Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.1.8
Report Generated On: Fri, 7 Nov 2025 05:55:13 GMT
Dependencies Scanned: 41 (16 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-11-07T05:54:47Z
NVD API Last Modified: 2025-11-07T05:16:10Z

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
error_prone_annotations-2.41.0.jar		pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0		29
failureaccess-1.0.3.jar		pkg:maven/com.google.guava/failureaccess@1.0.3		32
guava-33.5.0-jre.jar	cpe:2.3:a:google:guava:33.5.0:::::::*	pkg:maven/com.google.guava/guava@33.5.0-jre	Highest	25
j2objc-annotations-3.1.jar		pkg:maven/com.google.j2objc/j2objc-annotations@3.1		33
jackson-annotations-2.20.jar	cpe:2.3:a:fasterxml:jackson-modules-java8:2.20:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20	Low	36
jackson-core-2.20.1.jar	cpe:2.3:a:fasterxml:jackson-modules-java8:2.20.1:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1	Low	47
jackson-databind-2.20.1.jar	cpe:2.3:a:fasterxml:jackson-databind:2.20.1:::::::* cpe:2.3:a:fasterxml:jackson-modules-java8:2.20.1:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1	Highest	41
jackson-dataformat-yaml-2.20.1.jar	cpe:2.3:a:fasterxml:jackson-dataformat-xml:2.20.1:::::::*	pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.20.1	Highest	39
jspecify-1.0.0.jar		pkg:maven/org.jspecify/jspecify@1.0.0		32
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar		pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava		13
netty-common-4.2.7.Final.jar (shaded: org.jctools:jctools-core:4.0.5)		pkg:maven/org.jctools/jctools-core@4.0.5		9
netty-transport-4.2.7.Final.jar	cpe:2.3:a:netty:netty:4.2.7:::::::*	pkg:maven/io.netty/netty-transport@4.2.7.Final	Highest	35
slf4j-api-2.1.0-alpha1.jar		pkg:maven/org.slf4j/slf4j-api@2.1.0-alpha1		27
snakeyaml-2.4.jar	cpe:2.3:a:snakeyaml_project:snakeyaml:2.4:::::::*	pkg:maven/org.yaml/snakeyaml@2.4	Highest	42
vertx-core-5.0.5.jar	cpe:2.3:a:eclipse:vert.x:5.0.5:::::::*	pkg:maven/io.vertx/vertx-core@5.0.5	High	29
vertx-web-5.0.5.jar	cpe:2.3:a:web_project:web:5.0.5:::::::*	pkg:maven/io.vertx/vertx-web@5.0.5	Highest	29

Dependencies (vulnerable)

error_prone_annotations-2.41.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.41.0/error_prone_annotations-2.41.0.jar
MD5: 75e3b25da8b8a2136463c4674f5e49bf
SHA1: 4381275efdef6ddfae38f002c31e84cd001c97f0
SHA256:a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc
Referenced In Project/Scope: JWT Validator - Vertx:compile
pkg:maven/com.google.guava/guava@33.5.0-jre

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	error_prone_annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	errorprone	Highest
Vendor	jar	package name	google	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Vendor	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	error_prone_annotations	Highest
Vendor	pom	artifactid	error_prone_annotations	Low
Vendor	pom	groupid	com.google.errorprone	Highest
Vendor	pom	name	error-prone annotations	High
Vendor	pom	parent-artifactid	error_prone_parent	Low
Product	file	name	error_prone_annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	errorprone	Highest
Product	jar	package name	google	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Product	Manifest	Bundle-Name	error-prone annotations	Medium
Product	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	error_prone_annotations	Highest
Product	pom	groupid	com.google.errorprone	Highest
Product	pom	name	error-prone annotations	High
Product	pom	parent-artifactid	error_prone_parent	Medium
Version	file	version	2.41.0	High
Version	Manifest	Bundle-Version	2.41.0	High
Version	pom	version	2.41.0	Highest

Identifiers

pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0 (Confidence:High)

failureaccess-1.0.3.jar

Description:

    Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar
MD5: 29a782e90f6b37218b18bb880d2a8f4a
SHA1: aeaffd00d57023a2c947393ed251f0354f0985fc
SHA256:cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb
Referenced In Project/Scope: JWT Validator - Vertx:compile
pkg:maven/com.google.guava/guava@33.5.0-jre

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	failureaccess	High
Vendor	jar	package name	common	Highest
Vendor	jar	package name	concurrent	Highest
Vendor	jar	package name	google	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	bundle-symbolicname	com.google.guava.failureaccess	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	failureaccess	Highest
Vendor	pom	artifactid	failureaccess	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava InternalFutureFailureAccess and InternalFutures	High
Vendor	pom	parent-artifactid	guava-parent	Low
Product	file	name	failureaccess	High
Product	jar	package name	common	Highest
Product	jar	package name	concurrent	Highest
Product	jar	package name	google	Highest
Product	jar	package name	util	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	Bundle-Name	Guava InternalFutureFailureAccess and InternalFutures	Medium
Product	Manifest	bundle-symbolicname	com.google.guava.failureaccess	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	failureaccess	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava InternalFutureFailureAccess and InternalFutures	High
Product	pom	parent-artifactid	guava-parent	Medium
Version	file	version	1.0.3	High
Version	Manifest	Bundle-Version	1.0.3	High
Version	pom	parent-version	1.0.3	Low
Version	pom	version	1.0.3	Highest

Identifiers

pkg:maven/com.google.guava/failureaccess@1.0.3 (Confidence:High)

guava-33.5.0-jre.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/guava/guava/33.5.0-jre/guava-33.5.0-jre.jar
MD5: d9fbf39a41a5bab891348f07668e18c5
SHA1: 8699de25f2f979108d6c1b804a7ba38cda1116bc
SHA256:1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7
Referenced In Project/Scope: JWT Validator - Vertx:compile
pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	guava	High
Vendor	jar	package name	google	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	bundle-symbolicname	com.google.guava	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	guava	Highest
Vendor	pom	artifactid	guava	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava: Google Core Libraries for Java	High
Vendor	pom	parent-artifactid	guava-parent	Low
Vendor	pom	url	google/guava	Highest
Product	file	name	guava	High
Product	jar	package name	google	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	Bundle-Name	Guava: Google Core Libraries for Java	Medium
Product	Manifest	bundle-symbolicname	com.google.guava	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	guava	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava: Google Core Libraries for Java	High
Product	pom	parent-artifactid	guava-parent	Medium
Product	pom	url	google/guava	High
Version	pom	version	33.5.0-jre	Highest

Identifiers

pkg:maven/com.google.guava/guava@33.5.0-jre (Confidence:High)
cpe:2.3:a:google:guava:33.5.0:*:*:*:*:*:*:* (Confidence:Highest)

j2objc-annotations-3.1.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.1/j2objc-annotations-3.1.jar
MD5: abe8bd3abff622b9a8b15c3a737aa741
SHA1: a892ca9507839bbdb900d64310ac98256cab992f
SHA256:84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Project/Scope: JWT Validator - Vertx:compile
pkg:maven/com.google.guava/guava@33.5.0-jre

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	j2objc-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	google	Highest
Vendor	jar	package name	j2objc	Highest
Vendor	Manifest	build-jdk-spec	22	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	j2objc-annotations	Highest
Vendor	pom	artifactid	j2objc-annotations	Low
Vendor	pom	developer email	tball@google.com	Low
Vendor	pom	developer id	tomball	Medium
Vendor	pom	developer name	Tom Ball	Medium
Vendor	pom	developer org	Google	Medium
Vendor	pom	developer org URL	https://www.google.com	Medium
Vendor	pom	groupid	com.google.j2objc	Highest
Vendor	pom	name	J2ObjC Annotations	High
Vendor	pom	url	google/j2objc/	Highest
Product	file	name	j2objc-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	google	Highest
Product	jar	package name	j2objc	Highest
Product	Manifest	build-jdk-spec	22	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	j2objc-annotations	Highest
Product	pom	developer email	tball@google.com	Low
Product	pom	developer id	tomball	Low
Product	pom	developer name	Tom Ball	Low
Product	pom	developer org	Google	Low
Product	pom	developer org URL	https://www.google.com	Low
Product	pom	groupid	com.google.j2objc	Highest
Product	pom	name	J2ObjC Annotations	High
Product	pom	url	google/j2objc/	High
Version	file	version	3.1	High
Version	pom	version	3.1	Highest

Identifiers

pkg:maven/com.google.j2objc/j2objc-annotations@3.1 (Confidence:High)

jackson-annotations-2.20.jar

Description:

Core annotations used for value types, used by Jackson data binding package.

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-annotations/2.20/jackson-annotations-2.20.jar
MD5: b901def3c20752817f27130e4b8d6640
SHA1: 6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c
SHA256:959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319
Referenced In Project/Scope: JWT Validator - Vertx:compile
pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jackson-annotations	High
Vendor	jar	package name	fasterxml	Highest
Vendor	jar	package name	jackson	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-annotations	Medium
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	artifactid	jackson-annotations	Highest
Vendor	pom	artifactid	jackson-annotations	Low
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	pom	name	Jackson-annotations	High
Vendor	pom	parent-artifactid	jackson-parent	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	url	FasterXML/jackson	Highest
Product	file	name	jackson-annotations	High
Product	hint analyzer	product	java8	Highest
Product	hint analyzer	product	modules	Highest
Product	jar	package name	fasterxml	Highest
Product	jar	package name	jackson	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson	Low
Product	Manifest	Bundle-Name	Jackson-annotations	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-annotations	Medium
Product	Manifest	Implementation-Title	Jackson-annotations	High
Product	Manifest	specification-title	Jackson-annotations	Medium
Product	pom	artifactid	jackson-annotations	Highest
Product	pom	groupid	com.fasterxml.jackson.core	Highest
Product	pom	name	Jackson-annotations	High
Product	pom	parent-artifactid	jackson-parent	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	pom	url	FasterXML/jackson	High
Version	file	version	2.20	High
Version	Manifest	Implementation-Version	2.20	High
Version	pom	version	2.20	Highest

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.20:*:*:*:*:*:*:* (Confidence:Low)

jackson-core-2.20.1.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.20.1/jackson-core-2.20.1.jar
MD5: 889b2c417b61c9f4f460b06957147234
SHA1: 5734323adfece72111769b0ae38a6cf803e3d178
SHA256:ffab4d957daa2796cf24cb66d0b78a7090f1bcbe17c3a4578f09affaaf137089
Referenced In Project/Scope: JWT Validator - Vertx:compile
pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jackson-core	High
Vendor	jar	package name	base	Highest
Vendor	jar	package name	com	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	jar	package name	jackson	Highest
Vendor	jar	package name	json	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	artifactid	jackson-core	Highest
Vendor	pom	artifactid	jackson-core	Low
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	pom	name	Jackson-core	High
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	url	FasterXML/jackson-core	Highest
Product	file	name	jackson-core	High
Product	hint analyzer	product	java8	Highest
Product	hint analyzer	product	modules	Highest
Product	jar	package name	base	Highest
Product	jar	package name	com	Highest
Product	jar	package name	core	Highest
Product	jar	package name	fasterxml	Highest
Product	jar	package name	jackson	Highest
Product	jar	package name	json	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Product	Manifest	Bundle-Name	Jackson-core	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Product	Manifest	Implementation-Title	Jackson-core	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Jackson-core	Medium
Product	pom	artifactid	jackson-core	Highest
Product	pom	groupid	com.fasterxml.jackson.core	Highest
Product	pom	name	Jackson-core	High
Product	pom	parent-artifactid	jackson-base	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	pom	url	FasterXML/jackson-core	High
Version	file	version	2.20.1	High
Version	Manifest	Bundle-Version	2.20.1	High
Version	Manifest	Implementation-Version	2.20.1	High
Version	pom	version	2.20.1	Highest

Related Dependencies

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.20.1:*:*:*:*:*:*:* (Confidence:Low)

jackson-databind-2.20.1.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.20.1/jackson-databind-2.20.1.jar
MD5: 49d7b7226df5ed4a036e48997a03d066
SHA1: 9586a7fe0e1775de0e54237fa6a2c8455c93ac06
SHA256:34bbeb4526fff4f8565b12106bf85a6afcbae858966d489b54214ac46b2e26e8
Referenced In Project/Scope: JWT Validator - Vertx:compile
pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jackson-databind	High
Vendor	jar	package name	databind	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	jar	package name	jackson	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	artifactid	jackson-databind	Highest
Vendor	pom	artifactid	jackson-databind	Low
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	pom	name	jackson-databind	High
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	url	FasterXML/jackson	Highest
Product	file	name	jackson-databind	High
Product	hint analyzer	product	java8	Highest
Product	hint analyzer	product	modules	Highest
Product	jar	package name	databind	Highest
Product	jar	package name	fasterxml	Highest
Product	jar	package name	jackson	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson	Low
Product	Manifest	Bundle-Name	jackson-databind	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Product	Manifest	Implementation-Title	jackson-databind	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	jackson-databind	Medium
Product	pom	artifactid	jackson-databind	Highest
Product	pom	groupid	com.fasterxml.jackson.core	Highest
Product	pom	name	jackson-databind	High
Product	pom	parent-artifactid	jackson-base	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	pom	url	FasterXML/jackson	High
Version	file	version	2.20.1	High
Version	Manifest	Bundle-Version	2.20.1	High
Version	Manifest	Implementation-Version	2.20.1	High
Version	pom	version	2.20.1	Highest

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-databind:2.20.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.20.1:*:*:*:*:*:*:* (Confidence:Low)

jackson-dataformat-yaml-2.20.1.jar

Description:

Support for reading and writing YAML-encoded data via Jackson abstractions.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.20.1/jackson-dataformat-yaml-2.20.1.jar
MD5: 66dc3c5f31150557109b14182ed7ed8a
SHA1: e6da043059c9ec631a3429ded461d5d92f240c3f
SHA256:030f1d91f7df278e86e1ba3e129fb520871ac16ce53017c735f708823be970db
Referenced In Project/Scope: JWT Validator - Vertx:compile
pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jackson-dataformat-yaml	High
Vendor	jar	package name	dataformat	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	jar	package name	jackson	Highest
Vendor	jar	package name	yaml	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-dataformats-text	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.dataformat.jackson-dataformat-yaml	Medium
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.dataformat	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	artifactid	jackson-dataformat-yaml	Highest
Vendor	pom	artifactid	jackson-dataformat-yaml	Low
Vendor	pom	groupid	com.fasterxml.jackson.dataformat	Highest
Vendor	pom	name	Jackson-dataformat-YAML	High
Vendor	pom	parent-artifactid	jackson-dataformats-text	Low
Vendor	pom	url	FasterXML/jackson-dataformats-text	Highest
Product	file	name	jackson-dataformat-yaml	High
Product	jar	package name	dataformat	Highest
Product	jar	package name	fasterxml	Highest
Product	jar	package name	jackson	Highest
Product	jar	package name	yaml	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-dataformats-text	Low
Product	Manifest	Bundle-Name	Jackson-dataformat-YAML	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.dataformat.jackson-dataformat-yaml	Medium
Product	Manifest	Implementation-Title	Jackson-dataformat-YAML	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Jackson-dataformat-YAML	Medium
Product	pom	artifactid	jackson-dataformat-yaml	Highest
Product	pom	groupid	com.fasterxml.jackson.dataformat	Highest
Product	pom	name	Jackson-dataformat-YAML	High
Product	pom	parent-artifactid	jackson-dataformats-text	Medium
Product	pom	url	FasterXML/jackson-dataformats-text	High
Version	file	version	2.20.1	High
Version	Manifest	Bundle-Version	2.20.1	High
Version	Manifest	Implementation-Version	2.20.1	High
Version	pom	version	2.20.1	Highest

Related Dependencies

Identifiers

pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.20.1 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-dataformat-xml:2.20.1:*:*:*:*:*:*:* (Confidence:Highest)

jspecify-1.0.0.jar

Description:

An artifact of well-named and well-specified annotations to power static analysis checks

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar
MD5: 9133aba420d0ca3b001dbb6ae9992cf6
SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507
SHA256:1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab
Referenced In Project/Scope: JWT Validator - Vertx:compile
pkg:maven/com.google.guava/guava@33.5.0-jre

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jspecify	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	jspecify	Highest
Vendor	Manifest	bundle-docurl	https://jspecify.dev/docs/start-here	Low
Vendor	Manifest	bundle-symbolicname	org.jspecify.jspecify	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	jspecify	Highest
Vendor	pom	artifactid	jspecify	Low
Vendor	pom	developer email	kevinb9n@gmail.com	Low
Vendor	pom	developer id	kevinb9n	Medium
Vendor	pom	developer name	Kevin Bourrillion	Medium
Vendor	pom	groupid	org.jspecify	Highest
Vendor	pom	name	JSpecify annotations	High
Vendor	pom	url	http://jspecify.org/	Highest
Product	file	name	jspecify	High
Product	jar	package name	annotations	Highest
Product	jar	package name	jspecify	Highest
Product	Manifest	bundle-docurl	https://jspecify.dev/docs/start-here	Low
Product	Manifest	Bundle-Name	JSpecify annotations	Medium
Product	Manifest	bundle-symbolicname	org.jspecify.jspecify	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	jspecify	Highest
Product	pom	developer email	kevinb9n@gmail.com	Low
Product	pom	developer id	kevinb9n	Low
Product	pom	developer name	Kevin Bourrillion	Low
Product	pom	groupid	org.jspecify	Highest
Product	pom	name	JSpecify annotations	High
Product	pom	url	http://jspecify.org/	Medium
Version	file	version	1.0.0	High
Version	Manifest	Bundle-Version	1.0.0	High
Version	Manifest	Implementation-Version	1.0.0	High
Version	pom	version	1.0.0	Highest

Identifiers

pkg:maven/org.jspecify/jspecify@1.0.0 (Confidence:High)

listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

Description:

    An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....

File Path: /home/runner/.m2/repository/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
MD5: d094c22570d65e132c19cea5d352e381
SHA1: b421526c5f297295adef1c886e5246c39d4ac629
SHA256:b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99
Referenced In Project/Scope: JWT Validator - Vertx:compile
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.google.guava/guava@33.5.0-jre

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	listenablefuture	High
Vendor	pom	artifactid	listenablefuture	Highest
Vendor	pom	artifactid	listenablefuture	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava ListenableFuture only	High
Vendor	pom	parent-artifactid	guava-parent	Low
Product	file	name	listenablefuture	High
Product	pom	artifactid	listenablefuture	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava ListenableFuture only	High
Product	pom	parent-artifactid	guava-parent	Medium
Version	pom	parent-version	9999.0-empty-to-avoid-conflict-with-guava	Low
Version	pom	version	9999.0-empty-to-avoid-conflict-with-guava	Highest

Identifiers

pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava (Confidence:High)

netty-common-4.2.7.Final.jar (shaded: org.jctools:jctools-core:4.0.5)

Description:

Java Concurrency Tools Core Library

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/io/netty/netty-common/4.2.7.Final/netty-common-4.2.7.Final.jar/META-INF/maven/org.jctools/jctools-core/pom.xml
MD5: 5d5135397b920a7dcbca5c1fb0576cf2
SHA1: eaa05d6ad937464312a2681a3236c0e06602bbb7
SHA256:a69897b8ff0c2198b4b8cd7d4f93fde6d42b8e9dbfc95553585e27587b24e211
Referenced In Project/Scope: JWT Validator - Vertx:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	jctools-core	Low
Vendor	pom	groupid	org.jctools	Highest
Vendor	pom	name	Java Concurrency Tools Core Library	High
Vendor	pom	url	JCTools	Highest
Product	pom	artifactid	jctools-core	Highest
Product	pom	groupid	org.jctools	Highest
Product	pom	name	Java Concurrency Tools Core Library	High
Product	pom	url	JCTools	High
Version	pom	version	4.0.5	Highest

Identifiers

pkg:maven/org.jctools/jctools-core@4.0.5 (Confidence:High)

netty-transport-4.2.7.Final.jar

Description:

Netty is an asynchronous event-driven network application framework for    rapid development of maintainable high performance protocol servers and    clients.

License:

https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/io/netty/netty-transport/4.2.7.Final/netty-transport-4.2.7.Final.jar
MD5: 355369c4efc693ca3a108ec4fc94311c
SHA1: 83ea548981d0d8c4a98027cc1a6f9624f902e142
SHA256:aadc6fb05c14fb789368ca3f854721549c72f6c0d81798bbccf9de1bb716892b
Referenced In Project/Scope: JWT Validator - Vertx:compile
pkg:maven/io.vertx/vertx-web@5.0.5

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	netty-transport	High
Vendor	jar	package name	io	Highest
Vendor	jar	package name	netty	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://netty.io/	Low
Vendor	Manifest	bundle-symbolicname	io.netty.transport	Medium
Vendor	Manifest	implementation-url	https://netty.io/netty-transport/	Low
Vendor	Manifest	Implementation-Vendor	The Netty Project	High
Vendor	Manifest	Implementation-Vendor-Id	io.netty	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	The Netty Project	Low
Vendor	pom	artifactid	netty-transport	Highest
Vendor	pom	artifactid	netty-transport	Low
Vendor	pom	groupid	io.netty	Highest
Vendor	pom	name	Netty/Transport	High
Vendor	pom	parent-artifactid	netty-parent	Low
Product	file	name	netty-transport	High
Product	jar	package name	11	Highest
Product	jar	package name	io	Highest
Product	jar	package name	netty	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://netty.io/	Low
Product	Manifest	Bundle-Name	Netty/Transport	Medium
Product	Manifest	bundle-symbolicname	io.netty.transport	Medium
Product	Manifest	Implementation-Title	Netty/Transport	High
Product	Manifest	implementation-url	https://netty.io/netty-transport/	Low
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Netty/Transport	Medium
Product	pom	artifactid	netty-transport	Highest
Product	pom	groupid	io.netty	Highest
Product	pom	name	Netty/Transport	High
Product	pom	parent-artifactid	netty-parent	Medium
Version	Manifest	Bundle-Version	4.2.7.Final	High
Version	Manifest	Implementation-Version	4.2.7.Final	High
Version	pom	version	4.2.7.Final	Highest

Related Dependencies

netty-buffer-4.2.7.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-buffer/4.2.7.Final/netty-buffer-4.2.7.Final.jar
- MD5: f61bad1beda071e013f9b1d654cdf806
- SHA1: 5555ff561643bf2f8430fb57c24403c0efe15994
- SHA256: b81613c8ed22b1cc39eccf2a28bd0c1d4561fb2e5e542061617ef4ce1d228bf5
- pkg:maven/io.netty/netty-buffer@4.2.7.Final
netty-codec-base-4.2.7.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-codec-base/4.2.7.Final/netty-codec-base-4.2.7.Final.jar
- MD5: cb7cbd2f5331ea1d349f3c87df5a3221
- SHA1: 915e381ebabcf115f1c7ff7032d55c48afb50210
- SHA256: 6360415b7c87160afcde5e7d4946c35539b9f043e8166c91a7fff95cc6067d9f
- pkg:maven/io.netty/netty-codec-base@4.2.7.Final
netty-codec-compression-4.2.7.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-codec-compression/4.2.7.Final/netty-codec-compression-4.2.7.Final.jar
- MD5: d7df10ca556335a43abfa4e5e848b5b1
- SHA1: 572341bc1ca90fd9d6e47f1d2694aab5258566e9
- SHA256: edd53ad34991804301a46571113d8ffb4d6f67e6d874674dafbb915724275cb3
- pkg:maven/io.netty/netty-codec-compression@4.2.7.Final
netty-codec-dns-4.2.7.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-codec-dns/4.2.7.Final/netty-codec-dns-4.2.7.Final.jar
- MD5: f62a085a2a348c0926c4fe82cd623a9c
- SHA1: 95a2b329442a22a7d77de5fc5ecebbcf26b8cd4e
- SHA256: 148f08291e4d6f4e361f33ee691ce66b8c9a95ff845176bfb6bd88cffb95b2fd
- pkg:maven/io.netty/netty-codec-dns@4.2.7.Final
netty-codec-http-4.2.7.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-codec-http/4.2.7.Final/netty-codec-http-4.2.7.Final.jar
- MD5: 5c642451ebc737738b22ecb92664d32d
- SHA1: b734c108854099c421fd94d92d9f865e4d4da853
- SHA256: 2984dd38420a61c4dd68fcacc51ffc528eb46f73f7795cdafdb3a4d6fcb76862
- pkg:maven/io.netty/netty-codec-http@4.2.7.Final
netty-codec-http2-4.2.7.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-codec-http2/4.2.7.Final/netty-codec-http2-4.2.7.Final.jar
- MD5: b5de7d58a67e47262eb4000ba92bb21f
- SHA1: ce3234f38c9b7a5f625bc75765fa9b62c99d7f71
- SHA256: c98254983dffa9c62bccb0e39638e1138feb4dd7b46e7a663e790f6a070a9306
- pkg:maven/io.netty/netty-codec-http2@4.2.7.Final
netty-codec-socks-4.2.7.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-codec-socks/4.2.7.Final/netty-codec-socks-4.2.7.Final.jar
- MD5: b87f4ddd11e9adc257409b9d6cab35d0
- SHA1: 9f26324e436e8884bb4aa801a6e9151c0b50a754
- SHA256: a5e245fb9038544d2a9bc8db86efd819aa6adb3be3257a879dafbe1bf78eff33
- pkg:maven/io.netty/netty-codec-socks@4.2.7.Final
netty-common-4.2.7.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-common/4.2.7.Final/netty-common-4.2.7.Final.jar
- MD5: a7e1dba851328d20de72635d80aa8092
- SHA1: 11aa30df26af4fca3239ac1917f303a280f301e1
- SHA256: 2345bc0ed5843fa57aa49eba67529485c3a1d420fcf0429324c8220c7a80e9a6
- pkg:maven/io.netty/netty-common@4.2.7.Final
netty-handler-4.2.7.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-handler/4.2.7.Final/netty-handler-4.2.7.Final.jar
- MD5: 5cc216424649736fdf10b7dcdec55700
- SHA1: 7ad8a1f851e2e6fe93cdd091871fda2b81c03b5b
- SHA256: 21d063409c12dbcec46d380c8856a0f7b6a5b68bb5f1d005eb065b4d64146cb3
- pkg:maven/io.netty/netty-handler@4.2.7.Final
netty-handler-proxy-4.2.7.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-handler-proxy/4.2.7.Final/netty-handler-proxy-4.2.7.Final.jar
- MD5: b8f9b84fc98f9766ecace9be44083480
- SHA1: a1b6d07504fe98163f49d34c9a5efb22d8e84212
- SHA256: 8a31f546099256a5b9365213a1a950cc7fd2ceb9827ac63e0506216df6fa72f6
- pkg:maven/io.netty/netty-handler-proxy@4.2.7.Final
netty-resolver-4.2.7.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-resolver/4.2.7.Final/netty-resolver-4.2.7.Final.jar
- MD5: 61f623f17707bfa9ca27f5b2d3d24bc7
- SHA1: 5f3e5ef8de03992cd4fb46960dc0085ec1a12a12
- SHA256: 7e4d569867e6c08437fb21a220ea01c294b0e38f01149b683c895a1bcd928438
- pkg:maven/io.netty/netty-resolver@4.2.7.Final
netty-resolver-dns-4.2.7.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-resolver-dns/4.2.7.Final/netty-resolver-dns-4.2.7.Final.jar
- MD5: 1c90a3a6ed8829cb7b015f9b5e1fa77f
- SHA1: 5975d21835704a84d51405b5c4f843337cbf2bb5
- SHA256: e42ef6295648685e465f9d9f306664ec7b4452e972ae4b3eaa707a94b313f62b
- pkg:maven/io.netty/netty-resolver-dns@4.2.7.Final
netty-transport-native-unix-common-4.2.7.Final.jar
- File Path: /home/runner/.m2/repository/io/netty/netty-transport-native-unix-common/4.2.7.Final/netty-transport-native-unix-common-4.2.7.Final.jar
- MD5: 216eeadc4850e2836a8e106210ad48ad
- SHA1: 89953f04259ea7502cffb313630dd51e00e60669
- SHA256: 736703b3f6d127e182f5be888b6e15732b0c08d6634e00725352a6a9d19974b2
- pkg:maven/io.netty/netty-transport-native-unix-common@4.2.7.Final

Identifiers

pkg:maven/io.netty/netty-transport@4.2.7.Final (Confidence:High)
cpe:2.3:a:netty:netty:4.2.7:*:*:*:*:*:*:* (Confidence:Highest)

slf4j-api-2.1.0-alpha1.jar

Description:

The slf4j API

License:

http://www.opensource.org/licenses/mit-license.php

File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.1.0-alpha1/slf4j-api-2.1.0-alpha1.jar
MD5: 22d0512f94f321721b28b3365b2d7ea1
SHA1: 4e2525fc4327cc553c52e3937427c7cf2114735f
SHA256:9ab7ffa646202b499d05995a3ec82f31bccb7a50345c1514d8cb42ec8ccea353
Referenced In Project/Scope: JWT Validator - Vertx:compile
pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	slf4j-api	Highest
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	jar	package name	slf4j	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	SLF4J API Module	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	Manifest	Implementation-Version	2.1.0-alpha1	High
Version	pom	version	2.1.0-alpha1	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@2.1.0-alpha1 (Confidence:High)

snakeyaml-2.4.jar

Description:

YAML 1.1 parser and emitter for Java

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/yaml/snakeyaml/2.4/snakeyaml-2.4.jar
MD5: 29410ee3a987e3bff7b847933c591972
SHA1: e0666b825b796f85521f02360e77f4c92c5a7a07
SHA256:ef779af5d29a9dde8cc70ce0341f5c6f7735e23edff9685ceaa9d35359b7bb7f
Referenced In Project/Scope: JWT Validator - Vertx:compile
pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.20.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	snakeyaml	High
Vendor	jar	package name	emitter	Highest
Vendor	jar	package name	org	Highest
Vendor	jar	package name	parser	Highest
Vendor	jar	package name	snakeyaml	Highest
Vendor	jar	package name	yaml	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-symbolicname	org.yaml.snakeyaml	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	snakeyaml	Highest
Vendor	pom	artifactid	snakeyaml	Low
Vendor	pom	developer email	alexander.maslov@gmail.com	Low
Vendor	pom	developer email	public.somov@gmail.com	Low
Vendor	pom	developer id	asomov	Medium
Vendor	pom	developer id	maslovalex	Medium
Vendor	pom	developer name	Alexander Maslov	Medium
Vendor	pom	developer name	Andrey Somov	Medium
Vendor	pom	groupid	org.yaml	Highest
Vendor	pom	name	SnakeYAML	High
Vendor	pom	url	https://bitbucket.org/snakeyaml/snakeyaml	Highest
Product	file	name	snakeyaml	High
Product	jar	package name	emitter	Highest
Product	jar	package name	org	Highest
Product	jar	package name	parser	Highest
Product	jar	package name	snakeyaml	Highest
Product	jar	package name	yaml	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	Bundle-Name	SnakeYAML	Medium
Product	Manifest	bundle-symbolicname	org.yaml.snakeyaml	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	snakeyaml	Highest
Product	pom	developer email	alexander.maslov@gmail.com	Low
Product	pom	developer email	public.somov@gmail.com	Low
Product	pom	developer id	asomov	Low
Product	pom	developer id	maslovalex	Low
Product	pom	developer name	Alexander Maslov	Low
Product	pom	developer name	Andrey Somov	Low
Product	pom	groupid	org.yaml	Highest
Product	pom	name	SnakeYAML	High
Product	pom	url	https://bitbucket.org/snakeyaml/snakeyaml	Medium
Version	file	version	2.4	High
Version	pom	version	2.4	Highest

Identifiers

pkg:maven/org.yaml/snakeyaml@2.4 (Confidence:High)
cpe:2.3:a:snakeyaml_project:snakeyaml:2.4:*:*:*:*:*:*:* (Confidence:Highest)

vertx-core-5.0.5.jar

File Path: /home/runner/.m2/repository/io/vertx/vertx-core/5.0.5/vertx-core-5.0.5.jar
MD5: 532838368138f7a77cb8321273c613a2
SHA1: 032f32033410fb86e95cdef3e26d362e7c71f495
SHA256:403f6e900b0dc4f71ab11042ba5890ba46c04e80f07f8375c96d20b314f31a52
Referenced In Project/Scope: JWT Validator - Vertx:compile
vertx-core-5.0.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.vertx/vertx-web@5.0.5

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	vertx-core	High
Vendor	jar	package name	core	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	vertx	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	Implementation-Vendor	Eclipse	High
Vendor	Manifest	maven-artifact-id	vertx-core	Low
Vendor	Manifest	specification-vendor	Eclipse	Low
Vendor	pom	artifactid	vertx-core	Highest
Vendor	pom	artifactid	vertx-core	Low
Vendor	pom	groupid	io.vertx	Highest
Vendor	pom	name	Vert.x Core	High
Vendor	pom	parent-artifactid	vertx-core-aggregator	Low
Product	file	name	vertx-core	High
Product	jar	package name	core	Highest
Product	jar	package name	io	Highest
Product	jar	package name	vertx	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	Implementation-Title	Vert.x Core	High
Product	Manifest	maven-artifact-id	vertx-core	Low
Product	Manifest	specification-title	Vert.x Core	Medium
Product	pom	artifactid	vertx-core	Highest
Product	pom	groupid	io.vertx	Highest
Product	pom	name	Vert.x Core	High
Product	pom	parent-artifactid	vertx-core-aggregator	Medium
Version	file	version	5.0.5	High
Version	Manifest	Implementation-Version	5.0.5	High
Version	Manifest	maven-version	5.0.5	Medium
Version	pom	version	5.0.5	Highest

Related Dependencies

vertx-auth-common-5.0.5.jar
- File Path: /home/runner/.m2/repository/io/vertx/vertx-auth-common/5.0.5/vertx-auth-common-5.0.5.jar
- MD5: 9958b64dbdb4fc7f2081a63ea30cca9e
- SHA1: 0a250377fad22641e68f197a912d1e0485051339
- SHA256: d0879d6227788c5c2d03067a5b9251587d4e1bd790f90d3ca2f289890f0fd028
- pkg:maven/io.vertx/vertx-auth-common@5.0.5
vertx-bridge-common-5.0.5.jar
- File Path: /home/runner/.m2/repository/io/vertx/vertx-bridge-common/5.0.5/vertx-bridge-common-5.0.5.jar
- MD5: 38b003524d9c08bdcf8752c35ba2d72f
- SHA1: a70ab729eb2bd7b0a74daee653d0015743fd6f02
- SHA256: 3589f15cacd84efc6465e069654f7913424117a10886fb6a13d011d68edce36f
- pkg:maven/io.vertx/vertx-bridge-common@5.0.5
vertx-codegen-5.0.5.jar
- File Path: /home/runner/.m2/repository/io/vertx/vertx-codegen/5.0.5/vertx-codegen-5.0.5.jar
- MD5: 50bf882772d1f8cc32e4e326b283accc
- SHA1: bd42346c17cfbd4ab5b9cc2a1353f26520444556
- SHA256: 2cff0f0486f69d07388e51f381dc1cfa7459115ba9a3a593d085a1a587084986
- pkg:maven/io.vertx/vertx-codegen@5.0.5
vertx-codegen-api-5.0.5.jar
- File Path: /home/runner/.m2/repository/io/vertx/vertx-codegen-api/5.0.5/vertx-codegen-api-5.0.5.jar
- MD5: 096f1f3051b7cb63cf93ef5a64b6dbcf
- SHA1: fd1dad1af8c2af7ed6902f70978477766fa3958d
- SHA256: 14fd24f652e7f581b164a4e98ad074fec156c297c7398aa7b0d1ce1c20788661
- pkg:maven/io.vertx/vertx-codegen-api@5.0.5
vertx-codegen-json-5.0.5.jar
- File Path: /home/runner/.m2/repository/io/vertx/vertx-codegen-json/5.0.5/vertx-codegen-json-5.0.5.jar
- MD5: 4ad09d6cb360327308aa752cbe9a7a7b
- SHA1: 4b2a1b48c39276ce6593392a9491e44d6a244485
- SHA256: 06943512dae74c8bcbd1f681c5ff6cf902dfb339b6b6ea06b72e3660b36e3981
- pkg:maven/io.vertx/vertx-codegen-json@5.0.5
vertx-codegen-processor-5.0.5.jar
- File Path: /home/runner/.m2/repository/io/vertx/vertx-codegen-processor/5.0.5/vertx-codegen-processor-5.0.5.jar
- MD5: 85c72f19340a36d56480dd633dee6661
- SHA1: 57e1cd24b1ddfe2d03d7618cf2558330b4a2f273
- SHA256: 75d1b60130952601c165268e059b0dd443da68efbd5d33a6c6f1c0d23fa76760
- pkg:maven/io.vertx/vertx-codegen-processor@5.0.5
vertx-core-logging-5.0.5.jar
- File Path: /home/runner/.m2/repository/io/vertx/vertx-core-logging/5.0.5/vertx-core-logging-5.0.5.jar
- MD5: ef0f4591c4203277a44d152c843a4bd9
- SHA1: fbd04a914dc0289ea7efeefc19e84abc175730d6
- SHA256: 93059a2ebd6b415fe807083b3845258b49c1e3b0a52576b9b23a054995c3cb6f
- pkg:maven/io.vertx/vertx-core-logging@5.0.5
vertx-uri-template-5.0.5.jar
- File Path: /home/runner/.m2/repository/io/vertx/vertx-uri-template/5.0.5/vertx-uri-template-5.0.5.jar
- MD5: 436381d94eb4b21b38d7348aa5bccbf9
- SHA1: cdf31c99528bbec3c174bc91bc88c18af4e0e66e
- SHA256: 9367a83e221ae2a4fd5305742f6765c09a13fe1789b7dfe236d3848a1bf01ad5
- pkg:maven/io.vertx/vertx-uri-template@5.0.5

Identifiers

pkg:maven/io.vertx/vertx-core@5.0.5 (Confidence:High)
cpe:2.3:a:eclipse:vert.x:5.0.5:*:*:*:*:*:*:* (Confidence:High)

vertx-web-5.0.5.jar

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
Eclipse Public License - v 2.0: http://www.eclipse.org/legal/epl-v20.html

File Path: /home/runner/.m2/repository/io/vertx/vertx-web/5.0.5/vertx-web-5.0.5.jar
MD5: b524bf7ba1853f993e681de1cd9fa02f
SHA1: 28ab2ee027784bc837b0cb074f487b548b792ff4
SHA256:0abcc9736632c216e52feae11946b6f31a7697989c34f00b04433760a724a058
Referenced In Project/Scope: JWT Validator - Vertx:compile
pkg:maven/uk.co.spudsoft/jwt-validator-vertx@0.2.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	vertx-web	High
Vendor	jar	package name	io	Highest
Vendor	jar	package name	vertx	Highest
Vendor	jar	package name	web	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	Implementation-Vendor	Eclipse	High
Vendor	Manifest	maven-artifact-id	vertx-web	Low
Vendor	Manifest	specification-vendor	Eclipse	Low
Vendor	pom	artifactid	vertx-web	Highest
Vendor	pom	artifactid	vertx-web	Low
Vendor	pom	groupid	io.vertx	Highest
Vendor	pom	name	Vert.x Web	High
Vendor	pom	parent-artifactid	vertx-web-parent	Low
Product	file	name	vertx-web	High
Product	jar	package name	io	Highest
Product	jar	package name	vertx	Highest
Product	jar	package name	web	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	Implementation-Title	Vert.x Web	High
Product	Manifest	maven-artifact-id	vertx-web	Low
Product	Manifest	specification-title	Vert.x Web	Medium
Product	pom	artifactid	vertx-web	Highest
Product	pom	groupid	io.vertx	Highest
Product	pom	name	Vert.x Web	High
Product	pom	parent-artifactid	vertx-web-parent	Medium
Version	file	version	5.0.5	High
Version	Manifest	Implementation-Version	5.0.5	High
Version	Manifest	maven-version	5.0.5	Medium
Version	pom	version	5.0.5	Highest

Related Dependencies

Identifiers

pkg:maven/io.vertx/vertx-web@5.0.5 (Confidence:High)
cpe:2.3:a:web_project:web:5.0.5:*:*:*:*:*:*:* (Confidence:Highest)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: JWT Validator - Vertx

uk.co.spudsoft:jwt-validator-vertx:0.2.2

Summary

Dependencies (vulnerable)

error_prone_annotations-2.41.0.jar

Evidence

Identifiers

failureaccess-1.0.3.jar

Evidence

Identifiers

guava-33.5.0-jre.jar

Evidence

Identifiers

j2objc-annotations-3.1.jar

Evidence

Identifiers

jackson-annotations-2.20.jar

Evidence

Identifiers

jackson-core-2.20.1.jar

Evidence

Related Dependencies

Identifiers

jackson-databind-2.20.1.jar

Evidence

Identifiers

jackson-dataformat-yaml-2.20.1.jar

Evidence

Related Dependencies

Identifiers

jspecify-1.0.0.jar

Evidence

Identifiers

listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

Evidence

Identifiers

netty-common-4.2.7.Final.jar (shaded: org.jctools:jctools-core:4.0.5)

Evidence

Identifiers

netty-transport-4.2.7.Final.jar

Evidence

Related Dependencies

Identifiers

slf4j-api-2.1.0-alpha1.jar

Evidence

Identifiers

snakeyaml-2.4.jar

Evidence

Identifiers

vertx-core-5.0.5.jar

Evidence

Related Dependencies

Identifiers

vertx-web-5.0.5.jar

Evidence

Related Dependencies

Identifiers