Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
The AspectJ runtime is a small library necessary to run Java programs enhanced by AspectJ aspects during a previous
compile-time or post-compile-time (binary weaving) build step.
License:
Eclipse Public License - v 2.0: https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/aspectj/aspectjrt/1.9.19/aspectjrt-1.9.19.jar MD5: 249f23aacbb08a0b4ab60fd92c9ef1e8 SHA1: d6d4ccdb1318b19c85e8c1c2227941c32a4253a9 SHA256:87fcab9b5f01a2bbddc13db7b439bd55a786f85bfac4872d25c911c91e23c45b Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile aspectjrt-1.9.19.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-21
Roles are a powerful way for designing complex behaviours while keeping good practices such as Single Responsibility, Dependency Inversion and
Interface Segregation.
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-role/3.2-ALPHA-21/it-tidalwave-role-3.2-ALPHA-21.jar MD5: 19811d88656466854d8b4b046c5e6ab3 SHA1: 05745a9c87a38d62ec1da0a095da8e5cf337f5ca SHA256:a6dc7d39043ea9b1a0bc6aebbdf775fad17bab70b6b8008a89e3b08861ffe1ca Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile it-tidalwave-role-3.2-ALPHA-21.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-21
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-role-spring/3.2-ALPHA-21/it-tidalwave-role-spring-3.2-ALPHA-21.jar MD5: 951605ed562a160c00ff5fdcedba6b46 SHA1: c0515b5b33780267e438e069914c0af4d11eb969 SHA256:64b6ffc42bbfa4a244109c943c8f81e69a3042f3f697d1c12a50a45fcf307548 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile it-tidalwave-role-spring-3.2-ALPHA-21.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-21
This module provides sample data structures used by other examples.
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-thesefoolishthings-examples-data/3.2-ALPHA-21/it-tidalwave-thesefoolishthings-examples-data-3.2-ALPHA-21.jar MD5: e9a34dd6163ad49bad5aadc97f5fce00 SHA1: b1be8adf97179fa9a911d551ceb2f750ff0c7898 SHA256:60888fb9b8048f26aa1c8a8c6a478078934c876dc3170544f333e00ed1ca3b36 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile it-tidalwave-thesefoolishthings-examples-data-3.2-ALPHA-21.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-21
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-util/3.2-ALPHA-21/it-tidalwave-util-3.2-ALPHA-21.jar MD5: 73a9c2f906cb07358a6555d4e38584f9 SHA1: 55648948f8eb05642bf22bfc1c7d66e8f1945df7 SHA256:51ffc62523712e8302dd59c433e0a5713b2589a53366265933eb8146f51da29e Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile it-tidalwave-util-3.2-ALPHA-21.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-21
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-util-test/3.2-ALPHA-21/it-tidalwave-util-test-3.2-ALPHA-21.jar MD5: 02861044fb326befa92af1fb05646fa8 SHA1: 59ae9077be9e56e738617038c3d5984fa1607c88 SHA256:9050ede4893b500529fcbc8cf15b08f4e2731772183bb203832e3aad85927d3a Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile it-tidalwave-util-test-3.2-ALPHA-21.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-21
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/io/github/java-diff-utils/java-diff-utils/4.12/java-diff-utils-4.12.jar MD5: 2bab3395dcfe2ea5b092ad646ca899d3 SHA1: 1a712a91324d566eef39817fc5c9980eb10c21db SHA256:9990a2039778f6b4cc94790141c2868864eacee0620c6c459451121a901cd5b5 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile java-diff-utils-4.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-21
CDDL + GPLv2 with classpath exception: https://github.com/javaee/javax.annotation/blob/master/LICENSE
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar MD5: 2ab1973eefffaa2aeec47d50b9e40b9d SHA1: 934c04d3cfef185a8008e7bf34331b79730a9d43 SHA256:e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile javax.annotation-api-1.3.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-21
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/javax/inject/javax.inject/1/javax.inject-1.jar MD5: 289075e48b909e9e74e6c915b3631d2e SHA1: 6975da39a7040257bd51d21a231b76c915872d38 SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile javax.inject-1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-21
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/slf4j/jcl-over-slf4j/2.0.7/jcl-over-slf4j-2.0.7.jar MD5: 4e8d6cd31f7e6277280c95157ac7845a SHA1: f127fe5ee53404a8b3697cdd032dd1dd6a29dd77 SHA256:41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile jcl-over-slf4j-2.0.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-21
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar MD5: dd83accb899363c32b07d7a1b2e4ce40 SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/ch/qos/logback/logback-core/1.4.7/logback-core-1.4.7.jar MD5: 9ede7e4dd41876089777578092b713e3 SHA1: a2948dae4013d0e9486141b4d638d8951becb767 SHA256:df743fa8c4e166a2a6b6268aa53697bca95aa674bbfa9cce086f98b166b3c22f Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:runtime logback-core-1.4.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-21
Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!
License:
The MIT License: https://projectlombok.org/LICENSE
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/projectlombok/lombok/1.18.24/lombok-1.18.24.jar MD5: a1651eaa9c999c61131d32feab16fcde SHA1: 13a394eed5c4f9efb2a6d956e2086f1d81e857d9 SHA256:d3584bc2db03f059f984fb0a9c119aac1fa0da578a448e69fc3f68b36584c749 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:provided lombok-1.18.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-21
MXParser is a fork of xpp3_min 1.1.7 containing only the parser with merged changes of the Plexus fork.
License:
Indiana University Extreme! Lab Software License: https://raw.githubusercontent.com/x-stream/mxparser/master/LICENSE.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/io/github/x-stream/mxparser/1.2.2/mxparser-1.2.2.jar MD5: 9d7e42409dfdcee9bd17903015bdeae2 SHA1: 476fb3b3bb3716cad797cd054ce45f89445794e9 SHA256:aeeee23a3303d811bca8790ea7f25b534314861c03cff36dafdcc2180969eb97 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile mxparser-1.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.thoughtworks.xstream/xstream@1.4.20
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/slf4j/slf4j-api/2.0.7/slf4j-api-2.0.7.jar MD5: 403dffa46cdd2e3c82da19df4f394a4c SHA1: 41eb7184ea9d556f23e18b5cb99cad1f8581fc00 SHA256:5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile slf4j-api-2.0.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-21
GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/github/spotbugs/spotbugs-annotations/3.1.9/spotbugs-annotations-3.1.9.jar MD5: 56a1a81d69b6a111161bbce0e6dea26a SHA1: 2ef5127efcc1a899aab8c66d449a631c9a99c469 SHA256:68c7c46b4299e94837e236ae742f399901a950fe910fe3ca710026753b5dd2e1 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile spotbugs-annotations-3.1.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-21
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-core/5.3.24/spring-core-5.3.24.jar MD5: c5a7205d5d58105713aa9f033ae01dd9 SHA1: d095c329f30baf2b6d44eccbd2352d7a2f840c72 SHA256:7d513957395e6a354b80e714b31a52b765dd6c771b50a26419d277a06d13ea68 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile spring-core-5.3.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework/spring-beans@5.3.24
Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
Public Domain: http://www.xmlpull.org/v1/download/unpacked/LICENSE.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/xmlpull/xmlpull/1.1.3.1/xmlpull-1.1.3.1.jar MD5: cc57dacc720eca721a50e78934b822d2 SHA1: 2b8e230d2ab644e4ecaa94db7cdedbc40c805dfa SHA256:34e08ee62116071cbb69c0ed70d15a7a5b208d62798c59f2120bb8929324cb63 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile xmlpull-1.1.3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.thoughtworks.xstream/xstream@1.4.20
XStream is a serialization library from Java objects to XML and back.
License:
BSD-3-Clause
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/thoughtworks/xstream/xstream/1.4.20/xstream-1.4.20.jar MD5: 1e816f33b1eb780a309789478051faeb SHA1: 0e2315b8b2e95e9f21697833c8e56cdd9c98a5ee SHA256:87df0f0be57c92037d0110fbb225a30b651702dc275653d285afcfef31bc2e81 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Marshal XStream:compile xstream-1.4.20.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-marshal-xstream@3.2-ALPHA-21