Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
+false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
+the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
+implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
+is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
+arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all ):
dependency-check version : 11.1.1Report Generated On : Wed, 1 Jan 2025 01:39:06 -0500Dependencies Scanned : 307 (193 unique)Vulnerable Dependencies : 17 Vulnerabilities Found : 33Vulnerabilities Suppressed : 0 ... NVD API Last Checked : 2025-01-01T00:13:33-05NVD API Last Modified : 2025-01-01T03:15:21ZSummary Display:
Showing Vulnerable Dependencies (click to show all) Description:
+ Byte Buddy is a Java library for creating Java classes at run time.
+ This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
+ License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\net\bytebuddy\byte-buddy\1.15.11\byte-buddy-1.15.11.jar
MD5: 603bc53c7a294f23765bfb7e1820ad44
SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c
SHA256: fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90
Referenced In Projects/Scopes: waffle-distro:compile waffle-distro:runtime byte-buddy-1.15.11.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.5.1
Evidence Type Source Name Value Confidence Vendor file name byte-buddy High Vendor jar package name asm Highest Vendor jar package name build Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy Highest Vendor pom artifactid byte-buddy Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy (without dependencies) High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy High Product jar package name asm Highest Product jar package name build Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Product Manifest multi-release true Low Product pom artifactid byte-buddy Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy (without dependencies) High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: byte-buddy-1.15.11.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\byte-buddy-1.15.11.jar MD5: 603bc53c7a294f23765bfb7e1820ad44 SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c SHA256: fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90 pkg:maven/net.bytebuddy/byte-buddy@1.15.11 waffle-spring-boot-filter3-3.5.1.jar: byte-buddy-1.15.11.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\byte-buddy-1.15.11.jar MD5: 603bc53c7a294f23765bfb7e1820ad44 SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c SHA256: fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90 pkg:maven/net.bytebuddy/byte-buddy@1.15.11 File Path: C:\Users\Jeremy\.m2\repository\net\bytebuddy\byte-buddy-agent\1.15.11\byte-buddy-agent-1.15.11.jar\win32-x86-64\attach_hotspot_windows.dllMD5: 053a783e5777c6a9867c27d51af89677SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76SHA256: 16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20Referenced In Projects/Scopes:
waffle-distro:compile waffle-distro:runtime Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: byte-buddy-agent-1.15.11.jar: attach_hotspot_windows.dllFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86-64\attach_hotspot_windows.dll MD5: 053a783e5777c6a9867c27d51af89677 SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76 SHA256: 16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20 waffle-spring-boot-filter3-3.5.1.jar: byte-buddy-agent-1.15.11.jar: attach_hotspot_windows.dllFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86-64\attach_hotspot_windows.dll MD5: 053a783e5777c6a9867c27d51af89677 SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76 SHA256: 16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20 File Path: C:\Users\Jeremy\.m2\repository\net\bytebuddy\byte-buddy-agent\1.15.11\byte-buddy-agent-1.15.11.jar\win32-x86\attach_hotspot_windows.dllMD5: fbca33102ac97be0ed496c0f78e466b3SHA1: c4df05146a86a6d073769bb697d550ef42518ed5SHA256: 810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72Referenced In Projects/Scopes:
waffle-distro:compile waffle-distro:runtime Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: byte-buddy-agent-1.15.11.jar: attach_hotspot_windows.dllFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86\attach_hotspot_windows.dll MD5: fbca33102ac97be0ed496c0f78e466b3 SHA1: c4df05146a86a6d073769bb697d550ef42518ed5 SHA256: 810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72 waffle-spring-boot-filter3-3.5.1.jar: byte-buddy-agent-1.15.11.jar: attach_hotspot_windows.dllFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86\attach_hotspot_windows.dll MD5: fbca33102ac97be0ed496c0f78e466b3 SHA1: c4df05146a86a6d073769bb697d550ef42518ed5 SHA256: 810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72 Description:
The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\net\bytebuddy\byte-buddy-agent\1.15.11\byte-buddy-agent-1.15.11.jar
MD5: 449a1534609bf3535d74cbb10b4ed074
SHA1: a38b16385e867f59a641330f0362ebe742788ed8
SHA256: 316d2c0795c2a4d4c4756f2e6f9349837c7430ac34e0477ead874d05f5cc19e5
Referenced In Projects/Scopes: waffle-distro:compile waffle-distro:runtime byte-buddy-agent-1.15.11.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.5.1
Evidence Type Source Name Value Confidence Vendor file name byte-buddy-agent High Vendor jar package name agent Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Vendor Manifest can-redefine-classes true Low Vendor Manifest can-retransform-classes true Low Vendor Manifest can-set-native-method-prefix true Low Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy-agent Highest Vendor pom artifactid byte-buddy-agent Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy agent High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy-agent High Product jar package name agent Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy agent Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Product Manifest can-redefine-classes true Low Product Manifest can-retransform-classes true Low Product Manifest can-set-native-method-prefix true Low Product Manifest multi-release true Low Product pom artifactid byte-buddy-agent Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy agent High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: byte-buddy-agent-1.15.11.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\byte-buddy-agent-1.15.11.jar MD5: 449a1534609bf3535d74cbb10b4ed074 SHA1: a38b16385e867f59a641330f0362ebe742788ed8 SHA256: 316d2c0795c2a4d4c4756f2e6f9349837c7430ac34e0477ead874d05f5cc19e5 pkg:maven/net.bytebuddy/byte-buddy-agent@1.15.11 waffle-spring-boot-filter3-3.5.1.jar: byte-buddy-agent-1.15.11.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\byte-buddy-agent-1.15.11.jar MD5: 449a1534609bf3535d74cbb10b4ed074 SHA1: a38b16385e867f59a641330f0362ebe742788ed8 SHA256: 316d2c0795c2a4d4c4756f2e6f9349837c7430ac34e0477ead874d05f5cc19e5 pkg:maven/net.bytebuddy/byte-buddy-agent@1.15.11 Description:
A high performance caching library License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\com\github\ben-manes\caffeine\caffeine\3.1.8\caffeine-3.1.8.jar
MD5: b19301179903e8781776397d9923f7c8
SHA1: 24795585df8afaf70a2cd534786904ea5889c047
SHA256: 7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3
Referenced In Projects/Scopes: waffle-distro:compile waffle-distro:runtime caffeine-3.1.8.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.5.1
Evidence Type Source Name Value Confidence Vendor file name caffeine High Vendor jar package name benmanes Highest Vendor jar package name cache Highest Vendor jar package name caffeine Highest Vendor jar package name github Highest Vendor Manifest automatic-module-name com.github.benmanes.caffeine Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Vendor pom artifactid caffeine Highest Vendor pom artifactid caffeine Low Vendor pom developer email ben.manes@gmail.com Low Vendor pom developer id ben-manes Medium Vendor pom developer name Ben Manes Medium Vendor pom groupid com.github.ben-manes.caffeine Highest Vendor pom name Caffeine cache High Vendor pom url ben-manes/caffeine Highest Product file name caffeine High Product jar package name benmanes Highest Product jar package name cache Highest Product jar package name caffeine Highest Product jar package name github Highest Product Manifest automatic-module-name com.github.benmanes.caffeine Medium Product Manifest build-jdk-spec 11 Low Product Manifest Bundle-Name com.github.ben-manes.caffeine Medium Product Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Product Manifest Implementation-Title A high performance caching library High Product pom artifactid caffeine Highest Product pom developer email ben.manes@gmail.com Low Product pom developer id ben-manes Low Product pom developer name Ben Manes Low Product pom groupid com.github.ben-manes.caffeine Highest Product pom name Caffeine cache High Product pom url ben-manes/caffeine High Version file version 3.1.8 High Version Manifest Bundle-Version 3.1.8 High Version Manifest Implementation-Version 3.1.8 High Version pom version 3.1.8 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: caffeine-3.1.8.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\caffeine-3.1.8.jar MD5: b19301179903e8781776397d9923f7c8 SHA1: 24795585df8afaf70a2cd534786904ea5889c047 SHA256: 7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3 waffle-spring-boot-filter3-3.5.1.jar: caffeine-3.1.8.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\caffeine-3.1.8.jar MD5: b19301179903e8781776397d9923f7c8 SHA1: 24795585df8afaf70a2cd534786904ea5889c047 SHA256: 7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3 Description:
checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework. License:
The MIT License: http://opensource.org/licenses/MIT File Path: C:\Users\Jeremy\.m2\repository\org\checkerframework\checker-qual\3.48.3\checker-qual-3.48.3.jar
MD5: 9fe3deae54d20bd78960459c952ac7d4
SHA1: c48effe7d78de3cf5e8a98c614281ec6a2466a77
SHA256: 443685b1b232803baaf803c15d6f5a425473c6f7b81c5f276dfcf93288e389a5
Referenced In Projects/Scopes: waffle-distro:compile waffle-distro:runtime checker-qual-3.48.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.5.1
Evidence Type Source Name Value Confidence Vendor file name checker-qual High Vendor jar package name checker Highest Vendor jar package name checkerframework Highest Vendor jar package name framework Highest Vendor jar package name qual Highest Vendor Manifest bundle-symbolicname checker-qual Medium Vendor Manifest implementation-url https://checkerframework.org Low Vendor pom artifactid checker-qual Highest Vendor pom artifactid checker-qual Low Vendor pom developer email mernst@cs.washington.edu Low Vendor pom developer email smillst@cs.washington.edu Low Vendor pom developer id mernst Medium Vendor pom developer id smillst Medium Vendor pom developer name Michael Ernst Medium Vendor pom developer name Suzanne Millstein Medium Vendor pom developer org University of Washington Medium Vendor pom developer org URL https://www.cs.washington.edu/ Medium Vendor pom groupid org.checkerframework Highest Vendor pom name Checker Qual High Vendor pom url https://checkerframework.org/ Highest Product file name checker-qual High Product jar package name checker Highest Product jar package name checkerframework Highest Product jar package name framework Highest Product jar package name qual Highest Product Manifest Bundle-Name checker-qual Medium Product Manifest bundle-symbolicname checker-qual Medium Product Manifest implementation-url https://checkerframework.org Low Product pom artifactid checker-qual Highest Product pom developer email mernst@cs.washington.edu Low Product pom developer email smillst@cs.washington.edu Low Product pom developer id mernst Low Product pom developer id smillst Low Product pom developer name Michael Ernst Low Product pom developer name Suzanne Millstein Low Product pom developer org University of Washington Low Product pom developer org URL https://www.cs.washington.edu/ Low Product pom groupid org.checkerframework Highest Product pom name Checker Qual High Product pom url https://checkerframework.org/ Medium Version file version 3.48.3 High Version Manifest Bundle-Version 3.48.3 High Version Manifest Implementation-Version 3.48.3 High Version pom version 3.48.3 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: checker-qual-3.48.3.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\checker-qual-3.48.3.jar MD5: 9fe3deae54d20bd78960459c952ac7d4 SHA1: c48effe7d78de3cf5e8a98c614281ec6a2466a77 SHA256: 443685b1b232803baaf803c15d6f5a425473c6f7b81c5f276dfcf93288e389a5 waffle-spring-boot-filter3-3.5.1.jar: checker-qual-3.48.3.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\checker-qual-3.48.3.jar MD5: 9fe3deae54d20bd78960459c952ac7d4 SHA1: c48effe7d78de3cf5e8a98c614281ec6a2466a77 SHA256: 443685b1b232803baaf803c15d6f5a425473c6f7b81c5f276dfcf93288e389a5 Description:
Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time. License:
Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\com\google\errorprone\error_prone_annotations\2.36.0\error_prone_annotations-2.36.0.jar
MD5: 0e48e5ba2cd0a8d8d09bad849b99f6a6
SHA1: 227d4d4957ccc3dc5761bd897e3a0ee587e750a7
SHA256: 77440e270b0bc9a249903c5a076c36a722c4886ca4f42675f2903a1c53ed61a5
Referenced In Projects/Scopes: waffle-distro:runtime waffle-distro:provided error_prone_annotations-2.36.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.5.1
Evidence Type Source Name Value Confidence Vendor file name error_prone_annotations High Vendor jar package name annotations Highest Vendor jar package name errorprone Highest Vendor jar package name google Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl https://errorprone.info/error_prone_annotations Low Vendor Manifest bundle-symbolicname com.google.errorprone.annotations Medium Vendor Manifest multi-release true Low Vendor pom artifactid error_prone_annotations Highest Vendor pom artifactid error_prone_annotations Low Vendor pom groupid com.google.errorprone Highest Vendor pom name error-prone annotations High Vendor pom parent-artifactid error_prone_parent Low Product file name error_prone_annotations High Product jar package name annotations Highest Product jar package name errorprone Highest Product jar package name google Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl https://errorprone.info/error_prone_annotations Low Product Manifest Bundle-Name error-prone annotations Medium Product Manifest bundle-symbolicname com.google.errorprone.annotations Medium Product Manifest multi-release true Low Product pom artifactid error_prone_annotations Highest Product pom groupid com.google.errorprone Highest Product pom name error-prone annotations High Product pom parent-artifactid error_prone_parent Medium Version file version 2.36.0 High Version Manifest Bundle-Version 2.36.0 High Version pom version 2.36.0 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: error_prone_annotations-2.36.0.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\error_prone_annotations-2.36.0.jar MD5: 0e48e5ba2cd0a8d8d09bad849b99f6a6 SHA1: 227d4d4957ccc3dc5761bd897e3a0ee587e750a7 SHA256: 77440e270b0bc9a249903c5a076c36a722c4886ca4f42675f2903a1c53ed61a5 pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0 waffle-spring-boot-filter3-3.5.1.jar: error_prone_annotations-2.36.0.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\error_prone_annotations-2.36.0.jar MD5: 0e48e5ba2cd0a8d8d09bad849b99f6a6 SHA1: 227d4d4957ccc3dc5761bd897e3a0ee587e750a7 SHA256: 77440e270b0bc9a249903c5a076c36a722c4886ca4f42675f2903a1c53ed61a5 pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0 Description:
+ A set of annotations that provide additional information to the J2ObjC
+ translator to modify the result of translation.
+ License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\com\google\j2objc\j2objc-annotations\3.0.0\j2objc-annotations-3.0.0.jar
MD5: f59529b29202a5baf37f491ea5ec8627
SHA1: 7399e65dd7e9ff3404f4535b2f017093bdb134c7
SHA256: 88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64
Referenced In Projects/Scopes: waffle-distro:runtime waffle-distro:provided j2objc-annotations-3.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.5.1
Evidence Type Source Name Value Confidence Vendor file name j2objc-annotations High Vendor jar package name annotations Highest Vendor jar package name google Highest Vendor jar package name j2objc Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest multi-release true Low Vendor pom artifactid j2objc-annotations Highest Vendor pom artifactid j2objc-annotations Low Vendor pom developer email tball@google.com Low Vendor pom developer id tomball Medium Vendor pom developer name Tom Ball Medium Vendor pom developer org Google Medium Vendor pom developer org URL https://www.google.com Medium Vendor pom groupid com.google.j2objc Highest Vendor pom name J2ObjC Annotations High Vendor pom url google/j2objc/ Highest Product file name j2objc-annotations High Product jar package name annotations Highest Product jar package name google Highest Product jar package name j2objc Highest Product Manifest build-jdk-spec 11 Low Product Manifest multi-release true Low Product pom artifactid j2objc-annotations Highest Product pom developer email tball@google.com Low Product pom developer id tomball Low Product pom developer name Tom Ball Low Product pom developer org Google Low Product pom developer org URL https://www.google.com Low Product pom groupid com.google.j2objc Highest Product pom name J2ObjC Annotations High Product pom url google/j2objc/ High Version file version 3.0.0 High Version pom version 3.0.0 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: j2objc-annotations-3.0.0.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\j2objc-annotations-3.0.0.jar MD5: f59529b29202a5baf37f491ea5ec8627 SHA1: 7399e65dd7e9ff3404f4535b2f017093bdb134c7 SHA256: 88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64 pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0 waffle-spring-boot-filter3-3.5.1.jar: j2objc-annotations-3.0.0.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\j2objc-annotations-3.0.0.jar MD5: f59529b29202a5baf37f491ea5ec8627 SHA1: 7399e65dd7e9ff3404f4535b2f017093bdb134c7 SHA256: 88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64 pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0 Description:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\com\fasterxml\jackson\core\jackson-core\2.13.5\jackson-core-2.13.5.jar
MD5: 2272453c780d1383ecd2efde00c1a7a9
SHA1: 0d07c97d3de9ea658caf1ff1809fd9de930a286a
SHA256: 48f36a025311d0464ad8dda4512a20c79e279a9550f63f3179d731d94482474b
Referenced In Project/Scope: waffle-distro:runtime
jackson-core-2.13.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle.demo/waffle-spring-boot-filter2@3.5.1
Evidence Type Source Name Value Confidence Vendor file name jackson-core High Vendor jar package name base Highest Vendor jar package name core Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name json Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Vendor Manifest implementation-build-date 2023-01-23 00:23:55+0000 Low Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-core Highest Vendor pom artifactid jackson-core Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name Jackson-core High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson-core Highest Product file name jackson-core High Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name base Highest Product jar package name core Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name json Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Product Manifest Bundle-Name Jackson-core Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Product Manifest implementation-build-date 2023-01-23 00:23:55+0000 Low Product Manifest Implementation-Title Jackson-core High Product Manifest multi-release true Low Product Manifest specification-title Jackson-core Medium Product pom artifactid jackson-core Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name Jackson-core High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson-core High Version file version 2.13.5 High Version Manifest Bundle-Version 2.13.5 High Version Manifest Implementation-Version 2.13.5 High Version pom version 2.13.5 Highest
Related Dependencies jackson-annotations-2.13.5.jarFile Path: C:\Users\Jeremy\.m2\repository\com\fasterxml\jackson\core\jackson-annotations\2.13.5\jackson-annotations-2.13.5.jar MD5: 0b1245f3245cbfa53e61d9d366006041 SHA1: 136f77ab424f302c9e27230b4482e8000e142edf SHA256: 80aea8ed7232db5040ced4b3f982f29da95bb3d802343dbf6fd82ccd98c21c4f pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.5 jackson-datatype-jdk8-2.13.5.jarFile Path: C:\Users\Jeremy\.m2\repository\com\fasterxml\jackson\datatype\jackson-datatype-jdk8\2.13.5\jackson-datatype-jdk8-2.13.5.jar MD5: 3803e35b61c5812310fd093c398b43b6 SHA1: 1278f38160812811c56eb77f67213662ed1c7a2e SHA256: e58761751fea8a00dc626aae1c5f1be38c5cfd487aeb333d933a4ab5f5a73c55 pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.5 jackson-datatype-jsr310-2.13.5.jarFile Path: C:\Users\Jeremy\.m2\repository\com\fasterxml\jackson\datatype\jackson-datatype-jsr310\2.13.5\jackson-datatype-jsr310-2.13.5.jar MD5: 712138e14895b15181e0b9af3292e222 SHA1: 8ba3b868e81d7fc6ead686bd2353859b111d9eaf SHA256: ef15ceddddc58dfbd686b6b7fd0853ed328ff08c628bd4a395734bec20ca857b pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.5 jackson-module-parameter-names-2.13.5.jarFile Path: C:\Users\Jeremy\.m2\repository\com\fasterxml\jackson\module\jackson-module-parameter-names\2.13.5\jackson-module-parameter-names-2.13.5.jar MD5: 5c28a6ef0d19bcc62976eea35714047e SHA1: a401a99e7a45450fd3ef76e82ba39005fd1a8c22 SHA256: e5fcf17369885065ddec9a9cebead8597c55de252dedf10a3c14eeed8affaca4 pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.5 waffle-spring-boot-filter2-3.5.1.jar: jackson-core-2.13.5.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jackson-core-2.13.5.jar MD5: 2272453c780d1383ecd2efde00c1a7a9 SHA1: 0d07c97d3de9ea658caf1ff1809fd9de930a286a SHA256: 48f36a025311d0464ad8dda4512a20c79e279a9550f63f3179d731d94482474b pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.5 Description:
General data-binding functionality for Jackson: works on core streaming API License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\com\fasterxml\jackson\core\jackson-databind\2.13.5\jackson-databind-2.13.5.jar
MD5: 1dbb98839964a6967a428d868b2d8714
SHA1: aa95e46dbc32454f3983221d420e78ef19ddf844
SHA256: 5fedb24b2356491815d18267f65da9a21dd67413345ad7795f221afa25c78984
Referenced In Project/Scope: waffle-distro:runtime
jackson-databind-2.13.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle.demo/waffle-spring-boot-filter2@3.5.1
Evidence Type Source Name Value Confidence Vendor file name jackson-databind High Vendor jar package name databind Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl http://github.com/FasterXML/jackson Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Vendor Manifest implementation-build-date 2023-01-23 00:47:48+0000 Low Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-databind Highest Vendor pom artifactid jackson-databind Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name jackson-databind High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url http://github.com/FasterXML/jackson Highest Product file name jackson-databind High Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name databind Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl http://github.com/FasterXML/jackson Low Product Manifest Bundle-Name jackson-databind Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Product Manifest implementation-build-date 2023-01-23 00:47:48+0000 Low Product Manifest Implementation-Title jackson-databind High Product Manifest multi-release true Low Product Manifest specification-title jackson-databind Medium Product pom artifactid jackson-databind Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name jackson-databind High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url http://github.com/FasterXML/jackson Medium Version file version 2.13.5 High Version Manifest Bundle-Version 2.13.5 High Version Manifest Implementation-Version 2.13.5 High Version pom version 2.13.5 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: jackson-databind-2.13.5.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jackson-databind-2.13.5.jar MD5: 1dbb98839964a6967a428d868b2d8714 SHA1: aa95e46dbc32454f3983221d420e78ef19ddf844 SHA256: 5fedb24b2356491815d18267f65da9a21dd67413345ad7795f221afa25c78984 pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.5 CVE-2023-35116 suppress
jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker. CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv3:
Base Score: MEDIUM (4.7) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:1.0/RC:R/MAV:A References:
Vulnerable Software & Versions:
Description:
Jakarta Annotations API License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
+GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html File Path: C:\Users\Jeremy\.m2\repository\jakarta\annotation\jakarta.annotation-api\1.3.5\jakarta.annotation-api-1.3.5.jar
MD5: 8b165cf58df5f8c2a222f637c0a07c97
SHA1: 59eb84ee0d616332ff44aba065f3888cf002cd2d
SHA256: 85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a
Referenced In Project/Scope: waffle-distro:runtime
jakarta.annotation-api-1.3.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.5.1
Evidence Type Source Name Value Confidence Vendor file name jakarta.annotation-api High Vendor jar package name annotation Highest Vendor Manifest automatic-module-name java.annotation Medium Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.annotation-api Medium Vendor Manifest extension-name jakarta.annotation Medium Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.annotation-api Highest Vendor pom artifactid jakarta.annotation-api Low Vendor pom developer name Linda De Michiel Medium Vendor pom developer org Oracle Corp. Medium Vendor pom groupid jakarta.annotation Highest Vendor pom name Jakarta Annotations API High Vendor pom parent-artifactid ca-parent Low Vendor pom url https://projects.eclipse.org/projects/ee4j.ca Highest Product file name jakarta.annotation-api High Product jar package name annotation Highest Product Manifest automatic-module-name java.annotation Medium Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Annotations API Medium Product Manifest bundle-symbolicname jakarta.annotation-api Medium Product Manifest extension-name jakarta.annotation Medium Product pom artifactid jakarta.annotation-api Highest Product pom developer name Linda De Michiel Low Product pom developer org Oracle Corp. Low Product pom groupid jakarta.annotation Highest Product pom name Jakarta Annotations API High Product pom parent-artifactid ca-parent Medium Product pom url https://projects.eclipse.org/projects/ee4j.ca Medium Version file version 1.3.5 High Version Manifest Bundle-Version 1.3.5 High Version Manifest Implementation-Version 1.3.5 High Version pom version 1.3.5 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: jakarta.annotation-api-1.3.5.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jakarta.annotation-api-1.3.5.jar MD5: 8b165cf58df5f8c2a222f637c0a07c97 SHA1: 59eb84ee0d616332ff44aba065f3888cf002cd2d SHA256: 85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5 Description:
JCL 1.2 implemented over SLF4J License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\jcl-over-slf4j\2.0.16\jcl-over-slf4j-2.0.16.jar
MD5: c077b88c43f9d63f64f9880fdb457efb
SHA1: 9d08badad22f1ac07deac9188ade596472a2bfd9
SHA256: 5744d62c5af556e839ab922c9fa3f737f0a5971e478ba68b2eb5256b2842ec78
Referenced In Project/Scope: waffle-distro:compile
jcl-over-slf4j-2.0.16.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.5.1
Evidence Type Source Name Value Confidence Vendor file name jcl-over-slf4j High Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname jcl.over.slf4j Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor pom artifactid jcl-over-slf4j Highest Vendor pom artifactid jcl-over-slf4j Low Vendor pom groupid org.slf4j Highest Vendor pom name JCL 1.2 implemented over SLF4J High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name jcl-over-slf4j High Product jar package name 9 Highest Product jar package name apache Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name JCL 1.2 implemented over SLF4J Medium Product Manifest bundle-symbolicname jcl.over.slf4j Medium Product Manifest Implementation-Title jcl-over-slf4j High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product pom artifactid jcl-over-slf4j Highest Product pom groupid org.slf4j Highest Product pom name JCL 1.2 implemented over SLF4J High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna\5.16.0\jna-5.16.0.jar\com\sun\jna\win32-aarch64\jnidispatch.dllMD5: 302945a811fd8e21bcdd5226c73b6f74SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607cSHA256: b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699dReferenced In Projects/Scopes:
waffle-distro:compile waffle-distro:runtime Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: jna-5.16.0.jar: jnidispatch.dllFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-aarch64\jnidispatch.dll MD5: 302945a811fd8e21bcdd5226c73b6f74 SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607c SHA256: b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699d waffle-spring-boot-filter3-3.5.1.jar: jna-5.16.0.jar: jnidispatch.dllFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-aarch64\jnidispatch.dll MD5: 302945a811fd8e21bcdd5226c73b6f74 SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607c SHA256: b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699d File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna\5.16.0\jna-5.16.0.jar\com\sun\jna\win32-x86-64\jnidispatch.dllMD5: 2d2475f1f026dd54e9f3e787ae4f81daSHA1: 27ff882ac271db547aee520b38e3ba9aa91e136cSHA256: 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023Referenced In Projects/Scopes:
waffle-distro:compile waffle-distro:runtime Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: jna-5.16.0.jar: jnidispatch.dllFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86-64\jnidispatch.dll MD5: 2d2475f1f026dd54e9f3e787ae4f81da SHA1: 27ff882ac271db547aee520b38e3ba9aa91e136c SHA256: 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023 waffle-spring-boot-filter3-3.5.1.jar: jna-5.16.0.jar: jnidispatch.dllFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86-64\jnidispatch.dll MD5: 2d2475f1f026dd54e9f3e787ae4f81da SHA1: 27ff882ac271db547aee520b38e3ba9aa91e136c SHA256: 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023 File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna\5.16.0\jna-5.16.0.jar\com\sun\jna\win32-x86\jnidispatch.dllMD5: 0caa1ef75a807f9dde05084fa2219a5cSHA1: 2f5e1cd82cde192905c7510ce99037b67d980640SHA256: 752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44Referenced In Projects/Scopes:
waffle-distro:compile waffle-distro:runtime Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: jna-5.16.0.jar: jnidispatch.dllFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86\jnidispatch.dll MD5: 0caa1ef75a807f9dde05084fa2219a5c SHA1: 2f5e1cd82cde192905c7510ce99037b67d980640 SHA256: 752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44 waffle-spring-boot-filter3-3.5.1.jar: jna-5.16.0.jar: jnidispatch.dllFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86\jnidispatch.dll MD5: 0caa1ef75a807f9dde05084fa2219a5c SHA1: 2f5e1cd82cde192905c7510ce99037b67d980640 SHA256: 752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44 Description:
Java Native Access License:
LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
+Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna\5.16.0\jna-5.16.0.jar
MD5: accc2e2b8676434a87f4f73fb4d90b44
SHA1: ebea09f91dc9f7048099f963fb8d6f919f0a4d9c
SHA256: 3f5233589a799eb66dc2969afa3433fb56859d3d787c58b9bc7dd9e86f0a250c
Referenced In Projects/Scopes: waffle-distro:compile waffle-distro:runtime jna-5.16.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.5.1
Evidence Type Source Name Value Confidence Vendor file name jna High Vendor jar package name jna Highest Vendor jar package name native Highest Vendor jar package name sun Highest Vendor jar (hint) package name oracle Highest Vendor Manifest automatic-module-name com.sun.jna Medium Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-category jni Low Vendor Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname com.sun.jna Medium Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest specification-vendor JNA Development Team Low Vendor pom artifactid jna Highest Vendor pom artifactid jna Low Vendor pom developer email mblaesing@doppel-helix.eu Low Vendor pom developer id twall Medium Vendor pom developer name Matthias Bläsing Medium Vendor pom developer name Timothy Wall Medium Vendor pom groupid net.java.dev.jna Highest Vendor pom name Java Native Access High Vendor pom url java-native-access/jna Highest Product file name jna High Product jar package name jna Highest Product jar package name library Highest Product jar package name native Highest Product jar package name sun Highest Product jar package name win32 Highest Product Manifest automatic-module-name com.sun.jna Medium Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-category jni Low Product Manifest Bundle-Name jna Medium Product Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname com.sun.jna Medium Product Manifest Implementation-Title com.sun.jna High Product Manifest specification-title Java Native Access (JNA) Medium Product pom artifactid jna Highest Product pom developer email mblaesing@doppel-helix.eu Low Product pom developer id twall Low Product pom developer name Matthias Bläsing Low Product pom developer name Timothy Wall Low Product pom groupid net.java.dev.jna Highest Product pom name Java Native Access High Product pom url java-native-access/jna High Version file version 5.16.0 High Version Manifest Bundle-Version 5.16.0 High Version pom version 5.16.0 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: jna-5.16.0.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jna-5.16.0.jar MD5: accc2e2b8676434a87f4f73fb4d90b44 SHA1: ebea09f91dc9f7048099f963fb8d6f919f0a4d9c SHA256: 3f5233589a799eb66dc2969afa3433fb56859d3d787c58b9bc7dd9e86f0a250c waffle-spring-boot-filter3-3.5.1.jar: jna-5.16.0.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jna-5.16.0.jar MD5: accc2e2b8676434a87f4f73fb4d90b44 SHA1: ebea09f91dc9f7048099f963fb8d6f919f0a4d9c SHA256: 3f5233589a799eb66dc2969afa3433fb56859d3d787c58b9bc7dd9e86f0a250c Description:
Java Native Access Platform License:
LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
+Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna-platform\5.16.0\jna-platform-5.16.0.jar
MD5: 12ba6b7a7752ecf0a5baed725f3192c2
SHA1: b2a9065f97c166893d504b164706512338e3bbc2
SHA256: e5a79523964509757555782bb60283e4902611013f107e4600dc93298f73f382
Referenced In Projects/Scopes: waffle-distro:compile waffle-distro:runtime jna-platform-5.16.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.5.1
Evidence Type Source Name Value Confidence Vendor file name jna-platform High Vendor jar package name jna Highest Vendor jar package name platform Highest Vendor jar package name sun Highest Vendor jar (hint) package name oracle Highest Vendor Manifest automatic-module-name com.sun.jna.platform Medium Vendor Manifest bundle-category jni Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor Manifest bundle-symbolicname com.sun.jna.platform Medium Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest require-bundle com.sun.jna;bundle-version="5.16.0" Low Vendor Manifest specification-vendor JNA Development Team Low Vendor pom artifactid jna-platform Highest Vendor pom artifactid jna-platform Low Vendor pom developer email mblaesing@doppel-helix.eu Low Vendor pom developer id twall Medium Vendor pom developer name Matthias Bläsing Medium Vendor pom developer name Timothy Wall Medium Vendor pom groupid net.java.dev.jna Highest Vendor pom name Java Native Access Platform High Vendor pom url java-native-access/jna Highest Product file name jna-platform High Product jar package name jna Highest Product jar package name platform Highest Product jar package name sun Highest Product Manifest automatic-module-name com.sun.jna.platform Medium Product Manifest bundle-category jni Low Product Manifest Bundle-Name jna-platform Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product Manifest bundle-symbolicname com.sun.jna.platform Medium Product Manifest Implementation-Title com.sun.jna High Product Manifest require-bundle com.sun.jna;bundle-version="5.16.0" Low Product Manifest specification-title Java Native Access (JNA) Medium Product pom artifactid jna-platform Highest Product pom developer email mblaesing@doppel-helix.eu Low Product pom developer id twall Low Product pom developer name Matthias Bläsing Low Product pom developer name Timothy Wall Low Product pom groupid net.java.dev.jna Highest Product pom name Java Native Access Platform High Product pom url java-native-access/jna High Version file version 5.16.0 High Version Manifest Bundle-Version 5.16.0 High Version pom version 5.16.0 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: jna-platform-5.16.0.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jna-platform-5.16.0.jar MD5: 12ba6b7a7752ecf0a5baed725f3192c2 SHA1: b2a9065f97c166893d504b164706512338e3bbc2 SHA256: e5a79523964509757555782bb60283e4902611013f107e4600dc93298f73f382 waffle-spring-boot-filter3-3.5.1.jar: jna-platform-5.16.0.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jna-platform-5.16.0.jar MD5: 12ba6b7a7752ecf0a5baed725f3192c2 SHA1: b2a9065f97c166893d504b164706512338e3bbc2 SHA256: e5a79523964509757555782bb60283e4902611013f107e4600dc93298f73f382 Description:
JSR305 Annotations for Findbugs License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\com\google\code\findbugs\jsr305\3.0.2\jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256: 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Projects/Scopes: waffle-distro:runtime waffle-distro:provided jsr305-3.0.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6
Evidence Type Source Name Value Confidence Vendor file name jsr305 High Vendor Manifest bundle-symbolicname org.jsr-305 Medium Vendor pom artifactid jsr305 Highest Vendor pom artifactid jsr305 Low Vendor pom groupid com.google.code.findbugs Highest Vendor pom name FindBugs-jsr305 High Vendor pom url http://findbugs.sourceforge.net/ Highest Product file name jsr305 High Product Manifest Bundle-Name FindBugs-jsr305 Medium Product Manifest bundle-symbolicname org.jsr-305 Medium Product pom artifactid jsr305 Highest Product pom groupid com.google.code.findbugs Highest Product pom name FindBugs-jsr305 High Product pom url http://findbugs.sourceforge.net/ Medium Version file version 3.0.2 High Version Manifest Bundle-Version 3.0.2 High Version pom version 3.0.2 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: jsr305-3.0.2.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jsr305-3.0.2.jar MD5: dd83accb899363c32b07d7a1b2e4ce40 SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d SHA256: 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7 pkg:maven/com.google.code.findbugs/jsr305@3.0.2 waffle-spring-boot-filter3-3.5.1.jar: jsr305-3.0.2.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jsr305-3.0.2.jar MD5: dd83accb899363c32b07d7a1b2e4ce40 SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d SHA256: 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7 pkg:maven/com.google.code.findbugs/jsr305@3.0.2 Description:
JUL to SLF4J bridge File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\jul-to-slf4j\1.7.36\jul-to-slf4j-1.7.36.jarMD5: 2a3fe73e6cafe8f102facaf2dd65353fSHA1: ed46d81cef9c412a88caef405b58f93a678ff2caSHA256: 9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989deReferenced In Project/Scope: waffle-distro:runtimejul-to-slf4j-1.7.36.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name jul-to-slf4j High Vendor jar package name bridge Highest Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname jul.to.slf4j Medium Vendor pom artifactid jul-to-slf4j Highest Vendor pom artifactid jul-to-slf4j Low Vendor pom groupid org.slf4j Highest Vendor pom name JUL to SLF4J bridge High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name jul-to-slf4j High Product jar package name bridge Highest Product jar package name slf4j Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name jul-to-slf4j Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname jul.to.slf4j Medium Product pom artifactid jul-to-slf4j Highest Product pom groupid org.slf4j Highest Product pom name JUL to SLF4J bridge High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 1.7.36 High Version Manifest Bundle-Version 1.7.36 High Version Manifest Implementation-Version 1.7.36 High Version pom version 1.7.36 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: jul-to-slf4j-1.7.36.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jul-to-slf4j-1.7.36.jar MD5: 2a3fe73e6cafe8f102facaf2dd65353f SHA1: ed46d81cef9c412a88caef405b58f93a678ff2ca SHA256: 9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de pkg:maven/org.slf4j/jul-to-slf4j@1.7.36 Description:
The logging API of the Log4j project.
+ Library and application code can log through this API.
+ It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases.
+ Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core. License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\org\apache\logging\log4j\log4j-api\2.24.3\log4j-api-2.24.3.jar
MD5: d89516699543c5c21be87ee1760695f3
SHA1: b02c125db8b6d295adf72ae6e71af5d83bce2370
SHA256: 5b4a0a0cd0e751ded431c162442bdbdd53328d1f8bb2bae5fc1bbeee0f66d80f
Referenced In Project/Scope: waffle-distro:runtime
log4j-api-2.24.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.5.1
Evidence Type Source Name Value Confidence Vendor file name log4j-api High Vendor jar package name apache Highest Vendor jar package name log4j Highest Vendor jar package name logging Highest Vendor jar package name org Highest Vendor jar package name simple Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-symbolicname org.apache.logging.log4j.api Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release true Low Vendor Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.util.PropertySource";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.EnvironmentPropertySource",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.SystemPropertiesPropertySource" Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid log4j-api Highest Vendor pom artifactid log4j-api Low Vendor pom groupid org.apache.logging.log4j Highest Vendor pom name Apache Log4j API High Vendor pom parent-artifactid log4j Low Product file name log4j-api High Product jar package name apache Highest Product jar package name log4j Highest Product jar package name logging Highest Product jar package name org Highest Product jar package name simple Highest Product jar package name util Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-activationpolicy lazy Low Product Manifest Bundle-Name Apache Log4j API Medium Product Manifest bundle-symbolicname org.apache.logging.log4j.api Medium Product Manifest Implementation-Title Apache Log4j API High Product Manifest multi-release true Low Product Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.util.PropertySource";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.EnvironmentPropertySource",osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.util.PropertySource";register:="org.apache.logging.log4j.util.SystemPropertiesPropertySource" Low Product Manifest specification-title Apache Log4j API Medium Product pom artifactid log4j-api Highest Product pom groupid org.apache.logging.log4j Highest Product pom name Apache Log4j API High Product pom parent-artifactid log4j Medium Version file version 2.24.3 High Version Manifest Bundle-Version 2.24.3 High Version Manifest Implementation-Version 2.24.3 High Version pom version 2.24.3 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: log4j-api-2.24.3.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\log4j-api-2.24.3.jar MD5: d89516699543c5c21be87ee1760695f3 SHA1: b02c125db8b6d295adf72ae6e71af5d83bce2370 SHA256: 5b4a0a0cd0e751ded431c162442bdbdd53328d1f8bb2bae5fc1bbeee0f66d80f pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3 waffle-spring-boot-filter3-3.5.1.jar: log4j-api-2.24.3.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\log4j-api-2.24.3.jar MD5: d89516699543c5c21be87ee1760695f3 SHA1: b02c125db8b6d295adf72ae6e71af5d83bce2370 SHA256: 5b4a0a0cd0e751ded431c162442bdbdd53328d1f8bb2bae5fc1bbeee0f66d80f pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3 Description:
Forwards the Log4j API calls to SLF4J.
+ (Refer to the `log4j-slf4j[2]-impl` artifacts for forwarding SLF4J to the Log4j API.) License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\org\apache\logging\log4j\log4j-to-slf4j\2.24.3\log4j-to-slf4j-2.24.3.jar
MD5: 1f4b63f9c41f2f5179aa10b35d76e805
SHA1: da1143e2a2531ee1c2d90baa98eb50a28a39d5a7
SHA256: c7f2b0c612a4eb05b1587d1c880eb4cf5f4f53850676a8ede8da2b8fabb4f73f
Referenced In Project/Scope: waffle-distro:runtime
log4j-to-slf4j-2.24.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.5.1
Evidence Type Source Name Value Confidence Vendor file name log4j-to-slf4j High Vendor jar package name apache Highest Vendor jar package name logging Highest Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-symbolicname org.apache.logging.log4j.to.slf4j Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest multi-release false Low Vendor Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.spi.Provider";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.spi.Provider";register:="org.apache.logging.slf4j.SLF4JProvider" Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid log4j-to-slf4j Highest Vendor pom artifactid log4j-to-slf4j Low Vendor pom groupid org.apache.logging.log4j Highest Vendor pom name Log4j API to SLF4J Adapter High Vendor pom parent-artifactid log4j Low Product file name log4j-to-slf4j High Product jar package name apache Highest Product jar package name logging Highest Product jar package name slf4j Highest Product jar package name slf4jprovider Highest Product Manifest build-jdk-spec 17 Low Product Manifest bundle-activationpolicy lazy Low Product Manifest Bundle-Name Log4j API to SLF4J Adapter Medium Product Manifest bundle-symbolicname org.apache.logging.log4j.to.slf4j Medium Product Manifest Implementation-Title Log4j API to SLF4J Adapter High Product Manifest multi-release false Low Product Manifest provide-capability osgi.service;objectClass:List="org.apache.logging.log4j.spi.Provider";effective:=active,osgi.serviceloader;osgi.serviceloader="org.apache.logging.log4j.spi.Provider";register:="org.apache.logging.slf4j.SLF4JProvider" Low Product Manifest specification-title Log4j API to SLF4J Adapter Medium Product pom artifactid log4j-to-slf4j Highest Product pom groupid org.apache.logging.log4j Highest Product pom name Log4j API to SLF4J Adapter High Product pom parent-artifactid log4j Medium Version file version 2.24.3 High Version Manifest Bundle-Version 2.24.3 High Version Manifest Implementation-Version 2.24.3 High Version pom version 2.24.3 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: log4j-to-slf4j-2.24.3.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\log4j-to-slf4j-2.24.3.jar MD5: 1f4b63f9c41f2f5179aa10b35d76e805 SHA1: da1143e2a2531ee1c2d90baa98eb50a28a39d5a7 SHA256: c7f2b0c612a4eb05b1587d1c880eb4cf5f4f53850676a8ede8da2b8fabb4f73f pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.24.3 waffle-spring-boot-filter3-3.5.1.jar: log4j-to-slf4j-2.24.3.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\log4j-to-slf4j-2.24.3.jar MD5: 1f4b63f9c41f2f5179aa10b35d76e805 SHA1: da1143e2a2531ee1c2d90baa98eb50a28a39d5a7 SHA256: c7f2b0c612a4eb05b1587d1c880eb4cf5f4f53850676a8ede8da2b8fabb4f73f pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.24.3 Description:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: C:\Users\Jeremy\.m2\repository\ch\qos\logback\logback-core\1.5.15\logback-core-1.5.15.jar
MD5: 932d68eb5c938eee29ddd0f47c0cf31b
SHA1: 81633c8360b7e5b4edc52ca908bf14de0b73ef05
SHA256: 695bc40dd790cb710575f768e37b8eb12f814d84b008011a2ef85d5daaafa745
Referenced In Project/Scope: waffle-distro:runtime
logback-core-1.5.15.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.5.1
Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-core Highest Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name 21 Highest Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Implementation-Title Logback Core Module High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Logback Core Module Medium Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.15 High Version Manifest Bundle-Version 1.5.15 High Version Manifest Implementation-Version 1.5.15 High Version pom version 1.5.15 Highest
Related Dependencies logback-classic-1.5.15.jarFile Path: C:\Users\Jeremy\.m2\repository\ch\qos\logback\logback-classic\1.5.15\logback-classic-1.5.15.jar MD5: 042b4c78d1f6b7e862cc3de54e995642 SHA1: 07f8d6371626833bd1a232fe35490edffe04e5b3 SHA256: 5832abd425fc3036182f02931e9a121e7b464ddf2323ef7361b863570d3c8aa2 pkg:maven/ch.qos.logback/logback-classic@1.5.15 Description:
The slf4j API License:
http://www.opensource.org/licenses/mit-license.php File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\slf4j-api\2.0.16\slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256: a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Projects/Scopes: waffle-distro:compile waffle-distro:runtime slf4j-api-2.0.16.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.5.1
Evidence Type Source Name Value Confidence Vendor file name slf4j-api High Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor Manifest multi-release true Low Vendor pom artifactid slf4j-api Highest Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name SLF4J API Module Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product Manifest multi-release true Low Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
Related Dependencies waffle-spring-boot-filter3-3.5.1.jar: slf4j-api-2.0.16.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\slf4j-api-2.0.16.jar MD5: c8de8f5d740584cb24b5652cfba8b3c4 SHA1: 0172931663a09a1fa515567af5fbef00897d3c04 SHA256: a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a pkg:maven/org.slf4j/slf4j-api@2.0.16 Description:
YAML 1.1 parser and emitter for Java License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\org\yaml\snakeyaml\1.30\snakeyaml-1.30.jar
MD5: ba063b8ef3a8bfd591a1b56451166b14
SHA1: 8fde7fe2586328ac3c68db92045e1c8759125000
SHA256: f43a4e40a946b8cdfd0321bc1c9a839bc3f119c57e4ca84fb87c367f51c8b2b3
Referenced In Project/Scope: waffle-distro:runtime
snakeyaml-1.30.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.5.1
Evidence Type Source Name Value Confidence Vendor file name snakeyaml High Vendor jar package name emitter Highest Vendor jar package name parser Highest Vendor jar package name snakeyaml Highest Vendor jar package name yaml Highest Vendor Manifest automatic-module-name org.yaml.snakeyaml Medium Vendor Manifest bundle-symbolicname org.yaml.snakeyaml Medium Vendor pom artifactid snakeyaml Highest Vendor pom artifactid snakeyaml Low Vendor pom developer email alexander.maslov@gmail.com Low Vendor pom developer email jordanangold@gmail.com Low Vendor pom developer email public.somov@gmail.com Low Vendor pom developer id asomov Medium Vendor pom developer id Jordan Medium Vendor pom developer id maslovalex Medium Vendor pom developer name Alexander Maslov Medium Vendor pom developer name Andrey Somov Medium Vendor pom developer name Jordan Angold Medium Vendor pom groupid org.yaml Highest Vendor pom name SnakeYAML High Vendor pom url https://bitbucket.org/snakeyaml/snakeyaml Highest Product file name snakeyaml High Product jar package name emitter Highest Product jar package name parser Highest Product jar package name snakeyaml Highest Product jar package name yaml Highest Product Manifest automatic-module-name org.yaml.snakeyaml Medium Product Manifest Bundle-Name SnakeYAML Medium Product Manifest bundle-symbolicname org.yaml.snakeyaml Medium Product pom artifactid snakeyaml Highest Product pom developer email alexander.maslov@gmail.com Low Product pom developer email jordanangold@gmail.com Low Product pom developer email public.somov@gmail.com Low Product pom developer id asomov Low Product pom developer id Jordan Low Product pom developer id maslovalex Low Product pom developer name Alexander Maslov Low Product pom developer name Andrey Somov Low Product pom developer name Jordan Angold Low Product pom groupid org.yaml Highest Product pom name SnakeYAML High Product pom url https://bitbucket.org/snakeyaml/snakeyaml Medium Version file version 1.30 High Version pom version 1.30 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: snakeyaml-1.30.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\snakeyaml-1.30.jar MD5: ba063b8ef3a8bfd591a1b56451166b14 SHA1: 8fde7fe2586328ac3c68db92045e1c8759125000 SHA256: f43a4e40a946b8cdfd0321bc1c9a839bc3f119c57e4ca84fb87c367f51c8b2b3 pkg:maven/org.yaml/snakeyaml@1.30 CVE-2022-1471 suppress
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.
+ CWE-502 Deserialization of Untrusted Data, CWE-20 Improper Input Validation
CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2022-25857 suppress
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections. CWE-776 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
OSSINDEX - [CVE-2022-25857] CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-25857 OSSIndex - https://bitbucket.org/snakeyaml/snakeyaml/issues/525 af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY report@snyk.io - EXPLOIT,ISSUE_TRACKING,THIRD_PARTY_ADVISORY report@snyk.io - EXPLOIT,PATCH,THIRD_PARTY_ADVISORY report@snyk.io - MAILING_LIST,THIRD_PARTY_ADVISORY report@snyk.io - PATCH,THIRD_PARTY_ADVISORY report@snyk.io - PATCH,THIRD_PARTY_ADVISORY Vulnerable Software & Versions:
CVE-2022-38749 suppress
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2022-38751 suppress
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2022-38752 suppress
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow. CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2022-41854 suppress
Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack. CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2022-38750 suppress
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow
CVSSv3:
Base Score: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:1.8/RC:R/MAV:A References:
OSSINDEX - [CVE-2022-38750] CWE-121: Stack-based Buffer Overflow OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-38750 OSSIndex - https://bitbucket.org/snakeyaml/snakeyaml/issues/526/stackoverflow-oss-fuzz-47027 OSSIndex - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47027 af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,ISSUE_TRACKING,MAILING_LIST,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY cve-coordination@google.com - EXPLOIT,ISSUE_TRACKING,MAILING_LIST,THIRD_PARTY_ADVISORY cve-coordination@google.com - EXPLOIT,ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve-coordination@google.com - MAILING_LIST,THIRD_PARTY_ADVISORY Vulnerable Software & Versions:
Description:
Annotations the SpotBugs tool supports License:
GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html File Path: C:\Users\Jeremy\.m2\repository\com\github\spotbugs\spotbugs-annotations\4.8.6\spotbugs-annotations-4.8.6.jar
MD5: 0806b237c67c69869506ce3ced9a722f
SHA1: 1dcffed3e561ed32134a0dff4717f19bc2fdf4d8
SHA256: 4548b74a815ed44f5480ca4f06204a8b00809dc7e5f6a825a9edf18f40377b65
Referenced In Projects/Scopes: waffle-distro:runtime waffle-distro:provided spotbugs-annotations-4.8.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-distro@3.5.1
Evidence Type Source Name Value Confidence Vendor file name spotbugs-annotations High Vendor Manifest automatic-module-name com.github.spotbugs.annotations Medium Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname spotbugs-annotations Medium Vendor pom artifactid spotbugs-annotations Highest Vendor pom artifactid spotbugs-annotations Low Vendor pom developer email andreas.sewe@codetrails.com Low Vendor pom developer email dbrosius@mebigfatguy.com Low Vendor pom developer email loskutov@gmx.de Low Vendor pom developer email skypencil@gmail.com Low Vendor pom developer id henrik242 Medium Vendor pom developer id iloveeclipse Medium Vendor pom developer id jsotuyod Medium Vendor pom developer id KengoTODA Medium Vendor pom developer id mebigfatguy Medium Vendor pom developer id sewe Medium Vendor pom developer id ThrawnCA Medium Vendor pom developer name Andreas Sewe Medium Vendor pom developer name Andrey Loskutov Medium Vendor pom developer name Dave Brosius Medium Vendor pom developer name Juan Martín Sotuyo Dodero Medium Vendor pom developer name Kengo TODA Medium Vendor pom groupid com.github.spotbugs Highest Vendor pom name SpotBugs Annotations High Vendor pom url https://spotbugs.github.io/ Highest Product file name spotbugs-annotations High Product Manifest automatic-module-name com.github.spotbugs.annotations Medium Product Manifest Bundle-Name spotbugs-annotations Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname spotbugs-annotations Medium Product pom artifactid spotbugs-annotations Highest Product pom developer email andreas.sewe@codetrails.com Low Product pom developer email dbrosius@mebigfatguy.com Low Product pom developer email loskutov@gmx.de Low Product pom developer email skypencil@gmail.com Low Product pom developer id henrik242 Low Product pom developer id iloveeclipse Low Product pom developer id jsotuyod Low Product pom developer id KengoTODA Low Product pom developer id mebigfatguy Low Product pom developer id sewe Low Product pom developer id ThrawnCA Low Product pom developer name Andreas Sewe Low Product pom developer name Andrey Loskutov Low Product pom developer name Dave Brosius Low Product pom developer name Juan Martín Sotuyo Dodero Low Product pom developer name Kengo TODA Low Product pom groupid com.github.spotbugs Highest Product pom name SpotBugs Annotations High Product pom url https://spotbugs.github.io/ Medium Version file version 4.8.6 High Version Manifest Bundle-Version 4.8.6 High Version pom version 4.8.6 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: spotbugs-annotations-4.8.6.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spotbugs-annotations-4.8.6.jar MD5: 0806b237c67c69869506ce3ced9a722f SHA1: 1dcffed3e561ed32134a0dff4717f19bc2fdf4d8 SHA256: 4548b74a815ed44f5480ca4f06204a8b00809dc7e5f6a825a9edf18f40377b65 waffle-spring-boot-filter3-3.5.1.jar: spotbugs-annotations-4.8.6.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spotbugs-annotations-4.8.6.jar MD5: 0806b237c67c69869506ce3ced9a722f SHA1: 1dcffed3e561ed32134a0dff4717f19bc2fdf4d8 SHA256: 4548b74a815ed44f5480ca4f06204a8b00809dc7e5f6a825a9edf18f40377b65 Description:
Spring Boot License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: C:\Users\Jeremy\.m2\repository\org\springframework\boot\spring-boot\2.7.18\spring-boot-2.7.18.jar
MD5: 0941c83c25204150f8bd73ae66c63fd1
SHA1: f6dbdd8da7c2bded63dff9b1f48d01a4923f20a0
SHA256: 530f4e0fdfeb3a0e2b3a369d15cdea38fbdc1696f8b030c35a6ad65c27524950
Referenced In Project/Scope: waffle-distro:runtime
spring-boot-2.7.18.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.5.1
Evidence Type Source Name Value Confidence Vendor file name spring-boot High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name boot Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.boot Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor pom artifactid spring-boot Highest Vendor pom artifactid spring-boot Low Vendor pom developer email ask@spring.io Low Vendor pom developer name Spring Medium Vendor pom developer org VMware, Inc. Medium Vendor pom developer org URL https://www.spring.io Medium Vendor pom groupid org.springframework.boot Highest Vendor pom name spring-boot High Vendor pom organization name VMware, Inc. High Vendor pom organization url https://spring.io Medium Vendor pom url https://spring.io/projects/spring-boot Highest Product file name spring-boot High Product jar package name boot Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.boot Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Spring Boot High Product pom artifactid spring-boot Highest Product pom developer email ask@spring.io Low Product pom developer name Spring Low Product pom developer org VMware, Inc. Low Product pom developer org URL https://www.spring.io Low Product pom groupid org.springframework.boot Highest Product pom name spring-boot High Product pom organization name VMware, Inc. Low Product pom organization url https://spring.io Low Product pom url https://spring.io/projects/spring-boot Medium Version file version 2.7.18 High Version Manifest Implementation-Version 2.7.18 High Version pom version 2.7.18 Highest
Related Dependencies spring-boot-autoconfigure-2.7.18.jarFile Path: C:\Users\Jeremy\.m2\repository\org\springframework\boot\spring-boot-autoconfigure\2.7.18\spring-boot-autoconfigure-2.7.18.jar MD5: e127e4ed0469cc5442d3c8e5e42e7988 SHA1: 9cf147c6ca274c75b32556acdcba5a1de081ebcd SHA256: 1c4e0aadcb662b6149b536a2cf288003ffefe81a6cc69846e9f14976529a1b08 pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.18 spring-boot-starter-2.7.18.jarFile Path: C:\Users\Jeremy\.m2\repository\org\springframework\boot\spring-boot-starter\2.7.18\spring-boot-starter-2.7.18.jar MD5: 03fc89fcd959a332de7cdc22e6bdc60d SHA1: e56b75105f9ace6df154fd47eeeeadc2f5791e56 SHA256: f67a5d913defa764295b6a0d8d13573624e437eb34e97d88c0e76bf181656071 pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18 spring-boot-starter-json-2.7.18.jarFile Path: C:\Users\Jeremy\.m2\repository\org\springframework\boot\spring-boot-starter-json\2.7.18\spring-boot-starter-json-2.7.18.jar MD5: 4227a48b68fbd7fb37dd079ad3217226 SHA1: b6d9ed5cae0c1929a9e561bf4799a3dc93a10db1 SHA256: 084f592d522dfa36790fe08d4d0b9cebe6683638889834ed2f885f3c42fecbf6 pkg:maven/org.springframework.boot/spring-boot-starter-json@2.7.18 spring-boot-starter-logging-2.7.18.jarFile Path: C:\Users\Jeremy\.m2\repository\org\springframework\boot\spring-boot-starter-logging\2.7.18\spring-boot-starter-logging-2.7.18.jar MD5: b812106a59ea242570f1c55d71982495 SHA1: 19f7c255ba5255116f58c3bbaf52c7b88ea6af3e SHA256: 202c0894dbfdeff7be005597ff98288133a62fe7f5593be4938400482d19dcb7 pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.7.18 spring-boot-starter-security-2.7.18.jarFile Path: C:\Users\Jeremy\.m2\repository\org\springframework\boot\spring-boot-starter-security\2.7.18\spring-boot-starter-security-2.7.18.jar MD5: f0461734fe73c8f250012d453cb4fb12 SHA1: 5d29a712fd0a5d7b77e348b660e2c0885b215bc4 SHA256: 075ee2311819e7076278f3f6321bca21447ee52db62ca000caf17132b37c986a pkg:maven/org.springframework.boot/spring-boot-starter-security@2.7.18 spring-boot-starter-tomcat-2.7.18.jarFile Path: C:\Users\Jeremy\.m2\repository\org\springframework\boot\spring-boot-starter-tomcat\2.7.18\spring-boot-starter-tomcat-2.7.18.jar MD5: c2080ad5020671b7884b9564006bd09c SHA1: c56e50e006448e75a8bde595dbc754ba294389af SHA256: e4a44478556749137f28001c35d897efff31f39161606589cc355dcbf797c6f0 pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.7.18 waffle-spring-boot-filter2-3.5.1.jar: spring-boot-2.7.18.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-boot-2.7.18.jar MD5: 0941c83c25204150f8bd73ae66c63fd1 SHA1: f6dbdd8da7c2bded63dff9b1f48d01a4923f20a0 SHA256: 530f4e0fdfeb3a0e2b3a369d15cdea38fbdc1696f8b030c35a6ad65c27524950 Description:
Starter for building web, including RESTful, applications using Spring MVC. Uses Tomcat as the default embedded container License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: C:\Users\Jeremy\.m2\repository\org\springframework\boot\spring-boot-starter-web\2.7.18\spring-boot-starter-web-2.7.18.jar
MD5: e0bfe77aa7415f3b86d70d41cf425ccd
SHA1: 0dd62ea85098187b4604e78dc15a7ff87dba173d
SHA256: a74fab5f826b600e3c3f4cd7028c5c982b0bf1b849673629cbb758ae790a4c08
Referenced In Project/Scope: waffle-distro:runtime
spring-boot-starter-web-2.7.18.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle.demo/waffle-spring-boot-filter2@3.5.1
Evidence Type Source Name Value Confidence Vendor file name spring-boot-starter-web High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor Manifest automatic-module-name spring.boot.starter.web Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest spring-boot-jar-type dependencies-starter Low Vendor pom artifactid spring-boot-starter-web Highest Vendor pom artifactid spring-boot-starter-web Low Vendor pom developer email ask@spring.io Low Vendor pom developer name Spring Medium Vendor pom developer org VMware, Inc. Medium Vendor pom developer org URL https://www.spring.io Medium Vendor pom groupid org.springframework.boot Highest Vendor pom name spring-boot-starter-web High Vendor pom organization name VMware, Inc. High Vendor pom organization url https://spring.io Medium Vendor pom url https://spring.io/projects/spring-boot Highest Product file name spring-boot-starter-web High Product Manifest automatic-module-name spring.boot.starter.web Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Starter for building web, including RESTful, applications using Spring MVC. Uses Tomcat as the default embedded container High Product Manifest spring-boot-jar-type dependencies-starter Low Product pom artifactid spring-boot-starter-web Highest Product pom developer email ask@spring.io Low Product pom developer name Spring Low Product pom developer org VMware, Inc. Low Product pom developer org URL https://www.spring.io Low Product pom groupid org.springframework.boot Highest Product pom name spring-boot-starter-web High Product pom organization name VMware, Inc. Low Product pom organization url https://spring.io Low Product pom url https://spring.io/projects/spring-boot Medium Version file version 2.7.18 High Version Manifest Implementation-Version 2.7.18 High Version pom version 2.7.18 Highest
Description:
Spring Core License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: C:\Users\Jeremy\.m2\repository\org\springframework\spring-core\5.3.39\spring-core-5.3.39.jar
MD5: 632d2a8c30962a69273775968c052651
SHA1: d2bff2eedf27b51d6ef9a2fc892aaff5b7a768dd
SHA256: 3a1ddcf05420a9181bd9cacb6062a3edc493e14d555961ad50e1a6360eb1e75f
Referenced In Project/Scope: waffle-distro:runtime
spring-core-5.3.39.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-spring-security5@3.5.1
Evidence Type Source Name Value Confidence Vendor file name spring-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name io Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.core Medium Vendor pom artifactid spring-core Highest Vendor pom artifactid spring-core Low Vendor pom developer email jhoeller@pivotal.io Low Vendor pom developer id jhoeller Medium Vendor pom developer name Juergen Hoeller Medium Vendor pom groupid org.springframework Highest Vendor pom name Spring Core High Vendor pom organization name Spring IO High Vendor pom organization url https://spring.io/projects/spring-framework Medium Vendor pom url spring-projects/spring-framework Highest Product file name spring-core High Product hint analyzer product springsource_spring_framework Highest Product jar package name core Highest Product jar package name io Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.core Medium Product Manifest Implementation-Title spring-core High Product pom artifactid spring-core Highest Product pom developer email jhoeller@pivotal.io Low Product pom developer id jhoeller Low Product pom developer name Juergen Hoeller Low Product pom groupid org.springframework Highest Product pom name Spring Core High Product pom organization name Spring IO Low Product pom organization url https://spring.io/projects/spring-framework Low Product pom url spring-projects/spring-framework High Version file version 5.3.39 High Version Manifest Implementation-Version 5.3.39 High Version pom version 5.3.39 Highest
Related Dependencies spring-aop-5.3.39.jarFile Path: C:\Users\Jeremy\.m2\repository\org\springframework\spring-aop\5.3.39\spring-aop-5.3.39.jar MD5: 47ef8946ec3f2f76f83cda172b9fd964 SHA1: 3af1f0d73ec1e031c7083c848342989f413ca275 SHA256: aa706e4f749982c0bae5fa637433c44c24f0fff5d16dc41deea6d30c3dfa7c85 pkg:maven/org.springframework/spring-aop@5.3.39 spring-beans-5.3.39.jarFile Path: C:\Users\Jeremy\.m2\repository\org\springframework\spring-beans\5.3.39\spring-beans-5.3.39.jar MD5: c2f99040fb8b0bc98515c87b968227d3 SHA1: 87770ce736cbd777c07866cbc8a06b879765e3c8 SHA256: b6697a5d8facb81aa75e5a46d959d4256da9ce3b40d33f3b5bbd42a8b1ed5722 pkg:maven/org.springframework/spring-beans@5.3.39 spring-context-5.3.39.jarFile Path: C:\Users\Jeremy\.m2\repository\org\springframework\spring-context\5.3.39\spring-context-5.3.39.jar MD5: 167e95de6f9de58b1ffff09990237021 SHA1: 286538ca4b3890192d63c88fdd1616adde17dc0e SHA256: 9e644fc33bece9a9cb82538167a1b9640ae7b7d80252e893d89b8926a2f81633 pkg:maven/org.springframework/spring-context@5.3.39 spring-expression-5.3.39.jarFile Path: C:\Users\Jeremy\.m2\repository\org\springframework\spring-expression\5.3.39\spring-expression-5.3.39.jar MD5: 41198683f2d488b4b2038b7d8e4b6d81 SHA1: 25cf07399eb7ac3fc13888b20dc4d67124ec75bd SHA256: d5337774d889fcdc9c08b0c8b8aaa1018d4c95b9b441db0118f7ae4d328f2810 pkg:maven/org.springframework/spring-expression@5.3.39 spring-jcl-5.3.39.jarFile Path: C:\Users\Jeremy\.m2\repository\org\springframework\spring-jcl\5.3.39\spring-jcl-5.3.39.jar MD5: b1e50a7529d9f3f87079542a03191729 SHA1: 45181955845ae69c51c72746f00200f7babca558 SHA256: adbe656fc622e2457fefa09529d4b7c1126a3c4ff1c9306907764fcc93f1b725 pkg:maven/org.springframework/spring-jcl@5.3.39 CVE-2024-38820 suppress
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected. NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Spring Security License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: C:\Users\Jeremy\.m2\repository\org\springframework\security\spring-security-core\5.8.16\spring-security-core-5.8.16.jar
MD5: c70ae997256d27ca6fb1c7a8b24e4248
SHA1: b3d21a1f967db39dabaca487ba3fe58972e6a9a5
SHA256: 3be7d217048f5ea76fd6d0eddaa3169ad3bee0bba9c456e27670ec37ca33c3fd
Referenced In Project/Scope: waffle-distro:runtime
spring-security-core-5.8.16.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-spring-security5@3.5.1
Evidence Type Source Name Value Confidence Vendor file name spring-security-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name security Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.security.core Medium Vendor pom artifactid spring-security-core Highest Vendor pom artifactid spring-security-core Low Vendor pom developer email info@pivotal.io Low Vendor pom developer name Pivotal Medium Vendor pom developer org Pivotal Software, Inc. Medium Vendor pom developer org URL https://www.spring.io Medium Vendor pom groupid org.springframework.security Highest Vendor pom name spring-security-core High Vendor pom organization name Pivotal Software, Inc. High Vendor pom organization url https://spring.io Medium Vendor pom url https://spring.io/projects/spring-security Highest Product file name spring-security-core High Product jar package name core Highest Product jar package name security Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.security.core Medium Product Manifest Implementation-Title spring-security-core High Product pom artifactid spring-security-core Highest Product pom developer email info@pivotal.io Low Product pom developer name Pivotal Low Product pom developer org Pivotal Software, Inc. Low Product pom developer org URL https://www.spring.io Low Product pom groupid org.springframework.security Highest Product pom name spring-security-core High Product pom organization name Pivotal Software, Inc. Low Product pom organization url https://spring.io Low Product pom url https://spring.io/projects/spring-security Medium Version file version 5.8.16 High Version Manifest Implementation-Version 5.8.16 High Version pom version 5.8.16 Highest
Related Dependencies spring-security-config-5.8.16.jarFile Path: C:\Users\Jeremy\.m2\repository\org\springframework\security\spring-security-config\5.8.16\spring-security-config-5.8.16.jar MD5: 1e386c77733c252f4b9a80904ccb1c00 SHA1: 73bff85307254de9f30514db587420110aee72ee SHA256: fb7218cd28ca5f82bafd4cc038d1727fc99ccfb0f3b38a8fc0545a93e9b2f8b5 pkg:maven/org.springframework.security/spring-security-config@5.8.16 waffle-spring-boot-filter2-3.5.1.jar: spring-security-core-5.8.16.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-security-core-5.8.16.jar MD5: c70ae997256d27ca6fb1c7a8b24e4248 SHA1: b3d21a1f967db39dabaca487ba3fe58972e6a9a5 SHA256: 3be7d217048f5ea76fd6d0eddaa3169ad3bee0bba9c456e27670ec37ca33c3fd Description:
Spring Security License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: C:\Users\Jeremy\.m2\repository\org\springframework\security\spring-security-crypto\5.8.16\spring-security-crypto-5.8.16.jar
MD5: 987ca02bb810d32c7d86968ff84e887c
SHA1: 340f3bb882bea8e9eafc66671d4c8e50f11867a7
SHA256: e47acdd647997efb36609698b64a2bec37fa119210f88fad813aa53610433cfd
Referenced In Project/Scope: waffle-distro:runtime
spring-security-crypto-5.8.16.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-spring-security5@3.5.1
Evidence Type Source Name Value Confidence Vendor file name spring-security-crypto High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name crypto Highest Vendor jar package name security Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.security.crypto Medium Vendor pom artifactid spring-security-crypto Highest Vendor pom artifactid spring-security-crypto Low Vendor pom developer email info@pivotal.io Low Vendor pom developer name Pivotal Medium Vendor pom developer org Pivotal Software, Inc. Medium Vendor pom developer org URL https://www.spring.io Medium Vendor pom groupid org.springframework.security Highest Vendor pom name spring-security-crypto High Vendor pom organization name Pivotal Software, Inc. High Vendor pom organization url https://spring.io Medium Vendor pom url https://spring.io/projects/spring-security Highest Product file name spring-security-crypto High Product jar package name crypto Highest Product jar package name security Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.security.crypto Medium Product Manifest Implementation-Title spring-security-crypto High Product pom artifactid spring-security-crypto Highest Product pom developer email info@pivotal.io Low Product pom developer name Pivotal Low Product pom developer org Pivotal Software, Inc. Low Product pom developer org URL https://www.spring.io Low Product pom groupid org.springframework.security Highest Product pom name spring-security-crypto High Product pom organization name Pivotal Software, Inc. Low Product pom organization url https://spring.io Low Product pom url https://spring.io/projects/spring-security Medium Version file version 5.8.16 High Version Manifest Implementation-Version 5.8.16 High Version pom version 5.8.16 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: spring-security-crypto-5.8.16.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-security-crypto-5.8.16.jar MD5: 987ca02bb810d32c7d86968ff84e887c SHA1: 340f3bb882bea8e9eafc66671d4c8e50f11867a7 SHA256: e47acdd647997efb36609698b64a2bec37fa119210f88fad813aa53610433cfd CVE-2020-5408 (OSSINDEX)suppress
Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.2.x prior to 4.2.16 use a fixed null initialization vector with CBC Mode in the implementation of the queryable text encryptor. A malicious user with access to the data that has been encrypted using such an encryptor may be able to derive the unencrypted values using a dictionary attack.
+
+Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2020-5408 for details CWE-329 Generation of Predictable IV with CBC Mode
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.springframework.security:spring-security-crypto:5.8.16:*:*:*:*:*:*:* Description:
Spring Security License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: C:\Users\Jeremy\.m2\repository\org\springframework\security\spring-security-web\5.8.16\spring-security-web-5.8.16.jar
MD5: 137862bb11c72092dd94d14d380fc784
SHA1: fade885f7f9df056dd5e3592d949e888cd82397d
SHA256: fe0843587f4dff188a1ecb822bf544c5f1c1ee46c757858a5a585039d8118304
Referenced In Project/Scope: waffle-distro:runtime
spring-security-web-5.8.16.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-spring-security5@3.5.1
Evidence Type Source Name Value Confidence Vendor file name spring-security-web High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name security Highest Vendor jar package name springframework Highest Vendor jar package name web Highest Vendor Manifest automatic-module-name spring.security.web Medium Vendor pom artifactid spring-security-web Highest Vendor pom artifactid spring-security-web Low Vendor pom developer email info@pivotal.io Low Vendor pom developer name Pivotal Medium Vendor pom developer org Pivotal Software, Inc. Medium Vendor pom developer org URL https://www.spring.io Medium Vendor pom groupid org.springframework.security Highest Vendor pom name spring-security-web High Vendor pom organization name Pivotal Software, Inc. High Vendor pom organization url https://spring.io Medium Vendor pom url https://spring.io/projects/spring-security Highest Product file name spring-security-web High Product jar package name security Highest Product jar package name springframework Highest Product jar package name web Highest Product Manifest automatic-module-name spring.security.web Medium Product Manifest Implementation-Title spring-security-web High Product pom artifactid spring-security-web Highest Product pom developer email info@pivotal.io Low Product pom developer name Pivotal Low Product pom developer org Pivotal Software, Inc. Low Product pom developer org URL https://www.spring.io Low Product pom groupid org.springframework.security Highest Product pom name spring-security-web High Product pom organization name Pivotal Software, Inc. Low Product pom organization url https://spring.io Low Product pom url https://spring.io/projects/spring-security Medium Version file version 5.8.16 High Version Manifest Implementation-Version 5.8.16 High Version pom version 5.8.16 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: spring-security-web-5.8.16.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-security-web-5.8.16.jar MD5: 137862bb11c72092dd94d14d380fc784 SHA1: fade885f7f9df056dd5e3592d949e888cd82397d SHA256: fe0843587f4dff188a1ecb822bf544c5f1c1ee46c757858a5a585039d8118304 Description:
Spring Web License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: C:\Users\Jeremy\.m2\repository\org\springframework\spring-web\5.3.39\spring-web-5.3.39.jar
MD5: 2b940bc714d6e29570b5dfa92755eefc
SHA1: 4ab03cd7376a6b3365d2798aac8d01dcd22c0174
SHA256: 444f243b936119b5488029f2d9399a3980855c60b493b9e2811464c6433a2b71
Referenced In Project/Scope: waffle-distro:runtime
spring-web-5.3.39.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle/waffle-spring-security5@3.5.1
Evidence Type Source Name Value Confidence Vendor file name spring-web High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name springframework Highest Vendor jar package name web Highest Vendor Manifest automatic-module-name spring.web Medium Vendor pom artifactid spring-web Highest Vendor pom artifactid spring-web Low Vendor pom developer email jhoeller@pivotal.io Low Vendor pom developer id jhoeller Medium Vendor pom developer name Juergen Hoeller Medium Vendor pom groupid org.springframework Highest Vendor pom name Spring Web High Vendor pom organization name Spring IO High Vendor pom organization url https://spring.io/projects/spring-framework Medium Vendor pom url spring-projects/spring-framework Highest Product file name spring-web High Product hint analyzer product springsource_spring_framework Highest Product jar package name springframework Highest Product jar package name web Highest Product Manifest automatic-module-name spring.web Medium Product Manifest Implementation-Title spring-web High Product pom artifactid spring-web Highest Product pom developer email jhoeller@pivotal.io Low Product pom developer id jhoeller Low Product pom developer name Juergen Hoeller Low Product pom groupid org.springframework Highest Product pom name Spring Web High Product pom organization name Spring IO Low Product pom organization url https://spring.io/projects/spring-framework Low Product pom url spring-projects/spring-framework High Version file version 5.3.39 High Version Manifest Implementation-Version 5.3.39 High Version pom version 5.3.39 Highest
CVE-2016-1000027 suppress
Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. NOTE: the vendor's position is that untrusted data is not an intended use case. The product's behavior will not be changed because some users rely on deserialization of trusted data. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
OSSINDEX - [CVE-2016-1000027] CWE-502: Deserialization of Untrusted Data OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1000027 OSSIndex - https://blog.gypsyengineer.com/en/security/detecting-dangerous-spring-exporters-with-codeql.html OSSIndex - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000027 OSSIndex - https://github.com/spring-projects/spring-framework/issues/24434 OSSIndex - https://www.tenable.com/security/research/tra-2016-20 af854a3a-2127-422b-91ae-364da2661108 - BROKEN_LINK,EXPLOIT,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - RELEASE_NOTES,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY cve@mitre.org - BROKEN_LINK,EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY Vulnerable Software & Versions:
CVE-2024-38828 (OSSINDEX)suppress
Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack. CWE-400 Uncontrolled Resource Consumption
CVSSv2:
Base Score: MEDIUM (6.900000095367432) Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.springframework:spring-web:5.3.39:*:*:*:*:*:*:* CVE-2024-38820 suppress
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected. NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Spring Web MVC License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: C:\Users\Jeremy\.m2\repository\org\springframework\spring-webmvc\5.3.31\spring-webmvc-5.3.31.jar
MD5: 7401b647e906d3853ad02b62496cfadf
SHA1: 45754d056effe8257a012f6b98ed5454cf1e8960
SHA256: 29c1b96c424dcb637fec2d1e6493b088d977e748a56da7f34e6a7c3c39d18c74
Referenced In Project/Scope: waffle-distro:runtime
spring-webmvc-5.3.31.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle.demo/waffle-spring-boot-filter2@3.5.1
Evidence Type Source Name Value Confidence Vendor file name spring-webmvc High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name mvc Highest Vendor jar package name springframework Highest Vendor jar package name web Highest Vendor Manifest automatic-module-name spring.webmvc Medium Vendor pom artifactid spring-webmvc Highest Vendor pom artifactid spring-webmvc Low Vendor pom developer email jhoeller@pivotal.io Low Vendor pom developer id jhoeller Medium Vendor pom developer name Juergen Hoeller Medium Vendor pom groupid org.springframework Highest Vendor pom name Spring Web MVC High Vendor pom organization name Spring IO High Vendor pom organization url https://spring.io/projects/spring-framework Medium Vendor pom url spring-projects/spring-framework Highest Product file name spring-webmvc High Product hint analyzer product springsource_spring_framework Highest Product jar package name mvc Highest Product jar package name springframework Highest Product jar package name web Highest Product Manifest automatic-module-name spring.webmvc Medium Product Manifest Implementation-Title spring-webmvc High Product pom artifactid spring-webmvc Highest Product pom developer email jhoeller@pivotal.io Low Product pom developer id jhoeller Low Product pom developer name Juergen Hoeller Low Product pom groupid org.springframework Highest Product pom name Spring Web MVC High Product pom organization name Spring IO Low Product pom organization url https://spring.io/projects/spring-framework Low Product pom url spring-projects/spring-framework High Version file version 5.3.31 High Version Manifest Implementation-Version 5.3.31 High Version pom version 5.3.31 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: spring-webmvc-5.3.31.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-webmvc-5.3.31.jar MD5: 7401b647e906d3853ad02b62496cfadf SHA1: 45754d056effe8257a012f6b98ed5454cf1e8960 SHA256: 29c1b96c424dcb637fec2d1e6493b088d977e748a56da7f34e6a7c3c39d18c74 CVE-2024-38816 (OSSINDEX)suppress
Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
+
+Specifically, an application is vulnerable when both of the following are true:
+
+ * the web application uses RouterFunctions to serve static resources
+ * resource handling is explicitly configured with a FileSystemResource location
+
+
+However, malicious requests are blocked and rejected when any of the following is true:
+
+ * the Spring Security HTTP Firewall https://docs.spring.io/spring-security/reference/servlet/exploits/firewall.html is in use
+ * the application runs on Tomcat or Jetty CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv2:
Base Score: HIGH (8.199999809265137) Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.springframework:spring-webmvc:5.3.31:*:*:*:*:*:*:* CVE-2024-38820 suppress
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected. NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Core Tomcat implementation License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\org\apache\tomcat\embed\tomcat-embed-core\9.0.83\tomcat-embed-core-9.0.83.jar
MD5: d4e2068023fe800fd22a9fe2529c290b
SHA1: d771e4343b0515c67dab2a09fe02f5d47550153f
SHA256: 4ed404d5dea8652846f3c52c094764c2ec018f28a3561f1d27df700f7aa5b376
Referenced In Project/Scope: waffle-distro:runtime
tomcat-embed-core-9.0.83.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle.demo/waffle-spring-boot-filter2@3.5.1
Evidence Type Source Name Value Confidence Vendor file name tomcat-embed-core High Vendor jar package name apache Highest Vendor jar package name core Highest Vendor jar package name tomcat Highest Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor Manifest provide-capability osgi.contract;osgi.contract=JavaJASPIC;version:List="1.1,1";uses:="javax.security.auth.message,javax.security.auth.message.callback,javax.security.auth.message.config,javax.security.auth.message.module",osgi.contract;osgi.contract=JavaServlet;version:List="4.0,3.1,3,2.5";uses:="javax.servlet,javax.servlet.annotation,javax.servlet.descriptor,javax.servlet.http,javax.servlet.resources" Low Vendor Manifest specification-vendor Apache Software Foundation Low Vendor manifest: javax/security/auth/message/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/security/auth/message/callback/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/security/auth/message/config/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/security/auth/message/module/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/servlet/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/servlet/annotation/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/servlet/descriptor/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/servlet/http/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/servlet/resources/ Implementation-Vendor Apache Software Foundation Medium Vendor pom artifactid tomcat-embed-core Highest Vendor pom artifactid tomcat-embed-core Low Vendor pom groupid org.apache.tomcat.embed Highest Vendor pom url https://tomcat.apache.org/ Highest Product file name tomcat-embed-core High Product jar package name annotation Highest Product jar package name apache Highest Product jar package name auth Highest Product jar package name core Highest Product jar package name descriptor Highest Product jar package name http Highest Product jar package name java Highest Product jar package name javax Highest Product jar package name message Highest Product jar package name security Highest Product jar package name servlet Highest Product jar package name servlets Highest Product jar package name tomcat Highest Product Manifest Bundle-Name tomcat-embed-core Medium Product Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium Product Manifest Implementation-Title Apache Tomcat High Product Manifest provide-capability osgi.contract;osgi.contract=JavaJASPIC;version:List="1.1,1";uses:="javax.security.auth.message,javax.security.auth.message.callback,javax.security.auth.message.config,javax.security.auth.message.module",osgi.contract;osgi.contract=JavaServlet;version:List="4.0,3.1,3,2.5";uses:="javax.servlet,javax.servlet.annotation,javax.servlet.descriptor,javax.servlet.http,javax.servlet.resources" Low Product Manifest specification-title Apache Tomcat Medium Product manifest: javax/security/auth/message/ Implementation-Title javax.security.auth.message Medium Product manifest: javax/security/auth/message/ Specification-Title Java Authentication SPI for Containers Medium Product manifest: javax/security/auth/message/callback/ Implementation-Title javax.security.auth.message Medium Product manifest: javax/security/auth/message/callback/ Specification-Title Java Authentication SPI for Containers Medium Product manifest: javax/security/auth/message/config/ Implementation-Title javax.security.auth.message Medium Product manifest: javax/security/auth/message/config/ Specification-Title Java Authentication SPI for Containers Medium Product manifest: javax/security/auth/message/module/ Implementation-Title javax.security.auth.message Medium Product manifest: javax/security/auth/message/module/ Specification-Title Java Authentication SPI for Containers Medium Product manifest: javax/servlet/ Implementation-Title javax.servlet Medium Product manifest: javax/servlet/ Specification-Title Java API for Servlets Medium Product manifest: javax/servlet/annotation/ Implementation-Title javax.servlet Medium Product manifest: javax/servlet/annotation/ Specification-Title Java API for Servlets Medium Product manifest: javax/servlet/descriptor/ Implementation-Title javax.servlet Medium Product manifest: javax/servlet/descriptor/ Specification-Title Java API for Servlets Medium Product manifest: javax/servlet/http/ Implementation-Title javax.servlet Medium Product manifest: javax/servlet/http/ Specification-Title Java API for Servlets Medium Product manifest: javax/servlet/resources/ Implementation-Title javax.servlet Medium Product manifest: javax/servlet/resources/ Specification-Title Java API for Servlets Medium Product pom artifactid tomcat-embed-core Highest Product pom groupid org.apache.tomcat.embed Highest Product pom url https://tomcat.apache.org/ Medium Version file version 9.0.83 High Version Manifest Bundle-Version 9.0.83 High Version Manifest Implementation-Version 9.0.83 High Version pom version 9.0.83 Highest
Related Dependencies tomcat-embed-websocket-9.0.83.jarFile Path: C:\Users\Jeremy\.m2\repository\org\apache\tomcat\embed\tomcat-embed-websocket\9.0.83\tomcat-embed-websocket-9.0.83.jar MD5: 3ba44fc9bf48656f448a565318ea8c46 SHA1: 9af4b7450296bb4eff93b2ee3e52ab69d07512e4 SHA256: b78130b05960761992787edf2cb4c0af18d1fe52b35119ad63712af137d7eb3e pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.83 waffle-spring-boot-filter2-3.5.1.jar: tomcat-embed-core-9.0.83.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\tomcat-embed-core-9.0.83.jar MD5: d4e2068023fe800fd22a9fe2529c290b SHA1: d771e4343b0515c67dab2a09fe02f5d47550153f SHA256: 4ed404d5dea8652846f3c52c094764c2ec018f28a3561f1d27df700f7aa5b376 Description:
Core Tomcat implementation License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\.m2\repository\org\apache\tomcat\embed\tomcat-embed-el\9.0.83\tomcat-embed-el-9.0.83.jar
MD5: eabd7f3ade6cb0cf36f7b238897b8f1d
SHA1: b0cdada70099c25f45fceb48e1ebce60d138a5ce
SHA256: a82c4cf8cf9e88d6891cbb4cbcb9f85f788e147c464cbeba15a2c83276f3344c
Referenced In Project/Scope: waffle-distro:runtime
tomcat-embed-el-9.0.83.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/com.github.waffle.demo/waffle-spring-boot-filter2@3.5.1
Evidence Type Source Name Value Confidence Vendor file name tomcat-embed-el High Vendor jar package name apache Highest Vendor jar package name el Highest Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor Manifest provide-capability osgi.contract;osgi.contract=JavaEL;version:List="3.0,2.2,2.1";uses:="javax.el",osgi.service;objectClass:List="javax.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low Vendor Manifest specification-vendor Apache Software Foundation Low Vendor manifest: javax/el/ Implementation-Vendor Apache Software Foundation Medium Vendor pom artifactid tomcat-embed-el Highest Vendor pom artifactid tomcat-embed-el Low Vendor pom groupid org.apache.tomcat.embed Highest Vendor pom url https://tomcat.apache.org/ Highest Product file name tomcat-embed-el High Product jar package name apache Highest Product jar package name el Highest Product jar package name expression Highest Product jar package name expressionfactory Highest Product jar package name expressionfactoryimpl Highest Product jar package name javax Highest Product Manifest Bundle-Name tomcat-embed-jasper-el Medium Product Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium Product Manifest Implementation-Title Apache Tomcat High Product Manifest provide-capability osgi.contract;osgi.contract=JavaEL;version:List="3.0,2.2,2.1";uses:="javax.el",osgi.service;objectClass:List="javax.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low Product Manifest specification-title Apache Tomcat Medium Product manifest: javax/el/ Implementation-Title javax.el Medium Product manifest: javax/el/ Specification-Title Expression Language Medium Product pom artifactid tomcat-embed-el Highest Product pom groupid org.apache.tomcat.embed Highest Product pom url https://tomcat.apache.org/ Medium Version file version 9.0.83 High Version Manifest Bundle-Version 9.0.83 High Version Manifest Implementation-Version 9.0.83 High Version pom version 9.0.83 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: tomcat-embed-el-9.0.83.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\tomcat-embed-el-9.0.83.jar MD5: eabd7f3ade6cb0cf36f7b238897b8f1d SHA1: b0cdada70099c25f45fceb48e1ebce60d138a5ce SHA256: a82c4cf8cf9e88d6891cbb4cbcb9f85f788e147c464cbeba15a2c83276f3344c Description:
+ Byte Buddy is a Java library for creating Java classes at run time.
+ This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
+ License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\byte-buddy-1.15.11.jar
MD5: 603bc53c7a294f23765bfb7e1820ad44
SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c
SHA256: fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy High Vendor jar package name asm Highest Vendor jar package name build Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy (without dependencies) High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy High Product jar package name asm Highest Product jar package name build Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Product Manifest multi-release true Low Product pom artifactid byte-buddy Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy (without dependencies) High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86-64\attach_hotspot_windows.dllMD5: 053a783e5777c6a9867c27d51af89677SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76SHA256: 16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86\attach_hotspot_windows.dllMD5: fbca33102ac97be0ed496c0f78e466b3SHA1: c4df05146a86a6d073769bb697d550ef42518ed5SHA256: 810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
Description:
The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar
MD5: 449a1534609bf3535d74cbb10b4ed074
SHA1: a38b16385e867f59a641330f0362ebe742788ed8
SHA256: 316d2c0795c2a4d4c4756f2e6f9349837c7430ac34e0477ead874d05f5cc19e5
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy-agent High Vendor jar package name agent Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Vendor Manifest can-redefine-classes true Low Vendor Manifest can-retransform-classes true Low Vendor Manifest can-set-native-method-prefix true Low Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy-agent Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy agent High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy-agent High Product jar package name agent Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy agent Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Product Manifest can-redefine-classes true Low Product Manifest can-retransform-classes true Low Product Manifest can-set-native-method-prefix true Low Product Manifest multi-release true Low Product pom artifactid byte-buddy-agent Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy agent High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
Description:
A high performance caching library License:
https://www.apache.org/licenses/LICENSE-2.0 File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\caffeine-3.1.8.jar
MD5: b19301179903e8781776397d9923f7c8
SHA1: 24795585df8afaf70a2cd534786904ea5889c047
SHA256: 7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name caffeine High Vendor jar package name benmanes Highest Vendor jar package name benmanes Low Vendor jar package name caffeine Highest Vendor jar package name caffeine Low Vendor jar package name github Highest Vendor jar package name github Low Vendor Manifest automatic-module-name com.github.benmanes.caffeine Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Product file name caffeine High Product jar package name benmanes Highest Product jar package name benmanes Low Product jar package name cache Low Product jar package name caffeine Highest Product jar package name caffeine Low Product jar package name github Highest Product Manifest automatic-module-name com.github.benmanes.caffeine Medium Product Manifest build-jdk-spec 11 Low Product Manifest Bundle-Name com.github.ben-manes.caffeine Medium Product Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Product Manifest Implementation-Title A high performance caching library High Version file version 3.1.8 High Version Manifest Implementation-Version 3.1.8 High
License:
MIT File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\checker-qual-3.48.1.jar
MD5: 1594c16f661bec96488b56d4d5b56582
SHA1: 7d8cf1c00aec0042df92f8d71d7f15baaf9773f4
SHA256: 21e8dfe8103e125d96a329653ca81e87ac430326dbdbf299cea3dc1ae3f039a2
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name checker-qual High Vendor jar package name checker Highest Vendor jar package name checker Low Vendor jar package name checkerframework Low Vendor jar package name qual Highest Vendor Manifest bundle-symbolicname checker-qual Medium Vendor Manifest implementation-url https://checkerframework.org Low Product file name checker-qual High Product jar package name checker Highest Product jar package name checker Low Product jar package name checkerframework Highest Product jar package name qual Highest Product jar package name qual Low Product Manifest Bundle-Name checker-qual Medium Product Manifest bundle-symbolicname checker-qual Medium Product Manifest implementation-url https://checkerframework.org Low Version file version 3.48.1 High Version Manifest Implementation-Version 3.48.1 High
Description:
JCL 1.2 implemented over SLF4J License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\jcl-over-slf4j-2.0.16.jar
MD5: c077b88c43f9d63f64f9880fdb457efb
SHA1: 9d08badad22f1ac07deac9188ade596472a2bfd9
SHA256: 5744d62c5af556e839ab922c9fa3f737f0a5971e478ba68b2eb5256b2842ec78
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jcl-over-slf4j High Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname jcl.over.slf4j Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor pom artifactid jcl-over-slf4j Low Vendor pom groupid org.slf4j Highest Vendor pom name JCL 1.2 implemented over SLF4J High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name jcl-over-slf4j High Product jar package name 9 Highest Product jar package name apache Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name JCL 1.2 implemented over SLF4J Medium Product Manifest bundle-symbolicname jcl.over.slf4j Medium Product Manifest Implementation-Title jcl-over-slf4j High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product pom artifactid jcl-over-slf4j Highest Product pom groupid org.slf4j Highest Product pom name JCL 1.2 implemented over SLF4J High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-aarch64\jnidispatch.dllMD5: 302945a811fd8e21bcdd5226c73b6f74SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607cSHA256: b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699dReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86-64\jnidispatch.dllMD5: 2d2475f1f026dd54e9f3e787ae4f81daSHA1: 27ff882ac271db547aee520b38e3ba9aa91e136cSHA256: 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86\jnidispatch.dllMD5: 0caa1ef75a807f9dde05084fa2219a5cSHA1: 2f5e1cd82cde192905c7510ce99037b67d980640SHA256: 752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
Description:
JNA Library File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\jna-5.16.0.jarMD5: accc2e2b8676434a87f4f73fb4d90b44SHA1: ebea09f91dc9f7048099f963fb8d6f919f0a4d9cSHA256: 3f5233589a799eb66dc2969afa3433fb56859d3d787c58b9bc7dd9e86f0a250cReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jna High Vendor jar package name jna Highest Vendor jar package name jna Low Vendor jar package name sun Highest Vendor jar package name sun Low Vendor jar (hint) package name oracle Highest Vendor jar (hint) package name oracle Low Vendor Manifest automatic-module-name com.sun.jna Medium Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-category jni Low Vendor Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname com.sun.jna Medium Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest specification-vendor JNA Development Team Low Product file name jna High Product jar package name jna Highest Product jar package name jna Low Product jar package name library Highest Product jar package name native Highest Product jar package name sun Highest Product jar package name win32 Highest Product Manifest automatic-module-name com.sun.jna Medium Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-category jni Low Product Manifest Bundle-Name jna Medium Product Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname com.sun.jna Medium Product Manifest Implementation-Title com.sun.jna High Product Manifest specification-title Java Native Access (JNA) Medium Version file name jna Medium Version file version 5.16.0 High Version jar package name jna Highest Version jar package name sun Highest Version jar package name win32 Highest Version Manifest Bundle-Version 5.16.0 High Version Manifest Implementation-Version 5.16.0 (b0) High
cpe:2.3:a:oracle:java_se:5.16.0:*:*:*:*:*:*:* (Confidence :Low) suppress Description:
JNA Platform Library File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\jna-platform-5.16.0.jarMD5: 12ba6b7a7752ecf0a5baed725f3192c2SHA1: b2a9065f97c166893d504b164706512338e3bbc2SHA256: e5a79523964509757555782bb60283e4902611013f107e4600dc93298f73f382Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jna-platform High Vendor jar package name jna Highest Vendor jar package name jna Low Vendor jar package name platform Highest Vendor jar package name platform Low Vendor jar package name sun Highest Vendor jar package name sun Low Vendor jar (hint) package name oracle Highest Vendor jar (hint) package name oracle Low Vendor Manifest automatic-module-name com.sun.jna.platform Medium Vendor Manifest bundle-category jni Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor Manifest bundle-symbolicname com.sun.jna.platform Medium Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest require-bundle com.sun.jna;bundle-version="5.16.0" Low Vendor Manifest specification-vendor JNA Development Team Low Product file name jna-platform High Product jar package name jna Highest Product jar package name jna Low Product jar package name platform Highest Product jar package name platform Low Product jar package name sun Highest Product jar package name win32 Low Product Manifest automatic-module-name com.sun.jna.platform Medium Product Manifest bundle-category jni Low Product Manifest Bundle-Name jna-platform Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product Manifest bundle-symbolicname com.sun.jna.platform Medium Product Manifest Implementation-Title com.sun.jna High Product Manifest require-bundle com.sun.jna;bundle-version="5.16.0" Low Product Manifest specification-title Java Native Access (JNA) Medium Version file name jna-platform Medium Version file version 5.16.0 High Version jar package name jna Highest Version jar package name sun Highest Version Manifest Bundle-Version 5.16.0 High Version Manifest Implementation-Version 5.16.0 (b0) High
Description:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\logback-core-1.5.15.jar
MD5: 932d68eb5c938eee29ddd0f47c0cf31b
SHA1: 81633c8360b7e5b4edc52ca908bf14de0b73ef05
SHA256: 695bc40dd790cb710575f768e37b8eb12f814d84b008011a2ef85d5daaafa745
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name 21 Highest Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Implementation-Title Logback Core Module High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Logback Core Module Medium Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.15 High Version Manifest Bundle-Version 1.5.15 High Version Manifest Implementation-Version 1.5.15 High Version pom version 1.5.15 Highest
Related Dependencies waffle-filter.war: logback-classic-1.5.15.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\logback-classic-1.5.15.jar MD5: 042b4c78d1f6b7e862cc3de54e995642 SHA1: 07f8d6371626833bd1a232fe35490edffe04e5b3 SHA256: 5832abd425fc3036182f02931e9a121e7b464ddf2323ef7361b863570d3c8aa2 pkg:maven/ch.qos.logback/logback-classic@1.5.15 Description:
The slf4j API License:
http://www.opensource.org/licenses/mit-license.php File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\slf4j-api-2.0.15.jar
MD5: 357e4a230bfd9a2c303f25a3f2ade4c2
SHA1: 35ed0d9a6b7c011bb8656087f79e371263b3b485
SHA256: 5bfda32d723dde8ccef9db6bdc2537dabdb87321597c7e00e66a73a5777fbb24
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name slf4j-api High Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor Manifest multi-release true Low Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name SLF4J API Module Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product Manifest multi-release true Low Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.15 High Version Manifest Bundle-Version 2.0.15 High Version Manifest Implementation-Version 2.0.15 High Version pom version 2.0.15 Highest
Description:
WAFFLE JNA implementation File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\waffle-jna-3.5.1.jarMD5: 8f889b8ad9082149f803d47b3bd83a4bSHA1: 9201f109062b3abcd69e115ede76c2440ff69455SHA256: 38ebb57398270ec4f9b4d31dd3851bbfc5687694ac099d686b39ed706b046590Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name waffle-jna High Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.jna Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-jna Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-jna High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-jna High Product jar package name waffle Highest Product Manifest automatic-module-name waffle.jna Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-jna High Product Manifest specification-title waffle-jna Medium Product pom artifactid waffle-jna Highest Product pom groupid com.github.waffle Highest Product pom name waffle-jna High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Tomcat 9 integration for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.war\WEB-INF\lib\waffle-tomcat9-3.5.1.jarMD5: 216d19375d06ba7df4af238146c499f6SHA1: 51f135ef63e70f00627479eb5a8a67b377397429SHA256: 9171d74c3124f2154410432f554b815b72cfc619942817bc3ef4f7c1c9b38459Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name waffle-tomcat9 High Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.tomcat9 Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-tomcat9 Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-tomcat9 High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-tomcat9 High Product jar package name waffle Highest Product Manifest automatic-module-name waffle.tomcat9 Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-tomcat9 High Product Manifest specification-title waffle-tomcat9 Medium Product pom artifactid waffle-tomcat9 Highest Product pom groupid com.github.waffle Highest Product pom name waffle-tomcat9 High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Filter Demo for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-filter\target\waffle-filter.warMD5: b7a4e8e9705aac357f739d445474da6dSHA1: 05906cb6f95716ae3cb5000c8aa8ab8afb8b152aSHA256: 2414a026b292eaa39a2fd33954c8c07f7ad83fe27e1c142d250d107b53220d09Referenced In Project/Scope: waffle-distro:runtimewaffle-filter.war is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-filter High Vendor Manifest automatic-module-name waffle.filter.demo Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest build-number Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-filter Highest Vendor pom artifactid waffle-filter Low Vendor pom groupid com.github.waffle.demo Highest Vendor pom name waffle-filter High Vendor pom parent-artifactid waffle-demo-parent Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-filter High Product Manifest automatic-module-name waffle.filter.demo Medium Product Manifest build-jdk-spec 21 Low Product Manifest build-number Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-filter High Product Manifest specification-title waffle-filter Medium Product pom artifactid waffle-filter Highest Product pom groupid com.github.waffle.demo Highest Product pom name waffle-filter High Product pom parent-artifactid waffle-demo-parent Medium Product pom url https://waffle.github.io/waffle/ Medium Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
+ Byte Buddy is a Java library for creating Java classes at run time.
+ This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
+ License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\byte-buddy-1.15.11.jar
MD5: 603bc53c7a294f23765bfb7e1820ad44
SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c
SHA256: fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy High Vendor jar package name asm Highest Vendor jar package name build Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy (without dependencies) High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy High Product jar package name asm Highest Product jar package name build Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Product Manifest multi-release true Low Product pom artifactid byte-buddy Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy (without dependencies) High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86-64\attach_hotspot_windows.dllMD5: 053a783e5777c6a9867c27d51af89677SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76SHA256: 16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86\attach_hotspot_windows.dllMD5: fbca33102ac97be0ed496c0f78e466b3SHA1: c4df05146a86a6d073769bb697d550ef42518ed5SHA256: 810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
Description:
The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar
MD5: 449a1534609bf3535d74cbb10b4ed074
SHA1: a38b16385e867f59a641330f0362ebe742788ed8
SHA256: 316d2c0795c2a4d4c4756f2e6f9349837c7430ac34e0477ead874d05f5cc19e5
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy-agent High Vendor jar package name agent Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Vendor Manifest can-redefine-classes true Low Vendor Manifest can-retransform-classes true Low Vendor Manifest can-set-native-method-prefix true Low Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy-agent Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy agent High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy-agent High Product jar package name agent Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy agent Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Product Manifest can-redefine-classes true Low Product Manifest can-retransform-classes true Low Product Manifest can-set-native-method-prefix true Low Product Manifest multi-release true Low Product pom artifactid byte-buddy-agent Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy agent High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
Description:
A high performance caching library License:
https://www.apache.org/licenses/LICENSE-2.0 File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\caffeine-3.1.8.jar
MD5: b19301179903e8781776397d9923f7c8
SHA1: 24795585df8afaf70a2cd534786904ea5889c047
SHA256: 7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name caffeine High Vendor jar package name benmanes Highest Vendor jar package name benmanes Low Vendor jar package name caffeine Highest Vendor jar package name caffeine Low Vendor jar package name github Highest Vendor jar package name github Low Vendor Manifest automatic-module-name com.github.benmanes.caffeine Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Product file name caffeine High Product jar package name benmanes Highest Product jar package name benmanes Low Product jar package name cache Low Product jar package name caffeine Highest Product jar package name caffeine Low Product jar package name github Highest Product Manifest automatic-module-name com.github.benmanes.caffeine Medium Product Manifest build-jdk-spec 11 Low Product Manifest Bundle-Name com.github.ben-manes.caffeine Medium Product Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Product Manifest Implementation-Title A high performance caching library High Version file version 3.1.8 High Version Manifest Implementation-Version 3.1.8 High
License:
MIT File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\checker-qual-3.48.3.jar
MD5: 9fe3deae54d20bd78960459c952ac7d4
SHA1: c48effe7d78de3cf5e8a98c614281ec6a2466a77
SHA256: 443685b1b232803baaf803c15d6f5a425473c6f7b81c5f276dfcf93288e389a5
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name checker-qual High Vendor jar package name checker Highest Vendor jar package name checker Low Vendor jar package name checkerframework Low Vendor jar package name qual Highest Vendor Manifest bundle-symbolicname checker-qual Medium Vendor Manifest implementation-url https://checkerframework.org Low Product file name checker-qual High Product jar package name checker Highest Product jar package name checker Low Product jar package name checkerframework Highest Product jar package name qual Highest Product jar package name qual Low Product Manifest Bundle-Name checker-qual Medium Product Manifest bundle-symbolicname checker-qual Medium Product Manifest implementation-url https://checkerframework.org Low Version file version 3.48.3 High Version Manifest Implementation-Version 3.48.3 High
Description:
JCL 1.2 implemented over SLF4J License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\jcl-over-slf4j-2.0.16.jar
MD5: c077b88c43f9d63f64f9880fdb457efb
SHA1: 9d08badad22f1ac07deac9188ade596472a2bfd9
SHA256: 5744d62c5af556e839ab922c9fa3f737f0a5971e478ba68b2eb5256b2842ec78
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jcl-over-slf4j High Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname jcl.over.slf4j Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor pom artifactid jcl-over-slf4j Low Vendor pom groupid org.slf4j Highest Vendor pom name JCL 1.2 implemented over SLF4J High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name jcl-over-slf4j High Product jar package name 9 Highest Product jar package name apache Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name JCL 1.2 implemented over SLF4J Medium Product Manifest bundle-symbolicname jcl.over.slf4j Medium Product Manifest Implementation-Title jcl-over-slf4j High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product pom artifactid jcl-over-slf4j Highest Product pom groupid org.slf4j Highest Product pom name JCL 1.2 implemented over SLF4J High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-aarch64\jnidispatch.dllMD5: 302945a811fd8e21bcdd5226c73b6f74SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607cSHA256: b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699dReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86-64\jnidispatch.dllMD5: 2d2475f1f026dd54e9f3e787ae4f81daSHA1: 27ff882ac271db547aee520b38e3ba9aa91e136cSHA256: 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86\jnidispatch.dllMD5: 0caa1ef75a807f9dde05084fa2219a5cSHA1: 2f5e1cd82cde192905c7510ce99037b67d980640SHA256: 752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
Description:
JNA Library File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\jna-5.16.0.jarMD5: accc2e2b8676434a87f4f73fb4d90b44SHA1: ebea09f91dc9f7048099f963fb8d6f919f0a4d9cSHA256: 3f5233589a799eb66dc2969afa3433fb56859d3d787c58b9bc7dd9e86f0a250cReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jna High Vendor jar package name jna Highest Vendor jar package name jna Low Vendor jar package name sun Highest Vendor jar package name sun Low Vendor jar (hint) package name oracle Highest Vendor jar (hint) package name oracle Low Vendor Manifest automatic-module-name com.sun.jna Medium Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-category jni Low Vendor Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname com.sun.jna Medium Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest specification-vendor JNA Development Team Low Product file name jna High Product jar package name jna Highest Product jar package name jna Low Product jar package name library Highest Product jar package name native Highest Product jar package name sun Highest Product jar package name win32 Highest Product Manifest automatic-module-name com.sun.jna Medium Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-category jni Low Product Manifest Bundle-Name jna Medium Product Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname com.sun.jna Medium Product Manifest Implementation-Title com.sun.jna High Product Manifest specification-title Java Native Access (JNA) Medium Version file name jna Medium Version file version 5.16.0 High Version jar package name jna Highest Version jar package name sun Highest Version jar package name win32 Highest Version Manifest Bundle-Version 5.16.0 High Version Manifest Implementation-Version 5.16.0 (b0) High
cpe:2.3:a:oracle:java_se:5.16.0:*:*:*:*:*:*:* (Confidence :Low) suppress Description:
JNA Platform Library File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\jna-platform-5.16.0.jarMD5: 12ba6b7a7752ecf0a5baed725f3192c2SHA1: b2a9065f97c166893d504b164706512338e3bbc2SHA256: e5a79523964509757555782bb60283e4902611013f107e4600dc93298f73f382Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jna-platform High Vendor jar package name jna Highest Vendor jar package name jna Low Vendor jar package name platform Highest Vendor jar package name platform Low Vendor jar package name sun Highest Vendor jar package name sun Low Vendor jar (hint) package name oracle Highest Vendor jar (hint) package name oracle Low Vendor Manifest automatic-module-name com.sun.jna.platform Medium Vendor Manifest bundle-category jni Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor Manifest bundle-symbolicname com.sun.jna.platform Medium Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest require-bundle com.sun.jna;bundle-version="5.16.0" Low Vendor Manifest specification-vendor JNA Development Team Low Product file name jna-platform High Product jar package name jna Highest Product jar package name jna Low Product jar package name platform Highest Product jar package name platform Low Product jar package name sun Highest Product jar package name win32 Low Product Manifest automatic-module-name com.sun.jna.platform Medium Product Manifest bundle-category jni Low Product Manifest Bundle-Name jna-platform Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product Manifest bundle-symbolicname com.sun.jna.platform Medium Product Manifest Implementation-Title com.sun.jna High Product Manifest require-bundle com.sun.jna;bundle-version="5.16.0" Low Product Manifest specification-title Java Native Access (JNA) Medium Version file name jna-platform Medium Version file version 5.16.0 High Version jar package name jna Highest Version jar package name sun Highest Version Manifest Bundle-Version 5.16.0 High Version Manifest Implementation-Version 5.16.0 (b0) High
Description:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\logback-core-1.5.15.jar
MD5: 932d68eb5c938eee29ddd0f47c0cf31b
SHA1: 81633c8360b7e5b4edc52ca908bf14de0b73ef05
SHA256: 695bc40dd790cb710575f768e37b8eb12f814d84b008011a2ef85d5daaafa745
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name 21 Highest Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Implementation-Title Logback Core Module High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Logback Core Module Medium Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.15 High Version Manifest Bundle-Version 1.5.15 High Version Manifest Implementation-Version 1.5.15 High Version pom version 1.5.15 Highest
Related Dependencies waffle-form.war: logback-classic-1.5.15.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\logback-classic-1.5.15.jar MD5: 042b4c78d1f6b7e862cc3de54e995642 SHA1: 07f8d6371626833bd1a232fe35490edffe04e5b3 SHA256: 5832abd425fc3036182f02931e9a121e7b464ddf2323ef7361b863570d3c8aa2 pkg:maven/ch.qos.logback/logback-classic@1.5.15 Description:
The slf4j API License:
http://www.opensource.org/licenses/mit-license.php File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256: a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name slf4j-api High Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor Manifest multi-release true Low Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name SLF4J API Module Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product Manifest multi-release true Low Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
Description:
WAFFLE JNA implementation File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.war\WEB-INF\lib\waffle-jna-3.5.1.jarMD5: 8f889b8ad9082149f803d47b3bd83a4bSHA1: 9201f109062b3abcd69e115ede76c2440ff69455SHA256: 38ebb57398270ec4f9b4d31dd3851bbfc5687694ac099d686b39ed706b046590Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name waffle-jna High Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.jna Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-jna Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-jna High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-jna High Product jar package name waffle Highest Product Manifest automatic-module-name waffle.jna Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-jna High Product Manifest specification-title waffle-jna Medium Product pom artifactid waffle-jna Highest Product pom groupid com.github.waffle Highest Product pom name waffle-jna High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Form Demo for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-form\target\waffle-form.warMD5: 0df63d662d99604da82903e7bb546514SHA1: 3d6380d7db3f33811c9f9aa0b524712129dc6fc4SHA256: 2b7f4aec7319f7e2dec27e2c0a255068ff59f41d2e41a8abde4dc21f5c3dba3fReferenced In Project/Scope: waffle-distro:runtimewaffle-form.war is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-form High Vendor Manifest automatic-module-name waffle.form.demo Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest build-number Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-form Highest Vendor pom artifactid waffle-form Low Vendor pom groupid com.github.waffle.demo Highest Vendor pom name waffle-form High Vendor pom parent-artifactid waffle-demo-parent Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-form High Product Manifest automatic-module-name waffle.form.demo Medium Product Manifest build-jdk-spec 21 Low Product Manifest build-number Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-form High Product Manifest specification-title waffle-form Medium Product pom artifactid waffle-form Highest Product pom groupid com.github.waffle.demo Highest Product pom name waffle-form High Product pom parent-artifactid waffle-demo-parent Medium Product pom url https://waffle.github.io/waffle/ Medium Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
+ Byte Buddy is a Java library for creating Java classes at run time.
+ This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
+ License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\byte-buddy-1.15.11.jar
MD5: 603bc53c7a294f23765bfb7e1820ad44
SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c
SHA256: fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy High Vendor jar package name asm Highest Vendor jar package name build Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy (without dependencies) High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy High Product jar package name asm Highest Product jar package name build Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Product Manifest multi-release true Low Product pom artifactid byte-buddy Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy (without dependencies) High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86-64\attach_hotspot_windows.dllMD5: 053a783e5777c6a9867c27d51af89677SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76SHA256: 16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86\attach_hotspot_windows.dllMD5: fbca33102ac97be0ed496c0f78e466b3SHA1: c4df05146a86a6d073769bb697d550ef42518ed5SHA256: 810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
Description:
The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar
MD5: 449a1534609bf3535d74cbb10b4ed074
SHA1: a38b16385e867f59a641330f0362ebe742788ed8
SHA256: 316d2c0795c2a4d4c4756f2e6f9349837c7430ac34e0477ead874d05f5cc19e5
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy-agent High Vendor jar package name agent Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Vendor Manifest can-redefine-classes true Low Vendor Manifest can-retransform-classes true Low Vendor Manifest can-set-native-method-prefix true Low Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy-agent Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy agent High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy-agent High Product jar package name agent Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy agent Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Product Manifest can-redefine-classes true Low Product Manifest can-retransform-classes true Low Product Manifest can-set-native-method-prefix true Low Product Manifest multi-release true Low Product pom artifactid byte-buddy-agent Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy agent High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
Description:
A high performance caching library License:
https://www.apache.org/licenses/LICENSE-2.0 File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\caffeine-3.1.8.jar
MD5: b19301179903e8781776397d9923f7c8
SHA1: 24795585df8afaf70a2cd534786904ea5889c047
SHA256: 7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name caffeine High Vendor jar package name benmanes Highest Vendor jar package name benmanes Low Vendor jar package name caffeine Highest Vendor jar package name caffeine Low Vendor jar package name github Highest Vendor jar package name github Low Vendor Manifest automatic-module-name com.github.benmanes.caffeine Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Product file name caffeine High Product jar package name benmanes Highest Product jar package name benmanes Low Product jar package name cache Low Product jar package name caffeine Highest Product jar package name caffeine Low Product jar package name github Highest Product Manifest automatic-module-name com.github.benmanes.caffeine Medium Product Manifest build-jdk-spec 11 Low Product Manifest Bundle-Name com.github.ben-manes.caffeine Medium Product Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Product Manifest Implementation-Title A high performance caching library High Version file version 3.1.8 High Version Manifest Implementation-Version 3.1.8 High
License:
MIT File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\checker-qual-3.48.3.jar
MD5: 9fe3deae54d20bd78960459c952ac7d4
SHA1: c48effe7d78de3cf5e8a98c614281ec6a2466a77
SHA256: 443685b1b232803baaf803c15d6f5a425473c6f7b81c5f276dfcf93288e389a5
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name checker-qual High Vendor jar package name checker Highest Vendor jar package name checker Low Vendor jar package name checkerframework Low Vendor jar package name qual Highest Vendor Manifest bundle-symbolicname checker-qual Medium Vendor Manifest implementation-url https://checkerframework.org Low Product file name checker-qual High Product jar package name checker Highest Product jar package name checker Low Product jar package name checkerframework Highest Product jar package name qual Highest Product jar package name qual Low Product Manifest Bundle-Name checker-qual Medium Product Manifest bundle-symbolicname checker-qual Medium Product Manifest implementation-url https://checkerframework.org Low Version file version 3.48.3 High Version Manifest Implementation-Version 3.48.3 High
Description:
JCL 1.2 implemented over SLF4J License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\jcl-over-slf4j-2.0.16.jar
MD5: c077b88c43f9d63f64f9880fdb457efb
SHA1: 9d08badad22f1ac07deac9188ade596472a2bfd9
SHA256: 5744d62c5af556e839ab922c9fa3f737f0a5971e478ba68b2eb5256b2842ec78
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jcl-over-slf4j High Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname jcl.over.slf4j Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor pom artifactid jcl-over-slf4j Low Vendor pom groupid org.slf4j Highest Vendor pom name JCL 1.2 implemented over SLF4J High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name jcl-over-slf4j High Product jar package name 9 Highest Product jar package name apache Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name JCL 1.2 implemented over SLF4J Medium Product Manifest bundle-symbolicname jcl.over.slf4j Medium Product Manifest Implementation-Title jcl-over-slf4j High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product pom artifactid jcl-over-slf4j Highest Product pom groupid org.slf4j Highest Product pom name JCL 1.2 implemented over SLF4J High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-aarch64\jnidispatch.dllMD5: 302945a811fd8e21bcdd5226c73b6f74SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607cSHA256: b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699dReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86-64\jnidispatch.dllMD5: 2d2475f1f026dd54e9f3e787ae4f81daSHA1: 27ff882ac271db547aee520b38e3ba9aa91e136cSHA256: 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86\jnidispatch.dllMD5: 0caa1ef75a807f9dde05084fa2219a5cSHA1: 2f5e1cd82cde192905c7510ce99037b67d980640SHA256: 752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
Description:
JNA Library File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\jna-5.16.0.jarMD5: accc2e2b8676434a87f4f73fb4d90b44SHA1: ebea09f91dc9f7048099f963fb8d6f919f0a4d9cSHA256: 3f5233589a799eb66dc2969afa3433fb56859d3d787c58b9bc7dd9e86f0a250cReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jna High Vendor jar package name jna Highest Vendor jar package name jna Low Vendor jar package name sun Highest Vendor jar package name sun Low Vendor jar (hint) package name oracle Highest Vendor jar (hint) package name oracle Low Vendor Manifest automatic-module-name com.sun.jna Medium Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-category jni Low Vendor Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname com.sun.jna Medium Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest specification-vendor JNA Development Team Low Product file name jna High Product jar package name jna Highest Product jar package name jna Low Product jar package name library Highest Product jar package name native Highest Product jar package name sun Highest Product jar package name win32 Highest Product Manifest automatic-module-name com.sun.jna Medium Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-category jni Low Product Manifest Bundle-Name jna Medium Product Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname com.sun.jna Medium Product Manifest Implementation-Title com.sun.jna High Product Manifest specification-title Java Native Access (JNA) Medium Version file name jna Medium Version file version 5.16.0 High Version jar package name jna Highest Version jar package name sun Highest Version jar package name win32 Highest Version Manifest Bundle-Version 5.16.0 High Version Manifest Implementation-Version 5.16.0 (b0) High
cpe:2.3:a:oracle:java_se:5.16.0:*:*:*:*:*:*:* (Confidence :Low) suppress Description:
JNA Platform Library File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\jna-platform-5.16.0.jarMD5: 12ba6b7a7752ecf0a5baed725f3192c2SHA1: b2a9065f97c166893d504b164706512338e3bbc2SHA256: e5a79523964509757555782bb60283e4902611013f107e4600dc93298f73f382Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jna-platform High Vendor jar package name jna Highest Vendor jar package name jna Low Vendor jar package name platform Highest Vendor jar package name platform Low Vendor jar package name sun Highest Vendor jar package name sun Low Vendor jar (hint) package name oracle Highest Vendor jar (hint) package name oracle Low Vendor Manifest automatic-module-name com.sun.jna.platform Medium Vendor Manifest bundle-category jni Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor Manifest bundle-symbolicname com.sun.jna.platform Medium Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest require-bundle com.sun.jna;bundle-version="5.16.0" Low Vendor Manifest specification-vendor JNA Development Team Low Product file name jna-platform High Product jar package name jna Highest Product jar package name jna Low Product jar package name platform Highest Product jar package name platform Low Product jar package name sun Highest Product jar package name win32 Low Product Manifest automatic-module-name com.sun.jna.platform Medium Product Manifest bundle-category jni Low Product Manifest Bundle-Name jna-platform Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product Manifest bundle-symbolicname com.sun.jna.platform Medium Product Manifest Implementation-Title com.sun.jna High Product Manifest require-bundle com.sun.jna;bundle-version="5.16.0" Low Product Manifest specification-title Java Native Access (JNA) Medium Version file name jna-platform Medium Version file version 5.16.0 High Version jar package name jna Highest Version jar package name sun Highest Version Manifest Bundle-Version 5.16.0 High Version Manifest Implementation-Version 5.16.0 (b0) High
Description:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\logback-core-1.5.15.jar
MD5: 932d68eb5c938eee29ddd0f47c0cf31b
SHA1: 81633c8360b7e5b4edc52ca908bf14de0b73ef05
SHA256: 695bc40dd790cb710575f768e37b8eb12f814d84b008011a2ef85d5daaafa745
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name 21 Highest Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Implementation-Title Logback Core Module High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Logback Core Module Medium Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.15 High Version Manifest Bundle-Version 1.5.15 High Version Manifest Implementation-Version 1.5.15 High Version pom version 1.5.15 Highest
Related Dependencies waffle-jaas.war: logback-classic-1.5.15.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\logback-classic-1.5.15.jar MD5: 042b4c78d1f6b7e862cc3de54e995642 SHA1: 07f8d6371626833bd1a232fe35490edffe04e5b3 SHA256: 5832abd425fc3036182f02931e9a121e7b464ddf2323ef7361b863570d3c8aa2 pkg:maven/ch.qos.logback/logback-classic@1.5.15 Description:
The slf4j API License:
http://www.opensource.org/licenses/mit-license.php File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256: a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name slf4j-api High Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor Manifest multi-release true Low Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name SLF4J API Module Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product Manifest multi-release true Low Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
Description:
WAFFLE JNA implementation File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.war\WEB-INF\lib\waffle-jna-3.5.1.jarMD5: 8f889b8ad9082149f803d47b3bd83a4bSHA1: 9201f109062b3abcd69e115ede76c2440ff69455SHA256: 38ebb57398270ec4f9b4d31dd3851bbfc5687694ac099d686b39ed706b046590Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name waffle-jna High Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.jna Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-jna Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-jna High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-jna High Product jar package name waffle Highest Product Manifest automatic-module-name waffle.jna Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-jna High Product Manifest specification-title waffle-jna Medium Product pom artifactid waffle-jna Highest Product pom groupid com.github.waffle Highest Product pom name waffle-jna High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Jaas Demo for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-jaas\target\waffle-jaas.warMD5: af78966d2bb87c9bf62f8b3adba67527SHA1: 77ac672db479a092d63af0f935b34cec31c6efdbSHA256: 5aaa3f1dee4227f626adc49d823a0890b13b647299ef8fc089d4524ec5d61402Referenced In Project/Scope: waffle-distro:runtimewaffle-jaas.war is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-jaas High Vendor Manifest automatic-module-name waffle.jaas.demo Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest build-number Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-jaas Highest Vendor pom artifactid waffle-jaas Low Vendor pom groupid com.github.waffle.demo Highest Vendor pom name waffle-jaas High Vendor pom parent-artifactid waffle-demo-parent Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-jaas High Product Manifest automatic-module-name waffle.jaas.demo Medium Product Manifest build-jdk-spec 21 Low Product Manifest build-number Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-jaas High Product Manifest specification-title waffle-jaas Medium Product pom artifactid waffle-jaas Highest Product pom groupid com.github.waffle.demo Highest Product pom name waffle-jaas High Product pom parent-artifactid waffle-demo-parent Medium Product pom url https://waffle.github.io/waffle/ Medium Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Jetty integration for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-jetty\target\waffle-jetty-3.5.1.jarMD5: 05f587e83c7e23421b6a91ca74133ebfSHA1: d81c26dddcf74f37ddfc5127f9b8c758217decabSHA256: b3b4fb187edd5592e99fab56ab71c28080682829ea53b5d8d0fa03e748e425c2Referenced In Project/Scope: waffle-distro:runtimewaffle-jetty-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-jetty High Vendor jar package name jetty Highest Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.jetty Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-jetty Highest Vendor pom artifactid waffle-jetty Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-jetty High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-jetty High Product jar package name jetty Highest Product jar package name waffle Highest Product Manifest automatic-module-name waffle.jetty Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-jetty High Product Manifest specification-title waffle-jetty Medium Product pom artifactid waffle-jetty Highest Product pom groupid com.github.waffle Highest Product pom name waffle-jetty High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Jetty Jakarta integration for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-jetty-jakarta\target\waffle-jetty-jakarta-3.5.1.jarMD5: 519aa671e1af9006101f6cd21d0fa29eSHA1: ae71e924f4160b04bf1abd0ee01209d4b0f08fa1SHA256: c6fe3bf6ccb0d25d5190bfe8e39b57c5ed8e9af67d55b408c2459e634c37ff1bReferenced In Project/Scope: waffle-distro:runtimewaffle-jetty-jakarta-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-jetty-jakarta High Vendor jar package name jetty Highest Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.jetty.jakarta Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-jetty-jakarta Highest Vendor pom artifactid waffle-jetty-jakarta Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-jetty-jakarta High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-jetty-jakarta High Product jar package name jetty Highest Product jar package name waffle Highest Product Manifest automatic-module-name waffle.jetty.jakarta Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-jetty-jakarta High Product Manifest specification-title waffle-jetty-jakarta Medium Product pom artifactid waffle-jetty-jakarta Highest Product pom groupid com.github.waffle Highest Product pom name waffle-jetty-jakarta High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
WAFFLE JNA implementation File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-jna\target\waffle-jna-3.5.1.jarMD5: 8f889b8ad9082149f803d47b3bd83a4bSHA1: 9201f109062b3abcd69e115ede76c2440ff69455SHA256: 38ebb57398270ec4f9b4d31dd3851bbfc5687694ac099d686b39ed706b046590Referenced In Project/Scope: waffle-distro:runtimewaffle-jna-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-jna High Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.jna Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-jna Highest Vendor pom artifactid waffle-jna Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-jna High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-jna High Product jar package name waffle Highest Product Manifest automatic-module-name waffle.jna Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-jna High Product Manifest specification-title waffle-jna Medium Product pom artifactid waffle-jna Highest Product pom groupid com.github.waffle Highest Product pom name waffle-jna High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: waffle-jna-3.5.1.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\waffle-jna-3.5.1.jar MD5: 8f889b8ad9082149f803d47b3bd83a4b SHA1: 9201f109062b3abcd69e115ede76c2440ff69455 SHA256: 38ebb57398270ec4f9b4d31dd3851bbfc5687694ac099d686b39ed706b046590 pkg:maven/com.github.waffle/waffle-jna@3.5.1 Description:
WAFFLE JNA Jakarta Pakage implementation File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-jna-jakarta\target\waffle-jna-jakarta-3.5.1.jarMD5: 4292b31211ec75d0a54780009f620fd7SHA1: a54b03b4de48b62188b183e04313092119f3e247SHA256: e53d74bd6e09b543b97ccb7b5aff7dbdb1a9058066eafb9c2573c75adf254703Referenced In Project/Scope: waffle-distro:runtimewaffle-jna-jakarta-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-jna-jakarta High Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.jna.jakarta Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-jna-jakarta Highest Vendor pom artifactid waffle-jna-jakarta Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-jna-jakarta High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-jna-jakarta High Product jar package name waffle Highest Product Manifest automatic-module-name waffle.jna.jakarta Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-jna-jakarta High Product Manifest specification-title waffle-jna-jakarta Medium Product pom artifactid waffle-jna-jakarta Highest Product pom groupid com.github.waffle Highest Product pom name waffle-jna-jakarta High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Related Dependencies waffle-spring-boot-filter3-3.5.1.jar: waffle-jna-jakarta-3.5.1.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\waffle-jna-jakarta-3.5.1.jar MD5: 4292b31211ec75d0a54780009f620fd7 SHA1: a54b03b4de48b62188b183e04313092119f3e247 SHA256: e53d74bd6e09b543b97ccb7b5aff7dbdb1a9058066eafb9c2573c75adf254703 pkg:maven/com.github.waffle/waffle-jna-jakarta@3.5.1 Description:
+ Byte Buddy is a Java library for creating Java classes at run time.
+ This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
+ License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed-post\target\waffle-mixed-post.war\WEB-INF\lib\byte-buddy-1.15.11.jar
MD5: 603bc53c7a294f23765bfb7e1820ad44
SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c
SHA256: fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy High Vendor jar package name asm Highest Vendor jar package name build Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy (without dependencies) High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy High Product jar package name asm Highest Product jar package name build Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Product Manifest multi-release true Low Product pom artifactid byte-buddy Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy (without dependencies) High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed-post\target\waffle-mixed-post.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86-64\attach_hotspot_windows.dllMD5: 053a783e5777c6a9867c27d51af89677SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76SHA256: 16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed-post\target\waffle-mixed-post.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86\attach_hotspot_windows.dllMD5: fbca33102ac97be0ed496c0f78e466b3SHA1: c4df05146a86a6d073769bb697d550ef42518ed5SHA256: 810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
Description:
The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed-post\target\waffle-mixed-post.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar
MD5: 449a1534609bf3535d74cbb10b4ed074
SHA1: a38b16385e867f59a641330f0362ebe742788ed8
SHA256: 316d2c0795c2a4d4c4756f2e6f9349837c7430ac34e0477ead874d05f5cc19e5
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy-agent High Vendor jar package name agent Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Vendor Manifest can-redefine-classes true Low Vendor Manifest can-retransform-classes true Low Vendor Manifest can-set-native-method-prefix true Low Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy-agent Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy agent High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy-agent High Product jar package name agent Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy agent Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Product Manifest can-redefine-classes true Low Product Manifest can-retransform-classes true Low Product Manifest can-set-native-method-prefix true Low Product Manifest multi-release true Low Product pom artifactid byte-buddy-agent Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy agent High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
Description:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed-post\target\waffle-mixed-post.war\WEB-INF\lib\logback-core-1.5.15.jar
MD5: 932d68eb5c938eee29ddd0f47c0cf31b
SHA1: 81633c8360b7e5b4edc52ca908bf14de0b73ef05
SHA256: 695bc40dd790cb710575f768e37b8eb12f814d84b008011a2ef85d5daaafa745
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name 21 Highest Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Implementation-Title Logback Core Module High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Logback Core Module Medium Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.15 High Version Manifest Bundle-Version 1.5.15 High Version Manifest Implementation-Version 1.5.15 High Version pom version 1.5.15 Highest
Related Dependencies waffle-mixed-post.war: logback-classic-1.5.15.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed-post\target\waffle-mixed-post.war\WEB-INF\lib\logback-classic-1.5.15.jar MD5: 042b4c78d1f6b7e862cc3de54e995642 SHA1: 07f8d6371626833bd1a232fe35490edffe04e5b3 SHA256: 5832abd425fc3036182f02931e9a121e7b464ddf2323ef7361b863570d3c8aa2 pkg:maven/ch.qos.logback/logback-classic@1.5.15 Description:
The slf4j API License:
http://www.opensource.org/licenses/mit-license.php File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed-post\target\waffle-mixed-post.war\WEB-INF\lib\slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256: a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name slf4j-api High Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor Manifest multi-release true Low Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name SLF4J API Module Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product Manifest multi-release true Low Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
Description:
Mixed Post Demo for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed-post\target\waffle-mixed-post.warMD5: 209a7467762302bb7095429a8ccc86edSHA1: f90b15345c47078003343cad50235a2393670c97SHA256: d640aea186397422594539d1b28c4549dc9272544c9b05cdba84440df08157c6Referenced In Project/Scope: waffle-distro:runtimewaffle-mixed-post.war is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-mixed-post High Vendor Manifest automatic-module-name waffle.mixed.post.demo Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest build-number Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-mixed-post Highest Vendor pom artifactid waffle-mixed-post Low Vendor pom groupid com.github.waffle.demo Highest Vendor pom name waffle-mixed-post High Vendor pom parent-artifactid waffle-demo-parent Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-mixed-post High Product Manifest automatic-module-name waffle.mixed.post.demo Medium Product Manifest build-jdk-spec 21 Low Product Manifest build-number Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-mixed-post High Product Manifest specification-title waffle-mixed-post Medium Product pom artifactid waffle-mixed-post Highest Product pom groupid com.github.waffle.demo Highest Product pom name waffle-mixed-post High Product pom parent-artifactid waffle-demo-parent Medium Product pom url https://waffle.github.io/waffle/ Medium Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
+ Byte Buddy is a Java library for creating Java classes at run time.
+ This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
+ License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed\target\waffle-mixed.war\WEB-INF\lib\byte-buddy-1.15.11.jar
MD5: 603bc53c7a294f23765bfb7e1820ad44
SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c
SHA256: fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy High Vendor jar package name asm Highest Vendor jar package name build Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy (without dependencies) High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy High Product jar package name asm Highest Product jar package name build Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Product Manifest multi-release true Low Product pom artifactid byte-buddy Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy (without dependencies) High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed\target\waffle-mixed.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86-64\attach_hotspot_windows.dllMD5: 053a783e5777c6a9867c27d51af89677SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76SHA256: 16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed\target\waffle-mixed.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86\attach_hotspot_windows.dllMD5: fbca33102ac97be0ed496c0f78e466b3SHA1: c4df05146a86a6d073769bb697d550ef42518ed5SHA256: 810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
Description:
The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed\target\waffle-mixed.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar
MD5: 449a1534609bf3535d74cbb10b4ed074
SHA1: a38b16385e867f59a641330f0362ebe742788ed8
SHA256: 316d2c0795c2a4d4c4756f2e6f9349837c7430ac34e0477ead874d05f5cc19e5
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy-agent High Vendor jar package name agent Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Vendor Manifest can-redefine-classes true Low Vendor Manifest can-retransform-classes true Low Vendor Manifest can-set-native-method-prefix true Low Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy-agent Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy agent High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy-agent High Product jar package name agent Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy agent Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Product Manifest can-redefine-classes true Low Product Manifest can-retransform-classes true Low Product Manifest can-set-native-method-prefix true Low Product Manifest multi-release true Low Product pom artifactid byte-buddy-agent Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy agent High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
Description:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed\target\waffle-mixed.war\WEB-INF\lib\logback-core-1.5.15.jar
MD5: 932d68eb5c938eee29ddd0f47c0cf31b
SHA1: 81633c8360b7e5b4edc52ca908bf14de0b73ef05
SHA256: 695bc40dd790cb710575f768e37b8eb12f814d84b008011a2ef85d5daaafa745
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name 21 Highest Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Implementation-Title Logback Core Module High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Logback Core Module Medium Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.15 High Version Manifest Bundle-Version 1.5.15 High Version Manifest Implementation-Version 1.5.15 High Version pom version 1.5.15 Highest
Related Dependencies waffle-mixed.war: logback-classic-1.5.15.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed\target\waffle-mixed.war\WEB-INF\lib\logback-classic-1.5.15.jar MD5: 042b4c78d1f6b7e862cc3de54e995642 SHA1: 07f8d6371626833bd1a232fe35490edffe04e5b3 SHA256: 5832abd425fc3036182f02931e9a121e7b464ddf2323ef7361b863570d3c8aa2 pkg:maven/ch.qos.logback/logback-classic@1.5.15 Description:
The slf4j API License:
http://www.opensource.org/licenses/mit-license.php File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed\target\waffle-mixed.war\WEB-INF\lib\slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256: a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name slf4j-api High Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor Manifest multi-release true Low Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name SLF4J API Module Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product Manifest multi-release true Low Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
Description:
Mixed Demo for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-mixed\target\waffle-mixed.warMD5: 36f4fc0c368d8216717ee44cca0b1ca4SHA1: 0891222c6ead0921a4049e5a03a8d4f409484b55SHA256: 459df2db67e1e3e30066dbacfe04e9171da5427e7d2cc7833dbc270139258c84Referenced In Project/Scope: waffle-distro:runtimewaffle-mixed.war is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-mixed High Vendor Manifest automatic-module-name waffle.mixed.demo Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest build-number Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-mixed Highest Vendor pom artifactid waffle-mixed Low Vendor pom groupid com.github.waffle.demo Highest Vendor pom name waffle-mixed High Vendor pom parent-artifactid waffle-demo-parent Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-mixed High Product Manifest automatic-module-name waffle.mixed.demo Medium Product Manifest build-jdk-spec 21 Low Product Manifest build-number Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-mixed High Product Manifest specification-title waffle-mixed Medium Product pom artifactid waffle-mixed Highest Product pom groupid com.github.waffle.demo Highest Product pom name waffle-mixed High Product pom parent-artifactid waffle-demo-parent Medium Product pom url https://waffle.github.io/waffle/ Medium Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
+ Byte Buddy is a Java library for creating Java classes at run time.
+ This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
+ License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-negotiate\target\waffle-negotiate.war\WEB-INF\lib\byte-buddy-1.15.11.jar
MD5: 603bc53c7a294f23765bfb7e1820ad44
SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c
SHA256: fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy High Vendor jar package name asm Highest Vendor jar package name build Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy (without dependencies) High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy High Product jar package name asm Highest Product jar package name build Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Product Manifest multi-release true Low Product pom artifactid byte-buddy Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy (without dependencies) High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-negotiate\target\waffle-negotiate.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86-64\attach_hotspot_windows.dllMD5: 053a783e5777c6a9867c27d51af89677SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76SHA256: 16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-negotiate\target\waffle-negotiate.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86\attach_hotspot_windows.dllMD5: fbca33102ac97be0ed496c0f78e466b3SHA1: c4df05146a86a6d073769bb697d550ef42518ed5SHA256: 810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
Description:
The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-negotiate\target\waffle-negotiate.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar
MD5: 449a1534609bf3535d74cbb10b4ed074
SHA1: a38b16385e867f59a641330f0362ebe742788ed8
SHA256: 316d2c0795c2a4d4c4756f2e6f9349837c7430ac34e0477ead874d05f5cc19e5
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy-agent High Vendor jar package name agent Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Vendor Manifest can-redefine-classes true Low Vendor Manifest can-retransform-classes true Low Vendor Manifest can-set-native-method-prefix true Low Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy-agent Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy agent High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy-agent High Product jar package name agent Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy agent Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Product Manifest can-redefine-classes true Low Product Manifest can-retransform-classes true Low Product Manifest can-set-native-method-prefix true Low Product Manifest multi-release true Low Product pom artifactid byte-buddy-agent Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy agent High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
Description:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-negotiate\target\waffle-negotiate.war\WEB-INF\lib\logback-core-1.5.15.jar
MD5: 932d68eb5c938eee29ddd0f47c0cf31b
SHA1: 81633c8360b7e5b4edc52ca908bf14de0b73ef05
SHA256: 695bc40dd790cb710575f768e37b8eb12f814d84b008011a2ef85d5daaafa745
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name 21 Highest Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Implementation-Title Logback Core Module High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Logback Core Module Medium Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.15 High Version Manifest Bundle-Version 1.5.15 High Version Manifest Implementation-Version 1.5.15 High Version pom version 1.5.15 Highest
Related Dependencies waffle-negotiate.war: logback-classic-1.5.15.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-negotiate\target\waffle-negotiate.war\WEB-INF\lib\logback-classic-1.5.15.jar MD5: 042b4c78d1f6b7e862cc3de54e995642 SHA1: 07f8d6371626833bd1a232fe35490edffe04e5b3 SHA256: 5832abd425fc3036182f02931e9a121e7b464ddf2323ef7361b863570d3c8aa2 pkg:maven/ch.qos.logback/logback-classic@1.5.15 Description:
The slf4j API License:
http://www.opensource.org/licenses/mit-license.php File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-negotiate\target\waffle-negotiate.war\WEB-INF\lib\slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256: a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name slf4j-api High Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor Manifest multi-release true Low Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name SLF4J API Module Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product Manifest multi-release true Low Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
Description:
Negotiate Demo for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-negotiate\target\waffle-negotiate.warMD5: 868a92f9f93575a3aa987aed88b0a77eSHA1: 4bdf4947f22ec00616db20a0a45339a30c4b2611SHA256: abb895af8d168ad6e4f1ada1c8ab96b3e1ecd1518d71779e5b580e0c6609a45fReferenced In Project/Scope: waffle-distro:runtimewaffle-negotiate.war is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-negotiate High Vendor Manifest automatic-module-name waffle.negotiate.demo Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest build-number Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-negotiate Highest Vendor pom artifactid waffle-negotiate Low Vendor pom groupid com.github.waffle.demo Highest Vendor pom name waffle-negotiate High Vendor pom parent-artifactid waffle-demo-parent Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-negotiate High Product Manifest automatic-module-name waffle.negotiate.demo Medium Product Manifest build-jdk-spec 21 Low Product Manifest build-number Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-negotiate High Product Manifest specification-title waffle-negotiate Medium Product pom artifactid waffle-negotiate Highest Product pom groupid com.github.waffle.demo Highest Product pom name waffle-negotiate High Product pom parent-artifactid waffle-demo-parent Medium Product pom url https://waffle.github.io/waffle/ Medium Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Shiro integration for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-shiro\target\waffle-shiro-3.5.1.jarMD5: d72221f3844503acf45019013968d412SHA1: f5134249e769bf382ed0b8d56fad6a3f85af72f9SHA256: fbf4817e9d758bb402ef720ba33e2f7d0b0e27fba5a74e7fc3ed01540b7d7987Referenced In Project/Scope: waffle-distro:runtimewaffle-shiro-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-shiro High Vendor jar package name shiro Highest Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.shiro Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-shiro Highest Vendor pom artifactid waffle-shiro Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-shiro High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-shiro High Product jar package name shiro Highest Product jar package name waffle Highest Product Manifest automatic-module-name waffle.shiro Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-shiro High Product Manifest specification-title waffle-shiro Medium Product pom artifactid waffle-shiro Highest Product pom groupid com.github.waffle Highest Product pom name waffle-shiro High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Spring Boot Autoconfigure for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-spring-boot2\waffle-spring-boot-autoconfigure2\target\waffle-spring-boot-autoconfigure2-3.5.1.jarMD5: 3f86800ef2fdbe121be85b2cb1788ba6SHA1: 18efcd5f0d27aa4474096a46359c0ee4d65942fdSHA256: 1d2c3a144846bae1ce14e0b01d0a58f8cf96444ac228dd7b9ad4defdbfbe9caeReferenced In Project/Scope: waffle-distro:runtimewaffle-spring-boot-autoconfigure2-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-spring-boot-autoconfigure2 High Vendor jar package name boot Highest Vendor jar package name spring Highest Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.spring.boot.autoconfigure2 Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-spring-boot-autoconfigure2 Highest Vendor pom artifactid waffle-spring-boot-autoconfigure2 Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-spring-boot-autoconfigure2 High Vendor pom parent-artifactid waffle-spring-boot2 Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-spring-boot-autoconfigure2 High Product jar package name boot Highest Product jar package name spring Highest Product jar package name waffle Highest Product Manifest automatic-module-name waffle.spring.boot.autoconfigure2 Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-spring-boot-autoconfigure2 High Product Manifest specification-title waffle-spring-boot-autoconfigure2 Medium Product pom artifactid waffle-spring-boot-autoconfigure2 Highest Product pom groupid com.github.waffle Highest Product pom name waffle-spring-boot-autoconfigure2 High Product pom parent-artifactid waffle-spring-boot2 Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: waffle-spring-boot-autoconfigure2-3.5.1.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\waffle-spring-boot-autoconfigure2-3.5.1.jar MD5: 3f86800ef2fdbe121be85b2cb1788ba6 SHA1: 18efcd5f0d27aa4474096a46359c0ee4d65942fd SHA256: 1d2c3a144846bae1ce14e0b01d0a58f8cf96444ac228dd7b9ad4defdbfbe9cae pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure2@3.5.1 Description:
Spring Boot Autoconfigure for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-spring-boot3\waffle-spring-boot-autoconfigure3\target\waffle-spring-boot-autoconfigure3-3.5.1.jarMD5: 3392974fea710e37c348d7871450d83aSHA1: 588129a2c957e7fe6af69e87df3d5803c42e6137SHA256: c51376b946e4ead79d05c6240f120410689fda0da06b23a678d6f9d706478f3cReferenced In Project/Scope: waffle-distro:runtimewaffle-spring-boot-autoconfigure3-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-spring-boot-autoconfigure3 High Vendor jar package name boot Highest Vendor jar package name spring Highest Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.spring.boot.autoconfigure3 Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-spring-boot-autoconfigure3 Highest Vendor pom artifactid waffle-spring-boot-autoconfigure3 Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-spring-boot-autoconfigure3 High Vendor pom parent-artifactid waffle-spring-boot3 Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-spring-boot-autoconfigure3 High Product jar package name boot Highest Product jar package name spring Highest Product jar package name waffle Highest Product Manifest automatic-module-name waffle.spring.boot.autoconfigure3 Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-spring-boot-autoconfigure3 High Product Manifest specification-title waffle-spring-boot-autoconfigure3 Medium Product pom artifactid waffle-spring-boot-autoconfigure3 Highest Product pom groupid com.github.waffle Highest Product pom name waffle-spring-boot-autoconfigure3 High Product pom parent-artifactid waffle-spring-boot3 Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Related Dependencies waffle-spring-boot-filter3-3.5.1.jar: waffle-spring-boot-autoconfigure3-3.5.1.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\waffle-spring-boot-autoconfigure3-3.5.1.jar MD5: 3392974fea710e37c348d7871450d83a SHA1: 588129a2c957e7fe6af69e87df3d5803c42e6137 SHA256: c51376b946e4ead79d05c6240f120410689fda0da06b23a678d6f9d706478f3c pkg:maven/com.github.waffle/waffle-spring-boot-autoconfigure3@3.5.1 Description:
Add-on module for Jackson (http://jackson.codehaus.org) to support
+JDK 8 data types.
+ License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jackson-datatype-jdk8-2.13.5.jar
MD5: 3803e35b61c5812310fd093c398b43b6
SHA1: 1278f38160812811c56eb77f67213662ed1c7a2e
SHA256: e58761751fea8a00dc626aae1c5f1be38c5cfd487aeb333d933a4ab5f5a73c55
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jackson-datatype-jdk8 High Vendor jar package name datatype Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name jdk8 Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8 Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.datatype.jackson-datatype-jdk8 Medium Vendor Manifest implementation-build-date 2023-01-23 01:26:15+0000 Low Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.datatype Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-datatype-jdk8 Low Vendor pom groupid com.fasterxml.jackson.datatype Highest Vendor pom name Jackson datatype: jdk8 High Vendor pom parent-artifactid jackson-modules-java8 Low Vendor pom parent-groupid com.fasterxml.jackson.module Medium Product file name jackson-datatype-jdk8 High Product jar package name datatype Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name jdk8 Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8 Low Product Manifest Bundle-Name Jackson datatype: jdk8 Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.datatype.jackson-datatype-jdk8 Medium Product Manifest implementation-build-date 2023-01-23 01:26:15+0000 Low Product Manifest Implementation-Title Jackson datatype: jdk8 High Product Manifest multi-release true Low Product Manifest specification-title Jackson datatype: jdk8 Medium Product pom artifactid jackson-datatype-jdk8 Highest Product pom groupid com.fasterxml.jackson.datatype Highest Product pom name Jackson datatype: jdk8 High Product pom parent-artifactid jackson-modules-java8 Medium Product pom parent-groupid com.fasterxml.jackson.module Medium Version file version 2.13.5 High Version Manifest Bundle-Version 2.13.5 High Version Manifest Implementation-Version 2.13.5 High Version pom version 2.13.5 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: jackson-datatype-jsr310-2.13.5.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jackson-datatype-jsr310-2.13.5.jar MD5: 712138e14895b15181e0b9af3292e222 SHA1: 8ba3b868e81d7fc6ead686bd2353859b111d9eaf SHA256: ef15ceddddc58dfbd686b6b7fd0853ed328ff08c628bd4a395734bec20ca857b pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.5 waffle-spring-boot-filter2-3.5.1.jar: jackson-module-parameter-names-2.13.5.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jackson-module-parameter-names-2.13.5.jar MD5: 5c28a6ef0d19bcc62976eea35714047e SHA1: a401a99e7a45450fd3ef76e82ba39005fd1a8c22 SHA256: e5fcf17369885065ddec9a9cebead8597c55de252dedf10a3c14eeed8affaca4 pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.5 Description:
Jakarta Servlet 4.0 License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
+GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\jakarta.servlet-api-4.0.4.jar
MD5: f5d1d7a29978e4ae0be5a456ee1c65c3
SHA1: b8a1142e04838fe54194049c6e7a18dae8f9b960
SHA256: 586e27706c21258f5882f43be06904f49b02db9ac54e345d393fe4a32494d127
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jakarta.servlet-api High Vendor jar package name javax Highest Vendor jar package name servlet Highest Vendor Manifest automatic-module-name java.servlet Medium Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.servlet-api Medium Vendor Manifest extension-name javax.servlet Medium Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id org.eclipse Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.servlet-api Low Vendor pom developer id yaminikb Medium Vendor pom developer name Yamini K B Medium Vendor pom developer org Oracle Corporation Medium Vendor pom developer org URL http://www.oracle.com/ Medium Vendor pom groupid jakarta.servlet Highest Vendor pom name Jakarta Servlet High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Vendor pom url https://projects.eclipse.org/projects/ee4j.servlet Highest Product file name jakarta.servlet-api High Product jar package name javax Highest Product jar package name servlet Highest Product Manifest automatic-module-name java.servlet Medium Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Servlet Medium Product Manifest bundle-symbolicname jakarta.servlet-api Medium Product Manifest extension-name javax.servlet Medium Product pom artifactid jakarta.servlet-api Highest Product pom developer id yaminikb Low Product pom developer name Yamini K B Low Product pom developer org Oracle Corporation Low Product pom developer org URL http://www.oracle.com/ Low Product pom groupid jakarta.servlet Highest Product pom name Jakarta Servlet High Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Product pom url https://projects.eclipse.org/projects/ee4j.servlet Medium Version file version 4.0.4 High Version Manifest Implementation-Version 4.0.4 High Version pom parent-version 4.0.4 Low Version pom version 4.0.4 Highest
Related Dependencies waffle-spring-boot-filter3-3.5.1.jar: jakarta.servlet-api-4.0.4.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jakarta.servlet-api-4.0.4.jar MD5: f5d1d7a29978e4ae0be5a456ee1c65c3 SHA1: b8a1142e04838fe54194049c6e7a18dae8f9b960 SHA256: 586e27706c21258f5882f43be06904f49b02db9ac54e345d393fe4a32494d127 pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4 Description:
logback-classic module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\logback-classic-1.5.15.jar
MD5: 042b4c78d1f6b7e862cc3de54e995642
SHA1: 07f8d6371626833bd1a232fe35490edffe04e5b3
SHA256: 5832abd425fc3036182f02931e9a121e7b464ddf2323ef7361b863570d3c8aa2
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name logback-classic High Vendor jar package name ch Highest Vendor jar package name classic Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.classic Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest provide-capability osgi.service;objectClass:List="jakarta.servlet.ServletContainerInitializer";effective:=active,osgi.service;objectClass:List="org.slf4j.spi.SLF4JServiceProvider";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.servlet.ServletContainerInitializer";register:="ch.qos.logback.classic.servlet.LogbackServletContainerInitializer",osgi.serviceloader;osgi.serviceloader="org.slf4j.spi.SLF4JServiceProvider";register:="ch.qos.logback.classic.spi.LogbackServiceProvider" Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-classic Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Classic Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-classic High Product jar package name ch Highest Product jar package name classic Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Classic Module Medium Product Manifest bundle-symbolicname ch.qos.logback.classic Medium Product Manifest Implementation-Title Logback Classic Module High Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest provide-capability osgi.service;objectClass:List="jakarta.servlet.ServletContainerInitializer";effective:=active,osgi.service;objectClass:List="org.slf4j.spi.SLF4JServiceProvider";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.servlet.ServletContainerInitializer";register:="ch.qos.logback.classic.servlet.LogbackServletContainerInitializer",osgi.serviceloader;osgi.serviceloader="org.slf4j.spi.SLF4JServiceProvider";register:="ch.qos.logback.classic.spi.LogbackServiceProvider" Low Product Manifest specification-title Logback Classic Module Medium Product pom artifactid logback-classic Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Classic Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.15 High Version Manifest Bundle-Version 1.5.15 High Version Manifest Implementation-Version 1.5.15 High Version pom version 1.5.15 Highest
Related Dependencies waffle-spring-boot-filter3-3.5.1.jar: logback-classic-1.5.15.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\logback-classic-1.5.15.jar MD5: 042b4c78d1f6b7e862cc3de54e995642 SHA1: 07f8d6371626833bd1a232fe35490edffe04e5b3 SHA256: 5832abd425fc3036182f02931e9a121e7b464ddf2323ef7361b863570d3c8aa2 pkg:maven/ch.qos.logback/logback-classic@1.5.15 Description:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\logback-core-1.2.12.jar
MD5: 879d60b3fa9c6617cee4e20f12f6a16e
SHA1: 1d8e51a698b138065d73baefb4f94531faa323cb
SHA256: 0cba0755fbdc1793f60dc9d1ef22337737899f4f28b485c42bcadacb73664b34
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.4 Low Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.4 Low Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.2.12 High Version Manifest Bundle-Version 1.2.12 High Version pom version 1.2.12 Highest
CVE-2023-6378 suppress
A serialization vulnerability in logback receiver component part of
+logback version 1.4.11 allows an attacker to mount a Denial-Of-Service
+attack by sending poisoned data.
+
+ CWE-502 Deserialization of Untrusted Data
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-6481 suppress
A serialization vulnerability in logback receiver component part of
+logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service
+attack by sending poisoned data.
+
+ NVD-CWE-noinfo
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2024-12798 (OSSINDEX)suppress
ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core
+ upto and including version 1.5.12 in Java applications allows
+ attacker to execute arbitrary code by compromising an existing
+ logback configuration file or by injecting an environment variable
+ before program execution.
+
+
+
+
+
+Malicious logback configuration files can allow the attacker to execute
+arbitrary code using the JaninoEventEvaluator extension.
+
+
+
+A successful attack requires the user to have write access to a
+configuration file. Alternatively, the attacker could inject a malicious
+environment variable pointing to a malicious configuration file. In both
+cases, the attack requires existing privilege. CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVSSv2:
Base Score: MEDIUM (5.900000095367432) Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:ch.qos.logback:logback-core:1.2.12:*:*:*:*:*:*:* CVE-2024-12801 (OSSINDEX)suppress
Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 1.5.12 on the Java platform, allows an attacker to
+forge requests by compromising logback configuration files in XML.
+
+
+
+The attacks involves the modification of DOCTYPE declaration in XML configuration files.
+
+Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2024-12801 for details CWE-918 Server-Side Request Forgery (SSRF)
CVSSv2:
Base Score: LOW (2.4000000953674316) Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:L/SC:H/SI:H/SA:H References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:ch.qos.logback:logback-core:1.2.12:*:*:*:*:*:*:* Description:
The slf4j API File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\slf4j-api-1.7.36.jarMD5: 872da51f5de7f3923da4de871d57fd85SHA1: 6c62681a2f655b49963a5983b8b0950a6120ae14SHA256: d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name slf4j-api High Vendor jar package name slf4j Highest Vendor Manifest automatic-module-name org.slf4j Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product jar package name slf4j Highest Product Manifest automatic-module-name org.slf4j Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name slf4j-api Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 1.7.36 High Version Manifest Bundle-Version 1.7.36 High Version Manifest Implementation-Version 1.7.36 High Version pom version 1.7.36 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-aop-5.3.31.jarMD5: 48143a3242d23f66736e34cf1b5ad632SHA1: 3be929dbdb5f4516919ad09a3d3720d779bb65d9SHA256: 3f0c666f317abaa845fc3a24fba219b1f469716bf309cccd755eecb8fee20430Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-aop High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name aop Highest Vendor jar package name aop Low Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.aop Medium Product file name spring-aop High Product jar package name aop Highest Product jar package name aop Low Product Manifest automatic-module-name spring.aop Medium Product Manifest Implementation-Title spring-aop High Version file version 5.3.31 High Version Manifest Implementation-Version 5.3.31 High
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: spring-beans-5.3.31.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-beans-5.3.31.jar MD5: b5fe5c018f96edf76b7e92b34668fa44 SHA1: d27258849071b3b268ecc388eca35bbfcc586448 SHA256: a8d6d99003d0a28049cba4273afbcfc64e1107ee3c33f67935853e9711544aa7 waffle-spring-boot-filter2-3.5.1.jar: spring-context-5.3.31.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-context-5.3.31.jar MD5: 6aa19e7e6a87b4ac8b649057315b1dd1 SHA1: a2d6e76507f037ad835e8c2288dfedf28981999f SHA256: 38def055d1e22b5514b1cb19cef4474e5c1b0d2127c483e7d014bde87c4a4cf3 waffle-spring-boot-filter2-3.5.1.jar: spring-expression-5.3.31.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-expression-5.3.31.jar MD5: 9e309bb1a738acbd0ac9c9fc58931fd3 SHA1: 55637af1b186d1008890980c2876c5fc83599756 SHA256: e027f122b8a4e3030339068220bed02d1c9d397eb5897f1e33ba2f63b22591ac waffle-spring-boot-filter2-3.5.1.jar: spring-jcl-5.3.31.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-jcl-5.3.31.jar MD5: 4d281617e07553792218e37c47b8bd8c SHA1: e7ab9ee590a195415dd6b898440d776b4c8db78c SHA256: eee0df6a25a9c56d228ea86272546aa5a0656caf2f14e7b375417b066abbc0db waffle-spring-boot-filter2-3.5.1.jar: spring-webmvc-5.3.31.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-webmvc-5.3.31.jar MD5: 7401b647e906d3853ad02b62496cfadf SHA1: 45754d056effe8257a012f6b98ed5454cf1e8960 SHA256: 29c1b96c424dcb637fec2d1e6493b088d977e748a56da7f34e6a7c3c39d18c74 File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-boot-autoconfigure-2.7.18.jarMD5: e127e4ed0469cc5442d3c8e5e42e7988SHA1: 9cf147c6ca274c75b32556acdcba5a1de081ebcdSHA256: 1c4e0aadcb662b6149b536a2cf288003ffefe81a6cc69846e9f14976529a1b08Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-boot-autoconfigure High Vendor jar package name autoconfigure Highest Vendor jar package name autoconfigure Low Vendor jar package name boot Highest Vendor jar package name boot Low Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.boot.autoconfigure Medium Vendor Manifest build-jdk-spec 1.8 Low Product file name spring-boot-autoconfigure High Product jar package name autoconfigure Highest Product jar package name autoconfigure Low Product jar package name boot Highest Product jar package name boot Low Product Manifest automatic-module-name spring.boot.autoconfigure Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Spring Boot AutoConfigure High Version file version 2.7.18 High Version Manifest Implementation-Version 2.7.18 High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-boot-jarmode-layertools-2.7.18.jarMD5: f32346692e754a6948b7f88a2405c187SHA1: a4dc17d77bb35753dd1d4d57846b0891aec1ae38SHA256: defcbd4fb885b1fe9b1711462fc52721c02129fe55631c96d15e9363cf20707bReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-boot-jarmode-layertools High Vendor jar package name boot Highest Vendor jar package name boot Low Vendor jar package name jarmode Highest Vendor jar package name jarmode Low Vendor jar package name layertools Highest Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.boot.jarmode.layertools Medium Vendor Manifest build-jdk-spec 1.8 Low Product file name spring-boot-jarmode-layertools High Product jar package name boot Highest Product jar package name boot Low Product jar package name jarmode Highest Product jar package name jarmode Low Product jar package name layertools Highest Product jar package name layertools Low Product Manifest automatic-module-name spring.boot.jarmode.layertools Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title Spring Boot Layers Tools High Version file version 2.7.18 High Version Manifest Implementation-Version 2.7.18 High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-core-5.3.31.jarMD5: a9ef5a29eaa89fe909a0c4ed870d90a1SHA1: 368e76f732a3c331b970f69cafec1525d27b34d3SHA256: 7013ed3da15a8d4be797f5c310f9aa1b196b97f2313bc41e60ef3f5627224fe9Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name core Low Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.core Medium Product file name spring-core High Product hint analyzer product springsource_spring_framework Highest Product jar package name core Highest Product jar package name core Low Product Manifest automatic-module-name spring.core Medium Product Manifest Implementation-Title spring-core High Version file version 5.3.31 High Version Manifest Implementation-Version 5.3.31 High
CVE-2016-1000027 suppress
Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. NOTE: the vendor's position is that untrusted data is not an intended use case. The product's behavior will not be changed because some users rely on deserialization of trusted data. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
af854a3a-2127-422b-91ae-364da2661108 - BROKEN_LINK,EXPLOIT,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - RELEASE_NOTES,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY cve@mitre.org - BROKEN_LINK,EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY Vulnerable Software & Versions:
CVE-2024-38820 suppress
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected. NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\spring-web-5.3.31.jarMD5: 4bef28044f222933ea2e45818c7f96a1SHA1: 3bf73c385a1f2f4a0d482149d6a205e854cec497SHA256: 7b7b4db19acc8c0cdb0dea93a3aa4b1b706db4bcc7b77f677a0c56e86d379ac7Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-web High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name springframework Low Vendor jar package name web Highest Vendor jar package name web Low Vendor Manifest automatic-module-name spring.web Medium Product file name spring-web High Product jar package name web Highest Product jar package name web Low Product Manifest automatic-module-name spring.web Medium Product Manifest Implementation-Title spring-web High Version file version 5.3.31 High Version Manifest Implementation-Version 5.3.31 High
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\tomcat-embed-websocket-9.0.83.jar
MD5: 3ba44fc9bf48656f448a565318ea8c46
SHA1: 9af4b7450296bb4eff93b2ee3e52ab69d07512e4
SHA256: b78130b05960761992787edf2cb4c0af18d1fe52b35119ad63712af137d7eb3e
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name tomcat-embed-websocket High Vendor jar package name apache Highest Vendor jar package name apache Low Vendor jar package name tomcat Highest Vendor jar package name tomcat Low Vendor jar package name websocket Highest Vendor jar package name websocket Low Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-websocket Medium Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor Manifest provide-capability osgi.contract;osgi.contract=JavaWebSockets;version:List="1.1,1";uses:="javax.websocket,javax.websocket.server",osgi.service;objectClass:List="javax.websocket.ContainerProvider";effective:=active,osgi.service;objectClass:List="javax.websocket.server.ServerEndpointConfig$Configurator";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.websocket.ContainerProvider";register:="org.apache.tomcat.websocket.WsContainerProvider",osgi.serviceloader;osgi.serviceloader="javax.websocket.server.ServerEndpointConfig$Configurator";register:="org.apache.tomcat.websocket.server.DefaultServerEndpointConfigurator" Low Vendor Manifest specification-vendor Apache Software Foundation Low Vendor manifest: javax/websocket/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/websocket/server/ Implementation-Vendor Apache Software Foundation Medium Product file name tomcat-embed-websocket High Product jar package name apache Highest Product jar package name containerprovider Highest Product jar package name javax Highest Product jar package name server Highest Product jar package name serverendpointconfig Highest Product jar package name serverendpointconfig$configurator Highest Product jar package name tomcat Highest Product jar package name tomcat Low Product jar package name websocket Highest Product jar package name websocket Low Product jar package name wscontainerprovider Highest Product Manifest Bundle-Name tomcat-embed-websocket Medium Product Manifest bundle-symbolicname org.apache.tomcat-embed-websocket Medium Product Manifest Implementation-Title Apache Tomcat High Product Manifest provide-capability osgi.contract;osgi.contract=JavaWebSockets;version:List="1.1,1";uses:="javax.websocket,javax.websocket.server",osgi.service;objectClass:List="javax.websocket.ContainerProvider";effective:=active,osgi.service;objectClass:List="javax.websocket.server.ServerEndpointConfig$Configurator";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.websocket.ContainerProvider";register:="org.apache.tomcat.websocket.WsContainerProvider",osgi.serviceloader;osgi.serviceloader="javax.websocket.server.ServerEndpointConfig$Configurator";register:="org.apache.tomcat.websocket.server.DefaultServerEndpointConfigurator" Low Product Manifest specification-title Apache Tomcat Medium Product manifest: javax/websocket/ Implementation-Title javax.websocket Medium Product manifest: javax/websocket/ Specification-Title WebSocket Medium Product manifest: javax/websocket/server/ Implementation-Title javax.websocket Medium Product manifest: javax/websocket/server/ Specification-Title WebSocket Medium Version file version 9.0.83 High Version Manifest Implementation-Version 9.0.83 High
Description:
Spring Boot Filter 2 Demo for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jarMD5: d5b7048d33205cc6f9af7a06af6bb396SHA1: 59430d7e29e64597e3a8687cc4e03dbc0fd3704bSHA256: acdc959d0d81b75f890e2c5fd54cc4163b4f2a6f1b1c91805dfad2f8a445fa31Referenced In Project/Scope: waffle-distro:runtimewaffle-spring-boot-filter2-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-spring-boot-filter2 High Vendor jar package name boot Highest Vendor jar package name spring Highest Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.spring.boot.filter2.demo Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor Manifest spring-boot-classes BOOT-INF/classes/ Low Vendor Manifest spring-boot-classpath-index BOOT-INF/classpath.idx Low Vendor Manifest spring-boot-layers-index BOOT-INF/layers.idx Low Vendor Manifest spring-boot-lib BOOT-INF/lib/ Low Vendor pom artifactid waffle-spring-boot-filter2 Highest Vendor pom artifactid waffle-spring-boot-filter2 Low Vendor pom groupid com.github.waffle.demo Highest Vendor pom name waffle-spring-boot-filter2 High Vendor pom parent-artifactid waffle-demo-parent Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-spring-boot-filter2 High Product jar package name boot Highest Product jar package name boot-inf Highest Product jar package name classes Highest Product jar package name spring Highest Product jar package name waffle Highest Product Manifest automatic-module-name waffle.spring.boot.filter2.demo Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-spring-boot-filter2 High Product Manifest specification-title waffle-spring-boot-filter2 Medium Product Manifest spring-boot-classes BOOT-INF/classes/ Low Product Manifest spring-boot-classpath-index BOOT-INF/classpath.idx Low Product Manifest spring-boot-layers-index BOOT-INF/layers.idx Low Product Manifest spring-boot-lib BOOT-INF/lib/ Low Product pom artifactid waffle-spring-boot-filter2 Highest Product pom groupid com.github.waffle.demo Highest Product pom name waffle-spring-boot-filter2 High Product pom parent-artifactid waffle-demo-parent Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jackson-core-2.18.2.jar
MD5: bf935e6eca3a57defa13918661905cb0
SHA1: fb64ccac5c27dca8819418eb4e443a9f496d9ee7
SHA256: d8054ae7c0d1c2d2f55d28e46026ebe5892881f3fab5f439233184381c3b4a1f
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jackson-core High Vendor jar package name base Highest Vendor jar package name com Highest Vendor jar package name core Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name json Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-core Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name Jackson-core High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson-core Highest Product file name jackson-core High Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name base Highest Product jar package name com Highest Product jar package name core Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name json Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Product Manifest Bundle-Name Jackson-core Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Product Manifest Implementation-Title Jackson-core High Product Manifest multi-release true Low Product Manifest specification-title Jackson-core Medium Product pom artifactid jackson-core Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name Jackson-core High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson-core High Version file version 2.18.2 High Version Manifest Bundle-Version 2.18.2 High Version Manifest Implementation-Version 2.18.2 High Version pom version 2.18.2 Highest
Related Dependencies waffle-spring-boot-filter3-3.5.1.jar: jackson-annotations-2.18.2.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jackson-annotations-2.18.2.jar MD5: 79d38d3c51068a2bbc40268d02f80763 SHA1: 985d77751ebc7fce5db115a986bc9aa82f973f4a SHA256: 581bd61000ef7648943f781ca05689e56d03f6052748365a8e2b3a9b5d3fa32f pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2 waffle-spring-boot-filter3-3.5.1.jar: jackson-datatype-jdk8-2.18.2.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jackson-datatype-jdk8-2.18.2.jar MD5: 54d2dc0c44a7188884e8f22fddd947f6 SHA1: 9ed6d538ebcc66864e114a7040953dce6ab6ea53 SHA256: f30d77f5826b9e9813342e84ab412095ed4ed5cf4fef6f93cebb848cb0fd0294 pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.18.2 waffle-spring-boot-filter3-3.5.1.jar: jackson-datatype-jsr310-2.18.2.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jackson-datatype-jsr310-2.18.2.jar MD5: aaf3adb28aa9de74b3bb87118f93113f SHA1: 7b6ff96adf421f4c6edbd694e797dd8fe434510a SHA256: e2d202d4606e23aeaf8a5a9632db06f5fefd5b63d251c3f503f9faaa78530e5c pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.2 waffle-spring-boot-filter3-3.5.1.jar: jackson-module-parameter-names-2.18.2.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jackson-module-parameter-names-2.18.2.jar MD5: 6f9d0d83bd13043d1d50be46622d914d SHA1: 72960cb3277347a748911d100c3302d60e8a616a SHA256: 67a6a4b6b91f3d450df21e77417f400be663be0cf528e48349ccc381cf74b3b0 pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.18.2 Description:
General data-binding functionality for Jackson: works on core streaming API License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jackson-databind-2.18.2.jar
MD5: 1b56887bcd3eaea1ff710eb673e610b0
SHA1: deef8697b92141fb6caf7aa86966cff4eec9b04f
SHA256: 4b364e6850dc89172fcf1d4dd26b8ff5488eda44ff4657e22dd265203dd5ab3c
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jackson-databind High Vendor jar package name databind Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-databind Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name jackson-databind High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson Highest Product file name jackson-databind High Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product jar package name databind Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low Product Manifest Bundle-Name jackson-databind Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Product Manifest Implementation-Title jackson-databind High Product Manifest multi-release true Low Product Manifest specification-title jackson-databind Medium Product pom artifactid jackson-databind Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name jackson-databind High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson High Version file version 2.18.2 High Version Manifest Bundle-Version 2.18.2 High Version Manifest Implementation-Version 2.18.2 High Version pom version 2.18.2 Highest
Description:
Jakarta Annotations API License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
+GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jakarta.annotation-api-2.1.1.jar
MD5: 5dac2f68e8288d0add4dc92cb161711d
SHA1: 48b9bda22b091b1f48b13af03fe36db3be6e1ae3
SHA256: 5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jakarta.annotation-api High Vendor jar package name annotation Highest Vendor jar package name jakarta Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.annotation-api Medium Vendor Manifest extension-name jakarta.annotation Medium Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.annotation-api Low Vendor pom developer name Dmitry Kornilov Medium Vendor pom developer name Linda De Michiel Medium Vendor pom developer org Oracle Corp. Medium Vendor pom groupid jakarta.annotation Highest Vendor pom name Jakarta Annotations API High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Vendor pom url https://projects.eclipse.org/projects/ee4j.ca Highest Product file name jakarta.annotation-api High Product jar package name annotation Highest Product jar package name jakarta Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Annotations API Medium Product Manifest bundle-symbolicname jakarta.annotation-api Medium Product Manifest extension-name jakarta.annotation Medium Product pom artifactid jakarta.annotation-api Highest Product pom developer name Dmitry Kornilov Low Product pom developer name Linda De Michiel Low Product pom developer org Oracle Corp. Low Product pom groupid jakarta.annotation Highest Product pom name Jakarta Annotations API High Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Product pom url https://projects.eclipse.org/projects/ee4j.ca Medium Version file version 2.1.1 High Version Manifest Bundle-Version 2.1.1 High Version Manifest Implementation-Version 2.1.1 High Version pom parent-version 2.1.1 Low Version pom version 2.1.1 Highest
Description:
JUL to SLF4J bridge License:
http://www.opensource.org/licenses/mit-license.php File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\jul-to-slf4j-2.0.16.jar
MD5: 410ad2f2230e0150216d86e12a4af995
SHA1: 6d57da3e961daac65bcca0dd3def6cd11e48a24a
SHA256: 0f2ec396ea29c9a440890d1f09fdb82fdd574b47b298435764235451c193861d
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jul-to-slf4j High Vendor jar package name bridge Highest Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname jul.to.slf4j Medium Vendor Manifest multi-release true Low Vendor pom artifactid jul-to-slf4j Low Vendor pom groupid org.slf4j Highest Vendor pom name JUL to SLF4J bridge High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name jul-to-slf4j High Product jar package name bridge Highest Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name JUL to SLF4J bridge Medium Product Manifest bundle-symbolicname jul.to.slf4j Medium Product Manifest Implementation-Title jul-to-slf4j High Product Manifest multi-release true Low Product pom artifactid jul-to-slf4j Highest Product pom groupid org.slf4j Highest Product pom name JUL to SLF4J bridge High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.16 High Version Manifest Bundle-Version 2.0.16 High Version Manifest Implementation-Version 2.0.16 High Version pom version 2.0.16 Highest
Description:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\logback-core-1.5.12.jar
MD5: e381425e2c7eb1b0b0f3fa93f6c67355
SHA1: 65b1fa25fe8d8e4bdc140e79eb67ac6741f775e2
SHA256: 3f35b41621c2cbf72a9d9f3ce2270ba2040e4808bd6befdd720866e926d3e84a
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.8 Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name 21 Highest Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Implementation-Title Logback Core Module High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.8 Low Product Manifest specification-title Logback Core Module Medium Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.12 High Version Manifest Bundle-Version 1.5.12 High Version Manifest Implementation-Version 1.5.12 High Version pom version 1.5.12 Highest
CVE-2024-12798 (OSSINDEX)suppress
ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core
+ upto and including version 1.5.12 in Java applications allows
+ attacker to execute arbitrary code by compromising an existing
+ logback configuration file or by injecting an environment variable
+ before program execution.
+
+
+
+
+
+Malicious logback configuration files can allow the attacker to execute
+arbitrary code using the JaninoEventEvaluator extension.
+
+
+
+A successful attack requires the user to have write access to a
+configuration file. Alternatively, the attacker could inject a malicious
+environment variable pointing to a malicious configuration file. In both
+cases, the attack requires existing privilege. CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVSSv2:
Base Score: MEDIUM (5.900000095367432) Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:ch.qos.logback:logback-core:1.5.12:*:*:*:*:*:*:* CVE-2024-12801 (OSSINDEX)suppress
Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 1.5.12 on the Java platform, allows an attacker to
+forge requests by compromising logback configuration files in XML.
+
+
+
+The attacks involves the modification of DOCTYPE declaration in XML configuration files.
+
+Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2024-12801 for details CWE-918 Server-Side Request Forgery (SSRF)
CVSSv2:
Base Score: LOW (2.4000000953674316) Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:L/SC:H/SI:H/SA:H References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:ch.qos.logback:logback-core:1.5.12:*:*:*:*:*:*:* File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\micrometer-commons-1.14.2.jarMD5: 534f518acc64c3bd5a9de436130f407bSHA1: 69c454dbec59c7842cf59a534b7ec03618d75b91SHA256: d1ff22870b51a59a1d3047580a99c703b165e01ae933c06b713ec9a1826cc753Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name micrometer-commons High Vendor jar package name common Low Vendor jar package name io Low Vendor jar package name micrometer Highest Vendor jar package name micrometer Low Vendor Manifest automatic-module-name micrometer.commons Medium Vendor Manifest branch HEAD Low Vendor Manifest build-date 2024-12-10_10:18:33 Low Vendor Manifest build-date-utc 2024-12-10T10:18:33.878998962Z Low Vendor Manifest build-host 183180b9f3cd Low Vendor Manifest build-job deploy Low Vendor Manifest build-number 40141 Low Vendor Manifest build-timezone Etc/UTC Low Vendor Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/40141 Low Vendor Manifest built-os Linux Low Vendor Manifest built-status release Low Vendor Manifest bundle-symbolicname micrometer-commons Medium Vendor Manifest change 4f534a7 Low Vendor Manifest full-change 4f534a77397d189e204a6a087fac3462d832dabf Low Vendor Manifest module-email tludwig@vmware.com Low Vendor Manifest module-origin micrometer-metrics/micrometer.git Low Vendor Manifest module-owner tludwig@vmware.com Low Vendor Manifest module-source /micrometer-commons Low Product file name micrometer-commons High Product jar package name common Low Product jar package name io Highest Product jar package name micrometer Highest Product jar package name micrometer Low Product Manifest automatic-module-name micrometer.commons Medium Product Manifest branch HEAD Low Product Manifest build-date 2024-12-10_10:18:33 Low Product Manifest build-date-utc 2024-12-10T10:18:33.878998962Z Low Product Manifest build-host 183180b9f3cd Low Product Manifest build-job deploy Low Product Manifest build-number 40141 Low Product Manifest build-timezone Etc/UTC Low Product Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/40141 Low Product Manifest built-os Linux Low Product Manifest built-status release Low Product Manifest Bundle-Name micrometer-commons Medium Product Manifest bundle-symbolicname micrometer-commons Medium Product Manifest change 4f534a7 Low Product Manifest full-change 4f534a77397d189e204a6a087fac3462d832dabf Low Product Manifest Implementation-Title io.micrometer#micrometer-commons;1.14.2 High Product Manifest module-email tludwig@vmware.com Low Product Manifest module-origin micrometer-metrics/micrometer.git Low Product Manifest module-owner tludwig@vmware.com Low Product Manifest module-source /micrometer-commons Low Version file version 1.14.2 High Version Manifest Implementation-Version 1.14.2 High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\micrometer-observation-1.14.2.jarMD5: b8dcb10fa3bdd5ca79dd8763102abdc4SHA1: a9cad29cc04c0f7e30e3e58b454d4cd47ccc54bdSHA256: 7c639c9a028327f362360c3246e50613f8e120031575ceb557b2ba5feac917aaReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name micrometer-observation High Vendor jar package name io Low Vendor jar package name micrometer Highest Vendor jar package name micrometer Low Vendor jar package name observation Highest Vendor jar package name observation Low Vendor Manifest automatic-module-name micrometer.observation Medium Vendor Manifest branch HEAD Low Vendor Manifest build-date 2024-12-10_10:18:34 Low Vendor Manifest build-date-utc 2024-12-10T10:18:34.344374015Z Low Vendor Manifest build-host 183180b9f3cd Low Vendor Manifest build-job deploy Low Vendor Manifest build-number 40141 Low Vendor Manifest build-timezone Etc/UTC Low Vendor Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/40141 Low Vendor Manifest built-os Linux Low Vendor Manifest built-status release Low Vendor Manifest bundle-symbolicname micrometer-observation Medium Vendor Manifest change 4f534a7 Low Vendor Manifest full-change 4f534a77397d189e204a6a087fac3462d832dabf Low Vendor Manifest module-email tludwig@vmware.com Low Vendor Manifest module-origin micrometer-metrics/micrometer.git Low Vendor Manifest module-owner tludwig@vmware.com Low Vendor Manifest module-source /micrometer-observation Low Product file name micrometer-observation High Product jar package name io Highest Product jar package name micrometer Highest Product jar package name micrometer Low Product jar package name observation Highest Product jar package name observation Low Product Manifest automatic-module-name micrometer.observation Medium Product Manifest branch HEAD Low Product Manifest build-date 2024-12-10_10:18:34 Low Product Manifest build-date-utc 2024-12-10T10:18:34.344374015Z Low Product Manifest build-host 183180b9f3cd Low Product Manifest build-job deploy Low Product Manifest build-number 40141 Low Product Manifest build-timezone Etc/UTC Low Product Manifest build-url https://circleci.com/gh/micrometer-metrics/micrometer/40141 Low Product Manifest built-os Linux Low Product Manifest built-status release Low Product Manifest Bundle-Name micrometer-observation Medium Product Manifest bundle-symbolicname micrometer-observation Medium Product Manifest change 4f534a7 Low Product Manifest full-change 4f534a77397d189e204a6a087fac3462d832dabf Low Product Manifest Implementation-Title io.micrometer#micrometer-observation;1.14.2 High Product Manifest module-email tludwig@vmware.com Low Product Manifest module-origin micrometer-metrics/micrometer.git Low Product Manifest module-owner tludwig@vmware.com Low Product Manifest module-source /micrometer-observation Low Version file version 1.14.2 High Version Manifest Implementation-Version 1.14.2 High
Description:
YAML 1.1 parser and emitter for Java License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\snakeyaml-2.3.jar
MD5: 2a1c2ee8923dcd6bd6d025751af5df37
SHA1: 936b36210e27320f920536f695cf1af210c44586
SHA256: 63a76fe66b652360bd4c2c107e6f0258daa7d4bb492008ba8c26fcd230ff9146
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name snakeyaml High Vendor jar package name emitter Highest Vendor jar package name org Highest Vendor jar package name parser Highest Vendor jar package name snakeyaml Highest Vendor jar package name yaml Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-symbolicname org.yaml.snakeyaml Medium Vendor Manifest multi-release true Low Vendor pom artifactid snakeyaml Low Vendor pom developer email alexander.maslov@gmail.com Low Vendor pom developer email public.somov@gmail.com Low Vendor pom developer id asomov Medium Vendor pom developer id maslovalex Medium Vendor pom developer name Alexander Maslov Medium Vendor pom developer name Andrey Somov Medium Vendor pom groupid org.yaml Highest Vendor pom name SnakeYAML High Vendor pom url https://bitbucket.org/snakeyaml/snakeyaml Highest Product file name snakeyaml High Product jar package name emitter Highest Product jar package name org Highest Product jar package name parser Highest Product jar package name snakeyaml Highest Product jar package name yaml Highest Product Manifest build-jdk-spec 11 Low Product Manifest Bundle-Name SnakeYAML Medium Product Manifest bundle-symbolicname org.yaml.snakeyaml Medium Product Manifest multi-release true Low Product pom artifactid snakeyaml Highest Product pom developer email alexander.maslov@gmail.com Low Product pom developer email public.somov@gmail.com Low Product pom developer id asomov Low Product pom developer id maslovalex Low Product pom developer name Alexander Maslov Low Product pom developer name Andrey Somov Low Product pom groupid org.yaml Highest Product pom name SnakeYAML High Product pom url https://bitbucket.org/snakeyaml/snakeyaml Medium Version file version 2.3 High Version pom version 2.3 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-aop-6.2.1.jarMD5: ebfcdfe96624e5a3de3d0d6522c8593aSHA1: a9384de38fc00751084446ba014a0c4962240244SHA256: a9cb0dddec1312c1cc6bc6a1762ad880f0e8b2a82ea2243b91abf2ac9debb86bReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-aop High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name aop Highest Vendor jar package name aop Low Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.aop Medium Product file name spring-aop High Product jar package name aop Highest Product jar package name aop Low Product Manifest automatic-module-name spring.aop Medium Product Manifest Implementation-Title spring-aop High Version file version 6.2.1 High Version Manifest Implementation-Version 6.2.1 High
Related Dependencies waffle-spring-boot-filter3-3.5.1.jar: spring-beans-6.2.1.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-beans-6.2.1.jar MD5: 8478f819bdba583b002b45fcfc44c7fb SHA1: ab57ec03ba6900075bf28e3cd70ccce173205b8d SHA256: 3afc928c036bc557b650df75ae33ccdd440bc48f9184d19b463df0d2ea74c509 waffle-spring-boot-filter3-3.5.1.jar: spring-context-6.2.1.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-context-6.2.1.jar MD5: 6c650372cd5aef72f5cd4eea1194ef60 SHA1: f56c7431b03860bfdb016e68f484c5c35531ef2e SHA256: 226617237451b420f5742517d1aaa27fb20bb3dbe23db6fb5ea1570bf97ce162 waffle-spring-boot-filter3-3.5.1.jar: spring-expression-6.2.1.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-expression-6.2.1.jar MD5: cba4fb289daba10c26882d49062e3e6d SHA1: 91fcf6b9501705c31c8337e2713fe823bb512b24 SHA256: e4efd330d907a506a4ebc558f5ab2f2320a399527474c95316c16d510c9e222e waffle-spring-boot-filter3-3.5.1.jar: spring-jcl-6.2.1.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-jcl-6.2.1.jar MD5: 0580c8806b325bd0fcc984ae7a5e8b45 SHA1: a5d662d64470aff0ae51d210147bb6ede31a8ea3 SHA256: 83604b743df124b064836bc930d7e7c8e81832144b9e4292e7b816fca0cd42cd waffle-spring-boot-filter3-3.5.1.jar: spring-webmvc-6.2.1.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-webmvc-6.2.1.jar MD5: 44c1d4bf31b0c81eab2ba9e5d27d80f3 SHA1: 44bdf7e5641d44044ac52d7bb5c1fc46004e7754 SHA256: 42ba27630eb6acb1f2e236ced1f5679eed6037277b06986d7e2cf009537757be File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-boot-3.4.1.jarMD5: 4f7d4f6624312c1ae78bb8a1dd208c80SHA1: 5fb9890a5eb7c4e86c8f5c0f6960b79240daf3d5SHA256: 3dffc999ac8eee6b51e8eb9a73c9f29f2a28b7f0f359d45b89aea486268190faReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-boot High Vendor jar package name boot Highest Vendor jar package name boot Low Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.boot Medium Vendor Manifest build-jdk-spec 17 Low Product file name spring-boot High Product jar package name boot Highest Product jar package name boot Low Product Manifest automatic-module-name spring.boot Medium Product Manifest build-jdk-spec 17 Low Product Manifest Implementation-Title Spring Boot High Version file version 3.4.1 High Version Manifest Implementation-Version 3.4.1 High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-boot-autoconfigure-3.4.1.jarMD5: 6e083185619b2dd1fe6dd0b60147f599SHA1: f17b54cc5816ec8f06d0aca9df11c330ead97f2aSHA256: dc68c9d977455fb23232cf0771a9079b9e44e246acdc62d872d8acd45edf4783Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-boot-autoconfigure High Vendor jar package name autoconfigure Highest Vendor jar package name autoconfigure Low Vendor jar package name boot Highest Vendor jar package name boot Low Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.boot.autoconfigure Medium Vendor Manifest build-jdk-spec 17 Low Product file name spring-boot-autoconfigure High Product jar package name autoconfigure Highest Product jar package name autoconfigure Low Product jar package name boot Highest Product jar package name boot Low Product Manifest automatic-module-name spring.boot.autoconfigure Medium Product Manifest build-jdk-spec 17 Low Product Manifest Implementation-Title Spring Boot AutoConfigure High Version file version 3.4.1 High Version Manifest Implementation-Version 3.4.1 High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-boot-jarmode-tools-3.4.1.jarMD5: 7066088921eb6522e153058109b516d1SHA1: 5d8b97e9934374611748c4db7a6add2ff30090cbSHA256: fbe1ff6909daae53a0ead324efd7f3bec7e5407b392283d88ccd5e3ec29c771bReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-boot-jarmode-tools High Vendor jar package name boot Highest Vendor jar package name boot Low Vendor jar package name jarmode Highest Vendor jar package name jarmode Low Vendor jar package name springframework Low Vendor jar package name tools Highest Vendor Manifest automatic-module-name spring.boot.jarmode.tools Medium Vendor Manifest build-jdk-spec 17 Low Product file name spring-boot-jarmode-tools High Product jar package name boot Highest Product jar package name boot Low Product jar package name jarmode Highest Product jar package name jarmode Low Product jar package name tools Highest Product jar package name tools Low Product Manifest automatic-module-name spring.boot.jarmode.tools Medium Product Manifest build-jdk-spec 17 Low Product Manifest Implementation-Title Spring Boot Jarmode Tools High Version file version 3.4.1 High Version Manifest Implementation-Version 3.4.1 High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-core-6.2.1.jarMD5: 394df39af63d06af987c5629c15c3154SHA1: f42e6b51d9c0c2fcf95df9e5848470d173adc9afSHA256: 67f0e17811dc8d5d6c3aed5540afaee02c83e3a8b3f9abbc510d4d95db5cc226Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.core Medium Vendor Manifest multi-release true Low Product file name spring-core High Product hint analyzer product springsource_spring_framework Highest Product jar package name core Highest Product Manifest automatic-module-name spring.core Medium Product Manifest Implementation-Title spring-core High Product Manifest multi-release true Low Version file version 6.2.1 High Version Manifest Implementation-Version 6.2.1 High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-security-core-6.4.2.jarMD5: 495087db51c5f60a47680ffbbf2dcb65SHA1: 51302b2af3f01eb79fdc7164a4cc3a3aa7e3b541SHA256: 6b8f4d017c6926d351710604f71f91e9b810b3c2b759ede76f606b4e1942cdccReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-security-core High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name core Highest Vendor jar package name security Highest Vendor jar package name security Low Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.security.core Medium Product file name spring-security-core High Product jar package name core Highest Product jar package name security Highest Product jar package name security Low Product Manifest automatic-module-name spring.security.core Medium Product Manifest Implementation-Title spring-security-core High Version file version 6.4.2 High Version Manifest Implementation-Version 6.4.2 High
Related Dependencies waffle-spring-boot-filter3-3.5.1.jar: spring-security-config-6.4.2.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-security-config-6.4.2.jar MD5: 79be0e9518340dca861e0b47234a5dde SHA1: 5ed985329eb14b1c61045160c8dcbbcab179ddd3 SHA256: 5fab4c9578e52f034c20a1c7192c887f8e79aa08b9fd0c517a9e7aff05f70c70 waffle-spring-boot-filter3-3.5.1.jar: spring-security-crypto-6.4.2.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-security-crypto-6.4.2.jar MD5: be30b5edf5c7e976e3361f1af8a6e069 SHA1: a4d5bf27ca449200fc39e07de6ae016eb1ad21da SHA256: 00026ef0a248a208920c653abb6b6bfd0c896349dcdc6dda38af8776921d999c CVE-2018-1258 suppress
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted. CWE-863 Incorrect Authorization
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - THIRD_PARTY_ADVISORY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-security-web-6.4.2.jar\org\springframework\security\spring-security-webauthn.jsMD5: a1047a2317a49f0f2a7f25960435784dSHA1: 27fb3541c8f1d2fbdeaeab2f5fdc6c5712afcf6fSHA256: cc3fcb0966b1f9562ea3164ef59fad3131789744cdd598c18e3ddc74017f57a4Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-security-web-6.4.2.jarMD5: aac3216773e5e76ace30f4c434f0163eSHA1: 733a3bbbdca56225676fb7f4e3f317c2075fc383SHA256: bc625e47c2cbcd55da04a6939d786da789cb270cd06d418c1adecca165e1e0ffReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-security-web High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name security Highest Vendor jar package name security Low Vendor jar package name springframework Low Vendor jar package name web Highest Vendor jar package name web Low Vendor Manifest automatic-module-name spring.security.web Medium Product file name spring-security-web High Product jar package name security Highest Product jar package name security Low Product jar package name web Highest Product jar package name web Low Product Manifest automatic-module-name spring.security.web Medium Product Manifest Implementation-Title spring-security-web High Version file version 6.4.2 High Version Manifest Implementation-Version 6.4.2 High
CVE-2018-1258 suppress
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted. CWE-863 Incorrect Authorization
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - THIRD_PARTY_ADVISORY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\spring-web-6.2.1.jarMD5: 66614877f218caec4797e7bd5559198fSHA1: 877acb94c5b3a0c92e652b6bebdfdc7c60922ac8SHA256: 6bf5a036390de810a4e78a07a17051e7f222e802b2249bde18c05740504a7888Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-web High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name springframework Low Vendor jar package name web Highest Vendor jar package name web Low Vendor Manifest automatic-module-name spring.web Medium Product file name spring-web High Product jar package name web Highest Product jar package name web Low Product Manifest automatic-module-name spring.web Medium Product Manifest Implementation-Title spring-web High Version file version 6.2.1 High Version Manifest Implementation-Version 6.2.1 High
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\tomcat-embed-core-10.1.34.jar
MD5: 697a86b4e96b0e0bfc7790d4aad03fe7
SHA1: f610f84be607fbc82e393cc220f0ad45f92afc91
SHA256: 5817bbb6c3a8d405a9f51ea0d402786114b4e8fd6d7ac4dd23ca34ac8d38a593
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name tomcat-embed-core High Vendor jar package name apache Highest Vendor jar package name apache Low Vendor jar package name core Highest Vendor jar package name tomcat Highest Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaAuthentication;version:Version="3.0";uses:="jakarta.security.auth.message,jakarta.security.auth.message.callback,jakarta.security.auth.message.config,jakarta.security.auth.message.module",osgi.contract;osgi.contract=JakartaServlet;version:Version="6.0";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low Vendor Manifest specification-vendor Apache Software Foundation Low Vendor manifest: jakarta/security/auth/message/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/security/auth/message/callback/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/security/auth/message/config/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/security/auth/message/module/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/servlet/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/servlet/annotation/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/servlet/descriptor/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/servlet/http/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: jakarta/servlet/resources/ Implementation-Vendor Apache Software Foundation Medium Product file name tomcat-embed-core High Product jar package name annotation Highest Product jar package name apache Highest Product jar package name auth Highest Product jar package name core Highest Product jar package name descriptor Highest Product jar package name http Highest Product jar package name jakarta Highest Product jar package name message Highest Product jar package name security Highest Product jar package name servlet Highest Product jar package name tomcat Highest Product Manifest Bundle-Name tomcat-embed-core Medium Product Manifest bundle-symbolicname org.apache.tomcat-embed-core Medium Product Manifest Implementation-Title Apache Tomcat High Product Manifest provide-capability osgi.contract;osgi.contract=JakartaAuthentication;version:Version="3.0";uses:="jakarta.security.auth.message,jakarta.security.auth.message.callback,jakarta.security.auth.message.config,jakarta.security.auth.message.module",osgi.contract;osgi.contract=JakartaServlet;version:Version="6.0";uses:="jakarta.servlet,jakarta.servlet.annotation,jakarta.servlet.descriptor,jakarta.servlet.http,jakarta.servlet.resources" Low Product Manifest specification-title Apache Tomcat Medium Product manifest: jakarta/security/auth/message/ Implementation-Title jakarta.security.auth.message Medium Product manifest: jakarta/security/auth/message/ Specification-Title Jakarta Authentication SPI for Containers Medium Product manifest: jakarta/security/auth/message/callback/ Implementation-Title jakarta.security.auth.message Medium Product manifest: jakarta/security/auth/message/callback/ Specification-Title Jakarta Authentication SPI for Containers Medium Product manifest: jakarta/security/auth/message/config/ Implementation-Title jakarta.security.auth.message Medium Product manifest: jakarta/security/auth/message/config/ Specification-Title Jakarta Authentication SPI for Containers Medium Product manifest: jakarta/security/auth/message/module/ Implementation-Title jakarta.security.auth.message Medium Product manifest: jakarta/security/auth/message/module/ Specification-Title Jakarta Authentication SPI for Containers Medium Product manifest: jakarta/servlet/ Implementation-Title jakarta.servlet Medium Product manifest: jakarta/servlet/ Specification-Title Jakarta Servlet Medium Product manifest: jakarta/servlet/annotation/ Implementation-Title jakarta.servlet Medium Product manifest: jakarta/servlet/annotation/ Specification-Title Jakarta Servlet Medium Product manifest: jakarta/servlet/descriptor/ Implementation-Title jakarta.servlet Medium Product manifest: jakarta/servlet/descriptor/ Specification-Title Jakarta Servlet Medium Product manifest: jakarta/servlet/http/ Implementation-Title jakarta.servlet Medium Product manifest: jakarta/servlet/http/ Specification-Title Jakarta Servlet Medium Product manifest: jakarta/servlet/resources/ Implementation-Title jakarta.servlet Medium Product manifest: jakarta/servlet/resources/ Specification-Title Jakarta Servlet Medium Version file version 10.1.34 High Version Manifest Implementation-Version 10.1.34 High
Related Dependencies waffle-spring-boot-filter3-3.5.1.jar: tomcat-embed-websocket-10.1.34.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\tomcat-embed-websocket-10.1.34.jar MD5: 06387e32dee7984a6cacb765d8628c44 SHA1: eef6d430f34b6e393b8d9e40f10db9043732b4e5 SHA256: acbb59e0ada75ecc5d82a0513d453f036d87b53eed3c6537db3fbcb54105454b License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\tomcat-embed-el-10.1.34.jar
MD5: 0e6b9caed9d638343f532ccd365a9708
SHA1: d2b2daca3bc999c62e58ae36b45ba0582530fb25
SHA256: 54f10ed773387621f5c4fb7e526c2d1674f5d72fc4d86ed87238a750b7fdbfa0
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name tomcat-embed-el High Vendor jar package name apache Highest Vendor jar package name apache Low Vendor jar package name el Highest Vendor jar package name el Low Vendor Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="5.0";uses:="jakarta.el",osgi.service;objectClass:List="jakarta.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low Vendor Manifest specification-vendor Apache Software Foundation Low Vendor manifest: jakarta/el/ Implementation-Vendor Apache Software Foundation Medium Product file name tomcat-embed-el High Product jar package name apache Highest Product jar package name el Highest Product jar package name el Low Product jar package name expression Highest Product jar package name expressionfactory Highest Product jar package name expressionfactoryimpl Highest Product jar package name jakarta Highest Product Manifest Bundle-Name tomcat-embed-jasper-el Medium Product Manifest bundle-symbolicname org.apache.tomcat-embed-jasper-el Medium Product Manifest Implementation-Title Apache Tomcat High Product Manifest provide-capability osgi.contract;osgi.contract=JakartaExpressionLanguage;version:Version="5.0";uses:="jakarta.el",osgi.service;objectClass:List="jakarta.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="jakarta.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl" Low Product Manifest specification-title Apache Tomcat Medium Product manifest: jakarta/el/ Implementation-Title jakarta.annotation Medium Product manifest: jakarta/el/ Specification-Title Jakarta Expression Language Medium Version file version 10.1.34 High Version Manifest Implementation-Version 10.1.34 High
Description:
Spring Boot Filter 3 Demo for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jarMD5: 46d5ed2c51131d7e6316913bceea64dfSHA1: cfb0f66580411ceb60087c0b2b448acb10e2eb60SHA256: 979c9fa629a681971c2c0254842b1fb6ac6ded22a11c9f7d463c210afdbdc2f4Referenced In Project/Scope: waffle-distro:runtimewaffle-spring-boot-filter3-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-spring-boot-filter3 High Vendor jar package name boot Highest Vendor jar package name spring Highest Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.spring.boot.filter3.demo Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor Manifest spring-boot-classes BOOT-INF/classes/ Low Vendor Manifest spring-boot-classpath-index BOOT-INF/classpath.idx Low Vendor Manifest spring-boot-layers-index BOOT-INF/layers.idx Low Vendor Manifest spring-boot-lib BOOT-INF/lib/ Low Vendor pom artifactid waffle-spring-boot-filter3 Highest Vendor pom artifactid waffle-spring-boot-filter3 Low Vendor pom groupid com.github.waffle.demo Highest Vendor pom name waffle-spring-boot-filter3 High Vendor pom parent-artifactid waffle-demo-parent Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-spring-boot-filter3 High Product jar package name boot Highest Product jar package name boot-inf Highest Product jar package name classes Highest Product jar package name spring Highest Product jar package name waffle Highest Product Manifest automatic-module-name waffle.spring.boot.filter3.demo Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-spring-boot-filter3 High Product Manifest specification-title waffle-spring-boot-filter3 Medium Product Manifest spring-boot-classes BOOT-INF/classes/ Low Product Manifest spring-boot-classpath-index BOOT-INF/classpath.idx Low Product Manifest spring-boot-layers-index BOOT-INF/layers.idx Low Product Manifest spring-boot-lib BOOT-INF/lib/ Low Product pom artifactid waffle-spring-boot-filter3 Highest Product pom groupid com.github.waffle.demo Highest Product pom name waffle-spring-boot-filter3 High Product pom parent-artifactid waffle-demo-parent Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Spring Boot Starter for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-spring-boot2\waffle-spring-boot-starter2\target\waffle-spring-boot-starter2-3.5.1.jarMD5: e8af10b04a1e6369fb3c07a5dec15a8aSHA1: bfc2535f26008736be167c0a3f2d4cf9284f1157SHA256: 28153bf81d37d1458b4d34c9b5ecb212efc9da40e99f1be9fa6154628af633c5Referenced In Project/Scope: waffle-distro:runtimewaffle-spring-boot-starter2-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-spring-boot-starter2 High Vendor jar package name boot Highest Vendor jar package name spring Highest Vendor jar package name starter Highest Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.spring.boot.starter2 Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-spring-boot-starter2 Highest Vendor pom artifactid waffle-spring-boot-starter2 Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-spring-boot-starter2 High Vendor pom parent-artifactid waffle-spring-boot2 Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-spring-boot-starter2 High Product jar package name boot Highest Product jar package name spring Highest Product jar package name starter Highest Product jar package name waffle Highest Product Manifest automatic-module-name waffle.spring.boot.starter2 Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-spring-boot-starter2 High Product Manifest specification-title waffle-spring-boot-starter2 Medium Product pom artifactid waffle-spring-boot-starter2 Highest Product pom groupid com.github.waffle Highest Product pom name waffle-spring-boot-starter2 High Product pom parent-artifactid waffle-spring-boot2 Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: waffle-spring-boot-starter2-3.5.1.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\waffle-spring-boot-starter2-3.5.1.jar MD5: e8af10b04a1e6369fb3c07a5dec15a8a SHA1: bfc2535f26008736be167c0a3f2d4cf9284f1157 SHA256: 28153bf81d37d1458b4d34c9b5ecb212efc9da40e99f1be9fa6154628af633c5 pkg:maven/com.github.waffle/waffle-spring-boot-starter2@3.5.1 Description:
Spring Boot Starter for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-spring-boot3\waffle-spring-boot-starter3\target\waffle-spring-boot-starter3-3.5.1.jarMD5: bfad1261182f861504a5790e584c612bSHA1: 347ef79afa2b56ceab6bd3495e60f10496389b72SHA256: 1e3f4c6d1f69f7d9c3a7ff23420d7ecee74ec5add8daee21adc26fb8d324a109Referenced In Project/Scope: waffle-distro:runtimewaffle-spring-boot-starter3-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-spring-boot-starter3 High Vendor jar package name boot Highest Vendor jar package name spring Highest Vendor jar package name starter Highest Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.spring.boot.starter3 Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-spring-boot-starter3 Highest Vendor pom artifactid waffle-spring-boot-starter3 Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-spring-boot-starter3 High Vendor pom parent-artifactid waffle-spring-boot3 Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-spring-boot-starter3 High Product jar package name boot Highest Product jar package name spring Highest Product jar package name starter Highest Product jar package name waffle Highest Product Manifest automatic-module-name waffle.spring.boot.starter3 Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-spring-boot-starter3 High Product Manifest specification-title waffle-spring-boot-starter3 Medium Product pom artifactid waffle-spring-boot-starter3 Highest Product pom groupid com.github.waffle Highest Product pom name waffle-spring-boot-starter3 High Product pom parent-artifactid waffle-spring-boot3 Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Related Dependencies waffle-spring-boot-filter3-3.5.1.jar: waffle-spring-boot-starter3-3.5.1.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\waffle-spring-boot-starter3-3.5.1.jar MD5: bfad1261182f861504a5790e584c612b SHA1: 347ef79afa2b56ceab6bd3495e60f10496389b72 SHA256: 1e3f4c6d1f69f7d9c3a7ff23420d7ecee74ec5add8daee21adc26fb8d324a109 pkg:maven/com.github.waffle/waffle-spring-boot-starter3@3.5.1 Description:
+ Byte Buddy is a Java library for creating Java classes at run time.
+ This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
+ License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\byte-buddy-1.15.11.jar
MD5: 603bc53c7a294f23765bfb7e1820ad44
SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c
SHA256: fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy High Vendor jar package name asm Highest Vendor jar package name build Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy (without dependencies) High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy High Product jar package name asm Highest Product jar package name build Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Product Manifest multi-release true Low Product pom artifactid byte-buddy Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy (without dependencies) High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86-64\attach_hotspot_windows.dllMD5: 053a783e5777c6a9867c27d51af89677SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76SHA256: 16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86\attach_hotspot_windows.dllMD5: fbca33102ac97be0ed496c0f78e466b3SHA1: c4df05146a86a6d073769bb697d550ef42518ed5SHA256: 810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
Description:
The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar
MD5: 449a1534609bf3535d74cbb10b4ed074
SHA1: a38b16385e867f59a641330f0362ebe742788ed8
SHA256: 316d2c0795c2a4d4c4756f2e6f9349837c7430ac34e0477ead874d05f5cc19e5
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy-agent High Vendor jar package name agent Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Vendor Manifest can-redefine-classes true Low Vendor Manifest can-retransform-classes true Low Vendor Manifest can-set-native-method-prefix true Low Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy-agent Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy agent High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy-agent High Product jar package name agent Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy agent Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Product Manifest can-redefine-classes true Low Product Manifest can-retransform-classes true Low Product Manifest can-set-native-method-prefix true Low Product Manifest multi-release true Low Product pom artifactid byte-buddy-agent Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy agent High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
Description:
A high performance caching library License:
https://www.apache.org/licenses/LICENSE-2.0 File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\caffeine-3.1.8.jar
MD5: b19301179903e8781776397d9923f7c8
SHA1: 24795585df8afaf70a2cd534786904ea5889c047
SHA256: 7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name caffeine High Vendor jar package name benmanes Highest Vendor jar package name benmanes Low Vendor jar package name caffeine Highest Vendor jar package name caffeine Low Vendor jar package name github Highest Vendor jar package name github Low Vendor Manifest automatic-module-name com.github.benmanes.caffeine Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Product file name caffeine High Product jar package name benmanes Highest Product jar package name benmanes Low Product jar package name cache Low Product jar package name caffeine Highest Product jar package name caffeine Low Product jar package name github Highest Product Manifest automatic-module-name com.github.benmanes.caffeine Medium Product Manifest build-jdk-spec 11 Low Product Manifest Bundle-Name com.github.ben-manes.caffeine Medium Product Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Product Manifest Implementation-Title A high performance caching library High Version file version 3.1.8 High Version Manifest Implementation-Version 3.1.8 High
License:
MIT File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\checker-qual-3.48.1.jar
MD5: 1594c16f661bec96488b56d4d5b56582
SHA1: 7d8cf1c00aec0042df92f8d71d7f15baaf9773f4
SHA256: 21e8dfe8103e125d96a329653ca81e87ac430326dbdbf299cea3dc1ae3f039a2
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name checker-qual High Vendor jar package name checker Highest Vendor jar package name checker Low Vendor jar package name checkerframework Low Vendor jar package name qual Highest Vendor Manifest bundle-symbolicname checker-qual Medium Vendor Manifest implementation-url https://checkerframework.org Low Product file name checker-qual High Product jar package name checker Highest Product jar package name checker Low Product jar package name checkerframework Highest Product jar package name qual Highest Product jar package name qual Low Product Manifest Bundle-Name checker-qual Medium Product Manifest bundle-symbolicname checker-qual Medium Product Manifest implementation-url https://checkerframework.org Low Version file version 3.48.1 High Version Manifest Implementation-Version 3.48.1 High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-aarch64\jnidispatch.dllMD5: 302945a811fd8e21bcdd5226c73b6f74SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607cSHA256: b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699dReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86-64\jnidispatch.dllMD5: 2d2475f1f026dd54e9f3e787ae4f81daSHA1: 27ff882ac271db547aee520b38e3ba9aa91e136cSHA256: 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86\jnidispatch.dllMD5: 0caa1ef75a807f9dde05084fa2219a5cSHA1: 2f5e1cd82cde192905c7510ce99037b67d980640SHA256: 752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
Description:
JNA Library File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\jna-5.16.0.jarMD5: accc2e2b8676434a87f4f73fb4d90b44SHA1: ebea09f91dc9f7048099f963fb8d6f919f0a4d9cSHA256: 3f5233589a799eb66dc2969afa3433fb56859d3d787c58b9bc7dd9e86f0a250cReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jna High Vendor jar package name jna Highest Vendor jar package name jna Low Vendor jar package name sun Highest Vendor jar package name sun Low Vendor jar (hint) package name oracle Highest Vendor jar (hint) package name oracle Low Vendor Manifest automatic-module-name com.sun.jna Medium Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-category jni Low Vendor Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname com.sun.jna Medium Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest specification-vendor JNA Development Team Low Product file name jna High Product jar package name jna Highest Product jar package name jna Low Product jar package name library Highest Product jar package name native Highest Product jar package name sun Highest Product jar package name win32 Highest Product Manifest automatic-module-name com.sun.jna Medium Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-category jni Low Product Manifest Bundle-Name jna Medium Product Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname com.sun.jna Medium Product Manifest Implementation-Title com.sun.jna High Product Manifest specification-title Java Native Access (JNA) Medium Version file name jna Medium Version file version 5.16.0 High Version jar package name jna Highest Version jar package name sun Highest Version jar package name win32 Highest Version Manifest Bundle-Version 5.16.0 High Version Manifest Implementation-Version 5.16.0 (b0) High
cpe:2.3:a:oracle:java_se:5.16.0:*:*:*:*:*:*:* (Confidence :Low) suppress Description:
JNA Platform Library File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\jna-platform-5.16.0.jarMD5: 12ba6b7a7752ecf0a5baed725f3192c2SHA1: b2a9065f97c166893d504b164706512338e3bbc2SHA256: e5a79523964509757555782bb60283e4902611013f107e4600dc93298f73f382Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jna-platform High Vendor jar package name jna Highest Vendor jar package name jna Low Vendor jar package name platform Highest Vendor jar package name platform Low Vendor jar package name sun Highest Vendor jar package name sun Low Vendor jar (hint) package name oracle Highest Vendor jar (hint) package name oracle Low Vendor Manifest automatic-module-name com.sun.jna.platform Medium Vendor Manifest bundle-category jni Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor Manifest bundle-symbolicname com.sun.jna.platform Medium Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest require-bundle com.sun.jna;bundle-version="5.16.0" Low Vendor Manifest specification-vendor JNA Development Team Low Product file name jna-platform High Product jar package name jna Highest Product jar package name jna Low Product jar package name platform Highest Product jar package name platform Low Product jar package name sun Highest Product jar package name win32 Low Product Manifest automatic-module-name com.sun.jna.platform Medium Product Manifest bundle-category jni Low Product Manifest Bundle-Name jna-platform Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product Manifest bundle-symbolicname com.sun.jna.platform Medium Product Manifest Implementation-Title com.sun.jna High Product Manifest require-bundle com.sun.jna;bundle-version="5.16.0" Low Product Manifest specification-title Java Native Access (JNA) Medium Version file name jna-platform Medium Version file version 5.16.0 High Version jar package name jna Highest Version jar package name sun Highest Version Manifest Bundle-Version 5.16.0 High Version Manifest Implementation-Version 5.16.0 (b0) High
Description:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\logback-core-1.5.15.jar
MD5: 932d68eb5c938eee29ddd0f47c0cf31b
SHA1: 81633c8360b7e5b4edc52ca908bf14de0b73ef05
SHA256: 695bc40dd790cb710575f768e37b8eb12f814d84b008011a2ef85d5daaafa745
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name 21 Highest Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Implementation-Title Logback Core Module High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Logback Core Module Medium Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.15 High Version Manifest Bundle-Version 1.5.15 High Version Manifest Implementation-Version 1.5.15 High Version pom version 1.5.15 Highest
Related Dependencies waffle-spring-filter.war: logback-classic-1.5.15.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\logback-classic-1.5.15.jar MD5: 042b4c78d1f6b7e862cc3de54e995642 SHA1: 07f8d6371626833bd1a232fe35490edffe04e5b3 SHA256: 5832abd425fc3036182f02931e9a121e7b464ddf2323ef7361b863570d3c8aa2 pkg:maven/ch.qos.logback/logback-classic@1.5.15 Description:
The slf4j API License:
http://www.opensource.org/licenses/mit-license.php File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\slf4j-api-2.0.15.jar
MD5: 357e4a230bfd9a2c303f25a3f2ade4c2
SHA1: 35ed0d9a6b7c011bb8656087f79e371263b3b485
SHA256: 5bfda32d723dde8ccef9db6bdc2537dabdb87321597c7e00e66a73a5777fbb24
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name slf4j-api High Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor Manifest multi-release true Low Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name SLF4J API Module Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product Manifest multi-release true Low Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.15 High Version Manifest Bundle-Version 2.0.15 High Version Manifest Implementation-Version 2.0.15 High Version pom version 2.0.15 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\spring-aop-5.3.39.jarMD5: 47ef8946ec3f2f76f83cda172b9fd964SHA1: 3af1f0d73ec1e031c7083c848342989f413ca275SHA256: aa706e4f749982c0bae5fa637433c44c24f0fff5d16dc41deea6d30c3dfa7c85Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-aop High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name aop Highest Vendor jar package name aop Low Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.aop Medium Product file name spring-aop High Product jar package name aop Highest Product jar package name aop Low Product Manifest automatic-module-name spring.aop Medium Product Manifest Implementation-Title spring-aop High Version file version 5.3.39 High Version Manifest Implementation-Version 5.3.39 High
Related Dependencies waffle-spring-filter.war: spring-beans-5.3.39.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\spring-beans-5.3.39.jar MD5: c2f99040fb8b0bc98515c87b968227d3 SHA1: 87770ce736cbd777c07866cbc8a06b879765e3c8 SHA256: b6697a5d8facb81aa75e5a46d959d4256da9ce3b40d33f3b5bbd42a8b1ed5722 waffle-spring-filter.war: spring-context-5.3.39.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\spring-context-5.3.39.jar MD5: 167e95de6f9de58b1ffff09990237021 SHA1: 286538ca4b3890192d63c88fdd1616adde17dc0e SHA256: 9e644fc33bece9a9cb82538167a1b9640ae7b7d80252e893d89b8926a2f81633 waffle-spring-filter.war: spring-expression-5.3.39.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\spring-expression-5.3.39.jar MD5: 41198683f2d488b4b2038b7d8e4b6d81 SHA1: 25cf07399eb7ac3fc13888b20dc4d67124ec75bd SHA256: d5337774d889fcdc9c08b0c8b8aaa1018d4c95b9b441db0118f7ae4d328f2810 waffle-spring-filter.war: spring-jcl-5.3.39.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\spring-jcl-5.3.39.jar MD5: b1e50a7529d9f3f87079542a03191729 SHA1: 45181955845ae69c51c72746f00200f7babca558 SHA256: adbe656fc622e2457fefa09529d4b7c1126a3c4ff1c9306907764fcc93f1b725 File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\spring-core-5.3.39.jarMD5: 632d2a8c30962a69273775968c052651SHA1: d2bff2eedf27b51d6ef9a2fc892aaff5b7a768ddSHA256: 3a1ddcf05420a9181bd9cacb6062a3edc493e14d555961ad50e1a6360eb1e75fReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name core Low Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.core Medium Product file name spring-core High Product hint analyzer product springsource_spring_framework Highest Product jar package name core Highest Product jar package name core Low Product Manifest automatic-module-name spring.core Medium Product Manifest Implementation-Title spring-core High Version file version 5.3.39 High Version Manifest Implementation-Version 5.3.39 High
CVE-2016-1000027 suppress
Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. NOTE: the vendor's position is that untrusted data is not an intended use case. The product's behavior will not be changed because some users rely on deserialization of trusted data. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
af854a3a-2127-422b-91ae-364da2661108 - BROKEN_LINK,EXPLOIT,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - RELEASE_NOTES,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY cve@mitre.org - BROKEN_LINK,EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY Vulnerable Software & Versions:
CVE-2024-38820 suppress
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected. NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\spring-security-core-5.8.16.jarMD5: c70ae997256d27ca6fb1c7a8b24e4248SHA1: b3d21a1f967db39dabaca487ba3fe58972e6a9a5SHA256: 3be7d217048f5ea76fd6d0eddaa3169ad3bee0bba9c456e27670ec37ca33c3fdReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-security-core High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name core Highest Vendor jar package name security Highest Vendor jar package name security Low Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.security.core Medium Product file name spring-security-core High Product jar package name core Highest Product jar package name security Highest Product jar package name security Low Product Manifest automatic-module-name spring.security.core Medium Product Manifest Implementation-Title spring-security-core High Version file version 5.8.16 High Version Manifest Implementation-Version 5.8.16 High
Related Dependencies waffle-spring-filter.war: spring-security-config-5.8.16.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\spring-security-config-5.8.16.jar MD5: 1e386c77733c252f4b9a80904ccb1c00 SHA1: 73bff85307254de9f30514db587420110aee72ee SHA256: fb7218cd28ca5f82bafd4cc038d1727fc99ccfb0f3b38a8fc0545a93e9b2f8b5 waffle-spring-filter.war: spring-security-crypto-5.8.16.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\spring-security-crypto-5.8.16.jar MD5: 987ca02bb810d32c7d86968ff84e887c SHA1: 340f3bb882bea8e9eafc66671d4c8e50f11867a7 SHA256: e47acdd647997efb36609698b64a2bec37fa119210f88fad813aa53610433cfd CVE-2018-1258 suppress
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted. CWE-863 Incorrect Authorization
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - THIRD_PARTY_ADVISORY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\spring-security-web-5.8.16.jarMD5: 137862bb11c72092dd94d14d380fc784SHA1: fade885f7f9df056dd5e3592d949e888cd82397dSHA256: fe0843587f4dff188a1ecb822bf544c5f1c1ee46c757858a5a585039d8118304Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-security-web High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name security Highest Vendor jar package name security Low Vendor jar package name springframework Low Vendor jar package name web Highest Vendor jar package name web Low Vendor Manifest automatic-module-name spring.security.web Medium Product file name spring-security-web High Product jar package name security Highest Product jar package name security Low Product jar package name web Highest Product jar package name web Low Product Manifest automatic-module-name spring.security.web Medium Product Manifest Implementation-Title spring-security-web High Version file version 5.8.16 High Version Manifest Implementation-Version 5.8.16 High
CVE-2018-1258 suppress
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted. CWE-863 Incorrect Authorization
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - THIRD_PARTY_ADVISORY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\spring-web-5.3.39.jarMD5: 2b940bc714d6e29570b5dfa92755eefcSHA1: 4ab03cd7376a6b3365d2798aac8d01dcd22c0174SHA256: 444f243b936119b5488029f2d9399a3980855c60b493b9e2811464c6433a2b71Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-web High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name springframework Low Vendor jar package name web Highest Vendor jar package name web Low Vendor Manifest automatic-module-name spring.web Medium Product file name spring-web High Product jar package name web Highest Product jar package name web Low Product Manifest automatic-module-name spring.web Medium Product Manifest Implementation-Title spring-web High Version file version 5.3.39 High Version Manifest Implementation-Version 5.3.39 High
Description:
WAFFLE JNA implementation File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\waffle-jna-3.5.1.jarMD5: 8f889b8ad9082149f803d47b3bd83a4bSHA1: 9201f109062b3abcd69e115ede76c2440ff69455SHA256: 38ebb57398270ec4f9b4d31dd3851bbfc5687694ac099d686b39ed706b046590Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name waffle-jna High Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.jna Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-jna Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-jna High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-jna High Product jar package name waffle Highest Product Manifest automatic-module-name waffle.jna Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-jna High Product Manifest specification-title waffle-jna Medium Product pom artifactid waffle-jna Highest Product pom groupid com.github.waffle Highest Product pom name waffle-jna High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Spring Security 5 integration for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.war\WEB-INF\lib\waffle-spring-security5-3.5.1.jarMD5: 25ca82bacda5e5a0bdf83434993f2105SHA1: a8dcf769acf0aeb81c5932f416b07f31eb1857d7SHA256: 41cfcb5b1a808ab399f8d53d414924dc15e6cc2a8624677f09220ab5eb4d0b5fReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name waffle-spring-security5 High Vendor jar package name spring Highest Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.spring.security5 Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-spring-security5 Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-spring-security5 High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-spring-security5 High Product jar package name spring Highest Product jar package name waffle Highest Product Manifest automatic-module-name waffle.spring.security5 Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-spring-security5 High Product Manifest specification-title waffle-spring-security5 Medium Product pom artifactid waffle-spring-security5 Highest Product pom groupid com.github.waffle Highest Product pom name waffle-spring-security5 High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Spring Filter Demo for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-filter\target\waffle-spring-filter.warMD5: b8f1e8e5ea3ab6af4408486a38d56949SHA1: cb9d7dadf93beab091de1de8d2f19976f31121f3SHA256: 21cb767036977f971911c9ddf7a49763bfd4688a8c6269552b7897be1473b8c2Referenced In Project/Scope: waffle-distro:runtimewaffle-spring-filter.war is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-spring-filter High Vendor Manifest automatic-module-name waffle.spring.filter.demo Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest build-number Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-spring-filter Highest Vendor pom artifactid waffle-spring-filter Low Vendor pom groupid com.github.waffle.demo Highest Vendor pom name waffle-spring-filter High Vendor pom parent-artifactid waffle-demo-parent Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-spring-filter High Product Manifest automatic-module-name waffle.spring.filter.demo Medium Product Manifest build-jdk-spec 21 Low Product Manifest build-number Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-spring-filter High Product Manifest specification-title waffle-spring-filter Medium Product pom artifactid waffle-spring-filter Highest Product pom groupid com.github.waffle.demo Highest Product pom name waffle-spring-filter High Product pom parent-artifactid waffle-demo-parent Medium Product pom url https://waffle.github.io/waffle/ Medium Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
+ Byte Buddy is a Java library for creating Java classes at run time.
+ This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
+ License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\byte-buddy-1.15.11.jar
MD5: 603bc53c7a294f23765bfb7e1820ad44
SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c
SHA256: fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy High Vendor jar package name asm Highest Vendor jar package name build Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy (without dependencies) High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy High Product jar package name asm Highest Product jar package name build Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Product Manifest multi-release true Low Product pom artifactid byte-buddy Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy (without dependencies) High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86-64\attach_hotspot_windows.dllMD5: 053a783e5777c6a9867c27d51af89677SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76SHA256: 16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar\win32-x86\attach_hotspot_windows.dllMD5: fbca33102ac97be0ed496c0f78e466b3SHA1: c4df05146a86a6d073769bb697d550ef42518ed5SHA256: 810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name attach_hotspot_windows High Product file name attach_hotspot_windows High
Description:
The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\byte-buddy-agent-1.15.11.jar
MD5: 449a1534609bf3535d74cbb10b4ed074
SHA1: a38b16385e867f59a641330f0362ebe742788ed8
SHA256: 316d2c0795c2a4d4c4756f2e6f9349837c7430ac34e0477ead874d05f5cc19e5
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name byte-buddy-agent High Vendor jar package name agent Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Vendor Manifest can-redefine-classes true Low Vendor Manifest can-retransform-classes true Low Vendor Manifest can-set-native-method-prefix true Low Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy-agent Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy agent High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy-agent High Product jar package name agent Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy agent Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy-agent Medium Product Manifest can-redefine-classes true Low Product Manifest can-retransform-classes true Low Product Manifest can-set-native-method-prefix true Low Product Manifest multi-release true Low Product pom artifactid byte-buddy-agent Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy agent High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.15.11 High Version Manifest Bundle-Version 1.15.11 High Version pom version 1.15.11 Highest
Description:
A high performance caching library License:
https://www.apache.org/licenses/LICENSE-2.0 File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\caffeine-3.1.8.jar
MD5: b19301179903e8781776397d9923f7c8
SHA1: 24795585df8afaf70a2cd534786904ea5889c047
SHA256: 7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name caffeine High Vendor jar package name benmanes Highest Vendor jar package name benmanes Low Vendor jar package name caffeine Highest Vendor jar package name caffeine Low Vendor jar package name github Highest Vendor jar package name github Low Vendor Manifest automatic-module-name com.github.benmanes.caffeine Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Product file name caffeine High Product jar package name benmanes Highest Product jar package name benmanes Low Product jar package name cache Low Product jar package name caffeine Highest Product jar package name caffeine Low Product jar package name github Highest Product Manifest automatic-module-name com.github.benmanes.caffeine Medium Product Manifest build-jdk-spec 11 Low Product Manifest Bundle-Name com.github.ben-manes.caffeine Medium Product Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Product Manifest Implementation-Title A high performance caching library High Version file version 3.1.8 High Version Manifest Implementation-Version 3.1.8 High
License:
MIT File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\checker-qual-3.48.1.jar
MD5: 1594c16f661bec96488b56d4d5b56582
SHA1: 7d8cf1c00aec0042df92f8d71d7f15baaf9773f4
SHA256: 21e8dfe8103e125d96a329653ca81e87ac430326dbdbf299cea3dc1ae3f039a2
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name checker-qual High Vendor jar package name checker Highest Vendor jar package name checker Low Vendor jar package name checkerframework Low Vendor jar package name qual Highest Vendor Manifest bundle-symbolicname checker-qual Medium Vendor Manifest implementation-url https://checkerframework.org Low Product file name checker-qual High Product jar package name checker Highest Product jar package name checker Low Product jar package name checkerframework Highest Product jar package name qual Highest Product jar package name qual Low Product Manifest Bundle-Name checker-qual Medium Product Manifest bundle-symbolicname checker-qual Medium Product Manifest implementation-url https://checkerframework.org Low Version file version 3.48.1 High Version Manifest Implementation-Version 3.48.1 High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-aarch64\jnidispatch.dllMD5: 302945a811fd8e21bcdd5226c73b6f74SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607cSHA256: b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699dReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86-64\jnidispatch.dllMD5: 2d2475f1f026dd54e9f3e787ae4f81daSHA1: 27ff882ac271db547aee520b38e3ba9aa91e136cSHA256: 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\jna-5.16.0.jar\com\sun\jna\win32-x86\jnidispatch.dllMD5: 0caa1ef75a807f9dde05084fa2219a5cSHA1: 2f5e1cd82cde192905c7510ce99037b67d980640SHA256: 752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
Description:
JNA Library File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\jna-5.16.0.jarMD5: accc2e2b8676434a87f4f73fb4d90b44SHA1: ebea09f91dc9f7048099f963fb8d6f919f0a4d9cSHA256: 3f5233589a799eb66dc2969afa3433fb56859d3d787c58b9bc7dd9e86f0a250cReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jna High Vendor jar package name jna Highest Vendor jar package name jna Low Vendor jar package name sun Highest Vendor jar package name sun Low Vendor jar (hint) package name oracle Highest Vendor jar (hint) package name oracle Low Vendor Manifest automatic-module-name com.sun.jna Medium Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-category jni Low Vendor Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname com.sun.jna Medium Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest specification-vendor JNA Development Team Low Product file name jna High Product jar package name jna Highest Product jar package name jna Low Product jar package name library Highest Product jar package name native Highest Product jar package name sun Highest Product jar package name win32 Highest Product Manifest automatic-module-name com.sun.jna Medium Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-category jni Low Product Manifest Bundle-Name jna Medium Product Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 Low Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname com.sun.jna Medium Product Manifest Implementation-Title com.sun.jna High Product Manifest specification-title Java Native Access (JNA) Medium Version file name jna Medium Version file version 5.16.0 High Version jar package name jna Highest Version jar package name sun Highest Version jar package name win32 Highest Version Manifest Bundle-Version 5.16.0 High Version Manifest Implementation-Version 5.16.0 (b0) High
cpe:2.3:a:oracle:java_se:5.16.0:*:*:*:*:*:*:* (Confidence :Low) suppress Description:
JNA Platform Library File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\jna-platform-5.16.0.jarMD5: 12ba6b7a7752ecf0a5baed725f3192c2SHA1: b2a9065f97c166893d504b164706512338e3bbc2SHA256: e5a79523964509757555782bb60283e4902611013f107e4600dc93298f73f382Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name jna-platform High Vendor jar package name jna Highest Vendor jar package name jna Low Vendor jar package name platform Highest Vendor jar package name platform Low Vendor jar package name sun Highest Vendor jar package name sun Low Vendor jar (hint) package name oracle Highest Vendor jar (hint) package name oracle Low Vendor Manifest automatic-module-name com.sun.jna.platform Medium Vendor Manifest bundle-category jni Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor Manifest bundle-symbolicname com.sun.jna.platform Medium Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest require-bundle com.sun.jna;bundle-version="5.16.0" Low Vendor Manifest specification-vendor JNA Development Team Low Product file name jna-platform High Product jar package name jna Highest Product jar package name jna Low Product jar package name platform Highest Product jar package name platform Low Product jar package name sun Highest Product jar package name win32 Low Product Manifest automatic-module-name com.sun.jna.platform Medium Product Manifest bundle-category jni Low Product Manifest Bundle-Name jna-platform Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product Manifest bundle-symbolicname com.sun.jna.platform Medium Product Manifest Implementation-Title com.sun.jna High Product Manifest require-bundle com.sun.jna;bundle-version="5.16.0" Low Product Manifest specification-title Java Native Access (JNA) Medium Version file name jna-platform Medium Version file version 5.16.0 High Version jar package name jna Highest Version jar package name sun Highest Version Manifest Bundle-Version 5.16.0 High Version Manifest Implementation-Version 5.16.0 (b0) High
Description:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\logback-core-1.5.15.jar
MD5: 932d68eb5c938eee29ddd0f47c0cf31b
SHA1: 81633c8360b7e5b4edc52ca908bf14de0b73ef05
SHA256: 695bc40dd790cb710575f768e37b8eb12f814d84b008011a2ef85d5daaafa745
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest Implementation-Vendor QOS.ch High Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor QOS.ch Low Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name 21 Highest Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Implementation-Title Logback Core Module High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Logback Core Module Medium Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.5.15 High Version Manifest Bundle-Version 1.5.15 High Version Manifest Implementation-Version 1.5.15 High Version pom version 1.5.15 Highest
Related Dependencies waffle-spring-form.war: logback-classic-1.5.15.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\logback-classic-1.5.15.jar MD5: 042b4c78d1f6b7e862cc3de54e995642 SHA1: 07f8d6371626833bd1a232fe35490edffe04e5b3 SHA256: 5832abd425fc3036182f02931e9a121e7b464ddf2323ef7361b863570d3c8aa2 pkg:maven/ch.qos.logback/logback-classic@1.5.15 Description:
The slf4j API License:
http://www.opensource.org/licenses/mit-license.php File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\slf4j-api-2.0.15.jar
MD5: 357e4a230bfd9a2c303f25a3f2ade4c2
SHA1: 35ed0d9a6b7c011bb8656087f79e371263b3b485
SHA256: 5bfda32d723dde8ccef9db6bdc2537dabdb87321597c7e00e66a73a5777fbb24
Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name slf4j-api High Vendor jar package name slf4j Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl http://www.slf4j.org Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor Manifest multi-release true Low Vendor pom artifactid slf4j-api Low Vendor pom groupid org.slf4j Highest Vendor pom name SLF4J API Module High Vendor pom parent-artifactid slf4j-parent Low Vendor pom url http://www.slf4j.org Highest Product file name slf4j-api High Product jar package name slf4j Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl http://www.slf4j.org Low Product Manifest Bundle-Name SLF4J API Module Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Implementation-Title slf4j-api High Product Manifest multi-release true Low Product pom artifactid slf4j-api Highest Product pom groupid org.slf4j Highest Product pom name SLF4J API Module High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Version file version 2.0.15 High Version Manifest Bundle-Version 2.0.15 High Version Manifest Implementation-Version 2.0.15 High Version pom version 2.0.15 Highest
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\spring-aop-5.3.39.jarMD5: 47ef8946ec3f2f76f83cda172b9fd964SHA1: 3af1f0d73ec1e031c7083c848342989f413ca275SHA256: aa706e4f749982c0bae5fa637433c44c24f0fff5d16dc41deea6d30c3dfa7c85Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-aop High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name aop Highest Vendor jar package name aop Low Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.aop Medium Product file name spring-aop High Product jar package name aop Highest Product jar package name aop Low Product Manifest automatic-module-name spring.aop Medium Product Manifest Implementation-Title spring-aop High Version file version 5.3.39 High Version Manifest Implementation-Version 5.3.39 High
Related Dependencies waffle-spring-form.war: spring-beans-5.3.39.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\spring-beans-5.3.39.jar MD5: c2f99040fb8b0bc98515c87b968227d3 SHA1: 87770ce736cbd777c07866cbc8a06b879765e3c8 SHA256: b6697a5d8facb81aa75e5a46d959d4256da9ce3b40d33f3b5bbd42a8b1ed5722 waffle-spring-form.war: spring-context-5.3.39.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\spring-context-5.3.39.jar MD5: 167e95de6f9de58b1ffff09990237021 SHA1: 286538ca4b3890192d63c88fdd1616adde17dc0e SHA256: 9e644fc33bece9a9cb82538167a1b9640ae7b7d80252e893d89b8926a2f81633 waffle-spring-form.war: spring-expression-5.3.39.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\spring-expression-5.3.39.jar MD5: 41198683f2d488b4b2038b7d8e4b6d81 SHA1: 25cf07399eb7ac3fc13888b20dc4d67124ec75bd SHA256: d5337774d889fcdc9c08b0c8b8aaa1018d4c95b9b441db0118f7ae4d328f2810 waffle-spring-form.war: spring-jcl-5.3.39.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\spring-jcl-5.3.39.jar MD5: b1e50a7529d9f3f87079542a03191729 SHA1: 45181955845ae69c51c72746f00200f7babca558 SHA256: adbe656fc622e2457fefa09529d4b7c1126a3c4ff1c9306907764fcc93f1b725 File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\spring-core-5.3.39.jarMD5: 632d2a8c30962a69273775968c052651SHA1: d2bff2eedf27b51d6ef9a2fc892aaff5b7a768ddSHA256: 3a1ddcf05420a9181bd9cacb6062a3edc493e14d555961ad50e1a6360eb1e75fReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name core Low Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.core Medium Product file name spring-core High Product hint analyzer product springsource_spring_framework Highest Product jar package name core Highest Product jar package name core Low Product Manifest automatic-module-name spring.core Medium Product Manifest Implementation-Title spring-core High Version file version 5.3.39 High Version Manifest Implementation-Version 5.3.39 High
CVE-2016-1000027 suppress
Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. NOTE: the vendor's position is that untrusted data is not an intended use case. The product's behavior will not be changed because some users rely on deserialization of trusted data. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
af854a3a-2127-422b-91ae-364da2661108 - BROKEN_LINK,EXPLOIT,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - EXPLOIT,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - ISSUE_TRACKING,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - RELEASE_NOTES,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY cve@mitre.org - BROKEN_LINK,EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY Vulnerable Software & Versions:
CVE-2024-38820 suppress
The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected. NVD-CWE-noinfo, CWE-178 Improper Handling of Case Sensitivity
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\spring-security-core-5.8.16.jarMD5: c70ae997256d27ca6fb1c7a8b24e4248SHA1: b3d21a1f967db39dabaca487ba3fe58972e6a9a5SHA256: 3be7d217048f5ea76fd6d0eddaa3169ad3bee0bba9c456e27670ec37ca33c3fdReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-security-core High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name core Highest Vendor jar package name security Highest Vendor jar package name security Low Vendor jar package name springframework Low Vendor Manifest automatic-module-name spring.security.core Medium Product file name spring-security-core High Product jar package name core Highest Product jar package name security Highest Product jar package name security Low Product Manifest automatic-module-name spring.security.core Medium Product Manifest Implementation-Title spring-security-core High Version file version 5.8.16 High Version Manifest Implementation-Version 5.8.16 High
Related Dependencies waffle-spring-form.war: spring-security-config-5.8.16.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\spring-security-config-5.8.16.jar MD5: 1e386c77733c252f4b9a80904ccb1c00 SHA1: 73bff85307254de9f30514db587420110aee72ee SHA256: fb7218cd28ca5f82bafd4cc038d1727fc99ccfb0f3b38a8fc0545a93e9b2f8b5 waffle-spring-form.war: spring-security-crypto-5.8.16.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\spring-security-crypto-5.8.16.jar MD5: 987ca02bb810d32c7d86968ff84e887c SHA1: 340f3bb882bea8e9eafc66671d4c8e50f11867a7 SHA256: e47acdd647997efb36609698b64a2bec37fa119210f88fad813aa53610433cfd CVE-2018-1258 suppress
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted. CWE-863 Incorrect Authorization
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - THIRD_PARTY_ADVISORY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\spring-security-web-5.8.16.jarMD5: 137862bb11c72092dd94d14d380fc784SHA1: fade885f7f9df056dd5e3592d949e888cd82397dSHA256: fe0843587f4dff188a1ecb822bf544c5f1c1ee46c757858a5a585039d8118304Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-security-web High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name security Highest Vendor jar package name security Low Vendor jar package name springframework Low Vendor jar package name web Highest Vendor jar package name web Low Vendor Manifest automatic-module-name spring.security.web Medium Product file name spring-security-web High Product jar package name security Highest Product jar package name security Low Product jar package name web Highest Product jar package name web Low Product Manifest automatic-module-name spring.security.web Medium Product Manifest Implementation-Title spring-security-web High Version file version 5.8.16 High Version Manifest Implementation-Version 5.8.16 High
CVE-2018-1258 suppress
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted. CWE-863 Incorrect Authorization
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - PATCH,THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - THIRD_PARTY_ADVISORY,VDB_ENTRY af854a3a-2127-422b-91ae-364da2661108 - VENDOR_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - PATCH,THIRD_PARTY_ADVISORY security_alert@emc.com - THIRD_PARTY_ADVISORY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - THIRD_PARTY_ADVISORY,VDB_ENTRY security_alert@emc.com - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\spring-web-5.3.39.jarMD5: 2b940bc714d6e29570b5dfa92755eefcSHA1: 4ab03cd7376a6b3365d2798aac8d01dcd22c0174SHA256: 444f243b936119b5488029f2d9399a3980855c60b493b9e2811464c6433a2b71Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name spring-web High Vendor hint analyzer vendor pivotal software Highest Vendor jar package name springframework Low Vendor jar package name web Highest Vendor jar package name web Low Vendor Manifest automatic-module-name spring.web Medium Product file name spring-web High Product jar package name web Highest Product jar package name web Low Product Manifest automatic-module-name spring.web Medium Product Manifest Implementation-Title spring-web High Version file version 5.3.39 High Version Manifest Implementation-Version 5.3.39 High
Description:
WAFFLE JNA implementation File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\waffle-jna-3.5.1.jarMD5: 8f889b8ad9082149f803d47b3bd83a4bSHA1: 9201f109062b3abcd69e115ede76c2440ff69455SHA256: 38ebb57398270ec4f9b4d31dd3851bbfc5687694ac099d686b39ed706b046590Referenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name waffle-jna High Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.jna Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-jna Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-jna High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-jna High Product jar package name waffle Highest Product Manifest automatic-module-name waffle.jna Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-jna High Product Manifest specification-title waffle-jna Medium Product pom artifactid waffle-jna Highest Product pom groupid com.github.waffle Highest Product pom name waffle-jna High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Spring Security 5 integration for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.war\WEB-INF\lib\waffle-spring-security5-3.5.1.jarMD5: 25ca82bacda5e5a0bdf83434993f2105SHA1: a8dcf769acf0aeb81c5932f416b07f31eb1857d7SHA256: 41cfcb5b1a808ab399f8d53d414924dc15e6cc2a8624677f09220ab5eb4d0b5fReferenced In Project/Scope: waffle-distro:runtime
Evidence Type Source Name Value Confidence Vendor file name waffle-spring-security5 High Vendor jar package name spring Highest Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.spring.security5 Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-spring-security5 Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-spring-security5 High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-spring-security5 High Product jar package name spring Highest Product jar package name waffle Highest Product Manifest automatic-module-name waffle.spring.security5 Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-spring-security5 High Product Manifest specification-title waffle-spring-security5 Medium Product pom artifactid waffle-spring-security5 Highest Product pom groupid com.github.waffle Highest Product pom name waffle-spring-security5 High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Spring Form Demo for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-form\target\waffle-spring-form.warMD5: 4f50ca71f039d5520329cc226764c505SHA1: 09a6091fd1b7f19cd120f03de5f65fb0efa437d9SHA256: eb95ee403b8163991c1f1abb41de5bc592014ea317eb423487815080ba0fc964Referenced In Project/Scope: waffle-distro:runtimewaffle-spring-form.war is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-spring-form High Vendor Manifest automatic-module-name waffle.spring.form.demo Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest build-number Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-spring-form Highest Vendor pom artifactid waffle-spring-form Low Vendor pom groupid com.github.waffle.demo Highest Vendor pom name waffle-spring-form High Vendor pom parent-artifactid waffle-demo-parent Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-spring-form High Product Manifest automatic-module-name waffle.spring.form.demo Medium Product Manifest build-jdk-spec 21 Low Product Manifest build-number Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-spring-form High Product Manifest specification-title waffle-spring-form Medium Product pom artifactid waffle-spring-form Highest Product pom groupid com.github.waffle.demo Highest Product pom name waffle-spring-form High Product pom parent-artifactid waffle-demo-parent Medium Product pom url https://waffle.github.io/waffle/ Medium Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Spring Security 5 integration for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-spring-security5\target\waffle-spring-security5-3.5.1.jarMD5: 25ca82bacda5e5a0bdf83434993f2105SHA1: a8dcf769acf0aeb81c5932f416b07f31eb1857d7SHA256: 41cfcb5b1a808ab399f8d53d414924dc15e6cc2a8624677f09220ab5eb4d0b5fReferenced In Project/Scope: waffle-distro:runtimewaffle-spring-security5-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-spring-security5 High Vendor jar package name spring Highest Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.spring.security5 Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-spring-security5 Highest Vendor pom artifactid waffle-spring-security5 Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-spring-security5 High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-spring-security5 High Product jar package name spring Highest Product jar package name waffle Highest Product Manifest automatic-module-name waffle.spring.security5 Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-spring-security5 High Product Manifest specification-title waffle-spring-security5 Medium Product pom artifactid waffle-spring-security5 Highest Product pom groupid com.github.waffle Highest Product pom name waffle-spring-security5 High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Related Dependencies waffle-spring-boot-filter2-3.5.1.jar: waffle-spring-security5-3.5.1.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter2\target\waffle-spring-boot-filter2-3.5.1.jar\BOOT-INF\lib\waffle-spring-security5-3.5.1.jar MD5: 25ca82bacda5e5a0bdf83434993f2105 SHA1: a8dcf769acf0aeb81c5932f416b07f31eb1857d7 SHA256: 41cfcb5b1a808ab399f8d53d414924dc15e6cc2a8624677f09220ab5eb4d0b5f pkg:maven/com.github.waffle/waffle-spring-security5@3.5.1 Description:
Spring Security 6 integration for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-spring-security6\target\waffle-spring-security6-3.5.1.jarMD5: 36500bf621576fc34e5fb7fef0e97db1SHA1: 5b00b98f988f712fe3dc7deaee4f0969e18cb6b9SHA256: 18ba6ecb1d0bb1468b47baee2388d2463abbb2b7c6d822fdd798832d5967a2a3Referenced In Project/Scope: waffle-distro:runtimewaffle-spring-security6-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-spring-security6 High Vendor jar package name spring Highest Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.spring.security6 Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-spring-security6 Highest Vendor pom artifactid waffle-spring-security6 Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-spring-security6 High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-spring-security6 High Product jar package name spring Highest Product jar package name waffle Highest Product Manifest automatic-module-name waffle.spring.security6 Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-spring-security6 High Product Manifest specification-title waffle-spring-security6 Medium Product pom artifactid waffle-spring-security6 Highest Product pom groupid com.github.waffle Highest Product pom name waffle-spring-security6 High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Related Dependencies waffle-spring-boot-filter3-3.5.1.jar: waffle-spring-security6-3.5.1.jarFile Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-demo\waffle-spring-boot-filter3\target\waffle-spring-boot-filter3-3.5.1.jar\BOOT-INF\lib\waffle-spring-security6-3.5.1.jar MD5: 36500bf621576fc34e5fb7fef0e97db1 SHA1: 5b00b98f988f712fe3dc7deaee4f0969e18cb6b9 SHA256: 18ba6ecb1d0bb1468b47baee2388d2463abbb2b7c6d822fdd798832d5967a2a3 pkg:maven/com.github.waffle/waffle-spring-security6@3.5.1 Description:
Tomcat 10 integration for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-tomcat10\target\waffle-tomcat10-3.5.1.jarMD5: cb0cd8502c9ac7a958814f82471b5116SHA1: eae45a643b5b3a704802f469e22d925d40cad3aaSHA256: 976d2ffae968648706703e4064a8449d3353b41548790a3fc1fbaae49f95e487Referenced In Project/Scope: waffle-distro:runtimewaffle-tomcat10-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-tomcat10 High Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.tomcat10 Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-tomcat10 Highest Vendor pom artifactid waffle-tomcat10 Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-tomcat10 High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-tomcat10 High Product jar package name waffle Highest Product Manifest automatic-module-name waffle.tomcat10 Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-tomcat10 High Product Manifest specification-title waffle-tomcat10 Medium Product pom artifactid waffle-tomcat10 Highest Product pom groupid com.github.waffle Highest Product pom name waffle-tomcat10 High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Tomcat 11 integration for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-tomcat11\target\waffle-tomcat11-3.5.1.jarMD5: 4606ab6850c9303b1d3abe51d79f363eSHA1: 3f4c7e4ee9cc7b84a5f14f2c3528bfbe464005b9SHA256: e3771c993e316b32946f955de80e7bd96c209116683eb263557319e8f7cf5cd9Referenced In Project/Scope: waffle-distro:runtimewaffle-tomcat11-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-tomcat11 High Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.tomcat11 Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-tomcat11 Highest Vendor pom artifactid waffle-tomcat11 Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-tomcat11 High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-tomcat11 High Product jar package name waffle Highest Product Manifest automatic-module-name waffle.tomcat11 Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-tomcat11 High Product Manifest specification-title waffle-tomcat11 Medium Product pom artifactid waffle-tomcat11 Highest Product pom groupid com.github.waffle Highest Product pom name waffle-tomcat11 High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
Description:
Tomcat 9 integration for WAFFLE File Path: C:\Users\Jeremy\GitHub\waffle\Source\JNA\target\checkout\Source\JNA\waffle-tomcat9\target\waffle-tomcat9-3.5.1.jarMD5: 216d19375d06ba7df4af238146c499f6SHA1: 51f135ef63e70f00627479eb5a8a67b377397429SHA256: 9171d74c3124f2154410432f554b815b72cfc619942817bc3ef4f7c1c9b38459Referenced In Project/Scope: waffle-distro:runtimewaffle-tomcat9-3.5.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name waffle-tomcat9 High Vendor jar package name waffle Highest Vendor Manifest automatic-module-name waffle.tomcat9 Medium Vendor Manifest build-jdk-spec 21 Low Vendor Manifest copyright 2024 Low Vendor Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Vendor Manifest Implementation-Vendor com.github.waffle High Vendor Manifest specification-vendor com.github.waffle Low Vendor pom artifactid waffle-tomcat9 Highest Vendor pom artifactid waffle-tomcat9 Low Vendor pom groupid com.github.waffle Highest Vendor pom name waffle-tomcat9 High Vendor pom parent-artifactid waffle Low Vendor pom url https://waffle.github.io/waffle/ Highest Product file name waffle-tomcat9 High Product jar package name waffle Highest Product Manifest automatic-module-name waffle.tomcat9 Medium Product Manifest build-jdk-spec 21 Low Product Manifest copyright 2024 Low Product Manifest git-revision 725e568c485ae01eddb2777e17e1c3f78955d4d1 Low Product Manifest Implementation-Title waffle-tomcat9 High Product Manifest specification-title waffle-tomcat9 Medium Product pom artifactid waffle-tomcat9 Highest Product pom groupid com.github.waffle Highest Product pom name waffle-tomcat9 High Product pom parent-artifactid waffle Medium Product pom url https://waffle.github.io/waffle/ Medium Version file version 3.5.1 High Version Manifest Implementation-Version 3.5.1 High Version pom version 3.5.1 Highest
+ ![[Information]](./images/icon_info_sml.gif){kind=icon}
+
