Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 5.3.2
Report Generated On: Mon, 20 Apr 2020 20:12:16 +0200
Dependencies Scanned: 31 (30 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE Checked: 2020-04-20T20:09:46
NVD CVE Modified: 2020-04-20T18:03:43
VersionCheckOn: 2020-04-19T10:27:56

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
asm-3.3.1.jar		pkg:maven/asm/asm@3.3.1		17
cglib-2.2.2.jar		pkg:maven/cglib/cglib@2.2.2		19
commons-beanutils-1.9.4.jar	cpe:2.3:a:apache:commons_beanutils:1.9.4:::::::*	pkg:maven/commons-beanutils/commons-beanutils@1.9.4	Highest	41
commons-collections-3.2.2.jar	cpe:2.3:a:apache:commons_collections:3.2.2:::::::*	pkg:maven/commons-collections/commons-collections@3.2.2	Highest	41
commons-digester3-3.2.jar		pkg:maven/org.apache.commons/commons-digester3@3.2		41
commons-fileupload-1.4.jar	cpe:2.3:a:apache:commons_fileupload:1.4:::::::*	pkg:maven/commons-fileupload/commons-fileupload@1.4	Highest	40
commons-io-2.6.jar		pkg:maven/commons-io/commons-io@2.6		40
commons-lang3-3.10.jar		pkg:maven/org.apache.commons/commons-lang3@3.10		40
commons-logging-1.2.jar		pkg:maven/commons-logging/commons-logging@1.2		36
commons-text-1.8.jar		pkg:maven/org.apache.commons/commons-text@1.8		41
freemarker-2.3.30.jar		pkg:maven/org.freemarker/freemarker@2.3.30		44
javassist-3.24.1-GA.jar		pkg:maven/org.javassist/javassist@3.24.1-GA		26
json-simple-3.0.2.jar		pkg:maven/com.github.cliftonlabs/json-simple@3.0.2		23
log4j-api-2.13.1.jar	cpe:2.3:a:apache:log4j:2.13.1:::::::*	pkg:maven/org.apache.logging.log4j/log4j-api@2.13.1	Highest	46
ognl-3.2.14.jar	cpe:2.3:a:ognl_project:ognl:3.2.14:::::::*	pkg:maven/ognl/ognl@3.2.14	Highest	20
sitemesh-2.4.2.jar		pkg:maven/opensymphony/sitemesh@2.4.2		27
slf4j-api-1.7.30.jar		pkg:maven/org.slf4j/slf4j-api@1.7.30		29
struts2-core-2.6-SNAPSHOT.jar	cpe:2.3:a:apache:struts:2.6:snapshot::::::	pkg:maven/org.apache.struts/struts2-core@2.6-20200419.094131-295 pkg:maven/org.apache.struts/struts2-core@2.6-SNAPSHOT	Highest	38
struts2-core-2.6-SNAPSHOT.jar: domTT.js				0
struts2-core-2.6-SNAPSHOT.jar: inputtransferselect.js				0
struts2-core-2.6-SNAPSHOT.jar: jshint.conf.js				0
struts2-core-2.6-SNAPSHOT.jar: optiontransferselect.js				0
struts2-core-2.6-SNAPSHOT.jar: utils.js				0
struts2-core-2.6-SNAPSHOT.jar: validation.js				0
struts2-core-2.6-SNAPSHOT.jar: validation.js				0
struts2-core-2.6-SNAPSHOT.jar: webconsole.js				0
velocity-engine-core-2.2.jar		pkg:maven/org.apache.velocity/velocity-engine-core@2.2		38
velocity-tools-generic-3.0.jar		pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.0		31
velocity-tools-view-3.0.jar		pkg:maven/org.apache.velocity.tools/velocity-tools-view@3.0		31
velocity-tools-view-jsp-3.0.jar		pkg:maven/org.apache.velocity.tools/velocity-tools-view-jsp@3.0		31

Dependencies

asm-3.3.1.jar

File Path: /Users/lukaszlenart/.m2/repository/asm/asm/3.3.1/asm-3.3.1.jar
MD5: 1ad1e8959324b0f680b8e62406955642
SHA1: 1d5f20b4ea675e6fab6ab79f1cd60ec268ddc015
SHA256:c2b39275f8e951bc74750080a1266cdabc39399bc5e13d642bf2d346449df7f3
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	ASM Core	High
Vendor	pom	groupid	asm	Highest
Vendor	pom	artifactid	asm	Low
Vendor	Manifest	Implementation-Vendor	France Telecom R&D	High
Vendor	jar	package name	asm	Highest
Vendor	file	name	asm	High
Vendor	pom	parent-artifactid	asm-parent	Low
Product	pom	name	ASM Core	High
Product	pom	groupid	asm	Highest
Product	jar	package name	asm	Highest
Product	file	name	asm	High
Product	pom	artifactid	asm	Highest
Product	Manifest	Implementation-Title	ASM	High
Product	pom	parent-artifactid	asm-parent	Medium
Version	file	version	3.3.1	High
Version	pom	version	3.3.1	Highest
Version	Manifest	Implementation-Version	3.3.1	High

Identifiers

pkg:maven/asm/asm@3.3.1 (Confidence:High)

cglib-2.2.2.jar

Description:

Code generation library

License:

ASF 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/cglib/cglib/2.2.2/cglib-2.2.2.jar
MD5: b3f681be48fce094cf01a045f5bdca6f
SHA1: a47a971686474124562bdd4a7ccbd8ac8c3e8b11
SHA256:a93e4485d274277177480c4afe6ddd8355cda1cacfe356c134e25d65193935fd
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	cglib	Highest
Vendor	file	name	cglib	High
Vendor	pom	name	Code Generation Library	High
Vendor	jar	package name	sf	Low
Vendor	pom	url	http://cglib.sourceforge.net/	Highest
Vendor	pom	artifactid	cglib	Low
Vendor	jar	package name	cglib	Low
Vendor	jar	package name	net	Low
Vendor	pom	groupid	cglib	Highest
Product	jar	package name	cglib	Highest
Product	pom	artifactid	cglib	Highest
Product	file	name	cglib	High
Product	pom	name	Code Generation Library	High
Product	jar	package name	sf	Low
Product	jar	package name	cglib	Low
Product	pom	groupid	cglib	Highest
Product	pom	url	http://cglib.sourceforge.net/	Medium
Version	file	version	2.2.2	High
Version	pom	version	2.2.2	Highest

Identifiers

pkg:maven/cglib/cglib@2.2.2 (Confidence:High)

commons-beanutils-1.9.4.jar

Description:

Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/commons-beanutils/commons-beanutils/1.9.4/commons-beanutils-1.9.4.jar
MD5: 07dc532ee316fe1f2f0323e9bd2f8df4
SHA1: d52b9abcd97f38c81342bb7e7ae1eee9b73cba51
SHA256:7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	url	https://commons.apache.org/proper/commons-beanutils/	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-beanutils	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	groupid	commons-beanutils	Highest
Vendor	jar	package name	apache	Highest
Vendor	Manifest	implementation-build	UNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-beanutils/	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	file	name	commons-beanutils	High
Vendor	Manifest	implementation-url	https://commons.apache.org/proper/commons-beanutils/	Low
Vendor	pom	artifactid	commons-beanutils	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	name	Apache Commons BeanUtils	High
Vendor	jar	package name	beanutils	Highest
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	Bundle-Name	Apache Commons BeanUtils	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-beanutils	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	jar	package name	apache	Highest
Product	pom	groupid	commons-beanutils	Highest
Product	Manifest	implementation-build	UNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000	Low
Product	Manifest	Implementation-Title	Apache Commons BeanUtils	High
Product	Manifest	specification-title	Apache Commons BeanUtils	Medium
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-beanutils/	Low
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	file	name	commons-beanutils	High
Product	Manifest	implementation-url	https://commons.apache.org/proper/commons-beanutils/	Low
Product	pom	artifactid	commons-beanutils	Highest
Product	pom	url	https://commons.apache.org/proper/commons-beanutils/	Medium
Product	pom	name	Apache Commons BeanUtils	High
Product	jar	package name	beanutils	Highest
Version	Manifest	Implementation-Version	1.9.4	High
Version	pom	parent-version	1.9.4	Low
Version	Manifest	Bundle-Version	1.9.4	High
Version	file	version	1.9.4	High
Version	pom	version	1.9.4	Highest

Identifiers

pkg:maven/commons-beanutils/commons-beanutils@1.9.4 (Confidence:High)
cpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:* (Confidence:Highest)

commons-collections-3.2.2.jar

Description:

Types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256:eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-collections	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.3))"	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	Manifest	bundle-docurl	http://commons.apache.org/collections/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	groupid	commons-collections	Highest
Vendor	jar	package name	collections	Highest
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	Manifest	implementation-build	tags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100	Low
Vendor	Manifest	implementation-url	http://commons.apache.org/collections/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.collections	Medium
Vendor	pom	artifactid	commons-collections	Low
Vendor	pom	url	http://commons.apache.org/collections/	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	name	Apache Commons Collections	High
Vendor	pom	parent-artifactid	commons-parent	Low
Product	file	name	commons-collections	High
Product	Manifest	Bundle-Name	Apache Commons Collections	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.3))"	Low
Product	pom	url	http://commons.apache.org/collections/	Medium
Product	pom	artifactid	commons-collections	Highest
Product	jar	package name	apache	Highest
Product	Manifest	bundle-docurl	http://commons.apache.org/collections/	Low
Product	Manifest	specification-title	Apache Commons Collections	Medium
Product	pom	groupid	commons-collections	Highest
Product	jar	package name	collections	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	Manifest	implementation-build	tags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100	Low
Product	Manifest	implementation-url	http://commons.apache.org/collections/	Low
Product	Manifest	bundle-symbolicname	org.apache.commons.collections	Medium
Product	Manifest	Implementation-Title	Apache Commons Collections	High
Product	pom	name	Apache Commons Collections	High
Version	Manifest	Bundle-Version	3.2.2	High
Version	file	version	3.2.2	High
Version	Manifest	Implementation-Version	3.2.2	High
Version	pom	version	3.2.2	Highest
Version	pom	parent-version	3.2.2	Low

Identifiers

pkg:maven/commons-collections/commons-collections@3.2.2 (Confidence:High)
cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:* (Confidence:Highest)

commons-digester3-3.2.jar

Description:

    The Apache Commons Digester package lets you configure an XML to Java
    object mapping module which triggers certain actions called rules whenever
    a particular pattern of nested XML elements is recognized.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/commons/commons-digester3/3.2/commons-digester3-3.2.jar
MD5: 41d2c62c7aedafa7a3627794abc83f71
SHA1: c3f68c5ff25ec5204470fd8fdf4cb8feff5e8a79
SHA256:1c150e3d2df4b4237b47e28fea2079fb0da324578d5cca6a5fed2e37a62082ec
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	file	name	commons-digester3	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	rules	Highest
Vendor	jar	package name	digester3	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.commons.digester	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	Manifest	bundle-docurl	http://commons.apache.org/digester/	Low
Vendor	pom	groupid	apache.commons	Highest
Vendor	pom	name	Apache Commons Digester	High
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	Manifest	implementation-build	tags/DIGESTER3_3_2_RC2@r1212807; 2011-12-10 15:57:06+0100	Low
Vendor	jar	package name	digester	Highest
Vendor	pom	url	http://commons.apache.org/digester/	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	artifactid	commons-digester3	Low
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	Implementation-Title	Apache Commons Digester	High
Product	Manifest	specification-title	Apache Commons Digester	Medium
Product	file	name	commons-digester3	High
Product	jar	package name	apache	Highest
Product	jar	package name	rules	Highest
Product	Manifest	Bundle-Name	Apache Commons Digester	Medium
Product	jar	package name	digester3	Highest
Product	Manifest	bundle-symbolicname	org.apache.commons.digester	Medium
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	pom	url	http://commons.apache.org/digester/	Medium
Product	Manifest	bundle-docurl	http://commons.apache.org/digester/	Low
Product	pom	groupid	apache.commons	Highest
Product	pom	name	Apache Commons Digester	High
Product	Manifest	implementation-build	tags/DIGESTER3_3_2_RC2@r1212807; 2011-12-10 15:57:06+0100	Low
Product	jar	package name	digester	Highest
Product	pom	artifactid	commons-digester3	Highest
Version	pom	version	3.2	Highest
Version	file	version	3.2	High
Version	pom	parent-version	3.2	Low
Version	Manifest	Implementation-Version	3.2	High

Identifiers

pkg:maven/org.apache.commons/commons-digester3@3.2 (Confidence:High)

commons-fileupload-1.4.jar

Description:

    The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart
    file upload functionality to servlets and web applications.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/commons-fileupload/commons-fileupload/1.4/commons-fileupload-1.4.jar
MD5: 0c3b924dcaaa90c3fb93fe04ae96a35e
SHA1: f95188e3d372e20e7328706c37ef366e5d7859b0
SHA256:a4ec02336f49253ea50405698b79232b8c5cbf02cb60df3a674d77a749a1def7
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-fileupload/	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	fileupload	Highest
Vendor	pom	url	http://commons.apache.org/proper/commons-fileupload/	Highest
Vendor	pom	groupid	commons-fileupload	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	artifactid	commons-fileupload	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	Manifest	implementation-url	http://commons.apache.org/proper/commons-fileupload/	Low
Vendor	Manifest	implementation-build	UNKNOWN@r047f31576411beee69cf75584ae76531cc9ac753; 2018-12-24 07:06:18+0000	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	name	Apache Commons FileUpload	High
Vendor	file	name	commons-fileupload	High
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-fileupload	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	specification-title	Apache Commons FileUpload	Medium
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-fileupload/	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	jar	package name	apache	Highest
Product	jar	package name	fileupload	Highest
Product	Manifest	Implementation-Title	Apache Commons FileUpload	High
Product	Manifest	Bundle-Name	Apache Commons FileUpload	Medium
Product	pom	groupid	commons-fileupload	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	pom	url	http://commons.apache.org/proper/commons-fileupload/	Medium
Product	Manifest	implementation-url	http://commons.apache.org/proper/commons-fileupload/	Low
Product	pom	artifactid	commons-fileupload	Highest
Product	Manifest	implementation-build	UNKNOWN@r047f31576411beee69cf75584ae76531cc9ac753; 2018-12-24 07:06:18+0000	Low
Product	pom	name	Apache Commons FileUpload	High
Product	file	name	commons-fileupload	High
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-fileupload	Medium
Version	pom	parent-version	1.4	Low
Version	pom	version	1.4	Highest
Version	file	version	1.4	High
Version	Manifest	Implementation-Version	1.4	High

Identifiers

pkg:maven/commons-fileupload/commons-fileupload@1.4 (Confidence:High)
cpe:2.3:a:apache:commons_fileupload:1.4:*:*:*:*:*:*:* (Confidence:Highest)

commons-io-2.6.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/commons-io/commons-io/2.6/commons-io-2.6.jar
MD5: 467c2a1f64319c99b5faf03fc78572af
SHA1: 815893df5f31da2ece4040fe0a12fd44b577afaf
SHA256:f877d304660ac2a142f3865badfc971dec7ed73c747c7f8d5d2f5139ca736513
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	org.apache.commons.io	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-io/	Low
Vendor	pom	groupid	commons-io	Highest
Vendor	jar	package name	apache	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	url	http://commons.apache.org/proper/commons-io/	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	Manifest	implementation-url	http://commons.apache.org/proper/commons-io/	Low
Vendor	file	name	commons-io	High
Vendor	jar	package name	io	Highest
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	pom	name	Apache Commons IO	High
Vendor	Manifest	automatic-module-name	org.apache.commons.io	Medium
Vendor	pom	artifactid	commons-io	Low
Vendor	Manifest	Implementation-Vendor-Id	commons-io	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	Implementation-Title	Apache Commons IO	High
Product	Manifest	bundle-symbolicname	org.apache.commons.io	Medium
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-io/	Low
Product	jar	package name	apache	Highest
Product	Manifest	specification-title	Apache Commons IO	Medium
Product	pom	groupid	commons-io	Highest
Product	pom	url	http://commons.apache.org/proper/commons-io/	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	Manifest	implementation-url	http://commons.apache.org/proper/commons-io/	Low
Product	file	name	commons-io	High
Product	jar	package name	io	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	pom	name	Apache Commons IO	High
Product	pom	artifactid	commons-io	Highest
Product	Manifest	Bundle-Name	Apache Commons IO	Medium
Product	Manifest	automatic-module-name	org.apache.commons.io	Medium
Version	pom	version	2.6	Highest
Version	Manifest	Implementation-Version	2.6	High
Version	pom	parent-version	2.6	Low
Version	file	version	2.6	High

Identifiers

pkg:maven/commons-io/commons-io@2.6 (Confidence:High)

commons-lang3-3.10.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/commons/commons-lang3/3.10/commons-lang3-3.10.jar
MD5: 238dcae7363dd86b2e515a2a29e8b4d9
SHA1: e155460aaf5b464062a09c3923f089ce99128a17
SHA256:28968ae55fff465494083aeba856f8824c34902329882bf61e77246a91e25aa9
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Vendor	pom	name	Apache Commons Lang	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	artifactid	commons-lang3	Low
Vendor	file	name	commons-lang3	High
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	url	https://commons.apache.org/proper/commons-lang/	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	jar	package name	lang3	Highest
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Vendor	pom	groupid	apache.commons	Highest
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Product	pom	name	Apache Commons Lang	High
Product	jar	package name	apache	Highest
Product	Manifest	specification-title	Apache Commons Lang	Medium
Product	file	name	commons-lang3	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	jar	package name	lang3	Highest
Product	pom	artifactid	commons-lang3	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Apache Commons Lang	High
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Product	pom	groupid	apache.commons	Highest
Product	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Product	Manifest	Bundle-Name	Apache Commons Lang	Medium
Product	pom	url	https://commons.apache.org/proper/commons-lang/	Medium
Version	file	version	3.10	High
Version	pom	version	3.10	Highest
Version	Manifest	Implementation-Version	3.10	High
Version	pom	parent-version	3.10	Low

Identifiers

pkg:maven/org.apache.commons/commons-lang3@3.10 (Confidence:High)

commons-logging-1.2.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/commons-logging/commons-logging/1.2/commons-logging-1.2.jar
MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686
SHA256:daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-logging/	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	logging	Highest
Vendor	pom	groupid	commons-logging	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.commons.logging	Medium
Vendor	pom	artifactid	commons-logging	Low
Vendor	Manifest	implementation-build	tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200	Low
Vendor	file	name	commons-logging	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	name	Apache Commons Logging	High
Vendor	pom	url	http://commons.apache.org/proper/commons-logging/	Highest
Product	Manifest	Implementation-Title	Apache Commons Logging	High
Product	pom	url	http://commons.apache.org/proper/commons-logging/	Medium
Product	jar	package name	apache	Highest
Product	pom	artifactid	commons-logging	Highest
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-logging/	Low
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	jar	package name	logging	Highest
Product	Manifest	specification-title	Apache Commons Logging	Medium
Product	pom	groupid	commons-logging	Highest
Product	Manifest	bundle-symbolicname	org.apache.commons.logging	Medium
Product	Manifest	implementation-build	tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200	Low
Product	Manifest	Bundle-Name	Apache Commons Logging	Medium
Product	file	name	commons-logging	High
Product	pom	name	Apache Commons Logging	High
Version	pom	parent-version	1.2	Low
Version	pom	version	1.2	Highest
Version	Manifest	Implementation-Version	1.2	High
Version	file	version	1.2	High

Identifiers

pkg:maven/commons-logging/commons-logging@1.2 (Confidence:High)

commons-text-1.8.jar

Description:

Apache Commons Text is a library focused on algorithms working on strings.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/commons/commons-text/1.8/commons-text-1.8.jar
MD5: f2243d67b348e7175f55902cdb7e54af
SHA1: 879a6bde4c0537a25504c72ec7a94ba4099f469c
SHA256:6fe7ad4ad5349d6b77e7a0e1c9f6037108a1ee48c42e7e6eb4b18f56d324f7b2
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	url	https://commons.apache.org/proper/commons-text	Highest
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-text	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	jar	package name	text	Highest
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	pom	groupid	apache.commons	Highest
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	file	name	commons-text	High
Vendor	Manifest	implementation-url	https://commons.apache.org/proper/commons-text	Low
Vendor	pom	artifactid	commons-text	Low
Vendor	Manifest	automatic-module-name	org.apache.commons.text	Medium
Vendor	pom	name	Apache Commons Text	High
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-text	Medium
Vendor	Manifest	Implementation-Vendor-Id	org.apache.commons	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	Bundle-Name	Apache Commons Text	Medium
Product	jar	package name	apache	Highest
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-text	Low
Product	Manifest	Implementation-Title	Apache Commons Text	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	specification-title	Apache Commons Text	Medium
Product	jar	package name	text	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	pom	groupid	apache.commons	Highest
Product	file	name	commons-text	High
Product	Manifest	implementation-url	https://commons.apache.org/proper/commons-text	Low
Product	pom	artifactid	commons-text	Highest
Product	Manifest	automatic-module-name	org.apache.commons.text	Medium
Product	pom	name	Apache Commons Text	High
Product	pom	url	https://commons.apache.org/proper/commons-text	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-text	Medium
Version	pom	parent-version	1.8	Low
Version	Manifest	Implementation-Version	1.8	High
Version	file	version	1.8	High
Version	pom	version	1.8	Highest

Identifiers

pkg:maven/org.apache.commons/commons-text@1.8 (Confidence:High)

freemarker-2.3.30.jar

Description:

    FreeMarker is a "template engine"; a generic tool to generate text output based on templates.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/freemarker/freemarker/2.3.30/freemarker-2.3.30.jar
MD5: e702848d716f17cd39fabfe2415e104e
SHA1: 86d70d335c7821178f62b554aa3a4bc538a94f1a
SHA256:6586433d90957c0b05a32bce07c71e8cebcea6afbea2e043bfe0c576c4d94338
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor	freemarker.org	High
Vendor	jar	package name	template	Highest
Vendor	pom	groupid	org.freemarker	Highest
Vendor	pom	url	https://freemarker.apache.org/	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8, JavaSE-1.7, JavaSE-1.6, J2SE-1.5	Low
Vendor	pom	name	Apache FreeMarker	High
Vendor	pom	groupid	freemarker	Highest
Vendor	jar	package name	freemarker	Highest
Vendor	pom	parent-groupid	org.apache	Medium
Vendor	Manifest	extension-name	FreeMarker	Medium
Vendor	pom	parent-artifactid	apache	Low
Vendor	Manifest	dstamp	20200216	Low
Vendor	pom	artifactid	freemarker	Low
Vendor	Manifest	today	February 16 2020	Low
Vendor	pom	organization name	Apache Software Foundation	High
Vendor	pom	organization url	http://apache.org	Medium
Vendor	Manifest	tstamp	1915	Low
Vendor	file	name	freemarker	High
Vendor	Manifest	bundle-symbolicname	org.freemarker.freemarker	Medium
Vendor	Manifest	specification-vendor	freemarker.org	Low
Product	jar	package name	template	Highest
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8, JavaSE-1.7, JavaSE-1.6, J2SE-1.5	Low
Product	pom	name	Apache FreeMarker	High
Product	pom	groupid	freemarker	Highest
Product	pom	artifactid	freemarker	Highest
Product	jar	package name	freemarker	Highest
Product	Manifest	Bundle-Name	org.freemarker.freemarker	Medium
Product	pom	parent-groupid	org.apache	Medium
Product	pom	url	https://freemarker.apache.org/	Medium
Product	Manifest	extension-name	FreeMarker	Medium
Product	pom	organization url	http://apache.org	Low
Product	Manifest	dstamp	20200216	Low
Product	pom	organization name	Apache Software Foundation	Low
Product	Manifest	today	February 16 2020	Low
Product	Manifest	specification-title	FreeMarker	Medium
Product	Manifest	tstamp	1915	Low
Product	file	name	freemarker	High
Product	Manifest	bundle-symbolicname	org.freemarker.freemarker	Medium
Product	Manifest	Implementation-Title	FreeMarker	High
Product	pom	parent-artifactid	apache	Medium
Version	Manifest	Implementation-Version	2.3.30	High
Version	pom	version	2.3.30	Highest
Version	file	version	2.3.30	High
Version	pom	parent-version	2.3.30	Low

Identifiers

pkg:maven/org.freemarker/freemarker@2.3.30 (Confidence:High)

javassist-3.24.1-GA.jar

Description:

  	Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.

License:

MPL 1.1: http://www.mozilla.org/MPL/MPL-1.1.html
LGPL 2.1: http://www.gnu.org/licenses/lgpl-2.1.html
Apache License 2.0: http://www.apache.org/licenses/

File Path: /Users/lukaszlenart/.m2/repository/org/javassist/javassist/3.24.1-GA/javassist-3.24.1-GA.jar
MD5: 527cebd64b0f941d5058bae3d1726d06
SHA1: 921b466d6a14a8edbe25923c973fd767fc71c045
SHA256:5d57ea5b0ec8cb46143dfe521f888b208028be126f274cc4f852e641755f1553
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	javassist	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	jar	package name	javassist	Highest
Vendor	pom	organization name	Shigeru Chiba, www.javassist.org	High
Vendor	pom	artifactid	javassist	Low
Vendor	pom	name	Javassist	High
Vendor	pom	groupid	org.javassist	Highest
Vendor	pom	url	http://www.javassist.org/	Highest
Vendor	jar	package name	bytecode	Highest
Vendor	Manifest	specification-vendor	Shigeru Chiba, www.javassist.org	Low
Vendor	pom	groupid	javassist	Highest
Vendor	Manifest	bundle-symbolicname	javassist	Medium
Product	file	name	javassist	High
Product	pom	artifactid	javassist	Highest
Product	pom	organization name	Shigeru Chiba, www.javassist.org	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	jar	package name	javassist	Highest
Product	Manifest	Bundle-Name	Javassist	Medium
Product	pom	name	Javassist	High
Product	pom	url	http://www.javassist.org/	Medium
Product	Manifest	specification-title	Javassist	Medium
Product	jar	package name	bytecode	Highest
Product	pom	groupid	javassist	Highest
Product	Manifest	bundle-symbolicname	javassist	Medium
Version	Manifest	specification-version	3.24.1-GA	High
Version	pom	version	3.24.1-GA	Highest

Identifiers

pkg:maven/org.javassist/javassist@3.24.1-GA (Confidence:High)

json-simple-3.0.2.jar

Description:

Java 7+ toolkit to quickly develop RFC 4627 JSON compatible applications.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/com/github/cliftonlabs/json-simple/3.0.2/json-simple-3.0.2.jar
MD5: 148c0d1bdc1bcb24394627d6930ee9ad
SHA1: 2337afdb06134a12fc0239299c3ceb2e9c209516
SHA256:fda65a9ad0e1ac0c88987106e89aa4d8b2a2495e7e042371efa83813f65b7295
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	JSON.simple	High
Vendor	file	name	json-simple	High
Vendor	Manifest	Implementation-Vendor-Id	com.github.cliftonlabs	Medium
Vendor	pom	groupid	github.cliftonlabs	Highest
Vendor	jar	package name	github	Highest
Vendor	jar	package name	cliftonlabs	Highest
Vendor	pom	artifactid	json-simple	Low
Vendor	pom	url	https://cliftonlabs.github.io/json-simple/	Highest
Vendor	pom	groupid	com.github.cliftonlabs	Highest
Vendor	Manifest	implementation-url	https://cliftonlabs.github.io/json-simple/	Low
Product	pom	name	JSON.simple	High
Product	file	name	json-simple	High
Product	pom	artifactid	json-simple	Highest
Product	pom	groupid	github.cliftonlabs	Highest
Product	jar	package name	github	Highest
Product	Manifest	specification-title	JSON.simple	Medium
Product	jar	package name	cliftonlabs	Highest
Product	pom	url	https://cliftonlabs.github.io/json-simple/	Medium
Product	Manifest	Implementation-Title	JSON.simple	High
Product	Manifest	implementation-url	https://cliftonlabs.github.io/json-simple/	Low
Version	Manifest	Implementation-Version	3.0.2	High
Version	file	version	3.0.2	High
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/com.github.cliftonlabs/json-simple@3.0.2 (Confidence:High)

log4j-api-2.13.1.jar

Description:

The Apache Log4j API

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/logging/log4j/log4j-api/2.13.1/log4j-api-2.13.1.jar
MD5: 65795ba3dfef693a82bdfb369d030439
SHA1: cc670f92dc77bbf4540904c3fa211b997cba00d8
SHA256:307fffc2623d010e3fe67d9f6b101c14bae33ec310e5f56960d491885fd59630
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor-Id	org.apache.logging.log4j	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	groupid	apache.logging.log4j	Highest
Vendor	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-api/	Low
Vendor	Manifest	log4jreleasekey	B3D8E1BA	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	parent-groupid	org.apache.logging.log4j	Medium
Vendor	Manifest	log4jreleasemanager	Ralph Goers	Low
Vendor	pom	groupid	org.apache.logging.log4j	Highest
Vendor	jar	package name	logging	Highest
Vendor	file	name	log4j-api	High
Vendor	Manifest	bundle-docurl	https://www.apache.org/	Low
Vendor	pom	parent-artifactid	log4j	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	name	Apache Log4j API	High
Vendor	jar	package name	org	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.logging.log4j.api	Medium
Vendor	pom	artifactid	log4j-api	Low
Vendor	jar	package name	log4j	Highest
Product	Manifest	Implementation-Title	Apache Log4j API	High
Product	jar	package name	apache	Highest
Product	pom	groupid	apache.logging.log4j	Highest
Product	Manifest	specification-title	Apache Log4j API	Medium
Product	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-api/	Low
Product	Manifest	log4jreleasekey	B3D8E1BA	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	parent-groupid	org.apache.logging.log4j	Medium
Product	Manifest	log4jreleasemanager	Ralph Goers	Low
Product	jar	package name	logging	Highest
Product	file	name	log4j-api	High
Product	Manifest	bundle-docurl	https://www.apache.org/	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	log4j-api	Highest
Product	pom	name	Apache Log4j API	High
Product	jar	package name	org	Highest
Product	pom	parent-artifactid	log4j	Medium
Product	Manifest	Bundle-Name	Apache Log4j API	Medium
Product	Manifest	bundle-symbolicname	org.apache.logging.log4j.api	Medium
Product	jar	package name	log4j	Highest
Version	file	version	2.13.1	High
Version	pom	version	2.13.1	Highest
Version	Manifest	Implementation-Version	2.13.1	High
Version	Manifest	Bundle-Version	2.13.1	High
Version	Manifest	log4jreleaseversion	2.13.1	Medium

Identifiers

pkg:maven/org.apache.logging.log4j/log4j-api@2.13.1 (Confidence:High)
cpe:2.3:a:apache:log4j:2.13.1:*:*:*:*:*:*:* (Confidence:Highest)

ognl-3.2.14.jar

Description:

OGNL - Object Graph Navigation Library

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/ognl/ognl/3.2.14/ognl-3.2.14.jar
MD5: 0baa4d72fcb508e100c821518e5cdf19
SHA1: 18178dd7cfcb8b81c262c072b60a5bf701073917
SHA256:02da5bd743cbaab1ebb61a17844b122f52cc69d10b23a8e3356f55c1e6988e71
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	ognl	Low
Vendor	pom	organization url	http://www.opensymphony.com	Medium
Vendor	pom	name	OGNL - Object Graph Navigation Library	High
Vendor	pom	organization name	OpenSymphony	High
Vendor	pom	groupid	ognl	Highest
Vendor	file	name	ognl	High
Vendor	Manifest	automatic-module-name	ognl	Medium
Vendor	pom	url	jkuhnert/ognl/	Highest
Vendor	jar	package name	ognl	Highest
Product	pom	url	jkuhnert/ognl/	High
Product	pom	name	OGNL - Object Graph Navigation Library	High
Product	pom	artifactid	ognl	Highest
Product	pom	groupid	ognl	Highest
Product	file	name	ognl	High
Product	Manifest	automatic-module-name	ognl	Medium
Product	jar	package name	ognl	Highest
Product	pom	organization name	OpenSymphony	Low
Product	pom	organization url	http://www.opensymphony.com	Low
Version	file	version	3.2.14	High
Version	pom	version	3.2.14	Highest

Identifiers

pkg:maven/ognl/ognl@3.2.14 (Confidence:High)
cpe:2.3:a:ognl_project:ognl:3.2.14:*:*:*:*:*:*:* (Confidence:Highest)

sitemesh-2.4.2.jar

Description:

SiteMesh is a web-page layout and decoration framework and web- application integration framework to aid in creating large sites consisting of many pages for which a consistent look/feel, navigation and layout scheme is required.

License:

The Apache Software License, Version 1.1: http://www.opensymphony.com/sitemesh/license.action

File Path: /Users/lukaszlenart/.m2/repository/opensymphony/sitemesh/2.4.2/sitemesh-2.4.2.jar
MD5: b9cd6bb5c6e34555ae430d9c2f2441ba
SHA1: 4cb3b08c96553b0f4595a80917838ca302f67f3f
SHA256:0d7933ae628a7198f8bb267e27f348f8cbe7c74083c25172dffaa0245b2bf056
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	sitemesh	High
Vendor	jar	package name	sitemesh	Highest
Vendor	pom	artifactid	sitemesh	Low
Vendor	jar	package name	module	Low
Vendor	pom	organization url	http://www.opensymphony.com	Medium
Vendor	jar	package name	opensymphony	Low
Vendor	pom	groupid	opensymphony	Highest
Vendor	pom	name	Sitemesh	High
Vendor	jar	package name	page	Highest
Vendor	pom	organization name	Opensymphony	High
Vendor	jar	package name	opensymphony	Highest
Vendor	jar	package name	sitemesh	Low
Vendor	pom	url	http://www.opensymphony.com/sitemesh	Highest
Product	pom	url	http://www.opensymphony.com/sitemesh	Medium
Product	file	name	sitemesh	High
Product	jar	package name	sitemesh	Highest
Product	pom	artifactid	sitemesh	Highest
Product	pom	organization url	http://www.opensymphony.com	Low
Product	jar	package name	module	Low
Product	pom	groupid	opensymphony	Highest
Product	pom	name	Sitemesh	High
Product	jar	package name	page	Highest
Product	jar	package name	opensymphony	Highest
Product	pom	organization name	Opensymphony	Low
Product	jar	package name	sitemesh	Low
Version	pom	version	2.4.2	Highest
Version	file	version	2.4.2	High

Identifiers

pkg:maven/opensymphony/sitemesh@2.4.2 (Confidence:High)

slf4j-api-1.7.30.jar

Description:

The slf4j API

File Path: /Users/lukaszlenart/.m2/repository/org/slf4j/slf4j-api/1.7.30/slf4j-api-1.7.30.jar
MD5: f8be00da99bc4ab64c79ab1e2be7cb7c
SHA1: b5a4b6d16ab13e34a88fae84c35cd5d68cac922c
SHA256:cdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	org.slf4j	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	name	SLF4J API Module	High
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	jar	package name	slf4j	Highest
Vendor	file	name	slf4j-api	High
Vendor	pom	parent-groupid	org.slf4j	Medium
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	groupid	slf4j	Highest
Product	pom	url	http://www.slf4j.org	Medium
Product	Manifest	automatic-module-name	org.slf4j	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	Bundle-Name	slf4j-api	Medium
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	jar	package name	slf4j	Highest
Product	file	name	slf4j-api	High
Product	pom	parent-groupid	org.slf4j	Medium
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	slf4j	Highest
Version	pom	version	1.7.30	Highest
Version	Manifest	Implementation-Version	1.7.30	High
Version	Manifest	Bundle-Version	1.7.30	High
Version	file	version	1.7.30	High

Identifiers

pkg:maven/org.slf4j/slf4j-api@1.7.30 (Confidence:High)

struts2-core-2.6-SNAPSHOT.jar

Description:

Apache Struts 2

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar
MD5: bdabb37e4b04f29f4ca390fa2aefce44
SHA1: 64a03701b6797529aaa7cb200f803b7b26c6bb3f
SHA256:e2932ae7ddfa0747221ea42a6d12263237248e3ab9c2ed12b162c13a06147183
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Vendor	jar	package name	struts2	Highest
Vendor	Manifest	implementation-url	http://struts.apache.org/struts2-core/	Low
Vendor	pom	groupid	apache.struts	Highest
Vendor	Manifest	bundle-docurl	http://www.apache.org	Low
Vendor	jar	package name	apache	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	artifactid	struts2-core	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache.struts	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	name	Struts 2 Core	High
Vendor	Manifest	specification-vendor	Apache Software Foundation	Low
Vendor	pom	parent-artifactid	struts2-parent	Low
Vendor	file	name	struts2-core	High
Vendor	pom	groupid	org.apache.struts	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.struts.2-core	Medium
Vendor	Manifest	Implementation-Vendor	Apache Software Foundation	High
Vendor	pom	parent-groupid	org.apache.struts	Medium
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Product	jar	package name	struts2	Highest
Product	Manifest	implementation-url	http://struts.apache.org/struts2-core/	Low
Product	pom	groupid	apache.struts	Highest
Product	pom	parent-artifactid	struts2-parent	Medium
Product	Manifest	bundle-docurl	http://www.apache.org	Low
Product	jar	package name	apache	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	artifactid	struts2-core	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	name	Struts 2 Core	High
Product	jar	package name	filter	Highest
Product	Manifest	Bundle-Name	Struts 2 Core	Medium
Product	file	name	struts2-core	High
Product	Manifest	bundle-symbolicname	org.apache.struts.2-core	Medium
Product	pom	parent-groupid	org.apache.struts	Medium
Product	Manifest	Implementation-Title	Struts 2 Core	High
Product	Manifest	specification-title	Struts 2 Core	Medium
Version	Manifest	Implementation-Version	2.6-SNAPSHOT	High
Version	pom	version	2.6-SNAPSHOT	Highest

Related Dependencies

Identifiers

pkg:maven/org.apache.struts/struts2-core@2.6-20200419.094131-295 (Confidence:Highest)
pkg:maven/org.apache.struts/struts2-core@2.6-SNAPSHOT (Confidence:High)
cpe:2.3:a:apache:struts:2.6:snapshot:*:*:*:*:*:* (Confidence:Highest)

struts2-core-2.6-SNAPSHOT.jar: domTT.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/static/domTT.js
MD5: 44ed51154c7fa928005f39bbbed7d01a
SHA1: 5584aa1028220f041ff7d89c48e9e8ffeaa05256
SHA256:60c72fad5a9688fc6a143176d84814b9ea2c4c9c882b4799921b950c415b961e
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: inputtransferselect.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/static/inputtransferselect.js
MD5: 2955e039eab5ef8216705c05d239f378
SHA1: 94316238b9eb45a97e2547fa66881cca27a5b6ee
SHA256:e5ef24f60cfb27a88880ee89ba6eb4664bbebe0c32d3dc1ce385cbe6d8b01194
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: jshint.conf.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/jshint.conf.js
MD5: 7b7c2d7894e972b45298ea8d533008d7
SHA1: 5a88e8d212d51cdc3ac0305978dfc483ce25fa25
SHA256:15942ecb04925afc65666d3d8f758ed0e65f90f7b5faec2b7381e29e397200c6
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: optiontransferselect.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/static/optiontransferselect.js
MD5: f4194635b442cd6a9354132eb1f5c544
SHA1: 51fd3c3d66bed260a48bcc1bc9f56c799acab501
SHA256:2028278976d9adfaa90186556cca99bbd476df3818155161d877272b738cc762
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: utils.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/static/utils.js
MD5: a1287feb0882f494dc6ebfbdcb2c8d6a
SHA1: 61201962d41fec8139c940c5a1468796d49a6139
SHA256:309abee1bddd03fe16c196e2cc00b58318ff707764824d9b71a38f667736720d
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: validation.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/template/xhtml/validation.js
MD5: dea68bdb50b41aee5fc61170e3faf14e
SHA1: affda7d0fecb0d16b9ebfc119833ec50ee920b4b
SHA256:fdbcbc87e6495252ff1d697712e1604733d1cf6299b2f7075fdc27c2fa23687e
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: validation.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/template/css_xhtml/validation.js
MD5: c66d23a2391879f74077a1af7888ede7
SHA1: c4c980b34207fbca373f2032c770371606220da2
SHA256:ec4dc0658f00c3a64e9a890565a3dfb71678babb484d2960c22f123c10f2c03c
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: webconsole.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/interceptor/debugging/webconsole.js
MD5: a7202aefd2637c63ee607db0a608c6de
SHA1: 5618fb1f032d4972287158e5754570992448695d
SHA256:9ab03200e9abb3ddb95ee83321b518d660ba0734683c3a6844c633a5c5dbabfd
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Identifiers

None

velocity-engine-core-2.2.jar

Description:

Apache Velocity is a general purpose template engine.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/velocity/velocity-engine-core/2.2/velocity-engine-core-2.2.jar
MD5: 64b4a875e0d57e57fbcae109cec75ebc
SHA1: 68d899cb70cd27d495562fa808feb2da4926d38f
SHA256:5167f8cf2dbc003b632a49b672161d8d96c8c6f03056d29bfd540a8a789d715e
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	apache.velocity	Highest
Vendor	Manifest	implementation-url	http://velocity.apache.org/engine/devel/velocity-engine-core/	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	parent-groupid	org.apache.velocity	Medium
Vendor	pom	name	Apache Velocity - Engine	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	velocity	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	file	name	velocity-engine-core	High
Vendor	pom	parent-artifactid	velocity-engine-parent	Low
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	org.apache.velocity.engine-core	Medium
Vendor	Manifest	bundle-docurl	https://www.apache.org/	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache.velocity	Medium
Vendor	pom	groupid	org.apache.velocity	Highest
Vendor	pom	artifactid	velocity-engine-core	Low
Product	jar	package name	template	Highest
Product	Manifest	Bundle-Name	Apache Velocity - Engine	Medium
Product	pom	groupid	apache.velocity	Highest
Product	Manifest	implementation-url	http://velocity.apache.org/engine/devel/velocity-engine-core/	Low
Product	pom	parent-groupid	org.apache.velocity	Medium
Product	pom	name	Apache Velocity - Engine	High
Product	jar	package name	apache	Highest
Product	Manifest	specification-title	Apache Velocity - Engine	Medium
Product	jar	package name	velocity	Highest
Product	Manifest	Implementation-Title	Apache Velocity - Engine	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	file	name	velocity-engine-core	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	artifactid	velocity-engine-core	Highest
Product	Manifest	bundle-symbolicname	org.apache.velocity.engine-core	Medium
Product	pom	parent-artifactid	velocity-engine-parent	Medium
Product	jar	package name	filter	Highest
Product	Manifest	bundle-docurl	https://www.apache.org/	Low
Version	Manifest	Implementation-Version	2.2	High
Version	pom	version	2.2	Highest
Version	file	version	2.2	High

Identifiers

pkg:maven/org.apache.velocity/velocity-engine-core@2.2 (Confidence:High)

velocity-tools-generic-3.0.jar

Description:

Generic tools that can be used in any context.

File Path: /Users/lukaszlenart/.m2/repository/org/apache/velocity/tools/velocity-tools-generic/3.0/velocity-tools-generic-3.0.jar
MD5: a8586c8959eccfa3714e198eb21678d3
SHA1: e789f6ec06f9a69ccb8956f407fb685b2938e74b
SHA256:42cb45fe33aead38218845cb350125c7dc9804c74a19cc388123276da0c07e5d
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	parent-artifactid	velocity-tools-parent	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	artifactid	velocity-tools-generic	Low
Vendor	Manifest	implementation-url	https://velocity.apache.org/tools/devel/velocity-tools-generic/	Low
Vendor	pom	parent-groupid	org.apache.velocity.tools	Medium
Vendor	jar	package name	velocity	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	groupid	org.apache.velocity.tools	Highest
Vendor	jar	package name	tools	Highest
Vendor	file	name	velocity-tools-generic	High
Vendor	pom	groupid	apache.velocity.tools	Highest
Vendor	pom	name	Apache Velocity Tools - Generic tools	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.velocity.tools	Medium
Vendor	jar	package name	generic	Highest
Product	Manifest	specification-title	Apache Velocity Tools - Generic tools	Medium
Product	Manifest	Implementation-Title	Apache Velocity Tools - Generic tools	High
Product	jar	package name	apache	Highest
Product	Manifest	implementation-url	https://velocity.apache.org/tools/devel/velocity-tools-generic/	Low
Product	pom	parent-groupid	org.apache.velocity.tools	Medium
Product	jar	package name	velocity	Highest
Product	pom	artifactid	velocity-tools-generic	Highest
Product	jar	package name	tools	Highest
Product	file	name	velocity-tools-generic	High
Product	pom	parent-artifactid	velocity-tools-parent	Medium
Product	pom	groupid	apache.velocity.tools	Highest
Product	pom	name	Apache Velocity Tools - Generic tools	High
Product	jar	package name	generic	Highest
Version	pom	version	3.0	Highest
Version	file	version	3.0	High
Version	Manifest	Implementation-Version	3.0	High

Identifiers

pkg:maven/org.apache.velocity.tools/velocity-tools-generic@3.0 (Confidence:High)

velocity-tools-view-3.0.jar

Description:

Tools to be used in a servlet context.

File Path: /Users/lukaszlenart/.m2/repository/org/apache/velocity/tools/velocity-tools-view/3.0/velocity-tools-view-3.0.jar
MD5: 997d1732d30fc50fc8879653d36a6e99
SHA1: 2f72ca8eb2bcb8af2c5fab826d64add20ab70a2e
SHA256:cc6e5effedb95345b842b16aa7eb6c2da8fa1b29d8df8dae17f56f143515fd07
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	parent-artifactid	velocity-tools-parent	Low
Vendor	jar	package name	view	Highest
Vendor	jar	package name	apache	Highest
Vendor	pom	artifactid	velocity-tools-view	Low
Vendor	pom	parent-groupid	org.apache.velocity.tools	Medium
Vendor	jar	package name	velocity	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	groupid	org.apache.velocity.tools	Highest
Vendor	pom	name	Apache Velocity Tools - View tools	High
Vendor	jar	package name	tools	Highest
Vendor	pom	groupid	apache.velocity.tools	Highest
Vendor	file	name	velocity-tools-view	High
Vendor	Manifest	implementation-url	https://velocity.apache.org/tools/devel/velocity-tools-view/	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache.velocity.tools	Medium
Product	jar	package name	view	Highest
Product	jar	package name	apache	Highest
Product	pom	parent-groupid	org.apache.velocity.tools	Medium
Product	jar	package name	velocity	Highest
Product	pom	name	Apache Velocity Tools - View tools	High
Product	jar	package name	tools	Highest
Product	pom	parent-artifactid	velocity-tools-parent	Medium
Product	pom	groupid	apache.velocity.tools	Highest
Product	file	name	velocity-tools-view	High
Product	Manifest	Implementation-Title	Apache Velocity Tools - View tools	High
Product	Manifest	implementation-url	https://velocity.apache.org/tools/devel/velocity-tools-view/	Low
Product	pom	artifactid	velocity-tools-view	Highest
Product	Manifest	specification-title	Apache Velocity Tools - View tools	Medium
Version	pom	version	3.0	Highest
Version	file	version	3.0	High
Version	Manifest	Implementation-Version	3.0	High

Identifiers

pkg:maven/org.apache.velocity.tools/velocity-tools-view@3.0 (Confidence:High)

velocity-tools-view-jsp-3.0.jar

Description:

Enables the use of Velocity under a JSP environment.

File Path: /Users/lukaszlenart/.m2/repository/org/apache/velocity/tools/velocity-tools-view-jsp/3.0/velocity-tools-view-jsp-3.0.jar
MD5: 87e4c90f6060422f92929fcf2aff8072
SHA1: 27f6a21c7973ffb75001b3e9ac4731facf5757b4
SHA256:fa4168347c48e3c47b6924c1a8eaaf1661fd3d49fc68d39978fa0fa0f739f43d
Referenced In Project/Scope:Struts 2 Sitemesh Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	parent-artifactid	velocity-tools-parent	Low
Vendor	file	name	velocity-tools-view-jsp	High
Vendor	jar	package name	view	Highest
Vendor	jar	package name	apache	Highest
Vendor	pom	parent-groupid	org.apache.velocity.tools	Medium
Vendor	jar	package name	velocity	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	name	Apache Velocity Tools - JSP support	High
Vendor	pom	groupid	org.apache.velocity.tools	Highest
Vendor	jar	package name	tools	Highest
Vendor	Manifest	implementation-url	https://velocity.apache.org/tools/devel/velocity-tools-view-jsp/	Low
Vendor	pom	groupid	apache.velocity.tools	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.apache.velocity.tools	Medium
Vendor	pom	artifactid	velocity-tools-view-jsp	Low
Product	pom	artifactid	velocity-tools-view-jsp	Highest
Product	Manifest	specification-title	Apache Velocity Tools - JSP support	Medium
Product	file	name	velocity-tools-view-jsp	High
Product	jar	package name	view	Highest
Product	jar	package name	apache	Highest
Product	pom	parent-groupid	org.apache.velocity.tools	Medium
Product	jar	package name	velocity	Highest
Product	pom	name	Apache Velocity Tools - JSP support	High
Product	jar	package name	tools	Highest
Product	pom	parent-artifactid	velocity-tools-parent	Medium
Product	Manifest	implementation-url	https://velocity.apache.org/tools/devel/velocity-tools-view-jsp/	Low
Product	pom	groupid	apache.velocity.tools	Highest
Product	Manifest	Implementation-Title	Apache Velocity Tools - JSP support	High
Version	pom	version	3.0	Highest
Version	file	version	3.0	High
Version	Manifest	Implementation-Version	3.0	High

Identifiers

pkg:maven/org.apache.velocity.tools/velocity-tools-view-jsp@3.0 (Confidence:High)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: Struts 2 Sitemesh Plugin

org.apache.struts:struts2-sitemesh-plugin:2.6-SNAPSHOT

Summary

Dependencies

asm-3.3.1.jar

Evidence

Identifiers

cglib-2.2.2.jar

Evidence

Identifiers

commons-beanutils-1.9.4.jar

Evidence

Identifiers

commons-collections-3.2.2.jar

Evidence

Identifiers

commons-digester3-3.2.jar

Evidence

Identifiers

commons-fileupload-1.4.jar

Evidence

Identifiers

commons-io-2.6.jar

Evidence

Identifiers

commons-lang3-3.10.jar

Evidence

Identifiers

commons-logging-1.2.jar

Evidence

Identifiers

commons-text-1.8.jar

Evidence

Identifiers

freemarker-2.3.30.jar

Evidence

Identifiers

javassist-3.24.1-GA.jar

Evidence

Identifiers

json-simple-3.0.2.jar

Evidence

Identifiers

log4j-api-2.13.1.jar

Evidence

Identifiers

ognl-3.2.14.jar

Evidence

Identifiers

sitemesh-2.4.2.jar

Evidence

Identifiers

slf4j-api-1.7.30.jar

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar

Evidence

Related Dependencies

Identifiers

struts2-core-2.6-SNAPSHOT.jar: domTT.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: inputtransferselect.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: jshint.conf.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: optiontransferselect.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: utils.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: validation.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: validation.js

Evidence