Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 4.0.2
Report Generated On: fev 10, 2019 at 22:58:33 -02:00
Dependencies Scanned: 80 (50 unique)
Vulnerable Dependencies: 2
Vulnerabilities Found: 3
Vulnerabilities Suppressed: 0
...
NVD CVE 2002: 30/01/2019 07:15:09
NVD CVE 2003: 05/02/2019 06:58:31
NVD CVE 2004: 30/01/2019 07:12:35
NVD CVE 2005: 06/02/2019 06:38:14
NVD CVE 2006: 30/01/2019 07:09:03
NVD CVE 2007: 05/02/2019 06:57:42
NVD CVE 2008: 08/02/2019 06:56:05
NVD CVE 2009: 10/02/2019 06:35:33
NVD CVE 2010: 09/02/2019 06:51:53
NVD CVE 2011: 08/02/2019 06:48:38
NVD CVE 2012: 09/02/2019 06:48:02
NVD CVE 2013: 09/02/2019 06:44:22
NVD CVE 2014: 09/02/2019 06:40:53
NVD CVE 2015: 09/02/2019 06:36:41
NVD CVE 2016: 10/02/2019 06:32:28
NVD CVE 2017: 10/02/2019 06:26:42
NVD CVE 2018: 10/02/2019 20:20:24
NVD CVE 2019: 10/02/2019 06:00:38
NVD CVE Checked: 10/02/2019 20:29:45
NVD CVE Modified: 10/02/2019 19:01:33
VersionCheckOn: 1549837785212

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	CPE	Coordinates	Highest Severity	CVE Count	CPE Confidence	Evidence Count
spring-boot-starter-data-rest-2.1.2.RELEASE.jar		org.springframework.boot:spring-boot-starter-data-rest:2.1.2.RELEASE		0		26
tomcat-embed-core-9.0.14.jar	cpe:/a:apache_tomcat:apache_tomcat:9.0.14	org.apache.tomcat.embed:tomcat-embed-core:9.0.14		0	Low	30
tomcat-embed-el-9.0.14.jar		org.apache.tomcat.embed:tomcat-embed-el:9.0.14		0		30
hibernate-validator-6.0.14.Final.jar	cpe:/a:hibernate:hibernate_validator:6.0.14	org.hibernate.validator:hibernate-validator:6.0.14.Final		0	Low	30
validation-api-2.0.1.Final.jar		javax.validation:validation-api:2.0.1.Final		0		23
spring-data-rest-core-3.1.4.RELEASE.jar	cpe:/a:pivotal_software:spring_data_rest:3.1.4	org.springframework.data:spring-data-rest-core:3.1.4.RELEASE		0	Low	20
spring-hateoas-0.25.0.RELEASE.jar		org.springframework.hateoas:spring-hateoas:0.25.0.RELEASE		0		26
spring-plugin-core-1.2.0.RELEASE.jar		org.springframework.plugin:spring-plugin-core:1.2.0.RELEASE		0		24
evo-inflector-1.2.2.jar		org.atteo:evo-inflector:1.2.2		0		21
jackson-databind-2.9.8.jar	cpe:/a:fasterxml:jackson:2.9.8 cpe:/a:fasterxml:jackson-databind:2.9.8	com.fasterxml.jackson.core:jackson-databind:2.9.8		0	Low	37
jackson-core-2.9.8.jar	cpe:/a:fasterxml:jackson:2.9.8	com.fasterxml.jackson.core:jackson-core:2.9.8		0	Low	37
jackson-annotations-2.9.0.jar	cpe:/a:fasterxml:jackson:2.9.0	com.fasterxml.jackson.core:jackson-annotations:2.9.0		0	Low	35
slf4j-api-1.7.25.jar		org.slf4j:slf4j-api:1.7.25		0		25
aspectjweaver-1.9.2.jar		org.aspectj:aspectjweaver:1.9.2		0		23
HikariCP-3.2.0.jar		com.zaxxer:HikariCP:3.2.0		0		29
javax.transaction-api-1.3.jar	cpe:/a:fish:fish:1.3	javax.transaction:javax.transaction-api:1.3		0	Low	37
jaxb-api-2.3.1.jar		javax.xml.bind:jaxb-api:2.3.1		0		27
javax.activation-api-1.2.0.jar		javax.activation:javax.activation-api:1.2.0		0		35
hibernate-core-5.3.7.Final.jar		org.hibernate:hibernate-core:5.3.7.Final		0		35
jboss-logging-3.3.2.Final.jar		org.jboss.logging:jboss-logging:3.3.2.Final		0		40
javax.persistence-api-2.2.jar		javax.persistence:javax.persistence-api:2.2		0		30
javassist-3.23.1-GA.jar		org.javassist:javassist:3.23.1-GA		0		25
byte-buddy-1.9.7.jar		net.bytebuddy:byte-buddy:1.9.7		0		14
antlr-2.7.7.jar		antlr:antlr:2.7.7		0		15
jandex-2.0.5.Final.jar		org.jboss:jandex:2.0.5.Final		0		32
classmate-1.4.0.jar		com.fasterxml:classmate:1.4.0		0		39
dom4j-2.1.1.jar	cpe:/a:dom4j_project:dom4j:2.1.1	org.dom4j:dom4j:2.1.1		0	Low	15
hibernate-commons-annotations-5.0.4.Final.jar		org.hibernate.common:hibernate-commons-annotations:5.0.4.Final		0		30
spring-data-jpa-2.1.4.RELEASE.jar	cpe:/a:pivotal_software:spring_data_jpa:2.1.4	org.springframework.data:spring-data-jpa:2.1.4.RELEASE		0	Low	24
spring-data-commons-2.1.4.RELEASE.jar	cpe:/a:pivotal_software:spring_data_commons:2.1.4	org.springframework.data:spring-data-commons:2.1.4.RELEASE		0	Low	20
spring-tx-5.1.4.RELEASE.jar	cpe:/a:pivotal_software:spring_framework:5.1.4 cpe:/a:pivotal:spring_framework:5.1.4 cpe:/a:springsource:spring_framework:5.1.4	org.springframework:spring-tx:5.1.4.RELEASE		0	Low	25
h2-1.4.197.jar	cpe:/a:h2database:h2:1.4.197	com.h2database:h2:1.4.197	Medium	2	Highest	23
guava-24.0-jre.jar	cpe:/a:google:guava:24.0	com.google.guava:guava:24.0-jre	Medium	1	Highest	25
jsr305-1.3.9.jar		com.google.code.findbugs:jsr305:1.3.9		0		17
checker-compat-qual-2.0.0.jar		org.checkerframework:checker-compat-qual:2.0.0		0		17
error_prone_annotations-2.1.3.jar		com.google.errorprone:error_prone_annotations:2.1.3		0		17
j2objc-annotations-1.1.jar		com.google.j2objc:j2objc-annotations:1.1		0		19
animal-sniffer-annotations-1.14.jar		org.codehaus.mojo:animal-sniffer-annotations:1.14		0		18
lombok-1.18.4.jar		org.projectlombok:lombok:1.18.4		0		14
spring-boot-2.1.2.RELEASE.jar	cpe:/a:pivotal_software:spring_boot:2.1.2	org.springframework.boot:spring-boot:2.1.2.RELEASE		0	Low	26
logback-core-1.2.3.jar	cpe:/a:logback:logback:1.2.3	ch.qos.logback:logback-core:1.2.3		0	Low	27
log4j-api-2.11.1.jar	cpe:/a:apache:log4j:2.11.1	org.apache.logging.log4j:log4j-api:2.11.1		0	Low	33
jul-to-slf4j-1.7.25.jar		org.slf4j:jul-to-slf4j:1.7.25		0		24
javax.annotation-api-1.3.2.jar		javax.annotation:javax.annotation-api:1.3.2		0		37
snakeyaml-1.23.jar		org.yaml:snakeyaml:1.23		0		21
micrometer-core-1.1.2.jar		io.micrometer:micrometer-core:1.1.2		0		31
HdrHistogram-2.1.9.jar		org.hdrhistogram:HdrHistogram:2.1.9		0		25
LatencyUtils-2.0.3.jar		org.latencyutils:LatencyUtils:2.0.3		0		15
spring-core-5.1.4.RELEASE.jar	cpe:/a:pivotal_software:spring_framework:5.1.4 cpe:/a:pivotal:spring_framework:5.1.4 cpe:/a:vmware:springsource_spring_framework:5.1.4 cpe:/a:springsource:spring_framework:5.1.4	org.springframework:spring-core:5.1.4.RELEASE		0	Low	26
byte-buddy-1.9.7.jar (shaded: net.bytebuddy:byte-buddy-dep:1.9.7)		net.bytebuddy:byte-buddy-dep:1.9.7		0		11

Dependencies

spring-boot-starter-data-rest-2.1.2.RELEASE.jar

Description:

 Starter for exposing Spring Data repositories over REST using Spring
		Data REST

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0

File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-starter-data-rest/2.1.2.RELEASE/spring-boot-starter-data-rest-2.1.2.RELEASE.jar
MD5: ffca56fa1c83ec0305e017b6a18929de
SHA1: 7efd91daeeb68fb2991cf2658e942d8274e0112a
SHA256:73eed0a2bfc4c4b2557c972b21dc8814ca29f13aba65bec4fb4c1137f7dd1d2a
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	Manifest	automatic-module-name	spring.boot.starter.data.rest	Medium
Vendor	pom	organization url	https://spring.io	Medium
Vendor	file	name	spring-boot-starter-data-rest	High
Vendor	pom	name	Spring Boot Data REST Starter	High
Vendor	pom	artifactid	spring-boot-starter-data-rest	Low
Vendor	hint analyzer	vendor	vmware	High
Vendor	hint analyzer	vendor	pivotal software	High
Vendor	pom	parent-artifactid	spring-boot-starters	Low
Vendor	pom	url	https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-data-rest	Highest
Vendor	hint analyzer	vendor	SpringSource	High
Vendor	pom	description	Starter for exposing Spring Data repositories over REST using Spring Data REST	Medium
Product	Manifest	Implementation-Title	Spring Boot Data REST Starter	High
Product	pom	parent-artifactid	spring-boot-starters	Medium
Product	Manifest	automatic-module-name	spring.boot.starter.data.rest	Medium
Product	pom	url	https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-data-rest	Medium
Product	file	name	spring-boot-starter-data-rest	High
Product	pom	organization url	https://spring.io	Low
Product	pom	groupid	org.springframework.boot	Low
Product	pom	name	Spring Boot Data REST Starter	High
Product	pom	artifactid	spring-boot-starter-data-rest	Highest
Product	pom	description	Starter for exposing Spring Data repositories over REST using Spring Data REST	Medium
Product	pom	organization name	Pivotal Software, Inc.	Low
Version	Manifest	Implementation-Version	2.1.2.RELEASE	High
Version	pom	version	2.1.2.RELEASE	Highest

Identifiers

maven: org.springframework.boot:spring-boot-starter-data-rest:2.1.2.RELEASE Confidence:Highest

tomcat-embed-core-9.0.14.jar

Description:

 Core Tomcat implementation

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/org/apache/tomcat/embed/tomcat-embed-core/9.0.14/tomcat-embed-core-9.0.14.jar
MD5: 354efb3cec0597326258cba5c13f9d27
SHA1: c3959b59158063aeb4f090752a2410d4574b93d7
SHA256:4bc37dbf0f147cb3b591a945a5578c7f3346d2f56a85caa7a3479e0225f6e7dd
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	url	https://tomcat.apache.org/	Highest
Vendor	Manifest	Implementation-Vendor	Apache Software Foundation	High
Vendor	pom	description	Core Tomcat implementation	Medium
Vendor	file	name	tomcat-embed-core	High
Vendor	Manifest	dstamp	20181206	Low
Vendor	Manifest	bundle-symbolicname	TOMCAT_9_0_14	Medium
Vendor	pom	artifactid	tomcat-embed-core	Low
Vendor	Manifest	tstamp	2113	Low
Vendor	pom	groupid	org.apache.tomcat.embed	Highest
Vendor	Manifest	specification-vendor	Apache Software Foundation	Low
Vendor	Manifest	originally-created-by	1.8.0_181-b13 (Oracle Corporation)	Low
Vendor	Manifest	today	December 6 2018	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	description	Core Tomcat implementation	Medium
Product	file	name	tomcat-embed-core	High
Product	Manifest	dstamp	20181206	Low
Product	Manifest	Bundle-Name	TOMCAT_9_0_14	Medium
Product	pom	artifactid	tomcat-embed-core	Highest
Product	Manifest	bundle-symbolicname	TOMCAT_9_0_14	Medium
Product	Manifest	specification-title	Apache Tomcat	Medium
Product	pom	groupid	org.apache.tomcat.embed	Low
Product	Manifest	tstamp	2113	Low
Product	pom	url	https://tomcat.apache.org/	Medium
Product	Manifest	originally-created-by	1.8.0_181-b13 (Oracle Corporation)	Low
Product	Manifest	today	December 6 2018	Low
Product	Manifest	Implementation-Title	Apache Tomcat	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Version	Manifest	Implementation-Version	9.0.14	High
Version	file	version	9.0.14	Highest
Version	pom	version	9.0.14	Highest

Related Dependencies

Identifiers

maven: org.apache.tomcat.embed:tomcat-embed-core:9.0.14 Confidence:Highest
cpe: cpe:/a:apache_tomcat:apache_tomcat:9.0.14 Confidence:Low

tomcat-embed-el-9.0.14.jar

Description:

 Core Tomcat implementation

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/org/apache/tomcat/embed/tomcat-embed-el/9.0.14/tomcat-embed-el-9.0.14.jar
MD5: 4b6cf88e33a5faf53f93290033f61d88
SHA1: 9215cdff4e09fba2ae5d28118fd1b1bc9732de6a
SHA256:2f22fdf5f5effe2cdb28284d845e0266efcf93f00b372146a132956442408154
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	tomcat-embed-el	High
Vendor	pom	url	https://tomcat.apache.org/	Highest
Vendor	Manifest	Implementation-Vendor	Apache Software Foundation	High
Vendor	pom	description	Core Tomcat implementation	Medium
Vendor	Manifest	dstamp	20181206	Low
Vendor	Manifest	bundle-symbolicname	TOMCAT_9_0_14	Medium
Vendor	Manifest	tstamp	2113	Low
Vendor	pom	artifactid	tomcat-embed-el	Low
Vendor	pom	groupid	org.apache.tomcat.embed	Highest
Vendor	Manifest	specification-vendor	Apache Software Foundation	Low
Vendor	Manifest	originally-created-by	1.8.0_181-b13 (Oracle Corporation)	Low
Vendor	Manifest	today	December 6 2018	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	file	name	tomcat-embed-el	High
Product	pom	description	Core Tomcat implementation	Medium
Product	Manifest	dstamp	20181206	Low
Product	Manifest	Bundle-Name	TOMCAT_9_0_14	Medium
Product	Manifest	bundle-symbolicname	TOMCAT_9_0_14	Medium
Product	Manifest	specification-title	Apache Tomcat	Medium
Product	pom	groupid	org.apache.tomcat.embed	Low
Product	Manifest	tstamp	2113	Low
Product	pom	url	https://tomcat.apache.org/	Medium
Product	pom	artifactid	tomcat-embed-el	Highest
Product	Manifest	originally-created-by	1.8.0_181-b13 (Oracle Corporation)	Low
Product	Manifest	today	December 6 2018	Low
Product	Manifest	Implementation-Title	Apache Tomcat	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Version	Manifest	Implementation-Version	9.0.14	High
Version	file	version	9.0.14	Highest
Version	pom	version	9.0.14	Highest

Identifiers

maven: org.apache.tomcat.embed:tomcat-embed-el:9.0.14 Confidence:Highest

hibernate-validator-6.0.14.Final.jar

Description:

 Hibernate's Bean Validation (JSR-380) reference implementation.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/org/hibernate/validator/hibernate-validator/6.0.14.Final/hibernate-validator-6.0.14.Final.jar
MD5: b50302738d1619276c86dec558651100
SHA1: c424524aa7718c564d9199ac5892b05901cabae6
SHA256:8b366c9ad8969a1f25bd81af88a9e8630e70fdf1b6229298c30b58950527802c
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	org.hibernate.validator.hibernate-validator	Medium
Vendor	pom	name	Hibernate Validator Engine	High
Vendor	Manifest	Implementation-Vendor-Id	org.hibernate.validator	Medium
Vendor	pom	description	Hibernate's Bean Validation (JSR-380) reference implementation.	Medium
Vendor	file	name	hibernate-validator	High
Vendor	pom	groupid	org.hibernate.validator	Highest
Vendor	Manifest	Implementation-Vendor	org.hibernate.validator	High
Vendor	pom	artifactid	hibernate-validator	Low
Vendor	Manifest	implementation-url	http://hibernate.org/validator/	Low
Vendor	Manifest	automatic-module-name	org.hibernate.validator	Medium
Vendor	manifest	Bundle-Description	Hibernate's Bean Validation (JSR-380) reference implementation.	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	parent-artifactid	hibernate-validator-parent	Low
Product	Manifest	bundle-symbolicname	org.hibernate.validator.hibernate-validator	Medium
Product	Manifest	Bundle-Name	Hibernate Validator Engine	Medium
Product	pom	parent-artifactid	hibernate-validator-parent	Medium
Product	pom	name	Hibernate Validator Engine	High
Product	pom	description	Hibernate's Bean Validation (JSR-380) reference implementation.	Medium
Product	file	name	hibernate-validator	High
Product	Manifest	Implementation-Title	hibernate-validator	High
Product	Manifest	specification-title	Bean Validation	Medium
Product	pom	artifactid	hibernate-validator	Highest
Product	Manifest	implementation-url	http://hibernate.org/validator/	Low
Product	pom	groupid	org.hibernate.validator	Low
Product	Manifest	automatic-module-name	org.hibernate.validator	Medium
Product	manifest	Bundle-Description	Hibernate's Bean Validation (JSR-380) reference implementation.	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Version	Manifest	Implementation-Version	6.0.14.Final	High
Version	pom	version	6.0.14.Final	Highest
Version	file	version	6.0.14	Highest

Identifiers

maven: org.hibernate.validator:hibernate-validator:6.0.14.Final Confidence:Highest
cpe: cpe:/a:hibernate:hibernate_validator:6.0.14 Confidence:Low

validation-api-2.0.1.Final.jar

Description:

 
        Bean Validation API

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/javax/validation/validation-api/2.0.1.Final/validation-api-2.0.1.Final.jar
MD5: 5d02c034034a7a16725ceff787e191d6
SHA1: cb855558e6271b1b32e716d24cb85c7f583ce09e
SHA256:9873b46df1833c9ee8f5bc1ff6853375115dadd8897bcb5a0dffb5848835ee6c
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	validation-api	High
Vendor	pom	artifactid	validation-api	Low
Vendor	pom	groupid	javax.validation	Highest
Vendor	pom	description	Bean Validation API	Medium
Vendor	Manifest	automatic-module-name	java.validation	Medium
Vendor	Manifest	bundle-symbolicname	javax.validation.api	Medium
Vendor	pom	name	Bean Validation API	High
Vendor	manifest	Bundle-Description	Bean Validation API	Medium
Vendor	pom	url	http://beanvalidation.org	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	file	name	validation-api	High
Product	pom	description	Bean Validation API	Medium
Product	Manifest	automatic-module-name	java.validation	Medium
Product	Manifest	bundle-symbolicname	javax.validation.api	Medium
Product	pom	groupid	javax.validation	Low
Product	pom	name	Bean Validation API	High
Product	pom	url	http://beanvalidation.org	Medium
Product	manifest	Bundle-Description	Bean Validation API	Medium
Product	Manifest	Bundle-Name	Bean Validation API	Medium
Product	pom	artifactid	validation-api	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Version	file	version	2.0.1	Highest
Version	pom	version	2.0.1.Final	Highest

Identifiers

maven: javax.validation:validation-api:2.0.1.Final Confidence:Highest

spring-data-rest-core-3.1.4.RELEASE.jar

Description:

 Spring Data REST - Core

File Path: /home/paulo/.m2/repository/org/springframework/data/spring-data-rest-core/3.1.4.RELEASE/spring-data-rest-core-3.1.4.RELEASE.jar
MD5: 9589f5b7ce84d0f9f439e1c3b666e2fd
SHA1: f12dc817fe55f7c097a6ecbf0e9173c1e4e7d4d2
SHA256:437a07c0fecf35797c3b5ccdbad1ace565e39ddd729ba0b0f379cc675ec998d4
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	Spring Data REST - Core	High
Vendor	pom	description	Spring Data REST - Core	Medium
Vendor	Manifest	automatic-module-name	spring.data.rest.core	Medium
Vendor	hint analyzer	vendor	vmware	High
Vendor	hint analyzer	vendor	pivotal software	High
Vendor	pom	artifactid	spring-data-rest-core	Low
Vendor	hint analyzer	vendor	SpringSource	High
Vendor	file	name	spring-data-rest-core	High
Vendor	pom	groupid	org.springframework.data	Highest
Vendor	pom	parent-artifactid	spring-data-rest-parent	Low
Product	pom	name	Spring Data REST - Core	High
Product	pom	description	Spring Data REST - Core	Medium
Product	Manifest	automatic-module-name	spring.data.rest.core	Medium
Product	pom	groupid	org.springframework.data	Low
Product	pom	parent-artifactid	spring-data-rest-parent	Medium
Product	Manifest	Implementation-Title	Spring Data REST - Core	High
Product	pom	artifactid	spring-data-rest-core	Highest
Product	file	name	spring-data-rest-core	High
Version	pom	version	3.1.4.RELEASE	Highest
Version	Manifest	Implementation-Version	3.1.4.RELEASE	High

Related Dependencies

Identifiers

maven: org.springframework.data:spring-data-rest-core:3.1.4.RELEASE Confidence:Highest
cpe: cpe:/a:pivotal_software:spring_data_rest:3.1.4 Confidence:Low

spring-hateoas-0.25.0.RELEASE.jar

Description:

 
		Library to support implementing representations for
		hyper-text driven REST web services.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0

File Path: /home/paulo/.m2/repository/org/springframework/hateoas/spring-hateoas/0.25.0.RELEASE/spring-hateoas-0.25.0.RELEASE.jar
MD5: 4dd4732fb24ee0196d0f118cc2147151
SHA1: 22d1abd575426709734ab83e7d81d6deb4addbf6
SHA256:3f694984f4304e87f4a479e51206ce968681bcf2857d21b1248d00e39835afa9
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal, Inc.	High
Vendor	file	name	spring-hateoas	High
Vendor	pom	name	Spring HATEOAS	High
Vendor	Manifest	bundle-symbolicname	org.springframework.hateoas	Medium
Vendor	pom	artifactid	spring-hateoas	Low
Vendor	pom	description	Library to support implementing representations for hyper-text driven REST web services.	Medium
Vendor	pom	groupid	org.springframework.hateoas	Highest
Vendor	pom	url	http://github.com/SpringSource/spring-hateoas	Highest
Vendor	hint analyzer	vendor	vmware	High
Vendor	hint analyzer	vendor	pivotal software	High
Vendor	hint analyzer	vendor	SpringSource	High
Vendor	pom	organization url	http://www.spring.io	Medium
Product	file	name	spring-hateoas	High
Product	pom	name	Spring HATEOAS	High
Product	pom	organization url	http://www.spring.io	Low
Product	Manifest	bundle-symbolicname	org.springframework.hateoas	Medium
Product	Manifest	Bundle-Name	Spring HATEOAS	Medium
Product	pom	url	http://github.com/SpringSource/spring-hateoas	Medium
Product	pom	artifactid	spring-hateoas	Highest
Product	pom	groupid	org.springframework.hateoas	Low
Product	pom	organization name	Pivotal, Inc.	Low
Product	pom	description	Library to support implementing representations for hyper-text driven REST web services.	Medium
Version	file	name	spring-hateoas	Medium
Version	file	version	0.25.0	Highest
Version	pom	version	0.25.0.RELEASE	Highest
Version	Manifest	Bundle-Version	0.25.0.RELEASE	High

Identifiers

maven: org.springframework.hateoas:spring-hateoas:0.25.0.RELEASE Confidence:Highest

spring-plugin-core-1.2.0.RELEASE.jar

Description:

 Core plugin infrastructure

File Path: /home/paulo/.m2/repository/org/springframework/plugin/spring-plugin-core/1.2.0.RELEASE/spring-plugin-core-1.2.0.RELEASE.jar
MD5: 4e6325e5ed2c1aa1949313c184d83640
SHA1: f380e7760032e7d929184f8ad8a33716b75c0657
SHA256:de8d411556cccbb9a68a4b40f847e473593336412de86fb3f6f7f61f3923c09e
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	spring-plugin-core	Medium
Vendor	hint analyzer	vendor	vmware	High
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.6	Low
Vendor	hint analyzer	vendor	pivotal software	High
Vendor	pom	artifactid	spring-plugin-core	Low
Vendor	pom	groupid	org.springframework.plugin	Highest
Vendor	pom	description	Core plugin infrastructure	Medium
Vendor	hint analyzer	vendor	SpringSource	High
Vendor	file	name	spring-plugin-core	High
Vendor	pom	parent-artifactid	spring-plugin	Low
Vendor	pom	name	Spring Plugin - Core	High
Product	Manifest	bundle-symbolicname	spring-plugin-core	Medium
Product	pom	parent-artifactid	spring-plugin	Medium
Product	pom	artifactid	spring-plugin-core	Highest
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.6	Low
Product	pom	groupid	org.springframework.plugin	Low
Product	pom	description	Core plugin infrastructure	Medium
Product	file	name	spring-plugin-core	High
Product	Manifest	Bundle-Name	spring-plugin-core	Medium
Product	pom	name	Spring Plugin - Core	High
Version	pom	version	1.2.0.RELEASE	Highest
Version	file	version	1.2.0	Highest
Version	file	name	spring-plugin-core	Medium
Version	Manifest	Bundle-Version	1.2.0.RELEASE	High

Identifiers

maven: org.springframework.plugin:spring-plugin-core:1.2.0.RELEASE Confidence:Highest

evo-inflector-1.2.2.jar

Description:

 Evo Inflector implements English pluralization algorithm.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/org/atteo/evo-inflector/1.2.2/evo-inflector-1.2.2.jar
MD5: da63c9ef600b74c760d81a09f9053d04
SHA1: 2551aad98d65ac5464d81fe05f0e1516cfe471c9
SHA256:c485c110870c597ba401dda2c7c5819a3b2e15ee064f539323138302bd591d48
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-artifactid	parent	Low
Vendor	pom	url	http://atteo.org/static/evo-inflector	Highest
Vendor	pom	description	Evo Inflector implements English pluralization algorithm.	Medium
Vendor	jar	package name	inflector	Low
Vendor	pom	artifactid	evo-inflector	Low
Vendor	jar	package name	evo	Low
Vendor	pom	groupid	org.atteo	Highest
Vendor	jar	package name	atteo	Low
Vendor	pom	name	Evo Inflector	High
Vendor	file	name	evo-inflector	High
Product	pom	artifactid	evo-inflector	Highest
Product	pom	groupid	org.atteo	Low
Product	pom	description	Evo Inflector implements English pluralization algorithm.	Medium
Product	jar	package name	inflector	Low
Product	pom	url	http://atteo.org/static/evo-inflector	Medium
Product	jar	package name	evo	Low
Product	pom	name	Evo Inflector	High
Product	file	name	evo-inflector	High
Product	pom	parent-artifactid	parent	Medium
Version	pom	version	1.2.2	Highest
Version	file	version	1.2.2	Highest

Identifiers

maven: org.atteo:evo-inflector:1.2.2 Confidence:Highest

jackson-databind-2.9.8.jar

Description:

 General data-binding functionality for Jackson: works on core streaming API

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.9.8/jackson-databind-2.9.8.jar
MD5: 39271d9bb1cb7ec563925953b1fa9ff7
SHA1: 11283f21cc480aa86c4df7a0a3243ec508372ed2
SHA256:2351c3eba73a545db9079f5d6d768347ad72666537362c8220fe3e950a55a864
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	url	http://github.com/FasterXML/jackson	Highest
Vendor	manifest	Bundle-Description	General data-binding functionality for Jackson: works on core streaming API	Medium
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	pom	name	jackson-databind	High
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	pom	artifactid	jackson-databind	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Vendor	Manifest	implementation-build-date	2018-12-15 21:58:52+0000	Low
Vendor	pom	description	General data-binding functionality for Jackson: works on core streaming API	Medium
Vendor	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	Manifest	automatic-module-name	com.fasterxml.jackson.databind	Medium
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	file	name	jackson-databind	High
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Product	pom	groupid	com.fasterxml.jackson.core	Low
Product	pom	artifactid	jackson-databind	Highest
Product	manifest	Bundle-Description	General data-binding functionality for Jackson: works on core streaming API	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Low
Product	pom	name	jackson-databind	High
Product	Manifest	specification-title	jackson-databind	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Product	pom	parent-artifactid	jackson-base	Medium
Product	Manifest	Implementation-Title	jackson-databind	High
Product	Manifest	implementation-build-date	2018-12-15 21:58:52+0000	Low
Product	pom	description	General data-binding functionality for Jackson: works on core streaming API	Medium
Product	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	Manifest	automatic-module-name	com.fasterxml.jackson.databind	Medium
Product	pom	url	http://github.com/FasterXML/jackson	Medium
Product	Manifest	Bundle-Name	jackson-databind	Medium
Product	file	name	jackson-databind	High
Version	Manifest	Implementation-Version	2.9.8	High
Version	file	version	2.9.8	Highest
Version	pom	version	2.9.8	Highest

Identifiers

cpe: cpe:/a:fasterxml:jackson:2.9.8 Confidence:Low
cpe: cpe:/a:fasterxml:jackson-databind:2.9.8 Confidence:Low
maven: com.fasterxml.jackson.core:jackson-databind:2.9.8 Confidence:Highest

jackson-core-2.9.8.jar

Description:

 Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.9.8/jackson-core-2.9.8.jar
MD5: 65831e4f46f29db904708e4b9cc72843
SHA1: 0f5a654e4675769c716e5b387830d19b501ca191
SHA256:d934dab0bd48994eeea2c1b493cb547158a338a80b58c4fbc8e85fb0905e105f
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	description	Core Jackson processing abstractions (aka Streaming API), implementation for JSON	Medium
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	pom	artifactid	jackson-core	Low
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	implementation-build-date	2018-12-15 21:18:52+0000	Low
Vendor	pom	name	Jackson-core	High
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Vendor	Manifest	automatic-module-name	com.fasterxml.jackson.core	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	file	name	jackson-core	High
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Vendor	manifest	Bundle-Description	Core Jackson processing abstractions (aka Streaming API), implementation for JSON	Medium
Vendor	pom	url	FasterXML/jackson-core	Highest
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Product	pom	groupid	com.fasterxml.jackson.core	Low
Product	Manifest	Implementation-Title	Jackson-core	High
Product	pom	description	Core Jackson processing abstractions (aka Streaming API), implementation for JSON	Medium
Product	pom	url	FasterXML/jackson-core	High
Product	pom	parent-groupid	com.fasterxml.jackson	Low
Product	Manifest	implementation-build-date	2018-12-15 21:18:52+0000	Low
Product	pom	name	Jackson-core	High
Product	Manifest	specification-title	Jackson-core	Medium
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Product	pom	parent-artifactid	jackson-base	Medium
Product	pom	artifactid	jackson-core	Highest
Product	Manifest	automatic-module-name	com.fasterxml.jackson.core	Medium
Product	Manifest	Bundle-Name	Jackson-core	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	file	name	jackson-core	High
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Product	manifest	Bundle-Description	Core Jackson processing abstractions (aka Streaming API), implementation for JSON	Medium
Version	Manifest	Implementation-Version	2.9.8	High
Version	file	version	2.9.8	Highest
Version	pom	version	2.9.8	Highest

Related Dependencies

Identifiers

cpe: cpe:/a:fasterxml:jackson:2.9.8 Confidence:Low
maven: com.fasterxml.jackson.core:jackson-core:2.9.8 Confidence:Highest

jackson-annotations-2.9.0.jar

Description:

 Core annotations used for value types, used by Jackson data binding package.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/com/fasterxml/jackson/core/jackson-annotations/2.9.0/jackson-annotations-2.9.0.jar
MD5: c09faa1b063681cf45706c6df50685b6
SHA1: 07c10d545325e3a6e72e06381afe469fd40eb701
SHA256:45d32ac61ef8a744b464c54c2b3414be571016dd46bfc2bec226761cf7ae457a
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	Jackson-annotations	High
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	url	http://github.com/FasterXML/jackson	Highest
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	file	name	jackson-annotations	High
Vendor	pom	description	Core annotations used for value types, used by Jackson data binding package.	Medium
Vendor	pom	parent-artifactid	jackson-parent	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-annotations	Medium
Vendor	pom	artifactid	jackson-annotations	Low
Vendor	Manifest	implementation-build-date	2017-07-30 03:53:23+0000	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	manifest	Bundle-Description	Core annotations used for value types, used by Jackson data binding package.	Medium
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Product	pom	groupid	com.fasterxml.jackson.core	Low
Product	pom	parent-artifactid	jackson-parent	Medium
Product	pom	name	Jackson-annotations	High
Product	Manifest	specification-title	Jackson-annotations	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Low
Product	file	name	jackson-annotations	High
Product	Manifest	Implementation-Title	Jackson-annotations	High
Product	pom	description	Core annotations used for value types, used by Jackson data binding package.	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-annotations	Medium
Product	pom	url	http://github.com/FasterXML/jackson	Medium
Product	Manifest	implementation-build-date	2017-07-30 03:53:23+0000	Low
Product	Manifest	Bundle-Name	Jackson-annotations	Medium
Product	manifest	Bundle-Description	Core annotations used for value types, used by Jackson data binding package.	Medium
Product	pom	artifactid	jackson-annotations	Highest
Version	pom	version	2.9.0	Highest
Version	Manifest	Implementation-Version	2.9.0	High
Version	file	version	2.9.0	Highest

Identifiers

maven: com.fasterxml.jackson.core:jackson-annotations:2.9.0 Confidence:Highest
cpe: cpe:/a:fasterxml:jackson:2.9.0 Confidence:Low

slf4j-api-1.7.25.jar

Description:

 The slf4j API

File Path: /home/paulo/.m2/repository/org/slf4j/slf4j-api/1.7.25/slf4j-api-1.7.25.jar
MD5: caafe376afb7086dcbee79f780394ca3
SHA1: da76ca59f6a57ee3102f8f9bd9cee742973efa8a
SHA256:18c4a0095d5c1da6b817592e767bb23d29dd2f560ad74df75ff3961dbde25b79
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	pom	artifactid	slf4j-api	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	pom	name	SLF4J API Module	High
Vendor	manifest	Bundle-Description	The slf4j API	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	pom	description	The slf4j API	Medium
Vendor	file	name	slf4j-api	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Product	manifest	Bundle-Description	The slf4j API	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	pom	name	SLF4J API Module	High
Product	pom	groupid	org.slf4j	Low
Product	pom	artifactid	slf4j-api	Highest
Product	pom	description	The slf4j API	Medium
Product	Manifest	Bundle-Name	slf4j-api	Medium
Product	file	name	slf4j-api	High
Version	Manifest	Implementation-Version	1.7.25	High
Version	file	version	1.7.25	Highest
Version	pom	version	1.7.25	Highest

Identifiers

maven: org.slf4j:slf4j-api:1.7.25 Confidence:Highest

aspectjweaver-1.9.2.jar

Description:

 The AspectJ weaver introduces advices to java classes

License:

Eclipse Public License - v 1.0: http://www.eclipse.org/legal/epl-v10.html

File Path: /home/paulo/.m2/repository/org/aspectj/aspectjweaver/1.9.2/aspectjweaver-1.9.2.jar
MD5: 04981b83d23c4f69d4b63ade89faa693
SHA1: d2502817521477faf0712c49a6ee2a5388787fc7
SHA256:b98ad94989052b195150edf1f85db2ee10f33e140d416f19f03c9746da16b691
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	AspectJ weaver	High
Vendor	Manifest	Implementation-Vendor	aspectj.org	High
Vendor	Manifest	automatic-module-name	org.aspectj.weaver	Medium
Vendor	pom	groupid	org.aspectj	Highest
Vendor	pom	url	http://www.aspectj.org	Highest
Vendor	Manifest	specification-vendor	aspectj.org	Low
Vendor	file	name	aspectjweaver	High
Vendor	pom	artifactid	aspectjweaver	Low
Vendor	pom	description	The AspectJ weaver introduces advices to java classes	Medium
Vendor	Manifest	name	org/aspectj/weaver/	Medium
Product	pom	name	AspectJ weaver	High
Product	pom	artifactid	aspectjweaver	Highest
Product	pom	groupid	org.aspectj	Low
Product	Manifest	automatic-module-name	org.aspectj.weaver	Medium
Product	pom	url	http://www.aspectj.org	Medium
Product	Manifest	specification-title	AspectJ Weaver Classes	Medium
Product	Manifest	Implementation-Title	org.aspectj.weaver	High
Product	file	name	aspectjweaver	High
Product	pom	description	The AspectJ weaver introduces advices to java classes	Medium
Product	Manifest	name	org/aspectj/weaver/	Medium
Version	Manifest	Implementation-Version	1.9.2	High
Version	file	version	1.9.2	Highest
Version	pom	version	1.9.2	Highest

Identifiers

maven: org.aspectj:aspectjweaver:1.9.2 Confidence:Highest

HikariCP-3.2.0.jar

Description:

 Ultimate JDBC Connection Pool

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/com/zaxxer/HikariCP/3.2.0/HikariCP-3.2.0.jar
MD5: ce78a822d3e6a6ae9bb1ed2fce078ae5
SHA1: 6c66db1c636ee90beb4c65fe34abd8ba9396bca6
SHA256:b008de68bbd85811f4b6e8f0860d0966c6acb4f2e75fabd46ec2094569cbefeb
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	com.zaxxer.HikariCP	Medium
Vendor	Manifest	automatic-module-name	com.zaxxer.hikari	Medium
Vendor	manifest	Bundle-Description	Ultimate JDBC Connection Pool	Medium
Vendor	Manifest	bundle-docurl	https://github.com/brettwooldridge	Low
Vendor	pom	organization url	brettwooldridge	Medium
Vendor	file	name	HikariCP	High
Vendor	pom	url	brettwooldridge/HikariCP	Highest
Vendor	pom	groupid	com.zaxxer	Highest
Vendor	pom	organization name	Zaxxer.com	High
Vendor	pom	description	Ultimate JDBC Connection Pool	Medium
Vendor	pom	artifactid	HikariCP	Low
Vendor	pom	name	HikariCP	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	bundle-symbolicname	com.zaxxer.HikariCP	Medium
Product	Manifest	Bundle-Name	HikariCP	Medium
Product	pom	url	brettwooldridge	High
Product	Manifest	automatic-module-name	com.zaxxer.hikari	Medium
Product	manifest	Bundle-Description	Ultimate JDBC Connection Pool	Medium
Product	Manifest	bundle-docurl	https://github.com/brettwooldridge	Low
Product	pom	url	brettwooldridge/HikariCP	High
Product	file	name	HikariCP	High
Product	pom	description	Ultimate JDBC Connection Pool	Medium
Product	pom	groupid	com.zaxxer	Low
Product	pom	artifactid	HikariCP	Highest
Product	pom	organization name	Zaxxer.com	Low
Product	pom	name	HikariCP	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Version	pom	version	3.2.0	Highest
Version	file	version	3.2.0	Highest

Identifiers

maven: com.zaxxer:HikariCP:3.2.0 Confidence:Highest

javax.transaction-api-1.3.jar

Description:

 Project GlassFish Java Transaction API

License:

CDDL + GPLv2 with classpath exception: https://github.com/javaee/javax.transaction/blob/master/LICENSE

File Path: /home/paulo/.m2/repository/javax/transaction/javax.transaction-api/1.3/javax.transaction-api-1.3.jar
MD5: 6e9cb1684621821248b6823143ae26c0
SHA1: e006adf5cf3cca2181d16bd640ecb80148ec0fce
SHA256:603df5e4fc1eeae8f5e5d363a8be6c1fa47d0df1df8739a05cbcb9fafd6df2da
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	GlassFish Community	High
Vendor	Manifest	Implementation-Vendor	GlassFish Community	High
Vendor	pom	parent-groupid	net.java	Medium
Vendor	pom	groupid	javax.transaction	Highest
Vendor	file	name	javax.transaction-api	High
Vendor	pom	parent-artifactid	jvnet-parent	Low
Vendor	pom	organization url	https://glassfish.java.net	Medium
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Vendor	pom	name	${extension.name} API	High
Vendor	pom	url	http://jta-spec.java.net	Highest
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	Manifest	bundle-symbolicname	javax.transaction-api	Medium
Vendor	Manifest	automatic-module-name	java.transaction	Medium
Vendor	pom	artifactid	javax.transaction-api	Low
Vendor	manifest	Bundle-Description	Java(TM) JTA 1.3 API Design Specification	Medium
Vendor	Manifest	extension-name	javax.transaction	Medium
Vendor	Manifest	bundle-docurl	https://glassfish.java.net	Low
Vendor	pom	description	Project GlassFish Java Transaction API	Medium
Product	file	name	javax.transaction-api	High
Product	Manifest	Bundle-Name	javax.transaction API	Medium
Product	pom	organization name	GlassFish Community	Low
Product	pom	parent-artifactid	jvnet-parent	Medium
Product	pom	url	http://jta-spec.java.net	Medium
Product	pom	artifactid	javax.transaction-api	Highest
Product	pom	name	${extension.name} API	High
Product	pom	groupid	javax.transaction	Low
Product	Manifest	bundle-symbolicname	javax.transaction-api	Medium
Product	Manifest	automatic-module-name	java.transaction	Medium
Product	pom	parent-groupid	net.java	Low
Product	pom	organization url	https://glassfish.java.net	Low
Product	manifest	Bundle-Description	Java(TM) JTA 1.3 API Design Specification	Medium
Product	Manifest	extension-name	javax.transaction	Medium
Product	Manifest	bundle-docurl	https://glassfish.java.net	Low
Product	pom	description	Project GlassFish Java Transaction API	Medium
Version	pom	version	1.3	Highest
Version	Manifest	Implementation-Version	1.3	High
Version	file	version	1.3	Highest

Identifiers

cpe: cpe:/a:fish:fish:1.3 Confidence:Low
maven: javax.transaction:javax.transaction-api:1.3 Confidence:Highest

jaxb-api-2.3.1.jar

Description:

 JAXB (JSR 222) API

License:

https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1

File Path: /home/paulo/.m2/repository/javax/xml/bind/jaxb-api/2.3.1/jaxb-api-2.3.1.jar
MD5: bcf270d320f645ad19f5edb60091e87f
SHA1: 8531ad5ac454cc2deb9d4d32c40c4d7451939b5d
SHA256:88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	manifest	Bundle-Description	JAXB (JSR 222) API	Medium
Vendor	Manifest	bundle-symbolicname	jaxb-api	Medium
Vendor	Manifest	implementation-build-id	UNKNOWN-7de2ca118a0cfc4a373872915aef59148dff5f93, 2018-09-12T06:28:43-0700	Low
Vendor	Manifest	extension-name	javax.xml.bind	Medium
Vendor	pom	artifactid	jaxb-api	Low
Vendor	pom	groupid	javax.xml.bind	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Vendor	Manifest	Implementation-Vendor	Oracle Corporation	High
Vendor	pom	parent-artifactid	jaxb-api-parent	Low
Vendor	Manifest	bundle-docurl	http://www.oracle.com/	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version>=1.8))"	Low
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	file	name	jaxb-api	High
Product	manifest	Bundle-Description	JAXB (JSR 222) API	Medium
Product	Manifest	bundle-symbolicname	jaxb-api	Medium
Product	Manifest	implementation-build-id	UNKNOWN-7de2ca118a0cfc4a373872915aef59148dff5f93, 2018-09-12T06:28:43-0700	Low
Product	Manifest	extension-name	javax.xml.bind	Medium
Product	pom	parent-artifactid	jaxb-api-parent	Medium
Product	Manifest	specification-title	jaxb-api	Medium
Product	pom	artifactid	jaxb-api	Highest
Product	Manifest	bundle-docurl	http://www.oracle.com/	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version>=1.8))"	Low
Product	pom	groupid	javax.xml.bind	Low
Product	Manifest	Bundle-Name	jaxb-api	Medium
Product	file	name	jaxb-api	High
Version	pom	version	2.3.1	Highest
Version	file	version	2.3.1	Highest

Identifiers

maven: javax.xml.bind:jaxb-api:2.3.1 Confidence:Highest

javax.activation-api-1.2.0.jar

Description:

 JavaBeans Activation Framework API jar

License:

https://github.com/javaee/activation/blob/master/LICENSE.txt

File Path: /home/paulo/.m2/repository/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0.jar
MD5: 5e50e56bcf4a3ef3bc758f69f7643c3b
SHA1: 85262acf3ca9816f9537ca47d5adeabaead7cb16
SHA256:43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	manifest	Bundle-Description	JavaBeans Activation Framework API jar	Medium
Vendor	Manifest	Implementation-Vendor	Oracle	High
Vendor	Manifest	specification-vendor	Oracle	Low
Vendor	Manifest	bundle-docurl	http://www.oracle.com	Low
Vendor	Manifest	bundle-symbolicname	javax.activation-api	Medium
Vendor	Manifest (hint)	Implementation-Vendor	sun	High
Vendor	Manifest	Implementation-Vendor-Id	com.sun	Medium
Vendor	Manifest	extension-name	javax.activation	Medium
Vendor	pom	groupid	javax.activation	Highest
Vendor	pom	parent-groupid	com.sun.activation	Medium
Vendor	pom	artifactid	javax.activation-api	Low
Vendor	Manifest (hint)	specification-vendor	sun	Low
Vendor	Manifest	automatic-module-name	java.activation	Medium
Vendor	Manifest	originally-created-by	1.8.0_141 (Oracle Corporation)	Low
Vendor	pom	name	JavaBeans Activation Framework API jar	High
Vendor	pom	parent-artifactid	all	Low
Vendor	file	name	javax.activation-api	High
Product	pom	parent-artifactid	all	Medium
Product	manifest	Bundle-Description	JavaBeans Activation Framework API jar	Medium
Product	pom	artifactid	javax.activation-api	Highest
Product	Manifest	specification-title	javax.activation.javax.activation-api	Medium
Product	Manifest	bundle-docurl	http://www.oracle.com	Low
Product	Manifest	bundle-symbolicname	javax.activation-api	Medium
Product	Manifest	Implementation-Title	javax.activation.javax.activation-api	High
Product	Manifest	extension-name	javax.activation	Medium
Product	pom	parent-groupid	com.sun.activation	Low
Product	Manifest	automatic-module-name	java.activation	Medium
Product	Manifest	originally-created-by	1.8.0_141 (Oracle Corporation)	Low
Product	pom	name	JavaBeans Activation Framework API jar	High
Product	pom	groupid	javax.activation	Low
Product	Manifest	Bundle-Name	JavaBeans Activation Framework API jar	Medium
Product	file	name	javax.activation-api	High
Version	file	version	1.2.0	Highest
Version	Manifest	Implementation-Version	1.2.0	High
Version	pom	version	1.2.0	Highest

Identifiers

maven: javax.activation:javax.activation-api:1.2.0 Confidence:Highest

hibernate-core-5.3.7.Final.jar

Description:

 Hibernate's core ORM functionality

License:

GNU Library General Public License v2.1 or later: http://www.opensource.org/licenses/LGPL-2.1

File Path: /home/paulo/.m2/repository/org/hibernate/hibernate-core/5.3.7.Final/hibernate-core-5.3.7.Final.jar
MD5: 20f0daf39f05db0085796d9813431e15
SHA1: f87c5c1bbfc638309824140e68dfaaeb1bb479f3
SHA256:862822a3ebf43aa38ff7d36346bb4cef1fc5a5c400b0a8f35d4a33df816202e9
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	Hibernate.org	Low
Vendor	pom	name	Hibernate ORM - hibernate-core	High
Vendor	Manifest	bundle-symbolicname	org.hibernate.orm.core	Medium
Vendor	Manifest	Implementation-Vendor	Hibernate.org	High
Vendor	pom	description	Hibernate's core ORM functionality	Medium
Vendor	pom	organization name	Hibernate.org	High
Vendor	pom	artifactid	hibernate-core	Low
Vendor	Manifest	implementation-url	http://hibernate.org/orm	Low
Vendor	Manifest	Implementation-Vendor-Id	org.hibernate	Medium
Vendor	Manifest	bundle-docurl	http://www.hibernate.org/orm/5.3	Low
Vendor	pom	groupid	org.hibernate	Highest
Vendor	pom	url	http://hibernate.org/orm	Highest
Vendor	Manifest	automatic-module-name	org.hibernate.orm.core	Medium
Vendor	file	name	hibernate-core	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	organization url	http://hibernate.org	Medium
Product	pom	groupid	org.hibernate	Low
Product	pom	name	Hibernate ORM - hibernate-core	High
Product	pom	organization name	Hibernate.org	Low
Product	Manifest	bundle-symbolicname	org.hibernate.orm.core	Medium
Product	pom	description	Hibernate's core ORM functionality	Medium
Product	Manifest	specification-title	hibernate-core	Medium
Product	pom	artifactid	hibernate-core	Highest
Product	Manifest	Implementation-Title	hibernate-core	High
Product	Manifest	implementation-url	http://hibernate.org/orm	Low
Product	Manifest	bundle-docurl	http://www.hibernate.org/orm/5.3	Low
Product	Manifest	Bundle-Name	hibernate-core	Medium
Product	pom	url	http://hibernate.org/orm	Medium
Product	pom	organization url	http://hibernate.org	Low
Product	Manifest	automatic-module-name	org.hibernate.orm.core	Medium
Product	file	name	hibernate-core	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Version	Manifest	Implementation-Version	5.3.7.Final	High
Version	file	version	5.3.7	Highest
Version	pom	version	5.3.7.Final	Highest

Identifiers

maven: org.hibernate:hibernate-core:5.3.7.Final Confidence:Highest

jboss-logging-3.3.2.Final.jar

Description:

 The JBoss Logging Framework

License:

Apache License, version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/org/jboss/logging/jboss-logging/3.3.2.Final/jboss-logging-3.3.2.Final.jar
MD5: c397132f958d7e8ac0d566b6723ca7ca
SHA1: 3789d00e859632e6c6206adc0c71625559e6e3b0
SHA256:cb914bfe888da7d9162e965ac8b0d6f28f2f32eca944a00fbbf6dd3cf1aacc13
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	java-vendor	Sun Microsystems Inc.	Medium
Vendor	Manifest	build-timestamp	Wed, 14 Feb 2018 13:23:27 -0800	Low
Vendor	pom	name	JBoss Logging 3	High
Vendor	Manifest	automatic-module-name	org.jboss.logging	Medium
Vendor	manifest	Bundle-Description	The JBoss Logging Framework	Medium
Vendor	pom	artifactid	jboss-logging	Low
Vendor	Manifest	os-name	Linux	Medium
Vendor	Manifest	Implementation-Vendor	JBoss by Red Hat	High
Vendor	Manifest	specification-vendor	JBoss by Red Hat	Low
Vendor	Manifest	Implementation-Vendor-Id	org.jboss.logging	Medium
Vendor	pom	url	http://www.jboss.org	Highest
Vendor	Manifest	bundle-docurl	http://www.jboss.org	Low
Vendor	pom	parent-artifactid	jboss-parent	Low
Vendor	Manifest	bundle-symbolicname	org.jboss.logging.jboss-logging	Medium
Vendor	file	name	jboss-logging	High
Vendor	pom	groupid	org.jboss.logging	Highest
Vendor	Manifest	implementation-url	http://www.jboss.org	Low
Vendor	pom	parent-groupid	org.jboss	Medium
Vendor	pom	description	The JBoss Logging Framework	Medium
Product	pom	url	http://www.jboss.org	Medium
Product	Manifest	specification-title	JBoss Logging 3	Medium
Product	Manifest	build-timestamp	Wed, 14 Feb 2018 13:23:27 -0800	Low
Product	pom	name	JBoss Logging 3	High
Product	Manifest	Bundle-Name	JBoss Logging 3	Medium
Product	pom	artifactid	jboss-logging	Highest
Product	Manifest	automatic-module-name	org.jboss.logging	Medium
Product	manifest	Bundle-Description	The JBoss Logging Framework	Medium
Product	pom	parent-artifactid	jboss-parent	Medium
Product	Manifest	os-name	Linux	Medium
Product	pom	parent-groupid	org.jboss	Low
Product	Manifest	bundle-docurl	http://www.jboss.org	Low
Product	Manifest	bundle-symbolicname	org.jboss.logging.jboss-logging	Medium
Product	file	name	jboss-logging	High
Product	pom	groupid	org.jboss.logging	Low
Product	Manifest	Implementation-Title	JBoss Logging 3	High
Product	Manifest	implementation-url	http://www.jboss.org	Low
Product	pom	description	The JBoss Logging Framework	Medium
Version	file	version	3.3.2	Highest
Version	pom	version	3.3.2.Final	Highest
Version	Manifest	Implementation-Version	3.3.2.Final	High

Identifiers

maven: org.jboss.logging:jboss-logging:3.3.2.Final Confidence:Highest

javax.persistence-api-2.2.jar

Description:

 Java(TM) Persistence API

License:

Eclipse Public License v1.0: http://www.eclipse.org/legal/epl-v10.html
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/paulo/.m2/repository/javax/persistence/javax.persistence-api/2.2/javax.persistence-api-2.2.jar
MD5: e6520b3435f5b6d58eee415b5542abf8
SHA1: 25665ac8c0b62f50e6488173233239120fc52c96
SHA256:5578b71b37999a5eaed3fea0d14aa61c60c6ec6328256f2b63472f336318baf4
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	manifest	Bundle-Description	Java(TM) Persistence 2.2 API jar	Medium
Vendor	pom	url	javaee/jpa-spec	Highest
Vendor	pom	parent-groupid	net.java	Medium
Vendor	pom	artifactid	javax.persistence-api	Low
Vendor	pom	parent-artifactid	jvnet-parent	Low
Vendor	Manifest	bundle-symbolicname	javax.persistence-api	Medium
Vendor	Manifest	Implementation-Vendor-Id	com.oracle	Medium
Vendor	pom	description	Java(TM) Persistence API	Medium
Vendor	Manifest	extension-name	javax.persistence	Medium
Vendor	Manifest	automatic-module-name	java.persistence	Medium
Vendor	pom	groupid	javax.persistence	Highest
Vendor	file	name	javax.persistence-api	High
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	manifest	Bundle-Description	Java(TM) Persistence 2.2 API jar	Medium
Product	Manifest	bundle-symbolicname	javax.persistence-api	Medium
Product	Manifest	Bundle-Name	Java(TM) Persistence API jar	Medium
Product	pom	artifactid	javax.persistence-api	Highest
Product	pom	description	Java(TM) Persistence API	Medium
Product	Manifest	extension-name	javax.persistence	Medium
Product	pom	parent-artifactid	jvnet-parent	Medium
Product	Manifest	automatic-module-name	java.persistence	Medium
Product	file	name	javax.persistence-api	High
Product	pom	url	javaee/jpa-spec	High
Product	pom	groupid	javax.persistence	Low
Product	pom	parent-groupid	net.java	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Version	file	version	2.2	Highest
Version	Manifest	Implementation-Version	2.2	High
Version	pom	version	2.2	Highest

Identifiers

maven: javax.persistence:javax.persistence-api:2.2 Confidence:Highest

javassist-3.23.1-GA.jar

Description:

 
  	Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.

License:

MPL 1.1: http://www.mozilla.org/MPL/MPL-1.1.html
LGPL 2.1: http://www.gnu.org/licenses/lgpl-2.1.html
Apache License 2.0: http://www.apache.org/licenses/

File Path: /home/paulo/.m2/repository/org/javassist/javassist/3.23.1-GA/javassist-3.23.1-GA.jar
MD5: c99b30482cfdcd42bdc301970a3b2d5d
SHA1: c072c13dcb7f705471c40bafb1536171df850ab2
SHA256:d2b14c09763523374624f32a09d6e31fcb174082a97addb5ae2d580b474fd806
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	pom	organization name	Shigeru Chiba, www.javassist.org	High
Vendor	pom	description	Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.	Low
Vendor	manifest	Bundle-Description	Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.	Low
Vendor	pom	name	Javassist	High
Vendor	pom	artifactid	javassist	Low
Vendor	file	name	javassist	High
Vendor	Manifest	bundle-symbolicname	javassist	Medium
Vendor	Manifest	specification-vendor	Shigeru Chiba, www.javassist.org	Low
Vendor	pom	url	http://www.javassist.org/	Highest
Vendor	pom	groupid	org.javassist	Highest
Product	pom	description	Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.	Low
Product	manifest	Bundle-Description	Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.	Low
Product	Manifest	bundle-symbolicname	javassist	Medium
Product	pom	organization name	Shigeru Chiba, www.javassist.org	Low
Product	Manifest	specification-title	Javassist	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	pom	name	Javassist	High
Product	file	name	javassist	High
Product	pom	url	http://www.javassist.org/	Medium
Product	pom	groupid	org.javassist	Low
Product	pom	artifactid	javassist	Highest
Product	Manifest	Bundle-Name	Javassist	Medium
Version	file	version	3.23.1	Highest
Version	pom	version	3.23.1-GA	Highest

Identifiers

maven: org.javassist:javassist:3.23.1-GA Confidence:Highest

byte-buddy-1.9.7.jar

Description:

 Byte Buddy is a Java library for creating Java classes at run time.        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/net/bytebuddy/byte-buddy/1.9.7/byte-buddy-1.9.7.jar
MD5: 3038371407163c76c89749c3a7c458b0
SHA1: 8fea78fea6449e1738b675cb155ce8422661e237
SHA256:69a9140c11de463789a1badfe6c3dcdc17608c4304cb443c5c3a179585b78b39
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Vendor	jar	package name	net	Low
Vendor	file	name	byte-buddy	High
Vendor	jar	package name	bytebuddy	Low
Vendor	pom	groupid	net.bytebuddy	Highest
Vendor	manifest	Bundle-Description	Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.	Low
Product	Manifest	Bundle-Name	Byte Buddy (without dependencies)	Medium
Product	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Product	file	name	byte-buddy	High
Product	jar	package name	bytebuddy	Low
Product	pom	artifactid	byte-buddy	Highest
Product	manifest	Bundle-Description	Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.	Low
Version	pom	version	1.9.7	Highest
Version	file	version	1.9.7	Highest

Identifiers

maven: net.bytebuddy:byte-buddy:1.9.7 Confidence:Highest

antlr-2.7.7.jar

Description:

 
    A framework for constructing recognizers, compilers,
    and translators from grammatical descriptions containing
    Java, C#, C++, or Python actions.

License:

BSD License: http://www.antlr.org/license.html

File Path: /home/paulo/.m2/repository/antlr/antlr/2.7.7/antlr-2.7.7.jar
MD5: f8f1352c52a4c6a500b597596501fc64
SHA1: 83cd2cd674a217ade95a4bb83a8a14f351f48bd0
SHA256:88fbda4b912596b9f56e8e12e580cc954bacfb51776ecfddd3e18fc1cf56dc4c
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	antlr	Highest
Vendor	pom	name	AntLR Parser Generator	High
Vendor	pom	url	http://www.antlr.org/	Highest
Vendor	pom	artifactid	antlr	Low
Vendor	file	name	antlr	High
Vendor	pom	description	A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.	Low
Vendor	jar	package name	antlr	Low
Product	pom	url	http://www.antlr.org/	Medium
Product	pom	name	AntLR Parser Generator	High
Product	file	name	antlr	High
Product	pom	description	A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.	Low
Product	pom	artifactid	antlr	Highest
Product	pom	groupid	antlr	Low
Version	pom	version	2.7.7	Highest
Version	file	version	2.7.7	Highest

Identifiers

maven: antlr:antlr:2.7.7 Confidence:Highest

jandex-2.0.5.Final.jar

Description:

 Parent POM for JBoss projects. Provides default project build configuration.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/org/jboss/jandex/2.0.5.Final/jandex-2.0.5.Final.jar
MD5: 8faa3033123cfc8470107d2ae4ebe76d
SHA1: 7060f67764565b9ee9d467e3ed0cb8a9c601b23a
SHA256:9112a9c33175b8c64b999ecf47b649fdf1cd6fa8262d0677895e976ed2891f0b
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	build-timestamp	Wed, 7 Mar 2018 12:02:16 +1100	Low
Vendor	Manifest	java-vendor	Oracle Corporation	Medium
Vendor	pom	name	Java Annotation Indexer	High
Vendor	Manifest	Implementation-Vendor	JBoss by Red Hat	High
Vendor	pom	groupid	org.jboss	Highest
Vendor	Manifest	bundle-symbolicname	org.jboss.jandex	Medium
Vendor	file	name	jandex	High
Vendor	manifest	Bundle-Description	Parent POM for JBoss projects. Provides default project build configuration.	Medium
Vendor	Manifest	specification-vendor	JBoss by Red Hat	Low
Vendor	Manifest	os-name	Mac OS X	Medium
Vendor	Manifest	Implementation-Vendor-Id	org.jboss	Medium
Vendor	Manifest	bundle-docurl	http://www.jboss.org	Low
Vendor	Manifest	implementation-url	http://www.jboss.org/jandex	Low
Vendor	pom	parent-artifactid	jboss-parent	Low
Vendor	pom	artifactid	jandex	Low
Product	pom	artifactid	jandex	Highest
Product	Manifest	build-timestamp	Wed, 7 Mar 2018 12:02:16 +1100	Low
Product	Manifest	specification-title	Java Annotation Indexer	Medium
Product	pom	parent-artifactid	jboss-parent	Medium
Product	pom	name	Java Annotation Indexer	High
Product	Manifest	bundle-symbolicname	org.jboss.jandex	Medium
Product	file	name	jandex	High
Product	Manifest	Bundle-Name	Java Annotation Indexer	Medium
Product	manifest	Bundle-Description	Parent POM for JBoss projects. Provides default project build configuration.	Medium
Product	Manifest	os-name	Mac OS X	Medium
Product	Manifest	Implementation-Title	Java Annotation Indexer	High
Product	Manifest	bundle-docurl	http://www.jboss.org	Low
Product	Manifest	implementation-url	http://www.jboss.org/jandex	Low
Product	pom	groupid	org.jboss	Low
Version	pom	version	2.0.5.Final	Highest
Version	file	version	2.0.5	Highest
Version	Manifest	Implementation-Version	2.0.5.Final	High

Identifiers

maven: org.jboss:jandex:2.0.5.Final Confidence:Highest

classmate-1.4.0.jar

Description:

 Library for introspecting types with full generic information
        including resolving of field and method types.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/com/fasterxml/classmate/1.4.0/classmate-1.4.0.jar
MD5: 85716d3adddffaaacb5e316be6681bf0
SHA1: 291658ac2ce2476256c7115943652c0accb5c857
SHA256:2829acc59abf4aa6b72579697a0391c0fc69df7772ae59c58e0237f909cd6803
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	com.fasterxml.classmate	Medium
Vendor	file	name	classmate	High
Vendor	Manifest	specification-vendor	fasterxml.com	Low
Vendor	Manifest	Implementation-Vendor	fasterxml.com	High
Vendor	pom	organization name	fasterxml.com	High
Vendor	pom	parent-artifactid	oss-parent	Low
Vendor	pom	description	Library for introspecting types with full generic information including resolving of field and method types.	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml	Medium
Vendor	pom	url	http://github.com/FasterXML/java-classmate	Highest
Vendor	pom	organization url	http://fasterxml.com	Medium
Vendor	pom	name	ClassMate	High
Vendor	pom	groupid	com.fasterxml	Highest
Vendor	manifest	Bundle-Description	Library for introspecting types with full generic informationincluding resolving of field and method types.	Low
Vendor	pom	artifactid	classmate	Low
Vendor	Manifest	bundle-docurl	http://github.com/FasterXML/java-classmate	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.classmate	Medium
Vendor	Manifest	implementation-build-date	2018-03-28 01:35:30+0000	Low
Product	pom	url	http://github.com/FasterXML/java-classmate	Medium
Product	Manifest	automatic-module-name	com.fasterxml.classmate	Medium
Product	file	name	classmate	High
Product	pom	description	Library for introspecting types with full generic information including resolving of field and method types.	Low
Product	pom	organization name	fasterxml.com	Low
Product	pom	organization url	http://fasterxml.com	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	Implementation-Title	ClassMate	High
Product	pom	artifactid	classmate	Highest
Product	Manifest	Bundle-Name	ClassMate	Medium
Product	pom	name	ClassMate	High
Product	manifest	Bundle-Description	Library for introspecting types with full generic informationincluding resolving of field and method types.	Low
Product	pom	parent-artifactid	oss-parent	Medium
Product	Manifest	bundle-docurl	http://github.com/FasterXML/java-classmate	Low
Product	Manifest	specification-title	ClassMate	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.classmate	Medium
Product	Manifest	implementation-build-date	2018-03-28 01:35:30+0000	Low
Product	pom	groupid	com.fasterxml	Low
Version	pom	version	1.4.0	Highest
Version	file	version	1.4.0	Highest
Version	Manifest	Implementation-Version	1.4.0	High

Identifiers

maven: com.fasterxml:classmate:1.4.0 Confidence:Highest

dom4j-2.1.1.jar

Description:

 flexible XML framework for Java

License:

BSD 3-clause New License: https://github.com/dom4j/dom4j/blob/master/LICENSE

File Path: /home/paulo/.m2/repository/org/dom4j/dom4j/2.1.1/dom4j-2.1.1.jar
MD5: f5710c1d5f5627ae5ce850a0b12ea87a
SHA1: 3dce5dbb3571aa820c677fadd8349bfa8f00c199
SHA256:a2ef5fb4990b914a31176c51f6137f6f04253dd165420985051f9fd4fb032128
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	dom4j	High
Vendor	pom	artifactid	dom4j	Low
Vendor	pom	groupid	org.dom4j	Highest
Vendor	pom	url	http://dom4j.github.io/	Highest
Vendor	jar	package name	dom4j	Low
Vendor	pom	name	dom4j	High
Vendor	pom	description	flexible XML framework for Java	Medium
Product	file	name	dom4j	High
Product	pom	artifactid	dom4j	Highest
Product	pom	groupid	org.dom4j	Low
Product	pom	url	http://dom4j.github.io/	Medium
Product	pom	name	dom4j	High
Product	pom	description	flexible XML framework for Java	Medium
Version	file	version	2.1.1	Highest
Version	pom	version	2.1.1	Highest

Identifiers

cpe: cpe:/a:dom4j_project:dom4j:2.1.1 Confidence:Low
maven: org.dom4j:dom4j:2.1.1 Confidence:Highest

hibernate-commons-annotations-5.0.4.Final.jar

Description:

 Common reflection code used in support of annotation processing

License:

GNU Lesser General Public License v2.1 or later: http://www.gnu.org/licenses/lgpl-2.1.html

File Path: /home/paulo/.m2/repository/org/hibernate/common/hibernate-commons-annotations/5.0.4.Final/hibernate-commons-annotations-5.0.4.Final.jar
MD5: 1b78fde0083b0fc394eb1e491df3308c
SHA1: 965a18fdf939ee75e41f7918532d37b3a8350535
SHA256:b509d514d33265c0e8d872a3bf93df9da1c4d8760bdeec274b73c3310976c4f8
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	org.hibernate.common.hibernate-commons-annotations	Medium
Vendor	pom	artifactid	hibernate-commons-annotations	Low
Vendor	pom	url	http://hibernate.org	Highest
Vendor	Manifest	Implementation-Vendor	Hibernate.org	High
Vendor	pom	organization name	Hibernate.org	High
Vendor	pom	name	Hibernate Commons Annotations	High
Vendor	Manifest	automatic-module-name	org.hibernate.commons.annotations	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	Implementation-Vendor-Id	org.hibernate	Medium
Vendor	Manifest	implementation-url	http://hibernate.org	Low
Vendor	file	name	hibernate-commons-annotations	High
Vendor	pom	description	Common reflection code used in support of annotation processing	Medium
Vendor	pom	groupid	org.hibernate.common	Highest
Vendor	pom	organization url	http://hibernate.org	Medium
Product	Manifest	bundle-symbolicname	org.hibernate.common.hibernate-commons-annotations	Medium
Product	pom	groupid	org.hibernate.common	Low
Product	pom	organization name	Hibernate.org	Low
Product	pom	name	Hibernate Commons Annotations	High
Product	Manifest	automatic-module-name	org.hibernate.commons.annotations	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	implementation-url	http://hibernate.org	Low
Product	pom	artifactid	hibernate-commons-annotations	Highest
Product	pom	organization url	http://hibernate.org	Low
Product	Manifest	Bundle-Name	hibernate-commons-annotations	Medium
Product	file	name	hibernate-commons-annotations	High
Product	pom	description	Common reflection code used in support of annotation processing	Medium
Product	pom	url	http://hibernate.org	Medium
Version	Manifest	Implementation-Version	5.0.4.Final	High
Version	pom	version	5.0.4.Final	Highest
Version	file	version	5.0.4	Highest

Identifiers

maven: org.hibernate.common:hibernate-commons-annotations:5.0.4.Final Confidence:Highest

spring-data-jpa-2.1.4.RELEASE.jar

Description:

 Spring Data module for JPA repositories.

File Path: /home/paulo/.m2/repository/org/springframework/data/spring-data-jpa/2.1.4.RELEASE/spring-data-jpa-2.1.4.RELEASE.jar
MD5: b31ef169e5deac0a47f0231d3605093e
SHA1: aedc52b1f5acdfe11cb665d0ad3920de8bca480a
SHA256:9ff0a54bb9a75a6fced4730f3495af35aa820be307620379c667e50d02886ff6
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	spring-data-jpa	Low
Vendor	pom	groupid	org.springframework.data	Highest
Vendor	file	name	spring-data-jpa	High
Vendor	pom	description	Spring Data module for JPA repositories.	Medium
Vendor	pom	parent-artifactid	spring-data-parent	Low
Vendor	hint analyzer	vendor	vmware	High
Vendor	pom	name	Spring Data JPA	High
Vendor	hint analyzer	vendor	pivotal software	High
Vendor	pom	parent-groupid	org.springframework.data.build	Medium
Vendor	Manifest	automatic-module-name	spring.data.jpa	Medium
Vendor	hint analyzer	vendor	SpringSource	High
Vendor	pom	url	http://projects.spring.io/spring-data-jpa	Highest
Product	file	name	spring-data-jpa	High
Product	pom	groupid	org.springframework.data	Low
Product	pom	description	Spring Data module for JPA repositories.	Medium
Product	pom	name	Spring Data JPA	High
Product	pom	artifactid	spring-data-jpa	Highest
Product	Manifest	automatic-module-name	spring.data.jpa	Medium
Product	pom	parent-artifactid	spring-data-parent	Medium
Product	Manifest	Implementation-Title	Spring Data JPA	High
Product	pom	parent-groupid	org.springframework.data.build	Low
Product	pom	url	http://projects.spring.io/spring-data-jpa	Medium
Version	Manifest	Implementation-Version	2.1.4.RELEASE	High
Version	pom	version	2.1.4.RELEASE	Highest

Identifiers

cpe: cpe:/a:pivotal_software:spring_data_jpa:2.1.4 Confidence:Low
maven: org.springframework.data:spring-data-jpa:2.1.4.RELEASE Confidence:Highest

spring-data-commons-2.1.4.RELEASE.jar

File Path: /home/paulo/.m2/repository/org/springframework/data/spring-data-commons/2.1.4.RELEASE/spring-data-commons-2.1.4.RELEASE.jar
MD5: c7ce87c13e0d2ad7298aaf4aa0239a6e
SHA1: 144d71cfb0cc330fead0a00969e2ba871a83904b
SHA256:7458d7b9d6a457022ac0d6ffa3615766995ba190b8c99d79846de4b2ab5c21e3
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	Spring Data Core	High
Vendor	file	name	spring-data-commons	High
Vendor	pom	parent-artifactid	spring-data-parent	Low
Vendor	hint analyzer	vendor	vmware	High
Vendor	hint analyzer	vendor	pivotal software	High
Vendor	Manifest	automatic-module-name	spring.data.commons	Medium
Vendor	pom	parent-groupid	org.springframework.data.build	Medium
Vendor	hint analyzer	vendor	SpringSource	High
Vendor	pom	groupid	org.springframework.data	Highest
Vendor	pom	artifactid	spring-data-commons	Low
Product	pom	name	Spring Data Core	High
Product	file	name	spring-data-commons	High
Product	pom	groupid	org.springframework.data	Low
Product	pom	artifactid	spring-data-commons	Highest
Product	Manifest	automatic-module-name	spring.data.commons	Medium
Product	Manifest	Implementation-Title	Spring Data Core	High
Product	pom	parent-artifactid	spring-data-parent	Medium
Product	pom	parent-groupid	org.springframework.data.build	Low
Version	Manifest	Implementation-Version	2.1.4.RELEASE	High
Version	pom	version	2.1.4.RELEASE	Highest

Identifiers

maven: org.springframework.data:spring-data-commons:2.1.4.RELEASE Confidence:Highest
cpe: cpe:/a:pivotal_software:spring_data_commons:2.1.4 Confidence:Low

spring-tx-5.1.4.RELEASE.jar

Description:

 Spring Transaction

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0

File Path: /home/paulo/.m2/repository/org/springframework/spring-tx/5.1.4.RELEASE/spring-tx-5.1.4.RELEASE.jar
MD5: 4e58f06cdf9a66c82f98081a06243692
SHA1: a671702999fd8b5f1798cd3a7dfbbbf5a4705494
SHA256:f2cdfd8a2b511c095620243e15ddef5b800655996415df5182f7081a78407214
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	pom	organization name	Spring IO	High
Vendor	pom	artifactid	spring-tx	Low
Vendor	pom	groupid	org.springframework	Highest
Vendor	hint analyzer	vendor	vmware	High
Vendor	hint analyzer	vendor	pivotal software	High
Vendor	Manifest	automatic-module-name	spring.tx	Medium
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	organization url	http://projects.spring.io/spring-framework	Medium
Vendor	file	name	spring-tx	High
Vendor	hint analyzer	vendor	SpringSource	High
Vendor	pom	name	Spring Transaction	High
Vendor	pom	description	Spring Transaction	Medium
Product	pom	artifactid	spring-tx	Highest
Product	pom	groupid	org.springframework	Low
Product	pom	organization name	Spring IO	Low
Product	Manifest	automatic-module-name	spring.tx	Medium
Product	pom	url	spring-projects/spring-framework	High
Product	file	name	spring-tx	High
Product	Manifest	Implementation-Title	spring-tx	High
Product	pom	organization url	http://projects.spring.io/spring-framework	Low
Product	pom	name	Spring Transaction	High
Product	pom	description	Spring Transaction	Medium
Version	pom	version	5.1.4.RELEASE	Highest
Version	Manifest	Implementation-Version	5.1.4.RELEASE	High

Related Dependencies

spring-beans-5.1.4.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/spring-beans/5.1.4.RELEASE/spring-beans-5.1.4.RELEASE.jar
- MD5: ed3291d49a163db9bfee59db050c01fc
- SHA1: 507c9391e0b786704929453e7fd3a74cfba46534
- SHA256: b8f0a3e1c0752c18051b1a0921dffe0779833c146b61768b7eecd270c095be11
spring-context-5.1.4.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/spring-context/5.1.4.RELEASE/spring-context-5.1.4.RELEASE.jar
- MD5: ee7b305b57ac124b7fd8dfec3cb2b272
- SHA1: 2be9e8da66d32fb4eaf29a46bdcdbfe155f1f87a
- SHA256: 74b8cad85e6afccce8e85ddb9bdb950c00ddfc049649f65cf2042f6113432ef9
spring-aop-5.1.4.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/spring-aop/5.1.4.RELEASE/spring-aop-5.1.4.RELEASE.jar
- MD5: f4c841d8cfd4542a43c55d4fbe2c2ece
- SHA1: 57a8c4ab2ff3233095da24c58c30aa75a7a82069
- SHA256: 5bb3131c47c9f97850b15577a7e872e427ca980120b246e4d1981ee43879302c
spring-aspects-5.1.4.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/spring-aspects/5.1.4.RELEASE/spring-aspects-5.1.4.RELEASE.jar
- MD5: ec9d156faa2bd9d087010b31e4bb4e14
- SHA1: 8d9f441975c7b45f497706c068c022163591d116
- SHA256: 5b85d0f20ec4596e8c167a1581502e353bddd962488dea61ce9988b187351e19
spring-webmvc-5.1.4.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/spring-webmvc/5.1.4.RELEASE/spring-webmvc-5.1.4.RELEASE.jar
- MD5: 5dc84b560aea1b5f5ca6d4786aa071c0
- SHA1: eb1badce2f1593f3fb6e340036d313bf1c24dcfa
- SHA256: 389292b01b5752cba740078bd60ff821f603b0fb972f3659e0afac6c3949058b
spring-jdbc-5.1.4.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/spring-jdbc/5.1.4.RELEASE/spring-jdbc-5.1.4.RELEASE.jar
- MD5: 7188236333b3c00570c4b74c2ffcfa90
- SHA1: ec21d6c0956b523ed364fa1bb1165009ad426753
- SHA256: 9a160283e380f6c60961901b64b31eb5f2d7a9375d6fbfc477f2438c2f8913b7
spring-orm-5.1.4.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/spring-orm/5.1.4.RELEASE/spring-orm-5.1.4.RELEASE.jar
- MD5: d41f34291c3dfc7570541f11b2924061
- SHA1: 4724d782a976fb7b0f69dd1e5d027a0d68622260
- SHA256: 12cd51b65b2781a6a35403dc82d7b261688706a0f8543c087ec483ddbf8ec77a
spring-jcl-5.1.4.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/spring-jcl/5.1.4.RELEASE/spring-jcl-5.1.4.RELEASE.jar
- MD5: e29d0f8a66037453a51a0fa8bdbb612c
- SHA1: f5a25caae583905203959abf35fdd1ab7a8f2c37
- SHA256: 42fc85c9a42f0e37a2c2ec7fa7eeff95414af1a4aaa4045b7f45e50e7d7e313d
spring-web-5.1.4.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/spring-web/5.1.4.RELEASE/spring-web-5.1.4.RELEASE.jar
- MD5: cdea0e98656dc93035b55fd1ab162d9c
- SHA1: 75830b324bba34b2cb63d0fed085e94cc759eec5
- SHA256: 332d30aa8da6e57b901ca6394d809e039f96d8d37179b4101a4a857553336678
spring-expression-5.1.4.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/spring-expression/5.1.4.RELEASE/spring-expression-5.1.4.RELEASE.jar
- MD5: 692b820e2b9b89b09c44d7a84c5f0f02
- SHA1: 1abbfd04a7d472811582bb3780ea4d871442d49c
- SHA256: e44c67bb015b097aec59da7edcd155050d075fdcb6784fc4b7e1fa964834f151

Identifiers

cpe: cpe:/a:pivotal_software:spring_framework:5.1.4 Confidence:Low
cpe: cpe:/a:pivotal:spring_framework:5.1.4 Confidence:Low
cpe: cpe:/a:springsource:spring_framework:5.1.4 Confidence:Low
maven: org.springframework:spring-tx:5.1.4.RELEASE Confidence:Highest

h2-1.4.197.jar

Description:

 H2 Database Engine

License:

MPL 2.0 or EPL 1.0: http://h2database.com/html/license.html

File Path: /home/paulo/.m2/repository/com/h2database/h2/1.4.197/h2-1.4.197.jar
MD5: f9893acfa22b7fe1492dd9c515af2e5b
SHA1: bb391050048ca8ae3e32451b5a3714ecd3596a46
SHA256:37f5216e14af2772930dff9b8734353f0a80e89ba3f33e065441de6537c5e842
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	provide-capability	osgi.service;objectClass:List=org.osgi.service.jdbc.DataSourceFactory	Low
Vendor	file	name	h2	High
Vendor	pom	url	http://www.h2database.com	Highest
Vendor	pom	groupid	com.h2database	Highest
Vendor	Manifest	implementation-url	http://www.h2database.com	Low
Vendor	pom	artifactid	h2	Low
Vendor	pom	description	H2 Database Engine	Medium
Vendor	Manifest	bundle-symbolicname	org.h2	Medium
Vendor	pom	name	H2 Database Engine	High
Product	Manifest	provide-capability	osgi.service;objectClass:List=org.osgi.service.jdbc.DataSourceFactory	Low
Product	pom	url	http://www.h2database.com	Medium
Product	Manifest	Bundle-Name	H2 Database Engine	Medium
Product	file	name	h2	High
Product	Manifest	Implementation-Title	H2 Database Engine	High
Product	Manifest	implementation-url	http://www.h2database.com	Low
Product	pom	artifactid	h2	Highest
Product	pom	groupid	com.h2database	Low
Product	pom	description	H2 Database Engine	Medium
Product	Manifest	bundle-symbolicname	org.h2	Medium
Product	pom	name	H2 Database Engine	High
Version	pom	version	1.4.197	Highest
Version	file	version	1.4.197	Highest
Version	Manifest	Implementation-Version	1.4.197	High

Identifiers

maven: com.h2database:h2:1.4.197 Confidence:Highest
cpe: cpe:/a:h2database:h2:1.4.197 Confidence:Highest

Published Vulnerabilities

CVE-2018-10054

Severity:Medium
CVSS Score: 6.5 (AV:N/AC:L/Au:S/C:P/I:P/A:P)
CWE: CWE-20 Improper Input Validation

H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Java code.

EXPLOIT-DB - 44422
MISC - http://blog.datomic.com/2018/03/important-security-update.html
MISC - https://forum.datomic.com/t/important-security-update-0-9-5697/379
MISC - https://mthbernardes.github.io/rce/2018/03/14/abusing-h2-database-alias.html

Vulnerable Software & Versions:

cpe:/a:h2database:h2:1.4.197

CVE-2018-14335

Severity:Medium
CVSS Score: 4.0 (AV:N/AC:L/Au:S/C:P/I:N/A:N)
CWE: CWE-275 Permission Issues

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file.

EXPLOIT-DB - 45105
MISC - https://gist.github.com/owodelta/9714faf9a86435cef5a99d4930eaee20

Vulnerable Software & Versions:

cpe:/a:h2database:h2:1.4.197

guava-24.0-jre.jar

Description:

 
    Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/com/google/guava/guava/24.0-jre/guava-24.0-jre.jar
MD5: 185a66f9779345bc780d94a621cad51e
SHA1: 041ac1e74d6b4e1ea1f027139cffeb536c732a81
SHA256:e0274470b16ba1154e926b5f54ef8ae159197fbc356406bda9b261ba67e3e599
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	com.google.guava	Medium
Vendor	pom	description	Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more.	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	Manifest	automatic-module-name	com.google.common	Medium
Vendor	pom	parent-artifactid	guava-parent	Low
Vendor	manifest	Bundle-Description	Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more.	Low
Vendor	pom	artifactid	guava	Low
Vendor	file	name	guava	High
Vendor	pom	name	Guava: Google Core Libraries for Java	High
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	description	Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more.	Low
Product	Manifest	Bundle-Name	Guava: Google Core Libraries for Java	Medium
Product	pom	groupid	com.google.guava	Low
Product	pom	parent-artifactid	guava-parent	Medium
Product	pom	artifactid	guava	Highest
Product	Manifest	automatic-module-name	com.google.common	Medium
Product	manifest	Bundle-Description	Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more.	Low
Product	file	name	guava	High
Product	pom	name	Guava: Google Core Libraries for Java	High
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	bundle-symbolicname	com.google.guava	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Version	pom	version	24.0-jre	Highest
Version	file	version	24.0	Highest

Identifiers

maven: com.google.guava:guava:24.0-jre Confidence:Highest
cpe: cpe:/a:google:guava:24.0 Confidence:Highest

Published Vulnerabilities

CVE-2018-10237

Severity:Medium
CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)
CWE: CWE-502 Deserialization of Untrusted Data

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.

CONFIRM - https://groups.google.com/d/topic/guava-announce/xqWALw4W1vs/discussion
REDHAT - RHSA-2018:2423
REDHAT - RHSA-2018:2424
REDHAT - RHSA-2018:2425
REDHAT - RHSA-2018:2428
REDHAT - RHSA-2018:2598
REDHAT - RHSA-2018:2643
REDHAT - RHSA-2018:2740
REDHAT - RHSA-2018:2741
REDHAT - RHSA-2018:2742
REDHAT - RHSA-2018:2743
REDHAT - RHSA-2018:2927
SECTRACK - 1041707

Vulnerable Software & Versions: (show all)

jsr305-1.3.9.jar

Description:

 JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/com/google/code/findbugs/jsr305/1.3.9/jsr305-1.3.9.jar
MD5: 1d5a772e400b04bb67a7ef4a0e0996d8
SHA1: 40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf
SHA256:905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	pom	description	JSR305 Annotations for Findbugs	Medium
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	jar	package name	annotation	Low
Vendor	jar	package name	javax	Low
Product	file	name	jsr305	High
Product	pom	description	JSR305 Annotations for Findbugs	Medium
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Product	pom	name	FindBugs-jsr305	High
Product	jar	package name	annotation	Low
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Low
Version	file	version	1.3.9	Highest
Version	pom	version	1.3.9	Highest

Identifiers

maven: com.google.code.findbugs:jsr305:1.3.9 Confidence:Highest

checker-compat-qual-2.0.0.jar

Description:

 
        Checker Qual is the set of annotations (qualifiers) and supporting classes
        used by the Checker Framework to type check Java source code.  Please
        see artifact:
        org.checkerframework:checker

License:

GNU General Public License, version 2 (GPL2), with the classpath exception: http://www.gnu.org/software/classpath/license.html
The MIT License: http://opensource.org/licenses/MIT

File Path: /home/paulo/.m2/repository/org/checkerframework/checker-compat-qual/2.0.0/checker-compat-qual-2.0.0.jar
MD5: b6fb2610dacd211a3e2c3d8af1b60d0f
SHA1: fc89b03860d11d6213d0154a62bcd1c2f69b9efa
SHA256:a40b2ce6d8551e5b90b1bf637064303f32944d61b52ab2014e38699df573941b
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	Checker Qual	High
Vendor	file	name	checker-compat-qual	High
Vendor	pom	artifactid	checker-compat-qual	Low
Vendor	Manifest	implementation-url	http://checkerframework.org/	Low
Vendor	pom	description	Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker	Low
Vendor	pom	url	http://checkerframework.org	Highest
Vendor	pom	groupid	org.checkerframework	Highest
Product	pom	name	Checker Qual	High
Product	file	name	checker-compat-qual	High
Product	Manifest	implementation-url	http://checkerframework.org/	Low
Product	pom	groupid	org.checkerframework	Low
Product	pom	url	http://checkerframework.org	Medium
Product	pom	description	Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker	Low
Product	pom	artifactid	checker-compat-qual	Highest
Version	pom	version	2.0.0	Highest
Version	Manifest	Implementation-Version	2.0.0	High
Version	file	version	2.0.0	Highest

Identifiers

maven: org.checkerframework:checker-compat-qual:2.0.0 Confidence:Highest

error_prone_annotations-2.1.3.jar

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/com/google/errorprone/error_prone_annotations/2.1.3/error_prone_annotations-2.1.3.jar
MD5: 97504b36cf871722d81a4b9e114f2a16
SHA1: 39b109f2cd352b2d71b52a3b5a1a9850e1dc304b
SHA256:03d0329547c13da9e17c634d1049ea2ead093925e290567e1a364fd6b1fc7ff8
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	google	Low
Vendor	pom	groupid	com.google.errorprone	Highest
Vendor	pom	name	error-prone annotations	High
Vendor	file	name	error_prone_annotations	High
Vendor	pom	artifactid	error_prone_annotations	Low
Vendor	jar	package name	annotations	Low
Vendor	jar	package name	errorprone	Low
Vendor	pom	parent-artifactid	error_prone_parent	Low
Product	pom	name	error-prone annotations	High
Product	pom	groupid	com.google.errorprone	Low
Product	pom	parent-artifactid	error_prone_parent	Medium
Product	file	name	error_prone_annotations	High
Product	jar	package name	annotations	Low
Product	jar	package name	errorprone	Low
Product	pom	artifactid	error_prone_annotations	Highest
Version	file	version	2.1.3	Highest
Version	pom	version	2.1.3	Highest

Identifiers

maven: com.google.errorprone:error_prone_annotations:2.1.3 Confidence:Highest

j2objc-annotations-1.1.jar

Description:

 
    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/com/google/j2objc/j2objc-annotations/1.1/j2objc-annotations-1.1.jar
MD5: 49ae3204bb0bb9b2ac77062641f4a6d7
SHA1: ed28ded51a8b1c6b112568def5f4b455e6809019
SHA256:2994a7eb78f2710bd3d3bfb639b2c94e219cedac0d4d084d516e78c16dddecf6
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	j2objc	Low
Vendor	jar	package name	google	Low
Vendor	pom	url	google/j2objc/	Highest
Vendor	pom	description	A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.	Low
Vendor	file	name	j2objc-annotations	High
Vendor	pom	groupid	com.google.j2objc	Highest
Vendor	pom	name	J2ObjC Annotations	High
Vendor	jar	package name	annotations	Low
Vendor	pom	artifactid	j2objc-annotations	Low
Product	pom	groupid	com.google.j2objc	Low
Product	jar	package name	j2objc	Low
Product	pom	description	A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.	Low
Product	pom	url	google/j2objc/	High
Product	file	name	j2objc-annotations	High
Product	pom	name	J2ObjC Annotations	High
Product	jar	package name	annotations	Low
Product	pom	artifactid	j2objc-annotations	Highest
Version	file	version	1.1	Highest
Version	pom	version	1.1	Highest

Identifiers

maven: com.google.j2objc:j2objc-annotations:1.1 Confidence:Highest

animal-sniffer-annotations-1.14.jar

File Path: /home/paulo/.m2/repository/org/codehaus/mojo/animal-sniffer-annotations/1.14/animal-sniffer-annotations-1.14.jar
MD5: 9d42e46845c874f1710a9f6a741f6c14
SHA1: 775b7e22fb10026eed3f86e8dc556dfafe35f2d5
SHA256:2068320bd6bad744c3673ab048f67e30bef8f518996fa380033556600669905d
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	codehaus	Low
Vendor	pom	groupid	org.codehaus.mojo	Highest
Vendor	pom	name	Animal Sniffer Annotations	High
Vendor	file	name	animal-sniffer-annotations	High
Vendor	jar	package name	animal_sniffer	Low
Vendor	jar	package name	mojo	Low
Vendor	pom	artifactid	animal-sniffer-annotations	Low
Vendor	pom	parent-artifactid	animal-sniffer-parent	Low
Product	jar	package name	ignorejrerequirement	Low
Product	pom	parent-artifactid	animal-sniffer-parent	Medium
Product	pom	groupid	org.codehaus.mojo	Low
Product	pom	name	Animal Sniffer Annotations	High
Product	pom	artifactid	animal-sniffer-annotations	Highest
Product	file	name	animal-sniffer-annotations	High
Product	jar	package name	animal_sniffer	Low
Product	jar	package name	mojo	Low
Version	pom	version	1.14	Highest
Version	file	version	1.14	Highest

Identifiers

maven: org.codehaus.mojo:animal-sniffer-annotations:1.14 Confidence:Highest

lombok-1.18.4.jar

Description:

 Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE

File Path: /home/paulo/.m2/repository/org/projectlombok/lombok/1.18.4/lombok-1.18.4.jar
MD5: a27a7ed4f61fa3424262cce02b76fde4
SHA1: 7103ab519b1cdbb0642ad4eaf1db209d905d0f96
SHA256:39f3922deb679b1852af519eb227157ef2dd0a21eec3542c8ce1b45f2df39742
Referenced In Project/Scope:springing:provided

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	lombok	High
Vendor	pom	artifactid	lombok	Low
Vendor	pom	name	Project Lombok	High
Vendor	pom	url	https://projectlombok.org	Highest
Vendor	pom	groupid	org.projectlombok	Highest
Vendor	pom	description	Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!	Low
Product	file	name	lombok	High
Product	pom	artifactid	lombok	Highest
Product	pom	groupid	org.projectlombok	Low
Product	pom	url	https://projectlombok.org	Medium
Product	pom	name	Project Lombok	High
Product	pom	description	Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!	Low
Version	pom	version	1.18.4	Highest
Version	file	version	1.18.4	Highest

Identifiers

maven: org.projectlombok:lombok:1.18.4 Confidence:Highest

spring-boot-2.1.2.RELEASE.jar

Description:

 Spring Boot

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0

File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot/2.1.2.RELEASE/spring-boot-2.1.2.RELEASE.jar
MD5: be1a03d18b763789a17235daf511e412
SHA1: ea72e00516adf1a97f0e4b023ad55e79686cefac
SHA256:5048e791d22b1659f7e23eca634ac86d158fe3f817dd3e29ec788bb040ec9214
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	file	name	spring-boot	High
Vendor	pom	parent-artifactid	spring-boot-parent	Low
Vendor	hint analyzer	vendor	vmware	High
Vendor	pom	artifactid	spring-boot	Low
Vendor	pom	name	Spring Boot	High
Vendor	hint analyzer	vendor	pivotal software	High
Vendor	Manifest	automatic-module-name	spring.boot	Medium
Vendor	pom	url	https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot	Highest
Vendor	pom	description	Spring Boot	Medium
Vendor	hint analyzer	vendor	SpringSource	High
Product	pom	parent-artifactid	spring-boot-parent	Medium
Product	pom	name	Spring Boot	High
Product	file	name	spring-boot	High
Product	Manifest	automatic-module-name	spring.boot	Medium
Product	pom	organization url	https://spring.io	Low
Product	pom	description	Spring Boot	Medium
Product	pom	groupid	org.springframework.boot	Low
Product	pom	url	https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot	Medium
Product	pom	artifactid	spring-boot	Highest
Product	Manifest	Implementation-Title	Spring Boot	High
Product	pom	organization name	Pivotal Software, Inc.	Low
Version	Manifest	Implementation-Version	2.1.2.RELEASE	High
Version	pom	version	2.1.2.RELEASE	Highest

Related Dependencies

spring-boot-starter-aop-2.1.2.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-starter-aop/2.1.2.RELEASE/spring-boot-starter-aop-2.1.2.RELEASE.jar
- MD5: 2d50b9924134b45c87e353b5a3e654ca
- SHA1: d4266d045585b54b0cef23bc725af66793d96c4c
- SHA256: 29bb40b6f1ef96c77d728d2db72e3f0e89d64cea39f11bf769a82b36f1ed16c3
spring-boot-starter-json-2.1.2.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-starter-json/2.1.2.RELEASE/spring-boot-starter-json-2.1.2.RELEASE.jar
- MD5: a2f462568e48a7a04935c1d1d16067a6
- SHA1: db59b1857966985cec2cdb81cd6cfeb315f1c849
- SHA256: 57848ac37e492cd7afb088e08ea345a985f46e044c42f4acf52de04b272c85bd
spring-boot-actuator-2.1.2.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-actuator/2.1.2.RELEASE/spring-boot-actuator-2.1.2.RELEASE.jar
- MD5: 07987e50b03e5f681c4c3db87f167d08
- SHA1: 1c31125ce64be7f8a86f4cb9248362bf1a65caf7
- SHA256: a77e8a622f08ab0e9db0f88decef9f0f74f5e97032a996864db940d4b61735ec
spring-boot-starter-data-jpa-2.1.2.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-starter-data-jpa/2.1.2.RELEASE/spring-boot-starter-data-jpa-2.1.2.RELEASE.jar
- MD5: 609a9a5a484f751f86ebf787da431c24
- SHA1: 43691a5ea941621098078a86fffaba97481a30ff
- SHA256: 9c1059432fbab6df7b9cd5091376c89d93ec013a3cc259b95a0563c58d4f24ee
spring-boot-starter-tomcat-2.1.2.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-starter-tomcat/2.1.2.RELEASE/spring-boot-starter-tomcat-2.1.2.RELEASE.jar
- MD5: 46615d9b327bfc6fe5f6360d3883a715
- SHA1: 531e2244086772d5c92a6ae0790187a5476a90d7
- SHA256: 5b66d25c6c133c4a90e202253b9aae375c27365fffb6edee6e3ae07c8552c30d
spring-boot-actuator-autoconfigure-2.1.2.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-actuator-autoconfigure/2.1.2.RELEASE/spring-boot-actuator-autoconfigure-2.1.2.RELEASE.jar
- MD5: aaff85790b1ef72225fd94b6f7b29f7c
- SHA1: 7cdc40f42dc2db9f0041cc7ebe2489659115ff8b
- SHA256: 21e064cadcf414ff4bf998f5f1ed38a9fa399673c4aed168a5eba4bf791bf5fc
spring-boot-configuration-processor-2.1.2.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-configuration-processor/2.1.2.RELEASE/spring-boot-configuration-processor-2.1.2.RELEASE.jar
- MD5: 2e8c2eebee6644002cd0742fb800f0ce
- SHA1: 0db9671c321defb942a6700fae8a7700a137a25e
- SHA256: 2d2e03901dfe1fff749825015053abe0318df33b9dc69cdd120356083c92d757
spring-boot-starter-web-2.1.2.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-starter-web/2.1.2.RELEASE/spring-boot-starter-web-2.1.2.RELEASE.jar
- MD5: a1183dfbd7f87159c011283163e24e4f
- SHA1: 33749ef5bf458829eef0e0c45615bf536521a97a
- SHA256: 878f6f6622c2e278fcea9d14bdc75133ca78821b6182c161ac63755b115469de
spring-boot-starter-logging-2.1.2.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-starter-logging/2.1.2.RELEASE/spring-boot-starter-logging-2.1.2.RELEASE.jar
- MD5: d2df1ffa1df33a00aa0a967def669a33
- SHA1: 4179271aa0ef84f0329a674f6fc83cebc75caea8
- SHA256: 965789bb604f169433150b896a7a0ac6f6697c4da971875be3d1a0d15ef6a232
spring-boot-starter-actuator-2.1.2.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-starter-actuator/2.1.2.RELEASE/spring-boot-starter-actuator-2.1.2.RELEASE.jar
- MD5: 7d6db7471a180f3be92d7ce6463a0a1a
- SHA1: 0b7828773436d58d5407c4a9601f552650dfadff
- SHA256: 77dac6a035b009aa07acddeb2eb1553585d4e7c5cce531e759fad063a7b5e7f6
spring-boot-starter-2.1.2.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-starter/2.1.2.RELEASE/spring-boot-starter-2.1.2.RELEASE.jar
- MD5: 4a0b66cb618990f31811d7d08f8aabe2
- SHA1: d2d5f6e546980503ca79e4a2e9f4e31c47c3e32f
- SHA256: 057221a9955d999f1c69c060a9f46cde075920bb4481a6c0d3ff5e8527bb0e5c
spring-boot-autoconfigure-2.1.2.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-autoconfigure/2.1.2.RELEASE/spring-boot-autoconfigure-2.1.2.RELEASE.jar
- MD5: 98653f0f39a3fa240dc94145ff2fbf95
- SHA1: 5f90ffc7937a051b38fb8322289e3d92831829bf
- SHA256: 7a07ebcb3a35885268374d54a0a8553c5b9874064502b4bb81b44b4b64e8e050
spring-boot-starter-jdbc-2.1.2.RELEASE.jar
- File Path: /home/paulo/.m2/repository/org/springframework/boot/spring-boot-starter-jdbc/2.1.2.RELEASE/spring-boot-starter-jdbc-2.1.2.RELEASE.jar
- MD5: aba0a48cbc0467d1ff594792a593da26
- SHA1: 7ab23ed460150c83dac09769dd6467b0ac5ee467
- SHA256: 6ba9981866f643320768475d8ca8753b79547c0ec11ae731f58adc3107a2eb9c

Identifiers

cpe: cpe:/a:pivotal_software:spring_boot:2.1.2 Confidence:Low
maven: org.springframework.boot:spring-boot:2.1.2.RELEASE Confidence:Highest

logback-core-1.2.3.jar

Description:

 logback-core module

License:

http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

File Path: /home/paulo/.m2/repository/ch/qos/logback/logback-core/1.2.3/logback-core-1.2.3.jar
MD5: 841fc80c6edff60d947a3872a2db4d45
SHA1: 864344400c3d4d92dfeb0a305dc87d953677c03c
SHA256:5946d837fe6f960c02a53eda7a6926ecc3c758bbdd69aa453ee429f858217f22
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-docurl	http://www.qos.ch	Low
Vendor	pom	parent-artifactid	logback-parent	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Vendor	pom	name	Logback Core Module	High
Vendor	file	name	logback-core	High
Vendor	manifest	Bundle-Description	logback-core module	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Vendor	pom	groupid	ch.qos.logback	Highest
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Vendor	pom	artifactid	logback-core	Low
Vendor	pom	description	logback-core module	Medium
Product	Manifest	bundle-docurl	http://www.qos.ch	Low
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Product	pom	name	Logback Core Module	High
Product	pom	groupid	ch.qos.logback	Low
Product	pom	parent-artifactid	logback-parent	Medium
Product	file	name	logback-core	High
Product	manifest	Bundle-Description	logback-core module	Medium
Product	pom	artifactid	logback-core	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Product	Manifest	Bundle-Name	Logback Core Module	Medium
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Product	pom	description	logback-core module	Medium
Version	pom	version	1.2.3	Highest
Version	file	version	1.2.3	Highest

Related Dependencies

Identifiers

cpe: cpe:/a:logback:logback:1.2.3 Confidence:Low
maven: ch.qos.logback:logback-core:1.2.3 Confidence:Highest

log4j-api-2.11.1.jar

Description:

 The Apache Log4j API

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/org/apache/logging/log4j/log4j-api/2.11.1/log4j-api-2.11.1.jar
MD5: fc110208241ce5b48bd07464ecc7e137
SHA1: 268f0fe4df3eefe052b57c87ec48517d64fb2a10
SHA256:493b37b5a6c49c4f5fb609b966375e4dc1783df436587584ca1dc7e861d0742b
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	name	Apache Log4j API	High
Vendor	Manifest	log4jreleasemanager	Ralph Goers	Low
Vendor	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-api/	Low
Vendor	pom	parent-artifactid	log4j	Low
Vendor	Manifest	bundle-docurl	https://www.apache.org/	Low
Vendor	file	name	log4j-api	High
Vendor	Manifest	bundle-symbolicname	org.apache.logging.log4j.api	Medium
Vendor	manifest	Bundle-Description	The Apache Log4j API	Medium
Vendor	pom	groupid	org.apache.logging.log4j	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.apache.logging.log4j	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	pom	artifactid	log4j-api	Low
Vendor	pom	description	The Apache Log4j API	Medium
Product	pom	parent-artifactid	log4j	Medium
Product	pom	name	Apache Log4j API	High
Product	Manifest	log4jreleasemanager	Ralph Goers	Low
Product	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-api/	Low
Product	Manifest	bundle-docurl	https://www.apache.org/	Low
Product	pom	groupid	org.apache.logging.log4j	Low
Product	file	name	log4j-api	High
Product	Manifest	bundle-symbolicname	org.apache.logging.log4j.api	Medium
Product	manifest	Bundle-Description	The Apache Log4j API	Medium
Product	pom	artifactid	log4j-api	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	Manifest	Bundle-Name	Apache Log4j API	Medium
Product	Manifest	specification-title	Apache Log4j API	Medium
Product	pom	description	The Apache Log4j API	Medium
Product	Manifest	Implementation-Title	Apache Log4j API	High
Version	pom	version	2.11.1	Highest
Version	Manifest	Implementation-Version	2.11.1	High
Version	file	version	2.11.1	Highest

Related Dependencies

Identifiers

maven: org.apache.logging.log4j:log4j-api:2.11.1 Confidence:Highest
cpe: cpe:/a:apache:log4j:2.11.1 Confidence:Low

jul-to-slf4j-1.7.25.jar

Description:

 JUL to SLF4J bridge

File Path: /home/paulo/.m2/repository/org/slf4j/jul-to-slf4j/1.7.25/jul-to-slf4j-1.7.25.jar
MD5: ab28124cb05fec600f2ffe37b94629e0
SHA1: 0af5364cd6679bfffb114f0dec8a157aaa283b76
SHA256:416c5a0c145ad19526e108d44b6bf77b75412d47982cce6ce8d43abdbdbb0fac
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	Manifest	bundle-symbolicname	jul.to.slf4j	Medium
Vendor	pom	artifactid	jul-to-slf4j	Low
Vendor	pom	description	JUL to SLF4J bridge	Medium
Vendor	manifest	Bundle-Description	JUL to SLF4J bridge	Medium
Vendor	file	name	jul-to-slf4j	High
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	pom	name	JUL to SLF4J bridge	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Product	Manifest	bundle-symbolicname	jul.to.slf4j	Medium
Product	pom	description	JUL to SLF4J bridge	Medium
Product	manifest	Bundle-Description	JUL to SLF4J bridge	Medium
Product	file	name	jul-to-slf4j	High
Product	pom	groupid	org.slf4j	Low
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	pom	name	JUL to SLF4J bridge	High
Product	pom	artifactid	jul-to-slf4j	Highest
Product	Manifest	Bundle-Name	jul-to-slf4j	Medium
Version	Manifest	Implementation-Version	1.7.25	High
Version	file	version	1.7.25	Highest
Version	pom	version	1.7.25	Highest

Identifiers

maven: org.slf4j:jul-to-slf4j:1.7.25 Confidence:Highest

javax.annotation-api-1.3.2.jar

Description:

 Common Annotations for the JavaTM Platform API

License:

CDDL + GPLv2 with classpath exception: https://github.com/javaee/javax.annotation/blob/master/LICENSE

File Path: /home/paulo/.m2/repository/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar
MD5: 2ab1973eefffaa2aeec47d50b9e40b9d
SHA1: 934c04d3cfef185a8008e7bf34331b79730a9d43
SHA256:e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	javax.annotation-api	High
Vendor	pom	organization name	GlassFish Community	High
Vendor	Manifest	Implementation-Vendor	GlassFish Community	High
Vendor	pom	parent-groupid	net.java	Medium
Vendor	pom	parent-artifactid	jvnet-parent	Low
Vendor	Manifest	bundle-docurl	https://javaee.github.io/glassfish	Low
Vendor	manifest	Bundle-Description	Java(TM) Common Annotations 1.3 API Design Specification	Medium
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Vendor	pom	organization url	https://javaee.github.io/glassfish	Medium
Vendor	Manifest	extension-name	javax.annotation	Medium
Vendor	pom	artifactid	javax.annotation-api	Low
Vendor	pom	name	${extension.name} API	High
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	pom	description	Common Annotations for the JavaTM Platform API	Medium
Vendor	Manifest	bundle-symbolicname	javax.annotation-api	Medium
Vendor	pom	groupid	javax.annotation	Highest
Vendor	Manifest	automatic-module-name	java.annotation	Medium
Vendor	pom	url	http://jcp.org/en/jsr/detail?id=250	Highest
Product	file	name	javax.annotation-api	High
Product	Manifest	Bundle-Name	javax.annotation API	Medium
Product	pom	organization name	GlassFish Community	Low
Product	pom	organization url	https://javaee.github.io/glassfish	Low
Product	Manifest	bundle-docurl	https://javaee.github.io/glassfish	Low
Product	manifest	Bundle-Description	Java(TM) Common Annotations 1.3 API Design Specification	Medium
Product	pom	url	http://jcp.org/en/jsr/detail?id=250	Medium
Product	pom	parent-artifactid	jvnet-parent	Medium
Product	Manifest	extension-name	javax.annotation	Medium
Product	pom	name	${extension.name} API	High
Product	pom	description	Common Annotations for the JavaTM Platform API	Medium
Product	Manifest	bundle-symbolicname	javax.annotation-api	Medium
Product	pom	groupid	javax.annotation	Low
Product	pom	parent-groupid	net.java	Low
Product	Manifest	automatic-module-name	java.annotation	Medium
Product	pom	artifactid	javax.annotation-api	Highest
Version	Manifest	Implementation-Version	1.3.2	High
Version	pom	version	1.3.2	Highest
Version	file	version	1.3.2	Highest

Identifiers

maven: javax.annotation:javax.annotation-api:1.3.2 Confidence:Highest

snakeyaml-1.23.jar

Description:

 YAML 1.1 parser and emitter for Java

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/paulo/.m2/repository/org/yaml/snakeyaml/1.23/snakeyaml-1.23.jar
MD5: 64ec8bd26b6d5034a87ecb1c8ce0efdc
SHA1: ec62d74fe50689c28c0ff5b35d3aebcaa8b5be68
SHA256:13009fb5ede3cf2be5a8d0f1602155aeaa0ce5ef5f9366892bd258d8d3d4d2b1
Referenced In Project/Scope:springing:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	pom	description	YAML 1.1 parser and emitter for Java	Medium
Vendor	file	name	snakeyaml	High
Vendor	manifest	Bundle-Description	YAML 1.1 parser and emitter for Java	Medium
Vendor	Manifest	bundle-symbolicname	org.yaml.snakeyaml	Medium
Vendor	pom	groupid	org.yaml	Highest
Vendor	pom	artifactid	snakeyaml	Low
Vendor	pom	name	SnakeYAML	High
Vendor	pom	url	http://www.snakeyaml.org	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	pom	groupid	org.yaml	Low
Product	pom	artifactid	snakeyaml	Highest
Product	pom	description	YAML 1.1 parser and emitter for Java	Medium
Product	file	name	snakeyaml	High
Product	Manifest	Bundle-Name	SnakeYAML	Medium
Product	pom	url	http://www.snakeyaml.org	Medium
Product	manifest	Bundle-Description	YAML 1.1 parser and emitter for Java	Medium
Product	Manifest	bundle-symbolicname	org.yaml.snakeyaml	Medium
Product	pom	name	SnakeYAML	High
Version	pom	version	1.23	Highest
Version	file	version	1.23	Highest

Identifiers

maven: org.yaml:snakeyaml:1.23 Confidence:Highest

micrometer-core-1.1.2.jar

Description:

 A Persistent Java Collections Library

License:

The MIT License: https://opensource.org/licenses/mit-license.php

File Path: /home/paulo/.m2/repository/io/micrometer/micrometer-core/1.1.2/micrometer-core-1.1.2.jar
MD5: 48f28cffb525c149ead7ddb7be7890f7
SHA1: 2cec164586314f33a8d7d4b727df3f6ac9a7e9cb
SHA256:cc31af6802dbb3faf0b4be5f71ad8092d82babc075645ce4071473cd11d2eec7
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	url	https://pcollections.org	Highest
Vendor	pom	groupid	org.pcollections	Highest
Vendor	Manifest	module-origin	micrometer-metrics/micrometer	Low
Vendor	Manifest	module-email	jschneider@pivotal.io	Low
Vendor	pom	name	PCollections	High
Vendor	Manifest	branch	1.1.x	Low
Vendor	pom	artifactid	pcollections	Low
Vendor	file	name	micrometer-core	High
Vendor	Manifest	module-source	/micrometer-core	Low
Vendor	pom	groupid	io.micrometer	Highest
Vendor	Manifest	change	508a594	Low
Vendor	Manifest	module-owner	jschneider@pivotal.io	Low
Vendor	pom	description	A Persistent Java Collections Library	Medium
Product	Manifest	module-origin	micrometer-metrics/micrometer	Low
Product	Manifest	Implementation-Title	io.micrometer#micrometer-core;1.1.2	High
Product	Manifest	module-email	jschneider@pivotal.io	Low
Product	pom	name	PCollections	High
Product	Manifest	branch	1.1.x	Low
Product	pom	url	https://pcollections.org	Medium
Product	file	name	micrometer-core	High
Product	Manifest	module-source	/micrometer-core	Low
Product	pom	artifactid	pcollections	Highest
Product	Manifest	change	508a594	Low
Product	Manifest	module-owner	jschneider@pivotal.io	Low
Product	pom	artifactid	micrometer-core	Highest
Product	pom	groupid	org.pcollections	Low
Product	pom	description	A Persistent Java Collections Library	Medium
Version	Manifest	Implementation-Version	1.1.2	High
Version	pom	version	3.0.3	Highest
Version	file	version	1.1.2	Highest
Version	pom	version	1.1.2	Highest

Identifiers

maven: org.pcollections:pcollections:3.0.3 Confidence:High
maven: io.micrometer:micrometer-core:1.1.2 Confidence:Highest

HdrHistogram-2.1.9.jar

Description:

 
        HdrHistogram supports the recording and analyzing sampled data value
        counts across a configurable integer value range with configurable value
        precision within the range. Value precision is expressed as the number of
        significant digits in the value recording, and provides control over value
        quantization behavior across the value range and the subsequent value
        resolution at any given level.

License:

Public Domain, per Creative Commons CC0: http://creativecommons.org/publicdomain/zero/1.0/

File Path: /home/paulo/.m2/repository/org/hdrhistogram/HdrHistogram/2.1.9/HdrHistogram-2.1.9.jar
MD5: ee302e5e7489719991aa0ca2dd67febd
SHA1: e4631ce165eb400edecfa32e03d3f1be53dee754
SHA256:95d40913be28dfd439cefea9170c40898ea84f11f25e6ff8de50339b8a7b5e3e
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	org.hdrhistogram	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	pom	artifactid	HdrHistogram	Low
Vendor	file	name	HdrHistogram	High
Vendor	pom	name	HdrHistogram	High
Vendor	Manifest	Implementation-Vendor-Id	org.hdrhistogram	Medium
Vendor	manifest	Bundle-Description	HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.	Low
Vendor	Manifest	bundle-symbolicname	org.hdrhistogram.HdrHistogram	Medium
Vendor	pom	description	HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.	Low
Vendor	pom	url	http://hdrhistogram.github.io/HdrHistogram/	Highest
Product	Manifest	Bundle-Name	HdrHistogram	Medium
Product	pom	url	http://hdrhistogram.github.io/HdrHistogram/	Medium
Product	Manifest	Implementation-Title	HdrHistogram	High
Product	pom	name	HdrHistogram	High
Product	Manifest	specification-title	HdrHistogram	Medium
Product	pom	artifactid	HdrHistogram	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	file	name	HdrHistogram	High
Product	manifest	Bundle-Description	HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.	Low
Product	Manifest	bundle-symbolicname	org.hdrhistogram.HdrHistogram	Medium
Product	pom	description	HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.	Low
Product	pom	groupid	org.hdrhistogram	Low
Version	file	version	2.1.9	Highest
Version	pom	version	2.1.9	Highest
Version	Manifest	Implementation-Version	2.1.9	High

Identifiers

maven: org.hdrhistogram:HdrHistogram:2.1.9 Confidence:Highest

LatencyUtils-2.0.3.jar

Description:

 
        LatencyUtils is a package that provides latency recording and reporting utilities.

License:

Public Domain, per Creative Commons CC0: http://creativecommons.org/publicdomain/zero/1.0/

File Path: /home/paulo/.m2/repository/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar
MD5: 2ad12e1ef7614cecfb0483fa9ac6da73
SHA1: 769c0b82cb2421c8256300e907298a9410a2a3d3
SHA256:a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	LatencyUtils	High
Vendor	jar	package name	latencyutils	Low
Vendor	pom	description	LatencyUtils is a package that provides latency recording and reporting utilities.	Medium
Vendor	pom	groupid	org.latencyutils	Highest
Vendor	pom	name	LatencyUtils	High
Vendor	pom	url	http://latencyutils.github.io/LatencyUtils/	Highest
Vendor	pom	artifactid	LatencyUtils	Low
Product	pom	url	http://latencyutils.github.io/LatencyUtils/	Medium
Product	file	name	LatencyUtils	High
Product	pom	description	LatencyUtils is a package that provides latency recording and reporting utilities.	Medium
Product	pom	artifactid	LatencyUtils	Highest
Product	pom	groupid	org.latencyutils	Low
Product	pom	name	LatencyUtils	High
Version	file	version	2.0.3	Highest
Version	pom	version	2.0.3	Highest

Identifiers

maven: org.latencyutils:LatencyUtils:2.0.3 Confidence:Highest

spring-core-5.1.4.RELEASE.jar

Description:

 Spring Core

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0

File Path: /home/paulo/.m2/repository/org/springframework/spring-core/5.1.4.RELEASE/spring-core-5.1.4.RELEASE.jar
MD5: 65b129195fe4721916ab8d837921c3aa
SHA1: e7d2ad03a50ebff117a6efe2e0e3f15946d0768a
SHA256:9f2bde81a26d1c54f60d888219be305d86d094d7262ca9faa1bae0558a95fcb6
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	spring-core	Low
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	pom	organization name	Spring IO	High
Vendor	file	name	spring-core	High
Vendor	Manifest	automatic-module-name	spring.core	Medium
Vendor	pom	groupid	org.springframework	Highest
Vendor	hint analyzer	vendor	vmware	High
Vendor	hint analyzer	vendor	pivotal software	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	organization url	http://projects.spring.io/spring-framework	Medium
Vendor	hint analyzer	vendor	SpringSource	High
Vendor	pom	name	Spring Core	High
Vendor	pom	description	Spring Core	Medium
Product	file	name	spring-core	High
Product	Manifest	Implementation-Title	spring-core	High
Product	Manifest	automatic-module-name	spring.core	Medium
Product	pom	groupid	org.springframework	Low
Product	pom	artifactid	spring-core	Highest
Product	pom	organization name	Spring IO	Low
Product	pom	url	spring-projects/spring-framework	High
Product	hint analyzer	product	springsource_spring_framework	High
Product	pom	name	Spring Core	High
Product	pom	organization url	http://projects.spring.io/spring-framework	Low
Product	pom	description	Spring Core	Medium
Version	pom	version	5.1.4.RELEASE	Highest
Version	Manifest	Implementation-Version	5.1.4.RELEASE	High

Identifiers

cpe: cpe:/a:pivotal_software:spring_framework:5.1.4 Confidence:Low
cpe: cpe:/a:pivotal:spring_framework:5.1.4 Confidence:Low
cpe: cpe:/a:vmware:springsource_spring_framework:5.1.4 Confidence:Low
maven: org.springframework:spring-core:5.1.4.RELEASE Confidence:Highest
cpe: cpe:/a:springsource:spring_framework:5.1.4 Confidence:Low

byte-buddy-1.9.7.jar (shaded: net.bytebuddy:byte-buddy-dep:1.9.7)

Description:

 
        Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with a remaining dependency onto ASM.
        You should never depend on this module without repackaging Byte Buddy and ASM into your own namespace.

File Path: /home/paulo/.m2/repository/net/bytebuddy/byte-buddy/1.9.7/byte-buddy-1.9.7.jar/META-INF/maven/net.bytebuddy/byte-buddy-dep/pom.xml
MD5: f1f80ac92fc8efa5ca1f100b363335eb
SHA1: 7085b201ff3c60eba9e16ef07c0b271790ad114c
SHA256:de20f3a142ef8cb2e5cb34190f867bf3ffd50fc5f855441979eb9847f80176fc
Referenced In Project/Scope:springing:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	byte-buddy-dep	Low
Vendor	pom	groupid	net.bytebuddy	Highest
Vendor	pom	parent-artifactid	byte-buddy-parent	Low
Vendor	pom	description	Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with a remaining dependency onto ASM. You should never depend on this module without repackaging Byte Buddy and ASM into your own namespace.	Low
Vendor	pom	name	Byte Buddy (with dependencies)	High
Product	pom	groupid	net.bytebuddy	Low
Product	pom	artifactid	byte-buddy-dep	Highest
Product	pom	description	Byte Buddy is a Java library for creating Java classes at run time. This artifact is a build of Byte Buddy with a remaining dependency onto ASM. You should never depend on this module without repackaging Byte Buddy and ASM into your own namespace.	Low
Product	pom	parent-artifactid	byte-buddy-parent	Medium
Product	pom	name	Byte Buddy (with dependencies)	High
Version	pom	version	1.9.7	Highest

Identifiers

maven: net.bytebuddy:byte-buddy-dep:1.9.7 Confidence:High

How to read the report | Suppressing false positives | Getting Help: google group | github issues

Project: springing

net.technearts:rest-two-datasources:0.1.0

Dependencies

spring-boot-starter-data-rest-2.1.2.RELEASE.jar

Evidence

Identifiers

tomcat-embed-core-9.0.14.jar

Evidence

Related Dependencies

Identifiers

tomcat-embed-el-9.0.14.jar

Evidence

Identifiers

hibernate-validator-6.0.14.Final.jar

Evidence

Identifiers

validation-api-2.0.1.Final.jar

Evidence

Identifiers

spring-data-rest-core-3.1.4.RELEASE.jar

Evidence

Related Dependencies

Identifiers

spring-hateoas-0.25.0.RELEASE.jar

Evidence

Identifiers

spring-plugin-core-1.2.0.RELEASE.jar

Evidence

Identifiers

evo-inflector-1.2.2.jar

Evidence

Identifiers

jackson-databind-2.9.8.jar

Evidence

Identifiers

jackson-core-2.9.8.jar

Evidence

Related Dependencies

Identifiers

jackson-annotations-2.9.0.jar

Evidence

Identifiers

slf4j-api-1.7.25.jar

Evidence

Identifiers

aspectjweaver-1.9.2.jar

Evidence

Identifiers

HikariCP-3.2.0.jar

Evidence

Identifiers

javax.transaction-api-1.3.jar

Evidence

Identifiers

jaxb-api-2.3.1.jar

Evidence

Identifiers

javax.activation-api-1.2.0.jar

Evidence

Identifiers

hibernate-core-5.3.7.Final.jar

Evidence

Identifiers

jboss-logging-3.3.2.Final.jar

Evidence

Identifiers

javax.persistence-api-2.2.jar

Evidence

Identifiers

javassist-3.23.1-GA.jar

Evidence

Identifiers

byte-buddy-1.9.7.jar

Evidence

Identifiers

antlr-2.7.7.jar

Evidence

Identifiers

jandex-2.0.5.Final.jar