Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 3.0.2
Report Generated On: Feb 6, 2018 at 16:41:17 -08:00
Dependencies Scanned: 4 (4 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE 2002: 18/01/2018 01:10:43
NVD CVE 2003: 18/01/2018 01:07:26
NVD CVE 2004: 18/01/2018 01:06:31
NVD CVE 2005: 18/01/2018 01:04:42
NVD CVE 2006: 18/01/2018 01:01:51
NVD CVE 2007: 25/01/2018 00:35:13
NVD CVE 2008: 26/01/2018 00:27:10
NVD CVE 2009: 04/02/2018 00:40:55
NVD CVE 2010: 18/01/2018 00:44:46
NVD CVE 2011: 06/02/2018 15:27:47
NVD CVE 2012: 06/02/2018 15:27:50
NVD CVE 2013: 04/02/2018 00:32:13
NVD CVE 2014: 06/02/2018 15:27:49
NVD CVE 2015: 06/02/2018 00:20:55
NVD CVE 2016: 06/02/2018 00:15:37
NVD CVE 2017: 06/02/2018 15:27:48
NVD CVE 2018: 06/02/2018 00:00:19
NVD CVE Checked: 06/02/2018 15:42:24
NVD CVE Modified: 06/02/2018 15:01:25
VersionCheckOn: 1517960544600

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	GAV	Evidence Count
gson-2.8.1.jar	com.google.code.gson:gson:2.8.1 ✓	29
javapoet-1.9.0.jar	com.squareup:javapoet:1.9.0 ✓	25
jgrapht-core-1.0.1.jar	org.jgrapht:jgrapht-core:1.0.1 ✓	25
jgrapht-ext-1.0.1.jar	org.jgrapht:jgrapht-ext:1.0.1 ✓	25

Dependencies

gson-2.8.1.jar

Description: Gson JSON library

File Path: /Users/rex.hoffman/.m2/repository/com/google/code/gson/gson/2.8.1/gson-2.8.1.jar
MD5: 2c334d82c64b56ae59ea1bdcbb674303
SHA1: 02a8e0aa38a2e21cb39e2f5a7d6704cbdc941da0
Referenced In Project/Scope: AptSpringModel:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	central	groupid	com.google.code.gson	Highest
Vendor	file	name	gson	High
Vendor	pom	parent-artifactid	gson-parent	Low
Vendor	pom	groupid	google.code.gson	Highest
Vendor	Manifest	bundle-symbolicname	com.google.gson	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8	Low
Vendor	Manifest	bundle-contactaddress	https://github.com/google/gson	Low
Vendor	manifest	Bundle-Description	Gson JSON library	Medium
Vendor	pom	artifactid	gson	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	pom	groupid	com.google.code.gson	Highest
Vendor	pom	parent-groupid	com.google.code.gson	Medium
Vendor	pom	name	Gson	High
Product	pom	groupid	google.code.gson	Low
Product	pom	parent-groupid	com.google.code.gson	Low
Product	file	name	gson	High
Product	pom	parent-artifactid	gson-parent	Medium
Product	Manifest	Bundle-Name	Gson	Medium
Product	Manifest	bundle-symbolicname	com.google.gson	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8	Low
Product	Manifest	bundle-contactaddress	https://github.com/google/gson	Low
Product	manifest	Bundle-Description	Gson JSON library	Medium
Product	central	artifactid	gson	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	pom	name	Gson	High
Product	pom	artifactid	gson	Highest
Version	pom	version	2.8.1	Highest
Version	file	version	2.8.1	Highest
Version	central	version	2.8.1	Highest

Identifiers

maven: com.google.code.gson:gson:2.8.1 ✓ Confidence:Highest

javapoet-1.9.0.jar

Description: Use beautiful Java code to generate beautiful Java code.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/rex.hoffman/.m2/repository/com/squareup/javapoet/1.9.0/javapoet-1.9.0.jar
MD5: e92008edb0ea9929cb9d50f9801ccce8
SHA1: 00ecc5cf9c221d55481163e773b24336db149e51
Referenced In Project/Scope: AptSpringModel:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Square, Inc.	High
Vendor	pom	groupid	squareup	Highest
Vendor	pom	name	JavaPoet	High
Vendor	pom	description	Use beautiful Java code to generate beautiful Java code.	Medium
Vendor	pom	organization url	http://squareup.com	Medium
Vendor	file	name	javapoet	High
Vendor	jar	package name	squareup	Low
Vendor	jar	package name	javapoet	Low
Vendor	pom	artifactid	javapoet	Low
Vendor	central	groupid	com.squareup	Highest
Vendor	pom	groupid	com.squareup	Highest
Vendor	pom	url	http://github.com/square/javapoet/	Highest
Product	pom	url	http://github.com/square/javapoet/	Medium
Product	file	name	javapoet	High
Product	pom	groupid	squareup	Low
Product	jar	package name	javapoet	Low
Product	pom	organization url	http://squareup.com	Low
Product	pom	name	JavaPoet	High
Product	central	artifactid	javapoet	Highest
Product	pom	description	Use beautiful Java code to generate beautiful Java code.	Medium
Product	pom	artifactid	javapoet	Highest
Product	pom	organization name	Square, Inc.	Low
Version	central	version	1.9.0	Highest
Version	file	version	1.9.0	Highest
Version	pom	version	1.9.0	Highest

Identifiers

maven: com.squareup:javapoet:1.9.0 ✓ Confidence:Highest

jgrapht-core-1.0.1.jar

Description: A Java class library for graph-theory data structures and algorithms.

License:

GNU Lesser General Public License Version 2.1, February 1999: http://jgrapht.sourceforge.net/LGPL.html
Eclipse Public License (EPL) 1.0: http://www.eclipse.org/legal/epl-v10.html

File Path: /Users/rex.hoffman/.m2/repository/org/jgrapht/jgrapht-core/1.0.1/jgrapht-core-1.0.1.jar
MD5: b827590449da3085ce7cc39736e999af
SHA1: 9ecbb2734a9b16126a56bf6544cafba2767d0f44
Referenced In Project/Scope: AptSpringModel:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-artifactid	jgrapht	Low
Vendor	manifest	Bundle-Description	A Java class library for graph-theory data structures and algorithms.	Medium
Vendor	pom	artifactid	jgrapht-core	Low
Vendor	pom	parent-groupid	org.jgrapht	Medium
Vendor	central	groupid	org.jgrapht	Highest
Vendor	Manifest	bundle-symbolicname	org.jgrapht.core	Medium
Vendor	file	name	jgrapht-core	High
Vendor	pom	name	JGraphT - Core	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	groupid	org.jgrapht	Highest
Vendor	pom	groupid	jgrapht	Highest
Product	pom	artifactid	jgrapht-core	Highest
Product	pom	parent-artifactid	jgrapht	Medium
Product	manifest	Bundle-Description	A Java class library for graph-theory data structures and algorithms.	Medium
Product	central	artifactid	jgrapht-core	Highest
Product	Manifest	bundle-symbolicname	org.jgrapht.core	Medium
Product	file	name	jgrapht-core	High
Product	pom	groupid	jgrapht	Low
Product	pom	name	JGraphT - Core	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	parent-groupid	org.jgrapht	Low
Product	Manifest	Bundle-Name	JGraphT - Core	Medium
Version	central	version	1.0.1	Highest
Version	file	version	1.0.1	Highest
Version	pom	version	1.0.1	Highest

Identifiers

maven: org.jgrapht:jgrapht-core:1.0.1 ✓ Confidence:Highest

jgrapht-ext-1.0.1.jar

Description: A Java class library for graph-theory data structures and algorithms.

License:

GNU Lesser General Public License Version 2.1, February 1999: http://jgrapht.sourceforge.net/LGPL.html
Eclipse Public License (EPL) 1.0: http://www.eclipse.org/legal/epl-v10.html

File Path: /Users/rex.hoffman/.m2/repository/org/jgrapht/jgrapht-ext/1.0.1/jgrapht-ext-1.0.1.jar
MD5: 407260aa727b906138b712b175f808b0
SHA1: 9c0dbf85af4c72a67c158e85b8e2725bdb670a80
Referenced In Project/Scope: AptSpringModel:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-artifactid	jgrapht	Low
Vendor	manifest	Bundle-Description	A Java class library for graph-theory data structures and algorithms.	Medium
Vendor	Manifest	bundle-symbolicname	org.jgrapht.ext	Medium
Vendor	pom	parent-groupid	org.jgrapht	Medium
Vendor	central	groupid	org.jgrapht	Highest
Vendor	pom	name	JGraphT - Ext	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	artifactid	jgrapht-ext	Low
Vendor	pom	groupid	org.jgrapht	Highest
Vendor	file	name	jgrapht-ext	High
Vendor	pom	groupid	jgrapht	Highest
Product	central	artifactid	jgrapht-ext	Highest
Product	pom	parent-artifactid	jgrapht	Medium
Product	manifest	Bundle-Description	A Java class library for graph-theory data structures and algorithms.	Medium
Product	Manifest	Bundle-Name	JGraphT - Ext	Medium
Product	Manifest	bundle-symbolicname	org.jgrapht.ext	Medium
Product	pom	name	JGraphT - Ext	High
Product	pom	groupid	jgrapht	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	artifactid	jgrapht-ext	Highest
Product	file	name	jgrapht-ext	High
Product	pom	parent-groupid	org.jgrapht	Low
Version	central	version	1.0.1	Highest
Version	file	version	1.0.1	Highest
Version	pom	version	1.0.1	Highest

Identifiers

maven: org.jgrapht:jgrapht-ext:1.0.1 ✓ Confidence:Highest

How to read the report | Suppressing false positives | Getting Help: google group | github issues

Project: AptSpringModel

Dependencies

gson-2.8.1.jar

Evidence

Identifiers

javapoet-1.9.0.jar

Evidence

Identifiers

jgrapht-core-1.0.1.jar

Evidence

Identifiers

jgrapht-ext-1.0.1.jar

Evidence

Identifiers