Press CTR-C to copy XML [help]


Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

 Sponsor

Project: Tailormap API

org.tailormap:tailormap-api:11.4.6-SNAPSHOT

Scan Information (show all):

Summary

Display: Showing Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
GeographicLib-Java-1.49.jarpkg:maven/net.sf.geographiclib/GeographicLib-Java@1.49 032
HdrHistogram-2.2.2.jarpkg:maven/org.hdrhistogram/HdrHistogram@2.2.2 025
HikariCP-5.1.0.jarpkg:maven/com.zaxxer/HikariCP@5.1.0 035
LatencyUtils-2.0.3.jarcpe:2.3:a:utils_project:utils:2.0.3:*:*:*:*:*:*:*pkg:maven/org.latencyutils/LatencyUtils@2.0.3 0Highest20
accessors-smart-2.5.1.jarpkg:maven/net.minidev/accessors-smart@2.5.1 041
aircompressor-0.27.jarpkg:maven/io.airlift/aircompressor@0.27 029
angus-activation-2.0.2.jarpkg:maven/org.eclipse.angus/angus-activation@2.0.2 035
antlr4-runtime-4.13.0.jarpkg:maven/org.antlr/antlr4-runtime@4.13.0 030
apiguardian-api-1.1.2.jarpkg:maven/org.apiguardian/apiguardian-api@1.1.2 040
asm-9.6.jarpkg:maven/org.ow2.asm/asm@9.6 054
aspectjweaver-1.9.22.1.jarpkg:maven/org.aspectj/aspectjweaver@1.9.22.1 049
bigint-0.7.1.jarpkg:maven/org.huldra.math/bigint@0.7.1 022
byte-buddy-1.15.11.jarpkg:maven/net.bytebuddy/byte-buddy@1.15.11 029
checker-qual-3.43.0.jarpkg:maven/org.checkerframework/checker-qual@3.43.0 044
classgraph-4.8.173.jarpkg:maven/io.github.classgraph/classgraph@4.8.173 042
classmate-1.7.0.jarpkg:maven/com.fasterxml/classmate@1.7.0 052
commons-codec-1.17.2.jarpkg:maven/commons-codec/commons-codec@1.17.2 0121
commons-collections4-4.4.jarcpe:2.3:a:apache:commons_collections:4.4:*:*:*:*:*:*:*pkg:maven/org.apache.commons/commons-collections4@4.4 0Highest105
commons-dbcp-1.4.jarpkg:maven/commons-dbcp/commons-dbcp@1.4 096
commons-io-2.18.0.jarcpe:2.3:a:apache:commons_io:2.18.0:*:*:*:*:*:*:*pkg:maven/commons-io/commons-io@2.18.0 0Highest125
commons-jxpath-1.3.jarcpe:2.3:a:apache:commons_jxpath:1.3:*:*:*:*:*:*:*pkg:maven/commons-jxpath/commons-jxpath@1.3CRITICAL3Highest58
commons-lang3-3.17.0.jarpkg:maven/org.apache.commons/commons-lang3@3.17.0 0145
commons-pool-1.6.jarpkg:maven/commons-pool/commons-pool@1.6 075
commons-text-1.12.0.jarcpe:2.3:a:apache:commons_text:1.12.0:*:*:*:*:*:*:*pkg:maven/org.apache.commons/commons-text@1.12.0 0Highest73
content-type-2.2.jarpkg:maven/com.nimbusds/content-type@2.2 045
disruptor-1.2.15.jarpkg:maven/com.conversantmedia/disruptor@1.2.15 030
ejml-core-0.41.jarpkg:maven/org.ejml/ejml-core@0.41 026
ejml-ddense-0.41.jarpkg:maven/org.ejml/ejml-ddense@0.41 028
error_prone_annotations-2.28.0.jarpkg:maven/com.google.errorprone/error_prone_annotations@2.28.0 029
evo-inflector-1.3.jarpkg:maven/org.atteo/evo-inflector@1.3 032
failureaccess-1.0.2.jarpkg:maven/com.google.guava/failureaccess@1.0.2 032
flyway-core-10.22.0.jarpkg:maven/org.flywaydb/flyway-core@10.22.0 021
flyway-database-postgresql-10.22.0.jarpkg:maven/org.flywaydb/flyway-database-postgresql@10.22.0 021
gt-xml-32.2.jarcpe:2.3:a:geotools:geotools:32.2:*:*:*:*:*:*:*
cpe:2.3:a:xml_library_project:xml_library:32.2:*:*:*:*:*:*:*		pkg:maven/org.geotools/gt-xml@32.2 0Highest40
gt-xsd-core-32.2.jarcpe:2.3:a:geotools:geotools:32.2:*:*:*:*:*:*:*pkg:maven/org.geotools.xsd/gt-xsd-core@32.2 0Highest44
guava-33.3.1-jre.jarcpe:2.3:a:google:guava:33.3.1:*:*:*:*:*:*:*pkg:maven/com.google.guava/guava@33.3.1-jre 0Highest27
hibernate-commons-annotations-7.0.3.Final.jarpkg:maven/org.hibernate.common/hibernate-commons-annotations@7.0.3.Final 038
hibernate-core-6.6.5.Final.jarcpe:2.3:a:hibernate:hibernate_orm:6.6.5:*:*:*:*:*:*:*pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final 0Highest43
hibernate-validator-8.0.2.Final.jarcpe:2.3:a:redhat:hibernate_validator:8.0.2:*:*:*:*:*:*:*pkg:maven/org.hibernate.validator/hibernate-validator@8.0.2.Final 0Highest34
hsqldb-2.7.3.jarcpe:2.3:a:hsqldb:hypersql_database:2.7.3:*:*:*:*:*:*:*pkg:maven/org.hsqldb/hsqldb@2.7.3 0Low45
http2-client-10.0.24.jarcpe:2.3:a:eclipse:jetty:10.0.24:*:*:*:*:*:*:*
cpe:2.3:a:jetty:jetty:10.0.24:*:*:*:*:*:*:*
cpe:2.3:a:mortbay_jetty:jetty:10.0.24:*:*:*:*:*:*:*		pkg:maven/org.eclipse.jetty.http2/http2-client@10.0.24MEDIUM1Highest37
http2-hpack-10.0.24.jarcpe:2.3:a:mortbay_jetty:jetty:10.0.24:*:*:*:*:*:*:*pkg:maven/org.eclipse.jetty.http2/http2-hpack@10.0.24 0Highest39
httpclient-4.5.14.jarcpe:2.3:a:apache:httpclient:4.5.14:*:*:*:*:*:*:*pkg:maven/org.apache.httpcomponents/httpclient@4.5.14 0Highest32
httpcore-4.4.16.jarpkg:maven/org.apache.httpcomponents/httpcore@4.4.16 032
httpmime-4.5.14.jarpkg:maven/org.apache.httpcomponents/httpmime@4.5.14 030
hypersistence-tsid-2.1.3.jarpkg:maven/io.hypersistence/hypersistence-tsid@2.1.3 031
hypersistence-utils-hibernate-63-3.9.0.jarcpe:2.3:a:utils_project:utils:3.9.0:*:*:*:*:*:*:*pkg:maven/io.hypersistence/hypersistence-utils-hibernate-63@3.9.0 0Highest25
imageio-ext-geocore-1.4.14.jarpkg:maven/it.geosolutions.imageio-ext/imageio-ext-geocore@1.4.14 021
imageio-ext-streams-1.4.14.jarpkg:maven/it.geosolutions.imageio-ext/imageio-ext-streams@1.4.14 021
imageio-ext-tiff-1.4.14.jarpkg:maven/it.geosolutions.imageio-ext/imageio-ext-tiff@1.4.14 021
imageio-ext-utilities-1.4.14.jarpkg:maven/it.geosolutions.imageio-ext/imageio-ext-utilities@1.4.14 023
indriya-2.2.jarpkg:maven/tech.units/indriya@2.2 085
istack-commons-runtime-4.1.2.jarpkg:maven/com.sun.istack/istack-commons-runtime@4.1.2 029
j2objc-annotations-3.0.0.jarpkg:maven/com.google.j2objc/j2objc-annotations@3.0.0 033
jackson-core-2.18.2.jarcpe:2.3:a:fasterxml:jackson-modules-java8:2.18.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2 0Low47
jackson-databind-2.18.2.jarcpe:2.3:a:fasterxml:jackson-databind:2.18.2:*:*:*:*:*:*:*
cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.2:*:*:*:*:*:*:*		pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2 0Highest41
jackson-dataformat-toml-2.18.2.jarcpe:2.3:a:fasterxml:jackson-dataformat-xml:2.18.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.18.2 0Highest39
jai_codec-1.1.3.jarpkg:maven/javax.media/jai_codec@1.1.3 025
jai_core-1.1.3.jarpkg:maven/javax.media/jai_core@1.1.3 028
jai_imageio-1.1.jarpkg:maven/javax.media/jai_imageio@1.1 026
jakarta.activation-api-2.1.3.jarpkg:maven/jakarta.activation/jakarta.activation-api@2.1.3 045
jakarta.annotation-api-2.1.1.jarcpe:2.3:a:oracle:projects:2.1.1:*:*:*:*:*:*:*pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1 0Low42
jakarta.inject-api-2.0.1.jarpkg:maven/jakarta.inject/jakarta.inject-api@2.0.1 056
jakarta.persistence-api-3.1.0.jarpkg:maven/jakarta.persistence/jakarta.persistence-api@3.1.0 040
jakarta.transaction-api-2.0.1.jarcpe:2.3:a:oracle:projects:2.0.1:*:*:*:*:*:*:*pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.1 0Low50
jakarta.validation-api-3.0.2.jarpkg:maven/jakarta.validation/jakarta.validation-api@3.0.2 056
jakarta.ws.rs-api-3.1.0.jarcpe:2.3:a:web_project:web:3.1.0:*:*:*:*:*:*:*pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0 0Low43
jakarta.xml.bind-api-4.0.2.jarpkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2 031
jandex-3.2.0.jarpkg:maven/io.smallrye/jandex@3.2.0 027
javax.activation-api-1.2.0.jarpkg:maven/javax.activation/javax.activation-api@1.2.0 039
jaxb-api-2.4.0-b180830.0359.jarpkg:maven/javax.xml.bind/jaxb-api@2.4.0-b180830.0359 033
jaxb-core-4.0.5.jarpkg:maven/org.glassfish.jaxb/jaxb-core@4.0.5 040
jaxb-runtime-4.0.5.jarpkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.5 042
jboss-logging-3.6.1.Final.jarpkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final 043
jcip-annotations-1.0-1.jarpkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1 025
jcl-over-slf4j-2.0.16.jarpkg:maven/org.slf4j/jcl-over-slf4j@2.0.16 031
jetty-io-10.0.24.jarcpe:2.3:a:eclipse:jetty:10.0.24:*:*:*:*:*:*:*
cpe:2.3:a:jetty:jetty:10.0.24:*:*:*:*:*:*:*
cpe:2.3:a:mortbay_jetty:jetty:10.0.24:*:*:*:*:*:*:*		pkg:maven/org.eclipse.jetty/jetty-io@10.0.24MEDIUM1Highest35
jgridshift-core-1.3.jarpkg:maven/it.geosolutions.jgridshift/jgridshift-core@1.3 019
json-path-2.9.0.jarcpe:2.3:a:json-path:jayway_jsonpath:2.9.0:*:*:*:*:*:*:*pkg:maven/com.jayway.jsonpath/json-path@2.9.0 0Highest34
json-smart-2.5.1.jarcpe:2.3:a:json-smart_project:json-smart:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:json-smart_project:json-smart-v2:2.5.1:*:*:*:*:*:*:*		pkg:maven/net.minidev/json-smart@2.5.1 0Highest51
jsr305-3.0.2.jarpkg:maven/com.google.code.findbugs/jsr305@3.0.2 017
jt-affine-1.1.27.jarpkg:maven/it.geosolutions.jaiext.affine/jt-affine@1.1.27 029
jt-algebra-1.1.27.jarpkg:maven/it.geosolutions.jaiext.algebra/jt-algebra@1.1.27 029
jt-bandcombine-1.1.27.jarpkg:maven/it.geosolutions.jaiext.bandcombine/jt-bandcombine@1.1.27 029
jt-bandmerge-1.1.27.jarpkg:maven/it.geosolutions.jaiext.bandmerge/jt-bandmerge@1.1.27 029
jt-bandselect-1.1.27.jarpkg:maven/it.geosolutions.jaiext.bandselect/jt-bandselect@1.1.27 029
jt-binarize-1.1.27.jarpkg:maven/it.geosolutions.jaiext.binarize/jt-binarize@1.1.27 029
jt-border-1.1.27.jarpkg:maven/it.geosolutions.jaiext.border/jt-border@1.1.27 029
jt-buffer-1.1.27.jarpkg:maven/it.geosolutions.jaiext.buffer/jt-buffer@1.1.27 029
jt-classifier-1.1.27.jarpkg:maven/it.geosolutions.jaiext.classifier/jt-classifier@1.1.27 029
jt-colorconvert-1.1.27.jarpkg:maven/it.geosolutions.jaiext.colorconvert/jt-colorconvert@1.1.27 029
jt-colorindexer-1.1.27.jarpkg:maven/it.geosolutions.jaiext.colorindexer/jt-colorindexer@1.1.27 029
jt-crop-1.1.27.jarpkg:maven/it.geosolutions.jaiext.crop/jt-crop@1.1.27 029
jt-errordiffusion-1.1.27.jarpkg:maven/it.geosolutions.jaiext.errordiffusion/jt-errordiffusion@1.1.27 029
jt-format-1.1.27.jarpkg:maven/it.geosolutions.jaiext.format/jt-format@1.1.27 029
jt-imagefunction-1.1.27.jarpkg:maven/it.geosolutions.jaiext.imagefunction/jt-imagefunction@1.1.27 029
jt-iterators-1.1.27.jarpkg:maven/it.geosolutions.jaiext.iterators/jt-iterators@1.1.27 029
jt-lookup-1.1.27.jarpkg:maven/it.geosolutions.jaiext.lookup/jt-lookup@1.1.27 029
jt-mosaic-1.1.27.jarcpe:2.3:a:mosaic_project:mosaic:1.1.27:*:*:*:*:*:*:*pkg:maven/it.geosolutions.jaiext.mosaic/jt-mosaic@1.1.27 0Highest29
jt-nullop-1.1.27.jarpkg:maven/it.geosolutions.jaiext.nullop/jt-nullop@1.1.27 029
jt-orderdither-1.1.27.jarpkg:maven/it.geosolutions.jaiext.orderdither/jt-orderdither@1.1.27 029
jt-piecewise-1.1.27.jarpkg:maven/it.geosolutions.jaiext.piecewise/jt-piecewise@1.1.27 029
jt-rescale-1.1.27.jarpkg:maven/it.geosolutions.jaiext.rescale/jt-rescale@1.1.27 029
jt-rlookup-1.1.27.jarpkg:maven/it.geosolutions.jaiext.rlookup/jt-rlookup@1.1.27 029
jt-scale-1.1.27.jarpkg:maven/it.geosolutions.jaiext.scale/jt-scale@1.1.27 029
jt-scale2-1.1.27.jarpkg:maven/it.geosolutions.jaiext.scale2/jt-scale2@1.1.27 027
jt-shadedrelief-1.1.27.jarpkg:maven/it.geosolutions.jaiext.shadedrelief/jt-shadedrelief@1.1.27 029
jt-stats-1.1.27.jarpkg:maven/it.geosolutions.jaiext.stats/jt-stats@1.1.27 029
jt-translate-1.1.27.jarpkg:maven/it.geosolutions.jaiext.translate/jt-translate@1.1.27 029
jt-utilities-1.1.27.jarpkg:maven/it.geosolutions.jaiext.utilities/jt-utilities@1.1.27 028
jt-utils-1.6.0.jarcpe:2.3:a:utils_project:utils:1.6.0:*:*:*:*:*:*:*pkg:maven/org.jaitools/jt-utils@1.6.0 0Highest18
jt-vectorbin-1.1.27.jarpkg:maven/it.geosolutions.jaiext.vectorbin/jt-vectorbin@1.1.27 029
jt-warp-1.1.27.jarpkg:maven/it.geosolutions.jaiext.warp/jt-warp@1.1.27 029
jt-zonal-1.1.27.jarpkg:maven/it.geosolutions.jaiext.zonal/jt-zonal@1.1.27 029
jt-zonalstats-1.6.0.jarpkg:maven/org.jaitools/jt-zonalstats@1.6.0 023
jts-core-1.20.0.jarpkg:maven/org.locationtech.jts/jts-core@1.20.0 024
jul-to-slf4j-2.0.16.jarpkg:maven/org.slf4j/jul-to-slf4j@2.0.16 031
lang-tag-1.7.jarpkg:maven/com.nimbusds/lang-tag@1.7 047
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jarpkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava 013
log4j-api-2.24.3.jarcpe:2.3:a:apache:log4j:2.24.3:*:*:*:*:*:*:*pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3 0Highest41
log4j-to-slf4j-2.24.3.jarpkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.24.3 037
logback-core-1.5.14.jarcpe:2.3:a:qos:logback:1.5.14:*:*:*:*:*:*:*pkg:maven/ch.qos.logback/logback-core@1.5.14 0Highest39
micrometer-commons-1.14.3.jarpkg:maven/io.micrometer/micrometer-commons@1.14.3 065
micrometer-core-1.14.3.jarpkg:maven/io.micrometer/micrometer-core@1.14.3 068
micrometer-jakarta9-1.14.3.jarpkg:maven/io.micrometer/micrometer-jakarta9@1.14.3 065
micrometer-observation-1.14.3.jarpkg:maven/io.micrometer/micrometer-observation@1.14.3 065
micrometer-registry-prometheus-1.14.3.jarcpe:2.3:a:prometheus:prometheus:1.14.3:*:*:*:*:*:*:*pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.3 0Highest63
modernizer-maven-annotations-3.1.0.jarpkg:maven/org.gaul/modernizer-maven-annotations@3.1.0 019
mssql-jdbc-12.8.1.jre11.jarcpe:2.3:a:microsoft:sql_server:12.8.1.jre11:*:*:*:*:*:*:*
cpe:2.3:a:www-sql_project:www-sql:12.8.1.jre11:*:*:*:*:*:*:*		pkg:maven/com.microsoft.sqlserver/mssql-jdbc@12.8.1
pkg:maven/com.microsoft.sqlserver/mssql-jdbc@12.8.1.jre11		 0Highest36
nbvcxz-1.5.1.jarpkg:maven/me.gosimple/nbvcxz@1.5.1 031
net.opengis.fes-32.2.jarcpe:2.3:a:geotools:geotools:32.2:*:*:*:*:*:*:*pkg:maven/org.geotools.ogc/net.opengis.fes@32.2 0Highest28
nimbus-jose-jwt-9.37.3.jar (shaded: com.google.code.gson:gson:2.10.1)cpe:2.3:a:google:gson:2.10.1:*:*:*:*:*:*:*pkg:maven/com.google.code.gson/gson@2.10.1 0Highest9
nimbus-jose-jwt-9.37.3.jarcpe:2.3:a:connect2id:nimbus_jose\+jwt:9.37.3:*:*:*:*:*:*:*pkg:maven/com.nimbusds/nimbus-jose-jwt@9.37.3 0Highest52
oauth2-oidc-sdk-9.43.4.jarpkg:maven/com.nimbusds/oauth2-oidc-sdk@9.43.4 057
ojdbc11-23.6.0.24.10.jarcpe:2.3:a:oracle:jdbc:23.6.0.24.10:*:*:*:*:*:*:*pkg:maven/com.oracle.database.jdbc/ojdbc11@23.6.0.24.10 0Highest33
org.eclipse.emf.ecore-2.15.0.jarcpe:2.3:a:eclipse:org.eclipse.core.runtime:2.15.0:*:*:*:*:*:*:*pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore@2.15.0
pkg:maven/org.eclipse.emf/org.eclipse.emf.ecore@2.15.0-SNAPSHOT		MEDIUM1Low46
org.eclipse.xsd-2.12.0.jarcpe:2.3:a:eclipse:org.eclipse.core.runtime:2.12.0:*:*:*:*:*:*:*pkg:maven/org.eclipse.xsd/org.eclipse.xsd@2.12.0MEDIUM1Low38
org.w3.xlink-32.2.jarcpe:2.3:a:geotools:geotools:32.2:*:*:*:*:*:*:*pkg:maven/org.geotools.ogc/org.w3.xlink@32.2 0Highest29
p6spy-3.9.1.jarpkg:maven/p6spy/p6spy@3.9.1 033
picocontainer-1.2.jarpkg:maven/picocontainer/picocontainer@1.2 026
postgresql-42.7.5.jarcpe:2.3:a:postgresql:postgresql_jdbc_driver:42.7.5:*:*:*:*:*:*:*pkg:maven/org.postgresql/postgresql@42.7.5 0Low68
prometheus-metrics-config-1.3.5.jarpkg:maven/io.prometheus/prometheus-metrics-config@1.3.5 029
prometheus-metrics-core-1.3.5.jarpkg:maven/io.prometheus/prometheus-metrics-core@1.3.5 029
prometheus-metrics-exposition-formats-1.3.5.jarpkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.5 029
prometheus-metrics-exposition-textformats-1.3.5.jarpkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.5 027
prometheus-metrics-model-1.3.5.jarpkg:maven/io.prometheus/prometheus-metrics-model@1.3.5 029
prometheus-metrics-tracer-common-1.3.5.jarpkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.5 029
quartz-2.5.0.jarcpe:2.3:a:softwareag:quartz:2.5.0:*:*:*:*:*:*:*pkg:maven/org.quartz-scheduler/quartz@2.5.0 0Highest37
re2j-1.6.jarpkg:maven/com.google.re2j/re2j@1.6 028
semver4j-5.3.0.jarpkg:maven/org.semver4j/semver4j@5.3.0 023
sentry-8.0.0.jarpkg:maven/io.sentry/sentry@8.0.0 024
sentry-jdbc-8.0.0.jarpkg:maven/io.sentry/sentry-jdbc@8.0.0 028
sentry-quartz-8.0.0.jarpkg:maven/io.sentry/sentry-quartz@8.0.0 028
sentry-spring-boot-jakarta-8.0.0.jarpkg:maven/io.sentry/sentry-spring-boot-jakarta@8.0.0 031
sentry-spring-boot-starter-jakarta-8.0.0.jarpkg:maven/io.sentry/sentry-spring-boot-starter-jakarta@8.0.0 017
sentry-spring-jakarta-8.0.0.jarpkg:maven/io.sentry/sentry-spring-jakarta@8.0.0 031
si-quantity-2.1.jarpkg:maven/si.uom/si-quantity@2.1 024
si-units-2.1.jarpkg:maven/si.uom/si-units@2.1 033
slf4j-api-2.0.16.jarpkg:maven/org.slf4j/slf4j-api@2.0.16 029
snakeyaml-2.3.jarcpe:2.3:a:snakeyaml_project:snakeyaml:2.3:*:*:*:*:*:*:*pkg:maven/org.yaml/snakeyaml@2.3 0Highest42
solr-api-9.8.0.jarcpe:2.3:a:apache:solr:9.8.0:*:*:*:*:*:*:*pkg:maven/org.apache.solr/solr-api@9.8.0 0Highest27
spring-boot-3.4.2.jarcpe:2.3:a:vmware:spring_boot:3.4.2:*:*:*:*:*:*:*pkg:maven/org.springframework.boot/spring-boot@3.4.2 0Highest38
spring-boot-starter-web-3.4.2.jarcpe:2.3:a:vmware:spring_boot:3.4.2:*:*:*:*:*:*:*
cpe:2.3:a:web_project:web:3.4.2:*:*:*:*:*:*:*		pkg:maven/org.springframework.boot/spring-boot-starter-web@3.4.2 0Highest36
spring-core-6.2.2.jarcpe:2.3:a:pivotal_software:spring_framework:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:springsource:spring_framework:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:spring_framework:6.2.2:*:*:*:*:*:*:*		pkg:maven/org.springframework/spring-core@6.2.2 0Highest41
spring-data-commons-3.4.2.jarcpe:2.3:a:pivotal_software:spring_data_commons:3.4.2:*:*:*:*:*:*:*pkg:maven/org.springframework.data/spring-data-commons@3.4.2 0Highest32
spring-data-jpa-3.4.2.jarcpe:2.3:a:pivotal_software:spring_data_jpa:3.4.2:*:*:*:*:*:*:*pkg:maven/org.springframework.data/spring-data-jpa@3.4.2 0Highest30
spring-data-rest-core-4.4.2.jarcpe:2.3:a:pivotal_software:spring_data_rest:4.4.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:spring_data_rest:4.4.2:*:*:*:*:*:*:*		pkg:maven/org.springframework.data/spring-data-rest-core@4.4.2 0Highest30
spring-hateoas-2.4.1.jarcpe:2.3:a:vmware:spring_hateoas:2.4.1:*:*:*:*:*:*:*pkg:maven/org.springframework.hateoas/spring-hateoas@2.4.1 0Highest46
spring-plugin-core-3.0.0.jarpkg:maven/org.springframework.plugin/spring-plugin-core@3.0.0 042
spring-security-core-6.4.2.jarcpe:2.3:a:pivotal_software:spring_security:6.4.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:spring_security:6.4.2:*:*:*:*:*:*:*		pkg:maven/org.springframework.security/spring-security-core@6.4.2 0Highest38
spring-security-oauth2-core-6.4.2.jarcpe:2.3:a:pivotal:spring_security_oauth:6.4.2:*:*:*:*:*:*:*
cpe:2.3:a:pivotal_software:spring_security:6.4.2:*:*:*:*:*:*:*
cpe:2.3:a:pivotal_software:spring_security_oauth:6.4.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:spring_security:6.4.2:*:*:*:*:*:*:*		pkg:maven/org.springframework.security/spring-security-oauth2-core@6.4.2 0Highest40
spring-security-web-6.4.2.jarcpe:2.3:a:pivotal_software:spring_security:6.4.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:spring_security:6.4.2:*:*:*:*:*:*:*
cpe:2.3:a:web_project:web:6.4.2:*:*:*:*:*:*:*		pkg:maven/org.springframework.security/spring-security-web@6.4.2 0Highest38
spring-security-web-6.4.2.jar: spring-security-webauthn.js 00
spring-web-6.2.2.jarcpe:2.3:a:pivotal_software:spring_framework:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:springsource:spring_framework:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:vmware:spring_framework:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:web_project:web:6.2.2:*:*:*:*:*:*:*		pkg:maven/org.springframework/spring-web@6.2.2 0Highest35
sse-eventbus-2.0.1.jarpkg:maven/ch.rasc/sse-eventbus@2.0.1 029
swagger-annotations-2.2.28.jarcpe:2.3:a:http-swagger_project:http-swagger:2.2.28:*:*:*:*:*:*:*pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.28 0Low38
swagger-annotations-jakarta-2.2.22.jarcpe:2.3:a:http-swagger_project:http-swagger:2.2.22:*:*:*:*:*:*:*pkg:maven/io.swagger.core.v3/swagger-annotations-jakarta@2.2.22 0Low38
swagger-initializer.js 00
swagger-ui-5.18.2.jarcpe:2.3:a:http-swagger_project:http-swagger:5.18.2:*:*:*:*:*:*:*pkg:maven/org.webjars/swagger-ui@5.18.2 0Low21
swagger-ui-5.18.2.jar: swagger-initializer.js 00
swagger-ui-5.18.2.jar: swagger-ui-bundle.js 00
swagger-ui-5.18.2.jar: swagger-ui-es-bundle-core.js 00
swagger-ui-5.18.2.jar: swagger-ui-es-bundle.js 00
swagger-ui-5.18.2.jar: swagger-ui-standalone-preset.js 00
swagger-ui-5.18.2.jar: swagger-ui.js 00
systems-common-2.1.jarpkg:maven/systems.uom/systems-common@2.1 037
tomcat-embed-core-10.1.34.jarcpe:2.3:a:apache:tomcat:10.1.34:*:*:*:*:*:*:*
cpe:2.3:a:apache_tomcat:apache_tomcat:10.1.34:*:*:*:*:*:*:*		pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.34 0Highest63
tomcat-embed-el-10.1.34.jarpkg:maven/org.apache.tomcat.embed/tomcat-embed-el@10.1.34 033
txw2-4.0.5.jarpkg:maven/org.glassfish.jaxb/txw2@4.0.5 034
unit-api-2.2.jarpkg:maven/javax.measure/unit-api@2.2 0109
uom-lib-common-2.2.jarpkg:maven/tech.uom.lib/uom-lib-common@2.2 043
value-2.10.1.jarpkg:maven/org.immutables/value@2.10.1 021
webjars-locator-core-0.59.jarpkg:maven/org.webjars/webjars-locator-core@0.59 023
xml-commons-resolver-1.2.jarpkg:maven/org.apache.xml/xml-commons-resolver@1.2 019

Dependencies (vulnerable)

GeographicLib-Java-1.49.jar

Description:

    This is a Java implementation of the geodesic algorithms from
    GeographicLib. This is a self-contained library which makes it
    easy to do geodesic computations for an ellipsoid of revolution in
    a Java program. It requires Java version 1.1 or later.

License:

The MIT License(MIT): http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/net/sf/geographiclib/GeographicLib-Java/1.49/GeographicLib-Java-1.49.jar
MD5: 5536ff35e4bb0b3262c6f62f43105ea4
SHA1: 7ff2164e69fa04e1ef2ca5079e1cee298a936ea1
SHA256:78c292f7e6910d51a15fc9088c301fac3b4c0a43ac5ae17499f5763b4dd9aca8
Referenced In Project/Scope: Tailormap API:compile
GeographicLib-Java-1.49.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-referencing@32.2

Identifiers

HdrHistogram-2.2.2.jar

Description:

        HdrHistogram supports the recording and analyzing sampled data value
        counts across a configurable integer value range with configurable value
        precision within the range. Value precision is expressed as the number of
        significant digits in the value recording, and provides control over value
        quantization behavior across the value range and the subsequent value
        resolution at any given level.

License:

Public Domain, per Creative Commons CC0: http://creativecommons.org/publicdomain/zero/1.0/
BSD-2-Clause: https://opensource.org/licenses/BSD-2-Clause
File Path: /home/runner/.m2/repository/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar
MD5: 41f807bf0c681d6f692c408a6e217eaf
SHA1: 7959933ebcc0f05b2eaa5af0a0c8689fa257b15c
SHA256:22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8
Referenced In Project/Scope: Tailormap API:runtime
HdrHistogram-2.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.micrometer/micrometer-core@1.14.3

Identifiers

HikariCP-5.1.0.jar

Description:

Ultimate JDBC Connection Pool

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/zaxxer/HikariCP/5.1.0/HikariCP-5.1.0.jar
MD5: 37404f82207a28141bd9b0fe6b1d0a16
SHA1: 8c96e36c14461fc436bb02b264b96ef3ca5dca8c
SHA256:a47a6ee62379694ee52c30036f0931b72f9aee2a801d590341ed82bd839e2134
Referenced In Project/Scope: Tailormap API:compile
HikariCP-5.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.4.2

Identifiers

LatencyUtils-2.0.3.jar

Description:

        LatencyUtils is a package that provides latency recording and reporting utilities.

License:

Public Domain, per Creative Commons CC0: http://creativecommons.org/publicdomain/zero/1.0/
File Path: /home/runner/.m2/repository/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar
MD5: 2ad12e1ef7614cecfb0483fa9ac6da73
SHA1: 769c0b82cb2421c8256300e907298a9410a2a3d3
SHA256:a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec
Referenced In Project/Scope: Tailormap API:runtime
LatencyUtils-2.0.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.micrometer/micrometer-core@1.14.3

Identifiers

accessors-smart-2.5.1.jar

Description:

Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/minidev/accessors-smart/2.5.1/accessors-smart-2.5.1.jar
MD5: 51e60dbf9ac51f6666f0077317990944
SHA1: 19b820261eb2e7de7d5bde11d1c06e4501dd7e5f
SHA256:2796ae857d0c7be4bc3580daa4d3828d555212355f4c83d38dd0af0742b3c812
Referenced In Project/Scope: Tailormap API:compile
accessors-smart-2.5.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.jayway.jsonpath/json-path@2.9.0

Identifiers

aircompressor-0.27.jar

Description:

Compression algorithms

License:

Apache License 2.0: https://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/io/airlift/aircompressor/0.27/aircompressor-0.27.jar
MD5: 2c1137bd68ec7a65655fc1adca94742b
SHA1: 5b3b5e7932a1d088ad1f13d109ffd688ab59ef9d
SHA256:fdbef3137a28f63bb0cb93487803080ede746a4ec3d421e36c6f0c305c35e5e4
Referenced In Project/Scope: Tailormap API:compile
aircompressor-0.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

Identifiers

angus-activation-2.0.2.jar

Description:

 Implementation

License:

http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-activation/2.0.2/angus-activation-2.0.2.jar
MD5: 42bba74155dc773eca277ee7a16f74be
SHA1: 41f1e0ddd157c856926ed149ab837d110955a9fc
SHA256:6dd3bcffc22bce83b07376a0e2e094e4964a3195d4118fb43e380ef35436cc1e
Referenced In Project/Scope: Tailormap API:runtime
angus-activation-2.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final

Identifiers

antlr4-runtime-4.13.0.jar

Description:

The ANTLR 4 Runtime

License:

https://www.antlr.org/license.html
File Path: /home/runner/.m2/repository/org/antlr/antlr4-runtime/4.13.0/antlr4-runtime-4.13.0.jar
MD5: bff95723c494b332b14575d713a65df4
SHA1: 5a02e48521624faaf5ff4d99afc88b01686af655
SHA256:bd7f7b5d07bc0b047f10915b32ca4bb1de9e57d8049098882e4453c88c076a5d
Referenced In Project/Scope: Tailormap API:compile
antlr4-runtime-4.13.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final

Identifiers

apiguardian-api-1.1.2.jar

Description:

@API Guardian

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apiguardian/apiguardian-api/1.1.2/apiguardian-api-1.1.2.jar
MD5: 8c7de3f82037fa4a2e8be2a2f13092af
SHA1: a231e0d844d2721b0fa1b238006d15c6ded6842a
SHA256:b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38
Referenced In Project/Scope: Tailormap API:compile
apiguardian-api-1.1.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.junit.jupiter/junit-jupiter-api@5.11.4

Identifiers

asm-9.6.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.6/asm-9.6.jar
MD5: 6f8bccf756f170d4185bb24c8c2d2020
SHA1: aa205cf0a06dbd8e04ece91c0b37c3f5d567546a
SHA256:3c6fac2424db3d4a853b669f4e3d1d9c3c552235e19a319673f887083c2303a1
Referenced In Project/Scope: Tailormap API:compile
asm-9.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.jayway.jsonpath/json-path@2.9.0

Identifiers

aspectjweaver-1.9.22.1.jar

Description:

The AspectJ weaver applies aspects to Java classes. It can be used as a Java agent in order to apply load-time
		weaving (LTW) during class-loading and also contains the AspectJ runtime classes.

License:

Eclipse Public License - v 2.0: https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt
File Path: /home/runner/.m2/repository/org/aspectj/aspectjweaver/1.9.22.1/aspectjweaver-1.9.22.1.jar
MD5: f2edbc088126174a11b68279bd26c6eb
SHA1: bca243d0af0db4758fbae45c5f4995cb5dabb612
SHA256:cd2dd01ec2424c05669df4d557f6c6cd7ed87b05257ee3c866b4c5b116b18a78
Referenced In Project/Scope: Tailormap API:compile
aspectjweaver-1.9.22.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-aop@3.4.2

Identifiers

bigint-0.7.1.jar

Description:

A class to beat the crap out of BigInteger!

File Path: /home/runner/.m2/repository/org/huldra/math/bigint/0.7.1/bigint-0.7.1.jar
MD5: aeb3ae291891403a2d5c23e2fd5aacde
SHA1: beb4ba7ca91d7f3875ef77f69052ceb37f5b3db2
SHA256:aae42edfa250950238c856ca4c723bdf116b1ae61115708a36da12af444a8824
Referenced In Project/Scope: Tailormap API:compile
bigint-0.7.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

Identifiers

byte-buddy-1.15.11.jar

Description:

        Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy/1.15.11/byte-buddy-1.15.11.jar
MD5: 603bc53c7a294f23765bfb7e1820ad44
SHA1: f61886478e0f9ee4c21d09574736f0ff45e0a46c
SHA256:fa08998aae1e7bdae83bde0712c50e8444d71c0e0c196bb2247ade8d4ad0eb90
Referenced In Project/Scope: Tailormap API:runtime
byte-buddy-1.15.11.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final

Identifiers

checker-qual-3.43.0.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/org/checkerframework/checker-qual/3.43.0/checker-qual-3.43.0.jar
MD5: 4f56e65c8f302ca8b4cb384c9b4a53b6
SHA1: 9425eee39e56b116d2b998b7c2cebcbd11a3c98b
SHA256:3fbc2e98f05854c3df16df9abaa955b91b15b3ecac33623208ed6424640ef0f6
Referenced In Project/Scope: Tailormap API:compile
checker-qual-3.43.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

Identifiers

classgraph-4.8.173.jar

Description:

The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.

License:

The MIT License (MIT): http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/io/github/classgraph/classgraph/4.8.173/classgraph-4.8.173.jar
MD5: 8e98dcc3eb5d91bd92a03415d64caa2a
SHA1: 236e1b4360bf078142902c6c3ca80a03bfa95d5d
SHA256:699841fd9028af0124e9b66067e0e543211611971a8a066ae212690888a5aaee
Referenced In Project/Scope: Tailormap API:compile
classgraph-4.8.173.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.webjars/webjars-locator-core@0.59

Identifiers

classmate-1.7.0.jar

Description:

Library for introspecting types with full generic information
        including resolving of field and method types.

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/classmate/1.7.0/classmate-1.7.0.jar
MD5: 3b8f14fe92feb865a8205aa63c5ed769
SHA1: 0e98374da1f2143ac8e6e0a95036994bb19137a3
SHA256:cb868f231c5cceb89d795ea00e6e1b7a93b8f4ac1ce1d8be76dde322dff4a046
Referenced In Project/Scope: Tailormap API:compile
classmate-1.7.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final

Identifiers

commons-codec-1.17.2.jar

Description:

     The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-codec/commons-codec/1.17.2/commons-codec-1.17.2.jar
MD5: 52e5f2054151cf878744451e6a46b8f0
SHA1: cd6bb9d856db5f61871a94d5801efd0b93b7fcb2
SHA256:4148332728490cef12b29dac4c385f46982f04285132c6fa51ad7267d7dc7a8b
Referenced In Project/Scope: Tailormap API:compile
commons-codec-1.17.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.solr/solr-solrj@9.8.0

Identifiers

commons-collections4-4.4.jar

Description:

The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-collections4/4.4/commons-collections4-4.4.jar
MD5: 4a37023740719b391f10030362c86be6
SHA1: 62ebe7544cb7164d87e0637a2a6a2bdc981395e8
SHA256:1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1
Referenced In Project/Scope: Tailormap API:compile
commons-collections4-4.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-xml@32.2

Identifiers

commons-dbcp-1.4.jar

Description:

Commons Database Connection Pooling

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-dbcp/commons-dbcp/1.4/commons-dbcp-1.4.jar
MD5: b004158fab904f37f5831860898b3cd9
SHA1: 30be73c965cc990b153a100aaaaafcf239f82d39
SHA256:a6e2d83551d0e5b59aa942359f3010d35e79365e6552ad3dbaa6776e4851e4f6
Referenced In Project/Scope: Tailormap API:compile
commons-dbcp-1.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-jdbc@32.2

Identifiers

commons-io-2.18.0.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-io/commons-io/2.18.0/commons-io-2.18.0.jar
MD5: 8cce74ccf461cd6502ae04c908eca917
SHA1: 44084ef756763795b31c578403dd028ff4a22950
SHA256:f3ca0f8d63c40e23a56d54101c60d5edee136b42d84bfb85bc7963093109cf8b
Referenced In Project/Scope: Tailormap API:compile
commons-io-2.18.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

Identifiers

commons-jxpath-1.3.jar

Description:

A Java-based implementation of XPath 1.0 that, in addition to XML processing, can inspect/modify Java object graphs (the library's explicit purpose) and even mixed Java/XML structures.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-jxpath/commons-jxpath/1.3/commons-jxpath-1.3.jar
MD5: 61a9aa8ff43ba10853571d57f724bf88
SHA1: c22d7d0f0f40eb7059a23cfa61773a416768b137
SHA256:fcbc0ad917d9d6a73c6df21fac322e00d213ef19cd94815a007c407a8a3ff449
Referenced In Project/Scope: Tailormap API:compile
commons-jxpath-1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@32.2

Identifiers

CVE-2022-41852 (OSSINDEX)  

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2022-41852 for details
CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

CVSSv3:
  • Base Score: CRITICAL (9.800000190734863)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:commons-jxpath:commons-jxpath:1.3:*:*:*:*:*:*:*

CVE-2022-40159  

** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA rules. After review by the JXPath maintainers, the original report was found to be invalid.
CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow

CVSSv3:
  • Base Score: MEDIUM (6.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A

References:

    Vulnerable Software & Versions:

    CVE-2022-40160  

    ** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA rules. After review by the JXPath maintainers, the original report was found to be invalid.
    CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow

    CVSSv3:
    • Base Score: MEDIUM (6.5)
    • Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A

    References:

      Vulnerable Software & Versions:

      commons-lang3-3.17.0.jar

      Description:

        Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.

      License:

      https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/apache/commons/commons-lang3/3.17.0/commons-lang3-3.17.0.jar
      MD5: 7730df72b7fdff4a3a32d89a314f826a
      SHA1: b17d2136f0460dcc0d2016ceefca8723bdf4ee70
      SHA256:6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4
      Referenced In Project/Scope: Tailormap API:compile
      commons-lang3-3.17.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      commons-pool-1.6.jar

      Description:

      Commons Object Pooling Library

      License:

      http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/commons-pool/commons-pool/1.6/commons-pool-1.6.jar
      MD5: 5ca02245c829422176d23fa530e919cc
      SHA1: 4572d589699f09d866a226a14b7f4323c6d8f040
      SHA256:46c42b4a38dc6b2db53a9ee5c92c63db103665d56694e2cfce2c95d51a6860cc
      Referenced In Project/Scope: Tailormap API:compile
      commons-pool-1.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-api@32.2

      Identifiers

      commons-text-1.12.0.jar

      Description:

      Apache Commons Text is a set of utility functions and reusable components for the purpose of processing
    and manipulating text that should be of use in a Java environment.

      License:

      https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/apache/commons/commons-text/1.12.0/commons-text-1.12.0.jar
      MD5: 544add6fbc8d4b100b07c3692d08099e
      SHA1: 66aa90dc099701c4d3b14bd256c328f592ccf0d6
      SHA256:de023257ff166044a56bd1aa9124e843cd05dac5806cc705a9311f3556d5a15f
      Referenced In Project/Scope: Tailormap API:compile
      commons-text-1.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-main@32.2

      Identifiers

      content-type-2.2.jar

      Description:

      Java library for Content (Media) Type representation

      License:

      The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/nimbusds/content-type/2.2/content-type-2.2.jar
      MD5: 135aaa5ebcc12a45f4b3ff08cb6fa46a
      SHA1: 9a894bce7646dd4086652d85b88013229f23724b
      SHA256:730f1816196145e88275093c147f2e6da3c3e541207acd3503a1b06129b9bea9
      Referenced In Project/Scope: Tailormap API:compile
      content-type-2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@3.4.2

      Identifiers

      disruptor-1.2.15.jar

      Description:

      Conversant Disruptor - very high throughput Java BlockingQueue

      License:

      The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/conversantmedia/disruptor/1.2.15/disruptor-1.2.15.jar
      MD5: 9b66d90caa2794c624e4cc0cd6c0468b
      SHA1: 21924297eb54dfd8a390c3e08cc9e7a457dff358
      SHA256:bd3154a3fb41594b02950ad52bcd9b775a45577bd4d6ef1bee66ea6885c9f39e
      Referenced In Project/Scope: Tailormap API:compile
      disruptor-1.2.15.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      ejml-core-0.41.jar

      Description:

      A fast and easy to use dense and sparse matrix linear algebra library written in Java.

      License:

      The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/ejml/ejml-core/0.41/ejml-core-0.41.jar
      MD5: 200146f623a8eb87196bbc35cae6c2b1
      SHA1: 92ac2bee332a5697c42e576b94d563ba8c25877c
      SHA256:8d36469e8414d79c875defc0af3b980525d384761c9471d15a4f365b936dd1d5
      Referenced In Project/Scope: Tailormap API:compile
      ejml-core-0.41.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-main@32.2

      Identifiers

      ejml-ddense-0.41.jar

      Description:

      A fast and easy to use dense and sparse matrix linear algebra library written in Java.

      License:

      The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/ejml/ejml-ddense/0.41/ejml-ddense-0.41.jar
      MD5: 2128d09683d0ed77429fac23f64e42c7
      SHA1: 782c80d4c3c8a3432c4641f24c177f336a360f9c
      SHA256:355347e9cac7e96d5d724d331a9b04bb14a8a02e1d111f1ac51c79f25d937123
      Referenced In Project/Scope: Tailormap API:compile
      ejml-ddense-0.41.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-main@32.2

      Identifiers

      error_prone_annotations-2.28.0.jar

      Description:

      Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

      License:

      Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.28.0/error_prone_annotations-2.28.0.jar
      MD5: 9e5d2181ddb6acb58fe08e86198c4232
      SHA1: 59fc00087ce372de42e394d2c789295dff2d19f0
      SHA256:f3fc8a3a0a4020706a373b00e7f57c2512dd26d1f83d28c7d38768f8682b231e
      Referenced In Project/Scope: Tailormap API:compile
      error_prone_annotations-2.28.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      evo-inflector-1.3.jar

      Description:

      Evo Inflector implements English pluralization algorithm.

      License:

      Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/atteo/evo-inflector/1.3/evo-inflector-1.3.jar
      MD5: 3ef7ac615df62834f49f2c29c57fe329
      SHA1: 4cf8b5f363c60e63f8b7688ac053590460f2768e
      SHA256:ac0192fd110a0363732b17ea94fd1ce8cfd85790c8e1551e14f866908b5d80e1
      Referenced In Project/Scope: Tailormap API:compile
      evo-inflector-1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.data/spring-data-rest-webmvc@4.4.2

      Identifiers

      failureaccess-1.0.2.jar

      Description:

          Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).

      License:

      http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/google/guava/failureaccess/1.0.2/failureaccess-1.0.2.jar
      MD5: 3f75955b49b6758fd6d1e1bd9bf777b3
      SHA1: c4a06a64e650562f30b7bf9aaec1bfed43aca12b
      SHA256:8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064
      Referenced In Project/Scope: Tailormap API:compile
      failureaccess-1.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      flyway-core-10.22.0.jar

      File Path: /home/runner/.m2/repository/org/flywaydb/flyway-core/10.22.0/flyway-core-10.22.0.jar
      MD5: 1b507d4bf01afbf12413b89546580862
      SHA1: 9f1c186b32ef2fd6f92fb0940198a33f18b21a73
      SHA256:093aece9c4d242952c0b8e15aed26afe42c57d40eb54feed1d66addd7f9aa5a3
      Referenced In Project/Scope: Tailormap API:compile
      flyway-core-10.22.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      flyway-database-postgresql-10.22.0.jar

      File Path: /home/runner/.m2/repository/org/flywaydb/flyway-database-postgresql/10.22.0/flyway-database-postgresql-10.22.0.jar
      MD5: c4f32c12fac87a19207b0d5bb5acda32
      SHA1: 2cea39d889539721d28483ddfef7dbe2d56e039c
      SHA256:7acb5f4fa16cc91d709afd2781cce7b44a0ac1d8f100590e968c775ee8183009
      Referenced In Project/Scope: Tailormap API:compile
      flyway-database-postgresql-10.22.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      gt-xml-32.2.jar

      Description:

      GTXML Schema Driven Parser

      License:

      Lesser General Public License (LGPL): http://www.gnu.org/copyleft/lesser.txt
      File Path: /home/runner/.m2/repository/org/geotools/gt-xml/32.2/gt-xml-32.2.jar
      MD5: 63c15883f85b40943752c6e84b82ffb7
      SHA1: 6eb2f5c2e76959a5dbed6fe75c7d9359dbeb6d74
      SHA256:0176a0184ef0709c5b7754fe4978ecb8b942a8a1ebf3444dc4c48831da851855
      Referenced In Project/Scope: Tailormap API:compile
      gt-xml-32.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      gt-xsd-core-32.2.jar

      Description:

      Schema based xml parsing. This module contains tools for creating 
  bindings from xml types to java types. Schema modelling is based 
  on Eclipse XSD.

      License:

      Lesser General Public License (LGPL): http://www.gnu.org/copyleft/lesser.txt
      File Path: /home/runner/.m2/repository/org/geotools/xsd/gt-xsd-core/32.2/gt-xsd-core-32.2.jar
      MD5: ac644f46e722822f0adf81a27bca9079
      SHA1: 3d53a1207749ba48a6c1ec7db76ff9675bfdf902
      SHA256:74d8235895bc904860e64e23060cd0c24dbd88691ac524ca9029257983db3a86
      Referenced In Project/Scope: Tailormap API:compile
      gt-xsd-core-32.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      guava-33.3.1-jre.jar

      Description:

          Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.

      License:

      http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/google/guava/guava/33.3.1-jre/guava-33.3.1-jre.jar
      MD5: 7b7d80d99af4181db55b00dad50a91bb
      SHA1: 852f8b363da0111e819460021ca693cacca3e8db
      SHA256:4bf0e2c5af8e4525c96e8fde17a4f7307f97f8478f11c4c8e35a0e3298ae4e90
      Referenced In Project/Scope: Tailormap API:compile
      guava-33.3.1-jre.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      hibernate-commons-annotations-7.0.3.Final.jar

      Description:

      Common reflection code used in support of annotation processing

      License:

      Apache License Version 2.0: https://opensource.org/licenses/Apache-2.0
      File Path: /home/runner/.m2/repository/org/hibernate/common/hibernate-commons-annotations/7.0.3.Final/hibernate-commons-annotations-7.0.3.Final.jar
      MD5: 6698f99235fe6d36c42caaf2e6b52797
      SHA1: e183c4be8bb41d12e9f19b374e00c34a0a85f439
      SHA256:0db2fd57d5e43688ac6ed5cdf36deaf05d84340dcc24c2dd2a2114de38e5175d
      Referenced In Project/Scope: Tailormap API:runtime
      hibernate-commons-annotations-7.0.3.Final.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final

      Identifiers

      hibernate-core-6.6.5.Final.jar

      Description:

      Hibernate's core ORM functionality

      License:

      GNU Library General Public License v2.1 or later: https://www.opensource.org/licenses/LGPL-2.1
      File Path: /home/runner/.m2/repository/org/hibernate/orm/hibernate-core/6.6.5.Final/hibernate-core-6.6.5.Final.jar
      MD5: 83d98e8e8d8b5d28d6eedb21efcac1f9
      SHA1: c81deca40ebdb823d9f8a9e5dc5798a6a205626a
      SHA256:ca6c6fdce59d32ff823888d52db503a727a2b44deb54b42674f276af0949bc2a
      Referenced In Project/Scope: Tailormap API:compile
      hibernate-core-6.6.5.Final.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      hibernate-validator-8.0.2.Final.jar

      Description:

      Hibernate's Jakarta Bean Validation reference implementation.

      License:

      http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/hibernate/validator/hibernate-validator/8.0.2.Final/hibernate-validator-8.0.2.Final.jar
      MD5: 1adda123292ba2627d03a696d8c7e76a
      SHA1: 220e64815dd87535525331de20570017f899eb13
      SHA256:2f2224a5a19bdcfa73540e9ff5c971b6c425ad80415876f305259fe873a15b2f
      Referenced In Project/Scope: Tailormap API:compile
      hibernate-validator-8.0.2.Final.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-validation@3.4.2

      Identifiers

      hsqldb-2.7.3.jar

      Description:

      HSQLDB - Lightweight 100% Java SQL Database Engine

      License:

      HSQLDB License, a BSD open source license: http://hsqldb.org/web/hsqlLicense.html
      File Path: /home/runner/.m2/repository/org/hsqldb/hsqldb/2.7.3/hsqldb-2.7.3.jar
      MD5: 724301ab61ff54755deec86c7a724505
      SHA1: 85b49338b36f3051d217295596cf92beb92e4bfb
      SHA256:6f2f77eedbe75cfbe26bf30d73b13de0cc57fb7cdb27a92ed8c1a012f0e2363a
      Referenced In Project/Scope: Tailormap API:compile
      hsqldb-2.7.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-epsg-hsql@32.2

      Identifiers

      http2-client-10.0.24.jar

      Description:

      Jetty module for Jetty :: HTTP2 :: Client

      License:

      https://www.eclipse.org/legal/epl-2.0/, https://www.apache.org/licenses/LICENSE-2.0
      File Path: /home/runner/.m2/repository/org/eclipse/jetty/http2/http2-client/10.0.24/http2-client-10.0.24.jar
      MD5: c50ce28b4471cf52098e59406d6f7258
      SHA1: 8c6992aead8bb2ac1ee3fe7759ab7d156a218231
      SHA256:d80389fc3e68b59ec0b3b08d6896fab45f9d665bca5db599a044deb05cfd2a5e
      Referenced In Project/Scope: Tailormap API:compile
      http2-client-10.0.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.solr/solr-solrj@9.8.0

      Identifiers

      CVE-2024-6763  

      Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI, for URI/URL parsing.

The HttpURI class does insufficient validation on the authority segment of a URI.  However the behaviour of HttpURI
 differs from the common browsers in how it handles a URI that would be 
considered invalid if fully validated against the RRC.  Specifically HttpURI
 and the browser may differ on the value of the host extracted from an 
invalid URI and thus a combination of Jetty and a vulnerable browser may
 be vulnerable to a open redirect attack or to a SSRF attack if the URI 
is used after passing validation checks.
      CWE-1286 Improper Validation of Syntactic Correctness of Input, NVD-CWE-Other

      CVSSv3:
      • Base Score: MEDIUM (5.3)
      • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A

      References:

      Vulnerable Software & Versions:

      http2-hpack-10.0.24.jar

      Description:

      Http2 Hpack

      License:

      https://www.eclipse.org/legal/epl-2.0/, https://www.apache.org/licenses/LICENSE-2.0
      File Path: /home/runner/.m2/repository/org/eclipse/jetty/http2/http2-hpack/10.0.24/http2-hpack-10.0.24.jar
      MD5: 4517bae71a598b1b64e22b40a4798990
      SHA1: aeed1b456d1c4362f969d2048d1343e6eae92dae
      SHA256:b3b7c7e028c9edbfa476be7d9f7c6fea7be394e3d9aaa2170bb5c4213c79aa30
      Referenced In Project/Scope: Tailormap API:compile
      http2-hpack-10.0.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.solr/solr-solrj@9.8.0

      Identifiers

      httpclient-4.5.14.jar

      Description:

         Apache HttpComponents Client

      File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar
      MD5: 2cb357c4b763f47e58af6cad47df6ba3
      SHA1: 1194890e6f56ec29177673f2f12d0b8e627dec98
      SHA256:c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6
      Referenced In Project/Scope: Tailormap API:compile
      httpclient-4.5.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.solr/solr-solrj@9.8.0

      Identifiers

      httpcore-4.4.16.jar

      Description:

         Apache HttpComponents Core (blocking I/O)

      File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar
      MD5: 28d2cd9bf8789fd2ec774fb88436ebd1
      SHA1: 51cf043c87253c9f58b539c9f7e44c8894223850
      SHA256:6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f
      Referenced In Project/Scope: Tailormap API:compile
      httpcore-4.4.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.solr/solr-solrj@9.8.0

      Identifiers

      httpmime-4.5.14.jar

      Description:

         Apache HttpComponents HttpClient - MIME coded entities

      File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpmime/4.5.14/httpmime-4.5.14.jar
      MD5: 714c4ae31c40e6633c0bcaa4e6264153
      SHA1: 6662758a1f1cb1149cf916bdac28332e0902ec44
      SHA256:d401243d5c6eae928a37121b6e819158c8c32ea0584793e7285bb489ab2a3d17
      Referenced In Project/Scope: Tailormap API:compile
      httpmime-4.5.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.solr/solr-solrj@9.8.0

      Identifiers

      hypersistence-tsid-2.1.3.jar

      Description:

      A Java library for generating Time-Sorted Unique Identifiers (TSID).

      License:

      MIT License: https://opensource.org/licenses/MIT
      File Path: /home/runner/.m2/repository/io/hypersistence/hypersistence-tsid/2.1.3/hypersistence-tsid-2.1.3.jar
      MD5: 733ba5defbf49748c58ddce3c26cb834
      SHA1: 07579cea109859f3cf27ceda2ae965e3678229ce
      SHA256:6086a08604ba05b7a40f4d83fef687db0861b84ff80759a9071852a5fffbaf75
      Referenced In Project/Scope: Tailormap API:compile
      hypersistence-tsid-2.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      hypersistence-utils-hibernate-63-3.9.0.jar

      Description:

      Utilities for Spring and Hibernate ORM 6.3, 6.4, and 6.5

      File Path: /home/runner/.m2/repository/io/hypersistence/hypersistence-utils-hibernate-63/3.9.0/hypersistence-utils-hibernate-63-3.9.0.jar
      MD5: cd92eb3e469902843e1e68517e68ff34
      SHA1: fdb2d15654d94e21e6bcc9940995279d0b4c10b5
      SHA256:1e497c77140c55d6edfcfd125ac5f8050624b76022964517d142ccb2d925a2ad
      Referenced In Project/Scope: Tailormap API:compile
      hypersistence-utils-hibernate-63-3.9.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      imageio-ext-geocore-1.4.14.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/imageio-ext/imageio-ext-geocore/1.4.14/imageio-ext-geocore-1.4.14.jar
      MD5: a5ed422ca3847ad76f0ad50309921b96
      SHA1: 7d6ed4714f0f43c59f68d9e62c5ddcc1dbf077ea
      SHA256:b1ae1b4a3e76837bb3064321ed488d63ace3dac6c4d55fa57727590227e074c7
      Referenced In Project/Scope: Tailormap API:compile
      imageio-ext-geocore-1.4.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      imageio-ext-streams-1.4.14.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/imageio-ext/imageio-ext-streams/1.4.14/imageio-ext-streams-1.4.14.jar
      MD5: f800836a878be1d4bd234a9e3493db28
      SHA1: 01e0b7f1d11f646239d39e027110de4e6b4ea82a
      SHA256:77459ddc17983c19be6e5de69617104bfda23274bab27cd5cfb706ba804c1b7c
      Referenced In Project/Scope: Tailormap API:compile
      imageio-ext-streams-1.4.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      imageio-ext-tiff-1.4.14.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/imageio-ext/imageio-ext-tiff/1.4.14/imageio-ext-tiff-1.4.14.jar
      MD5: c110218a2e88b4e6e907b19fec6888c8
      SHA1: 52fcb7a7a6dcedbdaa333518d2409a8591c8689c
      SHA256:daa36c9e48408a4940d5aa85cfa33a17176908d7ef99f7125f758cbd1cc2902a
      Referenced In Project/Scope: Tailormap API:compile
      imageio-ext-tiff-1.4.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      imageio-ext-utilities-1.4.14.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/imageio-ext/imageio-ext-utilities/1.4.14/imageio-ext-utilities-1.4.14.jar
      MD5: 78f5099aaa26ba828ccd11ce16d0b34a
      SHA1: 3ca252ba5827e3d9cb6a1e4dce44e6b24fef4034
      SHA256:2ce3b1b6acba36855e341e5ce34f31a8b20cc4528bbe019dc82e8c467d6cbf7a
      Referenced In Project/Scope: Tailormap API:compile
      imageio-ext-utilities-1.4.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      indriya-2.2.jar

      Description:

      Unit Standard (JSR 385) Reference Implementation.

      License:

      BSD 3-Clause: LICENSE
      File Path: /home/runner/.m2/repository/tech/units/indriya/2.2/indriya-2.2.jar
      MD5: cefa3a26996e4c70071d27a0c36603ea
      SHA1: 647a0e06d60346f3f3c48284f66d34b28ff83340
      SHA256:5b61eafd63fd235898dea0e5e614e9636c9d7783705a0c9f1794dd07e3a84b35
      Referenced In Project/Scope: Tailormap API:compile
      indriya-2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-api@32.2

      Identifiers

      istack-commons-runtime-4.1.2.jar

      Description:

      istack common utility code

      License:

      http://www.eclipse.org/org/documents/edl-v10.php
      File Path: /home/runner/.m2/repository/com/sun/istack/istack-commons-runtime/4.1.2/istack-commons-runtime-4.1.2.jar
      MD5: 535154ef647af2a52478c4debec93659
      SHA1: 18ec117c85f3ba0ac65409136afa8e42bc74e739
      SHA256:7fd6792361f4dd00f8c56af4a20cecc0066deea4a8f3dec38348af23fc2296ee
      Referenced In Project/Scope: Tailormap API:runtime
      istack-commons-runtime-4.1.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final

      Identifiers

      j2objc-annotations-3.0.0.jar

      Description:

          A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

      License:

      Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar
      MD5: f59529b29202a5baf37f491ea5ec8627
      SHA1: 7399e65dd7e9ff3404f4535b2f017093bdb134c7
      SHA256:88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64
      Referenced In Project/Scope: Tailormap API:compile
      j2objc-annotations-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jackson-core-2.18.2.jar

      Description:

      Core Jackson processing abstractions (aka Streaming API), implementation for JSON

      License:

      The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.18.2/jackson-core-2.18.2.jar
      MD5: bf935e6eca3a57defa13918661905cb0
      SHA1: fb64ccac5c27dca8819418eb4e443a9f496d9ee7
      SHA256:d8054ae7c0d1c2d2f55d28e46026ebe5892881f3fab5f439233184381c3b4a1f
      Referenced In Project/Scope: Tailormap API:compile
      jackson-core-2.18.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      jackson-databind-2.18.2.jar

      Description:

      General data-binding functionality for Jackson: works on core streaming API

      License:

      The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.2/jackson-databind-2.18.2.jar
      MD5: 1b56887bcd3eaea1ff710eb673e610b0
      SHA1: deef8697b92141fb6caf7aa86966cff4eec9b04f
      SHA256:4b364e6850dc89172fcf1d4dd26b8ff5488eda44ff4657e22dd265203dd5ab3c
      Referenced In Project/Scope: Tailormap API:compile
      jackson-databind-2.18.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      jackson-dataformat-toml-2.18.2.jar

      Description:

      Support for reading and writing TOML-encoded data via Jackson abstractions.

      License:

      The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-toml/2.18.2/jackson-dataformat-toml-2.18.2.jar
      MD5: ec600087f8b91db1a3b50bcd710d2918
      SHA1: 7c31abc580fe46907b78dbd79406b1e40fbb781d
      SHA256:df2c89a381daeaaf1491b2892ff2c0bfdb0b60716d2c0caf94b0775da1db5e27
      Referenced In Project/Scope: Tailormap API:compile
      jackson-dataformat-toml-2.18.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.flywaydb/flyway-core@10.22.0

      Identifiers

      jai_codec-1.1.3.jar

      File Path: /home/runner/.m2/repository/javax/media/jai_codec/1.1.3/jai_codec-1.1.3.jar
      MD5: 1b0f328c9eda0992167ce503b0a5afcc
      SHA1: 34a67ba62097778e4695c951156bf189c2c8e016
      SHA256:6d7824d972c0b6e10daa95f430f917d2256954535e62def9d287e79bf7824200
      Referenced In Project/Scope: Tailormap API:compile
      jai_codec-1.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jai_core-1.1.3.jar

      Description:

      The Java Advanced Imaging API extends the Java 2 platform by allowing sophisticated, high-performance image processing to be incorporated into Java applets and applications. It is a set of classes providing imaging functionality beyond that of Java 2D and the Java Foundation classes, though it is designed for compatibility with those APIs. This API implements a set of core image processing capabilities including image tiling, regions of interest, deferred execution and a set of core image processing operators, including many common point, area, and frequency domain operators.

      License:

      JDL (Java Distribution License): https://jai.dev.java.net/jdl-jai.pdf
      File Path: /home/runner/.m2/repository/javax/media/jai_core/1.1.3/jai_core-1.1.3.jar
      MD5: f398bc038307ee434bac1b93ba3ab02d
      SHA1: b179d2efb1174658483e8b41bf4ac9d2eb5de438
      SHA256:8b696cf067533545f44c2f68339e24ab1a2669153ed2081aa5be8749f4d592bf
      Referenced In Project/Scope: Tailormap API:compile
      jai_core-1.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-api@32.2

      Identifiers

      jai_imageio-1.1.jar

      File Path: /home/runner/.m2/repository/javax/media/jai_imageio/1.1/jai_imageio-1.1.jar
      MD5: b681e1934982c3c81aa6eeab2c5e868b
      SHA1: 27d867283f9043b05a8fb210773d0ef72b767a58
      SHA256:2b40befa9340e15759c68867df08905c6c6400df379ec7802120386325a565d3
      Referenced In Project/Scope: Tailormap API:compile
      jai_imageio-1.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jakarta.activation-api-2.1.3.jar

      Description:

        Specification

      License:

      EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
      File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar
      MD5: 76e7b680375ea9f40f3ddbd702efcd25
      SHA1: fa165bd70cda600368eee31555222776a46b881f
      SHA256:01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627
      Referenced In Project/Scope: Tailormap API:compile
      jakarta.activation-api-2.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.hypersistence/hypersistence-utils-hibernate-63@3.9.0

      Identifiers

      jakarta.annotation-api-2.1.1.jar

      Description:

      Jakarta Annotations API

      License:

      EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
      File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/2.1.1/jakarta.annotation-api-2.1.1.jar
      MD5: 5dac2f68e8288d0add4dc92cb161711d
      SHA1: 48b9bda22b091b1f48b13af03fe36db3be6e1ae3
      SHA256:5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe
      Referenced In Project/Scope: Tailormap API:compile
      jakarta.annotation-api-2.1.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      jakarta.inject-api-2.0.1.jar

      Description:

      Jakarta Dependency Injection

      License:

      The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/jakarta/inject/jakarta.inject-api/2.0.1/jakarta.inject-api-2.0.1.jar
      MD5: 72003bf6efcc8455d414bbd7da86c11c
      SHA1: 4c28afe1991a941d7702fe1362c365f0a8641d1e
      SHA256:f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c
      Referenced In Project/Scope: Tailormap API:compile
      jakarta.inject-api-2.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final

      Identifiers

      jakarta.persistence-api-3.1.0.jar

      Description:

      Jakarta Persistence 3.1 API jar

      License:

      Eclipse Public License v. 2.0: http://www.eclipse.org/legal/epl-2.0
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php
      File Path: /home/runner/.m2/repository/jakarta/persistence/jakarta.persistence-api/3.1.0/jakarta.persistence-api-3.1.0.jar
      MD5: 35a1b7dfb38cf44ff795be607b0e6b5b
      SHA1: 66901fa1c373c6aff65c13791cc11da72060a8d6
      SHA256:475389446d35c6f46c565728b756dc508c284644ea2690644e0d8e7e339d42fd
      Referenced In Project/Scope: Tailormap API:compile
      jakarta.persistence-api-3.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      jakarta.transaction-api-2.0.1.jar

      Description:

      Jakarta Transactions

      License:

      EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
      File Path: /home/runner/.m2/repository/jakarta/transaction/jakarta.transaction-api/2.0.1/jakarta.transaction-api-2.0.1.jar
      MD5: 5315974a3935e342b40849478e1c9966
      SHA1: 51a520e3fae406abb84e2e1148e6746ce3f80a1a
      SHA256:50c0a7c760c13ae6c042acf182b28f0047413db95b4636fb8879bcffab5ba875
      Referenced In Project/Scope: Tailormap API:compile
      jakarta.transaction-api-2.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final

      Identifiers

      jakarta.validation-api-3.0.2.jar

      Description:

              Jakarta Bean Validation API

      License:

      Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/jakarta/validation/jakarta.validation-api/3.0.2/jakarta.validation-api-3.0.2.jar
      MD5: 3a1ee6efca3e41e3320599790f54c5eb
      SHA1: 92b6631659ba35ca09e44874d3eb936edfeee532
      SHA256:291c25e6910cc6a7ebd96d4c6baebf6d7c37676c5482c2d96146e901b62c1fc9
      Referenced In Project/Scope: Tailormap API:compile
      jakarta.validation-api-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      jakarta.ws.rs-api-3.1.0.jar

      Description:

      Jakarta RESTful Web Services

      License:

      EPL-2.0: http://www.eclipse.org/legal/epl-2.0
GPL-2.0-with-classpath-exception: https://www.gnu.org/software/classpath/license.html
      File Path: /home/runner/.m2/repository/jakarta/ws/rs/jakarta.ws.rs-api/3.1.0/jakarta.ws.rs-api-3.1.0.jar
      MD5: 6ce4c6749e048456b2c452c1091689ca
      SHA1: 15ce10d249a38865b58fc39521f10f29ab0e3363
      SHA256:6b3b3628b8b4aedda0d24c3354335e985497d8ef3c510b8f3028e920d5b8663d
      Referenced In Project/Scope: Tailormap API:runtime
      jakarta.ws.rs-api-3.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.solr/solr-solrj@9.8.0

      Identifiers

      jakarta.xml.bind-api-4.0.2.jar

      Description:

      Jakarta XML Binding API 4.0 Design Specification

      License:

      http://www.eclipse.org/org/documents/edl-v10.php
      File Path: /home/runner/.m2/repository/jakarta/xml/bind/jakarta.xml.bind-api/4.0.2/jakarta.xml.bind-api-4.0.2.jar
      MD5: 0c8f9991081def819435c3ff36e4d93f
      SHA1: 6cd5a999b834b63238005b7144136379dc36cad2
      SHA256:0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406
      Referenced In Project/Scope: Tailormap API:compile
      jakarta.xml.bind-api-4.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.hypersistence/hypersistence-utils-hibernate-63@3.9.0

      Identifiers

      jandex-3.2.0.jar

      Description:

      SmallRye Build Parent POM

      License:

      https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/io/smallrye/jandex/3.2.0/jandex-3.2.0.jar
      MD5: 703254a1bd4c37efeebdc0a283c65565
      SHA1: f17ad860f62a08487b9edabde608f8ac55c62fa7
      SHA256:6da3e9ce8d0c0a433f3e7ce610a3c66accb00c71fee67aa0ff3e5a841395ac15
      Referenced In Project/Scope: Tailormap API:runtime
      jandex-3.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final

      Identifiers

      javax.activation-api-1.2.0.jar

      Description:

      JavaBeans Activation Framework API jar

      License:

      https://github.com/javaee/activation/blob/master/LICENSE.txt
      File Path: /home/runner/.m2/repository/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0.jar
      MD5: 5e50e56bcf4a3ef3bc758f69f7643c3b
      SHA1: 85262acf3ca9816f9537ca47d5adeabaead7cb16
      SHA256:43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393
      Referenced In Project/Scope: Tailormap API:compile
      javax.activation-api-1.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jaxb-api-2.4.0-b180830.0359.jar

      Description:

      JAXB (JSR 222) API

      License:

      https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1
      File Path: /home/runner/.m2/repository/javax/xml/bind/jaxb-api/2.4.0-b180830.0359/jaxb-api-2.4.0-b180830.0359.jar
      MD5: a9b97f6723902f40287c02980aa66eef
      SHA1: b54184b7dcab2031add3f525550c7f1b7e12209d
      SHA256:56b9e9702753763007435162ea788055efcfefc86ab920f032c0411dc547b836
      Referenced In Project/Scope: Tailormap API:compile
      jaxb-api-2.4.0-b180830.0359.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jaxb-core-4.0.5.jar

      Description:

      JAXB Core module. Contains sources required by XJC, JXC and Runtime modules.

      License:

      http://www.eclipse.org/org/documents/edl-v10.php
      File Path: /home/runner/.m2/repository/org/glassfish/jaxb/jaxb-core/4.0.5/jaxb-core-4.0.5.jar
      MD5: ab09aef6bebd4438b0a02707881801e4
      SHA1: 007b4b11ea5542eea4ad55e1080b23be436795b3
      SHA256:ad3fd9bf00de3eda9859f70b6cfb011e2fe9904804e16a2665092888ece0fdca
      Referenced In Project/Scope: Tailormap API:runtime
      jaxb-core-4.0.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final

      Identifiers

      jaxb-runtime-4.0.5.jar

      Description:

      JAXB (JSR 222) Reference Implementation

      License:

      http://www.eclipse.org/org/documents/edl-v10.php
      File Path: /home/runner/.m2/repository/org/glassfish/jaxb/jaxb-runtime/4.0.5/jaxb-runtime-4.0.5.jar
      MD5: c7384f1f95b8a8e15291485ff9dbe4f3
      SHA1: ca84c2a7169b5293e232b9d00d1e4e36d4c3914a
      SHA256:485d8940e76373a7f300815ea5504bf5b726c234425ad30971019d133124cca4
      Referenced In Project/Scope: Tailormap API:runtime
      jaxb-runtime-4.0.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final

      Identifiers

      jboss-logging-3.6.1.Final.jar

      Description:

      The JBoss Logging Framework

      License:

      Apache License 2.0: https://repository.jboss.org/licenses/apache-2.0.txt
      File Path: /home/runner/.m2/repository/org/jboss/logging/jboss-logging/3.6.1.Final/jboss-logging-3.6.1.Final.jar
      MD5: acab989faf62db02c092448e95614fab
      SHA1: 886afbb445b4016a37c8960a7aef6ebd769ce7e5
      SHA256:5e08a4b092dc85b337f0910a740571d8720cfa565fabd880a8caf94a657ca416
      Referenced In Project/Scope: Tailormap API:compile
      jboss-logging-3.6.1.Final.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final

      Identifiers

      jcip-annotations-1.0-1.jar

      Description:

          A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.

      License:

      Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar
      MD5: d62dbfa8789378457ada685e2f614846
      SHA1: ef31541dd28ae2cefdd17c7ebf352d93e9058c63
      SHA256:4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323
      Referenced In Project/Scope: Tailormap API:compile
      jcip-annotations-1.0-1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@3.4.2

      Identifiers

      jcl-over-slf4j-2.0.16.jar

      Description:

      JCL 1.2 implemented over SLF4J

      License:

      Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/slf4j/jcl-over-slf4j/2.0.16/jcl-over-slf4j-2.0.16.jar
      MD5: c077b88c43f9d63f64f9880fdb457efb
      SHA1: 9d08badad22f1ac07deac9188ade596472a2bfd9
      SHA256:5744d62c5af556e839ab922c9fa3f737f0a5971e478ba68b2eb5256b2842ec78
      Referenced In Project/Scope: Tailormap API:runtime
      jcl-over-slf4j-2.0.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.solr/solr-solrj@9.8.0

      Identifiers

      jetty-io-10.0.24.jar

      Description:

      Jetty module for Jetty :: IO Utility

      License:

      https://www.eclipse.org/legal/epl-2.0/, https://www.apache.org/licenses/LICENSE-2.0
      File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-io/10.0.24/jetty-io-10.0.24.jar
      MD5: a5f3720e8e80b672319a7950bee32a02
      SHA1: 981c5cc38a79f085170bacd1b3dc3cd4276bb4c5
      SHA256:28eab8bf42b4ea9c25d74b81e101cb0d3393856fafde7292b0fe93e558839d69
      Referenced In Project/Scope: Tailormap API:compile
      jetty-io-10.0.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.solr/solr-solrj@9.8.0

      Identifiers

      CVE-2024-6763  

      Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI, for URI/URL parsing.

The HttpURI class does insufficient validation on the authority segment of a URI.  However the behaviour of HttpURI
 differs from the common browsers in how it handles a URI that would be 
considered invalid if fully validated against the RRC.  Specifically HttpURI
 and the browser may differ on the value of the host extracted from an 
invalid URI and thus a combination of Jetty and a vulnerable browser may
 be vulnerable to a open redirect attack or to a SSRF attack if the URI 
is used after passing validation checks.
      CWE-1286 Improper Validation of Syntactic Correctness of Input, NVD-CWE-Other

      CVSSv3:
      • Base Score: MEDIUM (5.3)
      • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A

      References:

      Vulnerable Software & Versions:

      jgridshift-core-1.3.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jgridshift/jgridshift-core/1.3/jgridshift-core-1.3.jar
      MD5: 04a57b57bb0654b3d603eaaa748de563
      SHA1: 314702a7b6e634e1c74589983a6762974b9c51c8
      SHA256:303eb6a6f6f87369f6b9e3dcacefd6f9b0ad55920cd65a7f162ab9a23401c722
      Referenced In Project/Scope: Tailormap API:compile
      jgridshift-core-1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-referencing@32.2

      Identifiers

      json-path-2.9.0.jar

      Description:

      A library to query and verify JSON

      License:

      The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/jayway/jsonpath/json-path/2.9.0/json-path-2.9.0.jar
      MD5: e89678d2e4ff45e4f39a97ccd0223719
      SHA1: 37fe2217f577b0b68b18e62c4d17a8858ecf9b69
      SHA256:11a9ee6f88bb31f1450108d1cf6441377dec84aca075eb6bb2343be157575bea
      Referenced In Project/Scope: Tailormap API:compile
      json-path-2.9.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      json-smart-2.5.1.jar

      Description:

      JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.

      License:

      The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/net/minidev/json-smart/2.5.1/json-smart-2.5.1.jar
      MD5: 88a65001b616c2e7796f9263ad97bbf1
      SHA1: 4c11d2808d009132dfbbf947ebf37de6bf266c8e
      SHA256:86c0c189581b79b57b0719f443a724e9f628ffbb9eef645cf79194f5973a1001
      Referenced In Project/Scope: Tailormap API:compile
      json-smart-2.5.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.jayway.jsonpath/json-path@2.9.0

      Identifiers

      jsr305-3.0.2.jar

      Description:

      JSR305 Annotations for Findbugs

      License:

      The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
      MD5: dd83accb899363c32b07d7a1b2e4ce40
      SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
      SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
      Referenced In Project/Scope: Tailormap API:compile
      jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-affine-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/affine/jt-affine/1.1.27/jt-affine-1.1.27.jar
      MD5: f92a430ec9a70b55b1c63d95aed6bf3c
      SHA1: 264535fdd110a0b5ed6093093e6609ff429f5c8f
      SHA256:76a9dd814c26041e19263a3d6e51fd31d1321f30de6883eb2f5ec1b018d0877b
      Referenced In Project/Scope: Tailormap API:compile
      jt-affine-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-algebra-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/algebra/jt-algebra/1.1.27/jt-algebra-1.1.27.jar
      MD5: 5ea3d4add6afde01e72c707ec9b39602
      SHA1: df3e1c1dcc6a2a1b3126c6310da1102d36ffbee3
      SHA256:522fb54e91471f79b542cbc682983fee769efa0bec7fd31c190546ac0e5bf9c0
      Referenced In Project/Scope: Tailormap API:compile
      jt-algebra-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-bandcombine-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/bandcombine/jt-bandcombine/1.1.27/jt-bandcombine-1.1.27.jar
      MD5: 3917b002c57c132d3fc8073fc3c5577e
      SHA1: d9734d986e383952695de516777bbbc6c4a764ad
      SHA256:47d75ae4d41f9666bca7d33b4326affc38340d4b45c2448fdca4c1ccce629155
      Referenced In Project/Scope: Tailormap API:compile
      jt-bandcombine-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-bandmerge-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/bandmerge/jt-bandmerge/1.1.27/jt-bandmerge-1.1.27.jar
      MD5: 11ae391677c14fed9bdcf1706df1b571
      SHA1: 2fd70f13a3433bc3fadfbf9d4527d0c3ef9ea8c4
      SHA256:41fb2e020aad30c7c476b5ce30752b4b1c991c1cbbd014625e8afef63d87e085
      Referenced In Project/Scope: Tailormap API:compile
      jt-bandmerge-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-bandselect-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/bandselect/jt-bandselect/1.1.27/jt-bandselect-1.1.27.jar
      MD5: 37c368f5fdd2b6a89b854f75b358a90a
      SHA1: f5758cc4d86d7305581108fbee8b0b284a9c2d92
      SHA256:1dc58cddd9a701d617d32008406eead38f2de2d5c52f5f4cc721c00fbfe4bc9d
      Referenced In Project/Scope: Tailormap API:compile
      jt-bandselect-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-binarize-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/binarize/jt-binarize/1.1.27/jt-binarize-1.1.27.jar
      MD5: 05defabd899ca3e0e69ab495585e6077
      SHA1: d2e373bfdb9e8430e6faddaae711394642d8d223
      SHA256:e067e032deb1e434bf01ccd63f0951c5cf4b5f37a19895278755b5352d1eef8a
      Referenced In Project/Scope: Tailormap API:compile
      jt-binarize-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-border-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/border/jt-border/1.1.27/jt-border-1.1.27.jar
      MD5: fb3c1ebeba6423410afb456811222b24
      SHA1: 785656f6c6a6f2603215be41b2f790e85b9af53a
      SHA256:a4f8d01014f80ce111441b5f74ba7b99b0e18a8b168af74eb617e7620497d95c
      Referenced In Project/Scope: Tailormap API:compile
      jt-border-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-buffer-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/buffer/jt-buffer/1.1.27/jt-buffer-1.1.27.jar
      MD5: fa46450d6c390201648050d455a5ac46
      SHA1: d52ad5b67dda63c14dba303959d69df73ac43def
      SHA256:7ffa74baaf282f882a21b352822c1b5f981926150f59d21df369ed25d9989d3d
      Referenced In Project/Scope: Tailormap API:compile
      jt-buffer-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-classifier-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/classifier/jt-classifier/1.1.27/jt-classifier-1.1.27.jar
      MD5: a14800551c3fdea8e60fc350c2d9b1e2
      SHA1: 06ed8d1e38860a249f6ed4052efb489cd6d0b89a
      SHA256:4e6d91e1772ab129927be5db5c475984e2917e5311073c17c12f3dd25d3812a8
      Referenced In Project/Scope: Tailormap API:compile
      jt-classifier-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-colorconvert-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/colorconvert/jt-colorconvert/1.1.27/jt-colorconvert-1.1.27.jar
      MD5: fe26d8b42a1b8eec545f17ccc86bed3c
      SHA1: 3b1bd033cfcb275b7871612238aaa463e49b52d2
      SHA256:3826e2ae427f3948ab5e3a1a56cff6c9bcfdcde17a2fab4ea2351b5aedbd95d2
      Referenced In Project/Scope: Tailormap API:compile
      jt-colorconvert-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-colorindexer-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/colorindexer/jt-colorindexer/1.1.27/jt-colorindexer-1.1.27.jar
      MD5: 282fc6cbad5f920be2f298091910b868
      SHA1: bf1ba99f8737cfac6acb35fca09522caa42f4872
      SHA256:554e077309aaac14dbb658c647c4a0085f2e0ffb77155048844503b1ff9cc6d8
      Referenced In Project/Scope: Tailormap API:compile
      jt-colorindexer-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-crop-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/crop/jt-crop/1.1.27/jt-crop-1.1.27.jar
      MD5: 1ac8536eb99c19538e8070ef4b4fa0d3
      SHA1: 74068d5ef67189af939aa3bd60792fc1d1c56bee
      SHA256:f483386b8d4430d8c3f584859714f624d17fc0c4fdd305c5d6184d5a7162f905
      Referenced In Project/Scope: Tailormap API:compile
      jt-crop-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-errordiffusion-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/errordiffusion/jt-errordiffusion/1.1.27/jt-errordiffusion-1.1.27.jar
      MD5: 42aa0c6269e69cefd0e053617349613f
      SHA1: 877cf9f5203d936ded1c9e7e10daca02821d93ea
      SHA256:d99cab8dc07aeb41b76cc37c2aadb3c92c1885f530447cbd630a62154e0a011e
      Referenced In Project/Scope: Tailormap API:compile
      jt-errordiffusion-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-format-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/format/jt-format/1.1.27/jt-format-1.1.27.jar
      MD5: 407cc0a894778773f53908ceb9f38713
      SHA1: 78c418066b5f975121b2e58f42d0d8999f9c21c7
      SHA256:613bc0af26ce0b023a137f71a7d79133688e9efa6c17a6cbb88ec5b97df33497
      Referenced In Project/Scope: Tailormap API:compile
      jt-format-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-imagefunction-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/imagefunction/jt-imagefunction/1.1.27/jt-imagefunction-1.1.27.jar
      MD5: 9133345f9908af559ce5640d92a08e8a
      SHA1: 32f2115c7f35c4d440443c2fe03f42f45428b204
      SHA256:78dba1c1a13f3c1a0e4d29f7a4d88c215be9df4ec7ff49b6b96885c790636a0e
      Referenced In Project/Scope: Tailormap API:compile
      jt-imagefunction-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-iterators-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/iterators/jt-iterators/1.1.27/jt-iterators-1.1.27.jar
      MD5: f6ad0aef972e77e9a7cb72c9374fb4ca
      SHA1: 3bbdf84a7e8652bae6d68bede6a3424c202ffe6e
      SHA256:d3a77ef373b88f03039bad627d60701b0476ed889386e2b147655c36a6964243
      Referenced In Project/Scope: Tailormap API:compile
      jt-iterators-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-lookup-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/lookup/jt-lookup/1.1.27/jt-lookup-1.1.27.jar
      MD5: c92e413d81f0f0802dafece25ac50d9f
      SHA1: abd6314580137f7b4c92b030f75379528a18537d
      SHA256:0a262e67540d44018025015ae0a1b235a57690bd3781a4c8c64e8be7897351ae
      Referenced In Project/Scope: Tailormap API:compile
      jt-lookup-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-mosaic-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/mosaic/jt-mosaic/1.1.27/jt-mosaic-1.1.27.jar
      MD5: 11bed5a2d143f49d9f18819e19fe77f9
      SHA1: 782c9c3564b4a5e6d9dac9feb5384e1856f354e2
      SHA256:f9bd278a030d59afb7fba3789b6ace199c9f81bd7c6277fb58606ca9b73eef13
      Referenced In Project/Scope: Tailormap API:compile
      jt-mosaic-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-nullop-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/nullop/jt-nullop/1.1.27/jt-nullop-1.1.27.jar
      MD5: d96f98554ed65a2361ad32a4a32e110c
      SHA1: 0ff0c77bc552d2df4e1db9bf685a157fc3b3ffad
      SHA256:717af01960cdf9e3665630fbf19589ee9535e897872fb7f78e368423c9505127
      Referenced In Project/Scope: Tailormap API:compile
      jt-nullop-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-orderdither-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/orderdither/jt-orderdither/1.1.27/jt-orderdither-1.1.27.jar
      MD5: a4c900b7ed894aebf6a033520f6915a3
      SHA1: 738b8372cd04d910e8f1b6b6244166c1109d80f2
      SHA256:592564db94c659769f2fc7d592c1e1a43b7c6774c03e2efa3e5c68b852f65a2e
      Referenced In Project/Scope: Tailormap API:compile
      jt-orderdither-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-piecewise-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/piecewise/jt-piecewise/1.1.27/jt-piecewise-1.1.27.jar
      MD5: 80543cd695f0efb436166e916177773b
      SHA1: 6343df9a441d0c1d289e8f2b180b8ceceece2bde
      SHA256:9debab07646ed74b2a1bdec8e1c1e8e0830c012dab86cbbfbfa2c23ef6579fd5
      Referenced In Project/Scope: Tailormap API:compile
      jt-piecewise-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-rescale-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/rescale/jt-rescale/1.1.27/jt-rescale-1.1.27.jar
      MD5: d58266c20b0f5695fb85378f0bb18945
      SHA1: 9ef11d1e99a7c26cc224dac98113bfbd9912658e
      SHA256:98a91785dd8762d07d8f8e098e1e5e097d77769562acaeb0b395f134e2cf68ad
      Referenced In Project/Scope: Tailormap API:compile
      jt-rescale-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-rlookup-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/rlookup/jt-rlookup/1.1.27/jt-rlookup-1.1.27.jar
      MD5: de85a1b6fd3903aeff7318f9ad4d743b
      SHA1: 7a7c7d07b2c3c2a80e4d3739ba1d74dd5dab5a59
      SHA256:3e84413ffb4591b336bc54f8d806bbfdf00f9c7c0fda1d2febc2c7717285b47e
      Referenced In Project/Scope: Tailormap API:compile
      jt-rlookup-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-scale-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/scale/jt-scale/1.1.27/jt-scale-1.1.27.jar
      MD5: 5435e651e18db5ee5c041f66b0e762c4
      SHA1: a4223ffac1a0d79a76a1a4150b32f7698bb689a5
      SHA256:1edd75fa7962195af059e7769e1561208ec640d2dca49ea890dec868020e1223
      Referenced In Project/Scope: Tailormap API:compile
      jt-scale-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-scale2-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/scale2/jt-scale2/1.1.27/jt-scale2-1.1.27.jar
      MD5: 29248d9831d4ece708f7433b14b0a6c4
      SHA1: c6b1cddb2ec14d581dc4ca37f938a900ddc5d389
      SHA256:df836276c374afa7d909ae678a513556657a8383dd254a808a719ef26e33ab31
      Referenced In Project/Scope: Tailormap API:compile
      jt-scale2-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-shadedrelief-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/shadedrelief/jt-shadedrelief/1.1.27/jt-shadedrelief-1.1.27.jar
      MD5: ab91542e22adf927b4ca5ebad3b66cea
      SHA1: f8adc23a75758941aafacac0e85643be85b06d83
      SHA256:655eeb642725e98c2f771f7157200cf91e8fda3e18578ea966f25e01e224a396
      Referenced In Project/Scope: Tailormap API:compile
      jt-shadedrelief-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-stats-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/stats/jt-stats/1.1.27/jt-stats-1.1.27.jar
      MD5: ece43a3688870efffa5c765c3cd89c4d
      SHA1: 73c29e7c1ab0c7e66fe251c18a5acc334467a9af
      SHA256:a64fbaf2f637fa923231ac6e7a1fc99c52f01318e451b915d2f5fc7e9921cd1f
      Referenced In Project/Scope: Tailormap API:compile
      jt-stats-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-translate-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/translate/jt-translate/1.1.27/jt-translate-1.1.27.jar
      MD5: a0c6bfbbbd42972acda7e6b2b074defc
      SHA1: 57b6e0734dcacb8301443db50679dc34be30c381
      SHA256:f6ae26eaf5e54187eabb6edaad6c49783b3490a1cc0e81be11989b5cb4b59962
      Referenced In Project/Scope: Tailormap API:compile
      jt-translate-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-utilities-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/utilities/jt-utilities/1.1.27/jt-utilities-1.1.27.jar
      MD5: 9dfcc8ca30117b3097e3541fd554eb9c
      SHA1: 3fede5fdcbc5749765db67ed860ad2b5b8325702
      SHA256:7f303e94c5fb8a0ff5d235ee84516477df410c151f47d66bdefbdabed3bcf9e9
      Referenced In Project/Scope: Tailormap API:compile
      jt-utilities-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-utils-1.6.0.jar

      Description:

              Support and utility classes used by other JAITools components and 
        available for general use.

      File Path: /home/runner/.m2/repository/org/jaitools/jt-utils/1.6.0/jt-utils-1.6.0.jar
      MD5: cf19d7dc50454ccfe81703c05f7b78f9
      SHA1: 8ce5a9a0840a1b17f1f39d44fe931b8197906b45
      SHA256:11ad5e2f8b6aeff3275f33088103f96e4104d3557379b1a01b137b5519c01e1a
      Referenced In Project/Scope: Tailormap API:compile
      jt-utils-1.6.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-vectorbin-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/vectorbin/jt-vectorbin/1.1.27/jt-vectorbin-1.1.27.jar
      MD5: f2187ca16d05b50c713865a93a2a9fc5
      SHA1: 4b17ac8a421509a5aadd3cc80a0117b2c478b838
      SHA256:19338f1957e49f2250fe4a62de6dbbb6f9178aa77810ade72f1216c815fc3e18
      Referenced In Project/Scope: Tailormap API:compile
      jt-vectorbin-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-warp-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/warp/jt-warp/1.1.27/jt-warp-1.1.27.jar
      MD5: b42ba1e8fbf85a682b3ad4f6000d1108
      SHA1: abe64c09ff82bc24b58d0b5e607b118f4bd50c61
      SHA256:cf17cf0ccfe39db5e00ea53bb4662d06ca9c73bef235dbae6dd9bcd766298891
      Referenced In Project/Scope: Tailormap API:compile
      jt-warp-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-zonal-1.1.27.jar

      File Path: /home/runner/.m2/repository/it/geosolutions/jaiext/zonal/jt-zonal/1.1.27/jt-zonal-1.1.27.jar
      MD5: 790d94424a7f46d7c255566ae242d33b
      SHA1: ee73c23830c451eaf78f85a5192d654cc35cbe6d
      SHA256:81fb781b571bcbb72fac17c451d664e80ecc2b72d5ee7f0f58b5e320d7124879
      Referenced In Project/Scope: Tailormap API:compile
      jt-zonal-1.1.27.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jt-zonalstats-1.6.0.jar

      Description:

      Calculates summary statistics, optionally within zones defined by
a zone image, for values in a data image

      File Path: /home/runner/.m2/repository/org/jaitools/jt-zonalstats/1.6.0/jt-zonalstats-1.6.0.jar
      MD5: dad448a868f69937f724f66ebdd89e54
      SHA1: 68bf96642dc310a9793ed98384da6843b8241c08
      SHA256:65d861f4433d5f831b380bb03ce9c6f84b21a1667244b7b19ac131139bac2dfc
      Referenced In Project/Scope: Tailormap API:compile
      jt-zonalstats-1.6.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      jts-core-1.20.0.jar

      Description:

      The JTS Topology Suite is an API for 2D linear geometry predicates and functions.

      License:

      https://github.com/locationtech/jts/blob/master/LICENSE_EPLv2.txt, https://github.com/locationtech/jts/blob/master/LICENSE_EDLv1.txt
      File Path: /home/runner/.m2/repository/org/locationtech/jts/jts-core/1.20.0/jts-core-1.20.0.jar
      MD5: 8de91edea80ac2de00c07226458649fb
      SHA1: 25b72c9548a328cb1aea8a6b89d710a31ade5403
      SHA256:6a783d8f9dba3d3cf7265435f134402f63c05838aa6cbcc4297ad3a5b2842baf
      Referenced In Project/Scope: Tailormap API:compile
      jts-core-1.20.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      jul-to-slf4j-2.0.16.jar

      Description:

      JUL to SLF4J bridge

      License:

      http://www.opensource.org/licenses/mit-license.php
      File Path: /home/runner/.m2/repository/org/slf4j/jul-to-slf4j/2.0.16/jul-to-slf4j-2.0.16.jar
      MD5: 410ad2f2230e0150216d86e12a4af995
      SHA1: 6d57da3e961daac65bcca0dd3def6cd11e48a24a
      SHA256:0f2ec396ea29c9a440890d1f09fdb82fdd574b47b298435764235451c193861d
      Referenced In Project/Scope: Tailormap API:compile
      jul-to-slf4j-2.0.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.sentry/sentry-spring-boot-starter-jakarta@8.0.0

      Identifiers

      lang-tag-1.7.jar

      Description:

      Java implementation of "Tags for Identifying Languages" (RFC 5646)

      License:

      The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/nimbusds/lang-tag/1.7/lang-tag-1.7.jar
      MD5: 31b8a4f76fdbf21f1d667f9d6618e0b2
      SHA1: 97c73ecd70bc7e8eefb26c5eea84f251a63f1031
      SHA256:e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31
      Referenced In Project/Scope: Tailormap API:compile
      lang-tag-1.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@3.4.2

      Identifiers

      listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

      Description:

          An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....

      File Path: /home/runner/.m2/repository/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
      MD5: d094c22570d65e132c19cea5d352e381
      SHA1: b421526c5f297295adef1c886e5246c39d4ac629
      SHA256:b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99
      Referenced In Project/Scope: Tailormap API:compile
      listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wms@32.2

      Identifiers

      log4j-api-2.24.3.jar

      Description:

      The logging API of the Log4j project.
    Library and application code can log through this API.
    It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases.
    Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.

      License:

      Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-api/2.24.3/log4j-api-2.24.3.jar
      MD5: d89516699543c5c21be87ee1760695f3
      SHA1: b02c125db8b6d295adf72ae6e71af5d83bce2370
      SHA256:5b4a0a0cd0e751ded431c162442bdbdd53328d1f8bb2bae5fc1bbeee0f66d80f
      Referenced In Project/Scope: Tailormap API:compile
      log4j-api-2.24.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.sentry/sentry-spring-boot-starter-jakarta@8.0.0

      Identifiers

      log4j-to-slf4j-2.24.3.jar

      Description:

      Forwards the Log4j API calls to SLF4J.
    (Refer to the `log4j-slf4j[2]-impl` artifacts for forwarding SLF4J to the Log4j API.)

      License:

      Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-to-slf4j/2.24.3/log4j-to-slf4j-2.24.3.jar
      MD5: 1f4b63f9c41f2f5179aa10b35d76e805
      SHA1: da1143e2a2531ee1c2d90baa98eb50a28a39d5a7
      SHA256:c7f2b0c612a4eb05b1587d1c880eb4cf5f4f53850676a8ede8da2b8fabb4f73f
      Referenced In Project/Scope: Tailormap API:compile
      log4j-to-slf4j-2.24.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.sentry/sentry-spring-boot-starter-jakarta@8.0.0

      Identifiers

      logback-core-1.5.14.jar

      Description:

      logback-core module

      License:

      http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html
      File Path: /home/runner/.m2/repository/ch/qos/logback/logback-core/1.5.14/logback-core-1.5.14.jar
      MD5: 2e1b373c892eeca44464216624c3319a
      SHA1: e9e86929cf82e2009303e748c1caf131cb51c2c1
      SHA256:ec4179e0229477f72754949bde6161d828b7a017eb5ebebfffdfd032a42987f5
      Referenced In Project/Scope: Tailormap API:compile
      logback-core-1.5.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.sentry/sentry-spring-boot-starter-jakarta@8.0.0

      Identifiers

      micrometer-commons-1.14.3.jar

      Description:

      Module containing common code

      License:

      The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.14.3/micrometer-commons-1.14.3.jar
      MD5: f6015f3594322034a155fdc3b442aa55
      SHA1: bf17f05dd6343d36ecc31076197a962cfdf46131
      SHA256:a428a9049b170f37f86c0f19b10a9e828b3e5f3f897043c846198bd3ee04296e
      Referenced In Project/Scope: Tailormap API:compile
      micrometer-commons-1.14.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.micrometer/micrometer-core@1.14.3

      Identifiers

      micrometer-core-1.14.3.jar

      Description:

      Core module of Micrometer containing instrumentation API and implementation

      License:

      The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/io/micrometer/micrometer-core/1.14.3/micrometer-core-1.14.3.jar
      MD5: a7f64dbcd1d080e8ab7ba057f50432cf
      SHA1: 8962714eb3a6bf97711765fbefe7f6ac28cae96f
      SHA256:f2c9bd46d5418a36f7a0ca3aba9aa8f30eb00f3e38e96bd40f7d257cd9bfb5c8
      Referenced In Project/Scope: Tailormap API:compile
      micrometer-core-1.14.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      micrometer-jakarta9-1.14.3.jar

      Description:

      Module for Jakarta 9+ based instrumentations

      License:

      The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/io/micrometer/micrometer-jakarta9/1.14.3/micrometer-jakarta9-1.14.3.jar
      MD5: 8a22f5c01b8feb974b025b0373d53167
      SHA1: a7611688d9290a647cc7fea5a1219ef4125d1e30
      SHA256:a3275f4705886593a72f3efbe19d19823b16e26afebca67ecd6cbf089714fbd8
      Referenced In Project/Scope: Tailormap API:compile
      micrometer-jakarta9-1.14.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-actuator@3.4.2

      Identifiers

      micrometer-observation-1.14.3.jar

      Description:

      Module containing Observation related code

      License:

      The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.14.3/micrometer-observation-1.14.3.jar
      MD5: 9f899dc589ce34ed5d22aa1e3ea74804
      SHA1: cd66186a1fe8465dc732d9514bade1104044b56d
      SHA256:cd4f7da00a458fe9bab944b2d184a92ee69783d69e9e17524929330ef32ba250
      Referenced In Project/Scope: Tailormap API:compile
      micrometer-observation-1.14.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.micrometer/micrometer-core@1.14.3

      Identifiers

      micrometer-registry-prometheus-1.14.3.jar

      Description:

      MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.

      License:

      The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/io/micrometer/micrometer-registry-prometheus/1.14.3/micrometer-registry-prometheus-1.14.3.jar
      MD5: e11212b33ada688abcbdc7a7248629d0
      SHA1: d09eae0636e2759aafa561c722129b5c86451368
      SHA256:da75f1ec67fecbcdc28f6a5ed7419bbf32ce724766942f0afc70abc9c19bc53b
      Referenced In Project/Scope: Tailormap API:compile
      micrometer-registry-prometheus-1.14.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      modernizer-maven-annotations-3.1.0.jar

      File Path: /home/runner/.m2/repository/org/gaul/modernizer-maven-annotations/3.1.0/modernizer-maven-annotations-3.1.0.jar
      MD5: b188aef3e94d39c7e7a8ebb6b740559f
      SHA1: 06eeda8c72054cfccf610ae772f606dbd13acf32
      SHA256:1b4e8adc970715721846afeb632edd1c9dc9c07dc052b691c0c8d899c9b9f017
      Referenced In Project/Scope: Tailormap API:compile
      modernizer-maven-annotations-3.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      mssql-jdbc-12.8.1.jre11.jar

      Description:

      		Microsoft JDBC Driver for SQL Server.

      License:

      MIT License: http://www.opensource.org/licenses/mit-license.php
      File Path: /home/runner/.m2/repository/com/microsoft/sqlserver/mssql-jdbc/12.8.1.jre11/mssql-jdbc-12.8.1.jre11.jar
      MD5: 7708ca290ebb81546eda0b1c55477081
      SHA1: 1f641274a8cc1ff71d05eb6d5c9f8e8a6d217c54
      SHA256:e6933c0711e598a224060e52ed31392f720a4a7664e85d8ae37c52a85b67ebb0
      Referenced In Project/Scope: Tailormap API:compile
      mssql-jdbc-12.8.1.jre11.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      nbvcxz-1.5.1.jar

      Description:

      Nbvcxz takes heavy inspiration from the zxcvbn library built by Dropbox, and in a lot of ways is
        similar.
        I built this library to be heavily extensible for every use case, with sane defaults.

      License:

      MIT license: https://www.opensource.org/licenses/mit-license.php
      File Path: /home/runner/.m2/repository/me/gosimple/nbvcxz/1.5.1/nbvcxz-1.5.1.jar
      MD5: f6e4f7e6d5b5fe1b8a6f3eb97ca2ea08
      SHA1: 50b5bb20fcd6c40a8c6de7e7b52662df8c0c46bd
      SHA256:e640b177c1fcc709a01afef8036061e04eac54b6f9024e4b457cc12f973fc93d
      Referenced In Project/Scope: Tailormap API:compile
      nbvcxz-1.5.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      net.opengis.fes-32.2.jar

      Description:

      Filter Encoding Specification Schema EMF Model

      File Path: /home/runner/.m2/repository/org/geotools/ogc/net.opengis.fes/32.2/net.opengis.fes-32.2.jar
      MD5: 3b6737829b637abfd511ef7f2709ff15
      SHA1: 553de78ebf23ba2f4f7e85cde500c84367e5d517
      SHA256:2b7d00d664b8db8d37b91ad11b490c60c61e49afdd96f1d81eff89106ded66c4
      Referenced In Project/Scope: Tailormap API:compile
      net.opengis.fes-32.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-wfs-ng@32.2

      Identifiers

      nimbus-jose-jwt-9.37.3.jar (shaded: com.google.code.gson:gson:2.10.1)

      License:

      Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/nimbusds/nimbus-jose-jwt/9.37.3/nimbus-jose-jwt-9.37.3.jar/META-INF/maven/com.google.code.gson/gson/pom.xml
      MD5: c13f373086992bab8989b514941891a6
      SHA1: ce159faf33c1e665e1f3a785a5d678a2b20151bc
      SHA256:d2b115634f5c085db4b9c9ffc2658e89e231fdbfbe2242121a1cd95d4d948dd7
      Referenced In Project/Scope: Tailormap API:compile

      Identifiers

      nimbus-jose-jwt-9.37.3.jar

      Description:

              Java library for Javascript Object Signing and Encryption (JOSE) and
        JSON Web Tokens (JWT)

      License:

      The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/com/nimbusds/nimbus-jose-jwt/9.37.3/nimbus-jose-jwt-9.37.3.jar
      MD5: a2ecba11e197522b7f963cbcf0b59715
      SHA1: 700f71ffefd60c16bd8ce711a956967ea9071cec
      SHA256:12ae4a3a260095d7aeba2adea7ae396e8b9570db8b7b409e09a824c219cc0444
      Referenced In Project/Scope: Tailormap API:compile
      nimbus-jose-jwt-9.37.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@3.4.2

      Identifiers

      oauth2-oidc-sdk-9.43.4.jar

      Description:

      		OAuth 2.0 SDK with OpenID Connection extensions for developing
		client and server applications.

      License:

      Apache License, version 2.0: https://www.apache.org/licenses/LICENSE-2.0.html
      File Path: /home/runner/.m2/repository/com/nimbusds/oauth2-oidc-sdk/9.43.4/oauth2-oidc-sdk-9.43.4.jar
      MD5: 41164df27a1323044bbfc3c8053829b8
      SHA1: a07529930dbea9b469d1feeb5bc9cde899cf6e60
      SHA256:aaae86d8186244dbc3566faa1f0f67ce380acf77774302ced20d522fc613b0ad
      Referenced In Project/Scope: Tailormap API:compile
      oauth2-oidc-sdk-9.43.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@3.4.2

      Identifiers

      ojdbc11-23.6.0.24.10.jar

      Description:

       Oracle JDBC Driver compatible with JDK11, JDK17, JDK19, and JDK21

      License:

      Oracle Free Use Terms and Conditions (FUTC): https://www.oracle.com/downloads/licenses/oracle-free-license.html
      File Path: /home/runner/.m2/repository/com/oracle/database/jdbc/ojdbc11/23.6.0.24.10/ojdbc11-23.6.0.24.10.jar
      MD5: bcdec91481b6c2d28b8c5bc675947621
      SHA1: 2cc0896304c2a35013f044bd454c26f8e03ea112
      SHA256:8e6af2c3401c64270922e0dca66879fd07281de3347ad1d1a0e1153ed41423a6
      Referenced In Project/Scope: Tailormap API:compile
      ojdbc11-23.6.0.24.10.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      org.eclipse.emf.ecore-2.15.0.jar

      Description:

      EMF Ecore

      License:

      The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
      File Path: /home/runner/.m2/repository/org/eclipse/emf/org.eclipse.emf.ecore/2.15.0/org.eclipse.emf.ecore-2.15.0.jar
      MD5: 566797e186b122fb2cb64a699b1c2d2b
      SHA1: ccfc09c8b6a0d4fadde09216d8a07678d38998de
      SHA256:d5e3c25344fe27f14f514f5d6deb6e9cc3f6153fa462361261a8d49a3dfe9bbf
      Referenced In Project/Scope: Tailormap API:compile
      org.eclipse.emf.ecore-2.15.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@32.2

      Identifiers

      CVE-2023-4218  

      In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).
      CWE-611 Improper Restriction of XML External Entity Reference

      CVSSv3:
      • Base Score: MEDIUM (5.0)
      • Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:1.3/RC:R/MAV:A

      References:

      Vulnerable Software & Versions: (show all)

      org.eclipse.xsd-2.12.0.jar

      Description:

      http://www.eclipse.org

      License:

      The Eclipse Public License Version 1.0: http://www.eclipse.org/legal/epl-v10.html
      File Path: /home/runner/.m2/repository/org/eclipse/xsd/org.eclipse.xsd/2.12.0/org.eclipse.xsd-2.12.0.jar
      MD5: 75fa52ffcf1c5d0d9f85ca9aa7a0e3de
      SHA1: 1d4c0da59535d3b79e73a91b1f161c97d3103668
      SHA256:0cbded7b090a2205c367b6d08f6ab32dc6857265b87673a4e51b77301ef1b953
      Referenced In Project/Scope: Tailormap API:compile
      org.eclipse.xsd-2.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@32.2

      Identifiers

      CVE-2023-4218  

      In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file (for example for review a foreign repository or patch).
      CWE-611 Improper Restriction of XML External Entity Reference

      CVSSv3:
      • Base Score: MEDIUM (5.0)
      • Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:1.3/RC:R/MAV:A

      References:

      Vulnerable Software & Versions: (show all)

      org.w3.xlink-32.2.jar

      Description:

      Xlink Schema EMF Model

      File Path: /home/runner/.m2/repository/org/geotools/ogc/org.w3.xlink/32.2/org.w3.xlink-32.2.jar
      MD5: 9a4fe8c89b0e49b205137d12ae26891b
      SHA1: baa7f66199acd2f2dfc7fdc270b40cc227866e3e
      SHA256:b563518cab004a2828e569158207b86611c52774aabd1f846f1d9d8235f2bc32
      Referenced In Project/Scope: Tailormap API:compile
      org.w3.xlink-32.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-metadata@32.2

      Identifiers

      p6spy-3.9.1.jar

      Description:

      property 'description'

      License:

      The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/p6spy/p6spy/3.9.1/p6spy-3.9.1.jar
      MD5: 8d85bf5aada43de0832c6a2f81c250a8
      SHA1: a393fe91de298097b0242a9f380267e2bb1e1003
      SHA256:197aa64a6676da578dac1097824accda7a89d5ab21c0829e05bfde92a176f4a1
      Referenced In Project/Scope: Tailormap API:compile
      p6spy-3.9.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.sentry/sentry-jdbc@8.0.0

      Identifiers

      picocontainer-1.2.jar

      Description:

      Please refer to the main website for documentation.

      File Path: /home/runner/.m2/repository/picocontainer/picocontainer/1.2/picocontainer-1.2.jar
      MD5: 3e2dea8daea96da71724cae35da4cc0c
      SHA1: c55e869dcdddd735acd8789b74863cde8d15d444
      SHA256:d729282e385ed351684e649e261b5b02399327c4713c6b100f122942f923412f
      Referenced In Project/Scope: Tailormap API:compile
      picocontainer-1.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools.xsd/gt-xsd-core@32.2

      Identifiers

      postgresql-42.7.5.jar

      Description:

      PostgreSQL JDBC Driver Postgresql

      License:

      BSD-2-Clause: https://jdbc.postgresql.org/about/license.html
      File Path: /home/runner/.m2/repository/org/postgresql/postgresql/42.7.5/postgresql-42.7.5.jar
      MD5: 5cd7ba0dfa9ec82c4812b5bf387de185
      SHA1: 747897987b86c741fb8b56f6b81929ae1e6e4b46
      SHA256:69020b3bd20984543e817393f2e6c01a890ef2e37a77dd11d6d8508181d079ab
      Referenced In Project/Scope: Tailormap API:compile
      postgresql-42.7.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      prometheus-metrics-config-1.3.5.jar

      Description:

              Configuration for Prometheus metrics and exposition formats.

      License:

      http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-config/1.3.5/prometheus-metrics-config-1.3.5.jar
      MD5: 8517ad3f2634ecb793c840bac7b9a671
      SHA1: c25f5a3e02c8de54cf4c38b21147ca2994135af6
      SHA256:3999e82258d9b8280c32c9b5a1e83a8746da19988d563b40a026c249374fd8ba
      Referenced In Project/Scope: Tailormap API:compile
      prometheus-metrics-config-1.3.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.3

      Identifiers

      prometheus-metrics-core-1.3.5.jar

      Description:

              Core Prometheus metric types

      License:

      http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-core/1.3.5/prometheus-metrics-core-1.3.5.jar
      MD5: 38bf2f0953eae7433322201092d4547a
      SHA1: 2169cfe39084609c72a1fcd1a5775f74a4531919
      SHA256:389c875fab0f62d56ae2efe061ee3cc0a1bf4fb37d5ce5d07afa6833aeb771bf
      Referenced In Project/Scope: Tailormap API:compile
      prometheus-metrics-core-1.3.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.3

      Identifiers

      prometheus-metrics-exposition-formats-1.3.5.jar

      Description:

              Prometheus exposition formats.

      License:

      http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-exposition-formats/1.3.5/prometheus-metrics-exposition-formats-1.3.5.jar
      MD5: a99a984da79c9cefb8e2e39064a1502d
      SHA1: 3a5d2539dad545b15a60f7113a01734779906d97
      SHA256:c93022d645ebb0fa40fc8e9c6658abc06b69eae01d13f1d14b6f50ac7b296b08
      Referenced In Project/Scope: Tailormap API:runtime
      prometheus-metrics-exposition-formats-1.3.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.3

      Identifiers

      prometheus-metrics-exposition-textformats-1.3.5.jar

      Description:

              Prometheus exposition text formats.

      License:

      http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-exposition-textformats/1.3.5/prometheus-metrics-exposition-textformats-1.3.5.jar
      MD5: 532c42cd04e4c2ba0ceeb4c9ae3f3e99
      SHA1: c23b4fadcc2bb27a32a48f81fb8ac27b3f8cf192
      SHA256:9090a4a7a6736a1305fc1cf555eb9a92ecea9610662cd45e3af81b2307bd00c3
      Referenced In Project/Scope: Tailormap API:runtime
      prometheus-metrics-exposition-textformats-1.3.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.3

      Identifiers

      prometheus-metrics-model-1.3.5.jar

      Description:

              Data model for read-only immutable Prometheus metrics snapshots.

      License:

      http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-model/1.3.5/prometheus-metrics-model-1.3.5.jar
      MD5: d746d3ca2179c59c753e6dfbc08cbe67
      SHA1: 06a58b494b55eb3c0627cd00ac3957dc660fd4cf
      SHA256:431021dc649b59d2a7cfb356e593d9e8e7baabfff5a6976018c0a4b2711922dc
      Referenced In Project/Scope: Tailormap API:compile
      prometheus-metrics-model-1.3.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.3

      Identifiers

      prometheus-metrics-tracer-common-1.3.5.jar

      Description:

          Common Module for Prometheus integrations with distributed tracing libraries.

      License:

      http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/io/prometheus/prometheus-metrics-tracer-common/1.3.5/prometheus-metrics-tracer-common-1.3.5.jar
      MD5: 601e36f07138df5f4d96c8db0c7d8ad5
      SHA1: adf529b691eb4514124662ad47e67676be52c3d8
      SHA256:6c59d43356538fc8b16403b8acd74ff08f1434c77d95c43611ed4ef91b898889
      Referenced In Project/Scope: Tailormap API:compile
      prometheus-metrics-tracer-common-1.3.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.3

      Identifiers

      quartz-2.5.0.jar

      Description:

      Quartz Enterprise Job Scheduler

      License:

      The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/quartz-scheduler/quartz/2.5.0/quartz-2.5.0.jar
      MD5: b45322b04a4c57c22717386e502a3447
      SHA1: f5f0e256f6c82299e0bccbf559a8ca38bd8c187b
      SHA256:eef3c9198e3f346ea1da386a0b940ed43d7904cf217ecc5755fbe7f4729f0804
      Referenced In Project/Scope: Tailormap API:compile
      quartz-2.5.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      re2j-1.6.jar

      Description:

      Linear time regular expressions for Java

      License:

      Go License: https://golang.org/LICENSE
      File Path: /home/runner/.m2/repository/com/google/re2j/re2j/1.6/re2j-1.6.jar
      MD5: 5f4aed37b6b18b402b2790160a50cd13
      SHA1: a13e879fd7971738d06020fefeb108cc14e14169
      SHA256:c8b5c3472d4db594a865b2e47f835d07fb8b1415eeba559dccfb0a6945f033cd
      Referenced In Project/Scope: Tailormap API:compile
      re2j-1.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-main@32.2

      Identifiers

      semver4j-5.3.0.jar

      Description:

      Semantic versioning for Java apps.

      License:

      The MIT License: https://opensource.org/licenses/MIT
      File Path: /home/runner/.m2/repository/org/semver4j/semver4j/5.3.0/semver4j-5.3.0.jar
      MD5: 9c6ca1212066b80489bf7a275a69a09d
      SHA1: 19a0eacad6a20072ee4f096f60c331dbd9fae1d1
      SHA256:dece0c947a8e10f62e1f4a417d462e6fe69c1a20fe07ac8d4e0cfe495cdc3dba
      Referenced In Project/Scope: Tailormap API:runtime
      semver4j-5.3.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.solr/solr-solrj@9.8.0

      Identifiers

      sentry-8.0.0.jar

      Description:

      SDK for sentry.io

      License:

      MIT: http://www.opensource.org/licenses/mit-license.php
      File Path: /home/runner/.m2/repository/io/sentry/sentry/8.0.0/sentry-8.0.0.jar
      MD5: 2085788525597c3c0ce38d7dedd62286
      SHA1: 092c5b6704a8f50c4deeeb6c08b2872c7a3285b3
      SHA256:c1b4ef4c6fd187a60e5378bbdf4a77712c01e60651ab2eaf0e932771eb876cdb
      Referenced In Project/Scope: Tailormap API:compile
      sentry-8.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      sentry-jdbc-8.0.0.jar

      Description:

      SDK for sentry.io

      License:

      MIT: http://www.opensource.org/licenses/mit-license.php
      File Path: /home/runner/.m2/repository/io/sentry/sentry-jdbc/8.0.0/sentry-jdbc-8.0.0.jar
      MD5: 4523bd7a2f66afdb0ca1478d1b28ab83
      SHA1: b9221c4e9645cc52338567b582d2a6194cfe91e7
      SHA256:a200cc66ef8afcc5be9671d319389094320dfa372a72915d0178ad96dfe86c39
      Referenced In Project/Scope: Tailormap API:compile
      sentry-jdbc-8.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      sentry-quartz-8.0.0.jar

      Description:

      SDK for sentry.io

      License:

      MIT: http://www.opensource.org/licenses/mit-license.php
      File Path: /home/runner/.m2/repository/io/sentry/sentry-quartz/8.0.0/sentry-quartz-8.0.0.jar
      MD5: 76f5fdc4a16181d9c23843530e0a89f7
      SHA1: 42202c6ea382b3dc460af5518131ade9835ba523
      SHA256:da6d285affd2b3a8b7f2f2f750d20cf8787aa5561753f7834063ee6e077765ff
      Referenced In Project/Scope: Tailormap API:compile
      sentry-quartz-8.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      sentry-spring-boot-jakarta-8.0.0.jar

      Description:

      SDK for sentry.io

      License:

      MIT: http://www.opensource.org/licenses/mit-license.php
      File Path: /home/runner/.m2/repository/io/sentry/sentry-spring-boot-jakarta/8.0.0/sentry-spring-boot-jakarta-8.0.0.jar
      MD5: ef62d1ee30c8892bc25ab74ddceb3766
      SHA1: 58399b510d7ebe5fcea4fdb8849f0dc5233d0fb7
      SHA256:3f889eff8f5314548ae90c2e3f954d661cf30fe1aed443542438c5d7bcae3500
      Referenced In Project/Scope: Tailormap API:compile
      sentry-spring-boot-jakarta-8.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.sentry/sentry-spring-boot-starter-jakarta@8.0.0

      Identifiers

      sentry-spring-boot-starter-jakarta-8.0.0.jar

      Description:

      SDK for sentry.io

      License:

      MIT: http://www.opensource.org/licenses/mit-license.php
      File Path: /home/runner/.m2/repository/io/sentry/sentry-spring-boot-starter-jakarta/8.0.0/sentry-spring-boot-starter-jakarta-8.0.0.jar
      MD5: 067736b8ab374b5ccac5d355135fdaff
      SHA1: d2e336712a8717991608dd214e5ffbae7c5e5309
      SHA256:05b83dd1a549e3cfc469fa167d2ebff35bb6754e22ec8c8cafbe465c4f667aa7
      Referenced In Project/Scope: Tailormap API:compile
      sentry-spring-boot-starter-jakarta-8.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      sentry-spring-jakarta-8.0.0.jar

      Description:

      SDK for sentry.io

      License:

      MIT: http://www.opensource.org/licenses/mit-license.php
      File Path: /home/runner/.m2/repository/io/sentry/sentry-spring-jakarta/8.0.0/sentry-spring-jakarta-8.0.0.jar
      MD5: 7c5ceab1ce9ab88e98ce0c47ea5dec8c
      SHA1: 9015360f63f7636cd6bede6f88c0a72ed8fe83cd
      SHA256:0f980976ef08604d0709e60d9689b7e5ecc648c00b249558c22af2b7ac193fc6
      Referenced In Project/Scope: Tailormap API:compile
      sentry-spring-jakarta-8.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.sentry/sentry-spring-boot-starter-jakarta@8.0.0

      Identifiers

      si-quantity-2.1.jar

      Description:

      Units of Measurement SI (Système International d'Unités)

      License:

      https://opensource.org/licenses/BSD-3-Clause
      File Path: /home/runner/.m2/repository/si/uom/si-quantity/2.1/si-quantity-2.1.jar
      MD5: 79685f60efca0051a6c579e1f1522542
      SHA1: 5617d2cf30898ffcc760807009fe947483bd867b
      SHA256:2cdcfd3e5395db5576f5efc0f224b5bbd0731f3ec7552afee6ee7b63a4f65820
      Referenced In Project/Scope: Tailormap API:compile
      si-quantity-2.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-api@32.2

      Identifiers

      si-units-2.1.jar

      Description:

      "Units of Measurement SI (Système International d'Unités)"

      License:

      "BSD 3-Clause";link="https://opensource.org/licenses/BSD-3-Clause"
      File Path: /home/runner/.m2/repository/si/uom/si-units/2.1/si-units-2.1.jar
      MD5: 43abf4b896da58d8bca0e87f412a8457
      SHA1: 7e812192ff1abbef6c79123249840c42b4e145d4
      SHA256:491ed9956ddf4b2e30180b087e1f6fb51debccb6d46785ae0d52026342013c51
      Referenced In Project/Scope: Tailormap API:compile
      si-units-2.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-api@32.2

      Identifiers

      slf4j-api-2.0.16.jar

      Description:

      The slf4j API

      License:

      http://www.opensource.org/licenses/mit-license.php
      File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.16/slf4j-api-2.0.16.jar
      MD5: c8de8f5d740584cb24b5652cfba8b3c4
      SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
      SHA256:a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
      Referenced In Project/Scope: Tailormap API:compile
      slf4j-api-2.0.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      snakeyaml-2.3.jar

      Description:

      YAML 1.1 parser and emitter for Java

      License:

      Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/yaml/snakeyaml/2.3/snakeyaml-2.3.jar
      MD5: 2a1c2ee8923dcd6bd6d025751af5df37
      SHA1: 936b36210e27320f920536f695cf1af210c44586
      SHA256:63a76fe66b652360bd4c2c107e6f0258daa7d4bb492008ba8c26fcd230ff9146
      Referenced In Project/Scope: Tailormap API:compile
      snakeyaml-2.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.sentry/sentry-spring-boot-starter-jakarta@8.0.0

      Identifiers

      solr-api-9.8.0.jar

      Description:

      Apache Solr (module: api)

      License:

      Apache 2: https://apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/apache/solr/solr-api/9.8.0/solr-api-9.8.0.jar
      MD5: a8c7e988c919de83786b6f54b7c166ea
      SHA1: 28761d3416d591ed721fdb265d68dbaba6570623
      SHA256:9f23156bb59c0c99580045174340323fc7a319e885ed1db7b0f29555066946bb
      Referenced In Project/Scope: Tailormap API:compile
      solr-api-9.8.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.solr/solr-solrj@9.8.0

      Identifiers

      spring-boot-3.4.2.jar

      Description:

      Spring Boot

      License:

      Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
      File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot/3.4.2/spring-boot-3.4.2.jar
      MD5: 86ca3db3cce93724cd98af52652ed357
      SHA1: b2514201ba6b838bd638a51619515501c5baefea
      SHA256:ffa5c7ce566a29ef592fda63c45f2d2dd5bcd90234dd4d43ecdc27be305c3e38
      Referenced In Project/Scope: Tailormap API:compile
      spring-boot-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.sentry/sentry-spring-boot-starter-jakarta@8.0.0

      Identifiers

      spring-boot-starter-web-3.4.2.jar

      Description:

      Starter for building web, including RESTful, applications using Spring MVC. Uses Tomcat as the default embedded container

      License:

      Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
      File Path: /home/runner/.m2/repository/org/springframework/boot/spring-boot-starter-web/3.4.2/spring-boot-starter-web-3.4.2.jar
      MD5: 1d35d081b4e724fc9039b581b497d6e0
      SHA1: cf1c8efe77dccf221acf5f0ce9cc24c718c0ca44
      SHA256:204712dd47656d4560b6c30d67a6ec00bd4445d89e4a54a03093f3ed79c4e9b0
      Referenced In Project/Scope: Tailormap API:compile
      spring-boot-starter-web-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      spring-core-6.2.2.jar

      Description:

      Spring Core

      License:

      Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
      File Path: /home/runner/.m2/repository/org/springframework/spring-core/6.2.2/spring-core-6.2.2.jar
      MD5: 8926dce67195ca4d4a0ce8fc9d293fb7
      SHA1: 94269e888dc979e75a1a1b9600d7153d72e6a7f1
      SHA256:bdb5370f08156ca32be8ed1aa9b879b66d7125a55bc8659c1a60193037b700a3
      Referenced In Project/Scope: Tailormap API:compile
      spring-core-6.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@2.4.1

      Identifiers

      spring-data-commons-3.4.2.jar

      Description:

      Core Spring concepts underpinning every Spring Data module.

      File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-commons/3.4.2/spring-data-commons-3.4.2.jar
      MD5: b6ce0adfbccab9f7fd0450ca666b9a15
      SHA1: 387ff91a749cce404f7a6e4a15a3b75ff497bdbc
      SHA256:57a92c28c02195d87d1aa43098bda6a9a5a06707644e86b90e7b3dfdc44c2649
      Referenced In Project/Scope: Tailormap API:compile
      spring-data-commons-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.4.2

      Identifiers

      spring-data-jpa-3.4.2.jar

      Description:

      Spring Data module for JPA repositories.

      File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-jpa/3.4.2/spring-data-jpa-3.4.2.jar
      MD5: 8f4337daea8983d5b29950a9749043ac
      SHA1: 4213f2d185b49447057823f5ef9de41e931f4f2e
      SHA256:8ec10a21d16d965719a7b5ecf1bc54c276b371d894214602af69d04ecc09f77e
      Referenced In Project/Scope: Tailormap API:compile
      spring-data-jpa-3.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.4.2

      Identifiers

      spring-data-rest-core-4.4.2.jar

      Description:

      Spring Data REST - Core

      File Path: /home/runner/.m2/repository/org/springframework/data/spring-data-rest-core/4.4.2/spring-data-rest-core-4.4.2.jar
      MD5: ef4276bfe84e071da060512c1a2dddbb
      SHA1: b115b5369e9ace3199efe737d1230d56281cf730
      SHA256:400777a2eebe733248c708815c5f3137231cd9de9c8381edd7e7fd29e07b2bfe
      Referenced In Project/Scope: Tailormap API:compile
      spring-data-rest-core-4.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.data/spring-data-rest-webmvc@4.4.2

      Identifiers

      spring-hateoas-2.4.1.jar

      Description:

      Library to support implementing representations for
		hyper-text driven REST web services.

      License:

      Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
      File Path: /home/runner/.m2/repository/org/springframework/hateoas/spring-hateoas/2.4.1/spring-hateoas-2.4.1.jar
      MD5: 26c2ec5acfd226270424f68de562d8b4
      SHA1: 86a69fe432361c0697aff89b4c8f293edffca26d
      SHA256:20433db64218c49512a7197a6a15fec2fa6bf056bf21bf6a0af81a5faef997fc
      Referenced In Project/Scope: Tailormap API:compile
      spring-hateoas-2.4.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      spring-plugin-core-3.0.0.jar

      Description:

      Core plugin infrastructure

      License:

      Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
      File Path: /home/runner/.m2/repository/org/springframework/plugin/spring-plugin-core/3.0.0/spring-plugin-core-3.0.0.jar
      MD5: d29a8f831dfe90d150ab694489f2e7c2
      SHA1: d56aa02dd7272dca30aa598dc8b72e823227046a
      SHA256:edf72d44b9cf1199cc783d620f5f86df82fb378521dac313540086e6c3c66ff0
      Referenced In Project/Scope: Tailormap API:compile
      spring-plugin-core-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.hateoas/spring-hateoas@2.4.1

      Identifiers

      spring-security-core-6.4.2.jar

      Description:

      Spring Security

      License:

      Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
      File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-core/6.4.2/spring-security-core-6.4.2.jar
      MD5: 495087db51c5f60a47680ffbbf2dcb65
      SHA1: 51302b2af3f01eb79fdc7164a4cc3a3aa7e3b541
      SHA256:6b8f4d017c6926d351710604f71f91e9b810b3c2b759ede76f606b4e1942cdcc
      Referenced In Project/Scope: Tailormap API:compile
      spring-security-core-6.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@3.4.2

      Identifiers

      spring-security-oauth2-core-6.4.2.jar

      Description:

      Spring Security

      License:

      Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
      File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-oauth2-core/6.4.2/spring-security-oauth2-core-6.4.2.jar
      MD5: 94fb9b1182db699c13dd0369872125d6
      SHA1: bbf870c11c26edbe8585d2dbc92261a546a5ff60
      SHA256:57dc0be23677d1e273b72d368677b739d95e83e8d730b56a0f9cb3d18ffccc41
      Referenced In Project/Scope: Tailormap API:compile
      spring-security-oauth2-core-6.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@3.4.2

      Identifiers

      spring-security-web-6.4.2.jar

      Description:

      Spring Security

      License:

      Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
      File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-web/6.4.2/spring-security-web-6.4.2.jar
      MD5: aac3216773e5e76ace30f4c434f0163e
      SHA1: 733a3bbbdca56225676fb7f4e3f317c2075fc383
      SHA256:bc625e47c2cbcd55da04a6939d786da789cb270cd06d418c1adecca165e1e0ff
      Referenced In Project/Scope: Tailormap API:compile
      spring-security-web-6.4.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-security@3.4.2

      Identifiers

      spring-security-web-6.4.2.jar: spring-security-webauthn.js

      File Path: /home/runner/.m2/repository/org/springframework/security/spring-security-web/6.4.2/spring-security-web-6.4.2.jar/org/springframework/security/spring-security-webauthn.js
      MD5: a1047a2317a49f0f2a7f25960435784d
      SHA1: 27fb3541c8f1d2fbdeaeab2f5fdc6c5712afcf6f
      SHA256:cc3fcb0966b1f9562ea3164ef59fad3131789744cdd598c18e3ddc74017f57a4
      Referenced In Project/Scope: Tailormap API:compile

      Identifiers

      • None

      spring-web-6.2.2.jar

      Description:

      Spring Web

      License:

      Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0
      File Path: /home/runner/.m2/repository/org/springframework/spring-web/6.2.2/spring-web-6.2.2.jar
      MD5: 16705378e279a36b7d947ad7a0a6a797
      SHA1: 0bd2ef98bf98b6ecf8dd29106ae27b7515524c21
      SHA256:cebf79393931ccbbfb4b06a17cfff3bf151cb1f704761f762047f3c1182fe00c
      Referenced In Project/Scope: Tailormap API:compile
      spring-web-6.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-web@3.4.2

      Identifiers

      sse-eventbus-2.0.1.jar

      Description:

      A simple eventbus library to track connected sse clients and broadcast messages

      License:

      Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/ch/rasc/sse-eventbus/2.0.1/sse-eventbus-2.0.1.jar
      MD5: adcf084da0a9ef37064f3f4dea312c13
      SHA1: 852801f4029f738503c659765ef2cfaa11ad41b4
      SHA256:2967f60039f625dc379dee17539e7f9424fed02cb3930bbe84addb68bbb285e8
      Referenced In Project/Scope: Tailormap API:compile
      sse-eventbus-2.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      swagger-annotations-2.2.28.jar

      Description:

      swagger-annotations

      License:

      "Apache License 2.0";link="http://www.apache.org/licenses/LICENSE-2.0.html"
      File Path: /home/runner/.m2/repository/io/swagger/core/v3/swagger-annotations/2.2.28/swagger-annotations-2.2.28.jar
      MD5: 38e83317f654d1085a9cfdd98d414419
      SHA1: fc294dfa7b03b05dac048addd583103abf1caf59
      SHA256:6318ae1af23ad8e09dea180f9f13f07ad868a19e331a73c7ec1507242294f54a
      Referenced In Project/Scope: Tailormap API:compile
      swagger-annotations-2.2.28.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      swagger-annotations-jakarta-2.2.22.jar

      Description:

      swagger-annotations-jakarta

      License:

      "Apache License 2.0";link="http://www.apache.org/licenses/LICENSE-2.0.html"
      File Path: /home/runner/.m2/repository/io/swagger/core/v3/swagger-annotations-jakarta/2.2.22/swagger-annotations-jakarta-2.2.22.jar
      MD5: 0df4a41a0f292514d219439f9a20f3a3
      SHA1: 1efc0b0af32fce629f0786062c89e8b117abe120
      SHA256:f2caefc17f7989a59aea59785f746201ea88635cb5c440c582d9a8ebdbf2a96f
      Referenced In Project/Scope: Tailormap API:compile
      swagger-annotations-jakarta-2.2.22.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.solr/solr-solrj@9.8.0

      Identifiers

      swagger-initializer.js

      File Path: /home/runner/work/tailormap-api/tailormap-api/src/main/resources/static/swagger-ui/swagger-initializer.js
      MD5: 982555cacc0cf7ebf5307dc607579416
      SHA1: 8e695db71da2e1820a01415150bf79901f0c152e
      SHA256:b5afeb4c34a10ec914c144e08701987e723ec85580ef8c07da92fc5572306faa
      Referenced In Project/Scope: Tailormap API

      Identifiers

      • None

      swagger-ui-5.18.2.jar

      Description:

      WebJar for Swagger UI

      License:

      Apache-2.0
      File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.18.2/swagger-ui-5.18.2.jar
      MD5: 124dc927d3740dacb2ee2c23dce93672
      SHA1: 368118833fc82beedbc17783972c836aa22e0872
      SHA256:b680a34c34a06949cbe4d99c06d7c6e8f3ac229951a71a62d5ee5a5a6496b060
      Referenced In Project/Scope: Tailormap API:compile
      swagger-ui-5.18.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      swagger-ui-5.18.2.jar: swagger-initializer.js

      File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.18.2/swagger-ui-5.18.2.jar/META-INF/resources/webjars/swagger-ui/5.18.2/swagger-initializer.js
      MD5: ff995915f51c051c59fed883f5d7be28
      SHA1: c434dd8fbfa625a10351681d3037ee79d5682207
      SHA256:a895034f24f12d7cd81ec47c98da4f15721d9d9a8d2405f22f21704821f81d02
      Referenced In Project/Scope: Tailormap API:compile

      Identifiers

      • None

      swagger-ui-5.18.2.jar: swagger-ui-bundle.js

      File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.18.2/swagger-ui-5.18.2.jar/META-INF/resources/webjars/swagger-ui/5.18.2/swagger-ui-bundle.js
      MD5: 6c23777357d2beae9650f9aa035d93fb
      SHA1: 2dd4a527cd144d3bd46fd8c9bacf0d0d8cf37970
      SHA256:c50b94bbc4f02394326fb7aed1f4fb693b3677f4b3d3344e0d6131808cbf281f
      Referenced In Project/Scope: Tailormap API:compile

      Identifiers

      • None

      swagger-ui-5.18.2.jar: swagger-ui-es-bundle-core.js

      File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.18.2/swagger-ui-5.18.2.jar/META-INF/resources/webjars/swagger-ui/5.18.2/swagger-ui-es-bundle-core.js
      MD5: 34a96304e1c4053e4e66b5cb43ef4ea9
      SHA1: 509070932e42056b14163a6033c207a40b57a69f
      SHA256:ff910dae7bee2a8f0a8a607e20f02fc688719a8d01fe581fac4894e7515c532a
      Referenced In Project/Scope: Tailormap API:compile

      Identifiers

      • None

      swagger-ui-5.18.2.jar: swagger-ui-es-bundle.js

      File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.18.2/swagger-ui-5.18.2.jar/META-INF/resources/webjars/swagger-ui/5.18.2/swagger-ui-es-bundle.js
      MD5: c9ca2610688e579a9687f1a5c8359f44
      SHA1: f370c53a45936e180b467cb56768b7150406e3f2
      SHA256:89c69912ca57a4bf361f137340166a2703d59640d254671a42e0ca49dbf5e398
      Referenced In Project/Scope: Tailormap API:compile

      Identifiers

      • None

      swagger-ui-5.18.2.jar: swagger-ui-standalone-preset.js

      File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.18.2/swagger-ui-5.18.2.jar/META-INF/resources/webjars/swagger-ui/5.18.2/swagger-ui-standalone-preset.js
      MD5: 6b2892eb9458da5c3224817b3984d14c
      SHA1: c50826e5fe33d4522a5652f0192cc77b1e05c3a9
      SHA256:6c5a3338e69d84e7b05117b9ba7b141d24bd3fc102a9eb02e804d3b04dcec5a1
      Referenced In Project/Scope: Tailormap API:compile

      Identifiers

      • None

      swagger-ui-5.18.2.jar: swagger-ui.js

      File Path: /home/runner/.m2/repository/org/webjars/swagger-ui/5.18.2/swagger-ui-5.18.2.jar/META-INF/resources/webjars/swagger-ui/5.18.2/swagger-ui.js
      MD5: 34f4d9ea67dea964298676cec88da58c
      SHA1: bca7cbf4b9dc86530de444caa172bf03097d38eb
      SHA256:7dfacb6471c443f83ce00fae977c966b5d0a934f7068e0311dc4173ee66e6af8
      Referenced In Project/Scope: Tailormap API:compile

      Identifiers

      • None

      systems-common-2.1.jar

      Description:

      Parent POM for Unit Systems

      License:

      BSD;link=LICENSE
      File Path: /home/runner/.m2/repository/systems/uom/systems-common/2.1/systems-common-2.1.jar
      MD5: 8c3a56e267bbd26bb947c826e51bee2b
      SHA1: a173cc6f1fedc8b32498d6cc9599251baa72de27
      SHA256:b3cc1f3e604dcd18d3bba266db5fd01744bbd6b02f147377d4016585ba375cff
      Referenced In Project/Scope: Tailormap API:compile
      systems-common-2.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-api@32.2

      Identifiers

      tomcat-embed-core-10.1.34.jar

      Description:

      Core Tomcat implementation

      License:

      Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-core/10.1.34/tomcat-embed-core-10.1.34.jar
      MD5: 697a86b4e96b0e0bfc7790d4aad03fe7
      SHA1: f610f84be607fbc82e393cc220f0ad45f92afc91
      SHA256:5817bbb6c3a8d405a9f51ea0d402786114b4e8fd6d7ac4dd23ca34ac8d38a593
      Referenced In Project/Scope: Tailormap API:compile
      tomcat-embed-core-10.1.34.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-web@3.4.2

      Identifiers

      tomcat-embed-el-10.1.34.jar

      Description:

      Core Tomcat implementation

      License:

      Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
      File Path: /home/runner/.m2/repository/org/apache/tomcat/embed/tomcat-embed-el/10.1.34/tomcat-embed-el-10.1.34.jar
      MD5: 0e6b9caed9d638343f532ccd365a9708
      SHA1: d2b2daca3bc999c62e58ae36b45ba0582530fb25
      SHA256:54f10ed773387621f5c4fb7e526c2d1674f5d72fc4d86ed87238a750b7fdbfa0
      Referenced In Project/Scope: Tailormap API:compile
      tomcat-embed-el-10.1.34.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.springframework.boot/spring-boot-starter-validation@3.4.2

      Identifiers

      txw2-4.0.5.jar

      Description:

              TXW is a library that allows you to write XML documents.

      File Path: /home/runner/.m2/repository/org/glassfish/jaxb/txw2/4.0.5/txw2-4.0.5.jar
      MD5: 2f5aa7dbd5e326562cff6ce720a1485a
      SHA1: f36a4ef12120a9bb06d766d6a0e54b144fd7ed98
      SHA256:917355bc451481f30d043b24d123110517966af34383901773882810dca480e5
      Referenced In Project/Scope: Tailormap API:runtime
      txw2-4.0.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.hibernate.orm/hibernate-core@6.6.5.Final

      Identifiers

      unit-api-2.2.jar

      Description:

      Units of Measurement Standard - This JSR specifies Java
        packages for modeling and working with measurement values, quantities
        and their corresponding units.

      License:

      BSD 3-Clause: LICENSE
      File Path: /home/runner/.m2/repository/javax/measure/unit-api/2.2/unit-api-2.2.jar
      MD5: 6cbc2bae2cb63cb4f85c5a187ee7dda2
      SHA1: 2b624f7334b94a82c74cb954ede9fb1179b8d30c
      SHA256:667487e1ee57298cdc767885f00b86c899b2fe7e72dc00b6560a6aa64f2bc9c4
      Referenced In Project/Scope: Tailormap API:compile
      unit-api-2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-api@32.2

      Identifiers

      uom-lib-common-2.2.jar

      Description:

      Units Common Library

      License:

      BSD: LICENSE
      File Path: /home/runner/.m2/repository/tech/uom/lib/uom-lib-common/2.2/uom-lib-common-2.2.jar
      MD5: eb6a1296ea160f731ac81ab8a2c7fed7
      SHA1: 94a52abfdad3935c3769b4caab3ce9d384d8fb4e
      SHA256:a01ece1c236b7b15a431b0383bdddf06dc6d7a85290e9a62b63904e1e4e0dc0d
      Referenced In Project/Scope: Tailormap API:compile
      uom-lib-common-2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-api@32.2

      Identifiers

      value-2.10.1.jar

      Description:

      Compile time annotations and compile time annotation processor to generate consistent value object using
    either abstract class, interface or annotation as a base.

      File Path: /home/runner/.m2/repository/org/immutables/value/2.10.1/value-2.10.1.jar
      MD5: 49590d1e9eaa41c358e64d05875fe828
      SHA1: 3d3a69771f4c33317da51a0ff4d12dd2fd06a7db
      SHA256:ee8d4eb211cb0625adac485b4f874ffff4f6e678008ea50263705212a574265c
      Referenced In Project/Scope: Tailormap API:compile
      value-2.10.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      webjars-locator-core-0.59.jar

      Description:

      WebJar Locator Core functionality

      License:

      MIT: https://github.com/webjars/webjars-locator-core/blob/master/LICENSE.md
      File Path: /home/runner/.m2/repository/org/webjars/webjars-locator-core/0.59/webjars-locator-core-0.59.jar
      MD5: 3138e5b870eddc24595a2c658fa1d648
      SHA1: a25e04cb0437d88eb177af1dface14edcd0cd767
      SHA256:86e89c3504205ecfbc169cffcbc220bb2f4a68077acc5a95692d1129bf0e53fb
      Referenced In Project/Scope: Tailormap API:compile
      webjars-locator-core-0.59.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.tailormap/tailormap-api@11.4.6-SNAPSHOT

      Identifiers

      xml-commons-resolver-1.2.jar

      File Path: /home/runner/.m2/repository/org/apache/xml/xml-commons-resolver/1.2/xml-commons-resolver-1.2.jar
      MD5: 706c533146c1f4ee46b66659ea14583a
      SHA1: 3d0f97750b3a03e0971831566067754ba4bfd68c
      SHA256:47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1
      Referenced In Project/Scope: Tailormap API:compile
      xml-commons-resolver-1.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.geotools/gt-xml@32.2

      Identifiers



      This report contains data retrieved from the National Vulnerability Database.
      This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
      This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
      This report may contain data retrieved from RetireJS.
      This report may contain data retrieved from the Sonatype OSS Index.