Press CTR-C to copy XML [help]


Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

 Sponsor

Project: psi-probe-core

com.github.psi-probe:psi-probe-core:5.0.1-SNAPSHOT

Scan Information (show all):

Summary

Display: Showing Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
HikariCP-5.1.0.jarpkg:maven/com.zaxxer/HikariCP@5.1.0 035
angus-activation-2.0.2.jarpkg:maven/org.eclipse.angus/angus-activation@2.0.2 035
angus-mail-2.0.3.jar (shaded: org.eclipse.angus:angus-core:2.0.3)pkg:maven/org.eclipse.angus/angus-core@2.0.3 09
angus-mail-2.0.3.jar (shaded: org.eclipse.angus:imap:2.0.3)pkg:maven/org.eclipse.angus/imap@2.0.3 09
angus-mail-2.0.3.jar (shaded: org.eclipse.angus:logging-mailhandler:2.0.3)pkg:maven/org.eclipse.angus/logging-mailhandler@2.0.3 09
angus-mail-2.0.3.jar (shaded: org.eclipse.angus:pop3:2.0.3)pkg:maven/org.eclipse.angus/pop3@2.0.3 09
angus-mail-2.0.3.jar (shaded: org.eclipse.angus:smtp:2.0.3)pkg:maven/org.eclipse.angus/smtp@2.0.3 09
angus-mail-2.0.3.jarpkg:maven/org.eclipse.angus/angus-mail@2.0.3 028
c3p0-0.10.1.jarcpe:2.3:a:mchange:c3p0:0.10.1:*:*:*:*:*:*:*pkg:maven/com.mchange/c3p0@0.10.1 0Highest25
checker-qual-3.43.0.jarpkg:maven/org.checkerframework/checker-qual@3.43.0 044
commons-beanutils-1.9.4.jarcpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*pkg:maven/commons-beanutils/commons-beanutils@1.9.4 0Highest168
commons-collections-3.2.2.jarcpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*pkg:maven/commons-collections/commons-collections@3.2.2 0Highest84
commons-dbcp2-2.12.0.jarpkg:maven/org.apache.commons/commons-dbcp2@2.12.0 0110
commons-io-2.16.1.jarcpe:2.3:a:apache:commons_io:2.16.1:*:*:*:*:*:*:*pkg:maven/commons-io/commons-io@2.16.1 0Highest125
commons-lang3-3.14.0.jarpkg:maven/org.apache.commons/commons-lang3@3.14.0 0145
commons-pool2-2.12.0.jarpkg:maven/org.apache.commons/commons-pool2@2.12.0 094
commons-text-1.12.0.jarcpe:2.3:a:apache:commons_text:1.12.0:*:*:*:*:*:*:*pkg:maven/org.apache.commons/commons-text@1.12.0 0Highest73
error_prone_annotations-2.27.1.jarpkg:maven/com.google.errorprone/error_prone_annotations@2.27.1 029
failureaccess-1.0.2.jarpkg:maven/com.google.guava/failureaccess@1.0.2 032
geoip2-4.2.0.jarpkg:maven/com.maxmind.geoip2/geoip2@4.2.0 033
guava-33.2.0-jre.jarcpe:2.3:a:google:guava:33.2.0:*:*:*:*:*:*:*pkg:maven/com.google.guava/guava@33.2.0-jre 0Highest27
j2objc-annotations-3.0.0.jarpkg:maven/com.google.j2objc/j2objc-annotations@3.0.0 033
jackson-core-2.17.1.jarcpe:2.3:a:fasterxml:jackson-modules-java8:2.17.1:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.1 0Low47
jackson-databind-2.17.1.jarcpe:2.3:a:fasterxml:jackson-databind:2.17.1:*:*:*:*:*:*:*
cpe:2.3:a:fasterxml:jackson-modules-java8:2.17.1:*:*:*:*:*:*:*		pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.1 0Highest41
jakarta.activation-api-2.1.3.jarpkg:maven/jakarta.activation/jakarta.activation-api@2.1.3 045
jakarta.inject-api-2.0.1.jarpkg:maven/jakarta.inject/jakarta.inject-api@2.0.1 056
jakarta.mail-api-2.1.3.jarpkg:maven/jakarta.mail/jakarta.mail-api@2.1.3 036
jakarta.transaction-api-2.0.1.jarcpe:2.3:a:oracle:projects:2.0.1:*:*:*:*:*:*:*pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.1 0Low50
jfreechart-1.5.4.jarcpe:2.3:a:time_project:time:1.5.4:*:*:*:*:*:*:*pkg:maven/org.jfree/jfreechart@1.5.4HIGH3Low37
jhighlight-1.1.0.jarpkg:maven/org.codelibs/jhighlight@1.1.0 021
jna-5.14.0.jarcpe:2.3:a:oracle:java_se:5.14.0:*:*:*:*:*:*:*pkg:maven/net.java.dev.jna/jna@5.14.0 0Low48
jna-5.14.0.jar: jnidispatch.dll 02
jna-5.14.0.jar: jnidispatch.dll 02
jna-5.14.0.jar: jnidispatch.dll 02
jna-platform-5.14.0.jarpkg:maven/net.java.dev.jna/jna-platform@5.14.0 044
jsr305-3.0.2.jarpkg:maven/com.google.code.findbugs/jsr305@3.0.2 017
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jarpkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava 013
logback-core-1.5.6.jarcpe:2.3:a:qos:logback:1.5.6:*:*:*:*:*:*:*pkg:maven/ch.qos.logback/logback-core@1.5.6 0Highest39
maxmind-db-3.1.0.jarpkg:maven/com.maxmind.db/maxmind-db@3.1.0 032
mchange-commons-java-0.3.1.jarpkg:maven/com.mchange/mchange-commons-java@0.3.1 031
micrometer-commons-1.12.5.jarpkg:maven/io.micrometer/micrometer-commons@1.12.5 065
micrometer-observation-1.12.5.jarpkg:maven/io.micrometer/micrometer-observation@1.12.5 065
mxparser-1.2.2.jarpkg:maven/io.github.x-stream/mxparser@1.2.2 058
ojdbc8-19.23.0.0.jarcpe:2.3:a:oracle:jdbc:19.23.0.0:*:*:*:*:*:*:*pkg:maven/com.oracle.database.jdbc/ojdbc8@19.23.0.0 0Highest30
openejb-core-9.1.3.jarcpe:2.3:a:apache:tomee:9.1.3:*:*:*:*:*:*:*pkg:maven/org.apache.tomee/openejb-core@9.1.3 0Highest31
oshi-core-6.6.0.jarpkg:maven/com.github.oshi/oshi-core@6.6.0 049
quartz-2.4.0-rc2.jarcpe:2.3:a:softwareag:quartz:2.4.0:rc2:*:*:*:*:*:*pkg:maven/org.quartz-scheduler/quartz@2.4.0-rc2 0Highest30
sitemesh-2.6.0.jarpkg:maven/com.github.hazendaz/sitemesh@2.6.0 033
slf4j-api-2.0.13.jarpkg:maven/org.slf4j/slf4j-api@2.0.13 029
spotbugs-annotations-4.8.5.jarpkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.5 053
spring-core-6.1.6.jarcpe:2.3:a:pivotal_software:spring_framework:6.1.6:*:*:*:*:*:*:*
cpe:2.3:a:springsource:spring_framework:6.1.6:*:*:*:*:*:*:*
cpe:2.3:a:vmware:spring_framework:6.1.6:*:*:*:*:*:*:*		pkg:maven/org.springframework/spring-core@6.1.6 0Highest41
spring-security-core-6.2.4.jarcpe:2.3:a:pivotal_software:spring_security:6.2.4:*:*:*:*:*:*:*
cpe:2.3:a:vmware:spring_security:6.2.4:*:*:*:*:*:*:*		pkg:maven/org.springframework.security/spring-security-core@6.2.4 0Highest38
spring-security-web-6.2.4.jarcpe:2.3:a:pivotal_software:spring_security:6.2.4:*:*:*:*:*:*:*
cpe:2.3:a:vmware:spring_security:6.2.4:*:*:*:*:*:*:*
cpe:2.3:a:web_project:web:6.2.4:*:*:*:*:*:*:*		pkg:maven/org.springframework.security/spring-security-web@6.2.4 0Highest38
spring-web-6.1.6.jarcpe:2.3:a:pivotal_software:spring_framework:6.1.6:*:*:*:*:*:*:*
cpe:2.3:a:springsource:spring_framework:6.1.6:*:*:*:*:*:*:*
cpe:2.3:a:vmware:spring_framework:6.1.6:*:*:*:*:*:*:*
cpe:2.3:a:web_project:web:6.1.6:*:*:*:*:*:*:*		pkg:maven/org.springframework/spring-web@6.1.6 0Highest35
tomcat-annotations-api-10.1.23.jarcpe:2.3:a:www-sql_project:www-sql:10.1.23:*:*:*:*:*:*:*pkg:maven/org.apache.tomcat/tomcat-annotations-api@10.1.23 0Low30
tomcat-api-10.1.23.jarcpe:2.3:a:apache:tomcat:10.1.23:*:*:*:*:*:*:*
cpe:2.3:a:apache_tomcat:apache_tomcat:10.1.23:*:*:*:*:*:*:*		pkg:maven/org.apache.tomcat/tomcat-api@10.1.23 0Highest24
tomcat-el-api-10.1.23.jarpkg:maven/org.apache.tomcat/tomcat-el-api@10.1.23 025
tomcat-jdbc-10.1.23.jarpkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.23 023
tomcat-jni-10.1.23.jarpkg:maven/org.apache.tomcat/tomcat-jni@10.1.23 026
tomcat-juli-10.1.23.jarpkg:maven/org.apache.tomcat/tomcat-juli@10.1.23 026
tomcat-servlet-api-10.1.23.jarpkg:maven/org.apache.tomcat/tomcat-servlet-api@10.1.23 039
tomee-jdbc-9.1.3.jarcpe:2.3:a:apache:tomee:9.1.3:*:*:*:*:*:*:*pkg:maven/org.apache.tomee/tomee-jdbc@9.1.3 0Highest35
ucp-21.13.0.0.jarcpe:2.3:a:oracle:jdbc:21.13.0.0:*:*:*:*:*:*:*pkg:maven/com.oracle.database.jdbc/ucp@21.13.0.0 0Highest32
vibur-dbcp-25.0.jarcpe:2.3:a:connections_project:connections:25.0:*:*:*:*:*:*:*pkg:maven/org.vibur/vibur-dbcp@25.0 0Low34
vibur-object-pool-25.0.jarpkg:maven/org.vibur/vibur-object-pool@25.0 030
wrapper-3.2.3.jarcpe:2.3:a:service_project:service:3.2.3:*:*:*:*:*:*:*pkg:maven/tanukisoft/wrapper@3.2.3 0Low23
xmlpull-1.1.3.1.jarpkg:maven/xmlpull/xmlpull@1.1.3.1 018
xstream-1.4.20.jarcpe:2.3:a:xstream_project:xstream:1.4.20:*:*:*:*:*:*:*pkg:maven/com.thoughtworks.xstream/xstream@1.4.20 0Highest55

Dependencies (vulnerable)

HikariCP-5.1.0.jar

Description:

Ultimate JDBC Connection Pool

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/zaxxer/HikariCP/5.1.0/HikariCP-5.1.0.jar
MD5: 37404f82207a28141bd9b0fe6b1d0a16
SHA1: 8c96e36c14461fc436bb02b264b96ef3ca5dca8c
SHA256:a47a6ee62379694ee52c30036f0931b72f9aee2a801d590341ed82bd839e2134
Referenced In Project/Scope: psi-probe-core:provided
HikariCP-5.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

angus-activation-2.0.2.jar

Description:

 Implementation

License:

http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-activation/2.0.2/angus-activation-2.0.2.jar
MD5: 42bba74155dc773eca277ee7a16f74be
SHA1: 41f1e0ddd157c856926ed149ab837d110955a9fc
SHA256:6dd3bcffc22bce83b07376a0e2e094e4964a3195d4118fb43e380ef35436cc1e
Referenced In Project/Scope: psi-probe-core:compile
angus-activation-2.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

angus-mail-2.0.3.jar (shaded: org.eclipse.angus:angus-core:2.0.3)

File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.3/angus-mail-2.0.3.jar/META-INF/maven/org.eclipse.angus/angus-core/pom.xml
MD5: 9907dbe21768f81f0436f492e8ceca57
SHA1: 108609abe9269199421273dfe2b5520c00ac800c
SHA256:a52a66e7dd0b6006ab29360dfe735a9d32243f70be56ea1af92bc7dca11fd1ed
Referenced In Project/Scope: psi-probe-core:compile

Identifiers

angus-mail-2.0.3.jar (shaded: org.eclipse.angus:imap:2.0.3)

File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.3/angus-mail-2.0.3.jar/META-INF/maven/org.eclipse.angus/imap/pom.xml
MD5: 55d43d94fda869a2551af9303a7ea370
SHA1: fed2fd168251a00aef8e0ebfc379a58a05aa6346
SHA256:2769e1c98f6d6ae4285eb0872ae1d20ce78bd503ed7a824d406e22e25e9d1b16
Referenced In Project/Scope: psi-probe-core:compile

Identifiers

angus-mail-2.0.3.jar (shaded: org.eclipse.angus:logging-mailhandler:2.0.3)

File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.3/angus-mail-2.0.3.jar/META-INF/maven/org.eclipse.angus/logging-mailhandler/pom.xml
MD5: eb9a0a396f32310dcaeddef53c4fecf2
SHA1: 9d10a9bd90cb079dcdb9b1ab25e1d1f6c253e78d
SHA256:e9546707cf60f5eace422c9f542ba2548fcef1639f1270e103720d54a4ea2a66
Referenced In Project/Scope: psi-probe-core:compile

Identifiers

angus-mail-2.0.3.jar (shaded: org.eclipse.angus:pop3:2.0.3)

File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.3/angus-mail-2.0.3.jar/META-INF/maven/org.eclipse.angus/pop3/pom.xml
MD5: f814ea6c49648addacecaad34e700890
SHA1: fad30d04e576332a8ce304438a8c60444a2a15fd
SHA256:1bf0ed0c897f7825319a0b4a8926a95a7a4430ddf4d9c11b6d1af7a34acf5261
Referenced In Project/Scope: psi-probe-core:compile

Identifiers

angus-mail-2.0.3.jar (shaded: org.eclipse.angus:smtp:2.0.3)

File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.3/angus-mail-2.0.3.jar/META-INF/maven/org.eclipse.angus/smtp/pom.xml
MD5: 88fdc95cc63d9167e76af8fd06ad205d
SHA1: 3d3b38a40ef48a4feb95a7e4d6d133df2b58c5b0
SHA256:f69db19b0c17d856e923ce29d4d6089e5dcafa30678fe549c11d316712ca3fae
Referenced In Project/Scope: psi-probe-core:compile

Identifiers

angus-mail-2.0.3.jar

Description:

Angus Mail Provider

License:

http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html, http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.3/angus-mail-2.0.3.jar
MD5: 44f609355db6385cec29ef7eab9be8ea
SHA1: 56f811522d693700013768db83b741a65da6c61c
SHA256:6b5b6fc2ba633c53733d829c56cae51d343fb1eadee3e17b8eea01a49edc72d3
Referenced In Project/Scope: psi-probe-core:compile
angus-mail-2.0.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

c3p0-0.10.1.jar

Description:

A mature JDBC3+ Connection pooling library

License:

LGPL-2.1-or-later: https://spdx.org/licenses/LGPL-2.1-or-later.html
EPL-1.0: https://spdx.org/licenses/EPL-1.0.html
File Path: /home/runner/.m2/repository/com/mchange/c3p0/0.10.1/c3p0-0.10.1.jar
MD5: f68b8bf544d39746f19e19407d1db5b9
SHA1: 719d269cd51b6877081a6dc88a213d5d1479a915
SHA256:aae9a46d26e4908d3724018e6a9029cb6155f38af103d40c896892727d9a9956
Referenced In Project/Scope: psi-probe-core:provided
c3p0-0.10.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

checker-qual-3.43.0.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/org/checkerframework/checker-qual/3.43.0/checker-qual-3.43.0.jar
MD5: 4f56e65c8f302ca8b4cb384c9b4a53b6
SHA1: 9425eee39e56b116d2b998b7c2cebcbd11a3c98b
SHA256:3fbc2e98f05854c3df16df9abaa955b91b15b3ecac33623208ed6424640ef0f6
Referenced In Project/Scope: psi-probe-core:compile
checker-qual-3.43.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.google.guava/guava@33.2.0-jre

Identifiers

commons-beanutils-1.9.4.jar

Description:

Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-beanutils/commons-beanutils/1.9.4/commons-beanutils-1.9.4.jar
MD5: 07dc532ee316fe1f2f0323e9bd2f8df4
SHA1: d52b9abcd97f38c81342bb7e7ae1eee9b73cba51
SHA256:7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a
Referenced In Project/Scope: psi-probe-core:compile
commons-beanutils-1.9.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

commons-collections-3.2.2.jar

Description:

Types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256:eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Referenced In Project/Scope: psi-probe-core:compile
commons-collections-3.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

commons-dbcp2-2.12.0.jar

Description:

Apache Commons DBCP software implements Database Connection Pooling

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-dbcp2/2.12.0/commons-dbcp2-2.12.0.jar
MD5: cb9f32fd70bcd816f68ebc611dbfed35
SHA1: 45698ece9fda230d0b1c96282c03ce1ebbd6c3ce
SHA256:9b81ea663b9db255bcec6b08a9245edd05bddb155c49343eef09b6d81558ed3e
Referenced In Project/Scope: psi-probe-core:provided
commons-dbcp2-2.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

commons-io-2.16.1.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-io/commons-io/2.16.1/commons-io-2.16.1.jar
MD5: ed8191a5a217940140001b0acfed18d9
SHA1: 377d592e740dc77124e0901291dbfaa6810a200e
SHA256:f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f
Referenced In Project/Scope: psi-probe-core:compile
commons-io-2.16.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

commons-lang3-3.14.0.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-lang3/3.14.0/commons-lang3-3.14.0.jar
MD5: 4e5c3f5e6b0b965ef241d7d72ac8971f
SHA1: 1ed471194b02f2c6cb734a0cd6f6f107c673afae
SHA256:7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c
Referenced In Project/Scope: psi-probe-core:compile
commons-lang3-3.14.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

commons-pool2-2.12.0.jar

Description:

The Apache Commons Object Pooling Library.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-pool2/2.12.0/commons-pool2-2.12.0.jar
MD5: 0516bf5ac1549e8ba78f6b7c49d09ed2
SHA1: 458563f69fbdaebf7daadfe10dc3a22e42a7de50
SHA256:6d3bd18df8410f3e31b031aca582cc109342358a62a2759ebd0c4cdf30d06f8b
Referenced In Project/Scope: psi-probe-core:provided
commons-pool2-2.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.commons/commons-dbcp2@2.12.0

Identifiers

commons-text-1.12.0.jar

Description:

Apache Commons Text is a set of utility functions and reusable components for the purpose of processing
    and manipulating text that should be of use in a Java environment.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-text/1.12.0/commons-text-1.12.0.jar
MD5: 544add6fbc8d4b100b07c3692d08099e
SHA1: 66aa90dc099701c4d3b14bd256c328f592ccf0d6
SHA256:de023257ff166044a56bd1aa9124e843cd05dac5806cc705a9311f3556d5a15f
Referenced In Project/Scope: psi-probe-core:compile
commons-text-1.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

error_prone_annotations-2.27.1.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.27.1/error_prone_annotations-2.27.1.jar
MD5: abe81ff506aaec1e2ead937983c7ac78
SHA1: a87dac4f79a6e5b1e55c629f16c754c53cbd50ec
SHA256:a4895b5db0243614d90ce2a2c6f830624909c01e31587d8ec3ecf51e5e7e7506
Referenced In Project/Scope: psi-probe-core:provided
error_prone_annotations-2.27.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

failureaccess-1.0.2.jar

Description:

    Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/guava/failureaccess/1.0.2/failureaccess-1.0.2.jar
MD5: 3f75955b49b6758fd6d1e1bd9bf777b3
SHA1: c4a06a64e650562f30b7bf9aaec1bfed43aca12b
SHA256:8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064
Referenced In Project/Scope: psi-probe-core:compile
failureaccess-1.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.google.guava/guava@33.2.0-jre

Identifiers

geoip2-4.2.0.jar

Description:

GeoIP2 webservice client and database reader

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/com/maxmind/geoip2/geoip2/4.2.0/geoip2-4.2.0.jar
MD5: 7b0a9c3a389c2a925df288d50ff910b4
SHA1: 78ff932dc13ac41dd1f0fd9e7405a7f4ad815ce0
SHA256:5981ac68332deebdf52e7a7f96a0bef5f320012fa930f3778ee1e9c827a80dbd
Referenced In Project/Scope: psi-probe-core:compile
geoip2-4.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

guava-33.2.0-jre.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/guava/guava/33.2.0-jre/guava-33.2.0-jre.jar
MD5: 8cc9e39ba1958ebca928d158806e0802
SHA1: e264781dadc4967e5292f3c4d05f1d153631f7b4
SHA256:99f491e86262ce38d13b3581d40f77acdb4696a9505447c3154474c3192908dd
Referenced In Project/Scope: psi-probe-core:compile
guava-33.2.0-jre.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

j2objc-annotations-3.0.0.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar
MD5: f59529b29202a5baf37f491ea5ec8627
SHA1: 7399e65dd7e9ff3404f4535b2f017093bdb134c7
SHA256:88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64
Referenced In Project/Scope: psi-probe-core:provided
j2objc-annotations-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

jackson-core-2.17.1.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.17.1/jackson-core-2.17.1.jar
MD5: 9363584821290882417f1c3ceab784df
SHA1: 5e52a11644cd59a28ef79f02bddc2cc3bab45edb
SHA256:ddb26c8a1f1a84535e8213c48b35b253370434e3287b3cf15777856fc4e58ce6
Referenced In Project/Scope: psi-probe-core:compile
jackson-core-2.17.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.maxmind.geoip2/geoip2@4.2.0

Identifiers

jackson-databind-2.17.1.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.17.1/jackson-databind-2.17.1.jar
MD5: f0a1c37dc7d937f14e183d84f15c0f83
SHA1: 0524dcbcccdde7d45a679dfc333e4763feb09079
SHA256:b6ca2f7d5b1ab245cec5495ec339773d2d90554c48592590673fb18f4400a948
Referenced In Project/Scope: psi-probe-core:compile
jackson-databind-2.17.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.maxmind.geoip2/geoip2@4.2.0

Identifiers

jakarta.activation-api-2.1.3.jar

Description:

  Specification

License:

EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar
MD5: 76e7b680375ea9f40f3ddbd702efcd25
SHA1: fa165bd70cda600368eee31555222776a46b881f
SHA256:01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627
Referenced In Project/Scope: psi-probe-core:compile
jakarta.activation-api-2.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

jakarta.inject-api-2.0.1.jar

Description:

Jakarta Dependency Injection

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar
MD5: 72003bf6efcc8455d414bbd7da86c11c
SHA1: 4c28afe1991a941d7702fe1362c365f0a8641d1e
SHA256:f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c
Referenced In Project/Scope: psi-probe-core:compile
jakarta.inject-api-2.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

jakarta.mail-api-2.1.3.jar

Description:

  Specification API

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/mail/jakarta.mail-api/2.1.3/jakarta.mail-api-2.1.3.jar
MD5: 288a687deb06b87602ce14cd03dddff4
SHA1: a327aa5f514ba86e80d54584417d7376ed2bde0e
SHA256:8051b58d75f982f9a5b963b3765426e824b2a64865ef0af17205e455b98db05c
Referenced In Project/Scope: psi-probe-core:compile
jakarta.mail-api-2.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.eclipse.angus/angus-mail@2.0.3

Identifiers

jakarta.transaction-api-2.0.1.jar

Description:

Jakarta Transactions

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/transaction/jakarta.transaction-api/2.0.1/jakarta.transaction-api-2.0.1.jar
MD5: 5315974a3935e342b40849478e1c9966
SHA1: 51a520e3fae406abb84e2e1148e6746ce3f80a1a
SHA256:50c0a7c760c13ae6c042acf182b28f0047413db95b4636fb8879bcffab5ba875
Referenced In Project/Scope: psi-probe-core:provided
jakarta.transaction-api-2.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

jfreechart-1.5.4.jar

Description:

        JFreeChart is a class library, written in Java, for generating charts. 
        Utilising the Java2D API, it supports a wide range of chart types including
        bar charts, pie charts, line charts, XY-plots, time series plots, Sankey charts
        and more.

License:

GNU Lesser General Public Licence: http://www.gnu.org/licenses/lgpl.txt
File Path: /home/runner/.m2/repository/org/jfree/jfreechart/1.5.4/jfreechart-1.5.4.jar
MD5: 36e760314d688997c7e5ad135a3efc44
SHA1: 9a5edddb05a3ca4fbc0628c594e6641a6f36a3b4
SHA256:cd0649b04b64f2638b55c7c3ac24788ff064b777bbbaf1b952f82ee078ed8b81
Referenced In Project/Scope: psi-probe-core:compile
jfreechart-1.5.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

CVE-2023-52070 (OSSINDEX)  

JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedle(int index, int type)' method. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.
CWE-129 Improper Validation of Array Index

CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:org.jfree:jfreechart:1.5.4:*:*:*:*:*:*:*

CVE-2024-22949 (OSSINDEX)  

JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnnotation. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.
CWE-476 NULL Pointer Dereference

CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:org.jfree:jfreechart:1.5.4:*:*:*:*:*:*:*

CVE-2024-23076 (OSSINDEX)  

JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /labels/BubbleXYItemLabelGenerator.java. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.
CWE-476 NULL Pointer Dereference

CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:org.jfree:jfreechart:1.5.4:*:*:*:*:*:*:*

jhighlight-1.1.0.jar

Description:

    JHighlight is an embeddable pure Java syntax highlighting
    library that supports Java, HTML, XHTML, XML and LZX
    languages and outputs to XHTML.
    
    It also supports RIFE templates tags and highlights them
    clearly so that you can easily identify the difference
    between your RIFE markup and the actual marked up source.

License:

CDDL, v1.0: http://www.opensource.org/licenses/cddl1.php
LGPL, v2.1 or later: http://www.opensource.org/licenses/lgpl-license.php
File Path: /home/runner/.m2/repository/org/codelibs/jhighlight/1.1.0/jhighlight-1.1.0.jar
MD5: 849a2714c0bcd777a51c79ecf333e4f0
SHA1: 8ae20cc1eadb26bbc721611d509b808bf41d1a14
SHA256:2f7d5c92db46e76a7564dd98d4d00b822d808e21b01a2c9b60e8249c41351ed1
Referenced In Project/Scope: psi-probe-core:compile
jhighlight-1.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

jna-5.14.0.jar

Description:

Java Native Access

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.14.0/jna-5.14.0.jar
MD5: 8b3cc652920435ad9f801e6d9b2a3497
SHA1: 67bf3eaea4f0718cb376a181a629e5f88fa1c9dd
SHA256:34ed1e1f27fa896bca50dbc4e99cf3732967cec387a7a0d5e3486c09673fe8c6
Referenced In Project/Scope: psi-probe-core:compile
jna-5.14.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-core@6.6.0

Identifiers

jna-5.14.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.14.0/jna-5.14.0.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: f6bef568e690d361a5dcc165f5ad4b1f
SHA1: 05638a4aaafa689a6c246530823afdc18d3fd438
SHA256:b9d1479b9619b7ece4a36b6ae31365ffaf15a1355d4f6da02f8b5f09df2fa82f
Referenced In Project/Scope: psi-probe-core:compile

Identifiers

  • None

jna-5.14.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.14.0/jna-5.14.0.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 719d6ba1946c25aa61ce82f90d77ffd5
SHA1: 94d2191378cac5719daecc826fc116816284c406
SHA256:69c45175ecfd25af023f96ac0bb2c45e6a95e3ba8a5a50ee7969ccab14825c44
Referenced In Project/Scope: psi-probe-core:compile

Identifiers

  • None

jna-5.14.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.14.0/jna-5.14.0.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: e15183ef9c6c255b76fda73d01ca7ecb
SHA1: f816f998c43204230d9ea3eecffb5f8372a32c2e
SHA256:38650a0612730c52580c9f32ff766b44b1c5a426d52e7dd7a53687bf3389ac2c
Referenced In Project/Scope: psi-probe-core:compile

Identifiers

  • None

jna-platform-5.14.0.jar

Description:

Java Native Access Platform

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-platform/5.14.0/jna-platform-5.14.0.jar
MD5: 3bc3f09a698e6ad250dd093f64fbb8a7
SHA1: 28934d48aed814f11e4c584da55c49fa7032b31b
SHA256:ae4caceb3840730c2537f9b7fb55a01baba580286b4122951488bcee558c2449
Referenced In Project/Scope: psi-probe-core:compile
jna-platform-5.14.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-core@6.6.0

Identifiers

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: psi-probe-core:compile
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.google.guava/guava@33.2.0-jre

Identifiers

listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

Description:

    An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....

File Path: /home/runner/.m2/repository/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
MD5: d094c22570d65e132c19cea5d352e381
SHA1: b421526c5f297295adef1c886e5246c39d4ac629
SHA256:b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99
Referenced In Project/Scope: psi-probe-core:compile
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.google.guava/guava@33.2.0-jre

Identifiers

logback-core-1.5.6.jar

Description:

logback-core module

License:

http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html
File Path: /home/runner/.m2/repository/ch/qos/logback/logback-core/1.5.6/logback-core-1.5.6.jar
MD5: d0634e717a5e885c6b7eeb1bcfac5b61
SHA1: 41cbe874701200c5624c19e0ab50d1b88dfcc77d
SHA256:898c7d120199f37e1acc8118d97ab15a4d02b0e72e27ba9f05843cb374e160c6
Referenced In Project/Scope: psi-probe-core:compile
logback-core-1.5.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/ch.qos.logback/logback-classic@1.5.6

Identifiers

maxmind-db-3.1.0.jar

Description:

Reader for MaxMind DB

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/com/maxmind/db/maxmind-db/3.1.0/maxmind-db-3.1.0.jar
MD5: 33addd75ccb27c5da3480baa47c5d65b
SHA1: 2008992ab45d61c7b28a18678b5df82272529da3
SHA256:2c8033081b1215dc57f5ae0e0de95cf91eb54144fccae4db35a47eb5d1101afc
Referenced In Project/Scope: psi-probe-core:compile
maxmind-db-3.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.maxmind.geoip2/geoip2@4.2.0

Identifiers

mchange-commons-java-0.3.1.jar

Description:

mchange-commons-java

License:

GNU Lesser General Public License, Version 2.1: http://www.gnu.org/licenses/lgpl-2.1.html
Eclipse Public License, Version 1.0: http://www.eclipse.org/org/documents/epl-v10.html
File Path: /home/runner/.m2/repository/com/mchange/mchange-commons-java/0.3.1/mchange-commons-java-0.3.1.jar
MD5: cb5f556cce10dbe7c9c97bf13c3d5ace
SHA1: 1b708d47183841ac38e8c1a616fcdb54d49476f3
SHA256:b302a051ad0162915c438e947de6ca7d77a42a7193998d810ff0670114f301db
Referenced In Project/Scope: psi-probe-core:provided
mchange-commons-java-0.3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.mchange/c3p0@0.10.1

Identifiers

micrometer-commons-1.12.5.jar

Description:

Module containing common code

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.12.5/micrometer-commons-1.12.5.jar
MD5: 779a77354228141fd89fb7657d80f50a
SHA1: da45afd81a6a05267df5ddfe10438ea857e0f7d9
SHA256:d5510ea0442638cf09a6b00363ebd73d85e1a408bb3515eb942001d58334dbcb
Referenced In Project/Scope: psi-probe-core:compile
micrometer-commons-1.12.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework/spring-context@6.1.6

Identifiers

micrometer-observation-1.12.5.jar

Description:

Module containing Observation related code

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.12.5/micrometer-observation-1.12.5.jar
MD5: 9f3c9878476067345afd87b74458f6e4
SHA1: ee23704259a1aad5c8f503db4d37cdfe5352e766
SHA256:888a8dcd3d631257e0c41952f1f5e79f0e77b604c7bee036c098a00eb0d5fab6
Referenced In Project/Scope: psi-probe-core:compile
micrometer-observation-1.12.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework/spring-context@6.1.6

Identifiers

mxparser-1.2.2.jar

Description:

    MXParser is a fork of xpp3_min 1.1.7 containing only the parser with merged changes of the Plexus fork.

License:

Indiana University Extreme! Lab Software License: https://raw.githubusercontent.com/x-stream/mxparser/master/LICENSE.txt
File Path: /home/runner/.m2/repository/io/github/x-stream/mxparser/1.2.2/mxparser-1.2.2.jar
MD5: 9d7e42409dfdcee9bd17903015bdeae2
SHA1: 476fb3b3bb3716cad797cd054ce45f89445794e9
SHA256:aeeee23a3303d811bca8790ea7f25b534314861c03cff36dafdcc2180969eb97
Referenced In Project/Scope: psi-probe-core:compile
mxparser-1.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.thoughtworks.xstream/xstream@1.4.20

Identifiers

ojdbc8-19.23.0.0.jar

Description:

 Oracle JDBC Driver compatible with JDK8, JDK11, , JDK17, and JDK19

License:

Oracle Free Use Terms and Conditions (FUTC): https://www.oracle.com/downloads/licenses/oracle-free-license.html
File Path: /home/runner/.m2/repository/com/oracle/database/jdbc/ojdbc8/19.23.0.0/ojdbc8-19.23.0.0.jar
MD5: da72e4ea75b54c48b3a6ea23644cd175
SHA1: f1789a271868d5d04d148db47161905dff2a25ea
SHA256:aae2e278367600ce56c412b062d1e7992f9780c69bc90be4cd55899a3250eaf9
Referenced In Project/Scope: psi-probe-core:provided
ojdbc8-19.23.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

openejb-core-9.1.3.jar

Description:

Apache OpenEJB is an open source, modular, configurable and extensible EJB Container System and EJB Server.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomee/openejb-core/9.1.3/openejb-core-9.1.3.jar
MD5: 43fdd3dd738435d065418eac0bcdda99
SHA1: 6c58403bed729860b21b6914d26fa6678d2ddf70
SHA256:3ff93fecc64996caf064e9ff3f2091ea4b19a8ca950463878ca277aec5f4ddbb
Referenced In Project/Scope: psi-probe-core:provided
openejb-core-9.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

oshi-core-6.6.0.jar

Description:

A JNA-based (native) operating system information library for Java that aims to provide a         cross-platform implementation to retrieve system information, such as version, memory, CPU, disk, battery, etc.

License:

"SPDX-License-Identifier: MIT";link="https://opensource.org/licenses/MIT"
File Path: /home/runner/.m2/repository/com/github/oshi/oshi-core/6.6.0/oshi-core-6.6.0.jar
MD5: 428390d8502d83d4d4b67049f61c0b53
SHA1: 344c50abc95000e1fd0d8eea4f0f95df08f878d1
SHA256:706b5582246d534f427a57141d9fe4a9a7ac1aae37aac857769ec9abacf0de82
Referenced In Project/Scope: psi-probe-core:compile
oshi-core-6.6.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

quartz-2.4.0-rc2.jar

Description:

Quartz Enterprise Job Scheduler

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/quartz-scheduler/quartz/2.4.0-rc2/quartz-2.4.0-rc2.jar
MD5: 73f3170c74f95bb0781650070eff0bf7
SHA1: 8f9a2fbaea7516014215933910a8ef8bf685821b
SHA256:76cd6979586bec66d4a6b847a6588c48113004fb00d3f14affbd1fd9c73f471f
Referenced In Project/Scope: psi-probe-core:compile
quartz-2.4.0-rc2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

sitemesh-2.6.0.jar

Description:

Sitemesh web-page layout system.

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/github/hazendaz/sitemesh/2.6.0/sitemesh-2.6.0.jar
MD5: 53986d2370cb88b5f87626267468f908
SHA1: 1e76f60672d8d1f86a85e7e28c48bffd8f33b13b
SHA256:2207535f887ad108bfdd0ec5046a902ba1e91d5f01207fb19d3b359a6a1e686d
Referenced In Project/Scope: psi-probe-core:compile
sitemesh-2.6.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

slf4j-api-2.0.13.jar

Description:

The slf4j API

License:

http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.13/slf4j-api-2.0.13.jar
MD5: 7f4028aa04f75427327f3f30cd62ba4e
SHA1: 80229737f704b121a318bba5d5deacbcf395bc77
SHA256:e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9
Referenced In Project/Scope: psi-probe-core:compile
slf4j-api-2.0.13.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.zaxxer/HikariCP@5.1.0

Identifiers

spotbugs-annotations-4.8.5.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.8.5/spotbugs-annotations-4.8.5.jar
MD5: e952af1f90eadb3502cff551518fcbc9
SHA1: 17ab39acf7cf6f7a330ee3be08a4bb2740082b4c
SHA256:6e63acb693f156e4fb79151b88f9eebe731b4da65fe12843503613e0d6e6f68d
Referenced In Project/Scope: psi-probe-core:provided
spotbugs-annotations-4.8.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

spring-core-6.1.6.jar

Description:

Spring Core

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-core/6.1.6/spring-core-6.1.6.jar
MD5: 852be6055a31d2ce17b5d231b17f732e
SHA1: dea4b8e110b7b54a02a4907e32dbb0adee8a7168
SHA256:caf51f3d51c5d95e931f411027688f1dde3986d5f2aad67ff1096ddddac36ac5
Referenced In Project/Scope: psi-probe-core:compile
spring-core-6.1.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework/spring-beans@6.1.6

Identifiers

spring-security-core-6.2.4.jar

Description:

Spring Security

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-core/6.2.4/spring-security-core-6.2.4.jar
MD5: f469b4571584e02e5a1c47d0371cf7d4
SHA1: b1bb9c66df67cd6ecc5548dec8b37341cef11a80
SHA256:ec2888879a7636971416cfa13912f21e8dec2c63d1c225808c3815d5ab7b9b70
Referenced In Project/Scope: psi-probe-core:compile
spring-security-core-6.2.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

spring-security-web-6.2.4.jar

Description:

Spring Security

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-web/6.2.4/spring-security-web-6.2.4.jar
MD5: 9a60d4e77f418ac926b7f1695bf12229
SHA1: b4a436865cf6483e088c986432f44d9e90bab6a3
SHA256:53d902c7d7b216e19e595e4ab09a449a4a57011bb1cda1756cb7214059f3627c
Referenced In Project/Scope: psi-probe-core:compile
spring-security-web-6.2.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

spring-web-6.1.6.jar

Description:

Spring Web

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/springframework/spring-web/6.1.6/spring-web-6.1.6.jar
MD5: bea30302bcb6ef493a8123e4a40ae6a2
SHA1: 49a32e3497fe39550da3b280bda5d9933ae2d51d
SHA256:0f33f5530ef848063958b4b437e3df3119c04a92aea58f9e37fc46948cbbde8e
Referenced In Project/Scope: psi-probe-core:compile
spring-web-6.1.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework/spring-webmvc@6.1.6

Identifiers

tomcat-annotations-api-10.1.23.jar

Description:

Annotations Package

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-annotations-api/10.1.23/tomcat-annotations-api-10.1.23.jar
MD5: ca85934abfa4f38e586be5092c0372e9
SHA1: 0ee60781fc1c65cf0183828ddfefbe7d376030cf
SHA256:38e1860bef0461cf5ec1e6cb35237efb5f998235f3974b054693fb16f0e6e68d
Referenced In Project/Scope: psi-probe-core:provided
tomcat-annotations-api-10.1.23.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.23

Identifiers

tomcat-api-10.1.23.jar

Description:

Definition of interfaces shared by Catalina and Jasper

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-api/10.1.23/tomcat-api-10.1.23.jar
MD5: 0d2e6ec873c53b6739a4bbbc36a782dd
SHA1: 883c0cd823fee2a891c3e0e3a1f3e078f6b09855
SHA256:59e3a2aca0b12962cbc0934c25ab0b9eab52689947966e79094264d416f1b6ed
Referenced In Project/Scope: psi-probe-core:provided
tomcat-api-10.1.23.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.23

Identifiers

tomcat-el-api-10.1.23.jar

Description:

Expression language package

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-el-api/10.1.23/tomcat-el-api-10.1.23.jar
MD5: 4d6a987c211776f4c6a0dd1499275438
SHA1: dedc63e1f6cd381f0918b6978d72c8b751e13c73
SHA256:b9713456818f39054745f8cd773b84c0d08a5a070c6f1bee949c85cda5f3d899
Referenced In Project/Scope: psi-probe-core:provided
tomcat-el-api-10.1.23.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.23

Identifiers

tomcat-jdbc-10.1.23.jar

Description:

Tomcat JDBC Pool Package

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jdbc/10.1.23/tomcat-jdbc-10.1.23.jar
MD5: fe01377d294608362280966e2c1025c4
SHA1: 2718d607001929c9f5f245f4aecf93b6e6a79f69
SHA256:c294dbae5126d8878aa2d7b7c5bbb5f993d187e9b6fc63b94fa074636b87b314
Referenced In Project/Scope: psi-probe-core:provided
tomcat-jdbc-10.1.23.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

tomcat-jni-10.1.23.jar

Description:

Interface code to the native connector

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-jni/10.1.23/tomcat-jni-10.1.23.jar
MD5: c85df8e6f67d74758905072c12ac28bc
SHA1: c26fe89bb0b17823cb81a3040cbda9e10edae339
SHA256:4417e52da197049e883767e09489f0424ce6e655f1eab5356f167e568f3f4d01
Referenced In Project/Scope: psi-probe-core:provided
tomcat-jni-10.1.23.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.23

Identifiers

tomcat-juli-10.1.23.jar

Description:

Tomcat Core Logging Package

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-juli/10.1.23/tomcat-juli-10.1.23.jar
MD5: 243cc4d1cf99e0e4eb064d0ab9bb1455
SHA1: 8bde53f4112e34cf88ac5dc436f4b4a58d726fc8
SHA256:934ed6875175bd336a90704d0c0063e59f107e270e32cc83e0930199677161a3
Referenced In Project/Scope: psi-probe-core:provided
tomcat-juli-10.1.23.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.23

Identifiers

tomcat-servlet-api-10.1.23.jar

Description:

jakarta.servlet package

License:

        Apache License, Version 2.0 and
        Common Development And Distribution License (CDDL) Version 1.0 and
        Eclipse Public License - v 2.0
      : 
        http://www.apache.org/licenses/LICENSE-2.0.txt and
        http://www.opensource.org/licenses/cddl1.txt and
        https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomcat/tomcat-servlet-api/10.1.23/tomcat-servlet-api-10.1.23.jar
MD5: d5818e5ce597abb0e978bfcef9bc9292
SHA1: 7778a631e1cbf7c47961841cb85bffb89024df5a
SHA256:0a7d53de87da19c0d92e2c87da4524ce85c901e01bd15ff4cfa7f3357d67e31c
Referenced In Project/Scope: psi-probe-core:provided
tomcat-servlet-api-10.1.23.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.23

Identifiers

tomee-jdbc-9.1.3.jar

Description:

Apache OpenEJB is an open source, modular, configurable and extensible EJB Container System and EJB Server.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/tomee/tomee-jdbc/9.1.3/tomee-jdbc-9.1.3.jar
MD5: f4d3a7639e0c8f410a0682576629d2cf
SHA1: eb523f317cdc4c7f2c806e589e43e54dac1c8eec
SHA256:2a40135d317ab217f0ebc7657205eda4bda80c60d29c32d6548c7d6bcac3463f
Referenced In Project/Scope: psi-probe-core:provided
tomee-jdbc-9.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

ucp-21.13.0.0.jar

Description:

Oracle Universal Connection Pool (UCP)

License:

Oracle Free Use Terms and Conditions (FUTC): https://www.oracle.com/downloads/licenses/oracle-free-license.html
File Path: /home/runner/.m2/repository/com/oracle/database/jdbc/ucp/21.13.0.0/ucp-21.13.0.0.jar
MD5: 95fc1cf9b3a63a169378cde5b12f4228
SHA1: 4d1055237b5ee25b7a211ac36d8721f1f7957d84
SHA256:de59dc398ecdbe119b4e0fc6a81c67af3b6eefe8160cee11690d5e0f7074a207
Referenced In Project/Scope: psi-probe-core:provided
ucp-21.13.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

vibur-dbcp-25.0.jar

Description:

        Concurrent, fast, and fully-featured JDBC connection pool, which provides a non-starvation guarantee for application
        threads, slow SQL queries detection and logging, and Hibernate integration, among other features.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/vibur/vibur-dbcp/25.0/vibur-dbcp-25.0.jar
MD5: d0d85b9bf03a1daa63764c6ada6c348f
SHA1: f03f9159bf6e284bef3090797005f1e426a1ca37
SHA256:312cadfa516bb92d95352f3216520f23e48bd5eb99cd99f93fbbb0c45643d2d6
Referenced In Project/Scope: psi-probe-core:provided
vibur-dbcp-25.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

vibur-object-pool-25.0.jar

Description:

        General-purpose concurrent Java object pool that is built entirely using standard Java concurrency utilities,
        does not use any synchronized blocks or methods, and does not have any external dependencies.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/vibur/vibur-object-pool/25.0/vibur-object-pool-25.0.jar
MD5: d6895bcefb4953ef6b604e75db3419f6
SHA1: 8412049bfba1a65acf239efe74da811397f668c7
SHA256:f7321b1cb450079464f04bd9d1ba1f6ab9c8cfa026891790db8c11db023122c8
Referenced In Project/Scope: psi-probe-core:provided
vibur-object-pool-25.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.vibur/vibur-dbcp@25.0

Identifiers

wrapper-3.2.3.jar

License:

Tanuki Software license: http://wrapper.tanukisoftware.org/doc/english/license.html
File Path: /home/runner/.m2/repository/tanukisoft/wrapper/3.2.3/wrapper-3.2.3.jar
MD5: f6cab403bb44e7d156b195813247aeab
SHA1: 867755699564c483e28c03515b9bc07bedc4fe52
SHA256:54de7b6be77955fe54821efc28fcab2bd195cc2aabfceb29d608c12206a57918
Referenced In Project/Scope: psi-probe-core:provided
wrapper-3.2.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers

xmlpull-1.1.3.1.jar

License:

Public Domain: http://www.xmlpull.org/v1/download/unpacked/LICENSE.txt
File Path: /home/runner/.m2/repository/xmlpull/xmlpull/1.1.3.1/xmlpull-1.1.3.1.jar
MD5: cc57dacc720eca721a50e78934b822d2
SHA1: 2b8e230d2ab644e4ecaa94db7cdedbc40c805dfa
SHA256:34e08ee62116071cbb69c0ed70d15a7a5b208d62798c59f2120bb8929324cb63
Referenced In Project/Scope: psi-probe-core:compile
xmlpull-1.1.3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.thoughtworks.xstream/xstream@1.4.20

Identifiers

xstream-1.4.20.jar

Description:

XStream is a serialization library from Java objects to XML and back.

License:

BSD-3-Clause
File Path: /home/runner/.m2/repository/com/thoughtworks/xstream/xstream/1.4.20/xstream-1.4.20.jar
MD5: 1e816f33b1eb780a309789478051faeb
SHA1: 0e2315b8b2e95e9f21697833c8e56cdd9c98a5ee
SHA256:87df0f0be57c92037d0110fbb225a30b651702dc275653d285afcfef31bc2e81
Referenced In Project/Scope: psi-probe-core:compile
xstream-1.4.20.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.psi-probe/psi-probe-core@5.0.1-SNAPSHOT

Identifiers



This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.