Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

Project: javabean-tester

com.github.hazendaz:javabean-tester:2.12.2

Scan Information (show all):

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency Vulnerability IDs Package Highest Severity CVE Count Confidence Evidence Count
apiguardian-api-1.1.2.jar pkg:maven/org.apiguardian/apiguardian-api@1.1.2   0 40
byte-buddy-1.18.10.jar pkg:maven/net.bytebuddy/byte-buddy@1.18.10   0 29
equalsverifier-4.5.jar pkg:maven/nl.jqno.equalsverifier/equalsverifier@4.5   0 33
javassist-3.31.0-GA.jar pkg:maven/org.javassist/javassist@3.31.0-GA   0 59
jspecify-1.0.0.jar pkg:maven/org.jspecify/jspecify@1.0.0   0 32
junit-jupiter-engine-6.1.0.jar cpe:2.3:a:4d:4d:6.1.0:*:*:*:*:*:*:* pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.1.0   0 Low 84
junit-platform-engine-6.1.0.jar cpe:2.3:a:fan_platform_project:fan_platform:6.1.0:*:*:*:*:*:*:* pkg:maven/org.junit.platform/junit-platform-engine@6.1.0   0 Low 82
lombok-1.18.46.jar: mavenEcjBootstrapAgent.jar   0 7
lombok-1.18.46.jar pkg:maven/org.projectlombok/lombok@1.18.46   0 36
mockito-core-5.23.0.jar pkg:maven/org.mockito/mockito-core@5.23.0   0 41
mockito-junit-jupiter-5.23.0.jar pkg:maven/org.mockito/mockito-junit-jupiter@5.23.0   0 39
objenesis-3.5.jar pkg:maven/org.objenesis/objenesis@3.5   0 29
opentest4j-1.3.0.jar pkg:maven/org.opentest4j/opentest4j@1.3.0   0 60
slf4j-api-2.0.18.jar pkg:maven/org.slf4j/slf4j-api@2.0.18   0 29

Dependencies (vulnerable)

apiguardian-api-1.1.2.jar

Description:

@API Guardian

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apiguardian\apiguardian-api\1.1.2\apiguardian-api-1.1.2.jar
MD5: 8c7de3f82037fa4a2e8be2a2f13092af
SHA1: a231e0d844d2721b0fa1b238006d15c6ded6842a
SHA256:b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38
Referenced In Project/Scope: javabean-tester:compile
apiguardian-api-1.1.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.junit.jupiter/junit-jupiter@6.1.0

Identifiers

  • pkg:maven/org.apiguardian/apiguardian-api@1.1.2   (Confidence:High)

byte-buddy-1.18.10.jar

Description:

        Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
    

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\net\bytebuddy\byte-buddy\1.18.10\byte-buddy-1.18.10.jar
MD5: 058f205c90d1563d2cb90d9e3567cef8
SHA1: 5b34812ced047973a6d42654d50c3b69124ce587
SHA256:8b31f4ea806afaa900b67bffd8498760d1f65464f4c2ea78cdbda2f3e633898b
Referenced In Project/Scope: javabean-tester:compile
byte-buddy-1.18.10.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/javabean-tester@2.12.2

Identifiers

  • pkg:maven/net.bytebuddy/byte-buddy@1.18.10   (Confidence:High)

equalsverifier-4.5.jar

Description:

EqualsVerifier can be used in JUnit unit tests to verify whether the contract for the equals and hashCode methods is met.

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\nl\jqno\equalsverifier\equalsverifier\4.5\equalsverifier-4.5.jar
MD5: 94d8ef4326fcda679fdec6070186b2d0
SHA1: 4c00e55571a817467057a33e3ba2b0026d215e83
SHA256:76f64ce3bf02070d44cba92e2f1eabb1f5dbedb9ba6b3dd3becdaa4b148a52f0
Referenced In Project/Scope: javabean-tester:compile
equalsverifier-4.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/javabean-tester@2.12.2

Identifiers

  • pkg:maven/nl.jqno.equalsverifier/equalsverifier@4.5   (Confidence:High)

javassist-3.31.0-GA.jar

Description:

    Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple. It is a class library for editing bytecodes in Java.
  

License:

MPL 1.1: https://www.mozilla.org/en-US/MPL/1.1/
LGPL 2.1: https://www.gnu.org/licenses/lgpl-2.1.html
Apache License 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: C:\Users\Jeremy\.m2\repository\org\javassist\javassist\3.31.0-GA\javassist-3.31.0-GA.jar
MD5: 65adb3b483a0d6eb7b8db2f5b3327a5e
SHA1: 1f3dea3154928f85fd520c2a8743522dc820b000
SHA256:44b6b900ca352f4a0048e9428efab16582a014e10f8f65b4e58f5136c704624e
Referenced In Project/Scope: javabean-tester:compile
javassist-3.31.0-GA.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/javabean-tester@2.12.2

Identifiers

  • pkg:maven/org.javassist/javassist@3.31.0-GA   (Confidence:High)

jspecify-1.0.0.jar

Description:

An artifact of well-named and well-specified annotations to power static analysis checks

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\jspecify\jspecify\1.0.0\jspecify-1.0.0.jar
MD5: 9133aba420d0ca3b001dbb6ae9992cf6
SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507
SHA256:1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab
Referenced In Project/Scope: javabean-tester:compile
jspecify-1.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.junit.jupiter/junit-jupiter@6.1.0

Identifiers

  • pkg:maven/org.jspecify/jspecify@1.0.0   (Confidence:High)

junit-jupiter-engine-6.1.0.jar

Description:

Module "junit-jupiter-engine" of JUnit

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html
File Path: C:\Users\Jeremy\.m2\repository\org\junit\jupiter\junit-jupiter-engine\6.1.0\junit-jupiter-engine-6.1.0.jar
MD5: 71d1079fd2b992721ceaa04e38c281de
SHA1: 82414ee1a0308d2f096c37d317b93b66c13dbb9a
SHA256:ea707b9647084619a0fc911cefb25037540d58b2800f8ead1fc6a2baf58b1da5
Referenced In Project/Scope: javabean-tester:runtime
junit-jupiter-engine-6.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.junit.jupiter/junit-jupiter@6.1.0

Identifiers

  • pkg:maven/org.junit.jupiter/junit-jupiter-engine@6.1.0   (Confidence:High)
  • cpe:2.3:a:4d:4d:6.1.0:*:*:*:*:*:*:*   (Confidence:Low)   

junit-platform-engine-6.1.0.jar

Description:

Module "junit-platform-engine" of JUnit

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html
File Path: C:\Users\Jeremy\.m2\repository\org\junit\platform\junit-platform-engine\6.1.0\junit-platform-engine-6.1.0.jar
MD5: 93042cfabaef86dbd512eff74d8ac9ac
SHA1: 754271e8493a0be2838f3500b30971969b8603d0
SHA256:3fb6be76c26ab0f94fe084e3fd0a39e1d25e22129929a61b29bd80a052b93ea5
Referenced In Project/Scope: javabean-tester:runtime
junit-platform-engine-6.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.junit.jupiter/junit-jupiter@6.1.0

Identifiers

  • pkg:maven/org.junit.platform/junit-platform-engine@6.1.0   (Confidence:High)
  • cpe:2.3:a:fan_platform_project:fan_platform:6.1.0:*:*:*:*:*:*:*   (Confidence:Low)   

lombok-1.18.46.jar: mavenEcjBootstrapAgent.jar

File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.46\lombok-1.18.46.jar\lombok\launch\mavenEcjBootstrapAgent.jar
MD5: 8b80305e4846088e139701372844e637
SHA1: 4b03ce7b33d535b42e4a84e106c3647760eb8769
SHA256:639da94437813649eac5af6d8154d736355f27199fc8aaeda85904fce947ee4f
Referenced In Project/Scope: javabean-tester:provided

Identifiers

  • None

lombok-1.18.46.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE
File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.46\lombok-1.18.46.jar
MD5: e02f419a66b86c594ffcafc862778723
SHA1: a5cfe99fdf320e84955ef653f2ce1bf789d11385
SHA256:01f7b1a015e33e2b62d5f5f37053306357ab1415fd181fcba7794f5d198c1126
Referenced In Project/Scope: javabean-tester:provided
lombok-1.18.46.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/javabean-tester@2.12.2

Identifiers

  • pkg:maven/org.projectlombok/lombok@1.18.46   (Confidence:High)

mockito-core-5.23.0.jar

Description:

Mockito mock objects library core API and implementation

License:

MIT: https://opensource.org/licenses/MIT
File Path: C:\Users\Jeremy\.m2\repository\org\mockito\mockito-core\5.23.0\mockito-core-5.23.0.jar
MD5: 43deb29e8c5ab688ee5547be72e10ea3
SHA1: a5cf3cf244300e4cd05f779827cf50d373a8460e
SHA256:ae295bebd5d11fab97ab297815dc7617188b86003cbce3dfd5c0d5c3a6cc4a0c
Referenced In Project/Scope: javabean-tester:compile
mockito-core-5.23.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.mockito/mockito-junit-jupiter@5.23.0

Identifiers

  • pkg:maven/org.mockito/mockito-core@5.23.0   (Confidence:High)

mockito-junit-jupiter-5.23.0.jar

Description:

Mockito JUnit 5 support

License:

MIT: https://opensource.org/licenses/MIT
File Path: C:\Users\Jeremy\.m2\repository\org\mockito\mockito-junit-jupiter\5.23.0\mockito-junit-jupiter-5.23.0.jar
MD5: 80888c87da90327e7b621b93001454a3
SHA1: e66b5f34ffea58bf4388aba58f66a209daeba4fd
SHA256:65938526fdc311bb3a1c0015eb1c8a0be81515aa998f22b9f4e92f1b668e4f63
Referenced In Project/Scope: javabean-tester:compile
mockito-junit-jupiter-5.23.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/javabean-tester@2.12.2

Identifiers

  • pkg:maven/org.mockito/mockito-junit-jupiter@5.23.0   (Confidence:High)

objenesis-3.5.jar

Description:

A library for instantiating Java objects

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\objenesis\objenesis\3.5\objenesis-3.5.jar
MD5: c325ca0c264b0a84fb0af1fd2872a692
SHA1: 848ebc672f1e42d62c9357bd0882374c4e21895f
SHA256:6f5abd42cf3ebc0f2bdae73dbc57820fc4a1cb8930492841e29e9a9f9dcc86e0
Referenced In Project/Scope: javabean-tester:compile
objenesis-3.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/nl.jqno.equalsverifier/equalsverifier@4.5

Identifiers

  • pkg:maven/org.objenesis/objenesis@3.5   (Confidence:High)

opentest4j-1.3.0.jar

Description:

Open Test Alliance for the JVM

License:

The Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\opentest4j\opentest4j\1.3.0\opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256:48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Project/Scope: javabean-tester:compile
opentest4j-1.3.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.junit.jupiter/junit-jupiter@6.1.0

Identifiers

  • pkg:maven/org.opentest4j/opentest4j@1.3.0   (Confidence:High)

slf4j-api-2.0.18.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit
File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\slf4j-api\2.0.18\slf4j-api-2.0.18.jar
MD5: fe2837bd49bfb76657419002fed20ca9
SHA1: 78a9e7a37cd6360e0b818e86341b24123d28d4df
SHA256:44508fd1576500688c790b190acdd16fec4f8c79a3e0b900afd70503cf055f55
Referenced In Project/Scope: javabean-tester:compile
slf4j-api-2.0.18.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/javabean-tester@2.12.2

Identifiers

  • pkg:maven/org.slf4j/slf4j-api@2.0.18   (Confidence:High)


This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype Guide OSS Index API.