Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 11.1.1
Report Generated On: Thu, 2 Jan 2025 01:31:39 GMT
Dependencies Scanned: 46 (34 unique)
Vulnerable Dependencies: 2
Vulnerabilities Found: 4
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-01-02T01:18:14Z
NVD API Last Modified: 2025-01-01T14:15:23Z

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Highest Severity	CVE Count	Confidence	Evidence Count
ant-1.10.8.jar	cpe:2.3:a:apache:ant:1.10.8:::::::*	pkg:maven/org.apache.ant/ant@1.10.8	HIGH	3	Highest	24
asm-9.7.1.jar		pkg:maven/org.ow2.asm/asm@9.7.1		0		54
asm-commons-9.7.1.jar		pkg:maven/org.ow2.asm/asm-commons@9.7.1		0		58
asm-tree-9.7.1.jar		pkg:maven/org.ow2.asm/asm-tree@9.7.1		0		58
byte-buddy-1.15.11.jar		pkg:maven/net.bytebuddy/byte-buddy@1.15.11		0		29
byte-buddy-agent-1.15.11.jar		pkg:maven/net.bytebuddy/byte-buddy-agent@1.15.11		0		33
byte-buddy-agent-1.15.11.jar: attach_hotspot_windows.dll				0		2
byte-buddy-agent-1.15.11.jar: attach_hotspot_windows.dll				0		2
caffeine-3.1.8.jar		pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8		0		37
checker-qual-3.48.3.jar		pkg:maven/org.checkerframework/checker-qual@3.48.3		0		44
com.github.waffle:waffle-jna-jakarta:3.5.2-SNAPSHOT		pkg:maven/com.github.waffle/waffle-jna-jakarta@3.5.2-SNAPSHOT		0		6
ecj-3.40.0.jar		pkg:maven/org.eclipse.jdt/ecj@3.40.0		0		36
error_prone_annotations-2.36.0.jar		pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0		0		29
expressly-5.0.0.jar		pkg:maven/org.glassfish.expressly/expressly@5.0.0		0		45
j2objc-annotations-3.0.0.jar		pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0		0		33
jakarta.annotation-api-3.0.0.jar	cpe:2.3:a:oracle:projects:3.0.0:::::::*	pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0		0	Low	42
jakarta.el-api-6.0.1.jar	cpe:2.3:a:eclipse:jakarta_expression_language:6.0.1:::::::*	pkg:maven/jakarta.el/jakarta.el-api@6.0.1		0	Low	45
jakarta.servlet-api-6.0.0.jar	cpe:2.3:a:oracle:projects:6.0.0:::::::*	pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0		0	Low	44
jakarta.servlet.jsp-3.0.0.jar	cpe:2.3:a:web_project:web:3.0.0:::::::*	pkg:maven/org.glassfish.web/jakarta.servlet.jsp@3.0.0		0	Highest	47
jakarta.servlet.jsp-api-4.0.0.jar		pkg:maven/jakarta.servlet.jsp/jakarta.servlet.jsp-api@4.0.0		0		45
jakarta.servlet.jsp.jstl-3.0.1.jar	cpe:2.3:a:web_project:web:3.0.1:::::::*	pkg:maven/org.glassfish.web/jakarta.servlet.jsp.jstl@3.0.1		0	Highest	47
jcl-over-slf4j-2.0.16.jar		pkg:maven/org.slf4j/jcl-over-slf4j@2.0.16		0		31
jdtcore-3.1.0.jar	cpe:2.3:a:eclipse:org.eclipse.core.runtime:3.1.0:::::::*	pkg:maven/eclipse/jdtcore@3.1.0	MEDIUM	1	Low	27
jdtcore-3.1.0.jar: jdtCompilerAdapter.jar				0		7
jetty-ee-12.0.16.jar	cpe:2.3:a:eclipse:jetty:12.0.16:::::::* cpe:2.3:a:jetty:jetty:12.0.16:::::::* cpe:2.3:a:mortbay_jetty:jetty:12.0.16:::::::*	pkg:maven/org.eclipse.jetty/jetty-ee@12.0.16		0	Highest	33
jetty-server-12.0.16.jar	cpe:2.3:a:eclipse:jetty:12.0.16:::::::* cpe:2.3:a:jetty:jetty:12.0.16:::::::* cpe:2.3:a:jetty:jetty_http_server:12.0.16:::::::* cpe:2.3:a:mortbay_jetty:jetty:12.0.16:::::::*	pkg:maven/org.eclipse.jetty/jetty-server@12.0.16		0	Highest	33
jna-5.16.0.jar	cpe:2.3:a:oracle:java_se:5.16.0:::::::*	pkg:maven/net.java.dev.jna/jna@5.16.0		0	Low	48
jna-5.16.0.jar: jnidispatch.dll				0		2
jna-5.16.0.jar: jnidispatch.dll				0		2
jna-5.16.0.jar: jnidispatch.dll				0		2
jna-platform-5.16.0.jar		pkg:maven/net.java.dev.jna/jna-platform@5.16.0		0		44
jsr305-3.0.2.jar		pkg:maven/com.google.code.findbugs/jsr305@3.0.2		0		17
slf4j-api-2.0.16.jar		pkg:maven/org.slf4j/slf4j-api@2.0.16		0		29
spotbugs-annotations-4.8.6.jar		pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6		0		53

Dependencies (vulnerable)

ant-1.10.8.jar

File Path: /home/runner/.m2/repository/org/apache/ant/ant/1.10.8/ant-1.10.8.jar
MD5: 4492182f592ad9779a5de60e3f0ea3c4
SHA1: ae148abb0532b685c5eeb22fdec9d124e89be5de
SHA256:b96b46fd2b4b00e42684c3085b0d16dde975e7b8e64822b0bf52edf5fd387d8d
Referenced In Project/Scope: waffle-jetty-jakarta:provided
ant-1.10.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.glassfish.web/jakarta.servlet.jsp@3.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	ant	High
Vendor	jar	package name	ant	Highest
Vendor	jar	package name	apache	Highest
Vendor	manifest: org/apache/tools/ant/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	pom	artifactid	ant	Highest
Vendor	pom	artifactid	ant	Low
Vendor	pom	groupid	org.apache.ant	Highest
Vendor	pom	name	Apache Ant Core	High
Vendor	pom	parent-artifactid	ant-parent	Low
Vendor	pom	url	https://ant.apache.org/	Highest
Product	file	name	ant	High
Product	jar	package name	ant	Highest
Product	jar	package name	apache	Highest
Product	jar	package name	tools	Highest
Product	manifest: org/apache/tools/ant/	Implementation-Title	org.apache.tools.ant	Medium
Product	manifest: org/apache/tools/ant/	Specification-Title	Apache Ant	Medium
Product	pom	artifactid	ant	Highest
Product	pom	groupid	org.apache.ant	Highest
Product	pom	name	Apache Ant Core	High
Product	pom	parent-artifactid	ant-parent	Medium
Product	pom	url	https://ant.apache.org/	Medium
Version	file	version	1.10.8	High
Version	manifest: org/apache/tools/ant/	Implementation-Version	1.10.8	Medium
Version	pom	version	1.10.8	Highest

Related Dependencies

Identifiers

pkg:maven/org.apache.ant/ant@1.10.8 (Confidence:High)
cpe:2.3:a:apache:ant:1.10.8:*:*:*:*:*:*:* (Confidence:Highest)

Published Vulnerabilities

CVE-2020-11979

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.

CWE-379 Creation of Temporary File in Directory with Insecure Permissions, NVD-CWE-Other

CVSSv2:

Base Score: MEDIUM (5.0)
Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSSv3:

Base Score: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A

References:

OSSINDEX - [CVE-2020-11979] CWE-379: Creation of Temporary File in Directory with Incorrect Permissions
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-11979
OSSIndex - https://ant.apache.org/security.html
OSSIndex - https://lists.apache.org/thread.html/rc3c8ef9724b5b1e171529b47f4b35cb7920edfb6e917fa21eb6c64ea%40%3Cdev.ant.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
security@apache.org - MAILING_LIST,VENDOR_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - THIRD_PARTY_ADVISORY
security@apache.org - THIRD_PARTY_ADVISORY

Vulnerable Software & Versions: (show all)

CVE-2021-36373

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-Other

CVSSv2:

Base Score: MEDIUM (4.3)
Vector: /AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSSv3:

Base Score: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:1.8/RC:R/MAV:A

References:

OSSINDEX - [CVE-2021-36373] CWE-130: Improper Handling of Length Parameter Inconsistency
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36373
OSSIndex - https://ant.apache.org/security.html
OSSIndex - https://lists.apache.org/thread.html/r54afdab05e01de970649c2d91a993f68a6b00cd73e6e34e16c832d46%40%3Cuser.ant.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - NOT_APPLICABLE
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
security@apache.org - MAILING_LIST,VENDOR_ADVISORY
security@apache.org - NOT_APPLICABLE
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,VENDOR_ADVISORY
security@apache.org - THIRD_PARTY_ADVISORY

Vulnerable Software & Versions: (show all)

CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-Other

CVSSv2:

Base Score: MEDIUM (4.3)
Vector: /AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSSv3:

Base Score: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:1.8/RC:R/MAV:A

References:

OSSINDEX - [CVE-2021-36374] CWE-130: Improper Handling of Length Parameter Inconsistency
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36374
OSSIndex - https://ant.apache.org/security.html
OSSIndex - https://lists.apache.org/thread.html/rdd5412a5b9a25aed2a02c3317052d38a97128314d50bc1ed36e81d38%40%3Cuser.ant.apache.org%3E
af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY
security@apache.org - MAILING_LIST,VENDOR_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,THIRD_PARTY_ADVISORY
security@apache.org - PATCH,VENDOR_ADVISORY
security@apache.org - THIRD_PARTY_ADVISORY

Vulnerable Software & Versions: (show all)

asm-9.7.1.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html

File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.7.1/asm-9.7.1.jar
MD5: e2cdd32d198ad31427d298eee9d39d8d
SHA1: f0ed132a49244b042cd0e15702ab9f2ce3cc8436
SHA256:8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/org.ow2.asm/asm-commons@9.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	asm	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	objectweb	Highest
Vendor	Manifest	bundle-docurl	http://asm.ow2.org	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Vendor	pom	artifactid	asm	Highest
Vendor	pom	artifactid	asm	Low
Vendor	pom	developer email	ebruneton@free.fr	Low
Vendor	pom	developer email	eu@javatx.org	Low
Vendor	pom	developer email	forax@univ-mlv.fr	Low
Vendor	pom	developer id	ebruneton	Medium
Vendor	pom	developer id	eu	Medium
Vendor	pom	developer id	forax	Medium
Vendor	pom	developer name	Eric Bruneton	Medium
Vendor	pom	developer name	Eugene Kuleshov	Medium
Vendor	pom	developer name	Remi Forax	Medium
Vendor	pom	groupid	org.ow2.asm	Highest
Vendor	pom	name	asm	High
Vendor	pom	organization name	OW2	High
Vendor	pom	organization url	http://www.ow2.org/	Medium
Vendor	pom	parent-artifactid	ow2	Low
Vendor	pom	parent-groupid	org.ow2	Medium
Vendor	pom	url	http://asm.ow2.io/	Highest
Product	file	name	asm	High
Product	jar	package name	asm	Highest
Product	jar	package name	objectweb	Highest
Product	Manifest	bundle-docurl	http://asm.ow2.org	Low
Product	Manifest	Bundle-Name	org.objectweb.asm	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Product	Manifest	Implementation-Title	ASM, a very small and fast Java bytecode manipulation framework	High
Product	pom	artifactid	asm	Highest
Product	pom	developer email	ebruneton@free.fr	Low
Product	pom	developer email	eu@javatx.org	Low
Product	pom	developer email	forax@univ-mlv.fr	Low
Product	pom	developer id	ebruneton	Low
Product	pom	developer id	eu	Low
Product	pom	developer id	forax	Low
Product	pom	developer name	Eric Bruneton	Low
Product	pom	developer name	Eugene Kuleshov	Low
Product	pom	developer name	Remi Forax	Low
Product	pom	groupid	org.ow2.asm	Highest
Product	pom	name	asm	High
Product	pom	organization name	OW2	Low
Product	pom	organization url	http://www.ow2.org/	Low
Product	pom	parent-artifactid	ow2	Medium
Product	pom	parent-groupid	org.ow2	Medium
Product	pom	url	http://asm.ow2.io/	Medium
Version	file	version	9.7.1	High
Version	Manifest	Bundle-Version	9.7.1	High
Version	Manifest	Implementation-Version	9.7.1	High
Version	pom	parent-version	9.7.1	Low
Version	pom	version	9.7.1	Highest

Identifiers

pkg:maven/org.ow2.asm/asm@9.7.1 (Confidence:High)

asm-commons-9.7.1.jar

Description:

Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html

File Path: /home/runner/.m2/repository/org/ow2/asm/asm-commons/9.7.1/asm-commons-9.7.1.jar
MD5: 8344aea3c8b7d707e9d35a62710e77c9
SHA1: 406c6a2225cfe1819f102a161e54cc16a5c24f75
SHA256:9a579b54d292ad9be171d4313fd4739c635592c2b5ac3a459bbd1049cddec6a0
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	asm-commons	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	objectweb	Highest
Vendor	Manifest	bundle-docurl	http://asm.ow2.org	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	org.objectweb.asm.commons	Medium
Vendor	Manifest	module-requires	org.objectweb.asm;transitive=true,org.objectweb.asm.tree;transitive=true	Low
Vendor	pom	artifactid	asm-commons	Highest
Vendor	pom	artifactid	asm-commons	Low
Vendor	pom	developer email	ebruneton@free.fr	Low
Vendor	pom	developer email	eu@javatx.org	Low
Vendor	pom	developer email	forax@univ-mlv.fr	Low
Vendor	pom	developer id	ebruneton	Medium
Vendor	pom	developer id	eu	Medium
Vendor	pom	developer id	forax	Medium
Vendor	pom	developer name	Eric Bruneton	Medium
Vendor	pom	developer name	Eugene Kuleshov	Medium
Vendor	pom	developer name	Remi Forax	Medium
Vendor	pom	groupid	org.ow2.asm	Highest
Vendor	pom	name	asm-commons	High
Vendor	pom	organization name	OW2	High
Vendor	pom	organization url	http://www.ow2.org/	Medium
Vendor	pom	parent-artifactid	ow2	Low
Vendor	pom	parent-groupid	org.ow2	Medium
Vendor	pom	url	http://asm.ow2.io/	Highest
Product	file	name	asm-commons	High
Product	jar	package name	asm	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	objectweb	Highest
Product	Manifest	bundle-docurl	http://asm.ow2.org	Low
Product	Manifest	Bundle-Name	org.objectweb.asm.commons	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	org.objectweb.asm.commons	Medium
Product	Manifest	Implementation-Title	Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework	High
Product	Manifest	module-requires	org.objectweb.asm;transitive=true,org.objectweb.asm.tree;transitive=true	Low
Product	pom	artifactid	asm-commons	Highest
Product	pom	developer email	ebruneton@free.fr	Low
Product	pom	developer email	eu@javatx.org	Low
Product	pom	developer email	forax@univ-mlv.fr	Low
Product	pom	developer id	ebruneton	Low
Product	pom	developer id	eu	Low
Product	pom	developer id	forax	Low
Product	pom	developer name	Eric Bruneton	Low
Product	pom	developer name	Eugene Kuleshov	Low
Product	pom	developer name	Remi Forax	Low
Product	pom	groupid	org.ow2.asm	Highest
Product	pom	name	asm-commons	High
Product	pom	organization name	OW2	Low
Product	pom	organization url	http://www.ow2.org/	Low
Product	pom	parent-artifactid	ow2	Medium
Product	pom	parent-groupid	org.ow2	Medium
Product	pom	url	http://asm.ow2.io/	Medium
Version	file	version	9.7.1	High
Version	Manifest	Bundle-Version	9.7.1	High
Version	Manifest	Implementation-Version	9.7.1	High
Version	pom	parent-version	9.7.1	Low
Version	pom	version	9.7.1	Highest

Identifiers

pkg:maven/org.ow2.asm/asm-commons@9.7.1 (Confidence:High)

asm-tree-9.7.1.jar

Description:

Tree API of ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html

File Path: /home/runner/.m2/repository/org/ow2/asm/asm-tree/9.7.1/asm-tree-9.7.1.jar
MD5: e85029f613b6469989cc7cf53fe06b74
SHA1: 3a53139787663b139de76b627fca0084ab60d32c
SHA256:9929881f59eb6b840e86d54570c77b59ce721d104e6dfd7a40978991c2d3b41f
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/org.ow2.asm/asm-commons@9.7.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	asm-tree	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	objectweb	Highest
Vendor	jar	package name	tree	Highest
Vendor	Manifest	bundle-docurl	http://asm.ow2.org	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	org.objectweb.asm.tree	Medium
Vendor	Manifest	module-requires	org.objectweb.asm;transitive=true	Low
Vendor	pom	artifactid	asm-tree	Highest
Vendor	pom	artifactid	asm-tree	Low
Vendor	pom	developer email	ebruneton@free.fr	Low
Vendor	pom	developer email	eu@javatx.org	Low
Vendor	pom	developer email	forax@univ-mlv.fr	Low
Vendor	pom	developer id	ebruneton	Medium
Vendor	pom	developer id	eu	Medium
Vendor	pom	developer id	forax	Medium
Vendor	pom	developer name	Eric Bruneton	Medium
Vendor	pom	developer name	Eugene Kuleshov	Medium
Vendor	pom	developer name	Remi Forax	Medium
Vendor	pom	groupid	org.ow2.asm	Highest
Vendor	pom	name	asm-tree	High
Vendor	pom	organization name	OW2	High
Vendor	pom	organization url	http://www.ow2.org/	Medium
Vendor	pom	parent-artifactid	ow2	Low
Vendor	pom	parent-groupid	org.ow2	Medium
Vendor	pom	url	http://asm.ow2.io/	Highest
Product	file	name	asm-tree	High
Product	jar	package name	asm	Highest
Product	jar	package name	objectweb	Highest
Product	jar	package name	tree	Highest
Product	Manifest	bundle-docurl	http://asm.ow2.org	Low
Product	Manifest	Bundle-Name	org.objectweb.asm.tree	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	org.objectweb.asm.tree	Medium
Product	Manifest	Implementation-Title	Tree API of ASM, a very small and fast Java bytecode manipulation framework	High
Product	Manifest	module-requires	org.objectweb.asm;transitive=true	Low
Product	pom	artifactid	asm-tree	Highest
Product	pom	developer email	ebruneton@free.fr	Low
Product	pom	developer email	eu@javatx.org	Low
Product	pom	developer email	forax@univ-mlv.fr	Low
Product	pom	developer id	ebruneton	Low
Product	pom	developer id	eu	Low
Product	pom	developer id	forax	Low
Product	pom	developer name	Eric Bruneton	Low
Product	pom	developer name	Eugene Kuleshov	Low
Product	pom	developer name	Remi Forax	Low
Product	pom	groupid	org.ow2.asm	Highest
Product	pom	name	asm-tree	High
Product	pom	organization name	OW2	Low
Product	pom	organization url	http://www.ow2.org/	Low
Product	pom	parent-artifactid	ow2	Medium
Product	pom	parent-groupid	org.ow2	Medium
Product	pom	url	http://asm.ow2.io/	Medium
Version	file	version	9.7.1	High
Version	Manifest	Bundle-Version	9.7.1	High
Version	Manifest	Implementation-Version	9.7.1	High
Version	pom	parent-version	9.7.1	Low
Version	pom	version	9.7.1	Highest

Identifiers

pkg:maven/org.ow2.asm/asm-tree@9.7.1 (Confidence:High)

byte-buddy-1.15.11.jar

Description:

        Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy/1.15.11/byte-buddy-1.15.11.jar
MD5: 603bc53c7a294f23765bfb7e1820ad44
SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c
SHA256:fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90
Referenced In Project/Scope: waffle-jetty-jakarta:compile
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	byte-buddy	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	build	Highest
Vendor	jar	package name	bytebuddy	Highest
Vendor	jar	package name	net	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	byte-buddy	Highest
Vendor	pom	artifactid	byte-buddy	Low
Vendor	pom	groupid	net.bytebuddy	Highest
Vendor	pom	name	Byte Buddy (without dependencies)	High
Vendor	pom	parent-artifactid	byte-buddy-parent	Low
Product	file	name	byte-buddy	High
Product	jar	package name	asm	Highest
Product	jar	package name	build	Highest
Product	jar	package name	bytebuddy	Highest
Product	jar	package name	net	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	Byte Buddy (without dependencies)	Medium
Product	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	byte-buddy	Highest
Product	pom	groupid	net.bytebuddy	Highest
Product	pom	name	Byte Buddy (without dependencies)	High
Product	pom	parent-artifactid	byte-buddy-parent	Medium
Version	file	version	1.15.11	High
Version	Manifest	Bundle-Version	1.15.11	High
Version	pom	version	1.15.11	Highest

Identifiers

pkg:maven/net.bytebuddy/byte-buddy@1.15.11 (Confidence:High)

byte-buddy-agent-1.15.11.jar

Description:

The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy-agent/1.15.11/byte-buddy-agent-1.15.11.jar
MD5: 449a1534609bf3535d74cbb10b4ed074
SHA1: a38b16385e867f59a641330f0362ebe742788ed8
SHA256:316d2c0795c2a4d4c4756f2e6f9349837c7430ac34e0477ead874d05f5cc19e5
Referenced In Project/Scope: waffle-jetty-jakarta:compile
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	byte-buddy-agent	High
Vendor	jar	package name	agent	Highest
Vendor	jar	package name	bytebuddy	Highest
Vendor	jar	package name	net	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy-agent	Medium
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	Manifest	can-retransform-classes	true	Low
Vendor	Manifest	can-set-native-method-prefix	true	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	byte-buddy-agent	Highest
Vendor	pom	artifactid	byte-buddy-agent	Low
Vendor	pom	groupid	net.bytebuddy	Highest
Vendor	pom	name	Byte Buddy agent	High
Vendor	pom	parent-artifactid	byte-buddy-parent	Low
Product	file	name	byte-buddy-agent	High
Product	jar	package name	agent	Highest
Product	jar	package name	bytebuddy	Highest
Product	jar	package name	net	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	Byte Buddy agent	Medium
Product	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy-agent	Medium
Product	Manifest	can-redefine-classes	true	Low
Product	Manifest	can-retransform-classes	true	Low
Product	Manifest	can-set-native-method-prefix	true	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	byte-buddy-agent	Highest
Product	pom	groupid	net.bytebuddy	Highest
Product	pom	name	Byte Buddy agent	High
Product	pom	parent-artifactid	byte-buddy-parent	Medium
Version	file	version	1.15.11	High
Version	Manifest	Bundle-Version	1.15.11	High
Version	pom	version	1.15.11	Highest

Identifiers

pkg:maven/net.bytebuddy/byte-buddy-agent@1.15.11 (Confidence:High)

byte-buddy-agent-1.15.11.jar: attach_hotspot_windows.dll

File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy-agent/1.15.11/byte-buddy-agent-1.15.11.jar/win32-x86-64/attach_hotspot_windows.dll
MD5: 053a783e5777c6a9867c27d51af89677
SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76
SHA256:16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20
Referenced In Project/Scope: waffle-jetty-jakarta:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	attach_hotspot_windows	High
Product	file	name	attach_hotspot_windows	High

Identifiers

None

byte-buddy-agent-1.15.11.jar: attach_hotspot_windows.dll

File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy-agent/1.15.11/byte-buddy-agent-1.15.11.jar/win32-x86/attach_hotspot_windows.dll
MD5: fbca33102ac97be0ed496c0f78e466b3
SHA1: c4df05146a86a6d073769bb697d550ef42518ed5
SHA256:810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72
Referenced In Project/Scope: waffle-jetty-jakarta:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	attach_hotspot_windows	High
Product	file	name	attach_hotspot_windows	High

Identifiers

None

caffeine-3.1.8.jar

Description:

A high performance caching library

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/github/ben-manes/caffeine/caffeine/3.1.8/caffeine-3.1.8.jar
MD5: b19301179903e8781776397d9923f7c8
SHA1: 24795585df8afaf70a2cd534786904ea5889c047
SHA256:7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3
Referenced In Project/Scope: waffle-jetty-jakarta:compile
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	caffeine	High
Vendor	jar	package name	benmanes	Highest
Vendor	jar	package name	cache	Highest
Vendor	jar	package name	caffeine	Highest
Vendor	jar	package name	github	Highest
Vendor	Manifest	automatic-module-name	com.github.benmanes.caffeine	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-symbolicname	com.github.ben-manes.caffeine	Medium
Vendor	pom	artifactid	caffeine	Highest
Vendor	pom	artifactid	caffeine	Low
Vendor	pom	developer email	ben.manes@gmail.com	Low
Vendor	pom	developer id	ben-manes	Medium
Vendor	pom	developer name	Ben Manes	Medium
Vendor	pom	groupid	com.github.ben-manes.caffeine	Highest
Vendor	pom	name	Caffeine cache	High
Vendor	pom	url	ben-manes/caffeine	Highest
Product	file	name	caffeine	High
Product	jar	package name	benmanes	Highest
Product	jar	package name	cache	Highest
Product	jar	package name	caffeine	Highest
Product	jar	package name	github	Highest
Product	Manifest	automatic-module-name	com.github.benmanes.caffeine	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	Bundle-Name	com.github.ben-manes.caffeine	Medium
Product	Manifest	bundle-symbolicname	com.github.ben-manes.caffeine	Medium
Product	Manifest	Implementation-Title	A high performance caching library	High
Product	pom	artifactid	caffeine	Highest
Product	pom	developer email	ben.manes@gmail.com	Low
Product	pom	developer id	ben-manes	Low
Product	pom	developer name	Ben Manes	Low
Product	pom	groupid	com.github.ben-manes.caffeine	Highest
Product	pom	name	Caffeine cache	High
Product	pom	url	ben-manes/caffeine	High
Version	file	version	3.1.8	High
Version	Manifest	Bundle-Version	3.1.8	High
Version	Manifest	Implementation-Version	3.1.8	High
Version	pom	version	3.1.8	Highest

Identifiers

pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8 (Confidence:High)

checker-qual-3.48.3.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: http://opensource.org/licenses/MIT

File Path: /home/runner/.m2/repository/org/checkerframework/checker-qual/3.48.3/checker-qual-3.48.3.jar
MD5: 9fe3deae54d20bd78960459c952ac7d4
SHA1: c48effe7d78de3cf5e8a98c614281ec6a2466a77
SHA256:443685b1b232803baaf803c15d6f5a425473c6f7b81c5f276dfcf93288e389a5
Referenced In Project/Scope: waffle-jetty-jakarta:compile
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	checker-qual	High
Vendor	jar	package name	checker	Highest
Vendor	jar	package name	checkerframework	Highest
Vendor	jar	package name	framework	Highest
Vendor	jar	package name	qual	Highest
Vendor	Manifest	bundle-symbolicname	checker-qual	Medium
Vendor	Manifest	implementation-url	https://checkerframework.org	Low
Vendor	pom	artifactid	checker-qual	Highest
Vendor	pom	artifactid	checker-qual	Low
Vendor	pom	developer email	mernst@cs.washington.edu	Low
Vendor	pom	developer email	smillst@cs.washington.edu	Low
Vendor	pom	developer id	mernst	Medium
Vendor	pom	developer id	smillst	Medium
Vendor	pom	developer name	Michael Ernst	Medium
Vendor	pom	developer name	Suzanne Millstein	Medium
Vendor	pom	developer org	University of Washington	Medium
Vendor	pom	developer org URL	https://www.cs.washington.edu/	Medium
Vendor	pom	groupid	org.checkerframework	Highest
Vendor	pom	name	Checker Qual	High
Vendor	pom	url	https://checkerframework.org/	Highest
Product	file	name	checker-qual	High
Product	jar	package name	checker	Highest
Product	jar	package name	checkerframework	Highest
Product	jar	package name	framework	Highest
Product	jar	package name	qual	Highest
Product	Manifest	Bundle-Name	checker-qual	Medium
Product	Manifest	bundle-symbolicname	checker-qual	Medium
Product	Manifest	implementation-url	https://checkerframework.org	Low
Product	pom	artifactid	checker-qual	Highest
Product	pom	developer email	mernst@cs.washington.edu	Low
Product	pom	developer email	smillst@cs.washington.edu	Low
Product	pom	developer id	mernst	Low
Product	pom	developer id	smillst	Low
Product	pom	developer name	Michael Ernst	Low
Product	pom	developer name	Suzanne Millstein	Low
Product	pom	developer org	University of Washington	Low
Product	pom	developer org URL	https://www.cs.washington.edu/	Low
Product	pom	groupid	org.checkerframework	Highest
Product	pom	name	Checker Qual	High
Product	pom	url	https://checkerframework.org/	Medium
Version	file	version	3.48.3	High
Version	Manifest	Bundle-Version	3.48.3	High
Version	Manifest	Implementation-Version	3.48.3	High
Version	pom	version	3.48.3	Highest

Identifiers

pkg:maven/org.checkerframework/checker-qual@3.48.3 (Confidence:High)

com.github.waffle:waffle-jna-jakarta:3.5.2-SNAPSHOT

Description:

WAFFLE JNA Jakarta Pakage implementation

License:

MIT https://raw.github.com/Waffle/waffle/master/LICENSE

File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-jna-jakarta/pom.xml

Referenced In Project/Scope: waffle-jetty-jakarta
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	pom	High
Vendor	project	artifactid	waffle-jna-jakarta	Low
Vendor	project	groupid	com.github.waffle	Highest
Product	file	name	pom	High
Product	project	artifactid	waffle-jna-jakarta	Highest
Product	project	groupid	com.github.waffle	Low

Identifiers

pkg:maven/com.github.waffle/waffle-jna-jakarta@3.5.2-SNAPSHOT (Confidence:Highest)

ecj-3.40.0.jar

Description:

Eclipse Compiler for Java(TM)

License:

Eclipse Public License - v 2.0: https://www.eclipse.org/legal/epl-2.0/

File Path: /home/runner/.m2/repository/org/eclipse/jdt/ecj/3.40.0/ecj-3.40.0.jar
MD5: 046151f4aec1539222b2d87b0ce1b3b9
SHA1: 5c26f6a20278196f8038a284d885c3796cd7d422
SHA256:05cc22a24e7982970f63a405fc6c820bc80b806f27f3c5a6236fc475f8f7152b
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	ecj	High
Vendor	jar	package name	compiler	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	jdt	Highest
Vendor	Manifest	automatic-module-name	org.eclipse.jdt.core.compiler.batch	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-activationpolicy	lazy	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-17	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.jdt.core.compiler.batch	Medium
Vendor	pom	artifactid	ecj	Highest
Vendor	pom	artifactid	ecj	Low
Vendor	pom	groupid	org.eclipse.jdt	Highest
Vendor	pom	name	Eclipse Compiler for Java(TM)	High
Vendor	pom	organization name	Eclipse Foundation	High
Vendor	pom	organization url	https://www.eclipse.org/	Medium
Vendor	pom	url	https://projects.eclipse.org/projects/eclipse.jdt	Highest
Product	file	name	ecj	High
Product	jar	package name	compiler	Highest
Product	jar	package name	core	Highest
Product	jar	package name	eclipse	Highest
Product	jar	package name	jdt	Highest
Product	Manifest	automatic-module-name	org.eclipse.jdt.core.compiler.batch	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-activationpolicy	lazy	Low
Product	Manifest	Bundle-Name	Eclipse Compiler for Java(TM)	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-17	Low
Product	Manifest	bundle-symbolicname	org.eclipse.jdt.core.compiler.batch	Medium
Product	pom	artifactid	ecj	Highest
Product	pom	groupid	org.eclipse.jdt	Highest
Product	pom	name	Eclipse Compiler for Java(TM)	High
Product	pom	organization name	Eclipse Foundation	Low
Product	pom	organization url	https://www.eclipse.org/	Low
Product	pom	url	https://projects.eclipse.org/projects/eclipse.jdt	Medium
Version	file	version	3.40.0	High
Version	pom	version	3.40.0	Highest

Identifiers

pkg:maven/org.eclipse.jdt/ecj@3.40.0 (Confidence:High)

error_prone_annotations-2.36.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.36.0/error_prone_annotations-2.36.0.jar
MD5: 0e48e5ba2cd0a8d8d09bad849b99f6a6
SHA1: 227d4d4957ccc3dc5761bd897e3a0ee587e750a7
SHA256:77440e270b0bc9a249903c5a076c36a722c4886ca4f42675f2903a1c53ed61a5
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	error_prone_annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	errorprone	Highest
Vendor	jar	package name	google	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Vendor	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	error_prone_annotations	Highest
Vendor	pom	artifactid	error_prone_annotations	Low
Vendor	pom	groupid	com.google.errorprone	Highest
Vendor	pom	name	error-prone annotations	High
Vendor	pom	parent-artifactid	error_prone_parent	Low
Product	file	name	error_prone_annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	errorprone	Highest
Product	jar	package name	google	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Product	Manifest	Bundle-Name	error-prone annotations	Medium
Product	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	error_prone_annotations	Highest
Product	pom	groupid	com.google.errorprone	Highest
Product	pom	name	error-prone annotations	High
Product	pom	parent-artifactid	error_prone_parent	Medium
Version	file	version	2.36.0	High
Version	Manifest	Bundle-Version	2.36.0	High
Version	pom	version	2.36.0	Highest

Identifiers

pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0 (Confidence:High)

expressly-5.0.0.jar

Description:

Jakarta Expression Language Implementation

License:

https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt, https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/org/glassfish/expressly/expressly/5.0.0/expressly-5.0.0.jar
MD5: d4448c69fe69ebca37b2c76e62e385c3
SHA1: 78637fec7db6414c3ad32f3aa9e5d6610a299e5b
SHA256:b0c872737bb8381921b304d0952854666d1ba320b9b3c5bf4d70a09a86b61524
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	expressly	High
Vendor	jar	package name	expressly	Highest
Vendor	jar	package name	glassfish	Highest
Vendor	Manifest	automatic-module-name	org.glassfish.expressly	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	org.glassfish.expressly	Medium
Vendor	Manifest	extension-name	org.glassfish.expressly	Medium
Vendor	Manifest	Implementation-Vendor	${vendorName}	High
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	expressly	Highest
Vendor	pom	artifactid	expressly	Low
Vendor	pom	developer email	expressly-dev@eclipse.org	Low
Vendor	pom	developer id	jakarta-ee4j-expressly	Medium
Vendor	pom	developer name	Eclipse Expressly Developers	Medium
Vendor	pom	developer org	Eclipse Foundation	Medium
Vendor	pom	groupid	org.glassfish.expressly	Highest
Vendor	pom	name	Eclipse Expressly	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.expressly	Highest
Product	file	name	expressly	High
Product	jar	package name	expressly	Highest
Product	jar	package name	glassfish	Highest
Product	Manifest	automatic-module-name	org.glassfish.expressly	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Eclipse Expressly	Medium
Product	Manifest	bundle-symbolicname	org.glassfish.expressly	Medium
Product	Manifest	extension-name	org.glassfish.expressly	Medium
Product	pom	artifactid	expressly	Highest
Product	pom	developer email	expressly-dev@eclipse.org	Low
Product	pom	developer id	jakarta-ee4j-expressly	Low
Product	pom	developer name	Eclipse Expressly Developers	Low
Product	pom	developer org	Eclipse Foundation	Low
Product	pom	groupid	org.glassfish.expressly	Highest
Product	pom	name	Eclipse Expressly	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	https://projects.eclipse.org/projects/ee4j.expressly	Medium
Version	file	version	5.0.0	High
Version	Manifest	Bundle-Version	5.0.0	High
Version	Manifest	Implementation-Version	5.0.0	High
Version	pom	parent-version	5.0.0	Low
Version	pom	version	5.0.0	Highest

Identifiers

pkg:maven/org.glassfish.expressly/expressly@5.0.0 (Confidence:High)

j2objc-annotations-3.0.0.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar
MD5: f59529b29202a5baf37f491ea5ec8627
SHA1: 7399e65dd7e9ff3404f4535b2f017093bdb134c7
SHA256:88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	j2objc-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	google	Highest
Vendor	jar	package name	j2objc	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	j2objc-annotations	Highest
Vendor	pom	artifactid	j2objc-annotations	Low
Vendor	pom	developer email	tball@google.com	Low
Vendor	pom	developer id	tomball	Medium
Vendor	pom	developer name	Tom Ball	Medium
Vendor	pom	developer org	Google	Medium
Vendor	pom	developer org URL	https://www.google.com	Medium
Vendor	pom	groupid	com.google.j2objc	Highest
Vendor	pom	name	J2ObjC Annotations	High
Vendor	pom	url	google/j2objc/	Highest
Product	file	name	j2objc-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	google	Highest
Product	jar	package name	j2objc	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	j2objc-annotations	Highest
Product	pom	developer email	tball@google.com	Low
Product	pom	developer id	tomball	Low
Product	pom	developer name	Tom Ball	Low
Product	pom	developer org	Google	Low
Product	pom	developer org URL	https://www.google.com	Low
Product	pom	groupid	com.google.j2objc	Highest
Product	pom	name	J2ObjC Annotations	High
Product	pom	url	google/j2objc/	High
Version	file	version	3.0.0	High
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0 (Confidence:High)

jakarta.annotation-api-3.0.0.jar

Description:

Jakarta Annotations API

License:

EPL 2.0: https://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/3.0.0/jakarta.annotation-api-3.0.0.jar
MD5: 7faffaab962918da4cf5ddfd76609dd2
SHA1: 54f928fadec906a99d558536756d171917b9d936
SHA256:b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.annotation-api	High
Vendor	jar	package name	annotation	Highest
Vendor	jar	package name	jakarta	Highest
Vendor	Manifest	build-jdk-spec	18	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.annotation-api	Medium
Vendor	Manifest	extension-name	jakarta.annotation	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.annotation-api	Highest
Vendor	pom	artifactid	jakarta.annotation-api	Low
Vendor	pom	developer name	Dmitry Kornilov	Medium
Vendor	pom	developer name	Linda De Michiel	Medium
Vendor	pom	developer org	Oracle Corp.	Medium
Vendor	pom	groupid	jakarta.annotation	Highest
Vendor	pom	name	Jakarta Annotations API	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.ca	Highest
Product	file	name	jakarta.annotation-api	High
Product	jar	package name	annotation	Highest
Product	jar	package name	jakarta	Highest
Product	Manifest	build-jdk-spec	18	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Annotations API	Medium
Product	Manifest	bundle-symbolicname	jakarta.annotation-api	Medium
Product	Manifest	extension-name	jakarta.annotation	Medium
Product	pom	artifactid	jakarta.annotation-api	Highest
Product	pom	developer name	Dmitry Kornilov	Low
Product	pom	developer name	Linda De Michiel	Low
Product	pom	developer org	Oracle Corp.	Low
Product	pom	groupid	jakarta.annotation	Highest
Product	pom	name	Jakarta Annotations API	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	https://projects.eclipse.org/projects/ee4j.ca	Medium
Version	file	version	3.0.0	High
Version	Manifest	Bundle-Version	3.0.0	High
Version	Manifest	Implementation-Version	3.0.0	High
Version	pom	parent-version	3.0.0	Low
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0 (Confidence:High)
cpe:2.3:a:oracle:projects:3.0.0:*:*:*:*:*:*:* (Confidence:Low)

jakarta.el-api-6.0.1.jar

Description:

        Jakarta Expression Language defines an expression language for Java applications

License:

https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt, https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/jakarta/el/jakarta.el-api/6.0.1/jakarta.el-api-6.0.1.jar
MD5: a98f097e059552a75748fcdd067e5c16
SHA1: c7c4a2eb1e40e0ff45ab5e2e52bd77d8c7a75176
SHA256:7e84b5bed49de32b79cc5e85d90b6f5adb1a953ac67283adbb41c1e297f9c605
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.el-api	High
Vendor	jar	package name	el	Highest
Vendor	jar	package name	expression	Highest
Vendor	jar	package name	jakarta	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.el-api	Medium
Vendor	Manifest	extension-name	jakarta.el	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.el-api	Highest
Vendor	pom	artifactid	jakarta.el-api	Low
Vendor	pom	developer email	el-dev@eclipse.org	Low
Vendor	pom	developer id	jakarta-ee4j-el	Medium
Vendor	pom	developer name	Jakarta Expression Language Developers	Medium
Vendor	pom	developer org	Eclipse Foundation	Medium
Vendor	pom	groupid	jakarta.el	Highest
Vendor	pom	name	Jakarta Expression Language API	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.el	Highest
Product	file	name	jakarta.el-api	High
Product	jar	package name	el	Highest
Product	jar	package name	expression	Highest
Product	jar	package name	jakarta	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Expression Language API	Medium
Product	Manifest	bundle-symbolicname	jakarta.el-api	Medium
Product	Manifest	extension-name	jakarta.el	Medium
Product	pom	artifactid	jakarta.el-api	Highest
Product	pom	developer email	el-dev@eclipse.org	Low
Product	pom	developer id	jakarta-ee4j-el	Low
Product	pom	developer name	Jakarta Expression Language Developers	Low
Product	pom	developer org	Eclipse Foundation	Low
Product	pom	groupid	jakarta.el	Highest
Product	pom	name	Jakarta Expression Language API	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	https://projects.eclipse.org/projects/ee4j.el	Medium
Version	file	version	6.0.1	High
Version	Manifest	Bundle-Version	6.0.1	High
Version	Manifest	Implementation-Version	6.0.1	High
Version	pom	parent-version	6.0.1	Low
Version	pom	version	6.0.1	Highest

Identifiers

pkg:maven/jakarta.el/jakarta.el-api@6.0.1 (Confidence:High)
cpe:2.3:a:eclipse:jakarta_expression_language:6.0.1:*:*:*:*:*:*:* (Confidence:Low)

jakarta.servlet-api-6.0.0.jar

Description:

Jakarta Servlet 6.0

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/jakarta/servlet/jakarta.servlet-api/6.0.0/jakarta.servlet-api-6.0.0.jar
MD5: 4bcb3175ed9b7aa3f038d082879ec2a8
SHA1: abecc699286e65035ebba9844c03931357a6a963
SHA256:c034eb1afb158987dbb53a5fea0cadf611c8dae8daadd59c44d9d5ab70129cef
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.16

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.servlet-api	High
Vendor	jar	package name	jakarta	Highest
Vendor	jar	package name	servlet	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.servlet-api	Medium
Vendor	Manifest	extension-name	jakarta.servlet	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.eclipse	Medium
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.servlet-api	Highest
Vendor	pom	artifactid	jakarta.servlet-api	Low
Vendor	pom	developer id	yaminikb	Medium
Vendor	pom	developer name	Yamini K B	Medium
Vendor	pom	developer org	Oracle Corporation	Medium
Vendor	pom	developer org URL	http://www.oracle.com/	Medium
Vendor	pom	groupid	jakarta.servlet	Highest
Vendor	pom	name	Jakarta Servlet	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.servlet	Highest
Product	file	name	jakarta.servlet-api	High
Product	jar	package name	jakarta	Highest
Product	jar	package name	servlet	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Servlet	Medium
Product	Manifest	bundle-symbolicname	jakarta.servlet-api	Medium
Product	Manifest	extension-name	jakarta.servlet	Medium
Product	pom	artifactid	jakarta.servlet-api	Highest
Product	pom	developer id	yaminikb	Low
Product	pom	developer name	Yamini K B	Low
Product	pom	developer org	Oracle Corporation	Low
Product	pom	developer org URL	http://www.oracle.com/	Low
Product	pom	groupid	jakarta.servlet	Highest
Product	pom	name	Jakarta Servlet	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	https://projects.eclipse.org/projects/ee4j.servlet	Medium
Version	file	version	6.0.0	High
Version	Manifest	Bundle-Version	6.0.0	High
Version	Manifest	Implementation-Version	6.0.0	High
Version	pom	parent-version	6.0.0	Low
Version	pom	version	6.0.0	Highest

Identifiers

pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0 (Confidence:High)
cpe:2.3:a:oracle:projects:6.0.0:*:*:*:*:*:*:* (Confidence:Low)

jakarta.servlet.jsp-3.0.0.jar

Description:

JavaServer Pages API

License:

https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt, https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/org/glassfish/web/jakarta.servlet.jsp/3.0.0/jakarta.servlet.jsp-3.0.0.jar
MD5: fca522b72282d53d0819af32a5a2ec9c
SHA1: a1b306dd295439765d0fd2f9b00a48501c892b88
SHA256:7dde5d9789c030401c80bdfdbcc7a021665a451ba6f4ebdc033196cb7c8dee2a
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.servlet.jsp	High
Vendor	jar	package name	api	Highest
Vendor	jar	package name	glassfish	Highest
Vendor	jar	package name	jsp	Highest
Vendor	jar	package name	servlet	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	org.glassfish.web.jakarta.servlet.jsp	Medium
Vendor	Manifest	extension-name	jakarta.servlet.jsp	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.servlet.jsp	Highest
Vendor	pom	artifactid	jakarta.servlet.jsp	Low
Vendor	pom	developer email	jsp-dev@eclipse.org	Low
Vendor	pom	developer id	jakarta-ee4j-jsp	Medium
Vendor	pom	developer name	Jakarta Server Pages Developers	Medium
Vendor	pom	developer org	Eclipse Foundation	Medium
Vendor	pom	groupid	org.glassfish.web	Highest
Vendor	pom	name	Jakarta Server Pages implementation	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.jsp	Highest
Product	file	name	jakarta.servlet.jsp	High
Product	jar	package name	api	Highest
Product	jar	package name	glassfish	Highest
Product	jar	package name	jsp	Highest
Product	jar	package name	servlet	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Server Pages implementation	Medium
Product	Manifest	bundle-symbolicname	org.glassfish.web.jakarta.servlet.jsp	Medium
Product	Manifest	extension-name	jakarta.servlet.jsp	Medium
Product	pom	artifactid	jakarta.servlet.jsp	Highest
Product	pom	developer email	jsp-dev@eclipse.org	Low
Product	pom	developer id	jakarta-ee4j-jsp	Low
Product	pom	developer name	Jakarta Server Pages Developers	Low
Product	pom	developer org	Eclipse Foundation	Low
Product	pom	groupid	org.glassfish.web	Highest
Product	pom	name	Jakarta Server Pages implementation	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	https://projects.eclipse.org/projects/ee4j.jsp	Medium
Version	file	version	3.0.0	High
Version	Manifest	Bundle-Version	3.0.0	High
Version	Manifest	Implementation-Version	3.0.0	High
Version	pom	parent-version	3.0.0	Low
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/org.glassfish.web/jakarta.servlet.jsp@3.0.0 (Confidence:High)
cpe:2.3:a:web_project:web:3.0.0:*:*:*:*:*:*:* (Confidence:Highest)

jakarta.servlet.jsp-api-4.0.0.jar

Description:

Jakarta Server Pages API

License:

https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt, https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/jakarta/servlet/jsp/jakarta.servlet.jsp-api/4.0.0/jakarta.servlet.jsp-api-4.0.0.jar
MD5: 6fddc938119e00e6f934c1b37120e338
SHA1: a8de3741b91ba7427306104979ab2f084e831438
SHA256:873b7d0c2b5734ef8847634299b67ce879080cdece8426147522c4db8e37c14e
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.servlet.jsp-api	High
Vendor	jar	package name	jakarta	Highest
Vendor	jar	package name	jsp	Highest
Vendor	jar	package name	servlet	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.servlet.jsp-api	Medium
Vendor	Manifest	extension-name	jakarta.servlet.jsp	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.servlet.jsp-api	Highest
Vendor	pom	artifactid	jakarta.servlet.jsp-api	Low
Vendor	pom	developer email	jsp-dev@eclipse.org	Low
Vendor	pom	developer id	jakarta-ee4j-jsp	Medium
Vendor	pom	developer name	Jakarta Server Pages Developers	Medium
Vendor	pom	developer org	Eclipse Foundation	Medium
Vendor	pom	groupid	jakarta.servlet.jsp	Highest
Vendor	pom	name	Jakarta Server Pages API	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.jsp	Highest
Product	file	name	jakarta.servlet.jsp-api	High
Product	jar	package name	jakarta	Highest
Product	jar	package name	jsp	Highest
Product	jar	package name	servlet	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Server Pages API	Medium
Product	Manifest	bundle-symbolicname	jakarta.servlet.jsp-api	Medium
Product	Manifest	extension-name	jakarta.servlet.jsp	Medium
Product	pom	artifactid	jakarta.servlet.jsp-api	Highest
Product	pom	developer email	jsp-dev@eclipse.org	Low
Product	pom	developer id	jakarta-ee4j-jsp	Low
Product	pom	developer name	Jakarta Server Pages Developers	Low
Product	pom	developer org	Eclipse Foundation	Low
Product	pom	groupid	jakarta.servlet.jsp	Highest
Product	pom	name	Jakarta Server Pages API	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	https://projects.eclipse.org/projects/ee4j.jsp	Medium
Version	file	version	4.0.0	High
Version	Manifest	Bundle-Version	4.0.0	High
Version	Manifest	Implementation-Version	4.0.0	High
Version	pom	parent-version	4.0.0	Low
Version	pom	version	4.0.0	Highest

Identifiers

pkg:maven/jakarta.servlet.jsp/jakarta.servlet.jsp-api@4.0.0 (Confidence:High)

jakarta.servlet.jsp.jstl-3.0.1.jar

Description:

Jakarta Standard Tag Library Implementation

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html

File Path: /home/runner/.m2/repository/org/glassfish/web/jakarta.servlet.jsp.jstl/3.0.1/jakarta.servlet.jsp.jstl-3.0.1.jar
MD5: 3f6511c0066616415b9ed23a018b1cde
SHA1: 078909a1354585b2a7a2d3b4e348fceff8b6d180
SHA256:5cc6e60b9e74d38c25fe4f2d22dfd40577f5b8396bc885f7061cd2c525a43b86
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.servlet.jsp.jstl	High
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	org	Highest
Vendor	jar	package name	standard	Highest
Vendor	jar	package name	tag	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	org.glassfish.web.jakarta.servlet.jsp.jstl	Medium
Vendor	Manifest	extension-name	jakarta.servlet.jsp.jstl	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.servlet.jsp.jstl	Highest
Vendor	pom	artifactid	jakarta.servlet.jsp.jstl	Low
Vendor	pom	developer id	yaminikb	Medium
Vendor	pom	developer name	Yamini K B	Medium
Vendor	pom	developer org	Oracle Corporation	Medium
Vendor	pom	developer org URL	http://www.oracle.com/	Medium
Vendor	pom	groupid	org.glassfish.web	Highest
Vendor	pom	name	Jakarta Standard Tag Library Implementation	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.jstl	Highest
Product	file	name	jakarta.servlet.jsp.jstl	High
Product	jar	package name	eclipse	Highest
Product	jar	package name	org	Highest
Product	jar	package name	standard	Highest
Product	jar	package name	tag	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Standard Tag Library Implementation	Medium
Product	Manifest	bundle-symbolicname	org.glassfish.web.jakarta.servlet.jsp.jstl	Medium
Product	Manifest	extension-name	jakarta.servlet.jsp.jstl	Medium
Product	pom	artifactid	jakarta.servlet.jsp.jstl	Highest
Product	pom	developer id	yaminikb	Low
Product	pom	developer name	Yamini K B	Low
Product	pom	developer org	Oracle Corporation	Low
Product	pom	developer org URL	http://www.oracle.com/	Low
Product	pom	groupid	org.glassfish.web	Highest
Product	pom	name	Jakarta Standard Tag Library Implementation	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	https://projects.eclipse.org/projects/ee4j.jstl	Medium
Version	file	version	3.0.1	High
Version	Manifest	Bundle-Version	3.0.1	High
Version	Manifest	Implementation-Version	3.0.1	High
Version	pom	parent-version	3.0.1	Low
Version	pom	version	3.0.1	Highest

Identifiers

pkg:maven/org.glassfish.web/jakarta.servlet.jsp.jstl@3.0.1 (Confidence:High)
cpe:2.3:a:web_project:web:3.0.1:*:*:*:*:*:*:* (Confidence:Highest)

jcl-over-slf4j-2.0.16.jar

Description:

JCL 1.2 implemented over SLF4J

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/slf4j/jcl-over-slf4j/2.0.16/jcl-over-slf4j-2.0.16.jar
MD5: c077b88c43f9d63f64f9880fdb457efb
SHA1: 9d08badad22f1ac07deac9188ade596472a2bfd9
SHA256:5744d62c5af556e839ab922c9fa3f737f0a5971e478ba68b2eb5256b2842ec78
Referenced In Project/Scope: waffle-jetty-jakarta:compile
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jcl-over-slf4j	High
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Vendor	pom	artifactid	jcl-over-slf4j	Highest
Vendor	pom	artifactid	jcl-over-slf4j	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	JCL 1.2 implemented over SLF4J	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	jcl-over-slf4j	High
Product	jar	package name	9	Highest
Product	jar	package name	apache	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	JCL 1.2 implemented over SLF4J	Medium
Product	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Product	Manifest	Implementation-Title	jcl-over-slf4j	High
Product	Manifest	multi-release	true	Low
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Product	pom	artifactid	jcl-over-slf4j	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	JCL 1.2 implemented over SLF4J	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.16	High
Version	Manifest	Bundle-Version	2.0.16	High
Version	Manifest	Implementation-Version	2.0.16	High
Version	pom	version	2.0.16	Highest

Identifiers

pkg:maven/org.slf4j/jcl-over-slf4j@2.0.16 (Confidence:High)

jdtcore-3.1.0.jar

File Path: /home/runner/.m2/repository/eclipse/jdtcore/3.1.0/jdtcore-3.1.0.jar
MD5: d1651bf9048165f304e7877f1eaad6dc
SHA1: c5e3e72ae7220118c3da808628ec7016d4d8aef2
SHA256:b163be93b2131f97dd23ee03c935b34f48c17e74d8f60b644747528ea024e88e
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jdtcore-3.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.glassfish.web/jakarta.servlet.jsp@3.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jdtcore	High
Vendor	jar	package name	core	Highest
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	jdt	Highest
Vendor	Manifest	bundle-localization	plugin	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.jdt.core; singleton:=true	Medium
Vendor	Manifest	eclipse-autostart	true	Low
Vendor	Manifest	require-bundle	org.eclipse.core.resources,org.eclipse.core.runtime,org.eclipse.text,org.eclipse.team.core;resolution:=optional	Low
Vendor	pom	artifactid	jdtcore	Highest
Vendor	pom	artifactid	jdtcore	Low
Vendor	pom	groupid	eclipse	Highest
Vendor	pom	name	jdtcore	High
Product	file	name	jdtcore	High
Product	jar	package name	core	Highest
Product	jar	package name	eclipse	Highest
Product	jar	package name	jdt	Highest
Product	Manifest	bundle-localization	plugin	Low
Product	Manifest	Bundle-Name	%pluginName	Medium
Product	Manifest	bundle-symbolicname	org.eclipse.jdt.core; singleton:=true	Medium
Product	Manifest	eclipse-autostart	true	Low
Product	Manifest	require-bundle	org.eclipse.core.resources,org.eclipse.core.runtime,org.eclipse.text,org.eclipse.team.core;resolution:=optional	Low
Product	pom	artifactid	jdtcore	Highest
Product	pom	groupid	eclipse	Highest
Product	pom	name	jdtcore	High
Version	file	version	3.1.0	High
Version	Manifest	Bundle-Version	3.1.0	High
Version	pom	version	3.1.0	Highest

Identifiers

pkg:maven/eclipse/jdtcore@3.1.0 (Confidence:High)
cpe:2.3:a:eclipse:org.eclipse.core.runtime:3.1.0:*:*:*:*:*:*:* (Confidence:Low)

Published Vulnerabilities

CVE-2023-4218

In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).

CWE-611 Improper Restriction of XML External Entity Reference

CVSSv3:

Base Score: MEDIUM (5.0)
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:1.3/RC:R/MAV:A

References:

af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,ISSUE_TRACKING,VENDOR_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
af854a3a-2127-422b-91ae-364da2661108 - PATCH
af854a3a-2127-422b-91ae-364da2661108 - PATCH
af854a3a-2127-422b-91ae-364da2661108 - PATCH
af854a3a-2127-422b-91ae-364da2661108 - PATCH
af854a3a-2127-422b-91ae-364da2661108 - PATCH
af854a3a-2127-422b-91ae-364da2661108 - PATCH
af854a3a-2127-422b-91ae-364da2661108 - PATCH
af854a3a-2127-422b-91ae-364da2661108 - PATCH
af854a3a-2127-422b-91ae-364da2661108 - PATCH
emo@eclipse.org - EXPLOIT,ISSUE_TRACKING,VENDOR_ADVISORY
emo@eclipse.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY
emo@eclipse.org - PATCH
emo@eclipse.org - PATCH
emo@eclipse.org - PATCH
emo@eclipse.org - PATCH
emo@eclipse.org - PATCH
emo@eclipse.org - PATCH
emo@eclipse.org - PATCH
emo@eclipse.org - PATCH
emo@eclipse.org - PATCH

Vulnerable Software & Versions: (show all)

jdtcore-3.1.0.jar: jdtCompilerAdapter.jar

File Path: /home/runner/.m2/repository/eclipse/jdtcore/3.1.0/jdtcore-3.1.0.jar/jdtCompilerAdapter.jar
MD5: e66287f3ce15029d202ffc9c2dc3aa77
SHA1: a9d9eb99b7920dd3ee24d601a26cd7e473b0bf6e
SHA256:c79595d136ba157fc63286bf29cee69f6ab09cf2b9005ce70ae7eb01431115d9
Referenced In Project/Scope: waffle-jetty-jakarta:provided

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jdtCompilerAdapter	High
Vendor	jar	package name	core	Low
Vendor	jar	package name	eclipse	Low
Vendor	jar	package name	jdt	Low
Product	file	name	jdtCompilerAdapter	High
Product	jar	package name	core	Low
Product	jar	package name	jdt	Low

Identifiers

None

jetty-ee-12.0.16.jar

Description:

Jetty module for Core :: EE Common

License:

EPL-2.0 OR Apache-2.0
https://www.eclipse.org/legal/epl-2.0/, https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-ee/12.0.16/jetty-ee-12.0.16.jar
MD5: 72db9881287f6e4bafa12bd16bad37b8
SHA1: 14b177b6765e805ec33a122d865864bd585561eb
SHA256:1b795f43e0c28b4d6979572a1b0a719ed560052bea20a3e3dc52cc75e4561f7f
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-webapp@12.0.16

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jetty-ee	High
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	ee	Highest
Vendor	jar	package name	jetty	Highest
Vendor	Manifest	build-jdk-spec	22	Low
Vendor	Manifest	bundle-copyright	Copyright (c) 1995 Mort Bay Consulting Pty Ltd and others.	Low
Vendor	Manifest	bundle-docurl	https://jetty.org/	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.jetty.ee	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Jetty Project	High
Vendor	Manifest	url	https://jetty.org/	Low
Vendor	pom	artifactid	jetty-ee	Highest
Vendor	pom	artifactid	jetty-ee	Low
Vendor	pom	groupid	org.eclipse.jetty	Highest
Vendor	pom	name	Core :: EE Common	High
Vendor	pom	parent-artifactid	jetty-core	Low
Product	file	name	jetty-ee	High
Product	jar	package name	eclipse	Highest
Product	jar	package name	ee	Highest
Product	jar	package name	jetty	Highest
Product	Manifest	build-jdk-spec	22	Low
Product	Manifest	bundle-copyright	Copyright (c) 1995 Mort Bay Consulting Pty Ltd and others.	Low
Product	Manifest	bundle-docurl	https://jetty.org/	Low
Product	Manifest	Bundle-Name	Core :: EE Common	Medium
Product	Manifest	bundle-symbolicname	org.eclipse.jetty.ee	Medium
Product	Manifest	url	https://jetty.org/	Low
Product	pom	artifactid	jetty-ee	Highest
Product	pom	groupid	org.eclipse.jetty	Highest
Product	pom	name	Core :: EE Common	High
Product	pom	parent-artifactid	jetty-core	Medium
Version	file	version	12.0.16	High
Version	Manifest	Bundle-Version	12.0.16	High
Version	Manifest	Implementation-Version	12.0.16	High
Version	pom	version	12.0.16	Highest

Related Dependencies

jetty-alpn-client-12.0.16.jar
- File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-alpn-client/12.0.16/jetty-alpn-client-12.0.16.jar
- MD5: 563c94ae4a053703b1c9f9536a53a87f
- SHA1: 816638beac095aab1ba09ae87b23e98ef5f2f049
- SHA256: 28ff9568536483af9844b06a840af90ff21ad4549aee284070ec614060305531
- pkg:maven/org.eclipse.jetty/jetty-alpn-client@12.0.16
jetty-client-12.0.16.jar
- File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-client/12.0.16/jetty-client-12.0.16.jar
- MD5: 9ae45a77f4a0643f10381c9bb9d4ad82
- SHA1: 5107a785b8c102eb92325afc01a8386256391282
- SHA256: 0d5375c83a60362f2225ae06d4837463942f39c5bc6bd83172b4ad2aef28df29
- pkg:maven/org.eclipse.jetty/jetty-client@12.0.16
jetty-ee10-apache-jsp-12.0.16.jar
- File Path: /home/runner/.m2/repository/org/eclipse/jetty/ee10/jetty-ee10-apache-jsp/12.0.16/jetty-ee10-apache-jsp-12.0.16.jar
- MD5: e7075ed72388c5c8cf440b00947fb590
- SHA1: 989c00f1f4e088cb383e201b578d613e075a7eb6
- SHA256: 9286e391b4aec4baac213f48eb18fc61704c0b889d91955406614f71fc794114
- pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-apache-jsp@12.0.16
jetty-ee10-servlet-12.0.16.jar
- File Path: /home/runner/.m2/repository/org/eclipse/jetty/ee10/jetty-ee10-servlet/12.0.16/jetty-ee10-servlet-12.0.16.jar
- MD5: baf3dbe9ee077d04df134c78e4bfa7ae
- SHA1: 022a746c00b1ac5c790fee65a398c707160a46d8
- SHA256: 18a6c41074061a0ff440d618b43e7ab328e81226ec21c4d6a4d53b90b2c94a55
- pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.16
jetty-ee10-webapp-12.0.16.jar
- File Path: /home/runner/.m2/repository/org/eclipse/jetty/ee10/jetty-ee10-webapp/12.0.16/jetty-ee10-webapp-12.0.16.jar
- MD5: a299ade82d1e2f8471d805f43061feca
- SHA1: 83959f91da2fe6edcda40a06994b3000f74818e9
- SHA256: 743dfe48056e6338171ca5ac05d79fde1389148368d9764e85dac1d1bca6ede2
- pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-webapp@12.0.16
jetty-http-12.0.16.jar
- File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-http/12.0.16/jetty-http-12.0.16.jar
- MD5: 97fbad480f90455582cefadd2b030332
- SHA1: 68019fa90e8420ae15c109bd8c8611cacbaf43e5
- SHA256: b0751b3dd9a8abc79ba0c5061613843dba1d2ce231057f53ad3d038ca888dfb0
- pkg:maven/org.eclipse.jetty/jetty-http@12.0.16
jetty-io-12.0.16.jar
- File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-io/12.0.16/jetty-io-12.0.16.jar
- MD5: ae480591a63c1b212f4c7911349761a4
- SHA1: 7a162c537a99bbaf35a074fec9a50815e6c81d9d
- SHA256: c8dfd2d88d34be5461417f2256be0cc868865c45815f7ee0e409ddd872f0e84f
- pkg:maven/org.eclipse.jetty/jetty-io@12.0.16
jetty-security-12.0.16.jar
- File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-security/12.0.16/jetty-security-12.0.16.jar
- MD5: 255464da6183b5c0148887757273e23f
- SHA1: 23b1a3abecf9d6f5498064a32d9145ae1d8330f9
- SHA256: 7a6d5b2d0edb1b5012b5510a80411c7fb4b9844b3879938d3b6e9ace3b9b6876
- pkg:maven/org.eclipse.jetty/jetty-security@12.0.16
jetty-session-12.0.16.jar
- File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-session/12.0.16/jetty-session-12.0.16.jar
- MD5: 3eab34dcfbeee6e4210e23c654a543b6
- SHA1: 79cdedc7afebbdba4453f603dfe2f970baa35cc3
- SHA256: 5d7dfd24c94472c368441488791412a31ea476ad4f1d9286b4f5802c5d85514b
- pkg:maven/org.eclipse.jetty/jetty-session@12.0.16
jetty-util-12.0.16.jar
- File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-util/12.0.16/jetty-util-12.0.16.jar
- MD5: b3c132eb692790fe9b29bb03ee52003e
- SHA1: e262e505363e5925df15618622d9888aefc1b0d0
- SHA256: a03d43c194993ebb4d51fbfe7fe29134d7863b28708380eeedd11797c83543cf
- pkg:maven/org.eclipse.jetty/jetty-util@12.0.16
jetty-xml-12.0.16.jar
- File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-xml/12.0.16/jetty-xml-12.0.16.jar
- MD5: c8cf0bb6590d5c0dbed8943f0e7128b6
- SHA1: aac8e09d6adf1dfcca2dfaf5bfcfdf137ba1b89a
- SHA256: a834f40e17c783a9f59bb7ee0a280626c7dacf6e7ee3e93dc0b6927a6aabdfd9
- pkg:maven/org.eclipse.jetty/jetty-xml@12.0.16

Identifiers

pkg:maven/org.eclipse.jetty/jetty-ee@12.0.16 (Confidence:High)
cpe:2.3:a:eclipse:jetty:12.0.16:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:jetty:jetty:12.0.16:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:mortbay_jetty:jetty:12.0.16:*:*:*:*:*:*:* (Confidence:Highest)

jetty-server-12.0.16.jar

Description:

The legacy jetty server artifact.

License:

EPL-2.0 OR Apache-2.0
https://www.eclipse.org/legal/epl-2.0/, https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-server/12.0.16/jetty-server-12.0.16.jar
MD5: 8bc8e31a2ebea7cb185fd188e5b4b5ca
SHA1: 3e3638b4bfbee04c27b3ae68e4949fc43b40a042
SHA256:9e3f17ca732154ee2c67cc2bc340f322b29335f74d65f7cc0104c2e9cdc6640e
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.16

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jetty-server	High
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	jetty	Highest
Vendor	jar	package name	server	Highest
Vendor	Manifest	build-jdk-spec	22	Low
Vendor	Manifest	bundle-copyright	Copyright (c) 1995 Mort Bay Consulting Pty Ltd and others.	Low
Vendor	Manifest	bundle-docurl	https://jetty.org/	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.jetty.server	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Jetty Project	High
Vendor	Manifest	url	https://jetty.org/	Low
Vendor	pom	artifactid	jetty-server	Highest
Vendor	pom	artifactid	jetty-server	Low
Vendor	pom	groupid	org.eclipse.jetty	Highest
Vendor	pom	name	Core :: Server	High
Vendor	pom	parent-artifactid	jetty-core	Low
Product	file	name	jetty-server	High
Product	jar	package name	eclipse	Highest
Product	jar	package name	jetty	Highest
Product	jar	package name	server	Highest
Product	Manifest	build-jdk-spec	22	Low
Product	Manifest	bundle-copyright	Copyright (c) 1995 Mort Bay Consulting Pty Ltd and others.	Low
Product	Manifest	bundle-docurl	https://jetty.org/	Low
Product	Manifest	Bundle-Name	Core :: Server	Medium
Product	Manifest	bundle-symbolicname	org.eclipse.jetty.server	Medium
Product	Manifest	url	https://jetty.org/	Low
Product	pom	artifactid	jetty-server	Highest
Product	pom	groupid	org.eclipse.jetty	Highest
Product	pom	name	Core :: Server	High
Product	pom	parent-artifactid	jetty-core	Medium
Version	file	version	12.0.16	High
Version	Manifest	Bundle-Version	12.0.16	High
Version	Manifest	Implementation-Version	12.0.16	High
Version	pom	version	12.0.16	Highest

Identifiers

pkg:maven/org.eclipse.jetty/jetty-server@12.0.16 (Confidence:High)
cpe:2.3:a:eclipse:jetty:12.0.16:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:jetty:jetty:12.0.16:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:jetty:jetty_http_server:12.0.16:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:mortbay_jetty:jetty:12.0.16:*:*:*:*:*:*:* (Confidence:Highest)

jna-5.16.0.jar

Description:

Java Native Access

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.16.0/jna-5.16.0.jar
MD5: accc2e2b8676434a87f4f73fb4d90b44
SHA1: ebea09f91dc9f7048099f963fb8d6f919f0a4d9c
SHA256:3f5233589a799eb66dc2969afa3433fb56859d3d787c58b9bc7dd9e86f0a250c
Referenced In Project/Scope: waffle-jetty-jakarta:compile
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jna	High
Vendor	jar	package name	jna	Highest
Vendor	jar	package name	native	Highest
Vendor	jar	package name	sun	Highest
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	automatic-module-name	com.sun.jna	Medium
Vendor	Manifest	bundle-activationpolicy	lazy	Low
Vendor	Manifest	bundle-category	jni	Low
Vendor	Manifest	bundle-nativecode	com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Vendor	Manifest	bundle-symbolicname	com.sun.jna	Medium
Vendor	Manifest	Implementation-Vendor	JNA Development Team	High
Vendor	Manifest	specification-vendor	JNA Development Team	Low
Vendor	pom	artifactid	jna	Highest
Vendor	pom	artifactid	jna	Low
Vendor	pom	developer email	mblaesing@doppel-helix.eu	Low
Vendor	pom	developer id	twall	Medium
Vendor	pom	developer name	Matthias Bläsing	Medium
Vendor	pom	developer name	Timothy Wall	Medium
Vendor	pom	groupid	net.java.dev.jna	Highest
Vendor	pom	name	Java Native Access	High
Vendor	pom	url	java-native-access/jna	Highest
Product	file	name	jna	High
Product	jar	package name	jna	Highest
Product	jar	package name	library	Highest
Product	jar	package name	native	Highest
Product	jar	package name	sun	Highest
Product	jar	package name	win32	Highest
Product	Manifest	automatic-module-name	com.sun.jna	Medium
Product	Manifest	bundle-activationpolicy	lazy	Low
Product	Manifest	bundle-category	jni	Low
Product	Manifest	Bundle-Name	jna	Medium
Product	Manifest	bundle-nativecode	com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64	Low
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Product	Manifest	bundle-symbolicname	com.sun.jna	Medium
Product	Manifest	Implementation-Title	com.sun.jna	High
Product	Manifest	specification-title	Java Native Access (JNA)	Medium
Product	pom	artifactid	jna	Highest
Product	pom	developer email	mblaesing@doppel-helix.eu	Low
Product	pom	developer id	twall	Low
Product	pom	developer name	Matthias Bläsing	Low
Product	pom	developer name	Timothy Wall	Low
Product	pom	groupid	net.java.dev.jna	Highest
Product	pom	name	Java Native Access	High
Product	pom	url	java-native-access/jna	High
Version	file	version	5.16.0	High
Version	Manifest	Bundle-Version	5.16.0	High
Version	pom	version	5.16.0	Highest

Identifiers

pkg:maven/net.java.dev.jna/jna@5.16.0 (Confidence:High)
cpe:2.3:a:oracle:java_se:5.16.0:*:*:*:*:*:*:* (Confidence:Low)

jna-5.16.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.16.0/jna-5.16.0.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: 302945a811fd8e21bcdd5226c73b6f74
SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607c
SHA256:b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699d
Referenced In Project/Scope: waffle-jetty-jakarta:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jnidispatch	High
Product	file	name	jnidispatch	High

Identifiers

None

jna-5.16.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.16.0/jna-5.16.0.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 2d2475f1f026dd54e9f3e787ae4f81da
SHA1: 27ff882ac271db547aee520b38e3ba9aa91e136c
SHA256:5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
Referenced In Project/Scope: waffle-jetty-jakarta:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jnidispatch	High
Product	file	name	jnidispatch	High

Identifiers

None

jna-5.16.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.16.0/jna-5.16.0.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: 0caa1ef75a807f9dde05084fa2219a5c
SHA1: 2f5e1cd82cde192905c7510ce99037b67d980640
SHA256:752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44
Referenced In Project/Scope: waffle-jetty-jakarta:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jnidispatch	High
Product	file	name	jnidispatch	High

Identifiers

None

jna-platform-5.16.0.jar

Description:

Java Native Access Platform

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-platform/5.16.0/jna-platform-5.16.0.jar
MD5: 12ba6b7a7752ecf0a5baed725f3192c2
SHA1: b2a9065f97c166893d504b164706512338e3bbc2
SHA256:e5a79523964509757555782bb60283e4902611013f107e4600dc93298f73f382
Referenced In Project/Scope: waffle-jetty-jakarta:compile
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jna-platform	High
Vendor	jar	package name	jna	Highest
Vendor	jar	package name	platform	Highest
Vendor	jar	package name	sun	Highest
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	automatic-module-name	com.sun.jna.platform	Medium
Vendor	Manifest	bundle-category	jni	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.4	Low
Vendor	Manifest	bundle-symbolicname	com.sun.jna.platform	Medium
Vendor	Manifest	Implementation-Vendor	JNA Development Team	High
Vendor	Manifest	require-bundle	com.sun.jna;bundle-version="5.16.0"	Low
Vendor	Manifest	specification-vendor	JNA Development Team	Low
Vendor	pom	artifactid	jna-platform	Highest
Vendor	pom	artifactid	jna-platform	Low
Vendor	pom	developer email	mblaesing@doppel-helix.eu	Low
Vendor	pom	developer id	twall	Medium
Vendor	pom	developer name	Matthias Bläsing	Medium
Vendor	pom	developer name	Timothy Wall	Medium
Vendor	pom	groupid	net.java.dev.jna	Highest
Vendor	pom	name	Java Native Access Platform	High
Vendor	pom	url	java-native-access/jna	Highest
Product	file	name	jna-platform	High
Product	jar	package name	jna	Highest
Product	jar	package name	platform	Highest
Product	jar	package name	sun	Highest
Product	Manifest	automatic-module-name	com.sun.jna.platform	Medium
Product	Manifest	bundle-category	jni	Low
Product	Manifest	Bundle-Name	jna-platform	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.4	Low
Product	Manifest	bundle-symbolicname	com.sun.jna.platform	Medium
Product	Manifest	Implementation-Title	com.sun.jna	High
Product	Manifest	require-bundle	com.sun.jna;bundle-version="5.16.0"	Low
Product	Manifest	specification-title	Java Native Access (JNA)	Medium
Product	pom	artifactid	jna-platform	Highest
Product	pom	developer email	mblaesing@doppel-helix.eu	Low
Product	pom	developer id	twall	Low
Product	pom	developer name	Matthias Bläsing	Low
Product	pom	developer name	Timothy Wall	Low
Product	pom	groupid	net.java.dev.jna	Highest
Product	pom	name	Java Native Access Platform	High
Product	pom	url	java-native-access/jna	High
Version	file	version	5.16.0	High
Version	Manifest	Bundle-Version	5.16.0	High
Version	pom	version	5.16.0	Highest

Identifiers

pkg:maven/net.java.dev.jna/jna-platform@5.16.0 (Confidence:High)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	Manifest	bundle-symbolicname	org.jsr-305	Medium
Vendor	pom	artifactid	jsr305	Highest
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	file	name	jsr305	High
Product	Manifest	Bundle-Name	FindBugs-jsr305	Medium
Product	Manifest	bundle-symbolicname	org.jsr-305	Medium
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-jsr305	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.2	High
Version	Manifest	Bundle-Version	3.0.2	High
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

slf4j-api-2.0.16.jar

Description:

The slf4j API

License:

http://www.opensource.org/licenses/mit-license.php

File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.16/slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256:a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Project/Scope: waffle-jetty-jakarta:compile
pkg:maven/com.github.waffle/waffle-jna-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	slf4j-api	Highest
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	jar	package name	slf4j	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	SLF4J API Module	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.16	High
Version	Manifest	Bundle-Version	2.0.16	High
Version	Manifest	Implementation-Version	2.0.16	High
Version	pom	version	2.0.16	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@2.0.16 (Confidence:High)

spotbugs-annotations-4.8.6.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html

File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.8.6/spotbugs-annotations-4.8.6.jar
MD5: 0806b237c67c69869506ce3ced9a722f
SHA1: 1dcffed3e561ed32134a0dff4717f19bc2fdf4d8
SHA256:4548b74a815ed44f5480ca4f06204a8b00809dc7e5f6a825a9edf18f40377b65
Referenced In Project/Scope: waffle-jetty-jakarta:provided
pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.5.2-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spotbugs-annotations	High
Vendor	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Vendor	pom	artifactid	spotbugs-annotations	Highest
Vendor	pom	artifactid	spotbugs-annotations	Low
Vendor	pom	developer email	andreas.sewe@codetrails.com	Low
Vendor	pom	developer email	dbrosius@mebigfatguy.com	Low
Vendor	pom	developer email	loskutov@gmx.de	Low
Vendor	pom	developer email	skypencil@gmail.com	Low
Vendor	pom	developer id	henrik242	Medium
Vendor	pom	developer id	iloveeclipse	Medium
Vendor	pom	developer id	jsotuyod	Medium
Vendor	pom	developer id	KengoTODA	Medium
Vendor	pom	developer id	mebigfatguy	Medium
Vendor	pom	developer id	sewe	Medium
Vendor	pom	developer id	ThrawnCA	Medium
Vendor	pom	developer name	Andreas Sewe	Medium
Vendor	pom	developer name	Andrey Loskutov	Medium
Vendor	pom	developer name	Dave Brosius	Medium
Vendor	pom	developer name	Juan Martín Sotuyo Dodero	Medium
Vendor	pom	developer name	Kengo TODA	Medium
Vendor	pom	groupid	com.github.spotbugs	Highest
Vendor	pom	name	SpotBugs Annotations	High
Vendor	pom	url	https://spotbugs.github.io/	Highest
Product	file	name	spotbugs-annotations	High
Product	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Product	Manifest	Bundle-Name	spotbugs-annotations	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Product	pom	artifactid	spotbugs-annotations	Highest
Product	pom	developer email	andreas.sewe@codetrails.com	Low
Product	pom	developer email	dbrosius@mebigfatguy.com	Low
Product	pom	developer email	loskutov@gmx.de	Low
Product	pom	developer email	skypencil@gmail.com	Low
Product	pom	developer id	henrik242	Low
Product	pom	developer id	iloveeclipse	Low
Product	pom	developer id	jsotuyod	Low
Product	pom	developer id	KengoTODA	Low
Product	pom	developer id	mebigfatguy	Low
Product	pom	developer id	sewe	Low
Product	pom	developer id	ThrawnCA	Low
Product	pom	developer name	Andreas Sewe	Low
Product	pom	developer name	Andrey Loskutov	Low
Product	pom	developer name	Dave Brosius	Low
Product	pom	developer name	Juan Martín Sotuyo Dodero	Low
Product	pom	developer name	Kengo TODA	Low
Product	pom	groupid	com.github.spotbugs	Highest
Product	pom	name	SpotBugs Annotations	High
Product	pom	url	https://spotbugs.github.io/	Medium
Version	file	version	4.8.6	High
Version	Manifest	Bundle-Version	4.8.6	High
Version	pom	version	4.8.6	Highest

Identifiers

pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6 (Confidence:High)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: waffle-jetty-jakarta

com.github.waffle:waffle-jetty-jakarta:3.5.2-SNAPSHOT

Summary

Dependencies (vulnerable)

ant-1.10.8.jar

Evidence

Related Dependencies

Identifiers

Published Vulnerabilities

asm-9.7.1.jar

Evidence

Identifiers

asm-commons-9.7.1.jar

Evidence

Identifiers

asm-tree-9.7.1.jar

Evidence

Identifiers

byte-buddy-1.15.11.jar

Evidence

Identifiers

byte-buddy-agent-1.15.11.jar

Evidence

Identifiers

byte-buddy-agent-1.15.11.jar: attach_hotspot_windows.dll

Evidence

Identifiers

byte-buddy-agent-1.15.11.jar: attach_hotspot_windows.dll

Evidence

Identifiers

caffeine-3.1.8.jar

Evidence

Identifiers

checker-qual-3.48.3.jar

Evidence

Identifiers

com.github.waffle:waffle-jna-jakarta:3.5.2-SNAPSHOT

Evidence

Identifiers

ecj-3.40.0.jar

Evidence

Identifiers

error_prone_annotations-2.36.0.jar

Evidence

Identifiers

expressly-5.0.0.jar

Evidence

Identifiers

j2objc-annotations-3.0.0.jar

Evidence

Identifiers

jakarta.annotation-api-3.0.0.jar

Evidence

Identifiers

jakarta.el-api-6.0.1.jar

Evidence

Identifiers

jakarta.servlet-api-6.0.0.jar

Evidence

Identifiers

jakarta.servlet.jsp-3.0.0.jar

Evidence

Identifiers

jakarta.servlet.jsp-api-4.0.0.jar

Evidence

Identifiers

jakarta.servlet.jsp.jstl-3.0.1.jar

Evidence

Identifiers

jcl-over-slf4j-2.0.16.jar

Evidence

Identifiers

jdtcore-3.1.0.jar

Evidence

Identifiers

Published Vulnerabilities

jdtcore-3.1.0.jar: jdtCompilerAdapter.jar

Evidence

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor