Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

Project: beanprovider

com.github.hazendaz.cdi:beanprovider:1.0.0

Scan Information (show all):

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency Vulnerability IDs Package Highest Severity CVE Count Confidence Evidence Count
checker-qual-3.53.0.jar pkg:maven/org.checkerframework/checker-qual@3.53.0   0 44
deltaspike-core-api-2.0.1.jar cpe:2.3:a:apache:deltaspike:2.0.1:*:*:*:*:*:*:* pkg:maven/org.apache.deltaspike.core/deltaspike-core-api@2.0.1   0 Highest 28
error_prone_annotations-2.46.0.jar pkg:maven/com.google.errorprone/error_prone_annotations@2.46.0   0 29
j2objc-annotations-3.1.jar pkg:maven/com.google.j2objc/j2objc-annotations@3.1   0 33
jakarta.annotation-api-2.1.0.jar cpe:2.3:a:oracle:projects:2.1.0:*:*:*:*:*:*:* pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.0   0 Low 42
jakarta.el-api-5.0.0.jar cpe:2.3:a:eclipse:jakarta_expression_language:5.0.0:*:*:*:*:*:*:* pkg:maven/jakarta.el/jakarta.el-api@5.0.0   0 Low 45
jakarta.enterprise.cdi-api-4.0.0.jar cpe:2.3:a:redhat:enterprise_ipa:4.0.0:*:*:*:*:*:*:* pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.0   0 Low 79
jakarta.enterprise.lang-model-4.0.0.jar pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.0.0   0 29
jakarta.inject-api-2.0.1.jar pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1   0 56
jakarta.interceptor-api-2.1.0.jar pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.1.0   0 46
jsr305-3.0.2.jar pkg:maven/com.google.code.findbugs/jsr305@3.0.2   0 17
lombok-1.18.42.jar: mavenEcjBootstrapAgent.jar   0 7
lombok-1.18.42.jar pkg:maven/org.projectlombok/lombok@1.18.42   0 36
modernizer-maven-annotations-3.2.0.jar pkg:maven/org.gaul/modernizer-maven-annotations@3.2.0   0 19
spotbugs-annotations-4.9.8.jar pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8   0 53

Dependencies (vulnerable)

checker-qual-3.53.0.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: http://opensource.org/licenses/MIT
File Path: C:\Users\Jeremy\.m2\repository\org\checkerframework\checker-qual\3.53.0\checker-qual-3.53.0.jar
MD5: d1ee2a3366a19a8fff01208da2adb48e
SHA1: af1105964a03d7ed8aaf8ea2cb6ec0da7ec6c7a6
SHA256:7ca002815d92fad79e966b375c2ee7b2b4bf953024bc9a5d5e0c59df13ff5af8
Referenced In Project/Scope: beanprovider:compile
checker-qual-3.53.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.cdi/beanprovider@1.0.0

Identifiers

  • pkg:maven/org.checkerframework/checker-qual@3.53.0   (Confidence:High)

deltaspike-core-api-2.0.1.jar

File Path: C:\Users\Jeremy\.m2\repository\org\apache\deltaspike\core\deltaspike-core-api\2.0.1\deltaspike-core-api-2.0.1.jar
MD5: 9e6fc7e63440a18217cd719cec71f8e0
SHA1: c81ca221f7d45f2ebcb9c0266f2af89e97a28635
SHA256:73036ee95f0902e151d20b3366f4d1b4b62b658af0b56aad5571c428aefe3678
Referenced In Project/Scope: beanprovider:compile
deltaspike-core-api-2.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.deltaspike.core/deltaspike-core-impl@2.0.1

Identifiers

error_prone_annotations-2.46.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\errorprone\error_prone_annotations\2.46.0\error_prone_annotations-2.46.0.jar
MD5: d0dabea249c067d21d7eb997fbdf5c99
SHA1: 4ecb5d2392c38c46e6cb65e1bf60be708d97005d
SHA256:b67be81ff4b956401146e14eaf1526bc435a9480f2546e91eb45b796631a8a99
Referenced In Project/Scope: beanprovider:provided
error_prone_annotations-2.46.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.cdi/beanprovider@1.0.0

Identifiers

  • pkg:maven/com.google.errorprone/error_prone_annotations@2.46.0   (Confidence:High)

j2objc-annotations-3.1.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.
  

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\j2objc\j2objc-annotations\3.1\j2objc-annotations-3.1.jar
MD5: abe8bd3abff622b9a8b15c3a737aa741
SHA1: a892ca9507839bbdb900d64310ac98256cab992f
SHA256:84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Project/Scope: beanprovider:provided
j2objc-annotations-3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.cdi/beanprovider@1.0.0

Identifiers

  • pkg:maven/com.google.j2objc/j2objc-annotations@3.1   (Confidence:High)

jakarta.annotation-api-2.1.0.jar

Description:

Jakarta Annotations API

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: C:\Users\Jeremy\.m2\repository\jakarta\annotation\jakarta.annotation-api\2.1.0\jakarta.annotation-api-2.1.0.jar
MD5: 740bc4e6204ccfafa1b05e7402a6d3d1
SHA1: 4f1cf660cde3a75a0ac3d12ee8afd2d798ec322d
SHA256:448f2abf53b0fb3e96eedc8fe0dafb6284af1252dd1aa4bd3e6774e91fd41a6a
Referenced In Project/Scope: beanprovider:compile
jakarta.annotation-api-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.0

Identifiers

  • pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.0   (Confidence:High)
  • cpe:2.3:a:oracle:projects:2.1.0:*:*:*:*:*:*:*   (Confidence:Low)   

jakarta.el-api-5.0.0.jar

Description:

        Jakarta Expression Language defines an expression language for Java applications
    

License:

https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt, https://www.gnu.org/software/classpath/license.html
File Path: C:\Users\Jeremy\.m2\repository\jakarta\el\jakarta.el-api\5.0.0\jakarta.el-api-5.0.0.jar
MD5: 191b53c8c1c12c969f0678f9c6e073b0
SHA1: 2a22b304920f43d6427cdefb5ce5f6726e2a63a3
SHA256:57b822380207900f5145c2a687384c50fd41495d388a235791d96ae3b9bfd36d
Referenced In Project/Scope: beanprovider:compile
jakarta.el-api-5.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.0

Identifiers

  • pkg:maven/jakarta.el/jakarta.el-api@5.0.0   (Confidence:High)
  • cpe:2.3:a:eclipse:jakarta_expression_language:5.0.0:*:*:*:*:*:*:*   (Confidence:Low)   

jakarta.enterprise.cdi-api-4.0.0.jar

Description:

APIs for CDI (Contexts and Dependency Injection for Java)

License:

Apache License 2.0: https://www.apache.org/licenses/LICENSE-2.0
File Path: C:\Users\Jeremy\.m2\repository\jakarta\enterprise\jakarta.enterprise.cdi-api\4.0.0\jakarta.enterprise.cdi-api-4.0.0.jar
MD5: 70a8f1c6d6fd4b7a35eae51858d351fa
SHA1: e0d28f3357761ab8357899028323978440420030
SHA256:4762ec56f915bdaa6361d12fb75310e8d501d0ee9b0be597afc1b8470d48c9ec
Referenced In Project/Scope: beanprovider:compile
jakarta.enterprise.cdi-api-4.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.cdi/beanprovider@1.0.0

Identifiers

  • pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.0   (Confidence:High)
  • cpe:2.3:a:redhat:enterprise_ipa:4.0.0:*:*:*:*:*:*:*   (Confidence:Low)   

jakarta.enterprise.lang-model-4.0.0.jar

Description:

Build Compatible (Reflection-Free) Java Language Model for CDI

License:

Apache License 2.0: https://repository.jboss.org/licenses/apache-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\jakarta\enterprise\jakarta.enterprise.lang-model\4.0.0\jakarta.enterprise.lang-model-4.0.0.jar
MD5: 10536a214570ef93b3f3fa7f55d3eadb
SHA1: b2c6034406e74bf969438ea96d0b43af85feacc9
SHA256:d81f6298fea3e9514c0ba414cab49b5934aaa2e8e6eb981752ab51e2b248e8e0
Referenced In Project/Scope: beanprovider:compile
jakarta.enterprise.lang-model-4.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.0

Identifiers

  • pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.0.0   (Confidence:High)

jakarta.inject-api-2.0.1.jar

Description:

Jakarta Dependency Injection

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\jakarta\inject\jakarta.inject-api\2.0.1\jakarta.inject-api-2.0.1.jar
MD5: 72003bf6efcc8455d414bbd7da86c11c
SHA1: 4c28afe1991a941d7702fe1362c365f0a8641d1e
SHA256:f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c
Referenced In Project/Scope: beanprovider:compile
jakarta.inject-api-2.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.0

Identifiers

  • pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1   (Confidence:High)

jakarta.interceptor-api-2.1.0.jar

Description:

        Jakarta Interceptors defines a means of interposing on business method invocations
        and specific events—such as lifecycle events and timeout events—that occur on instances
        of Jakarta EE components and other managed classes.
    

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: C:\Users\Jeremy\.m2\repository\jakarta\interceptor\jakarta.interceptor-api\2.1.0\jakarta.interceptor-api-2.1.0.jar
MD5: c68f893a96a6ddbcd08c09d508ae0040
SHA1: 1d06a662708601400af4556577ee514c4ad01549
SHA256:ef787d3f713fc6ff4f02cd4b0dbed08f93d8af3400c90cbb43fb4b5c0583710b
Referenced In Project/Scope: beanprovider:compile
jakarta.interceptor-api-2.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.0

Identifiers

  • pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.1.0   (Confidence:High)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\code\findbugs\jsr305\3.0.2\jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: beanprovider:provided
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8

Identifiers

  • pkg:maven/com.google.code.findbugs/jsr305@3.0.2   (Confidence:High)

lombok-1.18.42.jar: mavenEcjBootstrapAgent.jar

File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.42\lombok-1.18.42.jar\lombok\launch\mavenEcjBootstrapAgent.jar
MD5: 885d5d6be90a5dcd4b82cdf741e3f31a
SHA1: e1f7f1779f40157fd0b984c1bc32a0cb45cae66e
SHA256:74a80a6ee84e5c6fe497dfcc46a46dbe30578525e747eb531e918ee0750c8da9
Referenced In Project/Scope: beanprovider:provided

Identifiers

  • None

lombok-1.18.42.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE
File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.42\lombok-1.18.42.jar
MD5: f29149836e0187fb9fd95d82dc718d36
SHA1: 8365263844ebb62398e0dc33057ba10ba472d3b8
SHA256:3488a4e9994c26596baaceebee58cad36a50e3bdaec5be72b5834d3c3b560306
Referenced In Project/Scope: beanprovider:provided
lombok-1.18.42.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.cdi/beanprovider@1.0.0

Identifiers

  • pkg:maven/org.projectlombok/lombok@1.18.42   (Confidence:High)

modernizer-maven-annotations-3.2.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\gaul\modernizer-maven-annotations\3.2.0\modernizer-maven-annotations-3.2.0.jar
MD5: 127396b14eb51fd93eb587308f079768
SHA1: 23a99089ff682152e86ab1691a8232db325def09
SHA256:9f9396f361f0d45d435355c1f2b57980307abd81f3131083ec18f54fbbaa5ecb
Referenced In Project/Scope: beanprovider:provided
modernizer-maven-annotations-3.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.cdi/beanprovider@1.0.0

Identifiers

  • pkg:maven/org.gaul/modernizer-maven-annotations@3.2.0   (Confidence:High)

spotbugs-annotations-4.9.8.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: C:\Users\Jeremy\.m2\repository\com\github\spotbugs\spotbugs-annotations\4.9.8\spotbugs-annotations-4.9.8.jar
MD5: d4c2e7bd090be697ad409a4e75684a94
SHA1: ca4a2783a6123e67124fd7feb4caccd2e2ac9a73
SHA256:6f69d6fe9c55a54dcb30e87d8fa2d5f52246af50d7a3445246d9539ef221be1c
Referenced In Project/Scope: beanprovider:provided
spotbugs-annotations-4.9.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz.cdi/beanprovider@1.0.0

Identifiers

  • pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8   (Confidence:High)


This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.