Press CTR-C to copy XML [help]


Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

 Sponsor

Project: SpotBugs Maven Plugin

com.github.spotbugs:spotbugs-maven-plugin:4.7.3.0

Scan Information (show all):

Summary

Display: Showing Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
Saxon-HE-11.4.jarcpe:2.3:a:kay_framework_project:kay_framework:11.4:*:*:*:*:*:*:*pkg:maven/net.sf.saxon/Saxon-HE@11.4 0Low55
animal-sniffer-annotations-1.14.jarpkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14 023
ant-1.10.12.jarcpe:2.3:a:apache:ant:1.10.12:*:*:*:*:*:*:*pkg:maven/org.apache.ant/ant@1.10.12 0Highest24
aopalliance-1.0.jarpkg:maven/aopalliance/aopalliance@1.0 020
asm-9.4.jarpkg:maven/org.ow2.asm/asm@9.4 053
asm-analysis-9.4.jarpkg:maven/org.ow2.asm/asm-analysis@9.4 059
asm-commons-9.4.jarpkg:maven/org.ow2.asm/asm-commons@9.4 057
asm-tree-9.4.jarpkg:maven/org.ow2.asm/asm-tree@9.4 057
asm-util-9.4.jarpkg:maven/org.ow2.asm/asm-util@9.4 057
bcel-6.5.0.jarpkg:maven/org.apache.bcel/bcel@6.5.0 079
checker-compat-qual-2.0.0.jarpkg:maven/org.checkerframework/checker-compat-qual@2.0.0 074
checker-qual-3.22.2.jarpkg:maven/org.checkerframework/checker-qual@3.22.2 048
commons-beanutils-1.9.4.jarcpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*pkg:maven/commons-beanutils/commons-beanutils@1.9.4 0Highest170
commons-chain-1.2.jarpkg:maven/commons-chain/commons-chain@1.2 078
commons-codec-1.15.jarpkg:maven/commons-codec/commons-codec@1.15 0110
commons-collections-3.2.2.jarcpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*pkg:maven/commons-collections/commons-collections@3.2.2 0Highest86
commons-digester-2.1.jarpkg:maven/commons-digester/commons-digester@2.1 098
commons-io-2.11.0.jarcpe:2.3:a:apache:commons_io:2.11.0:*:*:*:*:*:*:*pkg:maven/commons-io/commons-io@2.11.0 0Highest125
commons-lang-2.6.jarpkg:maven/commons-lang/commons-lang@2.6 0122
commons-lang3-3.12.0.jarpkg:maven/org.apache.commons/commons-lang3@3.12.0 0141
commons-text-1.10.0.jarcpe:2.3:a:apache:commons_text:1.10.0:*:*:*:*:*:*:*pkg:maven/org.apache.commons/commons-text@1.10.0 0Highest73
dom4j-2.1.3.jarcpe:2.3:a:dom4j_project:dom4j:2.1.3:*:*:*:*:*:*:*pkg:maven/org.dom4j/dom4j@2.1.3 0Highest20
doxia-core-1.11.1.jarpkg:maven/org.apache.maven.doxia/doxia-core@1.11.1 026
doxia-decoration-model-1.11.1.jarpkg:maven/org.apache.maven.doxia/doxia-decoration-model@1.11.1 026
doxia-integration-tools-1.11.1.jarpkg:maven/org.apache.maven.doxia/doxia-integration-tools@1.11.1 028
doxia-logging-api-1.11.1.jarpkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1 028
doxia-module-xhtml-1.11.1.jarpkg:maven/org.apache.maven.doxia/doxia-module-xhtml@1.11.1 028
doxia-module-xhtml5-1.11.1.jarpkg:maven/org.apache.maven.doxia/doxia-module-xhtml5@1.11.1 028
doxia-sink-api-1.11.1.jarpkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1 028
doxia-site-renderer-1.11.1.jarpkg:maven/org.apache.maven.doxia/doxia-site-renderer@1.11.1 026
doxia-skin-model-1.11.1.jarpkg:maven/org.apache.maven.doxia/doxia-skin-model@1.11.1 026
error_prone_annotations-2.14.0.jarpkg:maven/com.google.errorprone/error_prone_annotations@2.14.0 023
groovy-4.0.6.jarcpe:2.3:a:apache:groovy:4.0.6:*:*:*:*:*:*:*pkg:maven/org.apache.groovy/groovy@4.0.6 0Highest291
groovy-ant-4.0.6.jarcpe:2.3:a:apache:ant:4.0.6:*:*:*:*:*:*:*
cpe:2.3:a:apache:groovy:4.0.6:*:*:*:*:*:*:*		pkg:maven/org.apache.groovy/groovy-ant@4.0.6 0Highest288
gson-2.9.1.jarcpe:2.3:a:google:gson:2.9.1:*:*:*:*:*:*:*pkg:maven/com.google.code.gson/gson@2.9.1 0Highest33
guava-25.1-android.jarcpe:2.3:a:google:guava:25.1:*:*:*:*:*:*:*pkg:maven/com.google.guava/guava@25.1-androidLOW1Highest25
guice-4.2.2-no_aop.jarpkg:maven/com.google.inject/guice@4.2.2 034
hamcrest-core-1.3.jarpkg:maven/org.hamcrest/hamcrest-core@1.3 024
hibernate-validator-annotation-processor-6.2.3.Final.jarcpe:2.3:a:redhat:hibernate_validator:6.2.3:*:*:*:*:*:*:*pkg:maven/org.hibernate.validator/hibernate-validator-annotation-processor@6.2.3.Final 0Highest25
httpclient-4.5.13.jarcpe:2.3:a:apache:httpclient:4.5.13:*:*:*:*:*:*:*pkg:maven/org.apache.httpcomponents/httpclient@4.5.13 0Highest32
httpclient5-5.1.3.jarcpe:2.3:a:apache:httpclient:5.1.3:*:*:*:*:*:*:*pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3 0Highest30
httpcore-4.4.14.jarpkg:maven/org.apache.httpcomponents/httpcore@4.4.14 032
httpcore5-5.1.3.jarpkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3 030
httpcore5-h2-5.1.3.jarpkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3 030
j2objc-annotations-1.3.jarpkg:maven/com.google.j2objc/j2objc-annotations@1.3 024
javaparser-core-3.24.7.jarpkg:maven/com.github.javaparser/javaparser-core@3.24.7 029
javax.annotation-api-1.2.jarpkg:maven/javax.annotation/javax.annotation-api@1.2 044
javax.inject-1.jarpkg:maven/javax.inject/javax.inject@1 020
jaxen-1.2.0.jarpkg:maven/jaxen/jaxen@1.2.0 0117
jcip-annotations-1.0.jarpkg:maven/net.jcip/jcip-annotations@1.0 024
jcl-over-slf4j-2.0.3.jarpkg:maven/org.slf4j/jcl-over-slf4j@2.0.3 027
jsr305-3.0.2.jarpkg:maven/com.google.code.findbugs/jsr305@3.0.2 017
junit-4.13.2.jarcpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:*pkg:maven/junit/junit@4.13.2 0Low53
log4j-core-2.19.0.jarcpe:2.3:a:apache:log4j:2.19.0:*:*:*:*:*:*:*pkg:maven/org.apache.logging.log4j/log4j-core@2.19.0 0Highest50
lombok-1.18.24.jar: mavenEcjBootstrapAgent.jar 07
lombok-1.18.24.jarpkg:maven/org.projectlombok/lombok@1.18.24 036
maven-artifact-3.8.6.jarpkg:maven/org.apache.maven/maven-artifact@3.8.6 026
maven-artifact-transfer-0.13.1.jarpkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.13.1 033
maven-builder-support-3.8.6.jarpkg:maven/org.apache.maven/maven-builder-support@3.8.6 024
maven-common-artifact-filters-3.3.2.jarpkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.3.2 029
maven-core-3.8.6.jarcpe:2.3:a:apache:maven:3.8.6:*:*:*:*:*:*:*pkg:maven/org.apache.maven/maven-core@3.8.6 0Highest24
maven-model-3.8.6.jarpkg:maven/org.apache.maven/maven-model@3.8.6 026
maven-model-builder-3.8.6.jarpkg:maven/org.apache.maven/maven-model-builder@3.8.6 032
maven-plugin-annotations-3.6.4.jarpkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.4 026
maven-plugin-api-3.8.6.jarpkg:maven/org.apache.maven/maven-plugin-api@3.8.6 026
maven-reporting-api-3.1.1.jarpkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1 035
maven-reporting-impl-3.2.0.jarpkg:maven/org.apache.maven.reporting/maven-reporting-impl@3.2.0 035
maven-repository-metadata-3.8.6.jarpkg:maven/org.apache.maven/maven-repository-metadata@3.8.6 026
maven-resolver-api-1.6.3.jarpkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3 037
maven-resolver-impl-1.6.3.jarpkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3 034
maven-resolver-provider-3.8.6.jarpkg:maven/org.apache.maven/maven-resolver-provider@3.8.6 026
maven-resolver-spi-1.6.3.jarpkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3 034
maven-resolver-util-1.6.3.jarpkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3 040
maven-settings-3.8.6.jarpkg:maven/org.apache.maven/maven-settings@3.8.6 026
maven-settings-builder-3.8.6.jarpkg:maven/org.apache.maven/maven-settings-builder@3.8.6 026
maven-shared-utils-3.3.4.jarcpe:2.3:a:apache:maven_shared_utils:3.3.4:*:*:*:*:*:*:*pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4 0Highest29
modernizer-maven-annotations-2.4.0.jarpkg:maven/org.gaul/modernizer-maven-annotations@2.4.0 019
org.eclipse.sisu.inject-0.3.5.jarpkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5 029
org.eclipse.sisu.plexus-0.3.5.jarpkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5 028
oro-2.0.8.jarpkg:maven/oro/oro@2.0.8 016
plexus-cipher-2.0.jarpkg:maven/org.codehaus.plexus/plexus-cipher@2.0 020
plexus-classworlds-2.6.0.jarpkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0 028
plexus-component-annotations-2.0.0.jarpkg:maven/org.codehaus.plexus/plexus-component-annotations@2.0.0 027
plexus-container-default-2.1.1.jarpkg:maven/org.codehaus.plexus/plexus-container-default@2.1.1 021
plexus-i18n-1.0-beta-10.jarpkg:maven/org.codehaus.plexus/plexus-i18n@1.0-beta-10 024
plexus-interpolation-1.26.jarpkg:maven/org.codehaus.plexus/plexus-interpolation@1.26 027
plexus-resources-1.2.0.jarpkg:maven/org.codehaus.plexus/plexus-resources@1.2.0 022
plexus-sec-dispatcher-2.0.jarcpe:2.3:a:sec_project:sec:2.0:*:*:*:*:*:*:*pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0 0Highest20
plexus-utils-3.5.0.jarcpe:2.3:a:plexus-utils_project:plexus-utils:3.5.0:*:*:*:*:*:*:*pkg:maven/org.codehaus.plexus/plexus-utils@3.5.0 0Highest26
plexus-velocity-1.2.jarpkg:maven/org.codehaus.plexus/plexus-velocity@1.2 025
qdox-1.12.1.jarpkg:maven/com.thoughtworks.qdox/qdox@1.12.1 055
slf4j-api-2.0.3.jarpkg:maven/org.slf4j/slf4j-api@2.0.3 033
slf4j-simple-2.0.3.jarpkg:maven/org.slf4j/slf4j-simple@2.0.3 031
spotbugs-4.7.3.jarpkg:maven/com.github.spotbugs/spotbugs@4.7.3 048
spotbugs-annotations-4.7.3.jarpkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3 053
velocity-1.7.jarcpe:2.3:a:apache:velocity_engine:1.7:*:*:*:*:*:*:*pkg:maven/org.apache.velocity/velocity@1.7HIGH1Low76
velocity-tools-2.0.jarcpe:2.3:a:apache:velocity_tools:2.0:*:*:*:*:*:*:*pkg:maven/org.apache.velocity/velocity-tools@2.0MEDIUM1Highest76
xbean-reflect-3.7.jarpkg:maven/org.apache.xbean/xbean-reflect@3.7 025
xml-apis-1.4.01.jarpkg:maven/xml-apis/xml-apis@1.4.01 087
xmlresolver-4.4.3-data.jarpkg:maven/org.xmlresolver/xmlresolver@4.4.3 012
xmlresolver-4.4.3.jarpkg:maven/org.xmlresolver/xmlresolver@4.4.3 026

Dependencies

Saxon-HE-11.4.jar

Description:

The XSLT and XQuery Processor

License:

Mozilla Public License Version 2.0: http://www.mozilla.org/MPL/2.0/
File Path: C:\Users\Jeremy\.m2\repository\net\sf\saxon\Saxon-HE\11.4\Saxon-HE-11.4.jar
MD5: 9f35652962ffe9b687fb7e3726600f03
SHA1: d926a13f2717ad1ea6e051550b8fd6207a587051
SHA256:42e35494dc2e6b5e97256ae7cdf2b7ce30439c352566f35de02bed3a06a2b169
Referenced In Project/Scope:SpotBugs Maven Plugin:runtime

Identifiers

animal-sniffer-annotations-1.14.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\mojo\animal-sniffer-annotations\1.14\animal-sniffer-annotations-1.14.jar
MD5: 9d42e46845c874f1710a9f6a741f6c14
SHA1: 775b7e22fb10026eed3f86e8dc556dfafe35f2d5
SHA256:2068320bd6bad744c3673ab048f67e30bef8f518996fa380033556600669905d
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

ant-1.10.12.jar

File Path: C:\Users\Jeremy\.m2\repository\org\apache\ant\ant\1.10.12\ant-1.10.12.jar
MD5: f5b97fb267862b35d1eb398defe1831a
SHA1: be08c4f63e92e03bac761404cf77bc270928b6c5
SHA256:5c6a438c3ebe7a306eba452b09fa307b0e60314926177920bca896c4a504eaf6
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

aopalliance-1.0.jar

Description:

AOP Alliance

License:

Public Domain
File Path: C:\Users\Jeremy\.m2\repository\aopalliance\aopalliance\1.0\aopalliance-1.0.jar
MD5: 04177054e180d09e3998808efa0401c7
SHA1: 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
SHA256:0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

asm-9.4.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm\9.4\asm-9.4.jar
MD5: ffa64f03a23a4823d98703e6ce6ff397
SHA1: b4e0e2d2e023aa317b7cfcfc916377ea348e07d1
SHA256:39d0e2b3dc45af65a09b097945750a94a126e052e124f93468443a1d0e15f381
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

asm-analysis-9.4.jar

Description:

Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-analysis\9.4\asm-analysis-9.4.jar
MD5: 707cb3616c99af872dcdd00801723600
SHA1: 0a5fec9dfc039448d4fd098fbaffcaf55373b223
SHA256:7b5f8c5e3bf341b5bb570d26f379e3fdebdc32732187159c42479164053f373d
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

asm-commons-9.4.jar

Description:

Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-commons\9.4\asm-commons-9.4.jar
MD5: bf0034c3d79a244121380da0308c5ec8
SHA1: 8fc2810ddbcbbec0a8bbccb3f8eda58321839912
SHA256:0c128a9ec3f33c98959272f6d16cf14247b508f58951574bcdbd2b56d6326364
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

asm-tree-9.4.jar

Description:

Tree API of ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-tree\9.4\asm-tree-9.4.jar
MD5: 664a67683cc12753e69fce43af328204
SHA1: a99175a17d7fdc18cbcbd0e8ea6a5d276844190a
SHA256:c42d479cf24566a21eb20af7eeaeef4e86bdb4a886306cf72f483b65e75b2acf
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

asm-util-9.4.jar

Description:

Utilities for ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\ow2\asm\asm-util\9.4\asm-util-9.4.jar
MD5: 3e671d779360f8053109ab99ee169915
SHA1: ab1e0a84b72561dbaf1ee260321e72148ebf4b19
SHA256:3d7932b93ff55056641e7cfb601f96bcd5cd071e1b0503c78a5014232297a23e
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

bcel-6.5.0.jar

Description:

Apache Commons Bytecode Engineering Library

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\bcel\bcel\6.5.0\bcel-6.5.0.jar
MD5: 4de81e833dd77627809d1458b984d2fa
SHA1: 79b1975ec0c7a6c1a15e19fb3a58cc4041b4aaea
SHA256:bdeb381d0d19999e221e6a0f8d8bf44f5b19c2e57eabf68b70dc098652aefaf5
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

checker-compat-qual-2.0.0.jar

Description:

        Checker Qual is the set of annotations (qualifiers) and supporting classes
        used by the Checker Framework to type check Java source code.  Please
        see artifact:
        org.checkerframework:checker

License:

GNU General Public License, version 2 (GPL2), with the classpath exception: http://www.gnu.org/software/classpath/license.html
The MIT License: http://opensource.org/licenses/MIT
File Path: C:\Users\Jeremy\.m2\repository\org\checkerframework\checker-compat-qual\2.0.0\checker-compat-qual-2.0.0.jar
MD5: b6fb2610dacd211a3e2c3d8af1b60d0f
SHA1: fc89b03860d11d6213d0154a62bcd1c2f69b9efa
SHA256:a40b2ce6d8551e5b90b1bf637064303f32944d61b52ab2014e38699df573941b
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

checker-qual-3.22.2.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: http://opensource.org/licenses/MIT
File Path: C:\Users\Jeremy\.m2\repository\org\checkerframework\checker-qual\3.22.2\checker-qual-3.22.2.jar
MD5: 4af6d7ee0a91f23024de696da8429b33
SHA1: 42cd3cf94e151d0efabd90eb7ce73601268d0024
SHA256:311255999dce83d77aca4062f1010bca641b6f91bd7f43e764d0191a3a373f19
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

commons-beanutils-1.9.4.jar

Description:

Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-beanutils\commons-beanutils\1.9.4\commons-beanutils-1.9.4.jar
MD5: 07dc532ee316fe1f2f0323e9bd2f8df4
SHA1: d52b9abcd97f38c81342bb7e7ae1eee9b73cba51
SHA256:7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

commons-chain-1.2.jar

Description:

        An implementation of the GoF Chain of Responsibility pattern

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-chain\commons-chain\1.2\commons-chain-1.2.jar
MD5: e18e2c87826644e4c8c08635572c154f
SHA1: 744a13e8766e338bd347b6fbc28c6db12979d0c6
SHA256:d5489b5f6b54b74665ad76ad3ffb3ad904830fe4863392784f311897ffcbfca8
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

commons-codec-1.15.jar

Description:

     The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-codec\commons-codec\1.15\commons-codec-1.15.jar
MD5: 303baf002ce6d382198090aedd9d79a2
SHA1: 49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d
SHA256:b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

commons-collections-3.2.2.jar

Description:

Types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-collections\commons-collections\3.2.2\commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256:eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

commons-digester-2.1.jar

Description:

    The Digester package lets you configure an XML to Java object mapping module
    which triggers certain actions called rules whenever a particular 
    pattern of nested XML elements is recognized.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-digester\commons-digester\2.1\commons-digester-2.1.jar
MD5: 528445033f22da28f5047b6abcd1c7c9
SHA1: 73a8001e7a54a255eef0f03521ec1805dc738ca0
SHA256:e0b2b980a84fc6533c5ce291f1917b32c507f62bcad64198fff44368c2196a3d
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

commons-io-2.11.0.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-io\commons-io\2.11.0\commons-io-2.11.0.jar
MD5: 3b4b7ccfaeceeac240b804839ee1a1ca
SHA1: a2503f302b11ebde7ebc3df41daebe0e4eea3689
SHA256:961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

commons-lang-2.6.jar

Description:

        Commons Lang, a package of Java utility classes for the
        classes that are in java.lang's hierarchy, or are considered to be so
        standard as to justify existence in java.lang.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-lang\commons-lang\2.6\commons-lang-2.6.jar
MD5: 4d5c1693079575b362edf41500630bbd
SHA1: 0ce1edb914c94ebc388f086c6827e8bdeec71ac2
SHA256:50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

commons-lang3-3.12.0.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-lang3\3.12.0\commons-lang3-3.12.0.jar
MD5: 19fe50567358922bdad277959ea69545
SHA1: c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e
SHA256:d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

commons-text-1.10.0.jar

Description:

Apache Commons Text is a library focused on algorithms working on strings.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-text\1.10.0\commons-text-1.10.0.jar
MD5: 4afc9bfa2d31dbf7330c98fcc954b892
SHA1: 3363381aef8cef2dbc1023b3e3a9433b08b64e01
SHA256:770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

dom4j-2.1.3.jar

Description:

flexible XML framework for Java

License:

BSD 3-clause New License: https://github.com/dom4j/dom4j/blob/master/LICENSE
File Path: C:\Users\Jeremy\.m2\repository\org\dom4j\dom4j\2.1.3\dom4j-2.1.3.jar
MD5: 41efcf234c5a05a8c590f9b51d53ca66
SHA1: a75914155a9f5808963170ec20653668a2ffd2fd
SHA256:549f3007c6290f6a901e57d1d331b4ed0e6bf7384f78bf10316ffceeca834de6
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

doxia-core-1.11.1.jar

Description:

Doxia core classes and interfaces.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-core\1.11.1\doxia-core-1.11.1.jar
MD5: a5f49cc5f7dadd2fa104974dfa3a6766
SHA1: 0b0438a61c2c1208b4d2e2b38241478383dd758b
SHA256:d79801594566bdd7168b1adf927c3cc40cf17a95dd4480b4151e45eb30128cd7
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

doxia-decoration-model-1.11.1.jar

Description:

The Decoration Model handles the decoration descriptor for sites, also known as site.xml.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-decoration-model\1.11.1\doxia-decoration-model-1.11.1.jar
MD5: 927ed3e7c39b6fed77875ed385b63447
SHA1: 1e10f4e9268b49edf40bca721eef07271bc91de5
SHA256:411fc167774f2e3573f280c57a278fbe7bae677ee596a8ad24bd6c6bb2c5bbce
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

doxia-integration-tools-1.11.1.jar

Description:

A collection of tools to help the integration of Doxia Sitetools in Maven plugins.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-integration-tools\1.11.1\doxia-integration-tools-1.11.1.jar
MD5: 1f3abb6a2c7c65b6f68f3ad45a76b3f5
SHA1: fdc4c4f29d10b0e2b5b9d7f9eea16812d496e478
SHA256:eee789dcb86f37f290c6c22198ea56bf529edf21590294e549a77a490ed21dbe
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

doxia-logging-api-1.11.1.jar

Description:

Doxia Logging API.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-logging-api\1.11.1\doxia-logging-api-1.11.1.jar
MD5: 6452e33a36b87939630e0b18f8ffcff0
SHA1: ee28757cce6ee0215bac550dead25074c97c532d
SHA256:243c66f842cd2b3ded7c6d2c36b177a65c3f5d94800cef988ba3e29ec8cf60c9
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

doxia-module-xhtml-1.11.1.jar

Description:

    A Doxia module for Xhtml source documents.
    Xhtml format is supported both as source and target formats.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-module-xhtml\1.11.1\doxia-module-xhtml-1.11.1.jar
MD5: 82c4cfb79b666b922e1a8cf7b919df22
SHA1: f1b755a09934cd9c51d87b606c8e8ddf07719ebf
SHA256:3d298e2da1e11dba952cf4e5d750fafc41713470767b57c4f6969123c0892a23
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

doxia-module-xhtml5-1.11.1.jar

Description:

    A Doxia module for Xhtml5 source documents.
    Xhtml5 format is supported both as source and target formats.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-module-xhtml5\1.11.1\doxia-module-xhtml5-1.11.1.jar
MD5: 37208526e7ed1051bc8c7f8dc076e5c9
SHA1: e4ee721555ff063d7ef9042d6b9237386c6b33e0
SHA256:3583ae17f9ae97db41da038dc67552a386e7a9f850f45fa6fdb0d2b9ef36a31c
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

doxia-sink-api-1.11.1.jar

Description:

Doxia Sink API.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-sink-api\1.11.1\doxia-sink-api-1.11.1.jar
MD5: b1bd5c9efde9f14969fa881b87fe709b
SHA1: 59c2255f58c78fbbcb7e638e82bd2914e78aec8b
SHA256:39ac38bb7d752ea003be17a0065522e4e1b076a4f7e374bea55259f3e133f28f
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

doxia-site-renderer-1.11.1.jar

Description:

The Site Renderer handles the rendering of sites, merging site decoration with document content.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-site-renderer\1.11.1\doxia-site-renderer-1.11.1.jar
MD5: 871abead02f713fb9c02d5ba36f65bf7
SHA1: 414e3b2049aa6f6710ecca4fa905d9d2ce318773
SHA256:f279a087910d3e0728daad9114da8f3211cfb49b5e8457d05ee9ee5f04284527
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

doxia-skin-model-1.11.1.jar

Description:

The Skin Model defines metadata for Doxia Sitetools skins.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\doxia\doxia-skin-model\1.11.1\doxia-skin-model-1.11.1.jar
MD5: 6fa7b3005dad9f4b285a889b3b68d8aa
SHA1: b6994a60da09eb429c01362e9a6a510e0f83d24e
SHA256:5337efbe45413d24b71422d145062f84bde96271dab9f3a5caa3fab461974bf4
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

error_prone_annotations-2.14.0.jar

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\errorprone\error_prone_annotations\2.14.0\error_prone_annotations-2.14.0.jar
MD5: 739aa4441ca0b3a25795af53c9698b64
SHA1: 9f01b3654d3c536859705f09f8d267ee977b4004
SHA256:1494e24e7bd5496e7d6f705169dddd46081cefb882ea4fc60b4a58ca50767f34
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

groovy-4.0.6.jar

Description:

Groovy: A powerful multi-faceted language for the JVM

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\groovy\groovy\4.0.6\groovy-4.0.6.jar
MD5: 0ee24ed039fbcc768eea440aa7853911
SHA1: 559fc0d1ea7f82f0974712dfe33a16fd84fc71de
SHA256:9591cf5537cabd5d387338a56dc4b76ed1d0260fbf4b69116098ab54419c6f1f
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

groovy-ant-4.0.6.jar

Description:

Groovy: A powerful multi-faceted language for the JVM

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\groovy\groovy-ant\4.0.6\groovy-ant-4.0.6.jar
MD5: ed745fefaa6864b73c9820cca2de49a4
SHA1: 3a1b00537a73a0622160e01f61c36e32ed024fa5
SHA256:932ff8b38c0a0e298bd2dc64349bede75ee73087716d4e52c2e2f454bd6e9c19
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

gson-2.9.1.jar

Description:

Gson JSON library

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\code\gson\gson\2.9.1\gson-2.9.1.jar
MD5: 0d507d266dcf7eea4b53fc3778d901c9
SHA1: 02cc2131b98ebfb04e2b2c7dfb84431f4045096b
SHA256:378534e339e6e6d50b1736fb3abb76f1c15d1be3f4c13cec6d536412e23da603
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

guava-25.1-android.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\guava\25.1-android\guava-25.1-android.jar
MD5: b506eaec680c6d92d5f063fa1d57956d
SHA1: bdaab946ca5ad20253502d873ba0c3313d141036
SHA256:f7b8f8fed176b9cf6831b98cb07320d7fbe91d99b29999f752c3821dfe45bdc8
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

CVE-2020-8908  

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the created directory is world-readable (readable by an attacker with access to the system). The method in question has been marked @Deprecated in versions 30.0 and later and should not be used. For Android developers, we recommend choosing a temporary directory API provided by Android, such as context.getCacheDir(). For other Java developers, we recommend migrating to the Java 7 API java.nio.file.Files.createTempDirectory() which explicitly configures permissions of 700, or configuring the Java runtime's java.io.tmpdir system property to point to a location whose permissions are appropriately configured.
CWE-732 Incorrect Permission Assignment for Critical Resource

CVSSv2:
  • Base Score: LOW (2.1)
  • Vector: /AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSSv3:
  • Base Score: LOW (3.3)
  • Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References:

Vulnerable Software & Versions: (show all)

guice-4.2.2-no_aop.jar

Description:

Guice is a lightweight dependency injection framework for Java 6 and above

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\inject\guice\4.2.2\guice-4.2.2-no_aop.jar
MD5: 57d2b333c34d0f834189d54b6e59d1a6
SHA1: fa13659f9128f4c011c8e1d06f137083b4876377
SHA256:0f4f5fb28609a4d2b38b7f7128be7cf9b541f25283d71b4e56066d99683aafff
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

hamcrest-core-1.3.jar

Description:

    This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.

File Path: C:\Users\Jeremy\.m2\repository\org\hamcrest\hamcrest-core\1.3\hamcrest-core-1.3.jar
MD5: 6393363b47ddcbba82321110c3e07519
SHA1: 42a25dc3219429f0e5d060061f71acb49bf010a0
SHA256:66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

hibernate-validator-annotation-processor-6.2.3.Final.jar

File Path: C:\Users\Jeremy\.m2\repository\org\hibernate\validator\hibernate-validator-annotation-processor\6.2.3.Final\hibernate-validator-annotation-processor-6.2.3.Final.jar
MD5: bff2e92268bbb1d58540dea9e0c53690
SHA1: 79cd0fde26c8be7785518b04297fa175c53a9291
SHA256:2e066e0c8024096f157d14192c51f75cbdbcb5accfc8129eac2df1c1b474d727
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

httpclient-4.5.13.jar

Description:

   Apache HttpComponents Client

File Path: C:\Users\Jeremy\.m2\repository\org\apache\httpcomponents\httpclient\4.5.13\httpclient-4.5.13.jar
MD5: 40d6b9075fbd28fa10292a45a0db9457
SHA1: e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada
SHA256:6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

httpclient5-5.1.3.jar

Description:

Apache HttpComponents Client

File Path: C:\Users\Jeremy\.m2\repository\org\apache\httpcomponents\client5\httpclient5\5.1.3\httpclient5-5.1.3.jar
MD5: 757bfb86277b9b11798db8fdb351bf74
SHA1: 13c984b7b881afcff3a7f0bb95878724a48a4b66
SHA256:28c759254f4e35319e078bb6ffea75676608dc12cb243b24fb3c8732522977fe
Referenced In Project/Scope:SpotBugs Maven Plugin:runtime

Identifiers

httpcore-4.4.14.jar

Description:

   Apache HttpComponents Core (blocking I/O)

File Path: C:\Users\Jeremy\.m2\repository\org\apache\httpcomponents\httpcore\4.4.14\httpcore-4.4.14.jar
MD5: 2b3991eda121042765a5ee299556c200
SHA1: 9dd1a631c082d92ecd4bd8fd4cf55026c720a8c1
SHA256:f956209e450cb1d0c51776dfbd23e53e9dd8db9a1298ed62b70bf0944ba63b28
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

httpcore5-5.1.3.jar

Description:

Apache HttpComponents HTTP/1.1 core components

File Path: C:\Users\Jeremy\.m2\repository\org\apache\httpcomponents\core5\httpcore5\5.1.3\httpcore5-5.1.3.jar
MD5: e3311847fc70a84038fb2c079dd08c4a
SHA1: d1638d1e5f2793f187d4144c702a93524ba6fd3b
SHA256:f2bf2f2c7772169c9e30699719667ad30f9b46c4e9d7841907deb2d12d9923fe
Referenced In Project/Scope:SpotBugs Maven Plugin:runtime

Identifiers

httpcore5-h2-5.1.3.jar

Description:

Apache HttpComponents HTTP/2 Core Components

File Path: C:\Users\Jeremy\.m2\repository\org\apache\httpcomponents\core5\httpcore5-h2\5.1.3\httpcore5-h2-5.1.3.jar
MD5: e12cc9746f6635675a408e641c95b177
SHA1: 4664b59b09f5ee008e37a963bbb92f4068e91696
SHA256:d0e78ba15aa8ebe77982b660ac4b09a95d6e035dbdbea762577dc1c8e2935807
Referenced In Project/Scope:SpotBugs Maven Plugin:runtime

Identifiers

j2objc-annotations-1.3.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\j2objc\j2objc-annotations\1.3\j2objc-annotations-1.3.jar
MD5: 5fa4ec4ec0c5aa70af8a7d4922df1931
SHA1: ba035118bc8bac37d7eff77700720999acd9986d
SHA256:21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

javaparser-core-3.24.7.jar

Description:

The core parser functionality. This may be all you need.

License:

GNU Lesser General Public License: http://www.gnu.org/licenses/lgpl-3.0.html
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\github\javaparser\javaparser-core\3.24.7\javaparser-core-3.24.7.jar
MD5: 3a74550527ca7898cf3c38c26d193dc5
SHA1: 52410d973f1c813e924133045c1fe35ca6bb729a
SHA256:17107ce4b68c0f544a02dd9b438b3801ae8fb5e1636297b4b90e11417622de4e
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

javax.annotation-api-1.2.jar

Description:

Common Annotations for the JavaTM Platform API

License:

CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html
File Path: C:\Users\Jeremy\.m2\repository\javax\annotation\javax.annotation-api\1.2\javax.annotation-api-1.2.jar
MD5: 75fe320d2b3763bd6883ae1ede35e987
SHA1: 479c1e06db31c432330183f5cae684163f186146
SHA256:5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

javax.inject-1.jar

Description:

The javax.inject API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\javax\inject\javax.inject\1\javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

jaxen-1.2.0.jar

Description:

Jaxen is a universal XPath engine for Java.

License:

BSD License 2.0: https://raw.githubusercontent.com/jaxen-xpath/jaxen/master/LICENSE.txt
File Path: C:\Users\Jeremy\.m2\repository\jaxen\jaxen\1.2.0\jaxen-1.2.0.jar
MD5: c32cf69356254b8f5050fce6e86358e9
SHA1: c10535a925bd35129a4329bc75065cc6b5293f2c
SHA256:70feef9dd75ad064def05a3ce8975aeba515ee7d1be146d12199c8828a64174c
Referenced In Project/Scope:SpotBugs Maven Plugin:runtime

Identifiers

jcip-annotations-1.0.jar

File Path: C:\Users\Jeremy\.m2\repository\net\jcip\jcip-annotations\1.0\jcip-annotations-1.0.jar
MD5: 9d5272954896c5a5d234f66b7372b17a
SHA1: afba4942caaeaf46aab0b976afd57cc7c181467e
SHA256:be5805392060c71474bf6c9a67a099471274d30b83eef84bfc4e0889a4f1dcc0
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

jcl-over-slf4j-2.0.3.jar

Description:

JCL 1.2 implemented over SLF4J

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\jcl-over-slf4j\2.0.3\jcl-over-slf4j-2.0.3.jar
MD5: 87a98e50d520ff201c070343270b0bee
SHA1: 37bffdfe4b74a2f89d3a90a791f481a9752f2308
SHA256:3e9a3c9d9c462af79d4de738886bda64ec8959d4e8d52883cb5c791d2f7d8fbb
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\code\findbugs\jsr305\3.0.2\jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

junit-4.13.2.jar

Description:

JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.

License:

Eclipse Public License 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: C:\Users\Jeremy\.m2\repository\junit\junit\4.13.2\junit-4.13.2.jar
MD5: d98a9a02a99a9acd22d7653cbcc1f31f
SHA1: 8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12
SHA256:8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

log4j-core-2.19.0.jar

Description:

The Apache Log4j Implementation

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\logging\log4j\log4j-core\2.19.0\log4j-core-2.19.0.jar
MD5: b7f521926226a16531f8e212b1da1ffd
SHA1: 3b6eeb4de4c49c0fe38a4ee27188ff5fee44d0bb
SHA256:b4a1796fab7bfc36df015c1b4052459147997e8d215a7199d71d05f9e747e4f4
Referenced In Project/Scope:SpotBugs Maven Plugin:runtime

Identifiers

lombok-1.18.24.jar: mavenEcjBootstrapAgent.jar

File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.24\lombok-1.18.24.jar\lombok\launch\mavenEcjBootstrapAgent.jar
MD5: 7196a24381121bf3a7c93dcdd5575fff
SHA1: 3cfed1579d718ac3dcf78bceba9ed668eb025bee
SHA256:d034830e1d8615a9d0e4afdaee693687c6e61e041cc905608bba60efb04744d6
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

  • None

lombok-1.18.24.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE
File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.24\lombok-1.18.24.jar
MD5: a1651eaa9c999c61131d32feab16fcde
SHA1: 13a394eed5c4f9efb2a6d956e2086f1d81e857d9
SHA256:d3584bc2db03f059f984fb0a9c119aac1fa0da578a448e69fc3f68b36584c749
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-artifact-3.8.6.jar

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-artifact\3.8.6\maven-artifact-3.8.6.jar
MD5: e58778f4d2041b0df8b301303aa4c6d8
SHA1: 1637b7e8fc392e389752e79b827b883629285626
SHA256:de22a4c6f54fe31276a823b1bbd3adfd6823529e732f431b5eff0852c2b9252b
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-artifact-transfer-0.13.1.jar

Description:

An API to install, deploy and resolving artifacts with Maven 3

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\shared\maven-artifact-transfer\0.13.1\maven-artifact-transfer-0.13.1.jar
MD5: 5a73136d65cfc2dd8af0fd365dbda4fb
SHA1: 9f6d2088ae64dd926b8ec445afdb7e148eb08060
SHA256:1ac88accde99ed71e65253bd130868c0e654f940f01ade073b895eb2f817cf06
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

maven-builder-support-3.8.6.jar

Description:

Support for descriptor builders (model, setting, toolchains)

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-builder-support\3.8.6\maven-builder-support-3.8.6.jar
MD5: 8648771aa46a6bdbb81de74849ba9385
SHA1: 4d22a3faa8880efef2e960bb8a00c2a0b351c46a
SHA256:3d3d9753f36e88039e63f8757bfe643830d69443e168c4ecdaf5f47a2c1d94ce
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-common-artifact-filters-3.3.2.jar

Description:

A collection of ready-made filters to control inclusion/exclusion of artifacts during dependency resolution.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\shared\maven-common-artifact-filters\3.3.2\maven-common-artifact-filters-3.3.2.jar
MD5: 5b8bd8a1933dbfa8f9a00029255cf99b
SHA1: c1cb1bc78ae8c6a6e64da833d4a9afbda5e0834a
SHA256:2be8b810cf0937ff4bb7bef8ce78a8faad17ca2182751055ac7df54d5510b908
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

maven-core-3.8.6.jar

Description:

Maven Core classes.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-core\3.8.6\maven-core-3.8.6.jar
MD5: 92b05ed72c78a0ddca876d73e9a6b87c
SHA1: f945f1f19452214d360d453d9357275313f1cfd9
SHA256:439550da8d5451f84cbc6806df7cdccc30c4bbf59456659af95aac907bf658e1
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-model-3.8.6.jar

Description:

Model for Maven POM (Project Object Model)

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-model\3.8.6\maven-model-3.8.6.jar
MD5: 7812dccb91cf3e8faaa67ae060ceb7c2
SHA1: 8ad31867c493c63ac60a3fa42356a72d20f8457b
SHA256:13986dc4d0e7eabd0c991c8fd22ef10e44f917f7a218a5a75c51b5620d4c22b0
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-model-builder-3.8.6.jar

Description:

The effective model builder, with inheritance, profile activation, interpolation, ...

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-model-builder\3.8.6\maven-model-builder-3.8.6.jar
MD5: b3a622ed6c8d38d4ac94068db3f34074
SHA1: 8323a726c657becbffc8ea807970935dde3e3903
SHA256:5ca374eb4e6194ec0cd7004366decd39d4d048145a6380f99741a9414f38cebb
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-plugin-annotations-3.6.4.jar

Description:

Java annotations to use in Mojos

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\plugin-tools\maven-plugin-annotations\3.6.4\maven-plugin-annotations-3.6.4.jar
MD5: 00a800d6df39e3ae3a96135983e21e36
SHA1: 23dcee7834a0b854365c14eaa9f473d2fed951e5
SHA256:0fe41f2ffa4fc6f3b8e65c0b16d9e5f00dd256113a4114e7a9466f9c1952eff1
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-plugin-api-3.8.6.jar

Description:

The API for plugins - Mojos - development.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-plugin-api\3.8.6\maven-plugin-api-3.8.6.jar
MD5: c8187986d35b9d8a347e3989402879f3
SHA1: 4138e2e9b39f364902ac263888feb7b2407a298e
SHA256:2c317f6041219f16f34bd47ea7618e57552d4f1f707378701b9efed4adecf70a
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-reporting-api-3.1.1.jar

Description:

API to manage report generation.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\reporting\maven-reporting-api\3.1.1\maven-reporting-api-3.1.1.jar
MD5: 1e1e0b2f189c861995e33a2a746501bb
SHA1: 74ca00a13e46d065071cdf6376d7d231e0208916
SHA256:25be6603c97d28fa3dcd122073054271c8fcaf667d220dce7a26a61a6f3cffd1
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

maven-reporting-impl-3.2.0.jar

Description:

Abstract classes to manage report generation.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\reporting\maven-reporting-impl\3.2.0\maven-reporting-impl-3.2.0.jar
MD5: 468bb08c4330fd7647405b33edf769be
SHA1: 97ffee6a6c3f81e341f42f641651a37f077759c6
SHA256:28f42c2f49f11dcba6d14ab3e365375442a9ed78ca2ec588e3e1f43455a4a14d
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

maven-repository-metadata-3.8.6.jar

Description:

Per-directory local and remote repository metadata.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-repository-metadata\3.8.6\maven-repository-metadata-3.8.6.jar
MD5: 8e8a0e221a0d970ad64a68f46e5115ab
SHA1: c60a7640e1b829e60f8791b5edf3cf56a6556aca
SHA256:a70e1f662fa81b72eb468d28eec72fd7f2b7b49c4b54d1cf1c14ccd197d4eafd
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-resolver-api-1.6.3.jar

Description:

    The application programming interface for the repository system.

License:

"Apache License, Version 2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-api\1.6.3\maven-resolver-api-1.6.3.jar
MD5: c1f8b0046b6219ef49dbd73638ce33e2
SHA1: 5ee235aa5ac5994b5dc847f8e78ffe9d77dd55d7
SHA256:d0b28ed944058ba4f9be4b54c25d6d5269cc4f3f3c49aa450d4dc2f7e0d552f6
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-resolver-impl-1.6.3.jar

Description:

    An implementation of the repository system.

License:

"Apache License, Version 2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-impl\1.6.3\maven-resolver-impl-1.6.3.jar
MD5: 2145b5eb9ddd8bdf9f3171122c703d4b
SHA1: 2714ffe60bd71259a41b3e4816122504b5f2db93
SHA256:17aaebe6e3e59df8cb5b4ec210196f7084637312b9bc4ff14cb77ad1ae3c381b
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-resolver-provider-3.8.6.jar

Description:

Extensions to Maven Resolver for utilizing Maven POM and repository metadata.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-resolver-provider\3.8.6\maven-resolver-provider-3.8.6.jar
MD5: 78472f13757c6190aea51cce74c9abd4
SHA1: c6dadedc9f6b5c1c02d0a93afd1857460b0f501d
SHA256:fbb1abf0346ba84149a0ffcb7b688a06f6e06b49af9c151f4ca01c0fc5ae3ea9
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-resolver-spi-1.6.3.jar

Description:

    The service provider interface for repository system implementations and repository connectors.

License:

"Apache License, Version 2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-spi\1.6.3\maven-resolver-spi-1.6.3.jar
MD5: 39ccba873cf05b2b5405d24a55133a37
SHA1: 176425f73fe768bf9cdb8b5a742e7a00c1d8d178
SHA256:17441a39045ac19bc4a8068fb7284facebf6337754bf2bf8f26a76b5f98ed108
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-resolver-util-1.6.3.jar

Description:

    A collection of utility classes to ease usage of the repository system.

License:

"Apache License, Version 2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\resolver\maven-resolver-util\1.6.3\maven-resolver-util-1.6.3.jar
MD5: 71d7fea851a889aae2cfd632e96d01c1
SHA1: 07d5a6879037b34c61c2f527dfcfb59084e86ed0
SHA256:cdcad9355b625743f40e4cead9a96353404e010c39c808d23b044be331afa251
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-settings-3.8.6.jar

Description:

Maven Settings model.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-settings\3.8.6\maven-settings-3.8.6.jar
MD5: 942dc05cb4b907a03def39ef227dd93d
SHA1: 9ba5114c6c61c66fbc6b93c73085dc5b15585524
SHA256:66dcefa127254524b9370594cc90c611ae8490e094d28534d1c840f1889d8a61
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-settings-builder-3.8.6.jar

Description:

The effective settings builder, with inheritance and password decryption.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\maven-settings-builder\3.8.6\maven-settings-builder-3.8.6.jar
MD5: 735e76ad7c32c20bd4e46498492a00be
SHA1: e5c92138dffd1f9e5454cd8224cf8e18253b1803
SHA256:59593889c5056ac5fdcf975143957cdaac8bc8a4260e2bac42136df427e284b8
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

maven-shared-utils-3.3.4.jar

Description:

Shared utilities for use by Maven core and plugins

File Path: C:\Users\Jeremy\.m2\repository\org\apache\maven\shared\maven-shared-utils\3.3.4\maven-shared-utils-3.3.4.jar
MD5: 908f2a0107ff330ac9b856356a0acaef
SHA1: f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac
SHA256:7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

modernizer-maven-annotations-2.4.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\gaul\modernizer-maven-annotations\2.4.0\modernizer-maven-annotations-2.4.0.jar
MD5: b0855f92a8fba8e32f5edc1400147356
SHA1: c721fc30e9b851e47f92c1ae6d0cf7ffcf4d211c
SHA256:98a767e5a8677ef3f64c1a199804dba4933caac398ee16576b30520678f736cb
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

org.eclipse.sisu.inject-0.3.5.jar

License:

http://www.eclipse.org/legal/epl-v10.html
File Path: C:\Users\Jeremy\.m2\repository\org\eclipse\sisu\org.eclipse.sisu.inject\0.3.5\org.eclipse.sisu.inject-0.3.5.jar
MD5: 1b296b0ddd911ed3750b3df93b395cd5
SHA1: d4265dd4f0f1d7a06d80df5a5f475d5ff9c17140
SHA256:c5994010bcdce1d2bd603a4d50c47191ddbd7875d1157b23aaa26d33c82fda13
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

org.eclipse.sisu.plexus-0.3.5.jar

License:

http://www.eclipse.org/legal/epl-v10.html
File Path: C:\Users\Jeremy\.m2\repository\org\eclipse\sisu\org.eclipse.sisu.plexus\0.3.5\org.eclipse.sisu.plexus-0.3.5.jar
MD5: 30c4a9fa2137698ed66c8542f1be196a
SHA1: d71996bb2e536f966b3b70e647067fff3b73d32f
SHA256:7e4c61096d70826f20f7a7d55c59a5528e7aa5ad247ee2dfe544e4dd25f6a784
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

oro-2.0.8.jar

File Path: C:\Users\Jeremy\.m2\repository\oro\oro\2.0.8\oro-2.0.8.jar
MD5: 42e940d5d2d822f4dc04c65053e630ab
SHA1: 5592374f834645c4ae250f4c9fbb314c9369d698
SHA256:e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

plexus-cipher-2.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-cipher\2.0\plexus-cipher-2.0.jar
MD5: 55d612839faf248cbe3e273969c002c2
SHA1: 425ea8e534716b4bff1ea90f39bd76be951d651b
SHA256:9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

plexus-classworlds-2.6.0.jar

Description:

A class loader framework

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-classworlds\2.6.0\plexus-classworlds-2.6.0.jar
MD5: 67e722b27e3a33b33c1b263b99dd7c43
SHA1: 8587e80fcb38e70b70fae8d5914b6376bfad6259
SHA256:52f77c5ec49f787c9c417ebed5d6efd9922f44a202f217376e4f94c0d74f3549
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

plexus-component-annotations-2.0.0.jar

Description:

    Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-component-annotations\2.0.0\plexus-component-annotations-2.0.0.jar
MD5: be18d50372002ba958de0ae4850b18a7
SHA1: 6897b9fa8b67c900b52996f845e2d179eea13441
SHA256:405eef6fc9188241ec88579c3e473f5c8997455c69bcd62e142492aca15106bc
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

plexus-container-default-2.1.1.jar

Description:

    The Plexus IoC container API and its default implementation.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-container-default\2.1.1\plexus-container-default-2.1.1.jar
MD5: d9f918de257bb38b21fe2afb76e3c4d1
SHA1: 79551ce19404ad5181b8c499ff1ef304c95e0049
SHA256:8b65840e41ca669a1a69ec1daedb3426304e560b24172cc93bb02e8c199e1ce7
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

plexus-i18n-1.0-beta-10.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-i18n\1.0-beta-10\plexus-i18n-1.0-beta-10.jar
MD5: 7f36c0459c853750c627f682ec7bcf52
SHA1: 27506f59e54cc80b8c28b977c2bcd0478094e0cc
SHA256:b87f25b512ffafcafbf4a05ab943812e9c6915291370c6b46016eb3836886c41
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

plexus-interpolation-1.26.jar

Description:

The Plexus project provides a full software stack for creating and executing software projects.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-interpolation\1.26\plexus-interpolation-1.26.jar
MD5: 1049ae9f5cd8cf618abf5bc5805e6b94
SHA1: 25b919c664b79795ccde0ede5cee0fd68b544197
SHA256:b3b5412ce17889103ea564bcdfcf9fb3dfa540344ffeac6b538a73c9d7182662
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

plexus-resources-1.2.0.jar

Description:

A component to transparently retrieve resources from the filesystem, classpath or internet.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-resources\1.2.0\plexus-resources-1.2.0.jar
MD5: 381b55d2f89114d360529e4674baf4f0
SHA1: 3685d3f2e7157fc70a39aa74c7667caa81d886e7
SHA256:898fc46841ce7defce320b78b748e285cc4790f9db931045d1f4b139a35f065d
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

plexus-sec-dispatcher-2.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-sec-dispatcher\2.0\plexus-sec-dispatcher-2.0.jar
MD5: e68635a721630177ac70173e441336b6
SHA1: f89c5080614ffd0764e49861895dbedde1b47237
SHA256:873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

plexus-utils-3.5.0.jar

Description:

A collection of various utility classes to ease working with strings, files, command lines, XML and
    more.

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-utils\3.5.0\plexus-utils-3.5.0.jar
MD5: a692f46bd0bb8e23a76f254077fbb085
SHA1: ff9f0881396a06b31ff548048256e9a7c8f1207a
SHA256:e5182eb3e5e73cf89d6426ca7f5cbae2e72819b9bed68d872f80f3b535269cb8
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

plexus-velocity-1.2.jar

File Path: C:\Users\Jeremy\.m2\repository\org\codehaus\plexus\plexus-velocity\1.2\plexus-velocity-1.2.jar
MD5: 7d7805136e8165f53c944612a809f1a6
SHA1: 1331b9d6bbf99ead362c68c2f318ebe5fedda598
SHA256:b4c4a0dbeacad54306a1ae230eff5ab45d58e3ab88c86ab7245d3a0772be57ab
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

qdox-1.12.1.jar

Description:

    QDox is a high speed, small footprint parser for extracting class/interface/method definitions from source files
    complete with JavaDoc @tags. It is designed to be used by active code generators or documentation tools.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\thoughtworks\qdox\qdox\1.12.1\qdox-1.12.1.jar
MD5: 9fb6970f934f8d836ae8e6d133316ab4
SHA1: f7122f6ab1f64bdf9f5970b0e89bfb355e036897
SHA256:21fba22f830e9268f07cf4ab2d99e8181abbdcb0cb91ee0228eb3cb918dcdd1d
Referenced In Project/Scope:SpotBugs Maven Plugin:runtime

Identifiers

slf4j-api-2.0.3.jar

Description:

The slf4j API

File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\slf4j-api\2.0.3\slf4j-api-2.0.3.jar
MD5: 6a0d2df2735d23889e5e6ea1d79bfe6c
SHA1: deef7fc81f00bd5e6205bb097be1040b4094f007
SHA256:68ddcda65300ff8097ad1a096d7cd2fb06cef25193887cec3f2690e01bdbf421
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

slf4j-simple-2.0.3.jar

Description:

SLF4J Simple binding

File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\slf4j-simple\2.0.3\slf4j-simple-2.0.3.jar
MD5: 704bca68f11a9163b5b9d45b51296136
SHA1: c1c8dea1c7f350d15e0568a7d87abe629c7da1c9
SHA256:bb20aba9b5dbbc0ef752015361e0b22e2cf06da3d3fdf07207c635193bebe0f3
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

spotbugs-4.7.3.jar

Description:

SpotBugs: Because it's easy!

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: C:\Users\Jeremy\.m2\repository\com\github\spotbugs\spotbugs\4.7.3\spotbugs-4.7.3.jar
MD5: 6bf535b5486b0cca01c89f3735a8eefe
SHA1: 71b7e768bff5b99695874f9e5c34197f871d60fb
SHA256:df37eab21a7d04aa807808a33e9f7c081451cb02c14b4a2c33119976be498520
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

spotbugs-annotations-4.7.3.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: C:\Users\Jeremy\.m2\repository\com\github\spotbugs\spotbugs-annotations\4.7.3\spotbugs-annotations-4.7.3.jar
MD5: a70cfa500f3d66e6bd7ecb7cfe671ce2
SHA1: 46fb4f0ae2e69eafa963711cc5c3369ac81aa31f
SHA256:c0fd1ac2e22acdd46913a2ff74551b71f124457199688698204af4bf3d43165d
Referenced In Project/Scope:SpotBugs Maven Plugin:provided

Identifiers

velocity-1.7.jar

Description:

Apache Velocity is a general purpose template engine.

File Path: C:\Users\Jeremy\.m2\repository\org\apache\velocity\velocity\1.7\velocity-1.7.jar
MD5: 3692dd72f8367cb35fb6280dc2916725
SHA1: 2ceb567b8f3f21118ecdec129fe1271dbc09aa7a
SHA256:ec92dae810034f4b46dbb16ef4364a4013b0efb24a8c5dd67435cae46a290d8e
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

CVE-2020-13936  

An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity templates running Apache Velocity Engine versions up to 2.2.
NVD-CWE-noinfo

CVSSv2:
  • Base Score: HIGH (9.0)
  • Vector: /AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSSv3:
  • Base Score: HIGH (8.8)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Vulnerable Software & Versions: (show all)

velocity-tools-2.0.jar

Description:

        VelocityTools is an integrated collection of Velocity subprojects
        with the common goal of creating tools and infrastructure to speed and ease
        development of both web and non-web applications using the Velocity template
        engine.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\velocity\velocity-tools\2.0\velocity-tools-2.0.jar
MD5: 51ed2c6c0103cf3fdbeb9aa5170f5288
SHA1: 69936384de86857018b023a8c56ae0635c56b6a0
SHA256:b174eb36bc48c25dce10571c7d3d5dca4e4c1b3e2e31a92b9ed68fe9dea688d9
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

CVE-2020-13959  

The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the URL. An attacker can set an XSS payload file as this vm file in the URL which results in this payload being executed. XSS vulnerabilities allow attackers to execute arbitrary JavaScript in the context of the attacked website and the attacked user. This can be abused to steal session cookies, perform requests in the name of the victim or for phishing attacks.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSSv2:
  • Base Score: MEDIUM (4.3)
  • Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSSv3:
  • Base Score: MEDIUM (6.1)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References:

Vulnerable Software & Versions:

xbean-reflect-3.7.jar

Description:

xbean-reflect provides very flexible ways to creat objects and graphs of objects for DI frameworks

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\xbean\xbean-reflect\3.7\xbean-reflect-3.7.jar
MD5: b77f0c9914e56547409e65137acba9eb
SHA1: 6072a967ec936b3bb25b421d8eca07dd750219fd
SHA256:104e5e9bb5a669f86722f32281960700f7ec8e3209ef51b23eb9b6d23d1629cb
Referenced In Project/Scope:SpotBugs Maven Plugin:compile

Identifiers

xml-apis-1.4.01.jar

Description:

xml-commons provides an Apache-hosted set of DOM, SAX, and 
    JAXP interfaces for use in other xml-based projects. Our hope is that we 
    can standardize on both a common version and packaging scheme for these 
    critical XML standards interfaces to make the lives of both our developers 
    and users easier. The External Components portion of xml-commons contains 
    interfaces that are defined by external standards organizations. For DOM, 
    that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for 
    JAXP it's Sun.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
The SAX License: http://www.saxproject.org/copying.html
The W3C License: http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip
File Path: C:\Users\Jeremy\.m2\repository\xml-apis\xml-apis\1.4.01\xml-apis-1.4.01.jar
MD5: 7eaad6fea5925cca6c36ee8b3e02ac9d
SHA1: 3789d9fada2d3d458c4ba2de349d48780f381ee3
SHA256:a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad
Referenced In Project/Scope:SpotBugs Maven Plugin:runtime

Identifiers

xmlresolver-4.4.3-data.jar

File Path: C:\Users\Jeremy\.m2\repository\org\xmlresolver\xmlresolver\4.4.3\xmlresolver-4.4.3-data.jar
MD5: 2bf9b2983c518ababfc8d528539e51ef
SHA1: 89079ec236d9683bb5f6f5cf4bef0cfc01b46e55
SHA256:a57db23d75c3580cb15eb6e1a854683f4579cfd265f5cf1011a6983d9aed0f1f
Referenced In Project/Scope:SpotBugs Maven Plugin:runtime

Identifiers

xmlresolver-4.4.3.jar

Description:

An XML entity/uri resolver

License:

Apache License version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: C:\Users\Jeremy\.m2\repository\org\xmlresolver\xmlresolver\4.4.3\xmlresolver-4.4.3.jar
MD5: 53b21e6362feb5a904408c5c154cd449
SHA1: aa8421211b0f69b5572d2d4b4252b2d87f957754
SHA256:9d642c96c3f6811e20a9f6cfee3ca15ec84ecb939f6be639fee065670773a7d1
Referenced In Project/Scope:SpotBugs Maven Plugin:runtime

Identifiers



This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the NPM Public Advisories.
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.