Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/zaxxer/HikariCP/4.0.3/HikariCP-4.0.3.jar MD5: e725642926105cd1bbf4ad7fdff5d5a9 SHA1: 107cbdf0db6780a065f895ae9d8fbf3bb0e1c21f SHA256:7c024aeff1c1063576d74453513f9de6447d8e624d17f8e27f30a2e97688c6c9 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile HikariCP-4.0.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
A framework for constructing recognizers, compilers,
and translators from grammatical descriptions containing
Java, C#, C++, or Python actions.
License:
BSD License: http://www.antlr.org/license.html
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/antlr/antlr/2.7.7/antlr-2.7.7.jar MD5: f8f1352c52a4c6a500b597596501fc64 SHA1: 83cd2cd674a217ade95a4bb83a8a14f351f48bd0 SHA256:88fbda4b912596b9f56e8e12e580cc954bacfb51776ecfddd3e18fc1cf56dc4c Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile antlr-2.7.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
The AspectJ runtime is a small library necessary to run Java programs enhanced by AspectJ aspects during a previous
compile-time or post-compile-time (binary weaving) build step.
License:
Eclipse Public License - v 2.0: https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/aspectj/aspectjrt/1.9.19/aspectjrt-1.9.19.jar MD5: 249f23aacbb08a0b4ab60fd92c9ef1e8 SHA1: d6d4ccdb1318b19c85e8c1c2227941c32a4253a9 SHA256:87fcab9b5f01a2bbddc13db7b439bd55a786f85bfac4872d25c911c91e23c45b Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile aspectjrt-1.9.19.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-role-spring@3.2-ALPHA-21
Byte Buddy is a Java library for creating Java classes at run time.
This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/net/bytebuddy/byte-buddy/1.12.20/byte-buddy-1.12.20.jar MD5: a23f0b0ec5a590835f7bb6a10f5df42d SHA1: 6ec3b8bccc4c988790d8cde5baad3b95609ef136 SHA256:0a9b2795e0e2391117062f0fc7f6ae98fa3c2a7c927847ff1e01bb7cffcd9167 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile byte-buddy-1.12.20.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.mockito/mockito-core@4.8.1
Library for introspecting types with full generic information
including resolving of field and method types.
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/fasterxml/classmate/1.5.1/classmate-1.5.1.jar MD5: e91fcd30ba329fd1b0b6dc5321fd067c SHA1: 3fe0bed568c62df5e89f4f174c101eab25345b6c SHA256:aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile classmate-1.5.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/h2database/h2/2.1.214/h2-2.1.214.jar MD5: 93628fb706e682dd989f697394039025 SHA1: d5c2005c9e3279201e12d4776c948578b16bf8b2 SHA256:d623cdc0f61d218cf549a8d09f1c391ff91096116b22e2475475fce4fbe72bd0 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile h2-2.1.214.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-21
The web-based admin console in H2 Database Engine through 2.1.214 can be started via the CLI with the argument -webAdminPassword, which allows the user to specify the password in cleartext for the web admin console. Consequently, a local user (or an attacker that has obtained local access through some means) would be able to discover the password by listing processes and their arguments. NOTE: the vendor states "This is not a vulnerability of H2 Console ... Passwords should never be passed on the command line and every qualified DBA or system administrator is expected to know that."
CWE-312 Cleartext Storage of Sensitive Information
h2database - Improper Link Resolution Before File Access
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
CWE-59 Improper Link Resolution Before File Access ('Link Following')
Common reflection code used in support of annotation processing
License:
GNU Library General Public License v2.1 or later: http://www.opensource.org/licenses/LGPL-2.1
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/hibernate/common/hibernate-commons-annotations/5.1.2.Final/hibernate-commons-annotations-5.1.2.Final.jar MD5: 2a2490b3eb8e7585a6a899d27d7ed43f SHA1: e59ffdbc6ad09eeb33507b39ffcf287679a498c8 SHA256:1c7ce712b2679fea0a5441eb02a04144297125b768944819be0765befb996275 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile hibernate-commons-annotations-5.1.2.Final.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
GNU Library General Public License v2.1 or later: https://www.opensource.org/licenses/LGPL-2.1
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/hibernate/hibernate-core/5.6.14.Final/hibernate-core-5.6.14.Final.jar MD5: ec54e7703232f55bdf9e340309ef6556 SHA1: 71e407089b71ed7c6e99385fd851c308fed7be44 SHA256:eba7f97b5e6c382b235ca263cb55dad6efd482054dc090eaf6d44bc7d9690336 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile hibernate-core-5.6.14.Final.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/sun/istack/istack-commons-runtime/3.0.12/istack-commons-runtime-3.0.12.jar MD5: 1952bd76321f8580cfaa57e332a68287 SHA1: cbbe1a62b0cc6c85972e99d52aaee350153dc530 SHA256:27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile istack-commons-runtime-3.0.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
Roles are a powerful way for designing complex behaviours while keeping good practices such as Single Responsibility, Dependency Inversion and
Interface Segregation.
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-role/3.2-ALPHA-21/it-tidalwave-role-3.2-ALPHA-21.jar MD5: 19811d88656466854d8b4b046c5e6ab3 SHA1: 05745a9c87a38d62ec1da0a095da8e5cf337f5ca SHA256:a6dc7d39043ea9b1a0bc6aebbdf775fad17bab70b6b8008a89e3b08861ffe1ca Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile it-tidalwave-role-3.2-ALPHA-21.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-21
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-role-spring/3.2-ALPHA-21/it-tidalwave-role-spring-3.2-ALPHA-21.jar MD5: 951605ed562a160c00ff5fdcedba6b46 SHA1: c0515b5b33780267e438e069914c0af4d11eb969 SHA256:64b6ffc42bbfa4a244109c943c8f81e69a3042f3f697d1c12a50a45fcf307548 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile it-tidalwave-role-spring-3.2-ALPHA-21.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-21
This module provides sample data structures used by other examples.
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-thesefoolishthings-examples-data/3.2-ALPHA-21/it-tidalwave-thesefoolishthings-examples-data-3.2-ALPHA-21.jar MD5: e9a34dd6163ad49bad5aadc97f5fce00 SHA1: b1be8adf97179fa9a911d551ceb2f750ff0c7898 SHA256:60888fb9b8048f26aa1c8a8c6a478078934c876dc3170544f333e00ed1ca3b36 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile it-tidalwave-thesefoolishthings-examples-data-3.2-ALPHA-21.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-21
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-util/3.2-ALPHA-21/it-tidalwave-util-3.2-ALPHA-21.jar MD5: 73a9c2f906cb07358a6555d4e38584f9 SHA1: 55648948f8eb05642bf22bfc1c7d66e8f1945df7 SHA256:51ffc62523712e8302dd59c433e0a5713b2589a53366265933eb8146f51da29e Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile it-tidalwave-util-3.2-ALPHA-21.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-21
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-util-test/3.2-ALPHA-21/it-tidalwave-util-test-3.2-ALPHA-21.jar MD5: 02861044fb326befa92af1fb05646fa8 SHA1: 59ae9077be9e56e738617038c3d5984fa1607c88 SHA256:9050ede4893b500529fcbc8cf15b08f4e2731772183bb203832e3aad85927d3a Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile it-tidalwave-util-test-3.2-ALPHA-21.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-21
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/sun/activation/jakarta.activation/1.2.2/jakarta.activation-1.2.2.jar MD5: 0b8bee3bf29b9a015f8b992035581a7c SHA1: 74548703f9851017ce2f556066659438019e7eb5 SHA256:02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:runtime jakarta.activation-1.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/jakarta/annotation/jakarta.annotation-api/1.3.5/jakarta.annotation-api-1.3.5.jar MD5: 8b165cf58df5f8c2a222f637c0a07c97 SHA1: 59eb84ee0d616332ff44aba065f3888cf002cd2d SHA256:85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile jakarta.annotation-api-1.3.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter@2.7.7
Eclipse Public License v. 2.0: http://www.eclipse.org/legal/epl-2.0
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/jakarta/persistence/jakarta.persistence-api/2.2.3/jakarta.persistence-api-2.2.3.jar MD5: e0a655f398f8e68e0afebb0f71fba4e5 SHA1: 8f6ea5daedc614f07a3654a455660145286f024e SHA256:0c2d73ab36ad24eeed6e0bea928e9d0ef771de8df689e23b7754d366dda27c53 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile jakarta.persistence-api-2.2.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/jakarta/transaction/jakarta.transaction-api/1.3.3/jakarta.transaction-api-1.3.3.jar MD5: cc45726045cc9a0728f803f9db4c90c4 SHA1: c4179d48720a1e87202115fbed6089bdc4195405 SHA256:0b02a194dd04ee2e192dc9da9579e10955dd6e8ac707adfc91d92f119b0e67ab Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile jakarta.transaction-api-1.3.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/jakarta/xml/bind/jakarta.xml.bind-api/2.3.3/jakarta.xml.bind-api-2.3.3.jar MD5: 61286918ca0192e9f87d1358aef718dd SHA1: 48e3b9cfc10752fba3521d6511f4165bea951801 SHA256:c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile jakarta.xml.bind-api-2.3.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
Parent POM for JBoss projects. Provides default project build configuration.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/jboss/jandex/2.4.2.Final/jandex-2.4.2.Final.jar MD5: 489f7a97d2ed7ae34ea56d01b3566d57 SHA1: 1e1c385990b258ff1a24c801e84aebbacf70eb39 SHA256:3f2ce55c7d71e744581488dc5105806aa8084c08e6e916a019bab8f8698994f0 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile jandex-2.4.2.Final.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/io/github/java-diff-utils/java-diff-utils/4.12/java-diff-utils-4.12.jar MD5: 2bab3395dcfe2ea5b092ad646ca899d3 SHA1: 1a712a91324d566eef39817fc5c9980eb10c21db SHA256:9990a2039778f6b4cc94790141c2868864eacee0620c6c459451121a901cd5b5 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile java-diff-utils-4.12.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-util-test@3.2-ALPHA-21
CDDL + GPLv2 with classpath exception: https://github.com/javaee/javax.annotation/blob/master/LICENSE
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar MD5: 2ab1973eefffaa2aeec47d50b9e40b9d SHA1: 934c04d3cfef185a8008e7bf34331b79730a9d43 SHA256:e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile javax.annotation-api-1.3.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-21
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/javax/inject/javax.inject/1/javax.inject-1.jar MD5: 289075e48b909e9e74e6c915b3631d2e SHA1: 6975da39a7040257bd51d21a231b76c915872d38 SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile javax.inject-1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-21
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/glassfish/jaxb/jaxb-runtime/2.3.7/jaxb-runtime-2.3.7.jar MD5: 4fb00614ad222cfdfc2204ceae827fb5 SHA1: ebcde6a44159eb9e3db721dfe6b45f26e6272341 SHA256:c048d9edde5d5d67bca4f66921ef1315b8e20b1a978b757d54cea0ea5ce1c907 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile jaxb-runtime-2.3.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
Apache License, version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/jboss/logging/jboss-logging/3.4.3.Final/jboss-logging-3.4.3.Final.jar MD5: b298d4b79e591843c1eb1458ea79f070 SHA1: c4bd7e12a745c0e7f6cf98c45cdcdf482fd827ea SHA256:0b324cca4d550060e51e70cc0045a6cce62f264278ec1f5082aafeb670fcac49 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile jboss-logging-3.4.3.Final.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/slf4j/jcl-over-slf4j/2.0.7/jcl-over-slf4j-2.0.7.jar MD5: 4e8d6cd31f7e6277280c95157ac7845a SHA1: f127fe5ee53404a8b3697cdd032dd1dd6a29dd77 SHA256:41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile jcl-over-slf4j-2.0.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-21
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar MD5: dd83accb899363c32b07d7a1b2e4ce40 SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@3.1.9
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/slf4j/jul-to-slf4j/2.0.7/jul-to-slf4j-2.0.7.jar MD5: 965fd8c7c67bd57eb63b321d0bedf498 SHA1: a48f44aeaa8a5ddc347007298a28173ac1fbbd8b SHA256:eaba65483bb38c93e68d557a19e5738962322de1946545dbf40e5e32f6293008 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile jul-to-slf4j-2.0.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter@2.7.7
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/apache/logging/log4j/log4j-api/2.17.2/log4j-api-2.17.2.jar MD5: 0c39d90e7819c92c111e447bdf786a90 SHA1: f42d6afa111b4dec5d2aea0fe2197240749a4ea6 SHA256:09351b5a03828f369cdcff76f4ed39e6a6fc20f24f046935d0b28ef5152f8ce4 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile log4j-api-2.17.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter@2.7.7
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/apache/logging/log4j/log4j-to-slf4j/2.17.2/log4j-to-slf4j-2.17.2.jar MD5: 14b27a4266c6d71c949cb4591ee463cc SHA1: 17dd0fae2747d9a28c67bc9534108823d2376b46 SHA256:9bcfa5273527b950d79739d11e8f8080cfc881908fa2a946b4e891c0293094de Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile log4j-to-slf4j-2.17.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter@2.7.7
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/ch/qos/logback/logback-core/1.4.7/logback-core-1.4.7.jar MD5: 9ede7e4dd41876089777578092b713e3 SHA1: a2948dae4013d0e9486141b4d638d8951becb767 SHA256:df743fa8c4e166a2a6b6268aa53697bca95aa674bbfa9cce086f98b166b3c22f Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:runtime logback-core-1.4.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-21
Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!
License:
The MIT License: https://projectlombok.org/LICENSE
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/projectlombok/lombok/1.18.24/lombok-1.18.24.jar MD5: a1651eaa9c999c61131d32feab16fcde SHA1: 13a394eed5c4f9efb2a6d956e2086f1d81e857d9 SHA256:d3584bc2db03f059f984fb0a9c119aac1fa0da578a448e69fc3f68b36584c749 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:provided lombok-1.18.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-21
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/slf4j/slf4j-api/2.0.7/slf4j-api-2.0.7.jar MD5: 403dffa46cdd2e3c82da19df4f394a4c SHA1: 41eb7184ea9d556f23e18b5cb99cad1f8581fc00 SHA256:5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile slf4j-api-2.0.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-21
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/yaml/snakeyaml/1.30/snakeyaml-1.30.jar MD5: ba063b8ef3a8bfd591a1b56451166b14 SHA1: 8fde7fe2586328ac3c68db92045e1c8759125000 SHA256:f43a4e40a946b8cdfd0321bc1c9a839bc3f119c57e4ca84fb87c367f51c8b2b3 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile snakeyaml-1.30.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter@2.7.7
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.
Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/com/github/spotbugs/spotbugs-annotations/3.1.9/spotbugs-annotations-3.1.9.jar MD5: 56a1a81d69b6a111161bbce0e6dea26a SHA1: 2ef5127efcc1a899aab8c66d449a631c9a99c469 SHA256:68c7c46b4299e94837e236ae742f399901a950fe910fe3ca710026753b5dd2e1 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile spotbugs-annotations-3.1.9.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/it.tidalwave.thesefoolishthings/it-tidalwave-thesefoolishthings-examples-dci-persistence-jpa@3.2-ALPHA-21
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/boot/spring-boot/2.7.7/spring-boot-2.7.7.jar MD5: 75e5a70f351a7b64d9e7af866bfe75a9 SHA1: 1fa59eb2fce0363bdf152d7660b784257bfac99b SHA256:57cb88b88ff9b8b75fa65f1d85a209065e75fe1e28e4403c165633f16579dfb7 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile spring-boot-2.7.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter@2.7.7
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/spring-core/5.3.24/spring-core-5.3.24.jar MD5: c5a7205d5d58105713aa9f033ae01dd9 SHA1: d095c329f30baf2b6d44eccbd2352d7a2f840c72 SHA256:7d513957395e6a354b80e714b31a52b765dd6c771b50a26419d277a06d13ea68 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile spring-core-5.3.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter@2.7.7
Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/data/spring-data-commons/2.7.6/spring-data-commons-2.7.6.jar MD5: f17351668836c0395932bb5539abf9cf SHA1: e3d15a8f4d5ef0d2323569445c66903d0188cb68 SHA256:8903f08719c8a220fbbb502ebad23c7f5694ad382493e3ce0e7fcf6bedaccae1 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile spring-data-commons-2.7.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/springframework/data/spring-data-jpa/2.7.6/spring-data-jpa-2.7.6.jar MD5: f5a576a6fe2ddde2b2db47e9b437695d SHA1: 8d0414f5cca5e31509943cd5f97cacdddd7c7384 SHA256:40b5de0a77874250ef906a0cd5ab2607e9e8412c12b6c6df4c2a4c0f6814e2db Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile spring-data-jpa-2.7.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7
TXW is a library that allows you to write XML documents.
File Path: /Volumes/Users/fritz/Business/Tidalwave/Projects/WorkAreas/Tidalwave/tidalwave.bitbucket.io/repository/org/glassfish/jaxb/txw2/2.3.7/txw2-2.3.7.jar MD5: d7d7c63bc636c072394334c85cb6d49f SHA1: 55cddcac1945150e09b09b0f89d86799652eee82 SHA256:4a52d7c42a7e6270c8d72554eb994059f53d69c2545fb2daa02c6e9bfbda8b22 Referenced In Project/Scope: TheseFoolishThings :: Examples :: DCI :: Persistence JPA:compile txw2-2.3.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.7.7