Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all ):
dependency-check version : 11.1.1Report Generated On : Sat, 21 Dec 2024 22:33:44 +0100Dependencies Scanned : 45 (40 unique)Vulnerable Dependencies : 3 Vulnerabilities Found : 5Vulnerabilities Suppressed : 0 ... NVD API Last Checked : 2024-12-21T22:33:10+01NVD API Last Modified : 2024-12-21T17:15:18ZSummary Display:
Showing Vulnerable Dependencies (click to show all) Description:
The AspectJ runtime is a small library necessary to run Java programs enhanced by AspectJ aspects during a previous
compile-time or post-compile-time (binary weaving) build step. License:
Eclipse Public License - v 2.0: https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/aspectj/aspectjrt/1.9.22.1/aspectjrt-1.9.22.1.jar
MD5: fde533763d923fce83b4feca25e6b07c
SHA1: 2b4f27c886fe697fc042f1f67eff7aa6e17e9473
SHA256: 00011425df09198c005b8f9e1203f0c4ddd46b52bd4d4b38746c1b7eb6b9c10e
Referenced In Projects/Scopes: SteelBlue - Examples - JavaFX presentation:runtime SteelBlue - JavaFX Bindings:compile SteelBlue - Examples - Presentation:compile SteelBlue - Examples - Model:compile aspectjrt-1.9.22.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24 pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-presentation-javafx@1.1-ALPHA-4 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24 Evidence Type Source Name Value Confidence Vendor file name aspectjrt High Vendor jar package name aspectj Highest Vendor jar package name aspects Highest Vendor jar package name runtime Highest Vendor Manifest automatic-module-name org.aspectj.runtime Medium Vendor manifest: org/aspectj/lang/ Implementation-Vendor https://www.eclipse.org/aspectj/ Medium Vendor pom artifactid aspectjrt Highest Vendor pom artifactid aspectjrt Low Vendor pom developer email aclement@vmware.com Low Vendor pom developer email kriegaex@aspectj.dev Low Vendor pom developer id aclement Medium Vendor pom developer id kriegaex Medium Vendor pom developer name Alexander Kriegisch Medium Vendor pom developer name Andy Clement Medium Vendor pom groupid org.aspectj Highest Vendor pom name AspectJ Runtime High Vendor pom url https://www.eclipse.org/aspectj/ Highest Product file name aspectjrt High Product jar package name aspectj Highest Product jar package name aspects Highest Product jar package name runtime Highest Product Manifest automatic-module-name org.aspectj.runtime Medium Product manifest: org/aspectj/lang/ Implementation-Title org.aspectj.runtime Medium Product manifest: org/aspectj/lang/ Specification-Title AspectJ Runtime Classes Medium Product pom artifactid aspectjrt Highest Product pom developer email aclement@vmware.com Low Product pom developer email kriegaex@aspectj.dev Low Product pom developer id aclement Low Product pom developer id kriegaex Low Product pom developer name Alexander Kriegisch Low Product pom developer name Andy Clement Low Product pom groupid org.aspectj Highest Product pom name AspectJ Runtime High Product pom url https://www.eclipse.org/aspectj/ Medium Version file version 1.9.22.1 High Version manifest: org/aspectj/lang/ Implementation-Version 1.9.22.1 Medium Version pom version 1.9.22.1 Highest
Description:
The AspectJ weaver applies aspects to Java classes. It can be used as a Java agent in order to apply load-time
weaving (LTW) during class-loading and also contains the AspectJ runtime classes. License:
Eclipse Public License - v 2.0: https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/aspectj/aspectjweaver/1.9.22.1/aspectjweaver-1.9.22.1.jar
MD5: f2edbc088126174a11b68279bd26c6eb
SHA1: bca243d0af0db4758fbae45c5f4995cb5dabb612
SHA256: cd2dd01ec2424c05669df4d557f6c6cd7ed87b05257ee3c866b4c5b116b18a78
Referenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:compile
aspectjweaver-1.9.22.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework/spring-aspects@5.3.37
Evidence Type Source Name Value Confidence Vendor file name aspectjweaver High Vendor jar package name agent Highest Vendor jar package name and Highest Vendor jar package name aspectj Highest Vendor jar package name aspects Highest Vendor jar package name ltw Highest Vendor jar package name org Highest Vendor jar package name runtime Highest Vendor jar package name weaver Highest Vendor Manifest automatic-module-name org.aspectj.weaver Medium Vendor Manifest can-redefine-classes true Low Vendor manifest: org/aspectj/weaver/ Implementation-Vendor https://www.eclipse.org/aspectj/ Medium Vendor pom artifactid aspectjweaver Highest Vendor pom artifactid aspectjweaver Low Vendor pom developer email aclement@vmware.com Low Vendor pom developer email kriegaex@aspectj.dev Low Vendor pom developer id aclement Medium Vendor pom developer id kriegaex Medium Vendor pom developer name Alexander Kriegisch Medium Vendor pom developer name Andy Clement Medium Vendor pom groupid org.aspectj Highest Vendor pom name AspectJ Weaver High Vendor pom url https://www.eclipse.org/aspectj/ Highest Product file name aspectjweaver High Product jar package name agent Highest Product jar package name and Highest Product jar package name aspectj Highest Product jar package name aspects Highest Product jar package name ltw Highest Product jar package name org Highest Product jar package name runtime Highest Product jar package name weaver Highest Product Manifest automatic-module-name org.aspectj.weaver Medium Product Manifest can-redefine-classes true Low Product manifest: org/aspectj/weaver/ Implementation-Title org.aspectj.weaver Medium Product manifest: org/aspectj/weaver/ Specification-Title AspectJ Weaver Classes Medium Product pom artifactid aspectjweaver Highest Product pom developer email aclement@vmware.com Low Product pom developer email kriegaex@aspectj.dev Low Product pom developer id aclement Low Product pom developer id kriegaex Low Product pom developer name Alexander Kriegisch Low Product pom developer name Andy Clement Low Product pom groupid org.aspectj Highest Product pom name AspectJ Weaver High Product pom url https://www.eclipse.org/aspectj/ Medium Version file version 1.9.22.1 High Version manifest: org/aspectj/weaver/ Implementation-Version 1.9.22.1 Medium Version pom version 1.9.22.1 Highest
Description:
High quality UI controls and other tools to complement the core JavaFX distribution License:
The 3-Clause BSD License: http://www.opensource.org/licenses/bsd-license.php File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/controlsfx/controlsfx/11.0.0/controlsfx-11.0.0.jar
MD5: 8476c5f2b8e53057ced89957b5800a41
SHA1: b6d091db1c3323eaa11d7c95b36f7830c4814689
SHA256: 7b9373284bdb94bdaf4a47a4c86097ab7e944135170c06e0db0c564e721b5992
Referenced In Projects/Scopes: SteelBlue - Examples - JavaFX presentation:runtime SteelBlue - JavaFX Bindings:runtime controlsfx-11.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.steelblue/it-tidalwave-role-ui-javafx@1.1-ALPHA-4 pkg:maven/org.jfxtras/jmetro@11.6.14 Evidence Type Source Name Value Confidence Vendor file name controlsfx High Vendor jar package name controlsfx Highest Vendor jar package name org Highest Vendor jar package name tools Highest Vendor Manifest bundle-symbolicname org.controlsfx Medium Vendor pom artifactid controlsfx Highest Vendor pom artifactid controlsfx Low Vendor pom developer email jonathan@jonathangiles.net Low Vendor pom developer name Jonathan Giles Medium Vendor pom groupid org.controlsfx Highest Vendor pom name ControlsFX High Vendor pom url http://www.controlsfx.org/ Highest Product file name controlsfx High Product jar package name controlsfx Highest Product jar package name org Highest Product jar package name tools Highest Product jar package name version Highest Product Manifest Bundle-Name ControlsFX Medium Product Manifest bundle-symbolicname org.controlsfx Medium Product Manifest Implementation-Title ControlsFX High Product Manifest specification-title Java Version 9 Medium Product pom artifactid controlsfx Highest Product pom developer email jonathan@jonathangiles.net Low Product pom developer name Jonathan Giles Low Product pom groupid org.controlsfx Highest Product pom name ControlsFX High Product pom url http://www.controlsfx.org/ Medium Version file version 11.0.0 High Version Manifest Bundle-Version 11.0.0 High Version Manifest Implementation-Version 11.0.0 High Version pom version 11.0.0 Highest
Description:
Roles are a powerful way for designing complex behaviours while keeping good practices such as Single Responsibility, Dependency Inversion and
Interface Segregation.
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-role/3.2-ALPHA-24/it-tidalwave-role-3.2-ALPHA-24.jarMD5: 03c70042a28ce3c67af0117708e78a8dSHA1: cb965781b67b40d6c7f3e09bbe5a59ef934bb0fcSHA256: 0ff4eb4ccb233cbfb65c89ce121e3fc2b6d907d4d1d494133e0dd49b8fe45551Referenced In Projects/Scopes:
SteelBlue - JavaFX Bindings:compile SteelBlue - Examples - Presentation:compile SteelBlue - Examples - Model:compile SteelBlue - Examples - JavaFX presentation:compile it-tidalwave-role-3.2-ALPHA-24.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-presentation@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-role-ui-javafx@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-model@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-presentation-javafx@1.1-ALPHA-4 Evidence Type Source Name Value Confidence Vendor file name it-tidalwave-role High Vendor jar package name it Highest Vendor jar package name role Highest Vendor jar package name tidalwave Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. High Vendor Manifest specification-vendor Tidalwave s.a.s. Low Vendor pom artifactid it-tidalwave-role Highest Vendor pom artifactid it-tidalwave-role Low Vendor pom groupid it.tidalwave.thesefoolishthings Highest Vendor pom name TheseFoolishThings :: Roles High Vendor pom parent-artifactid modules Low Product file name it-tidalwave-role High Product jar package name it Highest Product jar package name role Highest Product jar package name tidalwave Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title TheseFoolishThings :: Roles High Product Manifest specification-title TheseFoolishThings :: Roles Medium Product pom artifactid it-tidalwave-role Highest Product pom groupid it.tidalwave.thesefoolishthings Highest Product pom name TheseFoolishThings :: Roles High Product pom parent-artifactid modules Medium Version pom version 3.2-ALPHA-24 Highest
Description:
Specific Spring support for DCI roles.
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-role-spring/3.2-ALPHA-24/it-tidalwave-role-spring-3.2-ALPHA-24.jarMD5: 2f14e90a953ccc7bbaeb3e8961e7a693SHA1: 7bd5a5916099ac476a3d7eeb4955d59eb2151144SHA256: 070b8113493b8970adbd2253168c82e8312e7ed59a767bf516766f455b958882Referenced In Projects/Scopes:
SteelBlue - JavaFX Bindings:compile SteelBlue - Examples - Presentation:compile SteelBlue - Examples - Model:compile SteelBlue - Examples - JavaFX presentation:compile it-tidalwave-role-spring-3.2-ALPHA-24.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-presentation@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-role-ui-javafx@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-model@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-presentation-javafx@1.1-ALPHA-4 Evidence Type Source Name Value Confidence Vendor file name it-tidalwave-role-spring High Vendor jar package name it Highest Vendor jar package name role Highest Vendor jar package name spring Highest Vendor jar package name tidalwave Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. High Vendor Manifest specification-vendor Tidalwave s.a.s. Low Vendor pom artifactid it-tidalwave-role-spring Highest Vendor pom artifactid it-tidalwave-role-spring Low Vendor pom groupid it.tidalwave.thesefoolishthings Highest Vendor pom name TheseFoolishThings :: Roles :: Spring High Vendor pom parent-artifactid modules Low Product file name it-tidalwave-role-spring High Product jar package name it Highest Product jar package name role Highest Product jar package name spring Highest Product jar package name tidalwave Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title TheseFoolishThings :: Roles :: Spring High Product Manifest specification-title TheseFoolishThings :: Roles :: Spring Medium Product pom artifactid it-tidalwave-role-spring Highest Product pom groupid it.tidalwave.thesefoolishthings Highest Product pom name TheseFoolishThings :: Roles :: Spring High Product pom parent-artifactid modules Medium Version pom version 3.2-ALPHA-24 Highest
Description:
A collection of common utilities.
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-util/3.2-ALPHA-24/it-tidalwave-util-3.2-ALPHA-24.jarMD5: 1bd6e1d7d3b38390d73e52d60125ad65SHA1: 77df5aa3f7b6a1647c7ac73b70dfd1ea047afc8eSHA256: 1cd466c22b0df169f21e90380f111449507fddef314d9fb829b7ed4068b6d34bReferenced In Projects/Scopes:
SteelBlue - JavaFX Bindings:compile SteelBlue - Examples - Presentation:compile SteelBlue - Examples - Model:compile SteelBlue - Examples - JavaFX presentation:compile it-tidalwave-util-3.2-ALPHA-24.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-model@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-role-ui-javafx@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-presentation@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-presentation@1.1-ALPHA-4 Evidence Type Source Name Value Confidence Vendor file name it-tidalwave-util High Vendor jar package name it Highest Vendor jar package name tidalwave Highest Vendor jar package name util Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. High Vendor Manifest specification-vendor Tidalwave s.a.s. Low Vendor pom artifactid it-tidalwave-util Highest Vendor pom artifactid it-tidalwave-util Low Vendor pom groupid it.tidalwave.thesefoolishthings Highest Vendor pom name TheseFoolishThings :: Utilities High Vendor pom parent-artifactid modules Low Product file name it-tidalwave-util High Product jar package name it Highest Product jar package name tidalwave Highest Product jar package name util Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title TheseFoolishThings :: Utilities High Product Manifest specification-title TheseFoolishThings :: Utilities Medium Product pom artifactid it-tidalwave-util Highest Product pom groupid it.tidalwave.thesefoolishthings Highest Product pom name TheseFoolishThings :: Utilities High Product pom parent-artifactid modules Medium Version pom version 3.2-ALPHA-24 Highest
Description:
Miscellaneous utilities for testing.
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-util-test/3.2-ALPHA-24/it-tidalwave-util-test-3.2-ALPHA-24.jarMD5: 7e3905d448c300bf5794e833c3454e03SHA1: e52747b2c214e8c2b5d298a0cfd6e5fce9f70f44SHA256: d7ead438b21335f9d3f34e856c3ad7255607c253ee926f1af892940205dc9276Referenced In Projects/Scopes:
SteelBlue - Examples - Presentation:compile SteelBlue - Examples - Model:compile it-tidalwave-util-test-3.2-ALPHA-24.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 Evidence Type Source Name Value Confidence Vendor file name it-tidalwave-util-test High Vendor jar package name it Highest Vendor jar package name test Highest Vendor jar package name tidalwave Highest Vendor jar package name util Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. High Vendor Manifest specification-vendor Tidalwave s.a.s. Low Vendor pom artifactid it-tidalwave-util-test Highest Vendor pom artifactid it-tidalwave-util-test Low Vendor pom groupid it.tidalwave.thesefoolishthings Highest Vendor pom name TheseFoolishThings :: Test Utilities High Vendor pom parent-artifactid modules Low Product file name it-tidalwave-util-test High Product jar package name it Highest Product jar package name test Highest Product jar package name tidalwave Highest Product jar package name util Highest Product Manifest build-jdk-spec 21 Low Product Manifest Implementation-Title TheseFoolishThings :: Test Utilities High Product Manifest specification-title TheseFoolishThings :: Test Utilities Medium Product pom artifactid it-tidalwave-util-test Highest Product pom groupid it.tidalwave.thesefoolishthings Highest Product pom name TheseFoolishThings :: Test Utilities High Product pom parent-artifactid modules Medium Version pom version 3.2-ALPHA-24 Highest
Description:
The DiffUtils library for computing diffs, applying patches, generationg side-by-side view in Java. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/io/github/java-diff-utils/java-diff-utils/4.15/java-diff-utils-4.15.jar
MD5: 7307001832630cebc9ea88620d4af2d8
SHA1: a8b782ac93bf6c714526ac880adef7c52a87dad7
SHA256: 964c69e3a23a892db2778ae6806aa1d42f81230032bd8e4982dc8620582ee6b7
Referenced In Projects/Scopes: SteelBlue - Examples - Presentation:compile SteelBlue - Examples - Model:compile java-diff-utils-4.15.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 Evidence Type Source Name Value Confidence Vendor file name java-diff-utils High Vendor jar package name github Highest Vendor Manifest automatic-module-name io.github.javadiffutils Medium Vendor Manifest bundle-symbolicname io.github.java-diff-utils Medium Vendor pom artifactid java-diff-utils Highest Vendor pom artifactid java-diff-utils Low Vendor pom groupid io.github.java-diff-utils Highest Vendor pom name java-diff-utils High Vendor pom parent-artifactid java-diff-utils-parent Low Product file name java-diff-utils High Product jar package name diffutils Highest Product jar package name github Highest Product Manifest automatic-module-name io.github.javadiffutils Medium Product Manifest Bundle-Name java-diff-utils Medium Product Manifest bundle-symbolicname io.github.java-diff-utils Medium Product pom artifactid java-diff-utils Highest Product pom groupid io.github.java-diff-utils Highest Product pom name java-diff-utils High Product pom parent-artifactid java-diff-utils-parent Medium Version file version 4.15 High Version pom version 4.15 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-base/11.0.1/javafx-base-11.0.1-mac.jarMD5: 94933060e439fba99478e14fcf2d1b02SHA1: 2b9ca67aea06b0ea7aa0e740498fc97c822b307eSHA256: 2d8052a08fd2e5d98e1d5a16d724ea5dd02102879de20a193225f57199803983Referenced In Project/Scope: SteelBlue - JavaFX Bindings:compilejavafx-base-11.0.1-mac.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-base High Vendor jar package name beans Low Vendor jar package name javafx Low Vendor pom artifactid javafx-base Highest Vendor pom groupid org.openjfx Highest Product file name javafx-base High Product jar package name beans Low Product pom artifactid javafx-base Highest Version file version 11.0.1 High Version pom version 11.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-base/11.0.1/javafx-base-11.0.1.jarMD5: b85ce0631dae83fe643fbd32ccd08e4cSHA1: f1354a284f4151d20358e776f6ff68ee35bbb96dSHA256: c5084a74417a89c69a0c122fae96a4b70bf619fc3d6218ea102a4047ec85ad04Referenced In Project/Scope: SteelBlue - JavaFX Bindings:compilejavafx-base-11.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-base High Vendor Manifest automatic-module-name javafx.baseEmpty Medium Vendor pom artifactid javafx-base Highest Vendor pom artifactid javafx-base Low Vendor pom groupid org.openjfx Highest Vendor pom parent-artifactid javafx Low Product file name javafx-base High Product Manifest automatic-module-name javafx.baseEmpty Medium Product pom artifactid javafx-base Highest Product pom groupid org.openjfx Highest Product pom parent-artifactid javafx Medium Version file version 11.0.1 High Version pom version 11.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-base/23.0.1/javafx-base-23.0.1-mac.jarMD5: 50521c3cf24408c66eb193d9fb52389cSHA1: f05e1e71fd87eb17b445b02b08307e722023439bSHA256: c904420bb5381a048e00102cbe96e70d34194b1a4f0d7acba5df8dd6820c4e11Referenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:compilejavafx-base-23.0.1-mac.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-base High Vendor jar package name beans Low Vendor jar package name javafx Low Vendor pom artifactid javafx-base Highest Vendor pom groupid org.openjfx Highest Product file name javafx-base High Product jar package name beans Low Product pom artifactid javafx-base Highest Version file version 23.0.1 High Version pom version 23.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-base/23.0.1/javafx-base-23.0.1.jarMD5: 24fafc190097fa4d3191414e409794a8SHA1: b09ccc9d998ad8eb1fade4e100c3ff0835d018b5SHA256: 88453a8d4cc921740c84e315e8021b9d984b0920d3c923187c5fd0c2cc1d683cReferenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:compilejavafx-base-23.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-base High Vendor Manifest automatic-module-name javafx.baseEmpty Medium Vendor pom artifactid javafx-base Highest Vendor pom artifactid javafx-base Low Vendor pom groupid org.openjfx Highest Vendor pom parent-artifactid javafx Low Product file name javafx-base High Product Manifest automatic-module-name javafx.baseEmpty Medium Product pom artifactid javafx-base Highest Product pom groupid org.openjfx Highest Product pom parent-artifactid javafx Medium Version file version 23.0.1 High Version pom version 23.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-controls/11.0.1/javafx-controls-11.0.1-mac.jarMD5: f321c782b9bf158a630cb0a7bea73644SHA1: 0538fd08a4ecd76788766a69c19e90b4cc0179f8SHA256: 148468742e957b765d5ac6d5ba66ce983e1acdf582c191bb35dbfe8cdefdb314Referenced In Project/Scope: SteelBlue - JavaFX Bindings:compilejavafx-controls-11.0.1-mac.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-controls High Vendor jar package name control Low Vendor jar package name javafx Low Vendor jar package name scene Low Vendor pom artifactid javafx-controls Highest Vendor pom groupid org.openjfx Highest Product file name javafx-controls High Product jar package name control Low Product jar package name scene Low Product pom artifactid javafx-controls Highest Version file version 11.0.1 High Version pom version 11.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-controls/11.0.1/javafx-controls-11.0.1.jarMD5: 2e18fc95e4aa7ce325cefa67b9f61f3dSHA1: 61cf91bf3494d0616216f49c9e1d183d170adf0aSHA256: 71be28dc4d80744ba541fc50d933729e8703fe1e642ae92037f6fccc7f961971Referenced In Project/Scope: SteelBlue - JavaFX Bindings:compilejavafx-controls-11.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-controls High Vendor Manifest automatic-module-name javafx.controlsEmpty Medium Vendor pom artifactid javafx-controls Highest Vendor pom artifactid javafx-controls Low Vendor pom groupid org.openjfx Highest Vendor pom parent-artifactid javafx Low Product file name javafx-controls High Product Manifest automatic-module-name javafx.controlsEmpty Medium Product pom artifactid javafx-controls Highest Product pom groupid org.openjfx Highest Product pom parent-artifactid javafx Medium Version file version 11.0.1 High Version pom version 11.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-controls/23.0.1/javafx-controls-23.0.1-mac.jarMD5: 7b6b79148d891ebf79e93e25dfa698e9SHA1: aa479f0c3f6275c20dbdf9591bbeffdcabe7b459SHA256: 5ed2be004d63e98803295b37e0c22a84b1c45c0b0343e2595cf4dcf17777037dReferenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:compilejavafx-controls-23.0.1-mac.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-controls High Vendor jar package name control Low Vendor jar package name javafx Low Vendor jar package name scene Low Vendor pom artifactid javafx-controls Highest Vendor pom groupid org.openjfx Highest Product file name javafx-controls High Product jar package name control Low Product jar package name scene Low Product pom artifactid javafx-controls Highest Version file version 23.0.1 High Version pom version 23.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-controls/23.0.1/javafx-controls-23.0.1.jarMD5: 3e895a68f8b410520579f1fac70f4cf2SHA1: c85b22eae11514b5481eb3dea9e2d448235ac592SHA256: dd771a1dcd8b744e1672035aa3c62833e63465fa6066b3a0c2ea27f177cbd4efReferenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:compilejavafx-controls-23.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-controls High Vendor Manifest automatic-module-name javafx.controlsEmpty Medium Vendor pom artifactid javafx-controls Highest Vendor pom artifactid javafx-controls Low Vendor pom groupid org.openjfx Highest Vendor pom parent-artifactid javafx Low Product file name javafx-controls High Product Manifest automatic-module-name javafx.controlsEmpty Medium Product pom artifactid javafx-controls Highest Product pom groupid org.openjfx Highest Product pom parent-artifactid javafx Medium Version file version 23.0.1 High Version pom version 23.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-fxml/11.0.1/javafx-fxml-11.0.1-mac.jarMD5: a835057792b4fc1aa7d6c4bea9547addSHA1: 352a51a0f0cb13cf83a081b5dd5526acd4fbab30SHA256: 56f9a32b3a1fc76c761bd40c16917ed1675c8d5dcbe492a44ce9ee2391e27139Referenced In Project/Scope: SteelBlue - JavaFX Bindings:compilejavafx-fxml-11.0.1-mac.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-fxml High Vendor jar package name fxml Low Vendor jar package name javafx Low Vendor pom artifactid javafx-fxml Highest Vendor pom groupid org.openjfx Highest Product file name javafx-fxml High Product jar package name fxml Low Product pom artifactid javafx-fxml Highest Version file version 11.0.1 High Version pom version 11.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-fxml/11.0.1/javafx-fxml-11.0.1.jarMD5: 6e4c64769d877a47edbdd0023d89a074SHA1: f290c13d7e984d880c9f114f38c2da949ef18d54SHA256: 546fc449f01cd0bbe51a921f9d3f0e5d8764764480caca4a709e681e7ad0b6cfReferenced In Project/Scope: SteelBlue - JavaFX Bindings:compilejavafx-fxml-11.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-fxml High Vendor Manifest automatic-module-name javafx.fxmlEmpty Medium Vendor pom artifactid javafx-fxml Highest Vendor pom artifactid javafx-fxml Low Vendor pom groupid org.openjfx Highest Vendor pom parent-artifactid javafx Low Product file name javafx-fxml High Product Manifest automatic-module-name javafx.fxmlEmpty Medium Product pom artifactid javafx-fxml Highest Product pom groupid org.openjfx Highest Product pom parent-artifactid javafx Medium Version file version 11.0.1 High Version pom version 11.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-fxml/23.0.1/javafx-fxml-23.0.1-mac.jarMD5: a3f7dbeeb1746f64659cadc55bef307eSHA1: b2dd65b856b98a785b154ed395cad830763aefdcSHA256: 2d4c42b15d0e08c3ccd6626b32cf669cd4c38cf4b82d9b64bb9d0805d15e58f9Referenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:compilejavafx-fxml-23.0.1-mac.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-fxml High Vendor jar package name fxml Low Vendor jar package name javafx Low Vendor pom artifactid javafx-fxml Highest Vendor pom groupid org.openjfx Highest Product file name javafx-fxml High Product jar package name fxml Low Product pom artifactid javafx-fxml Highest Version file version 23.0.1 High Version pom version 23.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-fxml/23.0.1/javafx-fxml-23.0.1.jarMD5: cd2178449193cd81f101514d072eef88SHA1: 48ddf89947ddfba21890f670006e3692050e28a3SHA256: 4400b42878b249a776a6cf920d9523cab42c9fb26ba220f9a4f86b932270dde0Referenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:compilejavafx-fxml-23.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-fxml High Vendor Manifest automatic-module-name javafx.fxmlEmpty Medium Vendor pom artifactid javafx-fxml Highest Vendor pom artifactid javafx-fxml Low Vendor pom groupid org.openjfx Highest Vendor pom parent-artifactid javafx Low Product file name javafx-fxml High Product Manifest automatic-module-name javafx.fxmlEmpty Medium Product pom artifactid javafx-fxml Highest Product pom groupid org.openjfx Highest Product pom parent-artifactid javafx Medium Version file version 23.0.1 High Version pom version 23.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-graphics/11.0.1/javafx-graphics-11.0.1-mac.jarMD5: 64a05ff45e2ff0e9695817816284daf5SHA1: 3c5014c500e6d308eca4ac9f952d4f7e7e8dfc7eSHA256: e0bcd295cae13c636f92911474acbab6bee836e6950d1696a02d79a041d61df2Referenced In Project/Scope: SteelBlue - JavaFX Bindings:compilejavafx-graphics-11.0.1-mac.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-graphics High Vendor jar package name javafx Low Vendor jar package name sun Low Vendor jar (hint) package name oracle Low Vendor pom artifactid javafx-graphics Highest Vendor pom groupid org.openjfx Highest Product file name javafx-graphics High Product pom artifactid javafx-graphics Highest Version file version 11.0.1 High Version pom version 11.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-graphics/11.0.1/javafx-graphics-11.0.1-mac.jar/javafx-swt.jarMD5: ee1545edcd485b34080e9389f2f86b5eSHA1: c12e9a9d5ad723c3e2b60651659b0290d68d9e48SHA256: a7432e9a357e03571ded2ef3d148086b92c297605797bcb31d37eb95b4779317Referenced In Project/Scope: SteelBlue - JavaFX Bindings:compile
Evidence Type Source Name Value Confidence Vendor file name javafx-swt High Vendor jar package name embed Low Vendor jar package name javafx Low Vendor jar package name swt Low Product file name javafx-swt High Product jar package name embed Low Product jar package name swt Low
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-graphics/11.0.1/javafx-graphics-11.0.1.jarMD5: ff0579b2b89bfc26f6eb73f812076a1bSHA1: e062cb01783effc6413abbd94d1838f6b0add209SHA256: f597c672a4337a75ba856f38cf548c524b039f452423c34b55653e56c306733dReferenced In Project/Scope: SteelBlue - JavaFX Bindings:compilejavafx-graphics-11.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-graphics High Vendor Manifest automatic-module-name javafx.graphicsEmpty Medium Vendor pom artifactid javafx-graphics Highest Vendor pom artifactid javafx-graphics Low Vendor pom groupid org.openjfx Highest Vendor pom parent-artifactid javafx Low Product file name javafx-graphics High Product Manifest automatic-module-name javafx.graphicsEmpty Medium Product pom artifactid javafx-graphics Highest Product pom groupid org.openjfx Highest Product pom parent-artifactid javafx Medium Version file version 11.0.1 High Version pom version 11.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-graphics/23.0.1/javafx-graphics-23.0.1-mac.jarMD5: 0ff8b8cd7d68417844a84558a1dc0999SHA1: 2179e556885f143e43b0bd180a347719a9ff26c6SHA256: ea4bbfdece5852b4b7e4facad497a02e28e78c6c47f2762d3f09ade034f90b9cReferenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:compilejavafx-graphics-23.0.1-mac.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-graphics High Vendor jar package name javafx Low Vendor jar package name sun Low Vendor jar (hint) package name oracle Low Vendor pom artifactid javafx-graphics Highest Vendor pom groupid org.openjfx Highest Product file name javafx-graphics High Product pom artifactid javafx-graphics Highest Version file version 23.0.1 High Version pom version 23.0.1 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-graphics/23.0.1/javafx-graphics-23.0.1-mac.jar/javafx-swt.jarMD5: bec51df5f8b77846da5642a9139105fdSHA1: 856dfd5a9ae631e3c9c7ab64924b24445ba05518SHA256: b05652a13b4fbd8c1c87f41805bf7e4fc64d6908755dc4aacb6467fb0cd433ccReferenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:compile
Evidence Type Source Name Value Confidence Vendor file name javafx-swt High Vendor jar package name embed Low Vendor jar package name javafx Low Vendor jar package name swt Low Product file name javafx-swt High Product jar package name embed Low Product jar package name swt Low
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/openjfx/javafx-graphics/23.0.1/javafx-graphics-23.0.1.jarMD5: 04e5cde14cc94c22025b2edbe7380c42SHA1: 86bfcc23faf67f7eb9a6dc09b062f75499e9a76cSHA256: 9090abb6881488e74b8f87e45a8238ec3324ec44ecc60fc1fb7b5032d8095111Referenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:compilejavafx-graphics-23.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name javafx-graphics High Vendor Manifest automatic-module-name javafx.graphicsEmpty Medium Vendor pom artifactid javafx-graphics Highest Vendor pom artifactid javafx-graphics Low Vendor pom groupid org.openjfx Highest Vendor pom parent-artifactid javafx Low Product file name javafx-graphics High Product Manifest automatic-module-name javafx.graphicsEmpty Medium Product pom artifactid javafx-graphics Highest Product pom groupid org.openjfx Highest Product pom parent-artifactid javafx Medium Version file version 23.0.1 High Version pom version 23.0.1 Highest
Description:
Common Annotations for the JavaTM Platform API License:
CDDL + GPLv2 with classpath exception: https://github.com/javaee/javax.annotation/blob/master/LICENSE File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar
MD5: 2ab1973eefffaa2aeec47d50b9e40b9d
SHA1: 934c04d3cfef185a8008e7bf34331b79730a9d43
SHA256: e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b
Referenced In Projects/Scopes: SteelBlue - JavaFX Bindings:compile SteelBlue - Examples - Presentation:compile SteelBlue - Examples - Model:compile SteelBlue - Examples - JavaFX presentation:compile javax.annotation-api-1.3.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 Evidence Type Source Name Value Confidence Vendor file name javax.annotation-api High Vendor jar package name annotation Highest Vendor jar package name javax Highest Vendor Manifest automatic-module-name java.annotation Medium Vendor Manifest bundle-docurl https://javaee.github.io/glassfish Low Vendor Manifest bundle-symbolicname javax.annotation-api Medium Vendor Manifest extension-name javax.annotation Medium Vendor Manifest Implementation-Vendor GlassFish Community High Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom artifactid javax.annotation-api Highest Vendor pom artifactid javax.annotation-api Low Vendor pom developer id ldemichiel Medium Vendor pom developer name Linda De Michiel Medium Vendor pom developer org Oracle Corp. Medium Vendor pom groupid javax.annotation Highest Vendor pom name API High Vendor pom name ${extension.name} API High Vendor pom organization name GlassFish Community High Vendor pom organization url https://javaee.github.io/glassfish Medium Vendor pom parent-artifactid jvnet-parent Low Vendor pom parent-groupid net.java Medium Vendor pom url http://jcp.org/en/jsr/detail?id=250 Highest Product file name javax.annotation-api High Product jar package name annotation Highest Product jar package name javax Highest Product Manifest automatic-module-name java.annotation Medium Product Manifest bundle-docurl https://javaee.github.io/glassfish Low Product Manifest Bundle-Name javax.annotation API Medium Product Manifest bundle-symbolicname javax.annotation-api Medium Product Manifest extension-name javax.annotation Medium Product pom artifactid javax.annotation-api Highest Product pom developer id ldemichiel Low Product pom developer name Linda De Michiel Low Product pom developer org Oracle Corp. Low Product pom groupid javax.annotation Highest Product pom name API High Product pom name ${extension.name} API High Product pom organization name GlassFish Community Low Product pom organization url https://javaee.github.io/glassfish Low Product pom parent-artifactid jvnet-parent Medium Product pom parent-groupid net.java Medium Product pom url http://jcp.org/en/jsr/detail?id=250 Medium Version file version 1.3.2 High Version Manifest Bundle-Version 1.3.2 High Version Manifest Implementation-Version 1.3.2 High Version pom parent-version 1.3.2 Low Version pom version 1.3.2 Highest
Description:
The javax.inject API License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/javax/inject/javax.inject/1/javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256: 91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Projects/Scopes: SteelBlue - JavaFX Bindings:compile SteelBlue - Examples - Presentation:compile SteelBlue - Examples - Model:compile SteelBlue - Examples - JavaFX presentation:compile javax.inject-1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24 pkg:maven/it.tidalwave.steelblue/it-tidalwave-role-ui-javafx@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-role-ui-javafx@1.1-ALPHA-4 Evidence Type Source Name Value Confidence Vendor file name javax.inject-1 High Vendor jar package name inject Highest Vendor jar package name inject Low Vendor jar package name javax Highest Vendor jar package name javax Low Vendor pom artifactid javax.inject Highest Vendor pom artifactid javax.inject Low Vendor pom groupid javax.inject Highest Vendor pom name javax.inject High Vendor pom url http://code.google.com/p/atinject/ Highest Product file name javax.inject-1 High Product jar package name inject Highest Product jar package name inject Low Product jar package name javax Highest Product pom artifactid javax.inject Highest Product pom groupid javax.inject Highest Product pom name javax.inject High Product pom url http://code.google.com/p/atinject/ Medium Version file version 1 Medium Version pom version 1 Highest
Description:
JCL 1.2 implemented over SLF4J License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/slf4j/jcl-over-slf4j/2.0.16/jcl-over-slf4j-2.0.16.jar
MD5: c077b88c43f9d63f64f9880fdb457efb
SHA1: 9d08badad22f1ac07deac9188ade596472a2bfd9
SHA256: 5744d62c5af556e839ab922c9fa3f737f0a5971e478ba68b2eb5256b2842ec78
Referenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:runtime
jcl-over-slf4j-2.0.16.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-presentation-javafx@1.1-ALPHA-4
Evidence Type Source Name Value Confidence Vendor file name jcl-over-slf4j High Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname jcl.over.slf4j Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor pom artifactid jcl-over-slf4j Highest Vendor pom artifactid jcl-over-slf4j Low Vendor pom groupid org.slf4j Highest Vendor pom name JCL 1.2 implemented over SLF4J High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name jcl-over-slf4j High Product jar package name 9 Highest Product jar package name apache Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name JCL 1.2 implemented over SLF4J Medium Product Manifest bundle-symbolicname jcl.over.slf4j Medium Product Manifest Implementation-Title jcl-over-slf4j High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product pom artifactid jcl-over-slf4j Highest Product pom groupid org.slf4j Highest Product pom name JCL 1.2 implemented over SLF4J High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
Description:
A theme / look and feel for JavaFX inspired by Microsoft's Fluent Design (previously named Metro) License:
BSD New: https://opensource.org/licenses/BSD-3-Clause File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/jfxtras/jmetro/11.6.14/jmetro-11.6.14.jar
MD5: 2dbdab0d96cf0b0d9d886a5f618b2d21
SHA1: e7a760f00799966e257a4fae37ab13563f461af9
SHA256: d05af705f5fafb1fd2a12131671809796937bef95a94f8913ab25636f3263694
Referenced In Projects/Scopes: SteelBlue - JavaFX Bindings:compile SteelBlue - Examples - JavaFX presentation:compile jmetro-11.6.14.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.steelblue/it-tidalwave-role-ui-javafx@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-role-ui-javafx@1.1-ALPHA-4 Evidence Type Source Name Value Confidence Vendor file name jmetro High Vendor jar package name jfxtras Highest Vendor jar package name jmetro Highest Vendor pom artifactid jmetro Highest Vendor pom artifactid jmetro Low Vendor pom developer id dukke Medium Vendor pom developer name Pedro Duque Vieira Medium Vendor pom groupid org.jfxtras Highest Vendor pom name jmetro High Vendor pom url https://www.pixelduke.com/jmetro Highest Product file name jmetro High Product jar package name jfxtras Highest Product jar package name jmetro Highest Product Manifest Implementation-Title jmetro High Product pom artifactid jmetro Highest Product pom developer id dukke Low Product pom developer name Pedro Duque Vieira Low Product pom groupid org.jfxtras Highest Product pom name jmetro High Product pom url https://www.pixelduke.com/jmetro Medium Version file version 11.6.14 High Version Manifest Implementation-Version 11.6.14 High Version pom version 11.6.14 Highest
Description:
JSR305 Annotations for Findbugs License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256: 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Projects/Scopes: SteelBlue - JavaFX Bindings:compile SteelBlue - Examples - Presentation:compile SteelBlue - Examples - Model:compile SteelBlue - Examples - JavaFX presentation:compile jsr305-3.0.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util@3.2-ALPHA-24 Evidence Type Source Name Value Confidence Vendor file name jsr305 High Vendor Manifest bundle-symbolicname org.jsr-305 Medium Vendor pom artifactid jsr305 Highest Vendor pom artifactid jsr305 Low Vendor pom groupid com.google.code.findbugs Highest Vendor pom name FindBugs-jsr305 High Vendor pom url http://findbugs.sourceforge.net/ Highest Product file name jsr305 High Product Manifest Bundle-Name FindBugs-jsr305 Medium Product Manifest bundle-symbolicname org.jsr-305 Medium Product pom artifactid jsr305 Highest Product pom groupid com.google.code.findbugs Highest Product pom name FindBugs-jsr305 High Product pom url http://findbugs.sourceforge.net/ Medium Version file version 3.0.2 High Version Manifest Bundle-Version 3.0.2 High Version pom version 3.0.2 Highest
Description:
JUL to SLF4J bridge License:
http://www.opensource.org/licenses/mit-license.php File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/slf4j/jul-to-slf4j/2.0.16/jul-to-slf4j-2.0.16.jar
MD5: 410ad2f2230e0150216d86e12a4af995
SHA1: 6d57da3e961daac65bcca0dd3def6cd11e48a24a
SHA256: 0f2ec396ea29c9a440890d1f09fdb82fdd574b47b298435764235451c193861d
Referenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:runtime
jul-to-slf4j-2.0.16.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-presentation-javafx@1.1-ALPHA-4
Evidence Type Source Name Value Confidence Vendor file name jul-to-slf4j High Vendor jar package name bridge Highest Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname jul.to.slf4j Medium Vendor Manifest multi-release true Low Vendor pom artifactid jul-to-slf4j Highest Vendor pom artifactid jul-to-slf4j Low Vendor pom groupid org.slf4j Highest Vendor pom name JUL to SLF4J bridge High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name jul-to-slf4j High Product jar package name bridge Highest Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name JUL to SLF4J bridge Medium Product Manifest bundle-symbolicname jul.to.slf4j Medium Product Manifest Implementation-Title jul-to-slf4j High Product Manifest multi-release true Low Product pom artifactid jul-to-slf4j Highest Product pom groupid org.slf4j Highest Product pom name JUL to SLF4J bridge High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
Description:
logback-classic module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/ch/qos/logback/logback-classic/1.5.12/logback-classic-1.5.12.jar
MD5: 5f752b29e5cf40b79a5bedef12cee8c3
SHA1: 3790d1a62e868f7915776dfb392bd9a29ce8d954
SHA256: ebe1a2ce1072b365090d58af40fcb7482d7864a31cd2b1c62c9b1d13f9a80c09
Referenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:runtime
logback-classic-1.5.12.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-presentation-javafx@1.1-ALPHA-4
Evidence Type Source Name Value Confidence Vendor file name logback-classic High Vendor jar package name ch Highest Vendor jar package name classic Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.classic Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.8 Low Vendor Manifest provide-capability osgi.service;objectClass:List="jakarta.servlet.ServletContainerInitializer";effective:=active,osgi.service;objectClass:List="org.slf4j.spi.SLF4JServiceProvider";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.servlet.ServletContainerInitializer";register:="ch.qos.logback.classic.servlet.LogbackServletContainerInitializer",osgi.serviceloader;osgi.serviceloader="org.slf4j.spi.SLF4JServiceProvider";register:="ch.qos.logback.classic.spi.LogbackServiceProvider" Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-classic Highest Vendor pom artifactid logback-classic Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Classic Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-classic High Product jar package name ch Highest Product jar package name classic Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Classic Module Medium Product Manifest bundle-symbolicname ch.qos.logback.classic Medium Product Manifest Implementation-Title Logback Classic Module High Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.8 Low Product Manifest provide-capability osgi.service;objectClass:List="jakarta.servlet.ServletContainerInitializer";effective:=active,osgi.service;objectClass:List="org.slf4j.spi.SLF4JServiceProvider";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.servlet.ServletContainerInitializer";register:="ch.qos.logback.classic.servlet.LogbackServletContainerInitializer",osgi.serviceloader;osgi.serviceloader="org.slf4j.spi.SLF4JServiceProvider";register:="ch.qos.logback.classic.spi.LogbackServiceProvider" Low Product Manifest specification-title Logback Classic Module Medium Product pom artifactid logback-classic Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Classic Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.12 High Version Manifest Bundle-Version 1.5.12 High Version Manifest Implementation-Version 1.5.12 High Version pom version 1.5.12 Highest
Description:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/ch/qos/logback/logback-core/1.5.12/logback-core-1.5.12.jar
MD5: e381425e2c7eb1b0b0f3fa93f6c67355
SHA1: 65b1fa25fe8d8e4bdc140e79eb67ac6741f775e2
SHA256: 3f35b41621c2cbf72a9d9f3ce2270ba2040e4808bd6befdd720866e926d3e84a
Referenced In Project/Scope: SteelBlue - Examples - JavaFX presentation:runtime
logback-core-1.5.12.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-presentation-javafx@1.1-ALPHA-4
Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.8 Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-core Highest Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name 21 Highest Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Implementation-Title Logback Core Module High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.8 Low Product Manifest specification-title Logback Core Module Medium Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.12 High Version Manifest Bundle-Version 1.5.12 High Version Manifest Implementation-Version 1.5.12 High Version pom version 1.5.12 Highest
CVE-2024-12798 (OSSINDEX)suppress
ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core
upto and including version 1.5.12 in Java applications allows
attacker to execute arbitrary code by compromising an existing
logback configuration file or by injecting an environment variable
before program execution.
Malicious logback configuration files can allow the attacker to execute
arbitrary code using the JaninoEventEvaluator extension.
A successful attack requires the user to have write access to a
configuration file. Alternatively, the attacker could inject a malicious
environment variable pointing to a malicious configuration file. In both
cases, the attack requires existing privilege. CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVSSv2:
Base Score: MEDIUM (5.900000095367432) Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:ch.qos.logback:logback-core:1.5.12:*:*:*:*:*:*:* CVE-2024-12801 (OSSINDEX)suppress
Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 1.5.12 on the Java platform, allows an attacker to
forge requests by compromising logback configuration files in XML.
The attacks involves the modification of DOCTYPE declaration in XML configuration files.
Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2024-12801 for details CWE-918 Server-Side Request Forgery (SSRF)
CVSSv2:
Base Score: LOW (2.4000000953674316) Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:L/SC:H/SI:H/SA:H References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:ch.qos.logback:logback-core:1.5.12:*:*:*:*:*:*:* Description:
Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more! License:
The MIT License: https://projectlombok.org/LICENSE File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/projectlombok/lombok/1.18.36/lombok-1.18.36.jar
MD5: 92c08153ae16c161c8cc2cc8185d2724
SHA1: 5a30490a6e14977d97d9c73c924c1f1b5311ea95
SHA256: 73b6b05b6a2d365b700bab08d30f94de9d336490bc0acce5b6181fef48cbf18e
Referenced In Projects/Scopes: SteelBlue - JavaFX Bindings:provided SteelBlue (modules):provided SteelBlue - Examples - JavaFX presentation:provided SteelBlue (examples):provided SteelBlue - Examples - Model:provided SteelBlue - Examples - Presentation:provided lombok-1.18.36.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-presentation@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-modules@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-model@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-examples@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-role-ui-javafx@1.1-ALPHA-4 pkg:maven/it.tidalwave.steelblue/it-tidalwave-steelblue-example-presentation-javafx@1.1-ALPHA-4 Evidence Type Source Name Value Confidence Vendor file name lombok High Vendor jar package name java Highest Vendor jar package name lombok Highest Vendor jar package name tostring Highest Vendor Manifest automatic-module-name lombok Medium Vendor Manifest can-redefine-classes true Low Vendor pom artifactid lombok Highest Vendor pom artifactid lombok Low Vendor pom developer email reinier@projectlombok.org Low Vendor pom developer email roel@projectlombok.org Low Vendor pom developer id rspilker Medium Vendor pom developer id rzwitserloot Medium Vendor pom developer name Reinier Zwitserloot Medium Vendor pom developer name Roel Spilker Medium Vendor pom groupid org.projectlombok Highest Vendor pom name Project Lombok High Vendor pom url https://projectlombok.org Highest Product file name lombok High Product jar package name java Highest Product jar package name lombok Highest Product jar package name tostring Highest Product Manifest automatic-module-name lombok Medium Product Manifest can-redefine-classes true Low Product pom artifactid lombok Highest Product pom developer email reinier@projectlombok.org Low Product pom developer email roel@projectlombok.org Low Product pom developer id rspilker Low Product pom developer id rzwitserloot Low Product pom developer name Reinier Zwitserloot Low Product pom developer name Roel Spilker Low Product pom groupid org.projectlombok Highest Product pom name Project Lombok High Product pom url https://projectlombok.org Medium Version file version 1.18.36 High Version Manifest lombok-version 1.18.36 Medium Version pom version 1.18.36 Highest
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/projectlombok/lombok/1.18.36/lombok-1.18.36.jar/lombok/launch/mavenEcjBootstrapAgent.jarMD5: 27467519bf9615b24cad3b003c4353a9SHA1: 37d92e0a726a67883ab94bee27c6f292e6318dcdSHA256: 9566d0706d6245cac3cdd9db6d1d81551aa3e727febcf64452c6db9701c40037Referenced In Projects/Scopes:
SteelBlue - JavaFX Bindings:provided SteelBlue (modules):provided SteelBlue - Examples - JavaFX presentation:provided SteelBlue (examples):provided SteelBlue - Examples - Model:provided SteelBlue - Examples - Presentation:provided Evidence Type Source Name Value Confidence Vendor file name mavenEcjBootstrapAgent High Vendor jar package name launch Low Vendor jar package name lombok Low Vendor Manifest can-redefine-classes true Low Product file name mavenEcjBootstrapAgent High Product jar package name launch Low Product Manifest can-redefine-classes true Low
Description:
The slf4j API License:
http://www.opensource.org/licenses/mit-license.php File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/slf4j/slf4j-api/2.0.16/slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256: a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Projects/Scopes: SteelBlue - JavaFX Bindings:compile SteelBlue - Examples - Presentation:compile SteelBlue - Examples - Model:compile SteelBlue - Examples - JavaFX presentation:compile slf4j-api-2.0.16.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 Evidence Type Source Name Value Confidence Vendor file name slf4j-api High Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor Manifest multi-release true Low Vendor pom artifactid slf4j-api Highest Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name SLF4J API Module Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product Manifest multi-release true Low Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
Description:
Annotations the SpotBugs tool supports License:
GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/github/spotbugs/spotbugs-annotations/3.1.9/spotbugs-annotations-3.1.9.jar
MD5: 56a1a81d69b6a111161bbce0e6dea26a
SHA1: 2ef5127efcc1a899aab8c66d449a631c9a99c469
SHA256: 68c7c46b4299e94837e236ae742f399901a950fe910fe3ca710026753b5dd2e1
Referenced In Projects/Scopes: SteelBlue - JavaFX Bindings:compile SteelBlue - Examples - Presentation:compile SteelBlue - Examples - Model:compile SteelBlue - Examples - JavaFX presentation:compile spotbugs-annotations-3.1.9.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role@3.2-ALPHA-24 Evidence Type Source Name Value Confidence Vendor file name spotbugs-annotations High Vendor Manifest automatic-module-name com.github.spotbugs.annotations Medium Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname spotbugs-annotations Medium Vendor pom artifactid spotbugs-annotations Highest Vendor pom artifactid spotbugs-annotations Low Vendor pom developer email andreas.sewe@codetrails.com Low Vendor pom developer email dbrosius@mebigfatguy.com Low Vendor pom developer email loskutov@gmx.de Low Vendor pom developer email skypencil@gmail.com Low Vendor pom developer id henrik242 Medium Vendor pom developer id iloveeclipse Medium Vendor pom developer id jsotuyod Medium Vendor pom developer id KengoTODA Medium Vendor pom developer id mebigfatguy Medium Vendor pom developer id sewe Medium Vendor pom developer id ThrawnCA Medium Vendor pom developer name Andreas Sewe Medium Vendor pom developer name Andrey Loskutov Medium Vendor pom developer name Dave Brosius Medium Vendor pom developer name Juan Martín Sotuyo Dodero Medium Vendor pom developer name Kengo TODA Medium Vendor pom groupid com.github.spotbugs Highest Vendor pom name SpotBugs Annotations High Vendor pom url https://spotbugs.github.io/ Highest Product file name spotbugs-annotations High Product Manifest automatic-module-name com.github.spotbugs.annotations Medium Product Manifest Bundle-Name spotbugs-annotations Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname spotbugs-annotations Medium Product pom artifactid spotbugs-annotations Highest Product pom developer email andreas.sewe@codetrails.com Low Product pom developer email dbrosius@mebigfatguy.com Low Product pom developer email loskutov@gmx.de Low Product pom developer email skypencil@gmail.com Low Product pom developer id henrik242 Low Product pom developer id iloveeclipse Low Product pom developer id jsotuyod Low Product pom developer id KengoTODA Low Product pom developer id mebigfatguy Low Product pom developer id sewe Low Product pom developer id ThrawnCA Low Product pom developer name Andreas Sewe Low Product pom developer name Andrey Loskutov Low Product pom developer name Dave Brosius Low Product pom developer name Juan Martín Sotuyo Dodero Low Product pom developer name Kengo TODA Low Product pom groupid com.github.spotbugs Highest Product pom name SpotBugs Annotations High Product pom url https://spotbugs.github.io/ Medium Version file version 3.1.9 High Version Manifest Bundle-Version 3.1.9 High Version pom version 3.1.9 Highest
Description:
Spring Core License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-core/5.3.37/spring-core-5.3.37.jar
MD5: fbc5c33d34c54949e9f8cb07acf70e16
SHA1: a6664808571dcb93b2949c20c8af923a51946b1b
SHA256: fa368ec048ab821774c5259498462a53eb7c860c3ce876e427e1b18999efb4b8
Referenced In Projects/Scopes: SteelBlue - JavaFX Bindings:compile SteelBlue - Examples - Presentation:compile SteelBlue - Examples - Model:compile SteelBlue - Examples - JavaFX presentation:compile spring-core-5.3.37.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.springframework/spring-beans@5.3.37 pkg:maven/org.springframework/spring-beans@5.3.37 pkg:maven/org.springframework/spring-beans@5.3.37 pkg:maven/org.springframework/spring-context@5.3.37 Evidence Type Source Name Value Confidence Vendor file name spring-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name io Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.core Medium Vendor pom artifactid spring-core Highest Vendor pom artifactid spring-core Low Vendor pom developer email jhoeller@pivotal.io Low Vendor pom developer id jhoeller Medium Vendor pom developer name Juergen Hoeller Medium Vendor pom groupid org.springframework Highest Vendor pom name Spring Core High Vendor pom organization name Spring IO High Vendor pom organization url https://spring.io/projects/spring-framework Medium Vendor pom url spring-projects/spring-framework Highest Product file name spring-core High Product hint analyzer product springsource_spring_framework Highest Product jar package name core Highest Product jar package name io Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.core Medium Product Manifest Implementation-Title spring-core High Product pom artifactid spring-core Highest Product pom developer email jhoeller@pivotal.io Low Product pom developer id jhoeller Low Product pom developer name Juergen Hoeller Low Product pom groupid org.springframework Highest Product pom name Spring Core High Product pom organization name Spring IO Low Product pom organization url https://spring.io/projects/spring-framework Low Product pom url spring-projects/spring-framework High Version file version 5.3.37 High Version Manifest Implementation-Version 5.3.37 High Version pom version 5.3.37 Highest
Related Dependencies spring-aop-5.3.37.jarFile Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-aop/5.3.37/spring-aop-5.3.37.jar MD5: 20fde6f4b68cd04b8e8e938d5720968c SHA1: ab1d2ff858cd736e4671a5ea09f022bc3c96c06f SHA256: 48049480b96435a409e7bceda9b650ecbe58093a7d8e9cbcfe7f5b877a522c68 pkg:maven/org.springframework/spring-aop@5.3.37 spring-aspects-5.3.37.jarFile Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-aspects/5.3.37/spring-aspects-5.3.37.jar MD5: 8e0f4b9da2aa04e836d9788e69331b8c SHA1: 8d6f269d6bfd5a8db90b34ab2c86a8e199423ba8 SHA256: 25a4a9b7264d6ca82707eb2178afd24a5e2d1333b0c1d6c631a20b89b38fca7d pkg:maven/org.springframework/spring-aspects@5.3.37 spring-beans-5.3.37.jarFile Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-beans/5.3.37/spring-beans-5.3.37.jar MD5: 4fb485d952d8c81af2110a73610dca09 SHA1: baf443fbb94f9c0b8e3ab845c91898f1f8942741 SHA256: 96df4350a77692095490b8eeb2e8d5df4c121d38e6a68f9e75e2aeefc9bf4b60 pkg:maven/org.springframework/spring-beans@5.3.37 spring-context-5.3.37.jarFile Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-context/5.3.37/spring-context-5.3.37.jar MD5: 0074542d9cedfedeb1c3f257fa130236 SHA1: f0a6d6f9f3ecfff0eec8d6abccace14c5db97867 SHA256: cb804389aac212f898f349dc066b5cdc35fd2fa27bc5278fa4e98debd9d97d94 pkg:maven/org.springframework/spring-context@5.3.37 spring-jcl-5.3.37.jarFile Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-jcl/5.3.37/spring-jcl-5.3.37.jar MD5: 2a3f45b81c3f0d5ebbc4ae7ef99052c2 SHA1: 34c730fcd794a9dd59e8a9bb1b2e019d52822584 SHA256: 32e6f7d7e810e2582b39427f30f5b221954c8c37ddc25cd5e8497e544f9da918 pkg:maven/org.springframework/spring-jcl@5.3.37 CVE-2024-38820 suppress
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected. NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Spring Expression Language (SpEL) License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-expression/5.3.37/spring-expression-5.3.37.jar
MD5: 4cb4ca755ad6d729b0fff17be4071014
SHA1: df34b75531291e192144bb08ae307540504fef19
SHA256: 1b8bc056a122b49a6d80c3c024395bebdfada8353eae31b052da98963dabc00d
Referenced In Projects/Scopes: SteelBlue - JavaFX Bindings:compile SteelBlue - Examples - Presentation:compile SteelBlue - Examples - Model:compile SteelBlue - Examples - JavaFX presentation:compile spring-expression-5.3.37.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24 pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-24 pkg:maven/it.tidalwave.steelblue/it-tidalwave-role-ui-javafx@1.1-ALPHA-4 pkg:maven/org.springframework/spring-context@5.3.37 Evidence Type Source Name Value Confidence Vendor file name spring-expression High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name expression Highest Vendor jar package name spel Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.expression Medium Vendor pom artifactid spring-expression Highest Vendor pom artifactid spring-expression Low Vendor pom developer email jhoeller@pivotal.io Low Vendor pom developer id jhoeller Medium Vendor pom developer name Juergen Hoeller Medium Vendor pom groupid org.springframework Highest Vendor pom name Spring Expression Language (SpEL) High Vendor pom organization name Spring IO High Vendor pom organization url https://spring.io/projects/spring-framework Medium Vendor pom url spring-projects/spring-framework Highest Product file name spring-expression High Product hint analyzer product springsource_spring_framework Highest Product jar package name expression Highest Product jar package name spel Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.expression Medium Product Manifest Implementation-Title spring-expression High Product pom artifactid spring-expression Highest Product pom developer email jhoeller@pivotal.io Low Product pom developer id jhoeller Low Product pom developer name Juergen Hoeller Low Product pom groupid org.springframework Highest Product pom name Spring Expression Language (SpEL) High Product pom organization name Spring IO Low Product pom organization url https://spring.io/projects/spring-framework Low Product pom url spring-projects/spring-framework High Version file version 5.3.37 High Version Manifest Implementation-Version 5.3.37 High Version pom version 5.3.37 Highest
CVE-2024-38808 (OSSINDEX)suppress
In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.
Specifically, an application is vulnerable when the following is true:
* The application evaluates user-supplied SpEL expressions.
Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2024-38808 for details CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv2:
Base Score: MEDIUM (5.300000190734863) Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.springframework:spring-expression:5.3.37:*:*:*:*:*:*:* CVE-2024-38820 suppress
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected. NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )