Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 9.0.9
Report Generated On: Sun, 21 Jan 2024 09:41:59 GMT
Dependencies Scanned: 30 (24 unique)
Vulnerable Dependencies: 1
Vulnerabilities Found: 1
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2024-01-21T09:39:41Z
NVD API Last Modified: 2024-01-21T08:15:07Z

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Highest Severity	CVE Count	Confidence	Evidence Count
byte-buddy-1.14.11.jar		pkg:maven/net.bytebuddy/byte-buddy@1.14.11		0		29
byte-buddy-agent-1.14.11.jar		pkg:maven/net.bytebuddy/byte-buddy-agent@1.14.11		0		33
byte-buddy-agent-1.14.11.jar: attach_hotspot_windows.dll				0		2
byte-buddy-agent-1.14.11.jar: attach_hotspot_windows.dll				0		2
caffeine-3.1.8.jar		pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8		0		37
checker-qual-3.42.0.jar		pkg:maven/org.checkerframework/checker-qual@3.42.0		0		46
com.github.waffle:waffle-jna:3.3.1-SNAPSHOT		pkg:maven/com.github.waffle/waffle-jna@3.3.1-SNAPSHOT		0		6
error_prone_annotations-2.24.1.jar		pkg:maven/com.google.errorprone/error_prone_annotations@2.24.1		0		29
j2objc-annotations-2.8.jar		pkg:maven/com.google.j2objc/j2objc-annotations@2.8		0		24
jcl-over-slf4j-2.0.11.jar		pkg:maven/org.slf4j/jcl-over-slf4j@2.0.11		0		31
jna-5.14.0.jar	cpe:2.3:a:oracle:java_se:5.14.0:::::::*	pkg:maven/net.java.dev.jna/jna@5.14.0		0	Low	48
jna-5.14.0.jar: jnidispatch.dll				0		2
jna-5.14.0.jar: jnidispatch.dll				0		2
jna-5.14.0.jar: jnidispatch.dll				0		2
jna-platform-5.14.0.jar		pkg:maven/net.java.dev.jna/jna-platform@5.14.0		0		44
jsr305-3.0.2.jar		pkg:maven/com.google.code.findbugs/jsr305@3.0.2		0		17
slf4j-api-2.0.11.jar		pkg:maven/org.slf4j/slf4j-api@2.0.11		0		29
spotbugs-annotations-4.8.3.jar		pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3		0		53
tomcat-annotations-api-8.5.98.jar		pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.98		0		16
tomcat-api-8.5.98.jar	cpe:2.3:a:apache:tomcat:8.5.98:::::::* cpe:2.3:a:apache_tomcat:apache_tomcat:8.5.98:::::::*	pkg:maven/org.apache.tomcat/tomcat-api@8.5.98	HIGH	1	Highest	20
tomcat-el-api-8.5.98.jar		pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.98		0		19
tomcat-jni-8.5.98.jar		pkg:maven/org.apache.tomcat/tomcat-jni@8.5.98		0		22
tomcat-juli-8.5.98.jar		pkg:maven/org.apache.tomcat/tomcat-juli@8.5.98		0		22
tomcat-servlet-api-8.5.98.jar		pkg:maven/org.apache.tomcat/tomcat-servlet-api@8.5.98		0		18

Dependencies (vulnerable)

byte-buddy-1.14.11.jar

Description:

        Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy/1.14.11/byte-buddy-1.14.11.jar
MD5: c28e36075a114b176953fc10a5370be7
SHA1: 725602eb7c8c56b51b9c21f273f9df5c909d9e7d
SHA256:62ae28187ed2b062813da6a9d567bfee733c341582699b62dd980230729a0313
Referenced In Project/Scope: waffle-tomcat85:compile
pkg:maven/com.github.waffle/waffle-tomcat85@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	byte-buddy	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	build	Highest
Vendor	jar	package name	bytebuddy	Highest
Vendor	jar	package name	net	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	byte-buddy	Highest
Vendor	pom	artifactid	byte-buddy	Low
Vendor	pom	groupid	net.bytebuddy	Highest
Vendor	pom	name	Byte Buddy (without dependencies)	High
Vendor	pom	parent-artifactid	byte-buddy-parent	Low
Product	file	name	byte-buddy	High
Product	jar	package name	asm	Highest
Product	jar	package name	build	Highest
Product	jar	package name	bytebuddy	Highest
Product	jar	package name	net	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	Byte Buddy (without dependencies)	Medium
Product	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	byte-buddy	Highest
Product	pom	groupid	net.bytebuddy	Highest
Product	pom	name	Byte Buddy (without dependencies)	High
Product	pom	parent-artifactid	byte-buddy-parent	Medium
Version	file	version	1.14.11	High
Version	Manifest	Bundle-Version	1.14.11	High
Version	pom	version	1.14.11	Highest

Identifiers

pkg:maven/net.bytebuddy/byte-buddy@1.14.11 (Confidence:High)

byte-buddy-agent-1.14.11.jar

Description:

The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy-agent/1.14.11/byte-buddy-agent-1.14.11.jar
MD5: 0de12734d808654692599b08ccd84020
SHA1: f9cb566608fbac6bc7bf54901a7aa11543a989ee
SHA256:2f537a621a64fa7013d68c695a76a34ee8d79dad74e635caca16dd56257aeb80
Referenced In Project/Scope: waffle-tomcat85:compile
pkg:maven/com.github.waffle/waffle-tomcat85@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	byte-buddy-agent	High
Vendor	jar	package name	agent	Highest
Vendor	jar	package name	bytebuddy	Highest
Vendor	jar	package name	net	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy-agent	Medium
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	Manifest	can-retransform-classes	true	Low
Vendor	Manifest	can-set-native-method-prefix	true	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	byte-buddy-agent	Highest
Vendor	pom	artifactid	byte-buddy-agent	Low
Vendor	pom	groupid	net.bytebuddy	Highest
Vendor	pom	name	Byte Buddy agent	High
Vendor	pom	parent-artifactid	byte-buddy-parent	Low
Product	file	name	byte-buddy-agent	High
Product	jar	package name	agent	Highest
Product	jar	package name	bytebuddy	Highest
Product	jar	package name	net	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	Byte Buddy agent	Medium
Product	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy-agent	Medium
Product	Manifest	can-redefine-classes	true	Low
Product	Manifest	can-retransform-classes	true	Low
Product	Manifest	can-set-native-method-prefix	true	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	byte-buddy-agent	Highest
Product	pom	groupid	net.bytebuddy	Highest
Product	pom	name	Byte Buddy agent	High
Product	pom	parent-artifactid	byte-buddy-parent	Medium
Version	file	version	1.14.11	High
Version	Manifest	Bundle-Version	1.14.11	High
Version	pom	version	1.14.11	Highest

Identifiers

pkg:maven/net.bytebuddy/byte-buddy-agent@1.14.11 (Confidence:High)

byte-buddy-agent-1.14.11.jar: attach_hotspot_windows.dll

File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy-agent/1.14.11/byte-buddy-agent-1.14.11.jar/win32-x86-64/attach_hotspot_windows.dll
MD5: 053a783e5777c6a9867c27d51af89677
SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76
SHA256:16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20
Referenced In Project/Scope: waffle-tomcat85:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	attach_hotspot_windows	High
Product	file	name	attach_hotspot_windows	High

Identifiers

None

byte-buddy-agent-1.14.11.jar: attach_hotspot_windows.dll

File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy-agent/1.14.11/byte-buddy-agent-1.14.11.jar/win32-x86/attach_hotspot_windows.dll
MD5: fbca33102ac97be0ed496c0f78e466b3
SHA1: c4df05146a86a6d073769bb697d550ef42518ed5
SHA256:810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72
Referenced In Project/Scope: waffle-tomcat85:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	attach_hotspot_windows	High
Product	file	name	attach_hotspot_windows	High

Identifiers

None

caffeine-3.1.8.jar

Description:

A high performance caching library

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/github/ben-manes/caffeine/caffeine/3.1.8/caffeine-3.1.8.jar
MD5: b19301179903e8781776397d9923f7c8
SHA1: 24795585df8afaf70a2cd534786904ea5889c047
SHA256:7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3
Referenced In Project/Scope: waffle-tomcat85:compile
pkg:maven/com.github.waffle/waffle-jna@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	caffeine	High
Vendor	jar	package name	benmanes	Highest
Vendor	jar	package name	cache	Highest
Vendor	jar	package name	caffeine	Highest
Vendor	jar	package name	github	Highest
Vendor	Manifest	automatic-module-name	com.github.benmanes.caffeine	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-symbolicname	com.github.ben-manes.caffeine	Medium
Vendor	pom	artifactid	caffeine	Highest
Vendor	pom	artifactid	caffeine	Low
Vendor	pom	developer email	ben.manes@gmail.com	Low
Vendor	pom	developer id	ben-manes	Medium
Vendor	pom	developer name	Ben Manes	Medium
Vendor	pom	groupid	com.github.ben-manes.caffeine	Highest
Vendor	pom	name	Caffeine cache	High
Vendor	pom	url	ben-manes/caffeine	Highest
Product	file	name	caffeine	High
Product	jar	package name	benmanes	Highest
Product	jar	package name	cache	Highest
Product	jar	package name	caffeine	Highest
Product	jar	package name	github	Highest
Product	Manifest	automatic-module-name	com.github.benmanes.caffeine	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	Bundle-Name	com.github.ben-manes.caffeine	Medium
Product	Manifest	bundle-symbolicname	com.github.ben-manes.caffeine	Medium
Product	Manifest	Implementation-Title	A high performance caching library	High
Product	pom	artifactid	caffeine	Highest
Product	pom	developer email	ben.manes@gmail.com	Low
Product	pom	developer id	ben-manes	Low
Product	pom	developer name	Ben Manes	Low
Product	pom	groupid	com.github.ben-manes.caffeine	Highest
Product	pom	name	Caffeine cache	High
Product	pom	url	ben-manes/caffeine	High
Version	file	version	3.1.8	High
Version	Manifest	Bundle-Version	3.1.8	High
Version	Manifest	Implementation-Version	3.1.8	High
Version	pom	version	3.1.8	Highest

Identifiers

pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8 (Confidence:High)

checker-qual-3.42.0.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: http://opensource.org/licenses/MIT

File Path: /home/runner/.m2/repository/org/checkerframework/checker-qual/3.42.0/checker-qual-3.42.0.jar
MD5: 4c55448dcbfe9c3702f7758fc8fe0086
SHA1: 638ec33f363a94d41a4f03c3e7d3dcfba64e402d
SHA256:ccaedd33af0b7894d9f2f3b644f4d19e43928e32902e61ac4d10777830f5aac7
Referenced In Project/Scope: waffle-tomcat85:compile
pkg:maven/com.github.waffle/waffle-jna@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	checker-qual	High
Vendor	jar	package name	checker	Highest
Vendor	jar	package name	checkerframework	Highest
Vendor	jar	package name	framework	Highest
Vendor	jar	package name	qual	Highest
Vendor	Manifest	automatic-module-name	org.checkerframework.checker.qual	Medium
Vendor	Manifest	bundle-symbolicname	checker-qual	Medium
Vendor	Manifest	implementation-url	https://checkerframework.org	Low
Vendor	pom	artifactid	checker-qual	Highest
Vendor	pom	artifactid	checker-qual	Low
Vendor	pom	developer email	mernst@cs.washington.edu	Low
Vendor	pom	developer email	smillst@cs.washington.edu	Low
Vendor	pom	developer id	mernst	Medium
Vendor	pom	developer id	smillst	Medium
Vendor	pom	developer name	Michael Ernst	Medium
Vendor	pom	developer name	Suzanne Millstein	Medium
Vendor	pom	developer org	University of Washington	Medium
Vendor	pom	developer org URL	https://www.cs.washington.edu/	Medium
Vendor	pom	groupid	org.checkerframework	Highest
Vendor	pom	name	Checker Qual	High
Vendor	pom	url	https://checkerframework.org/	Highest
Product	file	name	checker-qual	High
Product	jar	package name	checker	Highest
Product	jar	package name	checkerframework	Highest
Product	jar	package name	framework	Highest
Product	jar	package name	qual	Highest
Product	Manifest	automatic-module-name	org.checkerframework.checker.qual	Medium
Product	Manifest	Bundle-Name	checker-qual	Medium
Product	Manifest	bundle-symbolicname	checker-qual	Medium
Product	Manifest	implementation-url	https://checkerframework.org	Low
Product	pom	artifactid	checker-qual	Highest
Product	pom	developer email	mernst@cs.washington.edu	Low
Product	pom	developer email	smillst@cs.washington.edu	Low
Product	pom	developer id	mernst	Low
Product	pom	developer id	smillst	Low
Product	pom	developer name	Michael Ernst	Low
Product	pom	developer name	Suzanne Millstein	Low
Product	pom	developer org	University of Washington	Low
Product	pom	developer org URL	https://www.cs.washington.edu/	Low
Product	pom	groupid	org.checkerframework	Highest
Product	pom	name	Checker Qual	High
Product	pom	url	https://checkerframework.org/	Medium
Version	file	version	3.42.0	High
Version	Manifest	Bundle-Version	3.42.0	High
Version	Manifest	Implementation-Version	3.42.0	High
Version	pom	version	3.42.0	Highest

Identifiers

pkg:maven/org.checkerframework/checker-qual@3.42.0 (Confidence:High)

com.github.waffle:waffle-jna:3.3.1-SNAPSHOT

Description:

WAFFLE JNA implementation

License:

MIT https://raw.github.com/Waffle/waffle/master/LICENSE

File Path: /home/runner/work/waffle/waffle/Source/JNA/waffle-jna/pom.xml

Referenced In Project/Scope: waffle-tomcat85
pkg:maven/com.github.waffle/waffle-tomcat85@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	pom	High
Vendor	project	artifactid	waffle-jna	Low
Vendor	project	groupid	com.github.waffle	Highest
Product	file	name	pom	High
Product	project	artifactid	waffle-jna	Highest
Product	project	groupid	com.github.waffle	Low

Identifiers

pkg:maven/com.github.waffle/waffle-jna@3.3.1-SNAPSHOT (Confidence:Highest)

error_prone_annotations-2.24.1.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.24.1/error_prone_annotations-2.24.1.jar
MD5: 345bbebec9b3c68d2638c0f6809436dc
SHA1: 32b299e45105aa9b0df8279c74dc1edfcf313ff0
SHA256:19fe2f7155d20ea093168527999da98108103ee546d1e8b726bc4b27c31a3c30
Referenced In Project/Scope: waffle-tomcat85:provided
pkg:maven/com.github.waffle/waffle-tomcat85@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	error_prone_annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	errorprone	Highest
Vendor	jar	package name	google	Highest
Vendor	Manifest	automatic-module-name	com.google.errorprone.annotations	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Vendor	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Vendor	pom	artifactid	error_prone_annotations	Highest
Vendor	pom	artifactid	error_prone_annotations	Low
Vendor	pom	groupid	com.google.errorprone	Highest
Vendor	pom	name	error-prone annotations	High
Vendor	pom	parent-artifactid	error_prone_parent	Low
Product	file	name	error_prone_annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	errorprone	Highest
Product	jar	package name	google	Highest
Product	Manifest	automatic-module-name	com.google.errorprone.annotations	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Product	Manifest	Bundle-Name	error-prone annotations	Medium
Product	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Product	pom	artifactid	error_prone_annotations	Highest
Product	pom	groupid	com.google.errorprone	Highest
Product	pom	name	error-prone annotations	High
Product	pom	parent-artifactid	error_prone_parent	Medium
Version	file	version	2.24.1	High
Version	Manifest	Bundle-Version	2.24.1	High
Version	pom	version	2.24.1	Highest

Identifiers

pkg:maven/com.google.errorprone/error_prone_annotations@2.24.1 (Confidence:High)

j2objc-annotations-2.8.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/2.8/j2objc-annotations-2.8.jar
MD5: c50af69b704dc91050efb98e0dff66d1
SHA1: c85270e307e7b822f1086b93689124b89768e273
SHA256:f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed
Referenced In Project/Scope: waffle-tomcat85:provided
pkg:maven/com.github.waffle/waffle-tomcat85@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	j2objc-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	annotations	Low
Vendor	jar	package name	google	Highest
Vendor	jar	package name	google	Low
Vendor	jar	package name	j2objc	Highest
Vendor	jar	package name	j2objc	Low
Vendor	pom	artifactid	j2objc-annotations	Highest
Vendor	pom	artifactid	j2objc-annotations	Low
Vendor	pom	groupid	com.google.j2objc	Highest
Vendor	pom	name	J2ObjC Annotations	High
Vendor	pom	url	google/j2objc/	Highest
Product	file	name	j2objc-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	annotations	Low
Product	jar	package name	google	Highest
Product	jar	package name	j2objc	Highest
Product	jar	package name	j2objc	Low
Product	pom	artifactid	j2objc-annotations	Highest
Product	pom	groupid	com.google.j2objc	Highest
Product	pom	name	J2ObjC Annotations	High
Product	pom	url	google/j2objc/	High
Version	file	version	2.8	High
Version	pom	version	2.8	Highest

Identifiers

pkg:maven/com.google.j2objc/j2objc-annotations@2.8 (Confidence:High)

jcl-over-slf4j-2.0.11.jar

Description:

JCL 1.2 implemented over SLF4J

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/slf4j/jcl-over-slf4j/2.0.11/jcl-over-slf4j-2.0.11.jar
MD5: 7ad2cbcec0efd8cfc8f3a6dfacfc5829
SHA1: f6226edb8c85f8c9f1f75ec4b0252c02f589478a
SHA256:55e96f9830d732c81f0709e9090f308798381be7dc5aa67dd423c02831b5b4bb
Referenced In Project/Scope: waffle-tomcat85:compile
pkg:maven/com.github.waffle/waffle-jna@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jcl-over-slf4j	High
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Vendor	pom	artifactid	jcl-over-slf4j	Highest
Vendor	pom	artifactid	jcl-over-slf4j	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	JCL 1.2 implemented over SLF4J	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	jcl-over-slf4j	High
Product	jar	package name	9	Highest
Product	jar	package name	apache	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	JCL 1.2 implemented over SLF4J	Medium
Product	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Product	Manifest	Implementation-Title	jcl-over-slf4j	High
Product	Manifest	multi-release	true	Low
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Product	pom	artifactid	jcl-over-slf4j	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	JCL 1.2 implemented over SLF4J	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.11	High
Version	Manifest	Bundle-Version	2.0.11	High
Version	Manifest	Implementation-Version	2.0.11	High
Version	pom	version	2.0.11	Highest

Identifiers

pkg:maven/org.slf4j/jcl-over-slf4j@2.0.11 (Confidence:High)

jna-5.14.0.jar

Description:

Java Native Access

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.14.0/jna-5.14.0.jar
MD5: 8b3cc652920435ad9f801e6d9b2a3497
SHA1: 67bf3eaea4f0718cb376a181a629e5f88fa1c9dd
SHA256:34ed1e1f27fa896bca50dbc4e99cf3732967cec387a7a0d5e3486c09673fe8c6
Referenced In Project/Scope: waffle-tomcat85:compile
pkg:maven/com.github.waffle/waffle-jna@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jna	High
Vendor	jar	package name	jna	Highest
Vendor	jar	package name	native	Highest
Vendor	jar	package name	sun	Highest
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	automatic-module-name	com.sun.jna	Medium
Vendor	Manifest	bundle-activationpolicy	lazy	Low
Vendor	Manifest	bundle-category	jni	Low
Vendor	Manifest	bundle-nativecode	com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Vendor	Manifest	bundle-symbolicname	com.sun.jna	Medium
Vendor	Manifest	Implementation-Vendor	JNA Development Team	High
Vendor	Manifest	specification-vendor	JNA Development Team	Low
Vendor	pom	artifactid	jna	Highest
Vendor	pom	artifactid	jna	Low
Vendor	pom	developer email	mblaesing@doppel-helix.eu	Low
Vendor	pom	developer id	twall	Medium
Vendor	pom	developer name	Matthias Bläsing	Medium
Vendor	pom	developer name	Timothy Wall	Medium
Vendor	pom	groupid	net.java.dev.jna	Highest
Vendor	pom	name	Java Native Access	High
Vendor	pom	url	java-native-access/jna	Highest
Product	file	name	jna	High
Product	jar	package name	jna	Highest
Product	jar	package name	library	Highest
Product	jar	package name	native	Highest
Product	jar	package name	sun	Highest
Product	jar	package name	win32	Highest
Product	Manifest	automatic-module-name	com.sun.jna	Medium
Product	Manifest	bundle-activationpolicy	lazy	Low
Product	Manifest	bundle-category	jni	Low
Product	Manifest	Bundle-Name	jna	Medium
Product	Manifest	bundle-nativecode	com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64	Low
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Product	Manifest	bundle-symbolicname	com.sun.jna	Medium
Product	Manifest	Implementation-Title	com.sun.jna	High
Product	Manifest	specification-title	Java Native Access (JNA)	Medium
Product	pom	artifactid	jna	Highest
Product	pom	developer email	mblaesing@doppel-helix.eu	Low
Product	pom	developer id	twall	Low
Product	pom	developer name	Matthias Bläsing	Low
Product	pom	developer name	Timothy Wall	Low
Product	pom	groupid	net.java.dev.jna	Highest
Product	pom	name	Java Native Access	High
Product	pom	url	java-native-access/jna	High
Version	file	version	5.14.0	High
Version	Manifest	Bundle-Version	5.14.0	High
Version	pom	version	5.14.0	Highest

Identifiers

pkg:maven/net.java.dev.jna/jna@5.14.0 (Confidence:High)
cpe:2.3:a:oracle:java_se:5.14.0:*:*:*:*:*:*:* (Confidence:Low)

jna-5.14.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.14.0/jna-5.14.0.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: f6bef568e690d361a5dcc165f5ad4b1f
SHA1: 05638a4aaafa689a6c246530823afdc18d3fd438
SHA256:b9d1479b9619b7ece4a36b6ae31365ffaf15a1355d4f6da02f8b5f09df2fa82f
Referenced In Project/Scope: waffle-tomcat85:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jnidispatch	High
Product	file	name	jnidispatch	High

Identifiers

None

jna-5.14.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.14.0/jna-5.14.0.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 719d6ba1946c25aa61ce82f90d77ffd5
SHA1: 94d2191378cac5719daecc826fc116816284c406
SHA256:69c45175ecfd25af023f96ac0bb2c45e6a95e3ba8a5a50ee7969ccab14825c44
Referenced In Project/Scope: waffle-tomcat85:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jnidispatch	High
Product	file	name	jnidispatch	High

Identifiers

None

jna-5.14.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.14.0/jna-5.14.0.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: e15183ef9c6c255b76fda73d01ca7ecb
SHA1: f816f998c43204230d9ea3eecffb5f8372a32c2e
SHA256:38650a0612730c52580c9f32ff766b44b1c5a426d52e7dd7a53687bf3389ac2c
Referenced In Project/Scope: waffle-tomcat85:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jnidispatch	High
Product	file	name	jnidispatch	High

Identifiers

None

jna-platform-5.14.0.jar

Description:

Java Native Access Platform

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-platform/5.14.0/jna-platform-5.14.0.jar
MD5: 3bc3f09a698e6ad250dd093f64fbb8a7
SHA1: 28934d48aed814f11e4c584da55c49fa7032b31b
SHA256:ae4caceb3840730c2537f9b7fb55a01baba580286b4122951488bcee558c2449
Referenced In Project/Scope: waffle-tomcat85:compile
pkg:maven/com.github.waffle/waffle-jna@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jna-platform	High
Vendor	jar	package name	jna	Highest
Vendor	jar	package name	platform	Highest
Vendor	jar	package name	sun	Highest
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	automatic-module-name	com.sun.jna.platform	Medium
Vendor	Manifest	bundle-category	jni	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.4	Low
Vendor	Manifest	bundle-symbolicname	com.sun.jna.platform	Medium
Vendor	Manifest	Implementation-Vendor	JNA Development Team	High
Vendor	Manifest	require-bundle	com.sun.jna;bundle-version="5.14.0"	Low
Vendor	Manifest	specification-vendor	JNA Development Team	Low
Vendor	pom	artifactid	jna-platform	Highest
Vendor	pom	artifactid	jna-platform	Low
Vendor	pom	developer email	mblaesing@doppel-helix.eu	Low
Vendor	pom	developer id	twall	Medium
Vendor	pom	developer name	Matthias Bläsing	Medium
Vendor	pom	developer name	Timothy Wall	Medium
Vendor	pom	groupid	net.java.dev.jna	Highest
Vendor	pom	name	Java Native Access Platform	High
Vendor	pom	url	java-native-access/jna	Highest
Product	file	name	jna-platform	High
Product	jar	package name	jna	Highest
Product	jar	package name	platform	Highest
Product	jar	package name	sun	Highest
Product	Manifest	automatic-module-name	com.sun.jna.platform	Medium
Product	Manifest	bundle-category	jni	Low
Product	Manifest	Bundle-Name	jna-platform	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.4	Low
Product	Manifest	bundle-symbolicname	com.sun.jna.platform	Medium
Product	Manifest	Implementation-Title	com.sun.jna	High
Product	Manifest	require-bundle	com.sun.jna;bundle-version="5.14.0"	Low
Product	Manifest	specification-title	Java Native Access (JNA)	Medium
Product	pom	artifactid	jna-platform	Highest
Product	pom	developer email	mblaesing@doppel-helix.eu	Low
Product	pom	developer id	twall	Low
Product	pom	developer name	Matthias Bläsing	Low
Product	pom	developer name	Timothy Wall	Low
Product	pom	groupid	net.java.dev.jna	Highest
Product	pom	name	Java Native Access Platform	High
Product	pom	url	java-native-access/jna	High
Version	file	version	5.14.0	High
Version	Manifest	Bundle-Version	5.14.0	High
Version	pom	version	5.14.0	Highest

Identifiers

pkg:maven/net.java.dev.jna/jna-platform@5.14.0 (Confidence:High)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: waffle-tomcat85:provided
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	Manifest	bundle-symbolicname	org.jsr-305	Medium
Vendor	pom	artifactid	jsr305	Highest
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	file	name	jsr305	High
Product	Manifest	Bundle-Name	FindBugs-jsr305	Medium
Product	Manifest	bundle-symbolicname	org.jsr-305	Medium
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-jsr305	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.2	High
Version	Manifest	Bundle-Version	3.0.2	High
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

slf4j-api-2.0.11.jar

Description:

The slf4j API

License:

http://www.opensource.org/licenses/mit-license.php

File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.11/slf4j-api-2.0.11.jar
MD5: 90c46a2d4613049843c804867321e6a7
SHA1: ad96c3f8cf895e696dd35c2bc8e8ebe710be9e6d
SHA256:ce0e71d673acb9036bb55d0244b261cf033f8e4c1245f14f931dfb1937dd4c95
Referenced In Project/Scope: waffle-tomcat85:compile
pkg:maven/com.github.waffle/waffle-jna@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	slf4j-api	Highest
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	jar	package name	slf4j	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	SLF4J API Module	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.11	High
Version	Manifest	Bundle-Version	2.0.11	High
Version	Manifest	Implementation-Version	2.0.11	High
Version	pom	version	2.0.11	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@2.0.11 (Confidence:High)

spotbugs-annotations-4.8.3.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html

File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.8.3/spotbugs-annotations-4.8.3.jar
MD5: cd5917b77643c3a7ba5420aea78f940c
SHA1: 05d2dc4ca5b632976371155252499819aea372ed
SHA256:e5d4f60be8e57595766ba7f1d4535dc46aebf98dae05e16372a4d4120d3ebb6b
Referenced In Project/Scope: waffle-tomcat85:provided
pkg:maven/com.github.waffle/waffle-tomcat85@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spotbugs-annotations	High
Vendor	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Vendor	pom	artifactid	spotbugs-annotations	Highest
Vendor	pom	artifactid	spotbugs-annotations	Low
Vendor	pom	developer email	andreas.sewe@codetrails.com	Low
Vendor	pom	developer email	dbrosius@mebigfatguy.com	Low
Vendor	pom	developer email	loskutov@gmx.de	Low
Vendor	pom	developer email	skypencil@gmail.com	Low
Vendor	pom	developer id	henrik242	Medium
Vendor	pom	developer id	iloveeclipse	Medium
Vendor	pom	developer id	jsotuyod	Medium
Vendor	pom	developer id	KengoTODA	Medium
Vendor	pom	developer id	mebigfatguy	Medium
Vendor	pom	developer id	sewe	Medium
Vendor	pom	developer id	ThrawnCA	Medium
Vendor	pom	developer name	Andreas Sewe	Medium
Vendor	pom	developer name	Andrey Loskutov	Medium
Vendor	pom	developer name	Dave Brosius	Medium
Vendor	pom	developer name	Juan Martín Sotuyo Dodero	Medium
Vendor	pom	developer name	Kengo TODA	Medium
Vendor	pom	groupid	com.github.spotbugs	Highest
Vendor	pom	name	SpotBugs Annotations	High
Vendor	pom	url	https://spotbugs.github.io/	Highest
Product	file	name	spotbugs-annotations	High
Product	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Product	Manifest	Bundle-Name	spotbugs-annotations	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Product	pom	artifactid	spotbugs-annotations	Highest
Product	pom	developer email	andreas.sewe@codetrails.com	Low
Product	pom	developer email	dbrosius@mebigfatguy.com	Low
Product	pom	developer email	loskutov@gmx.de	Low
Product	pom	developer email	skypencil@gmail.com	Low
Product	pom	developer id	henrik242	Low
Product	pom	developer id	iloveeclipse	Low
Product	pom	developer id	jsotuyod	Low
Product	pom	developer id	KengoTODA	Low
Product	pom	developer id	mebigfatguy	Low
Product	pom	developer id	sewe	Low
Product	pom	developer id	ThrawnCA	Low
Product	pom	developer name	Andreas Sewe	Low
Product	pom	developer name	Andrey Loskutov	Low
Product	pom	developer name	Dave Brosius	Low
Product	pom	developer name	Juan Martín Sotuyo Dodero	Low
Product	pom	developer name	Kengo TODA	Low
Product	pom	groupid	com.github.spotbugs	Highest
Product	pom	name	SpotBugs Annotations	High
Product	pom	url	https://spotbugs.github.io/	Medium
Version	file	version	4.8.3	High
Version	Manifest	Bundle-Version	4.8.3	High
Version	pom	version	4.8.3	Highest

Identifiers

pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3 (Confidence:High)

tomcat-annotations-api-8.5.98.jar

Description:

Annotations Package

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-annotations-api/8.5.98/tomcat-annotations-api-8.5.98.jar
MD5: f7ef9df111f937e1870a90a4bfa178bb
SHA1: 617d7865644c98b9355a29ca9904a435e830b18c
SHA256:df0fe2c6249f431b13df8fc4c0c547fea6c9bf4c6948e441957fa521b69a7f3a
Referenced In Project/Scope: waffle-tomcat85:provided
pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.98

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	tomcat-annotations-api	High
Vendor	manifest: javax/annotation/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	pom	artifactid	tomcat-annotations-api	Highest
Vendor	pom	artifactid	tomcat-annotations-api	Low
Vendor	pom	groupid	org.apache.tomcat	Highest
Vendor	pom	url	https://tomcat.apache.org/	Highest
Product	file	name	tomcat-annotations-api	High
Product	jar	package name	annotation	Highest
Product	jar	package name	javax	Highest
Product	manifest: javax/annotation/	Implementation-Title	javax.annotation	Medium
Product	manifest: javax/annotation/	Specification-Title	Common Annotations	Medium
Product	pom	artifactid	tomcat-annotations-api	Highest
Product	pom	groupid	org.apache.tomcat	Highest
Product	pom	url	https://tomcat.apache.org/	Medium
Version	file	version	8.5.98	High
Version	pom	version	8.5.98	Highest

Identifiers

pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.98 (Confidence:High)

tomcat-api-8.5.98.jar

Description:

Definition of interfaces shared by Catalina and Jasper

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-api/8.5.98/tomcat-api-8.5.98.jar
MD5: 70c937f294d61828c8200d74f0065c8c
SHA1: faf1a5f14bf4970fd7fce9698523d96a1bddbeb4
SHA256:e375231182d2ae910dea93592114a1be6e69d8f666a4b1bb64ad870c0005c3b6
Referenced In Project/Scope: waffle-tomcat85:provided
pkg:maven/com.github.waffle/waffle-tomcat85@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	tomcat-api	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	tomcat	Highest
Vendor	Manifest	Implementation-Vendor	Apache Software Foundation	High
Vendor	Manifest	specification-vendor	Apache Software Foundation	Low
Vendor	pom	artifactid	tomcat-api	Highest
Vendor	pom	artifactid	tomcat-api	Low
Vendor	pom	groupid	org.apache.tomcat	Highest
Vendor	pom	url	https://tomcat.apache.org/	Highest
Product	file	name	tomcat-api	High
Product	jar	package name	apache	Highest
Product	jar	package name	tomcat	Highest
Product	Manifest	Implementation-Title	Apache Tomcat	High
Product	Manifest	specification-title	Apache Tomcat	Medium
Product	pom	artifactid	tomcat-api	Highest
Product	pom	groupid	org.apache.tomcat	Highest
Product	pom	url	https://tomcat.apache.org/	Medium
Version	file	version	8.5.98	High
Version	Manifest	Implementation-Version	8.5.98	High
Version	pom	version	8.5.98	Highest

Related Dependencies

tomcat-catalina-8.5.98.jar
- File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-catalina/8.5.98/tomcat-catalina-8.5.98.jar
- MD5: 2dc448ddcd4b27aeba32093338e0a007
- SHA1: 9bd1d468b29834e33c06cf5778a863ac7e9d7076
- SHA256: 934675a4b32ce7f29d0a8ad3f5ccaf7e11c3e1d9fabbe326acf042a197ca365c
- pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.98
tomcat-coyote-8.5.98.jar
- File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-coyote/8.5.98/tomcat-coyote-8.5.98.jar
- MD5: 12066ad7b3a5d4f64a937f6139bf45c2
- SHA1: dcc725d215e56324719ddab0b602a8c7703fe3a7
- SHA256: 067954d921e350e469db9ce2798079f4aeba360a6cb52d9802ba06a0ae587e46
- pkg:maven/org.apache.tomcat/tomcat-coyote@8.5.98
tomcat-jaspic-api-8.5.98.jar
- File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jaspic-api/8.5.98/tomcat-jaspic-api-8.5.98.jar
- MD5: a01b4965f722983d17655350b46f46c5
- SHA1: 7e8c0ea16e75242752af55d33bfb073dd7dec476
- SHA256: b0cbee1fe34764682837c3520348ea5521104165630883100090548ab1c77de5
- pkg:maven/org.apache.tomcat/tomcat-jaspic-api@8.5.98
tomcat-jsp-api-8.5.98.jar
- File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jsp-api/8.5.98/tomcat-jsp-api-8.5.98.jar
- MD5: af813a91cd466e1f149994948087fe71
- SHA1: 5a6cf572971b5cddcdcefbe838672c2bfeb5bebd
- SHA256: 6a16d14164c38b90bfffef4c463865d2aa191dfb85ac608a694ca52551231320
- pkg:maven/org.apache.tomcat/tomcat-jsp-api@8.5.98
tomcat-util-8.5.98.jar
- File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-util/8.5.98/tomcat-util-8.5.98.jar
- MD5: 36b1458fe451228453f5748f0c5aaa2a
- SHA1: cf3c7380d7cb6af81659917e004694796b2fa017
- SHA256: ed41d36ddc17983d727dacc17d7088ce811f355b828c2d15ff0af0564e0a7b50
- pkg:maven/org.apache.tomcat/tomcat-util@8.5.98
tomcat-util-scan-8.5.98.jar
- File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-util-scan/8.5.98/tomcat-util-scan-8.5.98.jar
- MD5: 86719330a9491d48b28bbf689f95f828
- SHA1: 6a396e350f57cb491a2a0cb773e60fab9414ff4d
- SHA256: 09b27d48b9fc1727930e37c41edbc2fc7f6f4e9d27f985df54fc470db9eb8ce0
- pkg:maven/org.apache.tomcat/tomcat-util-scan@8.5.98

Identifiers

pkg:maven/org.apache.tomcat/tomcat-api@8.5.98 (Confidence:High)
cpe:2.3:a:apache:tomcat:8.5.98:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:apache_tomcat:apache_tomcat:8.5.98:*:*:*:*:*:*:* (Confidence:Highest)

Published Vulnerabilities

CVE-2020-8022

A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8 allows local attackers to escalate from group tomcat to root. This issue affects: SUSE Enterprise Storage 5 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP4 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 12-SP5 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 15-LTSS tomcat versions prior to 9.0.35-3.57.3. SUSE Linux Enterprise Server for SAP 12-SP2 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 12-SP3 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 15 tomcat versions prior to 9.0.35-3.57.3. SUSE OpenStack Cloud 7 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud 8 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud Crowbar 8 tomcat versions prior to 8.0.53-29.32.1.

CWE-276 Incorrect Default Permissions

CVSSv2:

Base Score: HIGH (7.2)
Vector: /AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSSv3:

Base Score: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:1.8/RC:R/MAV:A

References:

meissner@suse.de - EXPLOIT,ISSUE_TRACKING,VENDOR_ADVISORY
meissner@suse.de - MAILING_LIST,VENDOR_ADVISORY

Vulnerable Software & Versions: (show all)

tomcat-el-api-8.5.98.jar

Description:

Expression language package

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-el-api/8.5.98/tomcat-el-api-8.5.98.jar
MD5: 1866c63e4e46ef47e30990acac4f483c
SHA1: 76380303711453e3b05e3ea473facdd69da08fa9
SHA256:6be669f25d05f7c3e50209e224081d2a2df8ae9a4f5d1c5a19d4daa55167ab98
Referenced In Project/Scope: waffle-tomcat85:provided
pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.98

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	tomcat-el-api	High
Vendor	jar	package name	el	Highest
Vendor	jar	package name	expression	Highest
Vendor	manifest: javax/el/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	pom	artifactid	tomcat-el-api	Highest
Vendor	pom	artifactid	tomcat-el-api	Low
Vendor	pom	groupid	org.apache.tomcat	Highest
Vendor	pom	url	https://tomcat.apache.org/	Highest
Product	file	name	tomcat-el-api	High
Product	jar	package name	el	Highest
Product	jar	package name	expression	Highest
Product	jar	package name	javax	Highest
Product	manifest: javax/el/	Implementation-Title	javax.el	Medium
Product	manifest: javax/el/	Specification-Title	Expression Language	Medium
Product	pom	artifactid	tomcat-el-api	Highest
Product	pom	groupid	org.apache.tomcat	Highest
Product	pom	url	https://tomcat.apache.org/	Medium
Version	file	version	8.5.98	High
Version	pom	version	8.5.98	Highest

Identifiers

pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.98 (Confidence:High)

tomcat-jni-8.5.98.jar

Description:

Interface code to the native connector

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jni/8.5.98/tomcat-jni-8.5.98.jar
MD5: 7d55ea61da9b8bc002a36f064b2fa68c
SHA1: be40f5a1483fb38d5ddef0962804846ebad972f6
SHA256:2987a13949024acd07e4d763bf766d29f486fc0d43730a21040df199868c1c37
Referenced In Project/Scope: waffle-tomcat85:provided
pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.98

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	tomcat-jni	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	jni	Highest
Vendor	jar	package name	tomcat	Highest
Vendor	Manifest	Implementation-Vendor	Apache Software Foundation	High
Vendor	Manifest	specification-vendor	Apache Software Foundation	Low
Vendor	pom	artifactid	tomcat-jni	Highest
Vendor	pom	artifactid	tomcat-jni	Low
Vendor	pom	groupid	org.apache.tomcat	Highest
Vendor	pom	url	https://tomcat.apache.org/	Highest
Product	file	name	tomcat-jni	High
Product	jar	package name	apache	Highest
Product	jar	package name	jni	Highest
Product	jar	package name	tomcat	Highest
Product	Manifest	Implementation-Title	Apache Tomcat	High
Product	Manifest	specification-title	Apache Tomcat	Medium
Product	pom	artifactid	tomcat-jni	Highest
Product	pom	groupid	org.apache.tomcat	Highest
Product	pom	url	https://tomcat.apache.org/	Medium
Version	file	version	8.5.98	High
Version	Manifest	Implementation-Version	8.5.98	High
Version	pom	version	8.5.98	Highest

Identifiers

pkg:maven/org.apache.tomcat/tomcat-jni@8.5.98 (Confidence:High)

tomcat-juli-8.5.98.jar

Description:

Tomcat Core Logging Package

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-juli/8.5.98/tomcat-juli-8.5.98.jar
MD5: ceb6f6a743fcaf73e1b9ffdf1deaf2be
SHA1: c81bf147dfcccd9fd8469ab82356ed2b507197e2
SHA256:b3d065395f750c7f3b1335fe2e824ced3717f56132cfbb64bba6616baba6bbc9
Referenced In Project/Scope: waffle-tomcat85:provided
pkg:maven/com.github.waffle/waffle-tomcat85@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	tomcat-juli	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	juli	Highest
Vendor	jar	package name	logging	Highest
Vendor	Manifest	Implementation-Vendor	Apache Software Foundation	High
Vendor	Manifest	specification-vendor	Apache Software Foundation	Low
Vendor	pom	artifactid	tomcat-juli	Highest
Vendor	pom	artifactid	tomcat-juli	Low
Vendor	pom	groupid	org.apache.tomcat	Highest
Vendor	pom	url	https://tomcat.apache.org/	Highest
Product	file	name	tomcat-juli	High
Product	jar	package name	apache	Highest
Product	jar	package name	juli	Highest
Product	jar	package name	logging	Highest
Product	Manifest	Implementation-Title	Apache Tomcat	High
Product	Manifest	specification-title	Apache Tomcat	Medium
Product	pom	artifactid	tomcat-juli	Highest
Product	pom	groupid	org.apache.tomcat	Highest
Product	pom	url	https://tomcat.apache.org/	Medium
Version	file	version	8.5.98	High
Version	Manifest	Implementation-Version	8.5.98	High
Version	pom	version	8.5.98	Highest

Identifiers

pkg:maven/org.apache.tomcat/tomcat-juli@8.5.98 (Confidence:High)

tomcat-servlet-api-8.5.98.jar

Description:

javax.servlet package

License:

        Apache License, Version 2.0 and
        Common Development And Distribution License (CDDL) Version 1.0
      : 
        http://www.apache.org/licenses/LICENSE-2.0.txt and
        http://www.opensource.org/licenses/cddl1.txt

File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-servlet-api/8.5.98/tomcat-servlet-api-8.5.98.jar
MD5: f5c15dba0b063284e20cfd0c4991a1cf
SHA1: 82c59b360d67e3541af1bb566b3b019ff8865c5a
SHA256:f458c26bdb8ab3d50402129cae511f0e0079c649b0eeca2293ea46cc44afaec3
Referenced In Project/Scope: waffle-tomcat85:provided
pkg:maven/com.github.waffle/waffle-tomcat85@3.3.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	tomcat-servlet-api	High
Vendor	jar	package name	javax	Highest
Vendor	jar	package name	servlet	Highest
Vendor	manifest: javax/servlet/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	pom	artifactid	tomcat-servlet-api	Highest
Vendor	pom	artifactid	tomcat-servlet-api	Low
Vendor	pom	groupid	org.apache.tomcat	Highest
Vendor	pom	url	https://tomcat.apache.org/	Highest
Product	file	name	tomcat-servlet-api	High
Product	jar	package name	javax	Highest
Product	jar	package name	servlet	Highest
Product	manifest: javax/servlet/	Implementation-Title	javax.servlet	Medium
Product	manifest: javax/servlet/	Specification-Title	Java API for Servlets	Medium
Product	pom	artifactid	tomcat-servlet-api	Highest
Product	pom	groupid	org.apache.tomcat	Highest
Product	pom	url	https://tomcat.apache.org/	Medium
Version	file	version	8.5.98	High
Version	pom	version	8.5.98	Highest

Identifiers

pkg:maven/org.apache.tomcat/tomcat-servlet-api@8.5.98 (Confidence:High)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: waffle-tomcat85

com.github.waffle:waffle-tomcat85:3.3.1-SNAPSHOT

Summary

Dependencies (vulnerable)

byte-buddy-1.14.11.jar

Evidence

Identifiers

byte-buddy-agent-1.14.11.jar

Evidence

Identifiers

byte-buddy-agent-1.14.11.jar: attach_hotspot_windows.dll

Evidence

Identifiers

byte-buddy-agent-1.14.11.jar: attach_hotspot_windows.dll

Evidence

Identifiers

caffeine-3.1.8.jar

Evidence

Identifiers

checker-qual-3.42.0.jar

Evidence

Identifiers

com.github.waffle:waffle-jna:3.3.1-SNAPSHOT

Evidence

Identifiers

error_prone_annotations-2.24.1.jar

Evidence

Identifiers

j2objc-annotations-2.8.jar

Evidence

Identifiers

jcl-over-slf4j-2.0.11.jar

Evidence

Identifiers

jna-5.14.0.jar

Evidence

Identifiers

jna-5.14.0.jar: jnidispatch.dll

Evidence

Identifiers

jna-5.14.0.jar: jnidispatch.dll

Evidence

Identifiers

jna-5.14.0.jar: jnidispatch.dll

Evidence

Identifiers

jna-platform-5.14.0.jar

Evidence

Identifiers

jsr305-3.0.2.jar

Evidence

Identifiers

slf4j-api-2.0.11.jar

Evidence

Identifiers

spotbugs-annotations-4.8.3.jar

Evidence

Identifiers

tomcat-annotations-api-8.5.98.jar

Evidence

Identifiers

tomcat-api-8.5.98.jar

Evidence

Related Dependencies

Identifiers

Published Vulnerabilities

tomcat-el-api-8.5.98.jar

Evidence

Identifiers

tomcat-jni-8.5.98.jar

Evidence

Identifiers

tomcat-juli-8.5.98.jar

Evidence

Identifiers

tomcat-servlet-api-8.5.98.jar

Evidence

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor