Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

Project: waffle-jetty-jakarta

com.github.waffle:waffle-jetty-jakarta:3.6.0-SNAPSHOT

Scan Information (show all):

Summary

Summary of Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
ant-1.10.8.jarcpe:2.3:a:apache:ant:1.10.8:*:*:*:*:*:*:*pkg:maven/org.apache.ant/ant@1.10.8HIGH3Highest24
asm-9.9.jarpkg:maven/org.ow2.asm/asm@9.9 054
asm-commons-9.9.jarpkg:maven/org.ow2.asm/asm-commons@9.9 058
asm-tree-9.9.jarpkg:maven/org.ow2.asm/asm-tree@9.9 058
caffeine-3.2.3.jarpkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3 033
checker-qual-3.52.0.jarpkg:maven/org.checkerframework/checker-qual@3.52.0 044
com.github.waffle:waffle-jna-jakarta:3.6.0-SNAPSHOTpkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT 06
ecj-3.43.0.jarpkg:maven/org.eclipse.jdt/ecj@3.43.0 036
error_prone_annotations-2.44.0.jarpkg:maven/com.google.errorprone/error_prone_annotations@2.44.0 029
expressly-6.0.0.jarpkg:maven/org.glassfish.expressly/expressly@6.0.0 045
j2objc-annotations-3.1.jarpkg:maven/com.google.j2objc/j2objc-annotations@3.1 033
jakarta.annotation-api-3.0.0.jarcpe:2.3:a:oracle:projects:3.0.0:*:*:*:*:*:*:*pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0 0Low42
jakarta.el-api-6.0.1.jarcpe:2.3:a:eclipse:jakarta_expression_language:6.0.1:*:*:*:*:*:*:*pkg:maven/jakarta.el/jakarta.el-api@6.0.1 0Low45
jakarta.servlet-api-6.0.0.jarcpe:2.3:a:oracle:projects:6.0.0:*:*:*:*:*:*:*pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0 0Low44
jakarta.servlet.jsp-3.0.0.jarpkg:maven/org.glassfish.web/jakarta.servlet.jsp@3.0.0 047
jakarta.servlet.jsp-api-4.0.0.jarpkg:maven/jakarta.servlet.jsp/jakarta.servlet.jsp-api@4.0.0 045
jakarta.servlet.jsp.jstl-3.0.1.jarcpe:2.3:a:oracle:jsp:3.0.1:*:*:*:*:*:*:*pkg:maven/org.glassfish.web/jakarta.servlet.jsp.jstl@3.0.1 0Medium47
jdtcore-3.1.0.jarpkg:maven/eclipse/jdtcore@3.1.0 025
jdtcore-3.1.0.jar: jdtCompilerAdapter.jar 07
jetty-io-12.1.3.jarcpe:2.3:a:eclipse:jetty:12.1.3:*:*:*:*:*:*:*
cpe:2.3:a:jetty:jetty:12.1.3:*:*:*:*:*:*:*
cpe:2.3:a:mortbay_jetty:jetty:12.1.3:*:*:*:*:*:*:*
pkg:maven/org.eclipse.jetty/jetty-io@12.1.3 0Highest33
jetty-server-12.1.3.jarcpe:2.3:a:eclipse:jetty:12.1.3:*:*:*:*:*:*:*
cpe:2.3:a:jetty:jetty:12.1.3:*:*:*:*:*:*:*
cpe:2.3:a:jetty:jetty_http_server:12.1.3:*:*:*:*:*:*:*
cpe:2.3:a:mortbay_jetty:jetty:12.1.3:*:*:*:*:*:*:*
pkg:maven/org.eclipse.jetty/jetty-server@12.1.3 0Highest33
jna-5.18.1.jarcpe:2.3:a:oracle:java_se:5.18.1:*:*:*:*:*:*:*pkg:maven/net.java.dev.jna/jna@5.18.1 0Low48
jna-5.18.1.jar: jnidispatch.dll 02
jna-5.18.1.jar: jnidispatch.dll 02
jna-5.18.1.jar: jnidispatch.dll 02
jna-platform-5.18.1.jarpkg:maven/net.java.dev.jna/jna-platform@5.18.1 042
jspecify-1.0.0.jarpkg:maven/org.jspecify/jspecify@1.0.0 032
jsr305-3.0.2.jarpkg:maven/com.google.code.findbugs/jsr305@3.0.2 017
mortbay-apache-el-10.1.44.1.jarcpe:2.3:a:eclipse:jetty:10.1.44.1:*:*:*:*:*:*:*
cpe:2.3:a:jetty:jetty:10.1.44.1:*:*:*:*:*:*:*
cpe:2.3:a:mortbay:jetty:10.1.44.1:*:*:*:*:*:*:*
cpe:2.3:a:mortbay_jetty:jetty:10.1.44.1:*:*:*:*:*:*:*
pkg:maven/org.mortbay.jasper/mortbay-apache-el@10.1.44.1 0Low35
mortbay-apache-jsp-10.1.44.1.jarcpe:2.3:a:apache:tomcat:10.1.44.1:*:*:*:*:*:*:*pkg:maven/org.mortbay.jasper/mortbay-apache-jsp@10.1.44.1 0Low33
slf4j-api-2.0.17.jarpkg:maven/org.slf4j/slf4j-api@2.0.17 029
spotbugs-annotations-4.9.8.jarpkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8 053

Dependencies (vulnerable)

ant-1.10.8.jar

File Path: /home/runner/.m2/repository/org/apache/ant/ant/1.10.8/ant-1.10.8.jar
MD5: 4492182f592ad9779a5de60e3f0ea3c4
SHA1: ae148abb0532b685c5eeb22fdec9d124e89be5de
SHA256:b96b46fd2b4b00e42684c3085b0d16dde975e7b8e64822b0bf52edf5fd387d8d
Referenced In Project/Scope: waffle-jetty-jakarta:provided
ant-1.10.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.glassfish.web/jakarta.servlet.jsp@3.0.0

Identifiers

CVE-2020-11979  

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
CWE-379 Creation of Temporary File in Directory with Insecure Permissions, NVD-CWE-Other

CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A
CVSSv2:
  • Base Score: MEDIUM (5.0)
  • Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N

References:

Vulnerable Software & Versions: (show all)

CVE-2021-36373  

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.
CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-Other

CVSSv3:
  • Base Score: MEDIUM (5.5)
  • Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:1.8/RC:R/MAV:A
CVSSv2:
  • Base Score: MEDIUM (4.3)
  • Vector: /AV:N/AC:M/Au:N/C:N/I:N/A:P

References:

Vulnerable Software & Versions: (show all)

CVE-2021-36374  

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.
CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-Other

CVSSv3:
  • Base Score: MEDIUM (5.5)
  • Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:1.8/RC:R/MAV:A
CVSSv2:
  • Base Score: MEDIUM (4.3)
  • Vector: /AV:N/AC:M/Au:N/C:N/I:N/A:P

References:

Vulnerable Software & Versions: (show all)

asm-9.9.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.9/asm-9.9.jar
MD5: 6d1dd0482c03a6dc1807d9d004456021
SHA1: c29635c8a7afa03d74b33c1884df8abb2b3f3dcc
SHA256:03d99a74ad1ee5c71334ef67437f4ef4fe3488caa7c96d8645abc73c8e2017d4
Referenced In Project/Scope: waffle-jetty-jakarta:provided
asm-9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.ow2.asm/asm-commons@9.9

Identifiers

  • pkg:maven/org.ow2.asm/asm@9.9  (Confidence:High)

asm-commons-9.9.jar

Description:

Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm-commons/9.9/asm-commons-9.9.jar
MD5: 8103b3de8f48fb4c7f97efdaa46ce809
SHA1: db9165a3bf908ded6b08612d583a15d1d0c7bda0
SHA256:db2f6f26150bbe7c126606b4a1151836bcc22a1e05a423b3585698bece995ff8
Referenced In Project/Scope: waffle-jetty-jakarta:provided
asm-commons-9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/org.ow2.asm/asm-commons@9.9  (Confidence:High)

asm-tree-9.9.jar

Description:

Tree API of ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm-tree/9.9/asm-tree-9.9.jar
MD5: 912eeaba1a63d574ffc66c651c7c6725
SHA1: f8de6eead6d24dd0f45bd065bbe112b2cda6ea21
SHA256:42178f3775c9c63f9e5e1446747d29b4eca4d91bd6e75e5c43cfa372a47d38c6
Referenced In Project/Scope: waffle-jetty-jakarta:provided
asm-tree-9.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.ow2.asm/asm-commons@9.9

Identifiers

  • pkg:maven/org.ow2.asm/asm-tree@9.9  (Confidence:High)

caffeine-3.2.3.jar

Description:

A high performance caching library

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/github/ben-manes/caffeine/caffeine/3.2.3/caffeine-3.2.3.jar
MD5: 0258f45d43968523cc11beeb01b240f2
SHA1: c097f0f6d21a0e6db88ea55836e26419b30dfe19
SHA256:ca70c90a5d1ce1511880ce9c93d4ad22108f61111d3daf91eb52762b571bd179
Referenced In Project/Scope: waffle-jetty-jakarta:compile
caffeine-3.2.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.3  (Confidence:High)

checker-qual-3.52.0.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/org/checkerframework/checker-qual/3.52.0/checker-qual-3.52.0.jar
MD5: d7eeaac6d7810375c2484fd4faeb2f69
SHA1: 9c17f496846ab1fca8975c6a50ceac0b3bbe63f0
SHA256:0b5bb1a4bdc4e4b1217482fe598efcaab4e1fba7b37f9412639178fc8116fc05
Referenced In Project/Scope: waffle-jetty-jakarta:compile
checker-qual-3.52.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/org.checkerframework/checker-qual@3.52.0  (Confidence:High)

com.github.waffle:waffle-jna-jakarta:3.6.0-SNAPSHOT

Description:

WAFFLE JNA Jakarta Pakage implementation

License:

MIT https://raw.github.com/Waffle/waffle/master/LICENSE
File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-jna-jakarta/pom.xml

Referenced In Project/Scope: waffle-jetty-jakarta
com.github.waffle:waffle-jna-jakarta:3.6.0-SNAPSHOT is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT  (Confidence:Highest)

ecj-3.43.0.jar

Description:

Eclipse Compiler for Java(TM)

License:

EPL-2.0: https://www.eclipse.org/legal/epl-2.0/
File Path: /home/runner/.m2/repository/org/eclipse/jdt/ecj/3.43.0/ecj-3.43.0.jar
MD5: 571ac60d561935d9538ae77c99a7bdda
SHA1: 3217710cfc3c6c20c2921623d1566e97ce5aeb6c
SHA256:c786468c65e906498e7e36ece4e0d04c6d3dd34c9a61b34a3a5b512801911a82
Referenced In Project/Scope: waffle-jetty-jakarta:provided
ecj-3.43.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/org.eclipse.jdt/ecj@3.43.0  (Confidence:High)

error_prone_annotations-2.44.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.44.0/error_prone_annotations-2.44.0.jar
MD5: 11d0ff18fb88d4e4c48a4347e9e4a1e0
SHA1: bbbf88e1d12da9c6f7f204ca78a55446654ce7e1
SHA256:bcf738a525e546c926a233d0a169cf7eafcf703fe81ac9d6994f7244eda29052
Referenced In Project/Scope: waffle-jetty-jakarta:provided
error_prone_annotations-2.44.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/com.google.errorprone/error_prone_annotations@2.44.0  (Confidence:High)

expressly-6.0.0.jar

Description:

Jakarta Expression Language Implementation

License:

https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/expressly/expressly/6.0.0/expressly-6.0.0.jar
MD5: e19bad48904a955072a576f0efea554b
SHA1: 0524fa43fa48fc68fb62604cf14ce71b31caf7c0
SHA256:86ee67c7040278bac5204b571f738b8b859f014ceb5f896bd935bacbdaf33cb9
Referenced In Project/Scope: waffle-jetty-jakarta:provided
expressly-6.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/org.glassfish.expressly/expressly@6.0.0  (Confidence:High)

j2objc-annotations-3.1.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.
  

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.1/j2objc-annotations-3.1.jar
MD5: abe8bd3abff622b9a8b15c3a737aa741
SHA1: a892ca9507839bbdb900d64310ac98256cab992f
SHA256:84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Project/Scope: waffle-jetty-jakarta:provided
j2objc-annotations-3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/com.google.j2objc/j2objc-annotations@3.1  (Confidence:High)

jakarta.annotation-api-3.0.0.jar

Description:

Jakarta Annotations API

License:

EPL 2.0: https://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/3.0.0/jakarta.annotation-api-3.0.0.jar
MD5: 7faffaab962918da4cf5ddfd76609dd2
SHA1: 54f928fadec906a99d558536756d171917b9d936
SHA256:b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jakarta.annotation-api-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0  (Confidence:High)
  • cpe:2.3:a:oracle:projects:3.0.0:*:*:*:*:*:*:*  (Confidence:Low)  

jakarta.el-api-6.0.1.jar

Description:

        Jakarta Expression Language defines an expression language for Java applications
    

License:

https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/el/jakarta.el-api/6.0.1/jakarta.el-api-6.0.1.jar
MD5: a98f097e059552a75748fcdd067e5c16
SHA1: c7c4a2eb1e40e0ff45ab5e2e52bd77d8c7a75176
SHA256:7e84b5bed49de32b79cc5e85d90b6f5adb1a953ac67283adbb41c1e297f9c605
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jakarta.el-api-6.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/jakarta.el/jakarta.el-api@6.0.1  (Confidence:High)
  • cpe:2.3:a:eclipse:jakarta_expression_language:6.0.1:*:*:*:*:*:*:*  (Confidence:Low)  

jakarta.servlet-api-6.0.0.jar

Description:

Jakarta Servlet 6.0

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/servlet/jakarta.servlet-api/6.0.0/jakarta.servlet-api-6.0.0.jar
MD5: 4bcb3175ed9b7aa3f038d082879ec2a8
SHA1: abecc699286e65035ebba9844c03931357a6a963
SHA256:c034eb1afb158987dbb53a5fea0cadf611c8dae8daadd59c44d9d5ab70129cef
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jakarta.servlet-api-6.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.1.3

Identifiers

  • pkg:maven/jakarta.servlet/jakarta.servlet-api@6.0.0  (Confidence:High)
  • cpe:2.3:a:oracle:projects:6.0.0:*:*:*:*:*:*:*  (Confidence:Low)  

jakarta.servlet.jsp-3.0.0.jar

Description:

JavaServer Pages API

License:

https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/web/jakarta.servlet.jsp/3.0.0/jakarta.servlet.jsp-3.0.0.jar
MD5: fca522b72282d53d0819af32a5a2ec9c
SHA1: a1b306dd295439765d0fd2f9b00a48501c892b88
SHA256:7dde5d9789c030401c80bdfdbcc7a021665a451ba6f4ebdc033196cb7c8dee2a
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jakarta.servlet.jsp-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/org.glassfish.web/jakarta.servlet.jsp@3.0.0  (Confidence:High)

jakarta.servlet.jsp-api-4.0.0.jar

Description:

Jakarta Server Pages API

License:

https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt, https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/servlet/jsp/jakarta.servlet.jsp-api/4.0.0/jakarta.servlet.jsp-api-4.0.0.jar
MD5: 6fddc938119e00e6f934c1b37120e338
SHA1: a8de3741b91ba7427306104979ab2f084e831438
SHA256:873b7d0c2b5734ef8847634299b67ce879080cdece8426147522c4db8e37c14e
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jakarta.servlet.jsp-api-4.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/jakarta.servlet.jsp/jakarta.servlet.jsp-api@4.0.0  (Confidence:High)

jakarta.servlet.jsp.jstl-3.0.1.jar

Description:

Jakarta Standard Tag Library Implementation

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/org/glassfish/web/jakarta.servlet.jsp.jstl/3.0.1/jakarta.servlet.jsp.jstl-3.0.1.jar
MD5: 3f6511c0066616415b9ed23a018b1cde
SHA1: 078909a1354585b2a7a2d3b4e348fceff8b6d180
SHA256:5cc6e60b9e74d38c25fe4f2d22dfd40577f5b8396bc885f7061cd2c525a43b86
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jakarta.servlet.jsp.jstl-3.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT

Identifiers

jdtcore-3.1.0.jar

File Path: /home/runner/.m2/repository/eclipse/jdtcore/3.1.0/jdtcore-3.1.0.jar
MD5: d1651bf9048165f304e7877f1eaad6dc
SHA1: c5e3e72ae7220118c3da808628ec7016d4d8aef2
SHA256:b163be93b2131f97dd23ee03c935b34f48c17e74d8f60b644747528ea024e88e
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jdtcore-3.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.glassfish.web/jakarta.servlet.jsp@3.0.0

Identifiers

  • pkg:maven/eclipse/jdtcore@3.1.0  (Confidence:High)

jdtcore-3.1.0.jar: jdtCompilerAdapter.jar

File Path: /home/runner/.m2/repository/eclipse/jdtcore/3.1.0/jdtcore-3.1.0.jar/jdtCompilerAdapter.jar
MD5: e66287f3ce15029d202ffc9c2dc3aa77
SHA1: a9d9eb99b7920dd3ee24d601a26cd7e473b0bf6e
SHA256:c79595d136ba157fc63286bf29cee69f6ab09cf2b9005ce70ae7eb01431115d9
Referenced In Project/Scope: waffle-jetty-jakarta:provided

Identifiers

  • None

jetty-io-12.1.3.jar

Description:

Jetty module for Core :: IO

License:

EPL-2.0 OR Apache-2.0
https://www.eclipse.org/legal/epl-2.0/, https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-io/12.1.3/jetty-io-12.1.3.jar
MD5: 32a95435dc101a448372f0b0a3b55974
SHA1: 2c46bf53f41e40df72ff457c40553da2ace7b956
SHA256:bb96db1fc7493403084d41b196b5a0cda94859d396d51511ac19dfb18048c3eb
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jetty-io-12.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.eclipse.jetty/jetty-client@12.1.3

Identifiers

jetty-server-12.1.3.jar

Description:

The legacy jetty server artifact.

License:

EPL-2.0 OR Apache-2.0
https://www.eclipse.org/legal/epl-2.0/, https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-server/12.1.3/jetty-server-12.1.3.jar
MD5: 783233a7c09f86458a900b3178a969f9
SHA1: 7741aafcd7d6dc718d04d4cfb883982e361d6577
SHA256:8ecd7b83eaa17f2f86b36c2f88df1a510c428acad691778112f6f7f24015e367
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jetty-server-12.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.1.3

Identifiers

jna-5.18.1.jar

Description:

Java Native Access

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.18.1/jna-5.18.1.jar
MD5: cb531ec131e1c68c045b5d45fe5b9878
SHA1: b27ba04287cc4abe769642fe8318d39fc89bf937
SHA256:260c4b1e22b1db9e110ee441c4f13ce115f841fa48c41d78750986214b395557
Referenced In Project/Scope: waffle-jetty-jakarta:compile
jna-5.18.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/net.java.dev.jna/jna@5.18.1  (Confidence:High)
  • cpe:2.3:a:oracle:java_se:5.18.1:*:*:*:*:*:*:*  (Confidence:Low)  

jna-5.18.1.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.18.1/jna-5.18.1.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: 302945a811fd8e21bcdd5226c73b6f74
SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607c
SHA256:b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699d
Referenced In Project/Scope: waffle-jetty-jakarta:compile

Identifiers

  • None

jna-5.18.1.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.18.1/jna-5.18.1.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 2d2475f1f026dd54e9f3e787ae4f81da
SHA1: 27ff882ac271db547aee520b38e3ba9aa91e136c
SHA256:5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
Referenced In Project/Scope: waffle-jetty-jakarta:compile

Identifiers

  • None

jna-5.18.1.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.18.1/jna-5.18.1.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: 0caa1ef75a807f9dde05084fa2219a5c
SHA1: 2f5e1cd82cde192905c7510ce99037b67d980640
SHA256:752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44
Referenced In Project/Scope: waffle-jetty-jakarta:compile

Identifiers

  • None

jna-platform-5.18.1.jar

Description:

Java Native Access Platform

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-platform/5.18.1/jna-platform-5.18.1.jar
MD5: a7af00779ec98bfe22dfb07b1532830d
SHA1: dd817f391efc492041c9ae91127527c13750a789
SHA256:ad14c1b1ec4f43d396231219dfa635ebf828f738eac9f890ea1bc07795892d9a
Referenced In Project/Scope: waffle-jetty-jakarta:compile
jna-platform-5.18.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/net.java.dev.jna/jna-platform@5.18.1  (Confidence:High)

jspecify-1.0.0.jar

Description:

An artifact of well-named and well-specified annotations to power static analysis checks

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar
MD5: 9133aba420d0ca3b001dbb6ae9992cf6
SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507
SHA256:1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab
Referenced In Project/Scope: waffle-jetty-jakarta:compile
jspecify-1.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.0.1

Identifiers

  • pkg:maven/org.jspecify/jspecify@1.0.0  (Confidence:High)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: waffle-jetty-jakarta:provided
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8

Identifiers

  • pkg:maven/com.google.code.findbugs/jsr305@3.0.2  (Confidence:High)

mortbay-apache-el-10.1.44.1.jar

Description:

A rebundling of Apache Tomcat Jasper to remove the tomcat server dependencies,    so that the JSP engine can be used by the Eclipse Jetty project.

License:

http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/mortbay/jasper/mortbay-apache-el/10.1.44.1/mortbay-apache-el-10.1.44.1.jar
MD5: b507d0f580ef493ac437768184385121
SHA1: eacb3f5c02ff139b7b8168ad2e1239fec9b91dfa
SHA256:a2765dac7d41e7c167fafcaca524c6443058124d1daa0e8d59bf0ebb44a56f2b
Referenced In Project/Scope: waffle-jetty-jakarta:provided
mortbay-apache-el-10.1.44.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-apache-jsp@12.1.3

Identifiers

  • pkg:maven/org.mortbay.jasper/mortbay-apache-el@10.1.44.1  (Confidence:High)
  • cpe:2.3:a:eclipse:jetty:10.1.44.1:*:*:*:*:*:*:*  (Confidence:Low)  
  • cpe:2.3:a:jetty:jetty:10.1.44.1:*:*:*:*:*:*:*  (Confidence:Low)  
  • cpe:2.3:a:mortbay:jetty:10.1.44.1:*:*:*:*:*:*:*  (Confidence:Low)  
  • cpe:2.3:a:mortbay_jetty:jetty:10.1.44.1:*:*:*:*:*:*:*  (Confidence:Low)  

mortbay-apache-jsp-10.1.44.1.jar

Description:

A rebundling of Apache Tomcat Jasper to remove the tomcat server dependencies,    so that the JSP engine can be used by the Eclipse Jetty project.

License:

http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/mortbay/jasper/mortbay-apache-jsp/10.1.44.1/mortbay-apache-jsp-10.1.44.1.jar
MD5: 78d8a434a8a0d2d2af7a2101d416b90b
SHA1: b57dd2dedcf0b228f3023722e8f3eda7aaec8d35
SHA256:8314ce1a57ea2d2319fcf0276ba9b1ada0354c5952b1bc7834b97634258ec99d
Referenced In Project/Scope: waffle-jetty-jakarta:provided
mortbay-apache-jsp-10.1.44.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-apache-jsp@12.1.3

Identifiers

  • pkg:maven/org.mortbay.jasper/mortbay-apache-jsp@10.1.44.1  (Confidence:High)
  • cpe:2.3:a:apache:tomcat:10.1.44.1:*:*:*:*:*:*:*  (Confidence:Low)  

slf4j-api-2.0.17.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Project/Scope: waffle-jetty-jakarta:compile
slf4j-api-2.0.17.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/org.slf4j/slf4j-api@2.0.17  (Confidence:High)

spotbugs-annotations-4.9.8.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.9.8/spotbugs-annotations-4.9.8.jar
MD5: d4c2e7bd090be697ad409a4e75684a94
SHA1: ca4a2783a6123e67124fd7feb4caccd2e2ac9a73
SHA256:6f69d6fe9c55a54dcb30e87d8fa2d5f52246af50d7a3445246d9539ef221be1c
Referenced In Project/Scope: waffle-jetty-jakarta:provided
spotbugs-annotations-4.9.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jetty-jakarta@3.6.0-SNAPSHOT

Identifiers

  • pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8  (Confidence:High)


This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.