71c7be8699fec824%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r1ef28b89ff0281c87ba3a7659058789bf28a99b8074191f1c3678db8%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r1fe31643fc34b4a33ae3d416d92c271aa97663f1782767d25e1d9ff8%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r2122537d3f9beb0ce59f44371a951b226406719919656ed000984bd0%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r279254a1bd6434c943da52000476f307e62b6910755387aeca1ec9a1%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r2aa316d008dab9ae48350b330d15dc1b863ea2a933558fbfc42b91a6%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r2d17b2a4803096ba427f3575599ea29b55f5cf9dbc1f12ba044cae1a%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r2e02700f7cfecb213de50be83e066086bea90278cd753db7fdc2ccff%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r2f732ee49d00610683ab5ddb4692ab25136b00bfd132ca3a590218a9%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r3042a9dd2973aa229e52d022df7813e4d74b67df73bfa6d97bb0caf8%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r336b1694a01858111e4625fb9ab2b07ad43a64a525cf6402e06aa6bf%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r351298dd39fc1ab63303be94b0c0d08acd72b17448e0346d7386189b%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc3bd7b65fabcc21%40%3Ccommits.samza.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r382870d6ccfd60533eb0d980688261723ed8a0704dafa691c4e9aa68%40%3Ccommits.iotdb.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r3a763de620be72b6d74f46ec4bf39c9f35f8a0b39993212c0ac778ec%40%3Ccommits.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r3b0ce1549a1ccdd7e51ec66daf8d54d46f1571edbda88ed09c96d7da%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r3e05ab0922876e74fea975d70af82b98580f4c14ba643c4f8a9e3a94%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r3f32cb4965239399c22497a0aabb015b28b2372d4897185a6ef0ccd7%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r407c316f6113dfc76f7bb3cb1693f08274c521064a92e5214197548e%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r4179c71908778cc0598ee8ee1eaed9b88fc5483c65373f45e087f650%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r44115ebfbf3b7d294d7a75f2d30bcc822dab186ebbcc2dce11915ca9%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r4946ffd86ad6eb7cb7863311235c914cb41232380de8d9dcdb3c115c%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r4f29fb24639ebc5d15fc477656ebc2b3aa00fcfbe197000009c26b40%40%3Cissues.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r503045a75f4419d083cb63ac89e765d6fb8b10c7dacc0c54fce07cff%40%3Creviews.iotdb.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r547bb14c88c5da2588d853ed3030be0109efa537dd797877dff14afd%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r5494fdaf4a0a42a15c49841ba7ae577d466d09239ee1050458da0f29%40%3Cjira.kafka.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r556787f1ab14da034d79dfff0c123c05877bbe89ef163fd359b4564c%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r568d354961fa88f206dc345411fb11d245c6dc1a8da3e80187fc6706%40%3Cdev.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r58f5b14dc5ae43583db3a7e872419aca97ebe47bcd7f7334f4128016%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r59e0878013d329dcc481eeafebdb0ee445b1e2852d0c4827b1ddaff2%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r5a07f274f355c914054c7357ad6d3456ffaca064f26cd780acb90a9a%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r5a9462096c71593e771602beb0e69357adb5175d9a5c18d5181e0ab4%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r6236ae4adc401e3b2f2575c22865f2f6c6ea9ff1d7b264b40d9602af%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r66e99d973fd79ddbcb3fbdb24f4767fe9b911f5b0abb05d7b6f65801%40%3Ccommits.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r6b83ca85c8f9a6794b1f85bc70d1385ed7bc1ad07750d0977537154a%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r6dfa64ecc3d67c1a71c08bfa04064549179d499f8e20a8285c57bd51%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r6f51a654ac2e67e3d1c65a8957cbbb127c3f15b64b4fcd626df03633%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r70f8bcccd304bd66c1aca657dbfc2bf11f73add9032571b01f1f733d%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r71da5f51ef04cb95abae560425dce9667740cbd567920f516f76efb7%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r73b5a9b677b707bbb7c1469ea746312c47838b312603bada9e382bba%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r761a52f1e214efec286ee80045d0012e955eebaa72395ad62cccbcfc%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r769411eb43dd9ef77665700deb7fc491fc3ceb532914260c90b56f2f%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r77dd041d8025a869156481d2268c67ad17121f64e31f9b4a1a220145%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r7bdc83513c12db1827b79b8d57a7a0975a25d28bc6c5efe590ec1e02%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r7da5ae60d7973e8894cfe92f49ecb5b47417eefab4c77cc87514d3cf%40%3Cdev.felix.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r8045eedd6bb74efcd8e01130796adbab98ee4a0d1273509fb1f2077a%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r819857361f5a156e90d6d06ccf6c41026bc99030d60d0804be3a9957%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r827d17bf6900eddc686f4b6ee16fc5e52ca0070f8df7612222c40ac5%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r874688141495df766e62be095f1dfb0bf4a24ca0340d8e0215c03fab%40%3Cissues.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r87b0c69fef09277333a7e1716926d1f237d462e143a335854ddd922f%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r87d8337300a635d66f0bb838bf635cdfcbba6b92c608a7813adbf4f4%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r8866f0cd2a3b319288b7eea20ac137b9f260c813d10ee2db88b65d32%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r8cacf91ae1b17cc6531d20953c52fa52f6fd3191deb3383446086ab7%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r8dd01541fc49d24ec223365a9974231cbd7378b749247a89b0a52210%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r8fead0144bb84d8714695c43607dca9c5101aa028a431ec695882fe5%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r90b5ac6e2bf190a5297bda58c7ec76d01cd86ff050b2470fcd9f4b35%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r911c1879258ebf98bca172c0673350eb7ea6569ca1735888d4cb7adc%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r916b6542bd5b15a8a7ff8fc14a0e0331e8e3e9d682f22768ae71d775%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r93b240be16e642579ed794325bae31b040e1af896ecc12466642e19d%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r93d5e81e879120d8d87925dbdd4045cb3afa9b066f4370f60b626ce3%40%3Ccommits.druid.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r9b790fe3a93121199f41258474222f15002b2f729495aa7ecbf90718%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r9c010b79140452294292379183e7fe8e3533c5bb4db3f3fb39a6df61%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r9cc76b98f87738791b8ec3736755f92444d3c8cb26bd4e4ffdb5c1cc%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r9cd444f944241dc26d9b8b007fe8971ed7f005b56befef7a4f4fb827%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r9d9b4b93df7f92cdf1147db0fc169be1776c93d1fbc63bc65721fffd%40%3Cdev.knox.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/r9f8c45a2a4540911cd8bd0485f67e8091883c9234d7a3aeb349c46c1%40%3Creviews.iotdb.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/ra1f19625cc67ac1b459c558f2ea5647d71ce51c6fe4f4cb03baec849%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/ra55e04d5a73afcb8383f4386e2b26832c6e3972e53827021ab885943%40%3Ccommits.shiro.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/ra5b7313d8cc9411db6790adfba33f2cf0665cb77adb7b02043c95867%40%3Cdev.felix.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/raa9c370ab42d737e93bc1795bb6a2187d7c60210cd5e3b3ce8f3c484%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rad255c736fad46135f1339408cb0147d0671e45c376c3be85ceeec1a%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rae15d73cabef55bad148e4e6449b05da95646a2a8db3fc938e858dff%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/raf9c581b793c30ff8f55f2415c7bd337eb69775aae607bf9ed1b16fb%40%3Cdev.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rafb023a7c61180a1027819678eb2068b0b60cd5c2559cb8490e26c81%40%3Cissues.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rb077d35f2940191daeefca0d6449cddb2e9d06bcf8f5af4da2df3ca2%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rb5f2558ea2ac63633dfb04db1e8a6ea6bb1a2b8614899095e16c6233%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rb69b1d7008a4b3de5ce5867e41a455693907026bc70ead06867aa323%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rb7e159636b26156f6ef2b2a1a79b3ec9a026923b5456713e68f7c18e%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rb81a018f83fe02c95a2138a7bb4f1e1677bd7e1fc1e7024280c2292d%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rb8ad3745cb94c60d44cc369aff436eaf03dbc93112cefc86a2ed53ba%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rb8c007f87dc57731a7b9a3b05364530422535b7e0bc6a0c5b68d4d55%40%3Cdev.felix.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rbc5a622401924fadab61e07393235838918228b3d8a1a6704295b032%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rbc5a8d7a0a13bc8152d427a7e9097cdeb139c6cfe111b2f00f26d16b%40%3Cissues.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rbf99e4495461099cad9aa62e0164f8f25a7f97b791b4ace56e375f8d%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rc1646894341450fdc4f7e96a88f5e2cf18d8004714f98aec6b831b3e%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rc1d9b8e9d17749d4d2b9abaaa72c422d090315bd6bc0ae73a16abc1c%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rc2e24756d28580eeac811c5c6a12012c9f424b6e5bffb89f98ee3d03%40%3Cdev.felix.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rc44d1147f78496ec9932a38b28795ff4fd0c4fa6e3b6f5cc33c14d29%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rc4b972ea10c5a65c6a88a6e233778718ab9af7f484affdd5e5de0cff%40%3Ccommits.felix.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rc77918636d8744d50312e4f67ba2e01f47db3ec5144540df8745cb38%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rc8dd95802be0cca8d7d0929c0c8484ede384ecb966b2a9dc7197b089%40%3Creviews.iotdb.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rc9d2ab8a6c7835182f20b01104798e67c75db655c869733a0713a590%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rccedec4cfd5df6761255b71349e3b7c27ee0745bd33698a71b1775cf%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rcdcf32952397c83a1d617a8c9cd5c15c98b8d0d38a607972956bde7e%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rcdd56ab4255801a0964dcce3285e87f2c6994e6469e189f6836f34e3%40%3Cnotifications.iotdb.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rcfb95a7c69c4b9c082ea1918e812dfc45aa0d1e120fd47f68251a336%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rcff5caebfd535195276aaabc1b631fd55a4ff6b14e2bdfe33f18ff91%40%3Creviews.iotdb.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rd58b60ab2e49ebf21022e59e280feb25899ff785c88f31fe314aa5b9%40%3Ccommits.shiro.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rd7e62e2972a41c2658f41a824b8bdd15644d80fcadc51fe7b7c855de%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rdbf1cd0ab330c032f3a09b453cb6405dccc905ad53765323bddab957%40%3Cissues.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rdddb4b06e86fd58a1beda132f22192af2f9b56aae8849cb3767ccd55%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rde11c433675143d8d27551c3d9e821fe1955f1551a518033d3716553%40%3Cdev.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rde782fd8e133f7e04e50c8aaa4774df524367764eb5b85bf60d96747%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/re08b03cd1754b32f342664eead415af48092c630c8e3e0deba862a26%40%3Ccommits.shiro.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/re5706141ca397587f7ee0f500a39ccc590a41f802fc125fc135cb92f%40%3Cnotifications.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/ree506849c4f04376793b1a3076bc017da60b8a2ef2702dc214ff826f%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/refbbb0eb65c185d1fa491cee08ac8ed32708ce3b269133a6da264317%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rf00ea6376f3d0e8b8f62cf6d4a4f28b24e27193acd2c851f618aa41e%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rf3bc023a7cc729aeac72f482e2eeeab9008aa6b1dadbeb3f45320cae%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rfd9f102864a039f7fda64a580dfe1a342d65d7b723ca06dc9fbceb31%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rfe5caef1fd6cf4b8ceac1b63c33195f2908517b665c946c020d3fbd6%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rfe6ba83d14545e982400dea89e68b10113cb5202a3dcb558ce64842d%40%3Cissues.zookeeper.apache.org%3E
emo@eclipse.org - https://lists.apache.org/thread.html/rff0ad6a7dac2182421e2db2407e44fbb61a89904adfd91538f21fbf8%40%3Cissues.beam.apache.org%3E
emo@eclipse.org - EXPLOIT,MITIGATION,THIRD_PARTY_ADVISORY
emo@eclipse.org - EXPLOIT,PATCH,VENDOR_ADVISORY
emo@eclipse.org - MAILING_LIST,THIRD_PARTY_ADVISORY
emo@eclipse.org - NOT_APPLICABLE,THIRD_PARTY_ADVISORY
emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY
emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY
emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY
emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY
emo@eclipse.org - THIRD_PARTY_ADVISORY
emo@eclipse.org - THIRD_PARTY_ADVISORY
Vulnerable Software & Versions: (show all )
CVE-2018-12536 suppress
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using. If this InvalidPathException is then handled by the default Error Handler, the InvalidPathException message is included in the error response, revealing the full server path to the requesting system.
CWE-209 Generation of Error Message Containing Sensitive Information, NVD-CWE-noinfo
CVSSv3:
Base Score: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A
CVSSv2:
Base Score: MEDIUM (5.0)
Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
Vulnerable Software & Versions: (show all )
CVE-2021-28169 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.
NVD-CWE-Other, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv3:
Base Score: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A
CVSSv2:
Base Score: MEDIUM (5.0)
Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N
References:
Vulnerable Software & Versions: (show all )
CVE-2023-26048 suppress
Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service -- although it may take some time. This issue has been patched in versions 9.4.51, 10.0.14, and 11.0.14. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory).
CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv3:
Base Score: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:3.9/RC:R/MAV:A
References:
Vulnerable Software & Versions: (show all )
CVE-2023-26049 suppress
Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE="b; JSESSIONID=1337; c=d"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue.
NVD-CWE-noinfo, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv3:
Base Score: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A
References:
Vulnerable Software & Versions: (show all )
CVE-2023-40167 suppress
Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses. There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response. Versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1 contain a patch for this issue. There is no workaround as there is no known exploit scenario.
CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-noinfo
CVSSv3:
Base Score: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A
References:
Vulnerable Software & Versions: (show all )
CVE-2024-6763 suppress
Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI, for URI/URL parsing.
The HttpURI class does insufficient validation on the authority segment of a URI. However the behaviour of HttpURI
differs from the common browsers in how it handles a URI that would be
considered invalid if fully validated against the RRC. Specifically HttpURI
and the browser may differ on the value of the host extracted from an
invalid URI and thus a combination of Jetty and a vulnerable browser may
be vulnerable to a open redirect attack or to a SSRF attack if the URI
is used after passing validation checks.
CWE-1286 Improper Validation of Syntactic Correctness of Input, NVD-CWE-Other
CVSSv3:
Base Score: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A
References:
Vulnerable Software & Versions:
CVE-2021-34428 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being invalidated. This can result in an application used on a shared computer being left logged in.
CWE-613 Insufficient Session Expiration
CVSSv3:
Base Score: LOW (3.5)
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:0.9/RC:R/MAV:A
CVSSv2:
Base Score: LOW (3.6)
Vector: /AV:L/AC:L/Au:N/C:P/I:P/A:N
References:
Vulnerable Software & Versions: (show all )
CVE-2023-36479 suppress
Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, the servlet will escape the command by wrapping it in quotation marks. This wrapped command, plus an optional command prefix, will then be executed through a call to Runtime.exec. If the original binary name provided by the user contains a quotation mark followed by a space, the resulting command line will contain multiple tokens instead of one. This issue was patched in version 9.4.52, 10.0.16, 11.0.16 and 12.0.0-beta2.
CWE-149 Improper Neutralization of Quoting Syntax, NVD-CWE-Other
CVSSv3:
Base Score: LOW (3.1)
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:1.6/RC:R/MAV:A
References:
Vulnerable Software & Versions: (show all )
CVE-2022-2047 suppress
In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.
CWE-20 Improper Input Validation
CVSSv3:
Base Score: LOW (2.7)
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:1.2/RC:R/MAV:A
CVSSv2:
Base Score: MEDIUM (4.0)
Vector: /AV:N/AC:L/Au:S/C:N/I:P/A:N
References:
Vulnerable Software & Versions: (show all )
mortbay-apache-jsp-10.1.48.jar
Description:
A rebundling of Apache Tomcat Jasper to remove the tomcat server dependencies, so that the JSP engine can be used by the Eclipse Jetty project.
License:
http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/mortbay/jasper/mortbay-apache-jsp/10.1.48/mortbay-apache-jsp-10.1.48.jar
MD5: acd38d1ac03b8c73d212ec45307adeb7
SHA1: b180b84f6296ae8684b627912a1171bb2d1a2da2
SHA256: 2c79b11167a9646248cc697c436503757459de9e1752fd489f68e5beadda437f
Referenced In Project/Scope: waffle-jetty-jakarta:provided
mortbay-apache-jsp-10.1.48.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-apache-jsp@12.1.5
Evidence
Type Source Name Value Confidence
Vendor file name mortbay-apache-jsp High
Vendor jar package name apache Highest
Vendor jar package name jasper Highest
Vendor Manifest automatic-module-name org.mortbay.apache.jasper Medium
Vendor Manifest build-jdk-spec 25 Low
Vendor Manifest bundle-docurl https://eclipse.dev/jetty/ Low
Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low
Vendor Manifest bundle-symbolicname org.mortbay.jasper.mortbay-apache-jsp Medium
Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High
Vendor Manifest url http://www.eclipse.org/jetty Low
Vendor pom artifactid mortbay-apache-jsp Highest
Vendor pom artifactid mortbay-apache-jsp Low
Vendor pom groupid org.mortbay.jasper Highest
Vendor pom name MortBay :: Apache Jasper :: JSP Implementation High
Vendor pom parent-artifactid jasper-jsp Low
Product file name mortbay-apache-jsp High
Product jar package name apache Highest
Product jar package name jasper Highest
Product jar package name tomcat Highest
Product Manifest automatic-module-name org.mortbay.apache.jasper Medium
Product Manifest build-jdk-spec 25 Low
Product Manifest bundle-docurl https://eclipse.dev/jetty/ Low
Product Manifest Bundle-Name Mortbay Jasper Medium
Product Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low
Product Manifest bundle-symbolicname org.mortbay.jasper.mortbay-apache-jsp Medium
Product Manifest url http://www.eclipse.org/jetty Low
Product pom artifactid mortbay-apache-jsp Highest
Product pom groupid org.mortbay.jasper Highest
Product pom name MortBay :: Apache Jasper :: JSP Implementation High
Product pom parent-artifactid jasper-jsp Medium
Version file version 10.1.48 High
Version Manifest Bundle-Version 10.1.48 High
Version Manifest Implementation-Version 10.1.48 High
Version pom version 10.1.48 Highest
pkg:maven/org.mortbay.jasper/mortbay-apache-jsp@10.1.48
(Confidence :High)
cpe:2.3:a:apache:tomcat:10.1.48:*:*:*:*:*:*:*
(Confidence :Low)
suppress
mortbay-apache-jsp-9.0.111.jar
Description:
A rebundling of Apache Tomcat Jasper to remove the tomcat server dependencies, so that the JSP engine can be used by the Eclipse Jetty project.
License:
http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/mortbay/jasper/mortbay-apache-jsp/9.0.111/mortbay-apache-jsp-9.0.111.jar
MD5: 53d6741c3b444ae10b24f81ca5fc852e
SHA1: 2cf7435e457cc56404832a4b6963312be8a6a53b
SHA256: b81fa4e3646b7c92291b5c962ac3bbbb60a13298a8f4d5d9a6a2bc0a1fcbc5fb
Referenced In Project/Scope: waffle-jetty:provided
mortbay-apache-jsp-9.0.111.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-apache-jsp@12.1.5
Evidence
Type Source Name Value Confidence
Vendor file name mortbay-apache-jsp High
Vendor jar package name apache Highest
Vendor jar package name jasper Highest
Vendor jar package name jsp Highest
Vendor Manifest automatic-module-name org.mortbay.apache.jasper Medium
Vendor Manifest build-jdk-spec 25 Low
Vendor Manifest bundle-docurl https://eclipse.dev/jetty/ Low
Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low
Vendor Manifest bundle-symbolicname org.mortbay.jasper.mortbay-apache-jsp Medium
Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High
Vendor Manifest url http://www.eclipse.org/jetty Low
Vendor pom artifactid mortbay-apache-jsp Highest
Vendor pom artifactid mortbay-apache-jsp Low
Vendor pom groupid org.mortbay.jasper Highest
Vendor pom name MortBay :: Apache Jasper :: JSP Implementation High
Vendor pom parent-artifactid jasper-jsp Low
Product file name mortbay-apache-jsp High
Product jar package name apache Highest
Product jar package name jasper Highest
Product jar package name jsp Highest
Product jar package name tomcat Highest
Product Manifest automatic-module-name org.mortbay.apache.jasper Medium
Product Manifest build-jdk-spec 25 Low
Product Manifest bundle-docurl https://eclipse.dev/jetty/ Low
Product Manifest Bundle-Name Mortbay Jasper Medium
Product Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low
Product Manifest bundle-symbolicname org.mortbay.jasper.mortbay-apache-jsp Medium
Product Manifest url http://www.eclipse.org/jetty Low
Product pom artifactid mortbay-apache-jsp Highest
Product pom groupid org.mortbay.jasper Highest
Product pom name MortBay :: Apache Jasper :: JSP Implementation High
Product pom parent-artifactid jasper-jsp Medium
Version file version 9.0.111 High
Version Manifest Bundle-Version 9.0.111 High
Version Manifest Implementation-Version 9.0.111 High
Version pom version 9.0.111 Highest
pkg:maven/org.mortbay.jasper/mortbay-apache-jsp@9.0.111
(Confidence :High)
cpe:2.3:a:apache:tomcat:9.0.111:*:*:*:*:*:*:*
(Confidence :Low)
suppress
objenesis-3.4.jar
Description:
A library for instantiating Java objects
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/objenesis/objenesis/3.4/objenesis-3.4.jar
MD5: 51242320cb2bb25a3f36e2e21fa87de0
SHA1: 675cbe121a68019235d27f6c34b4f0ac30e07418
SHA256: 95488102feaf2e2858adf6b299353677dac6c15294006f8ed1c5556f8e3cd251
Referenced In Projects/Scopes:
waffle-tests:compile
waffle-tests-jakarta:compile
objenesis-3.4.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.mockito/mockito-core@5.21.0
pkg:maven/org.mockito/mockito-core@5.21.0
Evidence
Type Source Name Value Confidence
Vendor file name objenesis High
Vendor jar package name objenesis Highest
Vendor Manifest automatic-module-name org.objenesis Medium
Vendor Manifest build-jdk-spec 1.8 Low
Vendor Manifest bundle-symbolicname org.objenesis Medium
Vendor Manifest Implementation-Vendor Joe Walnes, Henri Tremblay, Leonardo Mesquita High
Vendor Manifest specification-vendor Joe Walnes, Henri Tremblay, Leonardo Mesquita Low
Vendor pom artifactid objenesis Highest
Vendor pom artifactid objenesis Low
Vendor pom groupid org.objenesis Highest
Vendor pom name Objenesis High
Vendor pom parent-artifactid objenesis-parent Low
Product file name objenesis High
Product jar package name objenesis Highest
Product Manifest automatic-module-name org.objenesis Medium
Product Manifest build-jdk-spec 1.8 Low
Product Manifest Bundle-Name Objenesis Medium
Product Manifest bundle-symbolicname org.objenesis Medium
Product Manifest Implementation-Title Objenesis High
Product Manifest specification-title Objenesis Medium
Product pom artifactid objenesis Highest
Product pom groupid org.objenesis Highest
Product pom name Objenesis High
Product pom parent-artifactid objenesis-parent Medium
Version file version 3.4 High
Version Manifest Implementation-Version 3.4 High
Version pom version 3.4 Highest
pkg:maven/org.objenesis/objenesis@3.4
(Confidence :High)
shiro-core-2.0.6.jar
Description:
Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/shiro/shiro-core/2.0.6/shiro-core-2.0.6.jar
MD5: 871ecbaf423e1bca627a48e408c64a3c
SHA1: cd7aaf8c3caf0b62d9cacd87aa8461eac18ed58f
SHA256: 608d062c214c06d917bf65dd4155bdcbe45a058562c73341b50455d50e1d3af7
Referenced In Projects/Scopes:
waffle-shiro:provided
waffle-shiro-jakarta:provided
shiro-core-2.0.6.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.apache.shiro/shiro-web@2.0.6
pkg:maven/org.apache.shiro/shiro-web@2.0.6
Evidence
Type Source Name Value Confidence
Vendor file name shiro-core High
Vendor jar package name apache Highest
Vendor jar package name shiro Highest
Vendor Manifest automatic-module-name org.apache.shiro.core Medium
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl https://www.apache.org/ Low
Vendor Manifest bundle-symbolicname org.apache.shiro.core Medium
Vendor Manifest Implementation-Vendor The Apache Software Foundation High
Vendor Manifest specification-vendor The Apache Software Foundation Low
Vendor pom artifactid shiro-core Highest
Vendor pom artifactid shiro-core Low
Vendor pom groupid org.apache.shiro Highest
Vendor pom name Apache Shiro :: Core High
Vendor pom parent-artifactid shiro-root Low
Product file name shiro-core High
Product jar package name apache Highest
Product jar package name session Highest
Product jar package name shiro Highest
Product Manifest automatic-module-name org.apache.shiro.core Medium
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl https://www.apache.org/ Low
Product Manifest Bundle-Name Apache Shiro :: Core Medium
Product Manifest bundle-symbolicname org.apache.shiro.core Medium
Product Manifest Implementation-Title Apache Shiro :: Core High
Product Manifest specification-title Apache Shiro :: Core Medium
Product pom artifactid shiro-core Highest
Product pom groupid org.apache.shiro Highest
Product pom name Apache Shiro :: Core High
Product pom parent-artifactid shiro-root Medium
Version file version 2.0.6 High
Version Manifest Bundle-Version 2.0.6 High
Version Manifest Implementation-Version 2.0.6 High
Version pom version 2.0.6 Highest
Related Dependencies
shiro-cache-2.0.6.jar
File Path: /home/runner/.m2/repository/org/apache/shiro/shiro-cache/2.0.6/shiro-cache-2.0.6.jar
MD5: a324753678a847344061eb86d04f4de6
SHA1: 74b6f5b67e9fe4f3bdd4d588b9d5b7da4a3c4526
SHA256: 9af4ce3a891486a34abadbcf95226cba7364d3c6c7f009abf1b07218c01104ac
pkg:maven/org.apache.shiro/shiro-cache@2.0.6
shiro-config-core-2.0.6.jar
File Path: /home/runner/.m2/repository/org/apache/shiro/shiro-config-core/2.0.6/shiro-config-core-2.0.6.jar
MD5: 6dd6aa0acd6f085d702381f261449e78
SHA1: 8ff308869ff5f678cf5078942e604ecb8491f564
SHA256: 3c6b46747f9530a73c3423d028c75c8341b783a2a1e9fccb35182271218dbc80
pkg:maven/org.apache.shiro/shiro-config-core@2.0.6
shiro-config-ogdl-2.0.6.jar
File Path: /home/runner/.m2/repository/org/apache/shiro/shiro-config-ogdl/2.0.6/shiro-config-ogdl-2.0.6.jar
MD5: 6c9a4fa85a15b824811df87471017d36
SHA1: 4f129c67d095c192dfe107856586b257a541bacf
SHA256: bb7792c72f76e3b39e2fb67c603db7d829d489ad6449db89c0ea6fd296ef56a5
pkg:maven/org.apache.shiro/shiro-config-ogdl@2.0.6
shiro-crypto-cipher-2.0.6.jar
File Path: /home/runner/.m2/repository/org/apache/shiro/shiro-crypto-cipher/2.0.6/shiro-crypto-cipher-2.0.6.jar
MD5: 04c44dee1f7d83e75beea8ba64ab32e2
SHA1: 66565b81e59123b38aab8f5e4ab09f38ac154915
SHA256: 5fc0efc0027fd80e1b5db8d8d4d69e27969aeb105bd24cbac10c7b5710295629
pkg:maven/org.apache.shiro/shiro-crypto-cipher@2.0.6
shiro-crypto-core-2.0.6.jar
File Path: /home/runner/.m2/repository/org/apache/shiro/shiro-crypto-core/2.0.6/shiro-crypto-core-2.0.6.jar
MD5: 03cbe403fd7ed5dc9d625739b8f9d2f9
SHA1: 88ac372ac0423f994bdbe4419dc0138ec583611d
SHA256: 48315ef810d73edad778ecb872de794ef32cf97e8f6a3b9d3e6104dc71609a80
pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.6
shiro-crypto-hash-2.0.6.jar
File Path: /home/runner/.m2/repository/org/apache/shiro/shiro-crypto-hash/2.0.6/shiro-crypto-hash-2.0.6.jar
MD5: 395cc6f3d14ceb4b98bee06e237dcd1a
SHA1: 904c0e02fb51b0ecdcd0e438d08f3544830f7f07
SHA256: 77f85d8afb628bc2753a175622a02dde2224781fed1595007c351072034cda23
pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.6
shiro-event-2.0.6.jar
File Path: /home/runner/.m2/repository/org/apache/shiro/shiro-event/2.0.6/shiro-event-2.0.6.jar
MD5: 438fc8f37f5f6bf26e1979bb0326a615
SHA1: 3e9afc9932538773d06d3817292f13c49723fa7f
SHA256: bac2adb0caa353c526b00908f9006cc015f1c63e33f5505997ca61a42ef5cab5
pkg:maven/org.apache.shiro/shiro-event@2.0.6
shiro-hashes-argon2-2.0.6.jar
File Path: /home/runner/.m2/repository/org/apache/shiro/crypto/shiro-hashes-argon2/2.0.6/shiro-hashes-argon2-2.0.6.jar
MD5: e2d7040994d3bbfa8de375f8e827af4b
SHA1: ce2b0a02f807ce2628946b496b564dc578f946b3
SHA256: f5332823be5eb176d57eb4d5aa4e401290ab1ea145c8dce5c635c2b4991346d9
pkg:maven/org.apache.shiro.crypto/shiro-hashes-argon2@2.0.6
shiro-hashes-bcrypt-2.0.6.jar
File Path: /home/runner/.m2/repository/org/apache/shiro/crypto/shiro-hashes-bcrypt/2.0.6/shiro-hashes-bcrypt-2.0.6.jar
MD5: f4a6dde4613251920b5d78dce7f7332b
SHA1: f601cccf83770c5a7f1cc7eda8fd00e83129c67a
SHA256: 2bf0bb5f313899cf6901802481cd72365b3ed64a46d6b190dfb5d7688bd30a7b
pkg:maven/org.apache.shiro.crypto/shiro-hashes-bcrypt@2.0.6
shiro-lang-2.0.6.jar
File Path: /home/runner/.m2/repository/org/apache/shiro/shiro-lang/2.0.6/shiro-lang-2.0.6.jar
MD5: f230014b0bc57d02efec7212d20dd27f
SHA1: 8254ec6dbcfa756d38344e9e94d34185d7186aa9
SHA256: 7c7a9911c95b3487c70651b3915d609da378f8be1467bc1cd3c89cb02fed84e0
pkg:maven/org.apache.shiro/shiro-lang@2.0.6
shiro-web-2.0.6-jakarta.jar
File Path: /home/runner/.m2/repository/org/apache/shiro/shiro-web/2.0.6/shiro-web-2.0.6-jakarta.jar
MD5: 6c9723d2cc24a93b3dd363df7e46423f
SHA1: 9d4cc8e4a3627415acde7248e284b9f8a2f4cdc9
SHA256: b53ce6534c54fa9d80ec52147f93697ae2da80a63660bf9d2048332e4aac64f2
pkg:maven/org.apache.shiro/shiro-web@2.0.6
shiro-web-2.0.6.jar
File Path: /home/runner/.m2/repository/org/apache/shiro/shiro-web/2.0.6/shiro-web-2.0.6.jar
MD5: f119d96bf9da72b47a4c15289ca03c55
SHA1: 8ec998d8f59e4cebb7b93378b48fc3fa445d2d3d
SHA256: 5a376ba40fa0bb6169816707a0630cb2172f95ce20396b5e82d08fd05e0185cc
pkg:maven/org.apache.shiro/shiro-web@2.0.6
slf4j-api-2.0.17.jar
Description:
The slf4j API
License:
https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256: 7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Projects/Scopes:
waffle-demo-form:compile
waffle-tests:compile
waffle-jna:compile
waffle-spring-boot-autoconfigure3:compile
waffle-spring-boot-autoconfigure4:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-filter-jakarta:compile
waffle-spring-boot-starter3:compile
waffle-demo-form-jakarta:compile
waffle-demo-negotiate:compile
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-tests-jakarta:compile
waffle-demo-jaas:compile
waffle-demo-parent-jakarta:compile
waffle-spring-security7:compile
waffle-jna-jakarta:compile
waffle-demo-filter:compile
waffle-demo-spring-form-jakarta:compile
waffle-spring-security5:compile
waffle-tomcat11:compile
waffle-spring-security6:compile
waffle-tomcat10:compile
waffle-demo-parent:compile
waffle-shiro:compile
waffle-demo-spring-boot-filter3:compile
waffle-demo-jaas-jakarta:compile
waffle-demo-spring-boot-filter4:compile
waffle-demo-mixed:compile
waffle-demo-mixed-post-jakarta:compile
waffle-demo-spring-form:compile
waffle-demo-negotiate-jakarta:compile
waffle-jetty-jakarta:compile
waffle-demo-mixed-post:compile
waffle-demo-spring-boot-filter2:compile
waffle-distro-jakarta:runtime
waffle-demo-mixed-jakarta:compile
waffle-shiro-jakarta:compile
waffle-tomcat9:compile
waffle-jetty:compile
waffle-demo-spring-filter:compile
slf4j-api-2.0.17.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/org.slf4j/slf4j-simple@2.0.17
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/org.slf4j/slf4j-simple@2.0.17
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/org.slf4j/slf4j-simple@2.0.17
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/org.slf4j/slf4j-simple@2.0.17
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/org.slf4j/slf4j-simple@2.0.17
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/ch.qos.logback/logback-classic@1.5.25
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/org.slf4j/slf4j-simple@2.0.17
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name slf4j-api High
Vendor jar package name slf4j Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl http://www.slf4j.org Low
Vendor Manifest bundle-symbolicname slf4j.api Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid slf4j-api Highest
Vendor pom artifactid slf4j-api Low
Vendor pom groupid org.slf4j Highest
Vendor pom name SLF4J API Module High
Vendor pom parent-artifactid slf4j-parent Low
Vendor pom url http://www.slf4j.org Highest
Product file name slf4j-api High
Product jar package name slf4j Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl http://www.slf4j.org Low
Product Manifest Bundle-Name SLF4J API Module Medium
Product Manifest bundle-symbolicname slf4j.api Medium
Product Manifest Implementation-Title slf4j-api High
Product Manifest multi-release true Low
Product pom artifactid slf4j-api Highest
Product pom groupid org.slf4j Highest
Product pom name SLF4J API Module High
Product pom parent-artifactid slf4j-parent Medium
Product pom url http://www.slf4j.org Medium
Version file version 2.0.17 High
Version Manifest Bundle-Version 2.0.17 High
Version Manifest Implementation-Version 2.0.17 High
Version pom version 2.0.17 Highest
pkg:maven/org.slf4j/slf4j-api@2.0.17
(Confidence :High)
slf4j-simple-2.0.17.jar
Description:
SLF4J Simple Provider
License:
https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-simple/2.0.17/slf4j-simple-2.0.17.jar
MD5: 47a7060262b6800b3e0e41db00909b81
SHA1: 9872a3fd794ffe7b18d17747926a64d61526ca96
SHA256: ddfea59ac074c6d3e24ac2c38622d2d963895e17f70b38ed4bdae4d780be6964
Referenced In Projects/Scopes:
waffle-jna:compile
waffle-jna-jakarta:compile
slf4j-simple-2.0.17.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name slf4j-simple High
Vendor jar package name simple Highest
Vendor jar package name slf4j Highest
Vendor Manifest build-jdk-spec 21 Low
Vendor Manifest bundle-docurl http://www.slf4j.org Low
Vendor Manifest bundle-symbolicname slf4j.simple Medium
Vendor Manifest multi-release true Low
Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low
Vendor Manifest provide-capability osgi.service;objectClass:List="org.slf4j.spi.SLF4JServiceProvider";type=simple;effective:=active,osgi.serviceloader;osgi.serviceloader="org.slf4j.spi.SLF4JServiceProvider";register:="org.slf4j.simple.SimpleServiceProvider";type=simple Low
Vendor pom artifactid slf4j-simple Highest
Vendor pom artifactid slf4j-simple Low
Vendor pom groupid org.slf4j Highest
Vendor pom name SLF4J Simple Provider High
Vendor pom parent-artifactid slf4j-parent Low
Vendor pom url http://www.slf4j.org Highest
Product file name slf4j-simple High
Product jar package name 9 Highest
Product jar package name simple Highest
Product jar package name simpleserviceprovider Highest
Product jar package name slf4j Highest
Product Manifest build-jdk-spec 21 Low
Product Manifest bundle-docurl http://www.slf4j.org Low
Product Manifest Bundle-Name SLF4J Simple Provider Medium
Product Manifest bundle-symbolicname slf4j.simple Medium
Product Manifest Implementation-Title slf4j-simple High
Product Manifest multi-release true Low
Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low
Product Manifest provide-capability osgi.service;objectClass:List="org.slf4j.spi.SLF4JServiceProvider";type=simple;effective:=active,osgi.serviceloader;osgi.serviceloader="org.slf4j.spi.SLF4JServiceProvider";register:="org.slf4j.simple.SimpleServiceProvider";type=simple Low
Product pom artifactid slf4j-simple Highest
Product pom groupid org.slf4j Highest
Product pom name SLF4J Simple Provider High
Product pom parent-artifactid slf4j-parent Medium
Product pom url http://www.slf4j.org Medium
Version file version 2.0.17 High
Version Manifest Bundle-Version 2.0.17 High
Version Manifest Implementation-Version 2.0.17 High
Version pom version 2.0.17 Highest
pkg:maven/org.slf4j/slf4j-simple@2.0.17
(Confidence :High)
snakeyaml-2.4.jar
Description:
YAML 1.1 parser and emitter for Java
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/yaml/snakeyaml/2.4/snakeyaml-2.4.jar
MD5: 29410ee3a987e3bff7b847933c591972
SHA1: e0666b825b796f85521f02360e77f4c92c5a7a07
SHA256: ef779af5d29a9dde8cc70ce0341f5c6f7735e23edff9685ceaa9d35359b7bb7f
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-distro-jakarta:runtime
waffle-spring-boot-starter3:compile
snakeyaml-2.4.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
Evidence
Type Source Name Value Confidence
Vendor file name snakeyaml High
Vendor jar package name emitter Highest
Vendor jar package name org Highest
Vendor jar package name parser Highest
Vendor jar package name snakeyaml Highest
Vendor jar package name yaml Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-symbolicname org.yaml.snakeyaml Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid snakeyaml Highest
Vendor pom artifactid snakeyaml Low
Vendor pom developer email alexander.maslov@gmail.com Low
Vendor pom developer email public.somov@gmail.com Low
Vendor pom developer id asomov Medium
Vendor pom developer id maslovalex Medium
Vendor pom developer name Alexander Maslov Medium
Vendor pom developer name Andrey Somov Medium
Vendor pom groupid org.yaml Highest
Vendor pom name SnakeYAML High
Vendor pom url https://bitbucket.org/snakeyaml/snakeyaml Highest
Product file name snakeyaml High
Product jar package name emitter Highest
Product jar package name org Highest
Product jar package name parser Highest
Product jar package name snakeyaml Highest
Product jar package name yaml Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest Bundle-Name SnakeYAML Medium
Product Manifest bundle-symbolicname org.yaml.snakeyaml Medium
Product Manifest multi-release true Low
Product pom artifactid snakeyaml Highest
Product pom developer email alexander.maslov@gmail.com Low
Product pom developer email public.somov@gmail.com Low
Product pom developer id asomov Low
Product pom developer id maslovalex Low
Product pom developer name Alexander Maslov Low
Product pom developer name Andrey Somov Low
Product pom groupid org.yaml Highest
Product pom name SnakeYAML High
Product pom url https://bitbucket.org/snakeyaml/snakeyaml Medium
Version file version 2.4 High
Version pom version 2.4 Highest
snakeyaml-2.5.jar
Description:
YAML 1.1 parser and emitter for Java
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/yaml/snakeyaml/2.5/snakeyaml-2.5.jar
MD5: 8d3b7581db5c7620db55183f33a4f2ad
SHA1: 2d53ddec134280cb384c1e35d094e5f71c1f2316
SHA256: e6682acf1ace77508ef13649cbf4f8d09d2cf5457bdb61d25ffb6ac0233d78dd
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
waffle-spring-boot-starter4:compile
waffle-distro:runtime
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
snakeyaml-2.5.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter-security@4.0.1
Evidence
Type Source Name Value Confidence
Vendor file name snakeyaml High
Vendor jar package name emitter Highest
Vendor jar package name org Highest
Vendor jar package name parser Highest
Vendor jar package name snakeyaml Highest
Vendor jar package name yaml Highest
Vendor Manifest build-jdk-spec 11 Low
Vendor Manifest bundle-symbolicname org.yaml.snakeyaml Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid snakeyaml Highest
Vendor pom artifactid snakeyaml Low
Vendor pom developer email alexander.maslov@gmail.com Low
Vendor pom developer email public.somov@gmail.com Low
Vendor pom developer id asomov Medium
Vendor pom developer id maslovalex Medium
Vendor pom developer name Alexander Maslov Medium
Vendor pom developer name Andrey Somov Medium
Vendor pom groupid org.yaml Highest
Vendor pom name SnakeYAML High
Vendor pom url https://bitbucket.org/snakeyaml/snakeyaml Highest
Product file name snakeyaml High
Product jar package name emitter Highest
Product jar package name org Highest
Product jar package name parser Highest
Product jar package name snakeyaml Highest
Product jar package name yaml Highest
Product Manifest build-jdk-spec 11 Low
Product Manifest Bundle-Name SnakeYAML Medium
Product Manifest bundle-symbolicname org.yaml.snakeyaml Medium
Product Manifest multi-release true Low
Product pom artifactid snakeyaml Highest
Product pom developer email alexander.maslov@gmail.com Low
Product pom developer email public.somov@gmail.com Low
Product pom developer id asomov Low
Product pom developer id maslovalex Low
Product pom developer name Alexander Maslov Low
Product pom developer name Andrey Somov Low
Product pom groupid org.yaml Highest
Product pom name SnakeYAML High
Product pom url https://bitbucket.org/snakeyaml/snakeyaml Medium
Version file version 2.5 High
Version pom version 2.5 Highest
spotbugs-annotations-4.9.8.jar
Description:
Annotations the SpotBugs tool supports
License:
GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.9.8/spotbugs-annotations-4.9.8.jar
MD5: d4c2e7bd090be697ad409a4e75684a94
SHA1: ca4a2783a6123e67124fd7feb4caccd2e2ac9a73
SHA256: 6f69d6fe9c55a54dcb30e87d8fa2d5f52246af50d7a3445246d9539ef221be1c
Referenced In Projects/Scopes:
waffle-demo-mixed-post-jakarta:provided
waffle-spring-security7:provided
waffle-jna:provided
waffle-tomcat11:provided
waffle-spring-boot4:provided
waffle-demo-spring-form:provided
waffle-bom:provided
waffle-shiro:provided
waffle-spring-boot-autoconfigure2:provided
waffle-demo-spring-filter:provided
waffle-demo-filter-jakarta:provided
waffle-demo-mixed-post:provided
waffle-demo-parent-jakarta:provided
waffle-jetty-jakarta:provided
waffle-spring-boot-starter4:provided
waffle-demo-spring-boot-filter4:provided
waffle-spring-boot3:provided
waffle-demo-parent:provided
waffle-spring-boot-starter2:provided
waffle-distro-jakarta:provided
waffle-jetty:provided
waffle-spring-boot-starter3:provided
waffle-demo-jaas:provided
waffle-demo-spring-form-jakarta:provided
waffle-bom-jakarta:provided
waffle-spring-boot-autoconfigure4:provided
waffle-demo-form-jakarta:provided
waffle-demo-filter:provided
waffle-demo-spring-boot-filter3:provided
waffle-shiro-jakarta:provided
waffle-demo-mixed:provided
waffle-jna-jakarta:provided
waffle-spring-security5:provided
waffle-spring-boot2:provided
waffle-demo-negotiate-jakarta:provided
waffle-demo-form:provided
waffle-distro:provided
waffle-tests:provided
waffle:provided
waffle-tests-jakarta:provided
waffle-demo-negotiate:provided
waffle-spring-security6:provided
waffle-tomcat9:provided
waffle-demo-spring-filter-jakarta:provided
waffle-spring-boot-autoconfigure3:provided
waffle-tomcat10:provided
waffle-demo-jaas-jakarta:provided
waffle-demo-spring-boot-filter2:provided
waffle-demo-mixed-jakarta:provided
spotbugs-annotations-4.9.8.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo/waffle-demo-filter@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-bom-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-jaas-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jetty@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat10@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-form@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-parent@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-mixed-post@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-jaas@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-shiro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat9@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-negotiate-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-filter-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-form-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-distro-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tomcat11@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tests@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-spring-filter@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-negotiate@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-shiro@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo/waffle-demo-form@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-tests-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-form-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-filter-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-parent-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-bom@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-post-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-mixed-jakarta@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name spotbugs-annotations High
Vendor Manifest automatic-module-name com.github.spotbugs.annotations Medium
Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low
Vendor Manifest bundle-symbolicname spotbugs-annotations Medium
Vendor pom artifactid spotbugs-annotations Highest
Vendor pom artifactid spotbugs-annotations Low
Vendor pom developer email andreas.sewe@codetrails.com Low
Vendor pom developer email dbrosius@mebigfatguy.com Low
Vendor pom developer email loskutov@gmx.de Low
Vendor pom developer email skypencil@gmail.com Low
Vendor pom developer id henrik242 Medium
Vendor pom developer id iloveeclipse Medium
Vendor pom developer id jsotuyod Medium
Vendor pom developer id KengoTODA Medium
Vendor pom developer id mebigfatguy Medium
Vendor pom developer id sewe Medium
Vendor pom developer id ThrawnCA Medium
Vendor pom developer name Andreas Sewe Medium
Vendor pom developer name Andrey Loskutov Medium
Vendor pom developer name Dave Brosius Medium
Vendor pom developer name Juan Martín Sotuyo Dodero Medium
Vendor pom developer name Kengo TODA Medium
Vendor pom groupid com.github.spotbugs Highest
Vendor pom name SpotBugs Annotations High
Vendor pom url https://spotbugs.github.io/ Highest
Product file name spotbugs-annotations High
Product Manifest automatic-module-name com.github.spotbugs.annotations Medium
Product Manifest Bundle-Name spotbugs-annotations Medium
Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low
Product Manifest bundle-symbolicname spotbugs-annotations Medium
Product pom artifactid spotbugs-annotations Highest
Product pom developer email andreas.sewe@codetrails.com Low
Product pom developer email dbrosius@mebigfatguy.com Low
Product pom developer email loskutov@gmx.de Low
Product pom developer email skypencil@gmail.com Low
Product pom developer id henrik242 Low
Product pom developer id iloveeclipse Low
Product pom developer id jsotuyod Low
Product pom developer id KengoTODA Low
Product pom developer id mebigfatguy Low
Product pom developer id sewe Low
Product pom developer id ThrawnCA Low
Product pom developer name Andreas Sewe Low
Product pom developer name Andrey Loskutov Low
Product pom developer name Dave Brosius Low
Product pom developer name Juan Martín Sotuyo Dodero Low
Product pom developer name Kengo TODA Low
Product pom groupid com.github.spotbugs Highest
Product pom name SpotBugs Annotations High
Product pom url https://spotbugs.github.io/ Medium
Version file version 4.9.8 High
Version Manifest Bundle-Version 4.9.8 High
Version pom version 4.9.8 Highest
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8
(Confidence :High)
spring-boot-2.7.18.jar
Description:
Spring Boot
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot/2.7.18/spring-boot-2.7.18.jar
MD5: 0941c83c25204150f8bd73ae66c63fd1
SHA1: f6dbdd8da7c2bded63dff9b1f48d01a4923f20a0
SHA256: 530f4e0fdfeb3a0e2b3a369d15cdea38fbdc1696f8b030c35a6ad65c27524950
Referenced In Projects/Scopes:
waffle-distro:runtime
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
spring-boot-2.7.18.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name spring-boot High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name boot Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.boot Medium
Vendor Manifest build-jdk-spec 1.8 Low
Vendor pom artifactid spring-boot Highest
Vendor pom artifactid spring-boot Low
Vendor pom developer email ask@spring.io Low
Vendor pom developer name Spring Medium
Vendor pom developer org VMware, Inc. Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.boot Highest
Vendor pom name spring-boot High
Vendor pom organization name VMware, Inc. High
Vendor pom organization url https://spring.io Medium
Vendor pom url https://spring.io/projects/spring-boot Highest
Product file name spring-boot High
Product jar package name boot Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.boot Medium
Product Manifest build-jdk-spec 1.8 Low
Product Manifest Implementation-Title Spring Boot High
Product pom artifactid spring-boot Highest
Product pom developer email ask@spring.io Low
Product pom developer name Spring Low
Product pom developer org VMware, Inc. Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.boot Highest
Product pom name spring-boot High
Product pom organization name VMware, Inc. Low
Product pom organization url https://spring.io Low
Product pom url https://spring.io/projects/spring-boot Medium
Version file version 2.7.18 High
Version Manifest Implementation-Version 2.7.18 High
Version pom version 2.7.18 Highest
Related Dependencies
spring-boot-autoconfigure-2.7.18.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-autoconfigure/2.7.18/spring-boot-autoconfigure-2.7.18.jar
MD5: e127e4ed0469cc5442d3c8e5e42e7988
SHA1: 9cf147c6ca274c75b32556acdcba5a1de081ebcd
SHA256: 1c4e0aadcb662b6149b536a2cf288003ffefe81a6cc69846e9f14976529a1b08
pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.18
spring-boot-configuration-processor-2.7.18.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-configuration-processor/2.7.18/spring-boot-configuration-processor-2.7.18.jar
MD5: 46f23c11c49166214396335e16ae3f45
SHA1: 899128018a7962b3e4be665910bae65dff08d1b0
SHA256: 79dc3480e94fe708b817097ee2745f8b1c19d650ce6ddd153c2f2ab068674dea
pkg:maven/org.springframework.boot/spring-boot-configuration-processor@2.7.18
spring-boot-starter-2.7.18.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter/2.7.18/spring-boot-starter-2.7.18.jar
MD5: 03fc89fcd959a332de7cdc22e6bdc60d
SHA1: e56b75105f9ace6df154fd47eeeeadc2f5791e56
SHA256: f67a5d913defa764295b6a0d8d13573624e437eb34e97d88c0e76bf181656071
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
spring-boot-starter-json-2.7.18.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-json/2.7.18/spring-boot-starter-json-2.7.18.jar
MD5: 4227a48b68fbd7fb37dd079ad3217226
SHA1: b6d9ed5cae0c1929a9e561bf4799a3dc93a10db1
SHA256: 084f592d522dfa36790fe08d4d0b9cebe6683638889834ed2f885f3c42fecbf6
pkg:maven/org.springframework.boot/spring-boot-starter-json@2.7.18
spring-boot-starter-logging-2.7.18.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-logging/2.7.18/spring-boot-starter-logging-2.7.18.jar
MD5: b812106a59ea242570f1c55d71982495
SHA1: 19f7c255ba5255116f58c3bbaf52c7b88ea6af3e
SHA256: 202c0894dbfdeff7be005597ff98288133a62fe7f5593be4938400482d19dcb7
pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.7.18
spring-boot-starter-security-2.7.18.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-security/2.7.18/spring-boot-starter-security-2.7.18.jar
MD5: f0461734fe73c8f250012d453cb4fb12
SHA1: 5d29a712fd0a5d7b77e348b660e2c0885b215bc4
SHA256: 075ee2311819e7076278f3f6321bca21447ee52db62ca000caf17132b37c986a
pkg:maven/org.springframework.boot/spring-boot-starter-security@2.7.18
spring-boot-starter-tomcat-2.7.18.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-tomcat/2.7.18/spring-boot-starter-tomcat-2.7.18.jar
MD5: c2080ad5020671b7884b9564006bd09c
SHA1: c56e50e006448e75a8bde595dbc754ba294389af
SHA256: e4a44478556749137f28001c35d897efff31f39161606589cc355dcbf797c6f0
pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.7.18
spring-boot-starter-web-2.7.18.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-web/2.7.18/spring-boot-starter-web-2.7.18.jar
MD5: e0bfe77aa7415f3b86d70d41cf425ccd
SHA1: 0dd62ea85098187b4604e78dc15a7ff87dba173d
SHA256: a74fab5f826b600e3c3f4cd7028c5c982b0bf1b849673629cbb758ae790a4c08
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
spring-boot-3.5.9.jar
Description:
Spring Boot
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot/3.5.9/spring-boot-3.5.9.jar
MD5: a221c5e6a7f01261a4cef971f6b3fc11
SHA1: 5ba53d6d44958d1ef28d0ad1f3db811349ba2f07
SHA256: f603756ae9f04f5d4b167cd74be7bb247d55bca5e4f85c2d14bc52f94e3c88fd
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-distro-jakarta:runtime
waffle-spring-boot-starter3:compile
spring-boot-3.5.9.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure3@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name spring-boot High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name boot Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.boot Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid spring-boot Highest
Vendor pom artifactid spring-boot Low
Vendor pom developer email ask@spring.io Low
Vendor pom developer name Spring Medium
Vendor pom developer org VMware, Inc. Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.boot Highest
Vendor pom name spring-boot High
Vendor pom organization name VMware, Inc. High
Vendor pom organization url https://spring.io Medium
Vendor pom url https://spring.io/projects/spring-boot Highest
Product file name spring-boot High
Product jar package name boot Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.boot Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest Implementation-Title Spring Boot High
Product pom artifactid spring-boot Highest
Product pom developer email ask@spring.io Low
Product pom developer name Spring Low
Product pom developer org VMware, Inc. Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.boot Highest
Product pom name spring-boot High
Product pom organization name VMware, Inc. Low
Product pom organization url https://spring.io Low
Product pom url https://spring.io/projects/spring-boot Medium
Version file version 3.5.9 High
Version Manifest Implementation-Version 3.5.9 High
Version pom version 3.5.9 Highest
Related Dependencies
spring-boot-autoconfigure-3.5.9.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-autoconfigure/3.5.9/spring-boot-autoconfigure-3.5.9.jar
MD5: be1e21c0551fcec03893a6ebddebd0d4
SHA1: 54bf9acd3c71e0cfb297cb5d2ac66494ff37e717
SHA256: 97fd9f97f37a246db2f531842f312c4eccd2f5eeb48436c732ee1061327a8532
pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.5.9
spring-boot-configuration-processor-3.5.9.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-configuration-processor/3.5.9/spring-boot-configuration-processor-3.5.9.jar
MD5: 7dd83dbb57483f48759149649ace3c3a
SHA1: bae2c44f87188e775166d442368f9d7307859b4e
SHA256: d918f6a832470441a7c023cf24fc93de406b04b32998b32f383f361b9b2f1f74
pkg:maven/org.springframework.boot/spring-boot-configuration-processor@3.5.9
spring-boot-starter-3.5.9.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter/3.5.9/spring-boot-starter-3.5.9.jar
MD5: 9030ec9296e9cb28d9072fe799838f09
SHA1: 90e0183666bfdfb85a7a5cb996a82fce00d1015a
SHA256: bf655381877c962fa0118e792cc1283c85c2be5cbd50936337d042202ed92aad
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
spring-boot-starter-json-3.5.9.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-json/3.5.9/spring-boot-starter-json-3.5.9.jar
MD5: 4d2ee91bd6abc413a2e0ad530a2bf671
SHA1: 345950f8e533841e9fdf9b4404a5f9b2e5c6ec69
SHA256: 2dadbabd7dbdc2fbd20fc44312b04106a9055579980a0b300a9a405bf67826fc
pkg:maven/org.springframework.boot/spring-boot-starter-json@3.5.9
spring-boot-starter-logging-3.5.9.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-logging/3.5.9/spring-boot-starter-logging-3.5.9.jar
MD5: c62e46e7629e31e60a0f4a53eb598517
SHA1: 9872cc87ec245c917e916460e2a10cb4364e8350
SHA256: f477f52a7ca431d8220776ebd4347d029816869d3530be6edfb71c5bb94219c0
pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.5.9
spring-boot-starter-security-3.5.9.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-security/3.5.9/spring-boot-starter-security-3.5.9.jar
MD5: 20567bed1586161d4e715fac7d2d8319
SHA1: 4c877c842552ea20a378d7aa5787d1becabadada
SHA256: 6b6d140b809411c1e61ef30c08c9fb9a2b33eb3e334ac43daeb975766186b50d
pkg:maven/org.springframework.boot/spring-boot-starter-security@3.5.9
spring-boot-starter-tomcat-3.5.9.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-tomcat/3.5.9/spring-boot-starter-tomcat-3.5.9.jar
MD5: 0ffc4ebe59cbc24e252361b19931ad17
SHA1: bdc4350d1212a9da114727f5a0fa126949d30caf
SHA256: 900287a476c027521aea1d5c202aa90e560fc96ac783bf3b8bcdb036fe0d3763
pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@3.5.9
spring-boot-starter-web-3.5.9.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-web/3.5.9/spring-boot-starter-web-3.5.9.jar
MD5: 73b32f65ecce263c8ccb31c8fae04f16
SHA1: 9ebe36cc83eb16b435c47c1969e9b115a4e5e90e
SHA256: d6e89a3a1c4097abb6339d1dd9c78e4f5a610b08513282c4a337a1ab3062d58c
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
spring-boot-web-server-4.0.1.jar
Description:
Spring Boot Web Server
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-web-server/4.0.1/spring-boot-web-server-4.0.1.jar
MD5: 578257dba79ab073bc230a59b50c593b
SHA1: 659ce5f51c2bb7161db2811150a555a121dabd68
SHA256: f0a538e1f2d2f9cef43feb9b04b12fac4e5872d740db2eb56e362446bc4fe98c
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
spring-boot-web-server-4.0.1.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.1
Evidence
Type Source Name Value Confidence
Vendor file name spring-boot-web-server High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name boot Highest
Vendor jar package name server Highest
Vendor jar package name springframework Highest
Vendor jar package name web Highest
Vendor Manifest automatic-module-name spring.boot.web.server Medium
Vendor Manifest build-jdk-spec 17 Low
Vendor pom artifactid spring-boot-web-server Highest
Vendor pom artifactid spring-boot-web-server Low
Vendor pom developer email ask@spring.io Low
Vendor pom developer name Spring Medium
Vendor pom developer org VMware, Inc. Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.boot Highest
Vendor pom name spring-boot-web-server High
Vendor pom organization name VMware, Inc. High
Vendor pom organization url https://spring.io Medium
Vendor pom url https://spring.io/projects/spring-boot Highest
Product file name spring-boot-web-server High
Product jar package name boot Highest
Product jar package name server Highest
Product jar package name springframework Highest
Product jar package name web Highest
Product Manifest automatic-module-name spring.boot.web.server Medium
Product Manifest build-jdk-spec 17 Low
Product Manifest Implementation-Title Spring Boot Web Server High
Product pom artifactid spring-boot-web-server Highest
Product pom developer email ask@spring.io Low
Product pom developer name Spring Low
Product pom developer org VMware, Inc. Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.boot Highest
Product pom name spring-boot-web-server High
Product pom organization name VMware, Inc. Low
Product pom organization url https://spring.io Low
Product pom url https://spring.io/projects/spring-boot Medium
Version file version 4.0.1 High
Version Manifest Implementation-Version 4.0.1 High
Version pom version 4.0.1 Highest
Related Dependencies
spring-boot-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot/4.0.1/spring-boot-4.0.1.jar
MD5: 99728e08dfce163bc9e0963bdfddbdd6
SHA1: 2c20ae598c14dd78d3098aafc8a799afbdf8e69a
SHA256: 947b648ec6ddea77dfaba41cccfb4fd7b0823b7d1c43c7f3b357c1880e0ec460
pkg:maven/org.springframework.boot/spring-boot@4.0.1
spring-boot-autoconfigure-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-autoconfigure/4.0.1/spring-boot-autoconfigure-4.0.1.jar
MD5: d58228904fbdd6fc68657c4cd5d40b17
SHA1: 808c34d74bbad5802bac8ce687424da4da93bb08
SHA256: 5598ce8521086b5b662770b7411fc90233f393257d2e4f388d189e0ed8891272
pkg:maven/org.springframework.boot/spring-boot-autoconfigure@4.0.1
spring-boot-configuration-processor-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-configuration-processor/4.0.1/spring-boot-configuration-processor-4.0.1.jar
MD5: 054fc382d32d3d1597a77707cfca339a
SHA1: a6d77ad038728f5497b218458a0c99c50a19b605
SHA256: 31bcdb2394ee78a75e45d896628df77c971ca92a4aa4f1dfd091a8ed802b1103
pkg:maven/org.springframework.boot/spring-boot-configuration-processor@4.0.1
spring-boot-http-converter-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-http-converter/4.0.1/spring-boot-http-converter-4.0.1.jar
MD5: 8f9ed7914ecd4222df3a53fd54e10c1f
SHA1: ff2953160f2bffc4c888067300f9bf367ae55f26
SHA256: 60b958ec12489f2a97fed379449d077232dfa5ca24315baa04b944885df940a2
pkg:maven/org.springframework.boot/spring-boot-http-converter@4.0.1
spring-boot-jackson-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-jackson/4.0.1/spring-boot-jackson-4.0.1.jar
MD5: f9fcbb137dda4821f3aa0a706380cff7
SHA1: 245c1e71474e903bb06b6fffc018c4b2d98738c4
SHA256: 4c419c426cbcb92fa8fdbf813c20a88ba950ecc78d9dfc80c515d99fdad7b5b1
pkg:maven/org.springframework.boot/spring-boot-jackson@4.0.1
spring-boot-security-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-security/4.0.1/spring-boot-security-4.0.1.jar
MD5: 4ceb04e4e6330c75fb866591765080eb
SHA1: 9e406a65f41f9b4d94a7373aa3743c8178f9a226
SHA256: d51ed600f438e41765897fdd878c81e5136ba1ec1cd75ce72173552a569d9120
pkg:maven/org.springframework.boot/spring-boot-security@4.0.1
spring-boot-servlet-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-servlet/4.0.1/spring-boot-servlet-4.0.1.jar
MD5: 341994af8142ec3fa8b25fadb0c24dba
SHA1: 3dcddba717a9deb204925f41f8e596bba07f417f
SHA256: 8274a8dfdb1e1ea1d0664977a059c9a421d7cd7a6671d400304e0164c11b03db
pkg:maven/org.springframework.boot/spring-boot-servlet@4.0.1
spring-boot-starter-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter/4.0.1/spring-boot-starter-4.0.1.jar
MD5: 46d7d44713a78c635525bfb5c392bb2e
SHA1: 775e306503c1170ba472a33a47a6549a15e7015f
SHA256: 1d03d6d448c87e3fe02ee089ed3e3511370c63bd93eeae6528011cccfaaec626
pkg:maven/org.springframework.boot/spring-boot-starter@4.0.1
spring-boot-starter-jackson-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-jackson/4.0.1/spring-boot-starter-jackson-4.0.1.jar
MD5: 56d7bb6223e7c3d2cd4dbdb02fb8dd1b
SHA1: 89aa1cd99f32ed00f1fd9d5c22e019e7cb9fa262
SHA256: b3842926cf8fd6f72416d03da84e9f232a279f2bf7729fbb3c2e9c8d353a31bb
pkg:maven/org.springframework.boot/spring-boot-starter-jackson@4.0.1
spring-boot-starter-logging-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-logging/4.0.1/spring-boot-starter-logging-4.0.1.jar
MD5: e4aef35a2c73cb6de0a32245476b7673
SHA1: 95b39c11a1a69a48ababef38c9a415f25fead87b
SHA256: dc804995968d927818235a87ac38de1f335fed84b7f57c4b5cb3edc9f5a948c0
pkg:maven/org.springframework.boot/spring-boot-starter-logging@4.0.1
spring-boot-starter-security-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-security/4.0.1/spring-boot-starter-security-4.0.1.jar
MD5: b213dff05f27ce6ba062325ec96d2760
SHA1: 9b5f936ee3c7d75f288ebbc14548c3dda4cd5f73
SHA256: 5b6533344a8fd868339ba5a70732258f781ebf15a4e6ae99103ee52282af7c1a
pkg:maven/org.springframework.boot/spring-boot-starter-security@4.0.1
spring-boot-starter-tomcat-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-tomcat/4.0.1/spring-boot-starter-tomcat-4.0.1.jar
MD5: 9ae72a2227fc4ca06ed4c4f684498a4f
SHA1: ebf0883b5ef313119a35f74bfdcc55a816bf85a7
SHA256: fd439e7a52f66b9cfd11e7227250017bd3a198a4ddc87970bb815786c7290a12
pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@4.0.1
spring-boot-starter-tomcat-runtime-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-tomcat-runtime/4.0.1/spring-boot-starter-tomcat-runtime-4.0.1.jar
MD5: 554727caeb03e5ab14cd7b40a7e0eae1
SHA1: ce0f7d5cb75fbfcdbc839d0aeee62ce38f8ee58c
SHA256: 029a4b3e6f2d2db29359b7743027fcf8b1e0a87cef17cf0644560f6da831c771
pkg:maven/org.springframework.boot/spring-boot-starter-tomcat-runtime@4.0.1
spring-boot-starter-web-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-web/4.0.1/spring-boot-starter-web-4.0.1.jar
MD5: 705a435981e12480899f8c7738929a64
SHA1: 5d686bdc4417486872aa7e1fa305bcf4fec7076b
SHA256: b739dd12fcad2bcbb59872c417f58684dd86b1d9f65929e0586bbf2614b895c6
pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.1
spring-boot-tomcat-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-tomcat/4.0.1/spring-boot-tomcat-4.0.1.jar
MD5: 3d82d0c2259ad0c3c7ff393f0c9131c1
SHA1: 4e89e61bfb085a95d1541f1f9ca2d705f31b6197
SHA256: c3d3e8b2a26204ac44cc3e6b6ce8b2dea489092e76ff1e3f16298febdc74459c
pkg:maven/org.springframework.boot/spring-boot-tomcat@4.0.1
spring-boot-webmvc-4.0.1.jar
File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-webmvc/4.0.1/spring-boot-webmvc-4.0.1.jar
MD5: a20d7f64dbe04e73543908f90e10e588
SHA1: 4635bb0220cba3d95ab0b0883b5b1460f59bb31d
SHA256: ba13b693fa1a8f18e519e22ea2cfc3522bf7e3d7fc796f67a01e8da01868b6c3
pkg:maven/org.springframework.boot/spring-boot-webmvc@4.0.1
spring-core-5.3.39.jar
Description:
Spring Core
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-core/5.3.39/spring-core-5.3.39.jar
MD5: 632d2a8c30962a69273775968c052651
SHA1: d2bff2eedf27b51d6ef9a2fc892aaff5b7a768dd
SHA256: 3a1ddcf05420a9181bd9cacb6062a3edc493e14d555961ad50e1a6360eb1e75f
Referenced In Projects/Scopes:
waffle-distro:runtime
waffle-spring-security5:compile
waffle-demo-spring-form:compile
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
waffle-demo-spring-filter:compile
spring-core-5.3.39.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name spring-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name io Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.core Medium
Vendor pom artifactid spring-core Highest
Vendor pom artifactid spring-core Low
Vendor pom developer email jhoeller@pivotal.io Low
Vendor pom developer id jhoeller Medium
Vendor pom developer name Juergen Hoeller Medium
Vendor pom groupid org.springframework Highest
Vendor pom name Spring Core High
Vendor pom organization name Spring IO High
Vendor pom organization url https://spring.io/projects/spring-framework Medium
Vendor pom url spring-projects/spring-framework Highest
Product file name spring-core High
Product hint analyzer product springsource_spring_framework Highest
Product jar package name core Highest
Product jar package name io Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.core Medium
Product Manifest Implementation-Title spring-core High
Product pom artifactid spring-core Highest
Product pom developer email jhoeller@pivotal.io Low
Product pom developer id jhoeller Low
Product pom developer name Juergen Hoeller Low
Product pom groupid org.springframework Highest
Product pom name Spring Core High
Product pom organization name Spring IO Low
Product pom organization url https://spring.io/projects/spring-framework Low
Product pom url spring-projects/spring-framework High
Version file version 5.3.39 High
Version Manifest Implementation-Version 5.3.39 High
Version pom version 5.3.39 Highest
Related Dependencies
spring-aop-5.3.39.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-aop/5.3.39/spring-aop-5.3.39.jar
MD5: 47ef8946ec3f2f76f83cda172b9fd964
SHA1: 3af1f0d73ec1e031c7083c848342989f413ca275
SHA256: aa706e4f749982c0bae5fa637433c44c24f0fff5d16dc41deea6d30c3dfa7c85
pkg:maven/org.springframework/spring-aop@5.3.39
spring-beans-5.3.39.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-beans/5.3.39/spring-beans-5.3.39.jar
MD5: c2f99040fb8b0bc98515c87b968227d3
SHA1: 87770ce736cbd777c07866cbc8a06b879765e3c8
SHA256: b6697a5d8facb81aa75e5a46d959d4256da9ce3b40d33f3b5bbd42a8b1ed5722
pkg:maven/org.springframework/spring-beans@5.3.39
spring-context-5.3.39.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-context/5.3.39/spring-context-5.3.39.jar
MD5: 167e95de6f9de58b1ffff09990237021
SHA1: 286538ca4b3890192d63c88fdd1616adde17dc0e
SHA256: 9e644fc33bece9a9cb82538167a1b9640ae7b7d80252e893d89b8926a2f81633
pkg:maven/org.springframework/spring-context@5.3.39
spring-expression-5.3.39.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-expression/5.3.39/spring-expression-5.3.39.jar
MD5: 41198683f2d488b4b2038b7d8e4b6d81
SHA1: 25cf07399eb7ac3fc13888b20dc4d67124ec75bd
SHA256: d5337774d889fcdc9c08b0c8b8aaa1018d4c95b9b441db0118f7ae4d328f2810
pkg:maven/org.springframework/spring-expression@5.3.39
spring-webmvc-5.3.39.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-webmvc/5.3.39/spring-webmvc-5.3.39.jar
MD5: 7f428d04938f7d65077db3e269ca0d78
SHA1: 89c465ff3d37629a60e1ad4886f61a09a459d639
SHA256: 1ad8a2ba468c07024ba63cb7681bb30a2ecf8d91124f00fdb4a3d184131b87ed
pkg:maven/org.springframework/spring-webmvc@5.3.39
CVE-2024-38820 suppress
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.
NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity
CVSSv3:
Base Score: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A
References:
Vulnerable Software & Versions: (show all )
spring-core-6.2.15.jar
Description:
Spring Core
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-core/6.2.15/spring-core-6.2.15.jar
MD5: 421274822a93c26847d04406d1567602
SHA1: f4744d35266cf76d71e284308f194fb513364ca2
SHA256: efebed60992aef00bfb88871e8ea590428425aa42d4cdbedcb88ca3e47cf05b0
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-demo-spring-form-jakarta:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-security6:compile
waffle-distro-jakarta:runtime
waffle-spring-boot-starter3:compile
spring-core-6.2.15.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter@3.5.9
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name spring-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name io Highest
Vendor jar package name org Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.core Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid spring-core Highest
Vendor pom artifactid spring-core Low
Vendor pom developer email juergen.hoeller@broadcom.com Low
Vendor pom developer id jhoeller Medium
Vendor pom developer name Juergen Hoeller Medium
Vendor pom groupid org.springframework Highest
Vendor pom name Spring Core High
Vendor pom organization name Spring IO High
Vendor pom organization url https://spring.io/projects/spring-framework Medium
Vendor pom url spring-projects/spring-framework Highest
Product file name spring-core High
Product hint analyzer product springsource_spring_framework Highest
Product jar package name core Highest
Product jar package name io Highest
Product jar package name org Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.core Medium
Product Manifest Implementation-Title spring-core High
Product Manifest multi-release true Low
Product pom artifactid spring-core Highest
Product pom developer email juergen.hoeller@broadcom.com Low
Product pom developer id jhoeller Low
Product pom developer name Juergen Hoeller Low
Product pom groupid org.springframework Highest
Product pom name Spring Core High
Product pom organization name Spring IO Low
Product pom organization url https://spring.io/projects/spring-framework Low
Product pom url spring-projects/spring-framework High
Version file version 6.2.15 High
Version Manifest Implementation-Version 6.2.15 High
Version pom version 6.2.15 Highest
Related Dependencies
spring-aop-6.2.15.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-aop/6.2.15/spring-aop-6.2.15.jar
MD5: 519ad924059838311eb1ebe437878b6e
SHA1: 921099294cbe4b7ceb278644a530f14ecd1df580
SHA256: 0982d7742e70752eae1e96d10047c53d0c48d41fb819d076432d2154ceeacc90
pkg:maven/org.springframework/spring-aop@6.2.15
spring-beans-6.2.15.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-beans/6.2.15/spring-beans-6.2.15.jar
MD5: a8bddadc3bcd6db151275804e6c03af8
SHA1: 1d0ad7873e865fc9d47c3aac7b7ffb6d0d1500c5
SHA256: ffba8542f6799b2afbdcbda715e185cb53bb1d497389ba2102f95088d1564c2c
pkg:maven/org.springframework/spring-beans@6.2.15
spring-context-6.2.15.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-context/6.2.15/spring-context-6.2.15.jar
MD5: 6e3ffa315eab7dffc475a3d60131cfaf
SHA1: a721a75d6be895a4ffa1e6b0dc6a77d78ee7ca0d
SHA256: 1157a1ce6810c4ac32b5f07b35c169c57e2489a06b4ed0a6bb5a564546f9d528
pkg:maven/org.springframework/spring-context@6.2.15
spring-expression-6.2.15.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-expression/6.2.15/spring-expression-6.2.15.jar
MD5: 377e75b89c95b972437faa073e4670c3
SHA1: 09f2d3bb55e9fe32576463daed7d245685420d04
SHA256: 25d5f262fca2b8b30568e0c05390d804b77a9cb77d75df71e57d111572ee7da1
pkg:maven/org.springframework/spring-expression@6.2.15
spring-web-6.2.15.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-web/6.2.15/spring-web-6.2.15.jar
MD5: a60ee85c604fe5fbcf32c62fb03e45eb
SHA1: 1d43a99df84fc7981dd1ff3b0d339a254c6f3a59
SHA256: bf551345ddc959ba63673ba907f6e48a0f84f52e6b60a19ac32e5fdeed5af85a
pkg:maven/org.springframework/spring-web@6.2.15
spring-webmvc-6.2.15.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-webmvc/6.2.15/spring-webmvc-6.2.15.jar
MD5: 7553277e335714a89ed3f2db5462985d
SHA1: f290f07e991291b7a67a472ea88d07e9d153c379
SHA256: 118d16bde6ea6aa35c0906d1581c8dea06ddf53668545691f73deed42cb2eacc
pkg:maven/org.springframework/spring-webmvc@6.2.15
spring-core-7.0.2.jar
Description:
Spring Core
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-core/7.0.2/spring-core-7.0.2.jar
MD5: 15551a52baa8a51cba039e2a87e138c7
SHA1: 92b5608685a6212fe2ce3565bc1bf660505560c7
SHA256: 4d0ceaa52d33483b2442cada981bba8a8b0227b969bdabfffc5b128e1e02f9bc
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
waffle-spring-boot-starter4:compile
spring-core-7.0.2.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter4@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name spring-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name io Highest
Vendor jar package name org Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.core Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid spring-core Highest
Vendor pom artifactid spring-core Low
Vendor pom developer email juergen.hoeller@broadcom.com Low
Vendor pom developer id jhoeller Medium
Vendor pom developer name Juergen Hoeller Medium
Vendor pom groupid org.springframework Highest
Vendor pom name Spring Core High
Vendor pom organization name Spring IO High
Vendor pom organization url https://spring.io/projects/spring-framework Medium
Vendor pom url spring-projects/spring-framework Highest
Product file name spring-core High
Product hint analyzer product springsource_spring_framework Highest
Product jar package name core Highest
Product jar package name io Highest
Product jar package name org Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.core Medium
Product Manifest Implementation-Title spring-core High
Product Manifest multi-release true Low
Product pom artifactid spring-core Highest
Product pom developer email juergen.hoeller@broadcom.com Low
Product pom developer id jhoeller Low
Product pom developer name Juergen Hoeller Low
Product pom groupid org.springframework Highest
Product pom name Spring Core High
Product pom organization name Spring IO Low
Product pom organization url https://spring.io/projects/spring-framework Low
Product pom url spring-projects/spring-framework High
Version file version 7.0.2 High
Version Manifest Implementation-Version 7.0.2 High
Version pom version 7.0.2 Highest
Related Dependencies
spring-aop-7.0.2.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-aop/7.0.2/spring-aop-7.0.2.jar
MD5: e0f1c76ae304e1d6348a7a1db2a4ba9e
SHA1: 25b824571d184e9d47606a62dd787bcf7c55e88e
SHA256: bd763e6019222129aea5ac0c1261a90af3ee904e1c4b87a570175366d2f10325
pkg:maven/org.springframework/spring-aop@7.0.2
spring-beans-7.0.2.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-beans/7.0.2/spring-beans-7.0.2.jar
MD5: 091b6bb7aa41f79cce76ea3cada85988
SHA1: 224739ac1b1bd96e866fb436cbcc46a7457a64a2
SHA256: 7ce3218b5a2172900ea9f9d791acf2cfaedcdbffcb4ef39f981daeed18411781
pkg:maven/org.springframework/spring-beans@7.0.2
spring-context-7.0.2.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-context/7.0.2/spring-context-7.0.2.jar
MD5: eb7657a182946507706eb317b9321054
SHA1: 531fbbabf0d9ff80bc506121acfd29dcb1531bf9
SHA256: cff8ff2039db2c4e13a0abf03aece6fdb2e5384ac0613446d55f4227b27d06fc
pkg:maven/org.springframework/spring-context@7.0.2
spring-expression-7.0.2.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-expression/7.0.2/spring-expression-7.0.2.jar
MD5: 41497d8d9f3899e500b38c165d7d7695
SHA1: 692338c5c7eaeeeba4f0919b54216c1bf9fbee04
SHA256: 2e1596cfc15322329c655805c2dd01a3f2a1d1145f8f91cac2d4b0f7de284f4a
pkg:maven/org.springframework/spring-expression@7.0.2
spring-web-7.0.2.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-web/7.0.2/spring-web-7.0.2.jar
MD5: 656e35517710f8c028196b79cecbb96a
SHA1: fc1f3eec8e102b896b06c0082bf4d08486e091d3
SHA256: 49767bf0effe8d4ebaaf16453ff1bffc4478f7328a687313811e56d5140feca5
pkg:maven/org.springframework/spring-web@7.0.2
spring-webmvc-7.0.2.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-webmvc/7.0.2/spring-webmvc-7.0.2.jar
MD5: 776da4bbb0b1a5be8ed08f536f96348c
SHA1: ed0b3b7724e8cb4b47976eda5e862b3dd1ed871b
SHA256: 32e6b1e3381b6caca190a159d5859bc334bba7fef84b126b513e1487e7783b41
pkg:maven/org.springframework/spring-webmvc@7.0.2
spring-core-7.0.3.jar
Description:
Spring Core
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-core/7.0.3/spring-core-7.0.3.jar
MD5: 4da41c194463d6521d6c4ace955417db
SHA1: 2072a89e347c63567a83349eb5908131ce6ea601
SHA256: 78d85d69a8e71f28996c7062cc91d9ce63fd1f01e9b8b87b21363ae325c9347b
Referenced In Project/Scope: waffle-spring-security7:compile
spring-core-7.0.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name spring-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name io Highest
Vendor jar package name org Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.core Medium
Vendor Manifest multi-release true Low
Vendor pom artifactid spring-core Highest
Vendor pom artifactid spring-core Low
Vendor pom developer email juergen.hoeller@broadcom.com Low
Vendor pom developer id jhoeller Medium
Vendor pom developer name Juergen Hoeller Medium
Vendor pom groupid org.springframework Highest
Vendor pom name Spring Core High
Vendor pom organization name Spring IO High
Vendor pom organization url https://spring.io/projects/spring-framework Medium
Vendor pom url spring-projects/spring-framework Highest
Product file name spring-core High
Product hint analyzer product springsource_spring_framework Highest
Product jar package name core Highest
Product jar package name io Highest
Product jar package name org Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.core Medium
Product Manifest Implementation-Title spring-core High
Product Manifest multi-release true Low
Product pom artifactid spring-core Highest
Product pom developer email juergen.hoeller@broadcom.com Low
Product pom developer id jhoeller Low
Product pom developer name Juergen Hoeller Low
Product pom groupid org.springframework Highest
Product pom name Spring Core High
Product pom organization name Spring IO Low
Product pom organization url https://spring.io/projects/spring-framework Low
Product pom url spring-projects/spring-framework High
Version file version 7.0.3 High
Version Manifest Implementation-Version 7.0.3 High
Version pom version 7.0.3 Highest
Related Dependencies
spring-aop-7.0.3.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-aop/7.0.3/spring-aop-7.0.3.jar
MD5: 11103d798fc0606c24fea2b77ea2cad7
SHA1: b5eb117b9e8a84075a3db6e7e52ef2bc7b54163f
SHA256: 5d6f2c77b041edb424156561f843578669dd15519f045b16061b856a6fb38175
pkg:maven/org.springframework/spring-aop@7.0.3
spring-beans-7.0.3.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-beans/7.0.3/spring-beans-7.0.3.jar
MD5: 73a09979913146a2c41a6f9372ff4b7a
SHA1: b3b43093088fe139d78643bcfe8ee9374a0dd892
SHA256: 3d7cc670630cde2475eb079c2b5b6a85d9a2422888d6213da1aed1c0337500d6
pkg:maven/org.springframework/spring-beans@7.0.3
spring-context-7.0.3.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-context/7.0.3/spring-context-7.0.3.jar
MD5: 139a9427688223b46f51ace2e8fac516
SHA1: cea94cbc6244f0b4632cb4bb7608a1e4fab8afea
SHA256: 2c0ae4976261ad2ea16d6f5bd314e6ee13ffbaf7d8b6a4867b9a161e211a41a9
pkg:maven/org.springframework/spring-context@7.0.3
spring-expression-7.0.3.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-expression/7.0.3/spring-expression-7.0.3.jar
MD5: 7676fb033b76ef6c84d613a2fc095974
SHA1: 3fbdf8dc6a84d1f2c43c48c97e8220f29fab19d6
SHA256: e4f53c026e281b79c268a4b2071938785a15606921ef5f3d2a0edc7a76566934
pkg:maven/org.springframework/spring-expression@7.0.3
spring-web-7.0.3.jar
File Path: /home/runner/.m2/repository/org/springframework/spring-web/7.0.3/spring-web-7.0.3.jar
MD5: c075825340a9f74890412dc04b66e75c
SHA1: 3bcdb4075e17a56b148f69fe0d83a4c0662d9258
SHA256: 85bb88a14a26ac8fa72af463e6dfb364114f28c82f36fce427f2077580d6958c
pkg:maven/org.springframework/spring-web@7.0.3
spring-security-core-5.8.16.jar
Description:
Spring Security
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-core/5.8.16/spring-security-core-5.8.16.jar
MD5: c70ae997256d27ca6fb1c7a8b24e4248
SHA1: b3d21a1f967db39dabaca487ba3fe58972e6a9a5
SHA256: 3be7d217048f5ea76fd6d0eddaa3169ad3bee0bba9c456e27670ec37ca33c3fd
Referenced In Projects/Scopes:
waffle-distro:runtime
waffle-spring-security5:compile
waffle-demo-spring-form:compile
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
waffle-demo-spring-filter:compile
spring-security-core-5.8.16.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name spring-security-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name security Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.security.core Medium
Vendor pom artifactid spring-security-core Highest
Vendor pom artifactid spring-security-core Low
Vendor pom developer email info@pivotal.io Low
Vendor pom developer name Pivotal Medium
Vendor pom developer org Pivotal Software, Inc. Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.security Highest
Vendor pom name spring-security-core High
Vendor pom organization name Pivotal Software, Inc. High
Vendor pom organization url https://spring.io Medium
Vendor pom url https://spring.io/projects/spring-security Highest
Product file name spring-security-core High
Product jar package name core Highest
Product jar package name security Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.security.core Medium
Product Manifest Implementation-Title spring-security-core High
Product pom artifactid spring-security-core Highest
Product pom developer email info@pivotal.io Low
Product pom developer name Pivotal Low
Product pom developer org Pivotal Software, Inc. Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.security Highest
Product pom name spring-security-core High
Product pom organization name Pivotal Software, Inc. Low
Product pom organization url https://spring.io Low
Product pom url https://spring.io/projects/spring-security Medium
Version file version 5.8.16 High
Version Manifest Implementation-Version 5.8.16 High
Version pom version 5.8.16 Highest
Related Dependencies
spring-security-config-5.8.16.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-config/5.8.16/spring-security-config-5.8.16.jar
MD5: 1e386c77733c252f4b9a80904ccb1c00
SHA1: 73bff85307254de9f30514db587420110aee72ee
SHA256: fb7218cd28ca5f82bafd4cc038d1727fc99ccfb0f3b38a8fc0545a93e9b2f8b5
pkg:maven/org.springframework.security/spring-security-config@5.8.16
spring-security-crypto-5.8.16.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-crypto/5.8.16/spring-security-crypto-5.8.16.jar
MD5: 987ca02bb810d32c7d86968ff84e887c
SHA1: 340f3bb882bea8e9eafc66671d4c8e50f11867a7
SHA256: e47acdd647997efb36609698b64a2bec37fa119210f88fad813aa53610433cfd
pkg:maven/org.springframework.security/spring-security-crypto@5.8.16
spring-security-web-5.8.16.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-web/5.8.16/spring-security-web-5.8.16.jar
MD5: 137862bb11c72092dd94d14d380fc784
SHA1: fade885f7f9df056dd5e3592d949e888cd82397d
SHA256: fe0843587f4dff188a1ecb822bf544c5f1c1ee46c757858a5a585039d8118304
pkg:maven/org.springframework.security/spring-security-web@5.8.16
spring-security-core-6.5.7.jar
Description:
Spring Security
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-core/6.5.7/spring-security-core-6.5.7.jar
MD5: fa3ae54aa9254786851e83afeb1ecfc6
SHA1: a0c9068ed82f0ddf21231cc7c7dd4bd6b2ef4029
SHA256: df44f29203d329f23ff166f203261ad82eada9ba2bce6a7b9a7bac125a424d0a
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-demo-spring-form-jakarta:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-security6:compile
waffle-distro-jakarta:runtime
waffle-spring-boot-starter3:compile
spring-security-core-6.5.7.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security6@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name spring-security-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name security Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.security.core Medium
Vendor pom artifactid spring-security-core Highest
Vendor pom artifactid spring-security-core Low
Vendor pom developer email info@pivotal.io Low
Vendor pom developer name Pivotal Medium
Vendor pom developer org Pivotal Software, Inc. Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.security Highest
Vendor pom name spring-security-core High
Vendor pom organization name Pivotal Software, Inc. High
Vendor pom organization url https://spring.io Medium
Vendor pom url https://spring.io/projects/spring-security Highest
Product file name spring-security-core High
Product jar package name core Highest
Product jar package name security Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.security.core Medium
Product Manifest Implementation-Title spring-security-core High
Product pom artifactid spring-security-core Highest
Product pom developer email info@pivotal.io Low
Product pom developer name Pivotal Low
Product pom developer org Pivotal Software, Inc. Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.security Highest
Product pom name spring-security-core High
Product pom organization name Pivotal Software, Inc. Low
Product pom organization url https://spring.io Low
Product pom url https://spring.io/projects/spring-security Medium
Version file version 6.5.7 High
Version Manifest Implementation-Version 6.5.7 High
Version pom version 6.5.7 Highest
Related Dependencies
spring-security-config-6.5.7.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-config/6.5.7/spring-security-config-6.5.7.jar
MD5: b7660e8d30488729c1f41ef6993a3549
SHA1: 7244c8258b5104712cb0be3847ba3753ff80b66e
SHA256: 6ef5e23054862e4c83f943d6c238bcbe606ea474662fa3afa9b9e3b28788200a
pkg:maven/org.springframework.security/spring-security-config@6.5.7
spring-security-crypto-6.5.7.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-crypto/6.5.7/spring-security-crypto-6.5.7.jar
MD5: bf371e0764b4192c8535f998066c55df
SHA1: a8b424b612c8103e7c0a5576e2be30d1ac61f38a
SHA256: ff397e817587bebf70fae924e38d4892f9db11c966f58ce533e2bb8fb7d519da
pkg:maven/org.springframework.security/spring-security-crypto@6.5.7
spring-security-web-6.5.7.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-web/6.5.7/spring-security-web-6.5.7.jar
MD5: 825d3fb3d4ad1b0208f39c07e9a6edf9
SHA1: c3c2f32069fae888d1e5281bd7e0e638f7f6dc26
SHA256: 1384f07b150de7f5883e90838d256eb01eb54b23082896eccdfe5d02c51bbfdf
pkg:maven/org.springframework.security/spring-security-web@6.5.7
spring-security-core-7.0.2.jar
Description:
Spring Security
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-core/7.0.2/spring-security-core-7.0.2.jar
MD5: 9fbe37f425d92d5ef1503dc887ffbb80
SHA1: 40317c3763917b061b912bd381bf8016e38eebde
SHA256: 771adf6de0e761c9a5f3ed4e506822ad13a8a1de699799df5fe9a34824748bc3
Referenced In Projects/Scopes:
waffle-spring-security7:compile
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
waffle-spring-boot-starter4:compile
spring-security-core-7.0.2.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-boot-starter4@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security7@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name spring-security-core High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name core Highest
Vendor jar package name security Highest
Vendor jar package name springframework Highest
Vendor Manifest automatic-module-name spring.security.core Medium
Vendor pom artifactid spring-security-core Highest
Vendor pom artifactid spring-security-core Low
Vendor pom developer email info@pivotal.io Low
Vendor pom developer name Pivotal Medium
Vendor pom developer org Pivotal Software, Inc. Medium
Vendor pom developer org URL https://www.spring.io Medium
Vendor pom groupid org.springframework.security Highest
Vendor pom name spring-security-core High
Vendor pom organization name Pivotal Software, Inc. High
Vendor pom organization url https://spring.io Medium
Vendor pom url https://spring.io/projects/spring-security Highest
Product file name spring-security-core High
Product jar package name core Highest
Product jar package name security Highest
Product jar package name springframework Highest
Product Manifest automatic-module-name spring.security.core Medium
Product Manifest Implementation-Title spring-security-core High
Product pom artifactid spring-security-core Highest
Product pom developer email info@pivotal.io Low
Product pom developer name Pivotal Low
Product pom developer org Pivotal Software, Inc. Low
Product pom developer org URL https://www.spring.io Low
Product pom groupid org.springframework.security Highest
Product pom name spring-security-core High
Product pom organization name Pivotal Software, Inc. Low
Product pom organization url https://spring.io Low
Product pom url https://spring.io/projects/spring-security Medium
Version file version 7.0.2 High
Version Manifest Implementation-Version 7.0.2 High
Version pom version 7.0.2 Highest
Related Dependencies
spring-security-config-7.0.2.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-config/7.0.2/spring-security-config-7.0.2.jar
MD5: 9f924bf7498fe14ee0d655e151775df1
SHA1: d15ffd7762c07248e43ee153e27362e89ff8c6b4
SHA256: 84f0532af906e60d3a9eddc596152a7f0cc522b2ba665a9d909782851fb2b4f9
pkg:maven/org.springframework.security/spring-security-config@7.0.2
spring-security-crypto-7.0.2.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-crypto/7.0.2/spring-security-crypto-7.0.2.jar
MD5: 39f1efd59135d39ab606f4a8ee9bb9f7
SHA1: 8cec3433f111e21d6349a9788a1efcf547b8db03
SHA256: ad909c728a4a293981742e31e9f0e4c72d5800595632f402f831c5f7c737c43d
pkg:maven/org.springframework.security/spring-security-crypto@7.0.2
spring-security-web-7.0.2.jar
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-web/7.0.2/spring-security-web-7.0.2.jar
MD5: d71ac1888336260436f5767ccd1afc80
SHA1: 8d55b2164a866d932031b77ce21fed35a4a3bfe0
SHA256: 564bb85e5c2d0606de83670b2d4257d6c9e43ea518e2e820a1c19f19ef562535
pkg:maven/org.springframework.security/spring-security-web@7.0.2
spring-security-web-6.5.7.jar: spring-security-webauthn.js
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-web/6.5.7/spring-security-web-6.5.7.jar/org/springframework/security/spring-security-webauthn.js
MD5: d8d90d854a23d021c2e758b3eebce213
SHA1: 7814ccd3adc2388f52b2658bf5fc30b457949ab6
SHA256: 044a2b8d7e995bff815565678631a2d3a5cc0aa96ef8ac35cfacb579307f77a9
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-spring-security7:compile
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
waffle-spring-boot-starter4:compile
waffle-demo-spring-form-jakarta:compile
waffle-demo-spring-filter-jakarta:compile
waffle-spring-security6:compile
waffle-distro-jakarta:runtime
waffle-spring-boot-starter3:compile
Evidence
Type Source Name Value Confidence
Related Dependencies
spring-security-web-7.0.2.jar: spring-security-webauthn.js
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-web/7.0.2/spring-security-web-7.0.2.jar/org/springframework/security/spring-security-webauthn.js
MD5: d8d90d854a23d021c2e758b3eebce213
SHA1: 7814ccd3adc2388f52b2658bf5fc30b457949ab6
SHA256: 044a2b8d7e995bff815565678631a2d3a5cc0aa96ef8ac35cfacb579307f77a9
spring-web-5.3.39.jar
Description:
Spring Web
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-web/5.3.39/spring-web-5.3.39.jar
MD5: 2b940bc714d6e29570b5dfa92755eefc
SHA1: 4ab03cd7376a6b3365d2798aac8d01dcd22c0174
SHA256: 444f243b936119b5488029f2d9399a3980855c60b493b9e2811464c6433a2b71
Referenced In Projects/Scopes:
waffle-distro:runtime
waffle-spring-security5:compile
waffle-demo-spring-form:compile
waffle-spring-boot-starter2:compile
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
waffle-demo-spring-filter:compile
spring-web-5.3.39.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
pkg:maven/com.github.waffle/waffle-spring-security5@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name spring-web High
Vendor hint analyzer vendor pivotal software Highest
Vendor hint analyzer vendor SpringSource Highest
Vendor hint analyzer vendor vmware Highest
Vendor jar package name springframework Highest
Vendor jar package name web Highest
Vendor Manifest automatic-module-name spring.web Medium
Vendor pom artifactid spring-web Highest
Vendor pom artifactid spring-web Low
Vendor pom developer email jhoeller@pivotal.io Low
Vendor pom developer id jhoeller Medium
Vendor pom developer name Juergen Hoeller Medium
Vendor pom groupid org.springframework Highest
Vendor pom name Spring Web High
Vendor pom organization name Spring IO High
Vendor pom organization url https://spring.io/projects/spring-framework Medium
Vendor pom url spring-projects/spring-framework Highest
Product file name spring-web High
Product hint analyzer product springsource_spring_framework Highest
Product jar package name springframework Highest
Product jar package name web Highest
Product Manifest automatic-module-name spring.web Medium
Product Manifest Implementation-Title spring-web High
Product pom artifactid spring-web Highest
Product pom developer email jhoeller@pivotal.io Low
Product pom developer id jhoeller Low
Product pom developer name Juergen Hoeller Low
Product pom groupid org.springframework Highest
Product pom name Spring Web High
Product pom organization name Spring IO Low
Product pom organization url https://spring.io/projects/spring-framework Low
Product pom url spring-projects/spring-framework High
Version file version 5.3.39 High
Version Manifest Implementation-Version 5.3.39 High
Version pom version 5.3.39 Highest
CVE-2016-1000027 suppress
Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. NOTE: the vendor's position is that untrusted data is not an intended use case. The product's behavior will not be changed because some users rely on deserialization of trusted data.
CWE-502 Deserialization of Untrusted Data
CVSSv3:
Base Score: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A
CVSSv2:
Base Score: HIGH (7.5)
Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P
References:
af854a3a-2127-422b-91ae-364da2661108 - https://security.netapp.com/advisory/ntap-20230420-0009/
af854a3a-2127-422b-91ae-364da2661108 - BROKEN_LINK,EXPLOIT,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - RELEASE_NOTES,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
cve@mitre.org - https://security.netapp.com/advisory/ntap-20230420-0009/
cve@mitre.org - BROKEN_LINK,EXPLOIT,THIRD_PARTY_ADVISORY
cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY
cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY
cve@mitre.org - THIRD_PARTY_ADVISORY
Vulnerable Software & Versions:
CVE-2024-38820 suppress
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.
NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity
CVSSv3:
Base Score: MEDIUM (5.3)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A
References:
Vulnerable Software & Versions: (show all )
tomcat-annotations-api-10.1.50.jar
Description:
Annotations Package
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-annotations-api/10.1.50/tomcat-annotations-api-10.1.50.jar
MD5: ebc495b44c49d241575aea63d4bd8a52
SHA1: 3509c5cf5689b01b3d2da8ed5f499cff8cd0f630
SHA256: b45f9041f07907706ff21f43070c8a546ff0f6939b132ea138d7efe2a5567d86
Referenced In Project/Scope: waffle-tomcat10:provided
tomcat-annotations-api-10.1.50.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.50
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-annotations-api High
Vendor Manifest bundle-symbolicname org.apache.tomcat-annotations-api Medium
Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaAnnotations;version:Version="2.1";uses:="jakarta.annotation,jakarta.annotation.security,jakarta.annotation.sql" Low
Vendor manifest: jakarta/annotation/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/annotation/security/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/annotation/sql/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-annotations-api Highest
Vendor pom artifactid tomcat-annotations-api Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-annotations-api High
Product jar package name annotation Highest
Product jar package name jakarta Highest
Product jar package name security Highest
Product jar package name sql Highest
Product Manifest Bundle-Name tomcat-annotations-api Medium
Product Manifest bundle-symbolicname org.apache.tomcat-annotations-api Medium
Product Manifest provide-capability osgi.contract;osgi.contract=JakartaAnnotations;version:Version="2.1";uses:="jakarta.annotation,jakarta.annotation.security,jakarta.annotation.sql" Low
Product manifest: jakarta/annotation/ Implementation-Title jakarta.annotation Medium
Product manifest: jakarta/annotation/ Specification-Title Jakarta Annotations Medium
Product manifest: jakarta/annotation/security/ Implementation-Title jakarta.annotation Medium
Product manifest: jakarta/annotation/security/ Specification-Title Jakarta Annotations Medium
Product manifest: jakarta/annotation/sql/ Implementation-Title jakarta.annotation Medium
Product manifest: jakarta/annotation/sql/ Specification-Title Jakarta Annotations Medium
Product pom artifactid tomcat-annotations-api Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 10.1.50 High
Version Manifest Bundle-Version 10.1.50 High
Version pom version 10.1.50 Highest
pkg:maven/org.apache.tomcat/tomcat-annotations-api@10.1.50
(Confidence :High)
cpe:2.3:a:www-sql_project:www-sql:10.1.50:*:*:*:*:*:*:*
(Confidence :Low)
suppress
tomcat-annotations-api-11.0.15.jar
Description:
Annotations Package
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-annotations-api/11.0.15/tomcat-annotations-api-11.0.15.jar
MD5: 286e7a968fa125eb86693e4650cd2d2d
SHA1: cdfc0b6577a55a2052ef11f33011834d850f6efb
SHA256: f54950e49b292aefb7e62f3471aeaf462b3893e791246068319cb7c6f1e4f9e5
Referenced In Project/Scope: waffle-tomcat11:provided
tomcat-annotations-api-11.0.15.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.15
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-annotations-api High
Vendor Manifest bundle-symbolicname org.apache.tomcat-annotations-api Medium
Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaAnnotations;version:Version="3.0";uses:="jakarta.annotation,jakarta.annotation.security,jakarta.annotation.sql" Low
Vendor manifest: jakarta/annotation/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/annotation/security/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/annotation/sql/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-annotations-api Highest
Vendor pom artifactid tomcat-annotations-api Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-annotations-api High
Product jar package name annotation Highest
Product jar package name jakarta Highest
Product jar package name security Highest
Product jar package name sql Highest
Product Manifest Bundle-Name tomcat-annotations-api Medium
Product Manifest bundle-symbolicname org.apache.tomcat-annotations-api Medium
Product Manifest provide-capability osgi.contract;osgi.contract=JakartaAnnotations;version:Version="3.0";uses:="jakarta.annotation,jakarta.annotation.security,jakarta.annotation.sql" Low
Product manifest: jakarta/annotation/ Implementation-Title jakarta.annotation Medium
Product manifest: jakarta/annotation/ Specification-Title Jakarta Annotations Medium
Product manifest: jakarta/annotation/security/ Implementation-Title jakarta.annotation Medium
Product manifest: jakarta/annotation/security/ Specification-Title Jakarta Annotations Medium
Product manifest: jakarta/annotation/sql/ Implementation-Title jakarta.annotation Medium
Product manifest: jakarta/annotation/sql/ Specification-Title Jakarta Annotations Medium
Product pom artifactid tomcat-annotations-api Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 11.0.15 High
Version Manifest Bundle-Version 11.0.15 High
Version pom version 11.0.15 Highest
pkg:maven/org.apache.tomcat/tomcat-annotations-api@11.0.15
(Confidence :High)
cpe:2.3:a:www-sql_project:www-sql:11.0.15:*:*:*:*:*:*:*
(Confidence :Low)
suppress
tomcat-annotations-api-9.0.113.jar
Description:
Annotations Package
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-annotations-api/9.0.113/tomcat-annotations-api-9.0.113.jar
MD5: c2345afe7690f32109d74d005e0602df
SHA1: 6c156b32284c8371adb228ae21688387627e558b
SHA256: edf6ee7ff5a84b43b855734a485c23bbd207f097a406912eda1999c2f19737d1
Referenced In Project/Scope: waffle-tomcat9:provided
tomcat-annotations-api-9.0.113.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.113
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-annotations-api High
Vendor Manifest bundle-symbolicname org.apache.tomcat-annotations-api Medium
Vendor Manifest provide-capability osgi.contract;osgi.contract=JavaAnnotation;version:List="1.3,1.2,1.1,1";uses:="javax.annotation,javax.annotation.security,javax.annotation.sql" Low
Vendor manifest: javax/annotation/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/annotation/security/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/annotation/sql/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-annotations-api Highest
Vendor pom artifactid tomcat-annotations-api Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-annotations-api High
Product jar package name annotation Highest
Product jar package name javax Highest
Product jar package name security Highest
Product jar package name sql Highest
Product Manifest Bundle-Name tomcat-annotations-api Medium
Product Manifest bundle-symbolicname org.apache.tomcat-annotations-api Medium
Product Manifest provide-capability osgi.contract;osgi.contract=JavaAnnotation;version:List="1.3,1.2,1.1,1";uses:="javax.annotation,javax.annotation.security,javax.annotation.sql" Low
Product manifest: javax/annotation/ Implementation-Title javax.annotation Medium
Product manifest: javax/annotation/ Specification-Title Common Annotations Medium
Product manifest: javax/annotation/security/ Implementation-Title javax.annotation Medium
Product manifest: javax/annotation/security/ Specification-Title Common Annotations Medium
Product manifest: javax/annotation/sql/ Implementation-Title javax.annotation Medium
Product manifest: javax/annotation/sql/ Specification-Title Common Annotations Medium
Product pom artifactid tomcat-annotations-api Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 9.0.113 High
Version Manifest Bundle-Version 9.0.113 High
Version pom version 9.0.113 Highest
pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.113
(Confidence :High)
cpe:2.3:a:www-sql_project:www-sql:9.0.113:*:*:*:*:*:*:*
(Confidence :Low)
suppress
tomcat-el-api-10.1.50.jar
Description:
Expression language package
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-el-api/10.1.50/tomcat-el-api-10.1.50.jar
MD5: 647931e7200892c02e0fb0dbf458512d
SHA1: 7b165c428be99d02e74cd4df0fd9f51bcc1f2459
SHA256: 903192eb56f2e3ad4e152c0445b5b79bb7c6f34c6317d080cc6fade137f51257
Referenced In Project/Scope: waffle-tomcat10:provided
tomcat-el-api-10.1.50.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.50
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-el-api High
Vendor jar package name el Highest
Vendor jar package name expression Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-el-api Medium
Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="5.0";uses:="jakarta.el" Low
Vendor manifest: jakarta/el/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-el-api Highest
Vendor pom artifactid tomcat-el-api Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-el-api High
Product jar package name el Highest
Product jar package name expression Highest
Product jar package name jakarta Highest
Product Manifest Bundle-Name tomcat-el-api Medium
Product Manifest bundle-symbolicname org.apache.tomcat-el-api Medium
Product Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="5.0";uses:="jakarta.el" Low
Product manifest: jakarta/el/ Implementation-Title jakarta.el Medium
Product manifest: jakarta/el/ Specification-Title Jakarta Expression Language Medium
Product pom artifactid tomcat-el-api Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 10.1.50 High
Version Manifest Bundle-Version 10.1.50 High
Version pom version 10.1.50 Highest
pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.50
(Confidence :High)
tomcat-el-api-11.0.15.jar
Description:
Expression language package
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-el-api/11.0.15/tomcat-el-api-11.0.15.jar
MD5: 6fa0f94e3c19f4166d6b96e5523423e3
SHA1: 61671c81b240335735e78e7bcdbde9552409478c
SHA256: 13216d39638761656b803bd255d9aa1ff9eea321fe56d307223a4c38f5f35f82
Referenced In Project/Scope: waffle-tomcat11:provided
tomcat-el-api-11.0.15.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.15
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-el-api High
Vendor jar package name el Highest
Vendor jar package name expression Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-el-api Medium
Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="6.0";uses:="jakarta.el" Low
Vendor manifest: jakarta/el/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-el-api Highest
Vendor pom artifactid tomcat-el-api Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-el-api High
Product jar package name el Highest
Product jar package name expression Highest
Product jar package name jakarta Highest
Product Manifest Bundle-Name tomcat-el-api Medium
Product Manifest bundle-symbolicname org.apache.tomcat-el-api Medium
Product Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="6.0";uses:="jakarta.el" Low
Product manifest: jakarta/el/ Implementation-Title jakarta.el Medium
Product manifest: jakarta/el/ Specification-Title Jakarta Expression Language Medium
Product pom artifactid tomcat-el-api Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 11.0.15 High
Version Manifest Bundle-Version 11.0.15 High
Version pom version 11.0.15 Highest
pkg:maven/org.apache.tomcat/tomcat-el-api@11.0.15
(Confidence :High)
tomcat-el-api-9.0.113.jar
Description:
Expression language package
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-el-api/9.0.113/tomcat-el-api-9.0.113.jar
MD5: 83ffdd9597af717d1e5d02f13b61fce4
SHA1: 02c8c0f3720f5b5ebd5744fdaf72373093883d18
SHA256: f3e7302f09f17a2ab5ff60b6ace0d11b1146c38b96f1ca89b91b138d0df54730
Referenced In Project/Scope: waffle-tomcat9:provided
tomcat-el-api-9.0.113.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.113
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-el-api High
Vendor jar package name el Highest
Vendor jar package name expression Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-el-api Medium
Vendor Manifest provide-capability osgi.contract;osgi.contract=JavaEL;version:List="3.0,2.2,2.1";uses:="javax.el" Low
Vendor manifest: javax/el/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-el-api Highest
Vendor pom artifactid tomcat-el-api Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-el-api High
Product jar package name el Highest
Product jar package name expression Highest
Product jar package name javax Highest
Product Manifest Bundle-Name tomcat-el-api Medium
Product Manifest bundle-symbolicname org.apache.tomcat-el-api Medium
Product Manifest provide-capability osgi.contract;osgi.contract=JavaEL;version:List="3.0,2.2,2.1";uses:="javax.el" Low
Product manifest: javax/el/ Implementation-Title javax.el Medium
Product manifest: javax/el/ Specification-Title Expression Language Medium
Product pom artifactid tomcat-el-api Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 9.0.113 High
Version Manifest Bundle-Version 9.0.113 High
Version pom version 9.0.113 Highest
pkg:maven/org.apache.tomcat/tomcat-el-api@9.0.113
(Confidence :High)
tomcat-embed-core-10.1.50.jar
Description:
Core Tomcat implementation
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-core/10.1.50/tomcat-embed-core-10.1.50.jar
MD5: 27bd7af317aa6648f1e635971ab3113a
SHA1: dcea3450bf8d83ca782297681c9703a4282e4a8c
SHA256: 35e4425d2402c823409b879906f741351c871467e789cbf0d0a22139a0f6e690
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-distro-jakarta:runtime
tomcat-embed-core-10.1.50.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter3@3.6.0-SNAPSHOT
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-embed-core High
Vendor jar package name apache Highest
Vendor jar package name core Highest
Vendor jar package name tomcat Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaAuthentication;version:Version="3.0";uses:="jakarta.security.auth.message,jakarta.security.auth.message.callback,jakarta.security.auth.message.config,jakarta.security.auth.message.module",osgi.contract;osgi.contract=JakartaServlet;version:Version="6.0";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor manifest: jakarta/security/auth/message/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/security/auth/message/callback/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/security/auth/message/config/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/security/auth/message/module/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/annotation/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/descriptor/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/http/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/resources/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-embed-core Highest
Vendor pom artifactid tomcat-embed-core Low
Vendor pom groupid org.apache.tomcat.embed Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-embed-core High
Product jar package name annotation Highest
Product jar package name apache Highest
Product jar package name auth Highest
Product jar package name core Highest
Product jar package name descriptor Highest
Product jar package name http Highest
Product jar package name jakarta Highest
Product jar package name message Highest
Product jar package name security Highest
Product jar package name servlet Highest
Product jar package name tomcat Highest
Product Manifest Bundle-Name tomcat-embed-core Medium
Product Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest provide-capability osgi.contract;osgi.contract=JakartaAuthentication;version:Version="3.0";uses:="jakarta.security.auth.message,jakarta.security.auth.message.callback,jakarta.security.auth.message.config,jakarta.security.auth.message.module",osgi.contract;osgi.contract=JakartaServlet;version:Version="6.0";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low
Product Manifest specification-title Apache Tomcat Medium
Product manifest: jakarta/security/auth/message/ Implementation-Title jakarta.security.auth.message Medium
Product manifest: jakarta/security/auth/message/ Specification-Title Jakarta Authentication SPI for Containers Medium
Product manifest: jakarta/security/auth/message/callback/ Implementation-Title jakarta.security.auth.message Medium
Product manifest: jakarta/security/auth/message/callback/ Specification-Title Jakarta Authentication SPI for Containers Medium
Product manifest: jakarta/security/auth/message/config/ Implementation-Title jakarta.security.auth.message Medium
Product manifest: jakarta/security/auth/message/config/ Specification-Title Jakarta Authentication SPI for Containers Medium
Product manifest: jakarta/security/auth/message/module/ Implementation-Title jakarta.security.auth.message Medium
Product manifest: jakarta/security/auth/message/module/ Specification-Title Jakarta Authentication SPI for Containers Medium
Product manifest: jakarta/servlet/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/annotation/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/annotation/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/descriptor/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/descriptor/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/http/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/http/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/resources/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/resources/ Specification-Title Jakarta Servlet Medium
Product pom artifactid tomcat-embed-core Highest
Product pom groupid org.apache.tomcat.embed Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 10.1.50 High
Version Manifest Bundle-Version 10.1.50 High
Version Manifest Implementation-Version 10.1.50 High
Version pom version 10.1.50 Highest
Related Dependencies
tomcat-api-10.1.50.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-api/10.1.50/tomcat-api-10.1.50.jar
MD5: b02d0dae76ed8929481bf6e43e89fc64
SHA1: 634abfed5c5a4eacefe7c180dc208b871b33c3a0
SHA256: 7ae723f599c6e40a71fe327b65d8299c6f1528bbee4aa522bff9899382a3511c
pkg:maven/org.apache.tomcat/tomcat-api@10.1.50
tomcat-catalina-10.1.50.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-catalina/10.1.50/tomcat-catalina-10.1.50.jar
MD5: b2e46f14eeab507bef399fb756fb9aea
SHA1: 5f16d938a2031bee90d14cc1ba48450f77c7ae74
SHA256: ecbb48e3fc318280eb3d437649a5222c201acd1e512555b78ee8d8560c5c391a
pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.50
tomcat-coyote-10.1.50.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-coyote/10.1.50/tomcat-coyote-10.1.50.jar
MD5: ecbe4bc7d135def78de522cc8420b757
SHA1: f4c2ae95dec99c9392fe21a747716e3d4b365ee2
SHA256: 6c57bf113ce8ec9bbbf287c21974632278ab766522a4f72cdb217342635fee58
pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.50
tomcat-embed-websocket-10.1.50.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-websocket/10.1.50/tomcat-embed-websocket-10.1.50.jar
MD5: 02c3523a65c2a534bd5e598fc8241f23
SHA1: f729d47835e40396ebc4bd7217c2d80994b6fa32
SHA256: fc1ce98b13f8338b2037cbd7662fd7c4ebb8d804d5b16be1fe3cd35bcda8220c
pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.50
tomcat-jaspic-api-10.1.50.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jaspic-api/10.1.50/tomcat-jaspic-api-10.1.50.jar
MD5: 94daf4e207cae2254fd52681a3890a4c
SHA1: 1951bbbf80b13bbef921124755a419e3b1879256
SHA256: c5abe8876fba68f5ac910b7bc2a49b862b5a7c00a43cbab44579c3e534f523b9
pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.50
tomcat-jsp-api-10.1.50.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jsp-api/10.1.50/tomcat-jsp-api-10.1.50.jar
MD5: 5bc8ff302f1605ac40417b52b6ccdc2d
SHA1: c276893d701ee18197468b5179c7184c3ee57ba1
SHA256: a060f081ae50dd65d1d3f6ef4d7c856d3b784a4444fbbcbfc7a6a4458f673a6b
pkg:maven/org.apache.tomcat/tomcat-jsp-api@10.1.50
tomcat-util-10.1.50.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-util/10.1.50/tomcat-util-10.1.50.jar
MD5: 2a9ea3c22f8adcbc30092bd52bc4a509
SHA1: 24af04651c70bce7c919ff265f80e140d1aa67ce
SHA256: 701ee0de3ffc2975be003409f327d616995e13ab8a7d173afbb08dbf3c017037
pkg:maven/org.apache.tomcat/tomcat-util@10.1.50
tomcat-util-scan-10.1.50.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-util-scan/10.1.50/tomcat-util-scan-10.1.50.jar
MD5: 4d8630562bfe9c9abb71be2e19beef2b
SHA1: 1c72248f8bac3324a77dcac725bad3d9fac938d9
SHA256: 725b2d752fbb05b6c1fd59d00edd2d1ced5805df4b1edb952ed2cf06d838095b
pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.50
tomcat-embed-core-11.0.15.jar
Description:
Core Tomcat implementation
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-core/11.0.15/tomcat-embed-core-11.0.15.jar
MD5: 69aad964e5a07592e5173a00793a5cfa
SHA1: aa20506537e3efa61afd6b57d79f9da6a55f37ae
SHA256: 25299ce44012a34775b4e1f5237a3d6ec8af52ace658e540d4dd61ee38064ba0
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
tomcat-embed-core-11.0.15.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.1
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-embed-core High
Vendor jar package name apache Highest
Vendor jar package name core Highest
Vendor jar package name tomcat Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaAuthentication;version:Version="3.1";uses:="jakarta.security.auth.message,jakarta.security.auth.message.callback,jakarta.security.auth.message.config,jakarta.security.auth.message.module",osgi.contract;osgi.contract=JakartaServlet;version:Version="6.1";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor manifest: jakarta/security/auth/message/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/security/auth/message/callback/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/security/auth/message/config/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/security/auth/message/module/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/annotation/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/descriptor/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/http/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/resources/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-embed-core Highest
Vendor pom artifactid tomcat-embed-core Low
Vendor pom groupid org.apache.tomcat.embed Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-embed-core High
Product jar package name annotation Highest
Product jar package name apache Highest
Product jar package name auth Highest
Product jar package name core Highest
Product jar package name descriptor Highest
Product jar package name http Highest
Product jar package name jakarta Highest
Product jar package name message Highest
Product jar package name security Highest
Product jar package name servlet Highest
Product jar package name tomcat Highest
Product Manifest Bundle-Name tomcat-embed-core Medium
Product Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest provide-capability osgi.contract;osgi.contract=JakartaAuthentication;version:Version="3.1";uses:="jakarta.security.auth.message,jakarta.security.auth.message.callback,jakarta.security.auth.message.config,jakarta.security.auth.message.module",osgi.contract;osgi.contract=JakartaServlet;version:Version="6.1";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low
Product Manifest specification-title Apache Tomcat Medium
Product manifest: jakarta/security/auth/message/ Implementation-Title jakarta.security.auth.message Medium
Product manifest: jakarta/security/auth/message/ Specification-Title Jakarta Authentication SPI for Containers Medium
Product manifest: jakarta/security/auth/message/callback/ Implementation-Title jakarta.security.auth.message Medium
Product manifest: jakarta/security/auth/message/callback/ Specification-Title Jakarta Authentication SPI for Containers Medium
Product manifest: jakarta/security/auth/message/config/ Implementation-Title jakarta.security.auth.message Medium
Product manifest: jakarta/security/auth/message/config/ Specification-Title Jakarta Authentication SPI for Containers Medium
Product manifest: jakarta/security/auth/message/module/ Implementation-Title jakarta.security.auth.message Medium
Product manifest: jakarta/security/auth/message/module/ Specification-Title Jakarta Authentication SPI for Containers Medium
Product manifest: jakarta/servlet/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/annotation/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/annotation/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/descriptor/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/descriptor/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/http/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/http/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/resources/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/resources/ Specification-Title Jakarta Servlet Medium
Product pom artifactid tomcat-embed-core Highest
Product pom groupid org.apache.tomcat.embed Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 11.0.15 High
Version Manifest Bundle-Version 11.0.15 High
Version Manifest Implementation-Version 11.0.15 High
Version pom version 11.0.15 Highest
Related Dependencies
tomcat-api-11.0.15.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-api/11.0.15/tomcat-api-11.0.15.jar
MD5: dc2caf072d9162d5ae50a5197e58b30f
SHA1: 6d2e8aa05bce8c2c61590612a5518ed0744ae87a
SHA256: 00cc3d668ce5e6f94933cea5f622c6333e492ab6baa574dbe2356558ac135556
pkg:maven/org.apache.tomcat/tomcat-api@11.0.15
tomcat-catalina-11.0.15.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-catalina/11.0.15/tomcat-catalina-11.0.15.jar
MD5: e5247f58d4c27630ac91314d45bd31b7
SHA1: d6bda41e142cdb1e03260953a041b30dd3d7b597
SHA256: 12a7ec356aa90c6b70e1213fdec3f36de2d0ea1560621f5f27a274e352c96443
pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.15
tomcat-coyote-11.0.15.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-coyote/11.0.15/tomcat-coyote-11.0.15.jar
MD5: bd6e9f3d8cb41fd8a1459a18fbc343f3
SHA1: 72ac3d2a038a09aedbd2c8ab2a291a301298d8ef
SHA256: 5eaf4d59d18792c5df3773faf538e4e17dc48d5751a3d54623b35361f56ac87e
pkg:maven/org.apache.tomcat/tomcat-coyote@11.0.15
tomcat-embed-websocket-11.0.15.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-websocket/11.0.15/tomcat-embed-websocket-11.0.15.jar
MD5: 98def64566407991d8121221b7d31fcd
SHA1: 4c0eced7d97fe8404c722d5ff02757a05a6d5033
SHA256: a74b0b165768a7fa9d0fcedce544c71523763f8d25e148f578dd78ce152fb533
pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@11.0.15
tomcat-jaspic-api-11.0.15.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jaspic-api/11.0.15/tomcat-jaspic-api-11.0.15.jar
MD5: 5fe613f95e9b65e4848f016cd237daaa
SHA1: f5d11372c80ef6364d705b951c6635c30b9cd609
SHA256: cb831866e03bc2d3b118c2dd34231bc905942ba79095019ce35b63bef2c6e035
pkg:maven/org.apache.tomcat/tomcat-jaspic-api@11.0.15
tomcat-jsp-api-11.0.15.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jsp-api/11.0.15/tomcat-jsp-api-11.0.15.jar
MD5: 24dc7ddf7276ac3a4b4ec0f7b7de5b54
SHA1: cea484405d0b75ef5522caae662201ce5b2edb5f
SHA256: e5f5d8fdb8e891955b1eb982cc01354daca3a9ea2578c357999d6742983cc3c6
pkg:maven/org.apache.tomcat/tomcat-jsp-api@11.0.15
tomcat-util-11.0.15.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-util/11.0.15/tomcat-util-11.0.15.jar
MD5: ae4a54b728cd61372bddd122aa688c22
SHA1: 3c2b9554fdf6b411e8d23d5f3ef50221190a76ab
SHA256: 43a773e55488a2f177e07b990c138cce80d82469e951ae9fb2c44294db82d184
pkg:maven/org.apache.tomcat/tomcat-util@11.0.15
tomcat-util-scan-11.0.15.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-util-scan/11.0.15/tomcat-util-scan-11.0.15.jar
MD5: 3d9cc69b772abaf1567c5d5f6a825189
SHA1: 5c8dd3fe9819a022fddeffc07118763d2d210f0c
SHA256: d533e767702ed5a8a74f121221c506ce726a1d212266acbe7783822d7f39e7b9
pkg:maven/org.apache.tomcat/tomcat-util-scan@11.0.15
tomcat-embed-core-9.0.113.jar
Description:
Core Tomcat implementation
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-core/9.0.113/tomcat-embed-core-9.0.113.jar
MD5: 7d9e5b10c51f00a2f6bb222a7db1c118
SHA1: b364692bca96817268b38f183fafd14dbd00950e
SHA256: fdd67f6953c538cebffaa27df6384f2c614bf9f5aca8947d52db38701bd13957
Referenced In Projects/Scopes:
waffle-distro:runtime
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
tomcat-embed-core-9.0.113.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-embed-core High
Vendor jar package name apache Highest
Vendor jar package name core Highest
Vendor jar package name tomcat Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest provide-capability osgi.contract;osgi.contract=JavaJASPIC;version:List="1.1,1";uses:="javax.security.auth.message,javax.security.auth.message.callback,javax.security.auth.message.config,javax.security.auth.message.module",osgi.contract;osgi.contract=JavaServlet;version:List="4.0,3.1,3,2.5";uses:="javax.servlet,javax.servlet.annotation,javax.servlet.descriptor,javax.servlet.http,javax.servlet.resources" Low
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor manifest: javax/security/auth/message/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/security/auth/message/callback/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/security/auth/message/config/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/security/auth/message/module/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/servlet/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/servlet/annotation/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/servlet/descriptor/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/servlet/http/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/servlet/resources/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-embed-core Highest
Vendor pom artifactid tomcat-embed-core Low
Vendor pom groupid org.apache.tomcat.embed Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-embed-core High
Product jar package name annotation Highest
Product jar package name apache Highest
Product jar package name auth Highest
Product jar package name core Highest
Product jar package name descriptor Highest
Product jar package name http Highest
Product jar package name java Highest
Product jar package name javax Highest
Product jar package name message Highest
Product jar package name security Highest
Product jar package name servlet Highest
Product jar package name servlets Highest
Product jar package name tomcat Highest
Product Manifest Bundle-Name tomcat-embed-core Medium
Product Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest provide-capability osgi.contract;osgi.contract=JavaJASPIC;version:List="1.1,1";uses:="javax.security.auth.message,javax.security.auth.message.callback,javax.security.auth.message.config,javax.security.auth.message.module",osgi.contract;osgi.contract=JavaServlet;version:List="4.0,3.1,3,2.5";uses:="javax.servlet,javax.servlet.annotation,javax.servlet.descriptor,javax.servlet.http,javax.servlet.resources" Low
Product Manifest specification-title Apache Tomcat Medium
Product manifest: javax/security/auth/message/ Implementation-Title javax.security.auth.message Medium
Product manifest: javax/security/auth/message/ Specification-Title Java Authentication SPI for Containers Medium
Product manifest: javax/security/auth/message/callback/ Implementation-Title javax.security.auth.message Medium
Product manifest: javax/security/auth/message/callback/ Specification-Title Java Authentication SPI for Containers Medium
Product manifest: javax/security/auth/message/config/ Implementation-Title javax.security.auth.message Medium
Product manifest: javax/security/auth/message/config/ Specification-Title Java Authentication SPI for Containers Medium
Product manifest: javax/security/auth/message/module/ Implementation-Title javax.security.auth.message Medium
Product manifest: javax/security/auth/message/module/ Specification-Title Java Authentication SPI for Containers Medium
Product manifest: javax/servlet/ Implementation-Title javax.servlet Medium
Product manifest: javax/servlet/ Specification-Title Java API for Servlets Medium
Product manifest: javax/servlet/annotation/ Implementation-Title javax.servlet Medium
Product manifest: javax/servlet/annotation/ Specification-Title Java API for Servlets Medium
Product manifest: javax/servlet/descriptor/ Implementation-Title javax.servlet Medium
Product manifest: javax/servlet/descriptor/ Specification-Title Java API for Servlets Medium
Product manifest: javax/servlet/http/ Implementation-Title javax.servlet Medium
Product manifest: javax/servlet/http/ Specification-Title Java API for Servlets Medium
Product manifest: javax/servlet/resources/ Implementation-Title javax.servlet Medium
Product manifest: javax/servlet/resources/ Specification-Title Java API for Servlets Medium
Product pom artifactid tomcat-embed-core Highest
Product pom groupid org.apache.tomcat.embed Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 9.0.113 High
Version Manifest Bundle-Version 9.0.113 High
Version Manifest Implementation-Version 9.0.113 High
Version pom version 9.0.113 Highest
Related Dependencies
tomcat-api-9.0.113.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-api/9.0.113/tomcat-api-9.0.113.jar
MD5: a1107d87f7e361a41b636d18e07c05b4
SHA1: 1573227969b3f8b46d54733cf41ebad78d6f08fe
SHA256: a2535d28045aed7c880d5eff44a32d430c875dddb526a846cfee8cb47aa5a0d8
pkg:maven/org.apache.tomcat/tomcat-api@9.0.113
tomcat-catalina-9.0.113.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-catalina/9.0.113/tomcat-catalina-9.0.113.jar
MD5: bc576903da872d890599c138aa62511e
SHA1: 1ad0325274de61c8f888ee31a4ff2d37c05e79e9
SHA256: 3611c483332cc81ea318295c51a5607722ebda5a8dc62817faf2489577ef1efc
pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.113
tomcat-coyote-9.0.113.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-coyote/9.0.113/tomcat-coyote-9.0.113.jar
MD5: bf162ac25cc49531fba8b115fbbf1a58
SHA1: 7a26ee0c322be5ad6e995e5b1549fe4bc000563c
SHA256: e3b79cb7059099f13eb9c4bf961700ea4f14a0dd56a6bb3e6f1a1ccce94dbd57
pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.113
tomcat-embed-websocket-9.0.113.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-websocket/9.0.113/tomcat-embed-websocket-9.0.113.jar
MD5: 07316451c7b5b9d7cd4cf8a9fcf31e80
SHA1: dd5cc7678e09b821963c1977426ddb306c99bd52
SHA256: 937173cc6d41b39d8fab7a3c2e3e536eb5f5e14de5fd8679588b49e0d6ff88bd
pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.113
tomcat-jaspic-api-9.0.113.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jaspic-api/9.0.113/tomcat-jaspic-api-9.0.113.jar
MD5: 0f0e6dfbe40a5e379b5bfa2c5d18a5bd
SHA1: c931c988962f06c7533cafc2ca8b4b28653dd1a1
SHA256: 2f197e313403b3c88107b000f902b9af81a34ed0f72b804647f9316abec16191
pkg:maven/org.apache.tomcat/tomcat-jaspic-api@9.0.113
tomcat-jsp-api-9.0.113.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jsp-api/9.0.113/tomcat-jsp-api-9.0.113.jar
MD5: 6c0736aa3e47a478583627e5c09d78b8
SHA1: 8a7d4de432fc91b314ad7b4ef23f2c386e686348
SHA256: 9f825f6e9750fb99a1dbbb1afbcd5921e053fc4401f49d593a1728e17aefff92
pkg:maven/org.apache.tomcat/tomcat-jsp-api@9.0.113
tomcat-util-9.0.113.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-util/9.0.113/tomcat-util-9.0.113.jar
MD5: bb7d9d08b908efa8acb02bc9bd899719
SHA1: 91a0dd5feb1d6f5a5ea5f1384d958611ef8b2af1
SHA256: 75cfec97a5a302a07f6d144109629294bdaeece81a73035ee04119ebbb9d55ae
pkg:maven/org.apache.tomcat/tomcat-util@9.0.113
tomcat-util-scan-9.0.113.jar
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-util-scan/9.0.113/tomcat-util-scan-9.0.113.jar
MD5: 97a8808fed9d12eaf684e1124cd7c96f
SHA1: 640eda5a7d5a3dc9464895f2f2aa4fbe28bd1581
SHA256: e2ea650a2fc90d2f99055992ca3f29eaf2b0473712c1df8f6410eeb17cd51cad
pkg:maven/org.apache.tomcat/tomcat-util-scan@9.0.113
tomcat-embed-el-10.1.50.jar
Description:
Core Tomcat implementation
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-el/10.1.50/tomcat-embed-el-10.1.50.jar
MD5: eb5955bab26a2d1a9ce5583844611478
SHA1: 85a483e2bd7325cbc642f896ff844ddbab2d390d
SHA256: 5f11d5bda911495bb519a339c237609a0da39bf34f0e87be0a25497d22a7f056
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter3:compile
waffle-spring-boot-autoconfigure3:compile
waffle-distro-jakarta:runtime
tomcat-embed-el-10.1.50.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo.jakarta/waffle-demo-spring-boot-filter3@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.9
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-embed-el High
Vendor jar package name apache Highest
Vendor jar package name el Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="5.0";uses:="jakarta.el",osgi.service;objectClass:List="jakarta.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor manifest: jakarta/el/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-embed-el Highest
Vendor pom artifactid tomcat-embed-el Low
Vendor pom groupid org.apache.tomcat.embed Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-embed-el High
Product jar package name apache Highest
Product jar package name el Highest
Product jar package name expression Highest
Product jar package name expressionfactory Highest
Product jar package name expressionfactoryimpl Highest
Product jar package name jakarta Highest
Product Manifest Bundle-Name tomcat-embed-jasper-el Medium
Product Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="5.0";uses:="jakarta.el",osgi.service;objectClass:List="jakarta.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low
Product Manifest specification-title Apache Tomcat Medium
Product manifest: jakarta/el/ Implementation-Title jakarta.annotation Medium
Product manifest: jakarta/el/ Specification-Title Jakarta Expression Language Medium
Product pom artifactid tomcat-embed-el Highest
Product pom groupid org.apache.tomcat.embed Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 10.1.50 High
Version Manifest Bundle-Version 10.1.50 High
Version Manifest Implementation-Version 10.1.50 High
Version pom version 10.1.50 Highest
pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@10.1.50
(Confidence :High)
tomcat-embed-el-11.0.15.jar
Description:
Core Tomcat implementation
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-el/11.0.15/tomcat-embed-el-11.0.15.jar
MD5: 617ed29f43eb23e65f520871beb8bb57
SHA1: f20bc5f17baa18abeca76a640ad774d6f80a265b
SHA256: 18b3c48bb62b1b01a3bbfe8f700574dca365b09f388fe299a65f8579e8e4d22a
Referenced In Projects/Scopes:
waffle-demo-spring-boot-filter4:compile
waffle-spring-boot-autoconfigure4:compile
tomcat-embed-el-11.0.15.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.1
pkg:maven/org.springframework.boot/spring-boot-starter-web@4.0.1
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-embed-el High
Vendor jar package name apache Highest
Vendor jar package name el Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="6.0";uses:="jakarta.el",osgi.service;objectClass:List="jakarta.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor manifest: jakarta/el/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-embed-el Highest
Vendor pom artifactid tomcat-embed-el Low
Vendor pom groupid org.apache.tomcat.embed Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-embed-el High
Product jar package name apache Highest
Product jar package name el Highest
Product jar package name expression Highest
Product jar package name expressionfactory Highest
Product jar package name expressionfactoryimpl Highest
Product jar package name jakarta Highest
Product Manifest Bundle-Name tomcat-embed-jasper-el Medium
Product Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="6.0";uses:="jakarta.el",osgi.service;objectClass:List="jakarta.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low
Product Manifest specification-title Apache Tomcat Medium
Product manifest: jakarta/el/ Implementation-Title jakarta.annotation Medium
Product manifest: jakarta/el/ Specification-Title Jakarta Expression Language Medium
Product pom artifactid tomcat-embed-el Highest
Product pom groupid org.apache.tomcat.embed Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 11.0.15 High
Version Manifest Bundle-Version 11.0.15 High
Version Manifest Implementation-Version 11.0.15 High
Version pom version 11.0.15 Highest
pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@11.0.15
(Confidence :High)
tomcat-embed-el-9.0.113.jar
Description:
Core Tomcat implementation
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-el/9.0.113/tomcat-embed-el-9.0.113.jar
MD5: 80b47fc18a1348ce8b6101db8493866f
SHA1: 8f4c51d31666de2539d2e4498a6494ecc50abc61
SHA256: a6761d2504837af3805c306938603cea6982fb11a80175ca039f86fb142243b1
Referenced In Projects/Scopes:
waffle-distro:runtime
waffle-spring-boot-autoconfigure2:compile
waffle-demo-spring-boot-filter2:compile
tomcat-embed-el-9.0.113.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/com.github.waffle.demo/waffle-demo-spring-boot-filter2@3.6.0-SNAPSHOT
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-embed-el High
Vendor jar package name apache Highest
Vendor jar package name el Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest provide-capability osgi.contract;osgi.contract=JavaEL;version:List="3.0,2.2,2.1";uses:="javax.el",osgi.service;objectClass:List="javax.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor manifest: javax/el/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-embed-el Highest
Vendor pom artifactid tomcat-embed-el Low
Vendor pom groupid org.apache.tomcat.embed Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-embed-el High
Product jar package name apache Highest
Product jar package name el Highest
Product jar package name expression Highest
Product jar package name expressionfactory Highest
Product jar package name expressionfactoryimpl Highest
Product jar package name javax Highest
Product Manifest Bundle-Name tomcat-embed-jasper-el Medium
Product Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest provide-capability osgi.contract;osgi.contract=JavaEL;version:List="3.0,2.2,2.1";uses:="javax.el",osgi.service;objectClass:List="javax.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low
Product Manifest specification-title Apache Tomcat Medium
Product manifest: javax/el/ Implementation-Title javax.el Medium
Product manifest: javax/el/ Specification-Title Expression Language Medium
Product pom artifactid tomcat-embed-el Highest
Product pom groupid org.apache.tomcat.embed Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 9.0.113 High
Version Manifest Bundle-Version 9.0.113 High
Version Manifest Implementation-Version 9.0.113 High
Version pom version 9.0.113 Highest
pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.113
(Confidence :High)
tomcat-jni-10.1.50.jar
Description:
Interface code to the native connector
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jni/10.1.50/tomcat-jni-10.1.50.jar
MD5: 4997e4ce6477744ac26c4fa1341ccb01
SHA1: 1feece517f1fcfa1deb7a789762a2a2fcce23e0b
SHA256: ed792fca33e936c0b0d1f17564a6eddec8bada6990b43d2f7164b381c2d3c8d2
Referenced In Project/Scope: waffle-tomcat10:provided
tomcat-jni-10.1.50.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.50
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-jni High
Vendor jar package name apache Highest
Vendor jar package name jni Highest
Vendor jar package name tomcat Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-jni Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor pom artifactid tomcat-jni Highest
Vendor pom artifactid tomcat-jni Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-jni High
Product jar package name apache Highest
Product jar package name jni Highest
Product jar package name tomcat Highest
Product Manifest Bundle-Name tomcat-jni Medium
Product Manifest bundle-symbolicname org.apache.tomcat-jni Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest specification-title Apache Tomcat Medium
Product pom artifactid tomcat-jni Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 10.1.50 High
Version Manifest Bundle-Version 10.1.50 High
Version Manifest Implementation-Version 10.1.50 High
Version pom version 10.1.50 Highest
pkg:maven/org.apache.tomcat/tomcat-jni@10.1.50
(Confidence :High)
tomcat-jni-11.0.15.jar
Description:
Interface code to the native connector
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jni/11.0.15/tomcat-jni-11.0.15.jar
MD5: 9721f1aee8717d6a6cbcca40749c5f04
SHA1: 6cb318dae778596a69e8ba76d4822886c3445da6
SHA256: 83bb3fb8aa8f4d13104579c775195210b06539596405cd18930acd398e5ab076
Referenced In Project/Scope: waffle-tomcat11:provided
tomcat-jni-11.0.15.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.15
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-jni High
Vendor jar package name apache Highest
Vendor jar package name jni Highest
Vendor jar package name tomcat Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-jni Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor pom artifactid tomcat-jni Highest
Vendor pom artifactid tomcat-jni Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-jni High
Product jar package name apache Highest
Product jar package name jni Highest
Product jar package name tomcat Highest
Product Manifest Bundle-Name tomcat-jni Medium
Product Manifest bundle-symbolicname org.apache.tomcat-jni Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest specification-title Apache Tomcat Medium
Product pom artifactid tomcat-jni Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 11.0.15 High
Version Manifest Bundle-Version 11.0.15 High
Version Manifest Implementation-Version 11.0.15 High
Version pom version 11.0.15 Highest
pkg:maven/org.apache.tomcat/tomcat-jni@11.0.15
(Confidence :High)
tomcat-jni-9.0.113.jar
Description:
Interface code to the native connector
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jni/9.0.113/tomcat-jni-9.0.113.jar
MD5: 65b5db497039ff9ae40113d7120e27b2
SHA1: 326129c9410685544b1ee00dfcdd001a20e444c0
SHA256: 3622cacb3aa0dae618f91408830008060cfef25b05e8999ece59938e4779c0ac
Referenced In Project/Scope: waffle-tomcat9:provided
tomcat-jni-9.0.113.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.113
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-jni High
Vendor jar package name apache Highest
Vendor jar package name jni Highest
Vendor jar package name tomcat Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-jni Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor pom artifactid tomcat-jni Highest
Vendor pom artifactid tomcat-jni Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-jni High
Product jar package name apache Highest
Product jar package name jni Highest
Product jar package name tomcat Highest
Product Manifest Bundle-Name tomcat-jni Medium
Product Manifest bundle-symbolicname org.apache.tomcat-jni Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest specification-title Apache Tomcat Medium
Product pom artifactid tomcat-jni Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 9.0.113 High
Version Manifest Bundle-Version 9.0.113 High
Version Manifest Implementation-Version 9.0.113 High
Version pom version 9.0.113 Highest
pkg:maven/org.apache.tomcat/tomcat-jni@9.0.113
(Confidence :High)
tomcat-juli-10.1.50.jar
Description:
Tomcat Core Logging Package
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-juli/10.1.50/tomcat-juli-10.1.50.jar
MD5: 95493c070c606eb3438bffff8caee50f
SHA1: b83a57b9de221e64b9c3f26979e432cd9e02397f
SHA256: a1cf221b462aa216dbd1b7c9d65758ed58608dd1f42206341127a003a4e28066
Referenced In Project/Scope: waffle-tomcat10:provided
tomcat-juli-10.1.50.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.50
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-juli High
Vendor jar package name apache Highest
Vendor jar package name juli Highest
Vendor jar package name logging Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-juli Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor pom artifactid tomcat-juli Highest
Vendor pom artifactid tomcat-juli Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-juli High
Product jar package name apache Highest
Product jar package name juli Highest
Product jar package name logging Highest
Product Manifest Bundle-Name tomcat-juli Medium
Product Manifest bundle-symbolicname org.apache.tomcat-juli Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest specification-title Apache Tomcat Medium
Product pom artifactid tomcat-juli Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 10.1.50 High
Version Manifest Bundle-Version 10.1.50 High
Version Manifest Implementation-Version 10.1.50 High
Version pom version 10.1.50 Highest
pkg:maven/org.apache.tomcat/tomcat-juli@10.1.50
(Confidence :High)
tomcat-juli-11.0.15.jar
Description:
Tomcat Core Logging Package
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-juli/11.0.15/tomcat-juli-11.0.15.jar
MD5: 511826d754b11a08510ae051059673fa
SHA1: 8105524a2b6c4f601abe103419b90e98c4017019
SHA256: 6402bf690079c16de760c1edef01f954c2dea77f80caa667edfd6cd723d46af3
Referenced In Project/Scope: waffle-tomcat11:provided
tomcat-juli-11.0.15.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.15
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-juli High
Vendor jar package name apache Highest
Vendor jar package name juli Highest
Vendor jar package name logging Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-juli Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor pom artifactid tomcat-juli Highest
Vendor pom artifactid tomcat-juli Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-juli High
Product jar package name apache Highest
Product jar package name juli Highest
Product jar package name logging Highest
Product Manifest Bundle-Name tomcat-juli Medium
Product Manifest bundle-symbolicname org.apache.tomcat-juli Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest specification-title Apache Tomcat Medium
Product pom artifactid tomcat-juli Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 11.0.15 High
Version Manifest Bundle-Version 11.0.15 High
Version Manifest Implementation-Version 11.0.15 High
Version pom version 11.0.15 Highest
pkg:maven/org.apache.tomcat/tomcat-juli@11.0.15
(Confidence :High)
tomcat-juli-9.0.113.jar
Description:
Tomcat Core Logging Package
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-juli/9.0.113/tomcat-juli-9.0.113.jar
MD5: b393162b7848e3344dbd0671d08204a1
SHA1: 15d9b95dd3687706d1e99fece3eec2e649487340
SHA256: d12f9eb9e55c1c980987b301857272bf4914d2d3967e440ee2fc073fe679f513
Referenced In Project/Scope: waffle-tomcat9:provided
tomcat-juli-9.0.113.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.113
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-juli High
Vendor jar package name apache Highest
Vendor jar package name juli Highest
Vendor jar package name logging Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-juli Medium
Vendor Manifest Implementation-Vendor Apache Software Foundation High
Vendor Manifest specification-vendor Apache Software Foundation Low
Vendor pom artifactid tomcat-juli Highest
Vendor pom artifactid tomcat-juli Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-juli High
Product jar package name apache Highest
Product jar package name juli Highest
Product jar package name logging Highest
Product Manifest Bundle-Name tomcat-juli Medium
Product Manifest bundle-symbolicname org.apache.tomcat-juli Medium
Product Manifest Implementation-Title Apache Tomcat High
Product Manifest specification-title Apache Tomcat Medium
Product pom artifactid tomcat-juli Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 9.0.113 High
Version Manifest Bundle-Version 9.0.113 High
Version Manifest Implementation-Version 9.0.113 High
Version pom version 9.0.113 Highest
pkg:maven/org.apache.tomcat/tomcat-juli@9.0.113
(Confidence :High)
tomcat-servlet-api-10.1.50.jar
Description:
jakarta.servlet package
License:
Apache License, Version 2.0 and
Common Development And Distribution License (CDDL) Version 1.0 and
Eclipse Public License - v 2.0
:
http://www.apache.org/licenses/LICENSE-2.0.txt and
http://www.opensource.org/licenses/cddl1.txt and
https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-servlet-api/10.1.50/tomcat-servlet-api-10.1.50.jar
MD5: 2d950359686fbc6ca31ffb708cde0f8e
SHA1: 2985d74cf26b982ff0f85008efd3bc7c3a1d85f0
SHA256: 4ed0e02000e468cca10f85c0ff4e9d1551d22734a19581f0ccf8803837157c75
Referenced In Project/Scope: waffle-tomcat10:provided
tomcat-servlet-api-10.1.50.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.50
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-servlet-api High
Vendor jar package name jakarta Highest
Vendor jar package name servlet Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-servlet-api Medium
Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaServlet;version:Version="6.0";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low
Vendor manifest: jakarta/servlet/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/annotation/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/descriptor/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/http/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/resources/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-servlet-api Highest
Vendor pom artifactid tomcat-servlet-api Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-servlet-api High
Product jar package name annotation Highest
Product jar package name descriptor Highest
Product jar package name http Highest
Product jar package name jakarta Highest
Product jar package name servlet Highest
Product Manifest Bundle-Name tomcat-servlet-api Medium
Product Manifest bundle-symbolicname org.apache.tomcat-servlet-api Medium
Product Manifest provide-capability osgi.contract;osgi.contract=JakartaServlet;version:Version="6.0";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low
Product manifest: jakarta/servlet/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/annotation/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/annotation/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/descriptor/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/descriptor/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/http/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/http/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/resources/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/resources/ Specification-Title Jakarta Servlet Medium
Product pom artifactid tomcat-servlet-api Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 10.1.50 High
Version Manifest Bundle-Version 10.1.50 High
Version pom version 10.1.50 Highest
pkg:maven/org.apache.tomcat/tomcat-servlet-api@10.1.50
(Confidence :High)
tomcat-servlet-api-11.0.15.jar
Description:
jakarta.servlet package
License:
Apache License, Version 2.0 and
Common Development And Distribution License (CDDL) Version 1.0 and
Eclipse Public License - v 2.0
:
http://www.apache.org/licenses/LICENSE-2.0.txt and
http://www.opensource.org/licenses/cddl1.txt and
https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-servlet-api/11.0.15/tomcat-servlet-api-11.0.15.jar
MD5: 90aa99b6de78278895ef37ac90e26a00
SHA1: e122d6654d32b3fba62136c4421aaafc34a46fe1
SHA256: e313c8182b4b9c1ef48b1d7315dcb91afc7fc408cca8ab4c580030a15ebb1522
Referenced In Project/Scope: waffle-tomcat11:provided
tomcat-servlet-api-11.0.15.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.15
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-servlet-api High
Vendor jar package name jakarta Highest
Vendor jar package name servlet Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-servlet-api Medium
Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaServlet;version:Version="6.1";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low
Vendor manifest: jakarta/servlet/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/annotation/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/descriptor/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/http/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: jakarta/servlet/resources/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-servlet-api Highest
Vendor pom artifactid tomcat-servlet-api Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-servlet-api High
Product jar package name annotation Highest
Product jar package name descriptor Highest
Product jar package name http Highest
Product jar package name jakarta Highest
Product jar package name servlet Highest
Product Manifest Bundle-Name tomcat-servlet-api Medium
Product Manifest bundle-symbolicname org.apache.tomcat-servlet-api Medium
Product Manifest provide-capability osgi.contract;osgi.contract=JakartaServlet;version:Version="6.1";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low
Product manifest: jakarta/servlet/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/annotation/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/annotation/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/descriptor/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/descriptor/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/http/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/http/ Specification-Title Jakarta Servlet Medium
Product manifest: jakarta/servlet/resources/ Implementation-Title jakarta.servlet Medium
Product manifest: jakarta/servlet/resources/ Specification-Title Jakarta Servlet Medium
Product pom artifactid tomcat-servlet-api Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 11.0.15 High
Version Manifest Bundle-Version 11.0.15 High
Version pom version 11.0.15 Highest
pkg:maven/org.apache.tomcat/tomcat-servlet-api@11.0.15
(Confidence :High)
tomcat-servlet-api-9.0.113.jar
Description:
javax.servlet package
License:
Apache License, Version 2.0 and
Common Development And Distribution License (CDDL) Version 1.0
:
http://www.apache.org/licenses/LICENSE-2.0.txt and
http://www.opensource.org/licenses/cddl1.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-servlet-api/9.0.113/tomcat-servlet-api-9.0.113.jar
MD5: a14b6e715522993b3581687df8b78653
SHA1: aca6e4aee9671bd5b2ef7336e5b91cfd569b978e
SHA256: 337986c02028167e5687a1b5ef7547febc0c3ef340ade8c993a6f1ea0fa48719
Referenced In Project/Scope: waffle-tomcat9:provided
tomcat-servlet-api-9.0.113.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.113
Evidence
Type Source Name Value Confidence
Vendor file name tomcat-servlet-api High
Vendor jar package name javax Highest
Vendor jar package name servlet Highest
Vendor Manifest bundle-symbolicname org.apache.tomcat-servlet-api Medium
Vendor Manifest provide-capability osgi.contract;osgi.contract=JavaServlet;version:List="4.0,3.1,3,2.5";uses:="javax.servlet,javax.servlet.annotation,javax.servlet.descriptor,javax.servlet.http,javax.servlet.resources" Low
Vendor manifest: javax/servlet/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/servlet/annotation/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/servlet/descriptor/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/servlet/http/ Implementation-Vendor Apache Software Foundation Medium
Vendor manifest: javax/servlet/resources/ Implementation-Vendor Apache Software Foundation Medium
Vendor pom artifactid tomcat-servlet-api Highest
Vendor pom artifactid tomcat-servlet-api Low
Vendor pom groupid org.apache.tomcat Highest
Vendor pom url https://tomcat.apache.org/ Highest
Product file name tomcat-servlet-api High
Product jar package name annotation Highest
Product jar package name descriptor Highest
Product jar package name http Highest
Product jar package name javax Highest
Product jar package name servlet Highest
Product Manifest Bundle-Name tomcat-servlet-api Medium
Product Manifest bundle-symbolicname org.apache.tomcat-servlet-api Medium
Product Manifest provide-capability osgi.contract;osgi.contract=JavaServlet;version:List="4.0,3.1,3,2.5";uses:="javax.servlet,javax.servlet.annotation,javax.servlet.descriptor,javax.servlet.http,javax.servlet.resources" Low
Product manifest: javax/servlet/ Implementation-Title javax.servlet Medium
Product manifest: javax/servlet/ Specification-Title Java API for Servlets Medium
Product manifest: javax/servlet/annotation/ Implementation-Title javax.servlet Medium
Product manifest: javax/servlet/annotation/ Specification-Title Java API for Servlets Medium
Product manifest: javax/servlet/descriptor/ Implementation-Title javax.servlet Medium
Product manifest: javax/servlet/descriptor/ Specification-Title Java API for Servlets Medium
Product manifest: javax/servlet/http/ Implementation-Title javax.servlet Medium
Product manifest: javax/servlet/http/ Specification-Title Java API for Servlets Medium
Product manifest: javax/servlet/resources/ Implementation-Title javax.servlet Medium
Product manifest: javax/servlet/resources/ Specification-Title Java API for Servlets Medium
Product pom artifactid tomcat-servlet-api Highest
Product pom groupid org.apache.tomcat Highest
Product pom url https://tomcat.apache.org/ Medium
Version file version 9.0.113 High
Version Manifest Bundle-Version 9.0.113 High
Version pom version 9.0.113 Highest
pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.113
(Confidence :High)