Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 5.3.2
Report Generated On: Mon, 20 Apr 2020 20:12:12 +0200
Dependencies Scanned: 42 (33 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE Checked: 2020-04-20T20:09:46
NVD CVE Modified: 2020-04-20T18:03:43
VersionCheckOn: 2020-04-19T10:27:56

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
commons-beanutils-1.9.4.jar	cpe:2.3:a:apache:commons_beanutils:1.9.4:::::::*	pkg:maven/commons-beanutils/commons-beanutils@1.9.4	Highest	41
commons-collections-3.2.2.jar	cpe:2.3:a:apache:commons_collections:3.2.2:::::::*	pkg:maven/commons-collections/commons-collections@3.2.2	Highest	41
commons-fileupload-1.4.jar	cpe:2.3:a:apache:commons_fileupload:1.4:::::::*	pkg:maven/commons-fileupload/commons-fileupload@1.4	Highest	40
commons-io-2.6.jar		pkg:maven/commons-io/commons-io@2.6		40
commons-lang3-3.10.jar		pkg:maven/org.apache.commons/commons-lang3@3.10		40
commons-logging-1.2.jar		pkg:maven/commons-logging/commons-logging@1.2		36
commons-text-1.8.jar		pkg:maven/org.apache.commons/commons-text@1.8		41
freemarker-2.3.30.jar		pkg:maven/org.freemarker/freemarker@2.3.30		44
jackson-core-2.10.3.jar	cpe:2.3:a:fasterxml:jackson:2.10.3:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.3	Highest	45
jackson-databind-2.10.3.jar	cpe:2.3:a:fasterxml:jackson:2.10.3:::::::* cpe:2.3:a:fasterxml:jackson-databind:2.10.3:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.3	Highest	39
jakarta.activation-api-1.2.1.jar		pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1		32
jakarta.xml.bind-api-2.3.2.jar		pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2		29
javassist-3.24.1-GA.jar		pkg:maven/org.javassist/javassist@3.24.1-GA		26
juneau-marshall-8.1.3.jar		pkg:maven/org.apache.juneau/juneau-marshall@8.1.3		32
log4j-api-2.13.1.jar	cpe:2.3:a:apache:log4j:2.13.1:::::::*	pkg:maven/org.apache.logging.log4j/log4j-api@2.13.1	Highest	46
ognl-3.2.14.jar	cpe:2.3:a:ognl_project:ognl:3.2.14:::::::*	pkg:maven/ognl/ognl@3.2.14	Highest	20
spring-core-4.3.26.RELEASE.jar	cpe:2.3:a:pivotal_software:spring_framework:4.3.26:release:::::: cpe:2.3:a:springsource:spring_framework:4.3.26:release:::::: cpe:2.3:a:vmware:springsource_spring_framework:4.3.26:release::::::	pkg:maven/org.springframework/spring-core@4.3.26.RELEASE	Highest	28
stax2-api-4.2.jar		pkg:maven/org.codehaus.woodstox/stax2-api@4.2		48
struts2-core-2.6-SNAPSHOT.jar	cpe:2.3:a:apache:struts:2.6:snapshot::::::	pkg:maven/org.apache.struts/struts2-core@2.6-20200419.094131-295 pkg:maven/org.apache.struts/struts2-core@2.6-SNAPSHOT	Highest	38
struts2-core-2.6-SNAPSHOT.jar: domTT.js				0
struts2-core-2.6-SNAPSHOT.jar: inputtransferselect.js				0
struts2-core-2.6-SNAPSHOT.jar: jshint.conf.js				0
struts2-core-2.6-SNAPSHOT.jar: optiontransferselect.js				0
struts2-core-2.6-SNAPSHOT.jar: utils.js				0
struts2-core-2.6-SNAPSHOT.jar: validation.js				0
struts2-core-2.6-SNAPSHOT.jar: validation.js				0
struts2-core-2.6-SNAPSHOT.jar: webconsole.js				0
woodstox-core-6.1.1.jar		pkg:maven/com.fasterxml.woodstox/woodstox-core@6.1.1		41
woodstox-core-6.1.1.jar (shaded: com.sun.xml.bind.jaxb:isorelax:20090621)		pkg:maven/com.sun.xml.bind.jaxb/isorelax@20090621		12
woodstox-core-6.1.1.jar (shaded: net.java.dev.msv:xsdlib:2013.6.1)		pkg:maven/net.java.dev.msv/xsdlib@2013.6.1		9
xmlpull-1.1.3.1.jar		pkg:maven/xmlpull/xmlpull@1.1.3.1		17
xpp3_min-1.1.4c.jar		pkg:maven/xpp3/xpp3_min@1.1.4c		23
xstream-1.4.11.1.jar	cpe:2.3:a:xstream_project:xstream:1.4.11.1:::::::*	pkg:maven/com.thoughtworks.xstream/xstream@1.4.11.1	Highest	59

Dependencies

commons-beanutils-1.9.4.jar

Description:

Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/commons-beanutils/commons-beanutils/1.9.4/commons-beanutils-1.9.4.jar
MD5: 07dc532ee316fe1f2f0323e9bd2f8df4
SHA1: d52b9abcd97f38c81342bb7e7ae1eee9b73cba51
SHA256:7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	url	https://commons.apache.org/proper/commons-beanutils/	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-beanutils	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	groupid	commons-beanutils	Highest
Vendor	jar	package name	apache	Highest
Vendor	Manifest	implementation-build	UNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-beanutils/	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	file	name	commons-beanutils	High
Vendor	Manifest	implementation-url	https://commons.apache.org/proper/commons-beanutils/	Low
Vendor	pom	artifactid	commons-beanutils	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	name	Apache Commons BeanUtils	High
Vendor	jar	package name	beanutils	Highest
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	Bundle-Name	Apache Commons BeanUtils	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-beanutils	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	jar	package name	apache	Highest
Product	pom	groupid	commons-beanutils	Highest
Product	Manifest	implementation-build	UNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000	Low
Product	Manifest	Implementation-Title	Apache Commons BeanUtils	High
Product	Manifest	specification-title	Apache Commons BeanUtils	Medium
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-beanutils/	Low
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	file	name	commons-beanutils	High
Product	Manifest	implementation-url	https://commons.apache.org/proper/commons-beanutils/	Low
Product	pom	artifactid	commons-beanutils	Highest
Product	pom	url	https://commons.apache.org/proper/commons-beanutils/	Medium
Product	pom	name	Apache Commons BeanUtils	High
Product	jar	package name	beanutils	Highest
Version	Manifest	Implementation-Version	1.9.4	High
Version	pom	parent-version	1.9.4	Low
Version	Manifest	Bundle-Version	1.9.4	High
Version	file	version	1.9.4	High
Version	pom	version	1.9.4	Highest

Identifiers

pkg:maven/commons-beanutils/commons-beanutils@1.9.4 (Confidence:High)
cpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:* (Confidence:Highest)

commons-collections-3.2.2.jar

Description:

Types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256:eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-collections	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.3))"	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	Manifest	bundle-docurl	http://commons.apache.org/collections/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	groupid	commons-collections	Highest
Vendor	jar	package name	collections	Highest
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	Manifest	implementation-build	tags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100	Low
Vendor	Manifest	implementation-url	http://commons.apache.org/collections/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.collections	Medium
Vendor	pom	artifactid	commons-collections	Low
Vendor	pom	url	http://commons.apache.org/collections/	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	name	Apache Commons Collections	High
Vendor	pom	parent-artifactid	commons-parent	Low
Product	file	name	commons-collections	High
Product	Manifest	Bundle-Name	Apache Commons Collections	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.3))"	Low
Product	pom	url	http://commons.apache.org/collections/	Medium
Product	pom	artifactid	commons-collections	Highest
Product	jar	package name	apache	Highest
Product	Manifest	bundle-docurl	http://commons.apache.org/collections/	Low
Product	Manifest	specification-title	Apache Commons Collections	Medium
Product	pom	groupid	commons-collections	Highest
Product	jar	package name	collections	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	Manifest	implementation-build	tags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100	Low
Product	Manifest	implementation-url	http://commons.apache.org/collections/	Low
Product	Manifest	bundle-symbolicname	org.apache.commons.collections	Medium
Product	Manifest	Implementation-Title	Apache Commons Collections	High
Product	pom	name	Apache Commons Collections	High
Version	Manifest	Bundle-Version	3.2.2	High
Version	file	version	3.2.2	High
Version	Manifest	Implementation-Version	3.2.2	High
Version	pom	version	3.2.2	Highest
Version	pom	parent-version	3.2.2	Low

Identifiers

pkg:maven/commons-collections/commons-collections@3.2.2 (Confidence:High)
cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:* (Confidence:Highest)

commons-fileupload-1.4.jar

Description:

    The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart
    file upload functionality to servlets and web applications.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/commons-fileupload/commons-fileupload/1.4/commons-fileupload-1.4.jar
MD5: 0c3b924dcaaa90c3fb93fe04ae96a35e
SHA1: f95188e3d372e20e7328706c37ef366e5d7859b0
SHA256:a4ec02336f49253ea50405698b79232b8c5cbf02cb60df3a674d77a749a1def7
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-fileupload/	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	fileupload	Highest
Vendor	pom	url	http://commons.apache.org/proper/commons-fileupload/	Highest
Vendor	pom	groupid	commons-fileupload	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	artifactid	commons-fileupload	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	Manifest	implementation-url	http://commons.apache.org/proper/commons-fileupload/	Low
Vendor	Manifest	implementation-build	UNKNOWN@r047f31576411beee69cf75584ae76531cc9ac753; 2018-12-24 07:06:18+0000	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	name	Apache Commons FileUpload	High
Vendor	file	name	commons-fileupload	High
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-fileupload	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	specification-title	Apache Commons FileUpload	Medium
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-fileupload/	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	jar	package name	apache	Highest
Product	jar	package name	fileupload	Highest
Product	Manifest	Implementation-Title	Apache Commons FileUpload	High
Product	Manifest	Bundle-Name	Apache Commons FileUpload	Medium
Product	pom	groupid	commons-fileupload	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	pom	url	http://commons.apache.org/proper/commons-fileupload/	Medium
Product	Manifest	implementation-url	http://commons.apache.org/proper/commons-fileupload/	Low
Product	pom	artifactid	commons-fileupload	Highest
Product	Manifest	implementation-build	UNKNOWN@r047f31576411beee69cf75584ae76531cc9ac753; 2018-12-24 07:06:18+0000	Low
Product	pom	name	Apache Commons FileUpload	High
Product	file	name	commons-fileupload	High
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-fileupload	Medium
Version	pom	parent-version	1.4	Low
Version	pom	version	1.4	Highest
Version	file	version	1.4	High
Version	Manifest	Implementation-Version	1.4	High

Identifiers

pkg:maven/commons-fileupload/commons-fileupload@1.4 (Confidence:High)
cpe:2.3:a:apache:commons_fileupload:1.4:*:*:*:*:*:*:* (Confidence:Highest)

commons-io-2.6.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/commons-io/commons-io/2.6/commons-io-2.6.jar
MD5: 467c2a1f64319c99b5faf03fc78572af
SHA1: 815893df5f31da2ece4040fe0a12fd44b577afaf
SHA256:f877d304660ac2a142f3865badfc971dec7ed73c747c7f8d5d2f5139ca736513
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	org.apache.commons.io	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-io/	Low
Vendor	pom	groupid	commons-io	Highest
Vendor	jar	package name	apache	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	url	http://commons.apache.org/proper/commons-io/	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	Manifest	implementation-url	http://commons.apache.org/proper/commons-io/	Low
Vendor	file	name	commons-io	High
Vendor	jar	package name	io	Highest
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	pom	name	Apache Commons IO	High
Vendor	Manifest	automatic-module-name	org.apache.commons.io	Medium
Vendor	pom	artifactid	commons-io	Low
Vendor	Manifest	Implementation-Vendor-Id	commons-io	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	Implementation-Title	Apache Commons IO	High
Product	Manifest	bundle-symbolicname	org.apache.commons.io	Medium
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-io/	Low
Product	jar	package name	apache	Highest
Product	Manifest	specification-title	Apache Commons IO	Medium
Product	pom	groupid	commons-io	Highest
Product	pom	url	http://commons.apache.org/proper/commons-io/	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	Manifest	implementation-url	http://commons.apache.org/proper/commons-io/	Low
Product	file	name	commons-io	High
Product	jar	package name	io	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	pom	name	Apache Commons IO	High
Product	pom	artifactid	commons-io	Highest
Product	Manifest	Bundle-Name	Apache Commons IO	Medium
Product	Manifest	automatic-module-name	org.apache.commons.io	Medium
Version	pom	version	2.6	Highest
Version	Manifest	Implementation-Version	2.6	High
Version	pom	parent-version	2.6	Low
Version	file	version	2.6	High

Identifiers

pkg:maven/commons-io/commons-io@2.6 (Confidence:High)

commons-lang3-3.10.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/commons/commons-lang3/3.10/commons-lang3-3.10.jar
MD5: 238dcae7363dd86b2e515a2a29e8b4d9
SHA1: e155460aaf5b464062a09c3923f089ce99128a17
SHA256:28968ae55fff465494083aeba856f8824c34902329882bf61e77246a91e25aa9
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Vendor	pom	name	Apache Commons Lang	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	artifactid	commons-lang3	Low
Vendor	file	name	commons-lang3	High
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	url	https://commons.apache.org/proper/commons-lang/	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	jar	package name	lang3	Highest
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Vendor	pom	groupid	apache.commons	Highest
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Product	pom	name	Apache Commons Lang	High
Product	jar	package name	apache	Highest
Product	Manifest	specification-title	Apache Commons Lang	Medium
Product	file	name	commons-lang3	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	jar	package name	lang3	Highest
Product	pom	artifactid	commons-lang3	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Apache Commons Lang	High
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Product	pom	groupid	apache.commons	Highest
Product	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Product	Manifest	Bundle-Name	Apache Commons Lang	Medium
Product	pom	url	https://commons.apache.org/proper/commons-lang/	Medium
Version	file	version	3.10	High
Version	pom	version	3.10	Highest
Version	Manifest	Implementation-Version	3.10	High
Version	pom	parent-version	3.10	Low

Identifiers

pkg:maven/org.apache.commons/commons-lang3@3.10 (Confidence:High)

commons-logging-1.2.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/commons-logging/commons-logging/1.2/commons-logging-1.2.jar
MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686
SHA256:daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-logging/	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	logging	Highest
Vendor	pom	groupid	commons-logging	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.commons.logging	Medium
Vendor	pom	artifactid	commons-logging	Low
Vendor	Manifest	implementation-build	tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200	Low
Vendor	file	name	commons-logging	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	name	Apache Commons Logging	High
Vendor	pom	url	http://commons.apache.org/proper/commons-logging/	Highest
Product	Manifest	Implementation-Title	Apache Commons Logging	High
Product	pom	url	http://commons.apache.org/proper/commons-logging/	Medium
Product	jar	package name	apache	Highest
Product	pom	artifactid	commons-logging	Highest
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-logging/	Low
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	jar	package name	logging	Highest
Product	Manifest	specification-title	Apache Commons Logging	Medium
Product	pom	groupid	commons-logging	Highest
Product	Manifest	bundle-symbolicname	org.apache.commons.logging	Medium
Product	Manifest	implementation-build	tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200	Low
Product	Manifest	Bundle-Name	Apache Commons Logging	Medium
Product	file	name	commons-logging	High
Product	pom	name	Apache Commons Logging	High
Version	pom	parent-version	1.2	Low
Version	pom	version	1.2	Highest
Version	Manifest	Implementation-Version	1.2	High
Version	file	version	1.2	High

Identifiers

pkg:maven/commons-logging/commons-logging@1.2 (Confidence:High)

commons-text-1.8.jar

Description:

Apache Commons Text is a library focused on algorithms working on strings.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/commons/commons-text/1.8/commons-text-1.8.jar
MD5: f2243d67b348e7175f55902cdb7e54af
SHA1: 879a6bde4c0537a25504c72ec7a94ba4099f469c
SHA256:6fe7ad4ad5349d6b77e7a0e1c9f6037108a1ee48c42e7e6eb4b18f56d324f7b2
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	url	https://commons.apache.org/proper/commons-text	Highest
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-text	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	jar	package name	text	Highest
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	pom	groupid	apache.commons	Highest
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	file	name	commons-text	High
Vendor	Manifest	implementation-url	https://commons.apache.org/proper/commons-text	Low
Vendor	pom	artifactid	commons-text	Low
Vendor	Manifest	automatic-module-name	org.apache.commons.text	Medium
Vendor	pom	name	Apache Commons Text	High
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-text	Medium
Vendor	Manifest	Implementation-Vendor-Id	org.apache.commons	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	Bundle-Name	Apache Commons Text	Medium
Product	jar	package name	apache	Highest
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-text	Low
Product	Manifest	Implementation-Title	Apache Commons Text	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	specification-title	Apache Commons Text	Medium
Product	jar	package name	text	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	pom	groupid	apache.commons	Highest
Product	file	name	commons-text	High
Product	Manifest	implementation-url	https://commons.apache.org/proper/commons-text	Low
Product	pom	artifactid	commons-text	Highest
Product	Manifest	automatic-module-name	org.apache.commons.text	Medium
Product	pom	name	Apache Commons Text	High
Product	pom	url	https://commons.apache.org/proper/commons-text	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-text	Medium
Version	pom	parent-version	1.8	Low
Version	Manifest	Implementation-Version	1.8	High
Version	file	version	1.8	High
Version	pom	version	1.8	Highest

Identifiers

pkg:maven/org.apache.commons/commons-text@1.8 (Confidence:High)

freemarker-2.3.30.jar

Description:

    FreeMarker is a "template engine"; a generic tool to generate text output based on templates.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/freemarker/freemarker/2.3.30/freemarker-2.3.30.jar
MD5: e702848d716f17cd39fabfe2415e104e
SHA1: 86d70d335c7821178f62b554aa3a4bc538a94f1a
SHA256:6586433d90957c0b05a32bce07c71e8cebcea6afbea2e043bfe0c576c4d94338
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor	freemarker.org	High
Vendor	jar	package name	template	Highest
Vendor	pom	groupid	org.freemarker	Highest
Vendor	pom	url	https://freemarker.apache.org/	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8, JavaSE-1.7, JavaSE-1.6, J2SE-1.5	Low
Vendor	pom	name	Apache FreeMarker	High
Vendor	pom	groupid	freemarker	Highest
Vendor	jar	package name	freemarker	Highest
Vendor	pom	parent-groupid	org.apache	Medium
Vendor	Manifest	extension-name	FreeMarker	Medium
Vendor	pom	parent-artifactid	apache	Low
Vendor	Manifest	dstamp	20200216	Low
Vendor	pom	artifactid	freemarker	Low
Vendor	Manifest	today	February 16 2020	Low
Vendor	pom	organization name	Apache Software Foundation	High
Vendor	pom	organization url	http://apache.org	Medium
Vendor	Manifest	tstamp	1915	Low
Vendor	file	name	freemarker	High
Vendor	Manifest	bundle-symbolicname	org.freemarker.freemarker	Medium
Vendor	Manifest	specification-vendor	freemarker.org	Low
Product	jar	package name	template	Highest
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8, JavaSE-1.7, JavaSE-1.6, J2SE-1.5	Low
Product	pom	name	Apache FreeMarker	High
Product	pom	groupid	freemarker	Highest
Product	pom	artifactid	freemarker	Highest
Product	jar	package name	freemarker	Highest
Product	Manifest	Bundle-Name	org.freemarker.freemarker	Medium
Product	pom	parent-groupid	org.apache	Medium
Product	pom	url	https://freemarker.apache.org/	Medium
Product	Manifest	extension-name	FreeMarker	Medium
Product	pom	organization url	http://apache.org	Low
Product	Manifest	dstamp	20200216	Low
Product	pom	organization name	Apache Software Foundation	Low
Product	Manifest	today	February 16 2020	Low
Product	Manifest	specification-title	FreeMarker	Medium
Product	Manifest	tstamp	1915	Low
Product	file	name	freemarker	High
Product	Manifest	bundle-symbolicname	org.freemarker.freemarker	Medium
Product	Manifest	Implementation-Title	FreeMarker	High
Product	pom	parent-artifactid	apache	Medium
Version	Manifest	Implementation-Version	2.3.30	High
Version	pom	version	2.3.30	Highest
Version	file	version	2.3.30	High
Version	pom	parent-version	2.3.30	Low

Identifiers

pkg:maven/org.freemarker/freemarker@2.3.30 (Confidence:High)

jackson-core-2.10.3.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.10.3/jackson-core-2.10.3.jar
MD5: 8f84e33a1c06b8fd16b4166b9fc8331b
SHA1: f7ee7b55c7d292ac72fbaa7648c089f069c938d2
SHA256:fb185f7e6ecba1e2b4803788d278faa023312ca6d3109b2fa146d9e0435a9494
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	implementation-build-date	2020-03-03 03:11:48+0000	Low
Vendor	pom	artifactid	jackson-core	Low
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Vendor	pom	name	Jackson-core	High
Vendor	pom	groupid	fasterxml.jackson.core	Highest
Vendor	jar	package name	json	Highest
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	pom	url	FasterXML/jackson-core	Highest
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	file	name	jackson-core	High
Vendor	jar	package name	base	Highest
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Vendor	jar	package name	jackson	Highest
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	jar	package name	core	Highest
Product	pom	parent-artifactid	jackson-base	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	implementation-build-date	2020-03-03 03:11:48+0000	Low
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Product	pom	name	Jackson-core	High
Product	jar	package name	version	Highest
Product	jar	package name	json	Highest
Product	pom	groupid	fasterxml.jackson.core	Highest
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	Manifest	specification-title	Jackson-core	Medium
Product	jar	package name	filter	Highest
Product	jar	package name	fasterxml	Highest
Product	Manifest	Implementation-Title	Jackson-core	High
Product	Manifest	Bundle-Name	Jackson-core	Medium
Product	file	name	jackson-core	High
Product	pom	url	FasterXML/jackson-core	High
Product	jar	package name	base	Highest
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Product	jar	package name	jackson	Highest
Product	pom	artifactid	jackson-core	Highest
Product	jar	package name	core	Highest
Version	pom	version	2.10.3	Highest
Version	file	version	2.10.3	High
Version	Manifest	Bundle-Version	2.10.3	High
Version	Manifest	Implementation-Version	2.10.3	High

Related Dependencies

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.3 (Confidence:High)
cpe:2.3:a:fasterxml:jackson:2.10.3:*:*:*:*:*:*:* (Confidence:Highest)

jackson-databind-2.10.3.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.10.3/jackson-databind-2.10.3.jar
MD5: f96c78787ea2830e8dfd3a5a66c4f664
SHA1: aae92628b5447fa25af79871ca98668da6edd439
SHA256:50eec40443f387be50a409186165298aaadbb6c4d4826d319720e245714600d2
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	implementation-build-date	2020-03-03 03:15:23+0000	Low
Vendor	jar	package name	databind	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	pom	groupid	fasterxml.jackson.core	Highest
Vendor	pom	name	jackson-databind	High
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	artifactid	jackson-databind	Low
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	file	name	jackson-databind	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Vendor	jar	package name	jackson	Highest
Vendor	pom	url	http://github.com/FasterXML/jackson	Highest
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Product	pom	parent-artifactid	jackson-base	Medium
Product	Manifest	specification-title	jackson-databind	Medium
Product	Manifest	implementation-build-date	2020-03-03 03:15:23+0000	Low
Product	jar	package name	databind	Highest
Product	Manifest	Bundle-Name	jackson-databind	Medium
Product	Manifest	Implementation-Title	jackson-databind	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	pom	groupid	fasterxml.jackson.core	Highest
Product	pom	name	jackson-databind	High
Product	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	pom	url	http://github.com/FasterXML/jackson	Medium
Product	jar	package name	fasterxml	Highest
Product	file	name	jackson-databind	High
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Product	jar	package name	jackson	Highest
Product	pom	artifactid	jackson-databind	Highest
Version	pom	version	2.10.3	Highest
Version	file	version	2.10.3	High
Version	Manifest	Bundle-Version	2.10.3	High
Version	Manifest	Implementation-Version	2.10.3	High

Related Dependencies

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.3 (Confidence:High)
cpe:2.3:a:fasterxml:jackson:2.10.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:fasterxml:jackson-databind:2.10.3:*:*:*:*:*:*:* (Confidence:Highest)

jakarta.activation-api-1.2.1.jar

Description:

JavaBeans Activation Framework API jar

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /Users/lukaszlenart/.m2/repository/jakarta/activation/jakarta.activation-api/1.2.1/jakarta.activation-api-1.2.1.jar
MD5: 9b647398add993324d3d9e5effa6005a
SHA1: 562a587face36ec7eff2db7f2fc95425c6602bc1
SHA256:8b0a0f52fa8b05c5431921a063ed866efaa41dadf2e3a7ee3e1961f2b0d9645b
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	activation	Highest
Vendor	file	name	jakarta.activation-api	High
Vendor	pom	groupid	jakarta.activation	Highest
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	Implementation-Vendor-Id	com.sun	Medium
Vendor	Manifest	extension-name	jakarta.activation	Medium
Vendor	pom	name	JavaBeans Activation Framework API jar	High
Vendor	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Vendor	Manifest	automatic-module-name	jakarta.activation	Medium
Vendor	pom	artifactid	jakarta.activation-api	Low
Vendor	pom	parent-groupid	com.sun.activation	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	pom	parent-artifactid	all	Low
Product	jar	package name	activation	Highest
Product	file	name	jakarta.activation-api	High
Product	pom	groupid	jakarta.activation	Highest
Product	Manifest	Implementation-Title	jakarta.activation.jakarta.activation-api	High
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	JavaBeans Activation Framework API jar	Medium
Product	Manifest	extension-name	jakarta.activation	Medium
Product	pom	name	JavaBeans Activation Framework API jar	High
Product	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Product	Manifest	automatic-module-name	jakarta.activation	Medium
Product	pom	parent-groupid	com.sun.activation	Medium
Product	pom	parent-artifactid	all	Medium
Product	Manifest	specification-title	jakarta.activation.jakarta.activation-api	Medium
Product	pom	artifactid	jakarta.activation-api	Highest
Version	Manifest	Implementation-Version	1.2.1	High
Version	pom	version	1.2.1	Highest
Version	Manifest	Bundle-Version	1.2.1	High
Version	file	version	1.2.1	High

Identifiers

pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1 (Confidence:High)

jakarta.xml.bind-api-2.3.2.jar

Description:

JAXB (JSR 222) API

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /Users/lukaszlenart/.m2/repository/jakarta/xml/bind/jakarta.xml.bind-api/2.3.2/jakarta.xml.bind-api-2.3.2.jar
MD5: dabb40ba58199304c640b7bd8bb2fbac
SHA1: 8d49996a4338670764d7ca4b85a1c4ccf7fe665d
SHA256:69156304079bdeed9fc0ae3b39389f19b3cc4ba4443bc80508995394ead742ea
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.xml.bind-api	High
Vendor	pom	parent-artifactid	jakarta.xml.bind-api-parent	Low
Vendor	jar	package name	xml	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	extension-name	jakarta.xml.bind	Medium
Vendor	Manifest	implementation-build-id	UNKNOWN-18b5002, 2018-12-27T15:29:49+0000	Low
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	bundle-symbolicname	jakarta.xml.bind-api	Medium
Vendor	jar	package name	bind	Highest
Vendor	pom	artifactid	jakarta.xml.bind-api	Low
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	pom	groupid	jakarta.xml.bind	Highest
Product	pom	artifactid	jakarta.xml.bind-api	Highest
Product	file	name	jakarta.xml.bind-api	High
Product	jar	package name	jaxb	Highest
Product	pom	parent-artifactid	jakarta.xml.bind-api-parent	Medium
Product	Manifest	Bundle-Name	jakarta.xml.bind-api	Medium
Product	jar	package name	xml	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	extension-name	jakarta.xml.bind	Medium
Product	Manifest	implementation-build-id	UNKNOWN-18b5002, 2018-12-27T15:29:49+0000	Low
Product	Manifest	multi-release	true	Low
Product	Manifest	bundle-symbolicname	jakarta.xml.bind-api	Medium
Product	jar	package name	bind	Highest
Product	pom	groupid	jakarta.xml.bind	Highest
Version	Manifest	Bundle-Version	2.3.2	High
Version	Manifest	Implementation-Version	2.3.2	High
Version	file	version	2.3.2	High
Version	pom	version	2.3.2	Highest

Identifiers

pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2 (Confidence:High)

javassist-3.24.1-GA.jar

Description:

  	Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.

License:

MPL 1.1: http://www.mozilla.org/MPL/MPL-1.1.html
LGPL 2.1: http://www.gnu.org/licenses/lgpl-2.1.html
Apache License 2.0: http://www.apache.org/licenses/

File Path: /Users/lukaszlenart/.m2/repository/org/javassist/javassist/3.24.1-GA/javassist-3.24.1-GA.jar
MD5: 527cebd64b0f941d5058bae3d1726d06
SHA1: 921b466d6a14a8edbe25923c973fd767fc71c045
SHA256:5d57ea5b0ec8cb46143dfe521f888b208028be126f274cc4f852e641755f1553
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	javassist	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	jar	package name	javassist	Highest
Vendor	pom	organization name	Shigeru Chiba, www.javassist.org	High
Vendor	pom	artifactid	javassist	Low
Vendor	pom	name	Javassist	High
Vendor	pom	groupid	org.javassist	Highest
Vendor	pom	url	http://www.javassist.org/	Highest
Vendor	jar	package name	bytecode	Highest
Vendor	Manifest	specification-vendor	Shigeru Chiba, www.javassist.org	Low
Vendor	pom	groupid	javassist	Highest
Vendor	Manifest	bundle-symbolicname	javassist	Medium
Product	file	name	javassist	High
Product	pom	artifactid	javassist	Highest
Product	pom	organization name	Shigeru Chiba, www.javassist.org	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	jar	package name	javassist	Highest
Product	Manifest	Bundle-Name	Javassist	Medium
Product	pom	name	Javassist	High
Product	pom	url	http://www.javassist.org/	Medium
Product	Manifest	specification-title	Javassist	Medium
Product	jar	package name	bytecode	Highest
Product	pom	groupid	javassist	Highest
Product	Manifest	bundle-symbolicname	javassist	Medium
Version	Manifest	specification-version	3.24.1-GA	High
Version	pom	version	3.24.1-GA	Highest

Identifiers

pkg:maven/org.javassist/javassist@3.24.1-GA (Confidence:High)

juneau-marshall-8.1.3.jar

Description:

Apache Juneau Marshall API

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/juneau/juneau-marshall/8.1.3/juneau-marshall-8.1.3.jar
MD5: ea60a00e21ed59dd8ad7b2b9b919c8a8
SHA1: f1e06cee7b3da2ba627166690765b0d6e6a3c104
SHA256:d0c5dbf783581a767e857341daff6928d5a76a1627b7980a8b34622ee522995d
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	juneau	Highest
Vendor	pom	artifactid	juneau-marshall	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	parent-artifactid	juneau-core	Low
Vendor	Manifest	automatic-module-name	org.apache.juneau.marshall	Medium
Vendor	pom	name	juneau/core/marshall	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	parent-groupid	org.apache.juneau	Medium
Vendor	Manifest	bundle-docurl	https://www.apache.org/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.juneau.marshall	Medium
Vendor	jar	package name	marshall	Highest
Vendor	pom	groupid	apache.juneau	Highest
Vendor	pom	groupid	org.apache.juneau	Highest
Vendor	file	name	juneau-marshall	High
Product	jar	package name	juneau	Highest
Product	jar	package name	apache	Highest
Product	Manifest	automatic-module-name	org.apache.juneau.marshall	Medium
Product	pom	name	juneau/core/marshall	High
Product	jar	package name	version	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	Bundle-Name	juneau/core/marshall	Medium
Product	pom	parent-groupid	org.apache.juneau	Medium
Product	Manifest	bundle-docurl	https://www.apache.org/	Low
Product	pom	parent-artifactid	juneau-core	Medium
Product	pom	artifactid	juneau-marshall	Highest
Product	Manifest	bundle-symbolicname	org.apache.juneau.marshall	Medium
Product	jar	package name	marshall	Highest
Product	pom	groupid	apache.juneau	Highest
Product	file	name	juneau-marshall	High
Version	Manifest	Bundle-Version	8.1.3	High
Version	file	version	8.1.3	High
Version	pom	version	8.1.3	Highest

Identifiers

pkg:maven/org.apache.juneau/juneau-marshall@8.1.3 (Confidence:High)

log4j-api-2.13.1.jar

Description:

The Apache Log4j API

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/logging/log4j/log4j-api/2.13.1/log4j-api-2.13.1.jar
MD5: 65795ba3dfef693a82bdfb369d030439
SHA1: cc670f92dc77bbf4540904c3fa211b997cba00d8
SHA256:307fffc2623d010e3fe67d9f6b101c14bae33ec310e5f56960d491885fd59630
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor-Id	org.apache.logging.log4j	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	groupid	apache.logging.log4j	Highest
Vendor	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-api/	Low
Vendor	Manifest	log4jreleasekey	B3D8E1BA	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	parent-groupid	org.apache.logging.log4j	Medium
Vendor	Manifest	log4jreleasemanager	Ralph Goers	Low
Vendor	pom	groupid	org.apache.logging.log4j	Highest
Vendor	jar	package name	logging	Highest
Vendor	file	name	log4j-api	High
Vendor	Manifest	bundle-docurl	https://www.apache.org/	Low
Vendor	pom	parent-artifactid	log4j	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	name	Apache Log4j API	High
Vendor	jar	package name	org	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.logging.log4j.api	Medium
Vendor	pom	artifactid	log4j-api	Low
Vendor	jar	package name	log4j	Highest
Product	Manifest	Implementation-Title	Apache Log4j API	High
Product	jar	package name	apache	Highest
Product	pom	groupid	apache.logging.log4j	Highest
Product	Manifest	specification-title	Apache Log4j API	Medium
Product	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-api/	Low
Product	Manifest	log4jreleasekey	B3D8E1BA	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	parent-groupid	org.apache.logging.log4j	Medium
Product	Manifest	log4jreleasemanager	Ralph Goers	Low
Product	jar	package name	logging	Highest
Product	file	name	log4j-api	High
Product	Manifest	bundle-docurl	https://www.apache.org/	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	log4j-api	Highest
Product	pom	name	Apache Log4j API	High
Product	jar	package name	org	Highest
Product	pom	parent-artifactid	log4j	Medium
Product	Manifest	Bundle-Name	Apache Log4j API	Medium
Product	Manifest	bundle-symbolicname	org.apache.logging.log4j.api	Medium
Product	jar	package name	log4j	Highest
Version	file	version	2.13.1	High
Version	pom	version	2.13.1	Highest
Version	Manifest	Implementation-Version	2.13.1	High
Version	Manifest	Bundle-Version	2.13.1	High
Version	Manifest	log4jreleaseversion	2.13.1	Medium

Identifiers

pkg:maven/org.apache.logging.log4j/log4j-api@2.13.1 (Confidence:High)
cpe:2.3:a:apache:log4j:2.13.1:*:*:*:*:*:*:* (Confidence:Highest)

ognl-3.2.14.jar

Description:

OGNL - Object Graph Navigation Library

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/ognl/ognl/3.2.14/ognl-3.2.14.jar
MD5: 0baa4d72fcb508e100c821518e5cdf19
SHA1: 18178dd7cfcb8b81c262c072b60a5bf701073917
SHA256:02da5bd743cbaab1ebb61a17844b122f52cc69d10b23a8e3356f55c1e6988e71
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	ognl	Low
Vendor	pom	organization url	http://www.opensymphony.com	Medium
Vendor	pom	name	OGNL - Object Graph Navigation Library	High
Vendor	pom	organization name	OpenSymphony	High
Vendor	pom	groupid	ognl	Highest
Vendor	file	name	ognl	High
Vendor	Manifest	automatic-module-name	ognl	Medium
Vendor	pom	url	jkuhnert/ognl/	Highest
Vendor	jar	package name	ognl	Highest
Product	pom	url	jkuhnert/ognl/	High
Product	pom	name	OGNL - Object Graph Navigation Library	High
Product	pom	artifactid	ognl	Highest
Product	pom	groupid	ognl	Highest
Product	file	name	ognl	High
Product	Manifest	automatic-module-name	ognl	Medium
Product	jar	package name	ognl	Highest
Product	pom	organization name	OpenSymphony	Low
Product	pom	organization url	http://www.opensymphony.com	Low
Version	file	version	3.2.14	High
Version	pom	version	3.2.14	Highest

Identifiers

pkg:maven/ognl/ognl@3.2.14 (Confidence:High)
cpe:2.3:a:ognl_project:ognl:3.2.14:*:*:*:*:*:*:* (Confidence:Highest)

spring-core-4.3.26.RELEASE.jar

Description:

Spring Core

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /Users/lukaszlenart/.m2/repository/org/springframework/spring-core/4.3.26.RELEASE/spring-core-4.3.26.RELEASE.jar
MD5: ec39a4f76633c98bc4819e397355b8aa
SHA1: a8b090664504b833e2d5d1e6863138cee1239681
SHA256:70ae68ce99fdb11afaaac6487b39b59b7a8db6ecd5f8a2c01181b7b9c3b15a1d
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	springframework	Highest
Vendor	pom	artifactid	spring-core	Low
Vendor	pom	groupid	org.springframework	Highest
Vendor	pom	organization name	Spring IO	High
Vendor	file	name	spring-core	High
Vendor	pom	organization url	https://projects.spring.io/spring-framework	Medium
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	io	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	jar	package name	springframework	Highest
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	pom	name	Spring Core	High
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	jar	package name	core	Highest
Product	pom	groupid	springframework	Highest
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	file	name	spring-core	High
Product	pom	artifactid	spring-core	Highest
Product	jar	package name	io	Highest
Product	pom	organization name	Spring IO	Low
Product	Manifest	Implementation-Title	spring-core	High
Product	jar	package name	springframework	Highest
Product	pom	organization url	https://projects.spring.io/spring-framework	Low
Product	pom	url	spring-projects/spring-framework	High
Product	pom	name	Spring Core	High
Product	jar	package name	core	Highest
Version	pom	version	4.3.26.RELEASE	Highest
Version	Manifest	Implementation-Version	4.3.26.RELEASE	High

Related Dependencies

spring-test-4.3.26.RELEASE.jar
- File Path: /Users/lukaszlenart/.m2/repository/org/springframework/spring-test/4.3.26.RELEASE/spring-test-4.3.26.RELEASE.jar
- MD5: 2bd1645c9b39b85bf74174a6c95e24c5
- SHA1: 60921b6c34f3bf7ccd7845708adee8c30998d226
- SHA256: a9fb06a6c06d3742ade19cae7ae56946c7555311ee6ccd5fd0f578865cd4d319
- pkg:maven/org.springframework/spring-test@4.3.26.RELEASE
spring-expression-4.3.26.RELEASE.jar
- File Path: /Users/lukaszlenart/.m2/repository/org/springframework/spring-expression/4.3.26.RELEASE/spring-expression-4.3.26.RELEASE.jar
- MD5: 17f4d8bb75f966e57df82bd27396fc4a
- SHA1: 52e4f81cff6b604db4a0a664c452a9e222841f87
- SHA256: 9d64c105349a571dc3c42057ba0bebc6da4fa1d58dce2faf8260aab7ed90a83e
- pkg:maven/org.springframework/spring-expression@4.3.26.RELEASE
spring-beans-4.3.26.RELEASE.jar
- File Path: /Users/lukaszlenart/.m2/repository/org/springframework/spring-beans/4.3.26.RELEASE/spring-beans-4.3.26.RELEASE.jar
- MD5: 1510412e1af00c1beabe47f87e6c1777
- SHA1: 536bb74d60a86882c58bd6f63a82e5760261c37f
- SHA256: fd7d135ee5dfa3d72ba4f195ba42127b84968c3bc12fb1a2496512778f5b3c77
- pkg:maven/org.springframework/spring-beans@4.3.26.RELEASE
spring-context-4.3.26.RELEASE.jar
- File Path: /Users/lukaszlenart/.m2/repository/org/springframework/spring-context/4.3.26.RELEASE/spring-context-4.3.26.RELEASE.jar
- MD5: 008d9631dcd62027c49715aea5de2476
- SHA1: 7c91199fb7086d02febf7f6ec19c41644e4ca29a
- SHA256: d371617271d3567bad8ce52722ace120579698664be7f0809b14f1927398ebdc
- pkg:maven/org.springframework/spring-context@4.3.26.RELEASE
spring-web-4.3.26.RELEASE.jar
- File Path: /Users/lukaszlenart/.m2/repository/org/springframework/spring-web/4.3.26.RELEASE/spring-web-4.3.26.RELEASE.jar
- MD5: 9d556ced11008277e89bf1a8c4ac8686
- SHA1: 9c17e176b359da9e8b3eb69b97c0607aafe85543
- SHA256: 8e37c8c6063c6436a582e344904cc5302d7b5459ea6c050afb04de88ca2039e3
- pkg:maven/org.springframework/spring-web@4.3.26.RELEASE
spring-aop-4.3.26.RELEASE.jar
- File Path: /Users/lukaszlenart/.m2/repository/org/springframework/spring-aop/4.3.26.RELEASE/spring-aop-4.3.26.RELEASE.jar
- MD5: a1f6737fa66b99284c5fb16b96696014
- SHA1: 098f5eb6a6b3a2c2e6ee9eacd016a953c54fd3a3
- SHA256: bd12ca116d9094efbd98ae1539b18014c7e48cf3ca2efc2022295ac1aeb5c15b
- pkg:maven/org.springframework/spring-aop@4.3.26.RELEASE

Identifiers

pkg:maven/org.springframework/spring-core@4.3.26.RELEASE (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:4.3.26:release:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:4.3.26:release:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:springsource_spring_framework:4.3.26:release:*:*:*:*:*:* (Confidence:Low)

stax2-api-4.2.jar

Description:

tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.

License:

The BSD License: http://www.opensource.org/licenses/bsd-license.php

File Path: /Users/lukaszlenart/.m2/repository/org/codehaus/woodstox/stax2-api/4.2/stax2-api-4.2.jar
MD5: 5d22fe6dbb276d1fd6dab40c386a4f0a
SHA1: 13c2b30926bca0429c704c4b4ca0b5d0432b69cd
SHA256:badf6081a0bb526fd2c01951dfefad91b6846b6dd0eb0048587e30d1dd334e68
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	implementation-build-date	2019-03-13 04:03:16+0000	Low
Vendor	pom	parent-artifactid	oss-parent	Low
Vendor	pom	groupid	codehaus.woodstox	Highest
Vendor	pom	organization name	fasterxml.com	High
Vendor	Manifest	specification-vendor	fasterxml.com	Low
Vendor	pom	groupid	org.codehaus.woodstox	Highest
Vendor	jar	package name	stax2	Highest
Vendor	jar	package name	typed	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.codehaus.woodstox	Medium
Vendor	Manifest	bundle-docurl	http://github.com/FasterXML/stax2-api	Low
Vendor	pom	parent-groupid	com.fasterxml	Medium
Vendor	pom	artifactid	stax2-api	Low
Vendor	jar	package name	codehaus	Highest
Vendor	pom	name	Stax2 API	High
Vendor	Manifest	automatic-module-name	org.codehaus.stax2	Medium
Vendor	jar	package name	validation	Highest
Vendor	Manifest	Implementation-Vendor	fasterxml.com	High
Vendor	pom	organization url	http://fasterxml.com	Medium
Vendor	file	name	stax2-api	High
Vendor	pom	url	http://github.com/FasterXML/stax2-api	Highest
Vendor	Manifest	bundle-symbolicname	stax2-api	Medium
Product	Manifest	Implementation-Title	Stax2 API	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	implementation-build-date	2019-03-13 04:03:16+0000	Low
Product	pom	groupid	codehaus.woodstox	Highest
Product	pom	artifactid	stax2-api	Highest
Product	jar	package name	stax2	Highest
Product	jar	package name	typed	Highest
Product	pom	url	http://github.com/FasterXML/stax2-api	Medium
Product	jar	package name	osgi	Highest
Product	pom	parent-artifactid	oss-parent	Medium
Product	pom	organization url	http://fasterxml.com	Low
Product	pom	organization name	fasterxml.com	Low
Product	Manifest	specification-title	Stax2 API	Medium
Product	Manifest	bundle-docurl	http://github.com/FasterXML/stax2-api	Low
Product	pom	parent-groupid	com.fasterxml	Medium
Product	jar	package name	codehaus	Highest
Product	pom	name	Stax2 API	High
Product	Manifest	automatic-module-name	org.codehaus.stax2	Medium
Product	jar	package name	validation	Highest
Product	Manifest	Bundle-Name	Stax2 API	Medium
Product	file	name	stax2-api	High
Product	Manifest	bundle-symbolicname	stax2-api	Medium
Version	pom	parent-version	4.2	Low
Version	file	version	4.2	High
Version	Manifest	Implementation-Version	4.2	High
Version	pom	version	4.2	Highest

Identifiers

pkg:maven/org.codehaus.woodstox/stax2-api@4.2 (Confidence:High)

struts2-core-2.6-SNAPSHOT.jar

Description:

Apache Struts 2

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar
MD5: bdabb37e4b04f29f4ca390fa2aefce44
SHA1: 64a03701b6797529aaa7cb200f803b7b26c6bb3f
SHA256:e2932ae7ddfa0747221ea42a6d12263237248e3ab9c2ed12b162c13a06147183
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Vendor	jar	package name	struts2	Highest
Vendor	Manifest	implementation-url	http://struts.apache.org/struts2-core/	Low
Vendor	pom	groupid	apache.struts	Highest
Vendor	Manifest	bundle-docurl	http://www.apache.org	Low
Vendor	jar	package name	apache	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	artifactid	struts2-core	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache.struts	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	name	Struts 2 Core	High
Vendor	Manifest	specification-vendor	Apache Software Foundation	Low
Vendor	pom	parent-artifactid	struts2-parent	Low
Vendor	file	name	struts2-core	High
Vendor	pom	groupid	org.apache.struts	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.struts.2-core	Medium
Vendor	Manifest	Implementation-Vendor	Apache Software Foundation	High
Vendor	pom	parent-groupid	org.apache.struts	Medium
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Product	jar	package name	struts2	Highest
Product	Manifest	implementation-url	http://struts.apache.org/struts2-core/	Low
Product	pom	groupid	apache.struts	Highest
Product	pom	parent-artifactid	struts2-parent	Medium
Product	Manifest	bundle-docurl	http://www.apache.org	Low
Product	jar	package name	apache	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	artifactid	struts2-core	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	name	Struts 2 Core	High
Product	jar	package name	filter	Highest
Product	Manifest	Bundle-Name	Struts 2 Core	Medium
Product	file	name	struts2-core	High
Product	Manifest	bundle-symbolicname	org.apache.struts.2-core	Medium
Product	pom	parent-groupid	org.apache.struts	Medium
Product	Manifest	Implementation-Title	Struts 2 Core	High
Product	Manifest	specification-title	Struts 2 Core	Medium
Version	Manifest	Implementation-Version	2.6-SNAPSHOT	High
Version	pom	version	2.6-SNAPSHOT	Highest

Identifiers

pkg:maven/org.apache.struts/struts2-core@2.6-20200419.094131-295 (Confidence:Highest)
pkg:maven/org.apache.struts/struts2-core@2.6-SNAPSHOT (Confidence:High)
cpe:2.3:a:apache:struts:2.6:snapshot:*:*:*:*:*:* (Confidence:Highest)

struts2-core-2.6-SNAPSHOT.jar: domTT.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/static/domTT.js
MD5: 44ed51154c7fa928005f39bbbed7d01a
SHA1: 5584aa1028220f041ff7d89c48e9e8ffeaa05256
SHA256:60c72fad5a9688fc6a143176d84814b9ea2c4c9c882b4799921b950c415b961e
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: inputtransferselect.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/static/inputtransferselect.js
MD5: 2955e039eab5ef8216705c05d239f378
SHA1: 94316238b9eb45a97e2547fa66881cca27a5b6ee
SHA256:e5ef24f60cfb27a88880ee89ba6eb4664bbebe0c32d3dc1ce385cbe6d8b01194
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: jshint.conf.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/jshint.conf.js
MD5: 7b7c2d7894e972b45298ea8d533008d7
SHA1: 5a88e8d212d51cdc3ac0305978dfc483ce25fa25
SHA256:15942ecb04925afc65666d3d8f758ed0e65f90f7b5faec2b7381e29e397200c6
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: optiontransferselect.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/static/optiontransferselect.js
MD5: f4194635b442cd6a9354132eb1f5c544
SHA1: 51fd3c3d66bed260a48bcc1bc9f56c799acab501
SHA256:2028278976d9adfaa90186556cca99bbd476df3818155161d877272b738cc762
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: utils.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/static/utils.js
MD5: a1287feb0882f494dc6ebfbdcb2c8d6a
SHA1: 61201962d41fec8139c940c5a1468796d49a6139
SHA256:309abee1bddd03fe16c196e2cc00b58318ff707764824d9b71a38f667736720d
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: validation.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/template/xhtml/validation.js
MD5: dea68bdb50b41aee5fc61170e3faf14e
SHA1: affda7d0fecb0d16b9ebfc119833ec50ee920b4b
SHA256:fdbcbc87e6495252ff1d697712e1604733d1cf6299b2f7075fdc27c2fa23687e
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: validation.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/template/css_xhtml/validation.js
MD5: c66d23a2391879f74077a1af7888ede7
SHA1: c4c980b34207fbca373f2032c770371606220da2
SHA256:ec4dc0658f00c3a64e9a890565a3dfb71678babb484d2960c22f123c10f2c03c
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: webconsole.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/interceptor/debugging/webconsole.js
MD5: a7202aefd2637c63ee607db0a608c6de
SHA1: 5618fb1f032d4972287158e5754570992448695d
SHA256:9ab03200e9abb3ddb95ee83321b518d660ba0734683c3a6844c633a5c5dbabfd
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Identifiers

None

woodstox-core-6.1.1.jar

Description:

        Woodstox is a high-performance XML processor that
        implements Stax (JSR-173), SAX2 and Stax2 APIs

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/com/fasterxml/woodstox/woodstox-core/6.1.1/woodstox-core-6.1.1.jar
MD5: 992e39013de489a1373f14b7e153f9da
SHA1: 989bb31963ed1758b95c7c4381a91592a9a8df61
SHA256:f250662a245570fdd49c6916c1c3cd3d6511a8e5cd0d7460e989844b1d66ed67
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	url	FasterXML/woodstox	Highest
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.woodstox	Medium
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/woodstox	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	pom	parent-artifactid	oss-parent	Low
Vendor	file	name	woodstox-core	High
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	groupid	com.fasterxml.woodstox	Highest
Vendor	pom	parent-groupid	com.fasterxml	Medium
Vendor	pom	name	Woodstox	High
Vendor	pom	groupid	fasterxml.woodstox	Highest
Vendor	Manifest	implementation-build-date	2020-02-28 02:50:45+0000	Low
Vendor	pom	organization url	http://fasterxml.com	Medium
Vendor	jar	package name	stax	Highest
Vendor	pom	organization name	FasterXML	High
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	bundle-symbolicname	com.fasterxml.woodstox.woodstox-core	Medium
Vendor	pom	artifactid	woodstox-core	Low
Product	Manifest	bundle-docurl	https://github.com/FasterXML/woodstox	Low
Product	Manifest	Implementation-Title	Woodstox	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	specification-title	Woodstox	Medium
Product	pom	artifactid	woodstox-core	Highest
Product	pom	url	FasterXML/woodstox	High
Product	file	name	woodstox-core	High
Product	Manifest	Bundle-Name	Woodstox	Medium
Product	jar	package name	osgi	Highest
Product	pom	parent-artifactid	oss-parent	Medium
Product	pom	organization url	http://fasterxml.com	Low
Product	pom	parent-groupid	com.fasterxml	Medium
Product	pom	name	Woodstox	High
Product	pom	groupid	fasterxml.woodstox	Highest
Product	pom	organization name	FasterXML	Low
Product	Manifest	implementation-build-date	2020-02-28 02:50:45+0000	Low
Product	jar	package name	stax	Highest
Product	Manifest	bundle-symbolicname	com.fasterxml.woodstox.woodstox-core	Medium
Version	pom	version	6.1.1	Highest
Version	pom	parent-version	6.1.1	Low
Version	file	version	6.1.1	High
Version	Manifest	Bundle-Version	6.1.1	High
Version	Manifest	Implementation-Version	6.1.1	High

Identifiers

pkg:maven/com.fasterxml.woodstox/woodstox-core@6.1.1 (Confidence:High)

woodstox-core-6.1.1.jar (shaded: com.sun.xml.bind.jaxb:isorelax:20090621)

Description:

Unknown version of isorelax library used in JAXB project

File Path: /Users/lukaszlenart/.m2/repository/com/fasterxml/woodstox/woodstox-core/6.1.1/woodstox-core-6.1.1.jar/META-INF/maven/com.sun.xml.bind.jaxb/isorelax/pom.xml
MD5: 6fbb4bc95fbf2072bc6e3b790553fe81
SHA1: 314ec72948d5c1fc71d553cbbd7a130caa6f9f13
SHA256:cda6451d0231a973352b592ff950e39224ba6ba1a2f35eeab66511b5c225dff1
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-artifactid	jvnet-parent	Low
Vendor	pom	name	JAXB isorelax library	High
Vendor	pom	parent-groupid	net.java	Medium
Vendor	pom	artifactid	isorelax	Low
Vendor	pom	groupid	sun.xml.bind.jaxb	Highest
Product	pom	name	JAXB isorelax library	High
Product	pom	artifactid	isorelax	Highest
Product	pom	parent-artifactid	jvnet-parent	Medium
Product	pom	parent-groupid	net.java	Medium
Product	pom	groupid	sun.xml.bind.jaxb	Highest
Version	pom	version	20090621	Highest
Version	pom	parent-version	20090621	Low

Identifiers

pkg:maven/com.sun.xml.bind.jaxb/isorelax@20090621 (Confidence:High)

woodstox-core-6.1.1.jar (shaded: net.java.dev.msv:xsdlib:2013.6.1)

Description:

XML Schema datatypes library

File Path: /Users/lukaszlenart/.m2/repository/com/fasterxml/woodstox/woodstox-core/6.1.1/woodstox-core-6.1.1.jar/META-INF/maven/net.java.dev.msv/xsdlib/pom.xml
MD5: aaf872ed9d1aabee25e03c2a132ffd8e
SHA1: 47f218a999411ed028f089d59ebef8f14e0fe914
SHA256:d6e83c124436049d83238fc532a26c5d8ccd7e4ab10eba6d96043c850ac82f3c
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	net.java.dev.msv	Highest
Vendor	pom	parent-artifactid	msv	Low
Vendor	pom	artifactid	xsdlib	Low
Vendor	pom	name	MSV XML Schema Library	High
Product	pom	artifactid	xsdlib	Highest
Product	pom	parent-artifactid	msv	Medium
Product	pom	groupid	net.java.dev.msv	Highest
Product	pom	name	MSV XML Schema Library	High
Version	pom	version	2013.6.1	Highest

Identifiers

pkg:maven/net.java.dev.msv/xsdlib@2013.6.1 (Confidence:High)

xmlpull-1.1.3.1.jar

License:

Public Domain: http://www.xmlpull.org/v1/download/unpacked/LICENSE.txt

File Path: /Users/lukaszlenart/.m2/repository/xmlpull/xmlpull/1.1.3.1/xmlpull-1.1.3.1.jar
MD5: cc57dacc720eca721a50e78934b822d2
SHA1: 2b8e230d2ab644e4ecaa94db7cdedbc40c805dfa
SHA256:34e08ee62116071cbb69c0ed70d15a7a5b208d62798c59f2120bb8929324cb63
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	xmlpull	Highest
Vendor	pom	name	XML Pull Parsing API	High
Vendor	pom	url	http://www.xmlpull.org	Highest
Vendor	jar	package name	xmlpull	Low
Vendor	jar	package name	v1	Low
Vendor	file	name	xmlpull	High
Vendor	jar	package name	xmlpull	Highest
Vendor	pom	artifactid	xmlpull	Low
Product	pom	groupid	xmlpull	Highest
Product	pom	name	XML Pull Parsing API	High
Product	pom	artifactid	xmlpull	Highest
Product	pom	url	http://www.xmlpull.org	Medium
Product	jar	package name	v1	Low
Product	file	name	xmlpull	High
Product	jar	package name	xmlpull	Highest
Version	file	version	1.1.3.1	High
Version	pom	version	1.1.3.1	Highest

Identifiers

pkg:maven/xmlpull/xmlpull@1.1.3.1 (Confidence:High)

xpp3_min-1.1.4c.jar

Description:

MXP1 is a stable XmlPull parsing engine that is based on ideas from XPP and in particular XPP2 but completely revised and rewritten to take the best advantage of latest JIT JVMs such as Hotspot in JDK 1.4+.

License:

Indiana University Extreme! Lab Software License, vesion 1.1.1: http://www.extreme.indiana.edu/viewcvs/~checkout~/XPP3/java/LICENSE.txt
Public Domain: http://creativecommons.org/licenses/publicdomain

File Path: /Users/lukaszlenart/.m2/repository/xpp3/xpp3_min/1.1.4c/xpp3_min-1.1.4c.jar
MD5: dcd95bcb84b09897b2b66d4684c040da
SHA1: 19d4e90b43059058f6e056f794f0ea4030d60b86
SHA256:bfc90e9e32d0eab1f397fb974b5f150a815188382ac41f372a7149d5bc178008
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization url	http://www.extreme.indiana.edu/	Medium
Vendor	pom	url	http://www.extreme.indiana.edu/xgws/xsoap/xpp/mxp1/	Highest
Vendor	pom	artifactid	xpp3_min	Low
Vendor	jar	package name	xmlpull	Low
Vendor	jar	package name	mxp1	Highest
Vendor	pom	name	MXP1: Xml Pull Parser 3rd Edition (XPP3)	High
Vendor	file	name	xpp3_min	High
Vendor	pom	organization name	Extreme! Lab, Indiana University	High
Vendor	pom	groupid	xpp3	Highest
Vendor	jar	package name	v1	Low
Vendor	jar	package name	xmlpull	Highest
Product	pom	artifactid	xpp3_min	Highest
Product	pom	organization name	Extreme! Lab, Indiana University	Low
Product	jar	package name	mxp1	Highest
Product	pom	organization url	http://www.extreme.indiana.edu/	Low
Product	pom	url	http://www.extreme.indiana.edu/xgws/xsoap/xpp/mxp1/	Medium
Product	pom	name	MXP1: Xml Pull Parser 3rd Edition (XPP3)	High
Product	file	name	xpp3_min	High
Product	pom	groupid	xpp3	Highest
Product	jar	package name	v1	Low
Product	jar	package name	xmlpull	Highest
Version	pom	version	1.1.4c	Highest
Version	file	version	1.1.4c	High

Identifiers

pkg:maven/xpp3/xpp3_min@1.1.4c (Confidence:High)

xstream-1.4.11.1.jar

Description:

XStream is a serialization library from Java objects to XML and back.

License:

http://x-stream.github.io/license.html

File Path: /Users/lukaszlenart/.m2/repository/com/thoughtworks/xstream/xstream/1.4.11.1/xstream-1.4.11.1.jar
MD5: 0eb564c0c83b6d4fea7ff1a9cc5bc6bc
SHA1: 6c120c45a8c480bb2fea5b56502e3993ddd74fd2
SHA256:5e59757590948b5a08ec946f6eb69fb25927c465125370b1a7861261dafc6b36
Referenced In Project/Scope:Struts 2 REST Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	java_1_6_home	/opt/sun-jdk-1.6.0.45	Low
Vendor	Manifest	x-compile-source	1.4	Low
Vendor	Manifest	x-compile-target	1.4	Low
Vendor	Manifest	Implementation-Vendor-Id	com.thoughtworks.xstream	Medium
Vendor	jar	package name	xstream	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	groupid	thoughtworks.xstream	Highest
Vendor	pom	name	XStream Core	High
Vendor	pom	groupid	com.thoughtworks.xstream	Highest
Vendor	Manifest	java_1_5_home	/opt/sun-jdk-1.5.0.22	Low
Vendor	Manifest	x-build-time	2018-10-26T19:06:47Z	Low
Vendor	Manifest	bundle-symbolicname	xstream	Medium
Vendor	Manifest	java_1_8_home	/opt/oracle-jdk-bin-1.8.0.192	Low
Vendor	pom	artifactid	xstream	Low
Vendor	Manifest	x-build-os	Linux	Low
Vendor	jar	package name	core	Highest
Vendor	Manifest	java_1_4_home	/opt/blackdown-jdk-1.4.2.03	Low
Vendor	Manifest	java_1_7_home	/opt/oracle-jdk-bin-1.7.0.80	Low
Vendor	Manifest	x-builder	Maven 3.5.4	Low
Vendor	file	name	xstream	High
Vendor	jar	package name	thoughtworks	Highest
Vendor	pom	parent-artifactid	xstream-parent	Low
Vendor	Manifest	specification-vendor	XStream	Low
Vendor	Manifest	java_9_home	/opt/oracle-jdk-bin-9.0.4	Low
Vendor	pom	parent-groupid	com.thoughtworks.xstream	Medium
Vendor	Manifest	bundle-docurl	http://x-stream.github.io	Low
Vendor	Manifest	Implementation-Vendor	XStream	High
Product	pom	artifactid	xstream	Highest
Product	Manifest	java_1_6_home	/opt/sun-jdk-1.6.0.45	Low
Product	Manifest	x-compile-source	1.4	Low
Product	Manifest	x-compile-target	1.4	Low
Product	jar	package name	xstream	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	groupid	thoughtworks.xstream	Highest
Product	pom	name	XStream Core	High
Product	Manifest	Bundle-Name	XStream Core	Medium
Product	Manifest	java_1_5_home	/opt/sun-jdk-1.5.0.22	Low
Product	Manifest	x-build-time	2018-10-26T19:06:47Z	Low
Product	Manifest	bundle-symbolicname	xstream	Medium
Product	Manifest	java_1_8_home	/opt/oracle-jdk-bin-1.8.0.192	Low
Product	Manifest	specification-title	XStream Core	Medium
Product	Manifest	x-build-os	Linux	Low
Product	jar	package name	core	Highest
Product	Manifest	java_1_4_home	/opt/blackdown-jdk-1.4.2.03	Low
Product	Manifest	java_1_7_home	/opt/oracle-jdk-bin-1.7.0.80	Low
Product	Manifest	x-builder	Maven 3.5.4	Low
Product	file	name	xstream	High
Product	jar	package name	thoughtworks	Highest
Product	jar	package name	xml	Highest
Product	jar	package name	io	Highest
Product	Manifest	java_9_home	/opt/oracle-jdk-bin-9.0.4	Low
Product	pom	parent-artifactid	xstream-parent	Medium
Product	pom	parent-groupid	com.thoughtworks.xstream	Medium
Product	Manifest	bundle-docurl	http://x-stream.github.io	Low
Product	Manifest	Implementation-Title	XStream Core	High
Version	file	version	1.4.11.1	High
Version	pom	version	1.4.11.1	Highest
Version	Manifest	Implementation-Version	1.4.11.1	High
Version	Manifest	Bundle-Version	1.4.11.1	High

Identifiers

pkg:maven/com.thoughtworks.xstream/xstream@1.4.11.1 (Confidence:High)
cpe:2.3:a:xstream_project:xstream:1.4.11.1:*:*:*:*:*:*:* (Confidence:Highest)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: Struts 2 REST Plugin

org.apache.struts:struts2-rest-plugin:2.6-SNAPSHOT

Summary

Dependencies

commons-beanutils-1.9.4.jar

Evidence

Identifiers

commons-collections-3.2.2.jar

Evidence

Identifiers

commons-fileupload-1.4.jar

Evidence

Identifiers

commons-io-2.6.jar

Evidence

Identifiers

commons-lang3-3.10.jar

Evidence

Identifiers

commons-logging-1.2.jar

Evidence

Identifiers

commons-text-1.8.jar

Evidence

Identifiers

freemarker-2.3.30.jar

Evidence

Identifiers

jackson-core-2.10.3.jar

Evidence

Related Dependencies

Identifiers

jackson-databind-2.10.3.jar

Evidence

Related Dependencies

Identifiers

jakarta.activation-api-1.2.1.jar

Evidence

Identifiers

jakarta.xml.bind-api-2.3.2.jar

Evidence

Identifiers

javassist-3.24.1-GA.jar

Evidence

Identifiers

juneau-marshall-8.1.3.jar

Evidence

Identifiers

log4j-api-2.13.1.jar

Evidence

Identifiers

ognl-3.2.14.jar

Evidence

Identifiers

spring-core-4.3.26.RELEASE.jar

Evidence

Related Dependencies

Identifiers

stax2-api-4.2.jar

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: domTT.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: inputtransferselect.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: jshint.conf.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: optiontransferselect.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: utils.js

Evidence

Identifiers