Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 8.2.1
Report Generated On: Thu, 4 May 2023 08:54:09 +0200
Dependencies Scanned: 13 (8 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE Checked: 2023-05-04T08:53:58
NVD CVE Modified: 2023-05-04T07:00:01
VersionCheckOn: 2023-04-20T15:42:27
kev.checked: 1683182297

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
bcpkix-jdk15on-1.70.jar	cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle:1.70:::::::*	pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.70	Low	66
bcprov-jdk15on-1.70.jar	cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.70:::::::* cpe:2.3:a:bouncycastle:bouncy_castle_crypto_package:1.70:::::::* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle:1.70:::::::* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.70:::::::* cpe:2.3:a:bouncycastle:the_bouncy_castle_crypto_package_for_java:1.70:::::::*	pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70	Low	60
bcutil-jdk15on-1.70.jar	cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle:1.70:::::::*	pkg:maven/org.bouncycastle/bcutil-jdk15on@1.70	Low	50
commons-io-2.11.0.jar	cpe:2.3:a:apache:commons_io:2.11.0:::::::*	pkg:maven/commons-io/commons-io@2.11.0	Highest	123
javax.servlet-api-3.1.0.jar	cpe:2.3:a:oracle:java_se:3.1.0:::::::*	pkg:maven/javax.servlet/javax.servlet-api@3.1.0	Medium	49
jetty-io-9.4.51.v20230217.jar	cpe:2.3:a:eclipse:jetty:9.4.51:20230217:::::: cpe:2.3:a:jetty:jetty:9.4.51:20230217:::::: cpe:2.3:a:mortbay_jetty:jetty:9.4.51:20230217::::::	pkg:maven/org.eclipse.jetty/jetty-io@9.4.51.v20230217	Highest	39
jetty-server-9.4.51.v20230217.jar	cpe:2.3:a:eclipse:jetty:9.4.51:20230217:::::: cpe:2.3:a:jetty:jetty:9.4.51:20230217:::::: cpe:2.3:a:jetty:jetty_http_server:9.4.51:20230217:::::: cpe:2.3:a:mortbay_jetty:jetty:9.4.51:20230217::::::	pkg:maven/org.eclipse.jetty/jetty-server@9.4.51.v20230217	Highest	39
slf4j-api-1.7.36.jar		pkg:maven/org.slf4j/slf4j-api@1.7.36		29

Dependencies

bcpkix-jdk15on-1.70.jar

Description:

The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.

License:

Bouncy Castle Licence: https://www.bouncycastle.org/licence.html

File Path: /Users/fcorneli/.m2/repository/org/bouncycastle/bcpkix-jdk15on/1.70/bcpkix-jdk15on-1.70.jar
MD5: 2c383f50d41937eae4fd32c35d8668cd
SHA1: f81e5af49571a9d5a109a88f239a73ce87055417
SHA256:e5b9cb821df57f70b0593358e89c0e8d7266515da9d088af6c646f63d433c07c
Referenced In Project/Scope: jTrust Test PKI:compile
pkg:maven/be.fedict.jtrust/jtrust-testpki@2.1.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bcpkix-jdk15on	High
Vendor	jar	package name	bouncycastle	Highest
Vendor	jar	package name	cmp	Highest
Vendor	jar	package name	cms	Highest
Vendor	jar	package name	crmf	Highest
Vendor	jar	package name	eac	Highest
Vendor	jar	package name	ocsp	Highest
Vendor	jar	package name	pkcs	Highest
Vendor	jar	package name	pkix	Highest
Vendor	jar	package name	tsp	Highest
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	application-name	Bouncy Castle PKIX API	Medium
Vendor	Manifest	automatic-module-name	org.bouncycastle.pkix	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	bcpkix	Medium
Vendor	Manifest	caller-allowable-codebase	*	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	extension-name	org.bouncycastle.bcpkix	Medium
Vendor	Manifest	Implementation-Vendor	BouncyCastle.org	High
Vendor	Manifest	Implementation-Vendor-Id	org.bouncycastle	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	originally-created-by	25.292-b10 (Private Build)	Low
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	BouncyCastle.org	Low
Vendor	Manifest	trusted-library	true	Low
Vendor	pom	artifactid	bcpkix-jdk15on	Highest
Vendor	pom	artifactid	bcpkix-jdk15on	Low
Vendor	pom	developer email	feedback-crypto@bouncycastle.org	Low
Vendor	pom	developer id	feedback-crypto	Medium
Vendor	pom	developer name	The Legion of the Bouncy Castle Inc.	Medium
Vendor	pom	groupid	org.bouncycastle	Highest
Vendor	pom	name	Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs	High
Vendor	pom	url	https://www.bouncycastle.org/java.html	Highest
Product	file	name	bcpkix-jdk15on	High
Product	jar	package name	bouncycastle	Highest
Product	jar	package name	cmp	Highest
Product	jar	package name	cms	Highest
Product	jar	package name	crmf	Highest
Product	jar	package name	eac	Highest
Product	jar	package name	ocsp	Highest
Product	jar	package name	pkcs	Highest
Product	jar	package name	pkix	Highest
Product	jar	package name	tsp	Highest
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	application-name	Bouncy Castle PKIX API	Medium
Product	Manifest	automatic-module-name	org.bouncycastle.pkix	Medium
Product	Manifest	Bundle-Name	bcpkix	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	bcpkix	Medium
Product	Manifest	caller-allowable-codebase	*	Low
Product	Manifest	codebase	*	Low
Product	Manifest	extension-name	org.bouncycastle.bcpkix	Medium
Product	Manifest	multi-release	true	Low
Product	Manifest	originally-created-by	25.292-b10 (Private Build)	Low
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	trusted-library	true	Low
Product	pom	artifactid	bcpkix-jdk15on	Highest
Product	pom	developer email	feedback-crypto@bouncycastle.org	Low
Product	pom	developer id	feedback-crypto	Low
Product	pom	developer name	The Legion of the Bouncy Castle Inc.	Low
Product	pom	groupid	org.bouncycastle	Highest
Product	pom	name	Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs	High
Product	pom	url	https://www.bouncycastle.org/java.html	Medium
Version	file	version	1.70	High
Version	Manifest	Bundle-Version	1.70	High
Version	pom	version	1.70	Highest

Identifiers

pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.70 (Confidence:High)
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle:1.70:*:*:*:*:*:*:* (Confidence:Low)

bcprov-jdk15on-1.70.jar

Description:

The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.

License:

Bouncy Castle Licence: https://www.bouncycastle.org/licence.html

File Path: /Users/fcorneli/.m2/repository/org/bouncycastle/bcprov-jdk15on/1.70/bcprov-jdk15on-1.70.jar
MD5: 1809d0449a6374279c01fdd3be26cd92
SHA1: 4636a0d01f74acaf28082fb62b317f1080118371
SHA256:8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4
Referenced In Project/Scope: jTrust Test PKI:compile
pkg:maven/be.fedict.jtrust/jtrust-testpki@2.1.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bcprov-jdk15on	High
Vendor	jar	package name	bouncycastle	Highest
Vendor	jar	package name	crypto	Highest
Vendor	jar	package name	jce	Highest
Vendor	jar	package name	org	Highest
Vendor	jar	package name	provider	Highest
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	application-name	Bouncy Castle Provider	Medium
Vendor	Manifest	automatic-module-name	org.bouncycastle.provider	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	bcprov	Medium
Vendor	Manifest	caller-allowable-codebase	*	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	extension-name	org.bouncycastle.bcprovider	Medium
Vendor	Manifest	Implementation-Vendor	BouncyCastle.org	High
Vendor	Manifest	Implementation-Vendor-Id	org.bouncycastle	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	originally-created-by	25.292-b10 (Private Build)	Low
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	BouncyCastle.org	Low
Vendor	Manifest	trusted-library	true	Low
Vendor	pom	artifactid	bcprov-jdk15on	Highest
Vendor	pom	artifactid	bcprov-jdk15on	Low
Vendor	pom	developer email	feedback-crypto@bouncycastle.org	Low
Vendor	pom	developer id	feedback-crypto	Medium
Vendor	pom	developer name	The Legion of the Bouncy Castle Inc.	Medium
Vendor	pom	groupid	org.bouncycastle	Highest
Vendor	pom	name	Bouncy Castle Provider	High
Vendor	pom	url	https://www.bouncycastle.org/java.html	Highest
Product	file	name	bcprov-jdk15on	High
Product	hint analyzer	product	legion-of-the-bouncy-castle-java-crytography-api	High
Product	hint analyzer	product	the_bouncy_castle_crypto_package_for_java	High
Product	jar	package name	bouncycastle	Highest
Product	jar	package name	crypto	Highest
Product	jar	package name	jce	Highest
Product	jar	package name	org	Highest
Product	jar	package name	provider	Highest
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	application-name	Bouncy Castle Provider	Medium
Product	Manifest	automatic-module-name	org.bouncycastle.provider	Medium
Product	Manifest	Bundle-Name	bcprov	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	bcprov	Medium
Product	Manifest	caller-allowable-codebase	*	Low
Product	Manifest	codebase	*	Low
Product	Manifest	extension-name	org.bouncycastle.bcprovider	Medium
Product	Manifest	multi-release	true	Low
Product	Manifest	originally-created-by	25.292-b10 (Private Build)	Low
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	trusted-library	true	Low
Product	pom	artifactid	bcprov-jdk15on	Highest
Product	pom	developer email	feedback-crypto@bouncycastle.org	Low
Product	pom	developer id	feedback-crypto	Low
Product	pom	developer name	The Legion of the Bouncy Castle Inc.	Low
Product	pom	groupid	org.bouncycastle	Highest
Product	pom	name	Bouncy Castle Provider	High
Product	pom	url	https://www.bouncycastle.org/java.html	Medium
Version	file	version	1.70	High
Version	Manifest	Bundle-Version	1.70	High
Version	pom	version	1.70	Highest

Identifiers

pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70 (Confidence:High)
cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.70:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:bouncycastle:bouncy_castle_crypto_package:1.70:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle:1.70:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.70:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:bouncycastle:the_bouncy_castle_crypto_package_for_java:1.70:*:*:*:*:*:*:* (Confidence:Low)

bcutil-jdk15on-1.70.jar

Description:

The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.5 and up.

License:

Bouncy Castle Licence: https://www.bouncycastle.org/licence.html

File Path: /Users/fcorneli/.m2/repository/org/bouncycastle/bcutil-jdk15on/1.70/bcutil-jdk15on-1.70.jar
MD5: 805173dfb0891331dbe69d0e53371af4
SHA1: 54280e7195a7430d7911ded93fc01e07300b9526
SHA256:52dc5551b0257666526c5095424567fed7dc7b00d2b1ba7bd52298411112b1d0
Referenced In Project/Scope: jTrust Test PKI:compile
pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.70

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bcutil-jdk15on	High
Vendor	jar	package name	bouncycastle	Highest
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	application-name	Bouncy Castle Utility APIs	Medium
Vendor	Manifest	automatic-module-name	org.bouncycastle.util	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	bcutil	Medium
Vendor	Manifest	caller-allowable-codebase	*	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	extension-name	org.bouncycastle.bcutil	Medium
Vendor	Manifest	Implementation-Vendor	BouncyCastle.org	High
Vendor	Manifest	Implementation-Vendor-Id	org.bouncycastle	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	originally-created-by	25.292-b10 (Private Build)	Low
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	BouncyCastle.org	Low
Vendor	Manifest	trusted-library	true	Low
Vendor	pom	artifactid	bcutil-jdk15on	Highest
Vendor	pom	artifactid	bcutil-jdk15on	Low
Vendor	pom	developer email	feedback-crypto@bouncycastle.org	Low
Vendor	pom	developer id	feedback-crypto	Medium
Vendor	pom	developer name	The Legion of the Bouncy Castle Inc.	Medium
Vendor	pom	groupid	org.bouncycastle	Highest
Vendor	pom	name	Bouncy Castle ASN.1 Extension and Utility APIs	High
Vendor	pom	url	https://www.bouncycastle.org/java.html	Highest
Product	file	name	bcutil-jdk15on	High
Product	jar	package name	bouncycastle	Highest
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	application-name	Bouncy Castle Utility APIs	Medium
Product	Manifest	automatic-module-name	org.bouncycastle.util	Medium
Product	Manifest	Bundle-Name	bcutil	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	bcutil	Medium
Product	Manifest	caller-allowable-codebase	*	Low
Product	Manifest	codebase	*	Low
Product	Manifest	extension-name	org.bouncycastle.bcutil	Medium
Product	Manifest	multi-release	true	Low
Product	Manifest	originally-created-by	25.292-b10 (Private Build)	Low
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	trusted-library	true	Low
Product	pom	artifactid	bcutil-jdk15on	Highest
Product	pom	developer email	feedback-crypto@bouncycastle.org	Low
Product	pom	developer id	feedback-crypto	Low
Product	pom	developer name	The Legion of the Bouncy Castle Inc.	Low
Product	pom	groupid	org.bouncycastle	Highest
Product	pom	name	Bouncy Castle ASN.1 Extension and Utility APIs	High
Product	pom	url	https://www.bouncycastle.org/java.html	Medium
Version	file	version	1.70	High
Version	Manifest	Bundle-Version	1.70	High
Version	pom	version	1.70	Highest

Identifiers

pkg:maven/org.bouncycastle/bcutil-jdk15on@1.70 (Confidence:High)
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle:1.70:*:*:*:*:*:*:* (Confidence:Low)

commons-io-2.11.0.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/fcorneli/.m2/repository/commons-io/commons-io/2.11.0/commons-io-2.11.0.jar
MD5: 3b4b7ccfaeceeac240b804839ee1a1ca
SHA1: a2503f302b11ebde7ebc3df41daebe0e4eea3689
SHA256:961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908
Referenced In Project/Scope: jTrust Test PKI:compile
pkg:maven/be.fedict.jtrust/jtrust-testpki@2.1.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-io	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	file	Highest
Vendor	jar	package name	io	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.io	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-io/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-io	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-io	Highest
Vendor	pom	artifactid	commons-io	Low
Vendor	pom	developer email	bayard@apache.org	Low
Vendor	pom	developer email	dion@apache.org	Low
Vendor	pom	developer email	ggregory at apache.org	Low
Vendor	pom	developer email	jeremias@apache.org	Low
Vendor	pom	developer email	jochen.wiedmann@gmail.com	Low
Vendor	pom	developer email	krosenvold@apache.org	Low
Vendor	pom	developer email	martinc@apache.org	Low
Vendor	pom	developer email	matth@apache.org	Low
Vendor	pom	developer email	nicolaken@apache.org	Low
Vendor	pom	developer email	roxspring@apache.org	Low
Vendor	pom	developer email	sanders@apache.org	Low
Vendor	pom	developer id	bayard	Medium
Vendor	pom	developer id	dion	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	jeremias	Medium
Vendor	pom	developer id	jochen	Medium
Vendor	pom	developer id	jukka	Medium
Vendor	pom	developer id	krosenvold	Medium
Vendor	pom	developer id	martinc	Medium
Vendor	pom	developer id	matth	Medium
Vendor	pom	developer id	niallp	Medium
Vendor	pom	developer id	nicolaken	Medium
Vendor	pom	developer id	roxspring	Medium
Vendor	pom	developer id	sanders	Medium
Vendor	pom	developer id	scolebourne	Medium
Vendor	pom	developer name	dIon Gillard	Medium
Vendor	pom	developer name	Gary Gregory	Medium
Vendor	pom	developer name	Henri Yandell	Medium
Vendor	pom	developer name	Jeremias Maerki	Medium
Vendor	pom	developer name	Jochen Wiedmann	Medium
Vendor	pom	developer name	Jukka Zitting	Medium
Vendor	pom	developer name	Kristian Rosenvold	Medium
Vendor	pom	developer name	Martin Cooper	Medium
Vendor	pom	developer name	Matthew Hawthorne	Medium
Vendor	pom	developer name	Niall Pemberton	Medium
Vendor	pom	developer name	Nicola Ken Barozzi	Medium
Vendor	pom	developer name	Rob Oxspring	Medium
Vendor	pom	developer name	Scott Sanders	Medium
Vendor	pom	developer name	Stephen Colebourne	Medium
Vendor	pom	developer org	The Apache Software Foundation	Medium
Vendor	pom	developer org URL	https://www.apache.org/	Medium
Vendor	pom	groupid	commons-io	Highest
Vendor	pom	name	Apache Commons IO	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	url	https://commons.apache.org/proper/commons-io/	Highest
Product	file	name	commons-io	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	file	Highest
Product	jar	package name	io	Highest
Product	Manifest	automatic-module-name	org.apache.commons.io	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-io/	Low
Product	Manifest	Bundle-Name	Apache Commons IO	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-io	Medium
Product	Manifest	Implementation-Title	Apache Commons IO	High
Product	Manifest	specification-title	Apache Commons IO	Medium
Product	pom	artifactid	commons-io	Highest
Product	pom	developer email	bayard@apache.org	Low
Product	pom	developer email	dion@apache.org	Low
Product	pom	developer email	ggregory at apache.org	Low
Product	pom	developer email	jeremias@apache.org	Low
Product	pom	developer email	jochen.wiedmann@gmail.com	Low
Product	pom	developer email	krosenvold@apache.org	Low
Product	pom	developer email	martinc@apache.org	Low
Product	pom	developer email	matth@apache.org	Low
Product	pom	developer email	nicolaken@apache.org	Low
Product	pom	developer email	roxspring@apache.org	Low
Product	pom	developer email	sanders@apache.org	Low
Product	pom	developer id	bayard	Low
Product	pom	developer id	dion	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	jeremias	Low
Product	pom	developer id	jochen	Low
Product	pom	developer id	jukka	Low
Product	pom	developer id	krosenvold	Low
Product	pom	developer id	martinc	Low
Product	pom	developer id	matth	Low
Product	pom	developer id	niallp	Low
Product	pom	developer id	nicolaken	Low
Product	pom	developer id	roxspring	Low
Product	pom	developer id	sanders	Low
Product	pom	developer id	scolebourne	Low
Product	pom	developer name	dIon Gillard	Low
Product	pom	developer name	Gary Gregory	Low
Product	pom	developer name	Henri Yandell	Low
Product	pom	developer name	Jeremias Maerki	Low
Product	pom	developer name	Jochen Wiedmann	Low
Product	pom	developer name	Jukka Zitting	Low
Product	pom	developer name	Kristian Rosenvold	Low
Product	pom	developer name	Martin Cooper	Low
Product	pom	developer name	Matthew Hawthorne	Low
Product	pom	developer name	Niall Pemberton	Low
Product	pom	developer name	Nicola Ken Barozzi	Low
Product	pom	developer name	Rob Oxspring	Low
Product	pom	developer name	Scott Sanders	Low
Product	pom	developer name	Stephen Colebourne	Low
Product	pom	developer org	The Apache Software Foundation	Low
Product	pom	developer org URL	https://www.apache.org/	Low
Product	pom	groupid	commons-io	Highest
Product	pom	name	Apache Commons IO	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	url	https://commons.apache.org/proper/commons-io/	Medium
Version	file	version	2.11.0	High
Version	Manifest	Bundle-Version	2.11.0	High
Version	Manifest	Implementation-Version	2.11.0	High
Version	pom	parent-version	2.11.0	Low
Version	pom	version	2.11.0	Highest

Identifiers

pkg:maven/commons-io/commons-io@2.11.0 (Confidence:High)
cpe:2.3:a:apache:commons_io:2.11.0:*:*:*:*:*:*:* (Confidence:Highest)

javax.servlet-api-3.1.0.jar

Description:

Java(TM) Servlet 3.1 API Design Specification

License:

CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html

File Path: /Users/fcorneli/.m2/repository/javax/servlet/javax.servlet-api/3.1.0/javax.servlet-api-3.1.0.jar
MD5: 79de69e9f5ed8c7fcb8342585732bbf7
SHA1: 3cd63d075497751784b2fa84be59432f4905bf7c
SHA256:af456b2dd41c4e82cf54f3e743bc678973d9fe35bd4d3071fa05c7e5333b8482
Referenced In Project/Scope: jTrust Test PKI:compile
pkg:maven/org.eclipse.jetty/jetty-server@9.4.51.v20230217

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	javax.servlet-api	High
Vendor	jar	package name	javax	Highest
Vendor	jar	package name	servlet	Highest
Vendor	Manifest	bundle-docurl	https://glassfish.dev.java.net	Low
Vendor	Manifest	bundle-symbolicname	javax.servlet-api	Medium
Vendor	Manifest	extension-name	javax.servlet	Medium
Vendor	Manifest	Implementation-Vendor	GlassFish Community	High
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	pom	artifactid	javax.servlet-api	Highest
Vendor	pom	artifactid	javax.servlet-api	Low
Vendor	pom	developer id	mode	Medium
Vendor	pom	developer id	swchan2	Medium
Vendor	pom	developer name	Rajiv Mordani	Medium
Vendor	pom	developer name	Shing Wai Chan	Medium
Vendor	pom	developer org	Oracle	Medium
Vendor	pom	groupid	javax.servlet	Highest
Vendor	pom	name	Java Servlet API	High
Vendor	pom	organization name	GlassFish Community	High
Vendor	pom	organization url	https://glassfish.dev.java.net	Medium
Vendor	pom	parent-artifactid	jvnet-parent	Low
Vendor	pom	parent-groupid	net.java	Medium
Vendor	pom	url	http://servlet-spec.java.net	Highest
Vendor	pom (hint)	developer org	sun	Medium
Product	file	name	javax.servlet-api	High
Product	jar	package name	javax	Highest
Product	jar	package name	servlet	Highest
Product	Manifest	bundle-docurl	https://glassfish.dev.java.net	Low
Product	Manifest	Bundle-Name	Java Servlet API	Medium
Product	Manifest	bundle-symbolicname	javax.servlet-api	Medium
Product	Manifest	extension-name	javax.servlet	Medium
Product	pom	artifactid	javax.servlet-api	Highest
Product	pom	developer id	mode	Low
Product	pom	developer id	swchan2	Low
Product	pom	developer name	Rajiv Mordani	Low
Product	pom	developer name	Shing Wai Chan	Low
Product	pom	developer org	Oracle	Low
Product	pom	groupid	javax.servlet	Highest
Product	pom	name	Java Servlet API	High
Product	pom	organization name	GlassFish Community	Low
Product	pom	organization url	https://glassfish.dev.java.net	Low
Product	pom	parent-artifactid	jvnet-parent	Medium
Product	pom	parent-groupid	net.java	Medium
Product	pom	url	http://servlet-spec.java.net	Medium
Version	file	version	3.1.0	High
Version	Manifest	Bundle-Version	3.1.0	High
Version	Manifest	Implementation-Version	3.1.0	High
Version	pom	parent-version	3.1.0	Low
Version	pom	version	3.1.0	Highest

Identifiers

pkg:maven/javax.servlet/javax.servlet-api@3.1.0 (Confidence:High)
cpe:2.3:a:oracle:java_se:3.1.0:*:*:*:*:*:*:* (Confidence:Medium)

jetty-io-9.4.51.v20230217.jar

Description:

Jetty module for Jetty :: IO Utility

License:

http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php

File Path: /Users/fcorneli/.m2/repository/org/eclipse/jetty/jetty-io/9.4.51.v20230217/jetty-io-9.4.51.v20230217.jar
MD5: f030b7fc7ff17b80aad37f8d79b9816d
SHA1: a11a0713b17334a5b6e694602fbd1a9457cb5fdd
SHA256:b73b26c5a531b02af0d775f0574c2889665449168723e4322d36de6e8e74848f
Referenced In Project/Scope: jTrust Test PKI:compile
pkg:maven/org.eclipse.jetty/jetty-server@9.4.51.v20230217

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jetty-io	High
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	jetty	Highest
Vendor	Manifest	automatic-module-name	org.eclipse.jetty.io	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-copyright	Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.	Low
Vendor	Manifest	bundle-docurl	https://eclipse.org/jetty	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.jetty.io	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Jetty Project	High
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Vendor	Manifest	url	https://eclipse.org/jetty	Low
Vendor	pom	artifactid	jetty-io	Highest
Vendor	pom	artifactid	jetty-io	Low
Vendor	pom	groupid	org.eclipse.jetty	Highest
Vendor	pom	name	Jetty :: IO Utility	High
Vendor	pom	parent-artifactid	jetty-project	Low
Product	file	name	jetty-io	High
Product	jar	package name	eclipse	Highest
Product	jar	package name	io	Highest
Product	jar	package name	jetty	Highest
Product	Manifest	automatic-module-name	org.eclipse.jetty.io	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-copyright	Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.	Low
Product	Manifest	bundle-docurl	https://eclipse.org/jetty	Low
Product	Manifest	Bundle-Name	Jetty :: IO Utility	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Product	Manifest	bundle-symbolicname	org.eclipse.jetty.io	Medium
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Product	Manifest	url	https://eclipse.org/jetty	Low
Product	pom	artifactid	jetty-io	Highest
Product	pom	groupid	org.eclipse.jetty	Highest
Product	pom	name	Jetty :: IO Utility	High
Product	pom	parent-artifactid	jetty-project	Medium
Version	file	version	9.4.51.v20230217	High
Version	Manifest	Bundle-Version	9.4.51.v20230217	High
Version	Manifest	Implementation-Version	9.4.51.v20230217	High
Version	pom	version	9.4.51.v20230217	Highest

Related Dependencies

jetty-http-9.4.51.v20230217.jar
- File Path: /Users/fcorneli/.m2/repository/org/eclipse/jetty/jetty-http/9.4.51.v20230217/jetty-http-9.4.51.v20230217.jar
- MD5: 4aca5bbdb562abfc733222bb03da3cc6
- SHA1: fe37568aded59dd8e437e0f670fe5f809071fe8f
- SHA256: 924d254a7e4dcbb699b722940b005bfe1bd4a68a8d44d7dcf3e0a935faafbba2
- pkg:maven/org.eclipse.jetty/jetty-http@9.4.51.v20230217
jetty-security-9.4.51.v20230217.jar
- File Path: /Users/fcorneli/.m2/repository/org/eclipse/jetty/jetty-security/9.4.51.v20230217/jetty-security-9.4.51.v20230217.jar
- MD5: 32856002eff1429b87fc1e5ab654c699
- SHA1: a3342214ce480cc5bb8e74fe7589dd0436a5d903
- SHA256: 57aa5bc98356f12c7b0025470ca0ba2af91b58fc7c9549cea6b194d64f02aaa6
- pkg:maven/org.eclipse.jetty/jetty-security@9.4.51.v20230217
jetty-servlet-9.4.51.v20230217.jar
- File Path: /Users/fcorneli/.m2/repository/org/eclipse/jetty/jetty-servlet/9.4.51.v20230217/jetty-servlet-9.4.51.v20230217.jar
- MD5: 885b21364f32daa6973b91384feb7af2
- SHA1: 3ec1be0b1ca49b633dd7de0733d0054bb4763965
- SHA256: c3b468238313c078f3f48eaec3b6317fcc9c8ebbe0d58d992bd4361796e2b9bb
- pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.51.v20230217
jetty-util-9.4.51.v20230217.jar
- File Path: /Users/fcorneli/.m2/repository/org/eclipse/jetty/jetty-util/9.4.51.v20230217/jetty-util-9.4.51.v20230217.jar
- MD5: 724ec938895f5ace1d40a721fcb6b667
- SHA1: a11df06530a3a28c9af7ff336730a2f8e18e7205
- SHA256: 9fac4168b1ae543c5c29f48008cd118c70779aa701d60f37f52b57c104b6536e
- pkg:maven/org.eclipse.jetty/jetty-util@9.4.51.v20230217
jetty-util-ajax-9.4.51.v20230217.jar
- File Path: /Users/fcorneli/.m2/repository/org/eclipse/jetty/jetty-util-ajax/9.4.51.v20230217/jetty-util-ajax-9.4.51.v20230217.jar
- MD5: 3f105aee42b11a9264370602224a8eb8
- SHA1: 3b2a998a5ed1f93bc1878fa89d65e307d8b8ebaf
- SHA256: fb0e92684423b2c9b0818259faa95a75a700003623a9af1a8ca1ab6603a53679
- pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.51.v20230217

Identifiers

pkg:maven/org.eclipse.jetty/jetty-io@9.4.51.v20230217 (Confidence:High)
cpe:2.3:a:eclipse:jetty:9.4.51:20230217:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:jetty:jetty:9.4.51:20230217:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:mortbay_jetty:jetty:9.4.51:20230217:*:*:*:*:*:* (Confidence:Highest)

jetty-server-9.4.51.v20230217.jar

Description:

The core jetty server artifact.

License:

http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php

File Path: /Users/fcorneli/.m2/repository/org/eclipse/jetty/jetty-server/9.4.51.v20230217/jetty-server-9.4.51.v20230217.jar
MD5: 43bcc211c126b7cd06b966940c84f569
SHA1: d0572c8460eb26adf8420e78535d95859c89a936
SHA256:72f19a7f88e91244d5170045d7d44143508845b01196f87b2a1b56a5ad16d378
Referenced In Project/Scope: jTrust Test PKI:compile
pkg:maven/be.fedict.jtrust/jtrust-testpki@2.1.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jetty-server	High
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	jetty	Highest
Vendor	jar	package name	server	Highest
Vendor	Manifest	automatic-module-name	org.eclipse.jetty.server	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-copyright	Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.	Low
Vendor	Manifest	bundle-docurl	https://eclipse.org/jetty	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.jetty.server	Medium
Vendor	Manifest	Implementation-Vendor	Eclipse Jetty Project	High
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Vendor	Manifest	url	https://eclipse.org/jetty	Low
Vendor	pom	artifactid	jetty-server	Highest
Vendor	pom	artifactid	jetty-server	Low
Vendor	pom	groupid	org.eclipse.jetty	Highest
Vendor	pom	name	Jetty :: Server Core	High
Vendor	pom	parent-artifactid	jetty-project	Low
Product	file	name	jetty-server	High
Product	jar	package name	eclipse	Highest
Product	jar	package name	jetty	Highest
Product	jar	package name	server	Highest
Product	Manifest	automatic-module-name	org.eclipse.jetty.server	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-copyright	Copyright (c) 2008-2022 Mort Bay Consulting Pty Ltd and others.	Low
Product	Manifest	bundle-docurl	https://eclipse.org/jetty	Low
Product	Manifest	Bundle-Name	Jetty :: Server Core	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Product	Manifest	bundle-symbolicname	org.eclipse.jetty.server	Medium
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Product	Manifest	url	https://eclipse.org/jetty	Low
Product	pom	artifactid	jetty-server	Highest
Product	pom	groupid	org.eclipse.jetty	Highest
Product	pom	name	Jetty :: Server Core	High
Product	pom	parent-artifactid	jetty-project	Medium
Version	file	version	9.4.51.v20230217	High
Version	Manifest	Bundle-Version	9.4.51.v20230217	High
Version	Manifest	Implementation-Version	9.4.51.v20230217	High
Version	pom	version	9.4.51.v20230217	Highest

Identifiers

pkg:maven/org.eclipse.jetty/jetty-server@9.4.51.v20230217 (Confidence:High)
cpe:2.3:a:eclipse:jetty:9.4.51:20230217:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:jetty:jetty:9.4.51:20230217:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:jetty:jetty_http_server:9.4.51:20230217:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:mortbay_jetty:jetty:9.4.51:20230217:*:*:*:*:*:* (Confidence:Highest)

slf4j-api-1.7.36.jar

Description:

The slf4j API

File Path: /Users/fcorneli/.m2/repository/org/slf4j/slf4j-api/1.7.36/slf4j-api-1.7.36.jar
MD5: 872da51f5de7f3923da4de871d57fd85
SHA1: 6c62681a2f655b49963a5983b8b0950a6120ae14
SHA256:d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0
Referenced In Project/Scope: jTrust Test PKI:compile
slf4j-api-1.7.36.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/be.fedict.jtrust/jtrust-testpki@2.1.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	automatic-module-name	org.slf4j	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	pom	artifactid	slf4j-api	Highest
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	jar	package name	slf4j	Highest
Product	Manifest	automatic-module-name	org.slf4j	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	slf4j-api	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	1.7.36	High
Version	Manifest	Bundle-Version	1.7.36	High
Version	Manifest	Implementation-Version	1.7.36	High
Version	pom	version	1.7.36	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@1.7.36 (Confidence:High)

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor

Project: jTrust Test PKI

be.fedict.jtrust:jtrust-testpki:2.1.0

Summary

Dependencies

bcpkix-jdk15on-1.70.jar

Evidence

Identifiers

bcprov-jdk15on-1.70.jar

Evidence

Identifiers

bcutil-jdk15on-1.70.jar

Evidence

Identifiers

commons-io-2.11.0.jar

Evidence

Identifiers

javax.servlet-api-3.1.0.jar

Evidence

Identifiers

jetty-io-9.4.51.v20230217.jar

Evidence

Related Dependencies

Identifiers

jetty-server-9.4.51.v20230217.jar

Evidence

Identifiers

slf4j-api-1.7.36.jar

Evidence

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: jTrust Test PKI

be.fedict.jtrust:jtrust-testpki:2.1.0

Summary

Dependencies

bcpkix-jdk15on-1.70.jar

Evidence

Identifiers

bcprov-jdk15on-1.70.jar

Evidence

Identifiers

bcutil-jdk15on-1.70.jar

Evidence

Identifiers

commons-io-2.11.0.jar

Evidence

Identifiers

javax.servlet-api-3.1.0.jar

Evidence

Identifiers

jetty-io-9.4.51.v20230217.jar

Evidence

Related Dependencies

Identifiers

jetty-server-9.4.51.v20230217.jar

Evidence

Identifiers

slf4j-api-1.7.36.jar

Evidence

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor