Press CTR-C to copy XML [help]


Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

Project: scriptable-dataset

com.github.hazendaz:scriptable-dataset:3.1.1

Scan Information (show all):

Summary

Summary of Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
apiguardian-api-1.1.2.jarpkg:maven/org.apiguardian/apiguardian-api@1.1.2 040
checker-qual-3.51.1.jarpkg:maven/org.checkerframework/checker-qual@3.51.1 044
commons-lang3-3.20.0.jarcpe:2.3:a:apache:commons_lang:3.20.0:*:*:*:*:*:*:*pkg:maven/org.apache.commons/commons-lang3@3.20.0 0Highest145
dbunit-3.0.0.jarcpe:2.3:a:golden_project:golden:3.0.0:*:*:*:*:*:*:*pkg:maven/org.dbunit/dbunit@3.0.0 0Low96
error_prone_annotations-2.43.0.jarpkg:maven/com.google.errorprone/error_prone_annotations@2.43.0 029
j2objc-annotations-3.1.jarpkg:maven/com.google.j2objc/j2objc-annotations@3.1 033
jspecify-1.0.0.jarpkg:maven/org.jspecify/jspecify@1.0.0 032
jsr305-3.0.2.jarpkg:maven/com.google.code.findbugs/jsr305@3.0.2 017
junit-platform-engine-6.0.1.jarcpe:2.3:a:fan_platform_project:fan_platform:6.0.1:*:*:*:*:*:*:*pkg:maven/org.junit.platform/junit-platform-engine@6.0.1 0Low76
lombok-1.18.42.jar: mavenEcjBootstrapAgent.jar 07
lombok-1.18.42.jarpkg:maven/org.projectlombok/lombok@1.18.42 036
modernizer-maven-annotations-3.2.0.jarpkg:maven/org.gaul/modernizer-maven-annotations@3.2.0 019
ojdbc11-23.26.0.0.0.jarcpe:2.3:a:oracle:jdbc:23.26.0.0.0:*:*:*:*:*:*:*pkg:maven/com.oracle.database.jdbc/ojdbc11@23.26.0.0.0 0Highest33
opentest4j-1.3.0.jarpkg:maven/org.opentest4j/opentest4j@1.3.0 060
postgresql-42.7.8.jarcpe:2.3:a:postgresql:postgresql_jdbc_driver:42.7.8:*:*:*:*:*:*:*pkg:maven/org.postgresql/postgresql@42.7.8 0Low68
slf4j-api-2.0.17.jarpkg:maven/org.slf4j/slf4j-api@2.0.17 029
snakeyaml-2.5.jarcpe:2.3:a:snakeyaml_project:snakeyaml:2.5:*:*:*:*:*:*:*pkg:maven/org.yaml/snakeyaml@2.5 0Highest42
spotbugs-annotations-4.9.8.jarpkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8 053

Dependencies (vulnerable)

apiguardian-api-1.1.2.jar

Description:

@API Guardian

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apiguardian\apiguardian-api\1.1.2\apiguardian-api-1.1.2.jar
MD5: 8c7de3f82037fa4a2e8be2a2f13092af
SHA1: a231e0d844d2721b0fa1b238006d15c6ded6842a
SHA256:b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38
Referenced In Project/Scope: scriptable-dataset:compile
apiguardian-api-1.1.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.junit.jupiter/junit-jupiter-api@6.0.1

Identifiers

  • pkg:maven/org.apiguardian/apiguardian-api@1.1.2  (Confidence:High)

checker-qual-3.51.1.jar

Description:

checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.

License:

The MIT License: http://opensource.org/licenses/MIT
File Path: C:\Users\Jeremy\.m2\repository\org\checkerframework\checker-qual\3.51.1\checker-qual-3.51.1.jar
MD5: 1b247ba89d3b8776fa6223324b934f56
SHA1: d69c339a293b5ec04b26c9d994cbeffb7056d122
SHA256:153aeffe56ca24f3a9b8b6c6ff813eace9620ccf35adfab91d491682e56cd5ce
Referenced In Project/Scope: scriptable-dataset:compile
checker-qual-3.51.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/scriptable-dataset@3.1.1

Identifiers

  • pkg:maven/org.checkerframework/checker-qual@3.51.1  (Confidence:High)

commons-lang3-3.20.0.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17, 21 and 25 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\commons\commons-lang3\3.20.0\commons-lang3-3.20.0.jar
MD5: 4b29562ded527aa074e1d44f8646dac5
SHA1: 65897b3e5731220962e659e001904af3c3cbeba9
SHA256:69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4
Referenced In Project/Scope: scriptable-dataset:compile
commons-lang3-3.20.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/scriptable-dataset@3.1.1

Identifiers

dbunit-3.0.0.jar

Description:

    dbUnit is a JUnit extension (also usable from Ant and Maven) targeted for database-driven projects that, among other things, puts your database into a known state between test runs. This is an excellent way to avoid the myriad of problems that can occur when one test case corrupts the database and causes subsequent tests to fail or exacerbate the damage.

License:

GNU Lesser General Public License, Version 2.1: http://www.gnu.org/licenses/old-licenses/lgpl-2.1.txt
File Path: C:\Users\Jeremy\.m2\repository\org\dbunit\dbunit\3.0.0\dbunit-3.0.0.jar
MD5: 3a1386e0082bd660b9eb9930526c6c71
SHA1: a5d192af07b5c6bd97130f690123760485bba126
SHA256:910f6f480a8429e734abba41416897d05c596f10189b93a5cef6c4a2f413f0ef
Referenced In Project/Scope: scriptable-dataset:compile
dbunit-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/scriptable-dataset@3.1.1

Identifiers

  • pkg:maven/org.dbunit/dbunit@3.0.0  (Confidence:High)
  • cpe:2.3:a:golden_project:golden:3.0.0:*:*:*:*:*:*:*  (Confidence:Low)  

error_prone_annotations-2.43.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\errorprone\error_prone_annotations\2.43.0\error_prone_annotations-2.43.0.jar
MD5: 59fe4a79ce3218423f4f8918f04ef22f
SHA1: a4f9062316c31850b03085e45717f564fd563ceb
SHA256:48272e75c16e1f7bdc7bd19529ccacd5ee170404701d7f5a23441bb5847957f5
Referenced In Project/Scope: scriptable-dataset:provided
error_prone_annotations-2.43.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/scriptable-dataset@3.1.1

Identifiers

  • pkg:maven/com.google.errorprone/error_prone_annotations@2.43.0  (Confidence:High)

j2objc-annotations-3.1.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\j2objc\j2objc-annotations\3.1\j2objc-annotations-3.1.jar
MD5: abe8bd3abff622b9a8b15c3a737aa741
SHA1: a892ca9507839bbdb900d64310ac98256cab992f
SHA256:84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Project/Scope: scriptable-dataset:provided
j2objc-annotations-3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/scriptable-dataset@3.1.1

Identifiers

  • pkg:maven/com.google.j2objc/j2objc-annotations@3.1  (Confidence:High)

jspecify-1.0.0.jar

Description:

An artifact of well-named and well-specified annotations to power static analysis checks

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\jspecify\jspecify\1.0.0\jspecify-1.0.0.jar
MD5: 9133aba420d0ca3b001dbb6ae9992cf6
SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507
SHA256:1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab
Referenced In Project/Scope: scriptable-dataset:compile
jspecify-1.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.junit.jupiter/junit-jupiter-api@6.0.1

Identifiers

  • pkg:maven/org.jspecify/jspecify@1.0.0  (Confidence:High)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\code\findbugs\jsr305\3.0.2\jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: scriptable-dataset:provided
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8

Identifiers

  • pkg:maven/com.google.code.findbugs/jsr305@3.0.2  (Confidence:High)

junit-platform-engine-6.0.1.jar

Description:

Module "junit-platform-engine" of JUnit

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html
File Path: C:\Users\Jeremy\.m2\repository\org\junit\platform\junit-platform-engine\6.0.1\junit-platform-engine-6.0.1.jar
MD5: 5b533f60bb8146253e3ee366a9261198
SHA1: 7b5b4c9a2298a7acd80e3267b49fda92e89cba4e
SHA256:f49577073a7ae184c718d9b43ae0d8edcb8abfc5ac738735ee3339d4652e92bf
Referenced In Project/Scope: scriptable-dataset:compile
junit-platform-engine-6.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.dbunit/dbunit@3.0.0

Identifiers

  • pkg:maven/org.junit.platform/junit-platform-engine@6.0.1  (Confidence:High)
  • cpe:2.3:a:fan_platform_project:fan_platform:6.0.1:*:*:*:*:*:*:*  (Confidence:Low)  

lombok-1.18.42.jar: mavenEcjBootstrapAgent.jar

File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.42\lombok-1.18.42.jar\lombok\launch\mavenEcjBootstrapAgent.jar
MD5: 885d5d6be90a5dcd4b82cdf741e3f31a
SHA1: e1f7f1779f40157fd0b984c1bc32a0cb45cae66e
SHA256:74a80a6ee84e5c6fe497dfcc46a46dbe30578525e747eb531e918ee0750c8da9
Referenced In Project/Scope: scriptable-dataset:provided

Identifiers

  • None

lombok-1.18.42.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE
File Path: C:\Users\Jeremy\.m2\repository\org\projectlombok\lombok\1.18.42\lombok-1.18.42.jar
MD5: f29149836e0187fb9fd95d82dc718d36
SHA1: 8365263844ebb62398e0dc33057ba10ba472d3b8
SHA256:3488a4e9994c26596baaceebee58cad36a50e3bdaec5be72b5834d3c3b560306
Referenced In Project/Scope: scriptable-dataset:provided
lombok-1.18.42.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/scriptable-dataset@3.1.1

Identifiers

  • pkg:maven/org.projectlombok/lombok@1.18.42  (Confidence:High)

modernizer-maven-annotations-3.2.0.jar

File Path: C:\Users\Jeremy\.m2\repository\org\gaul\modernizer-maven-annotations\3.2.0\modernizer-maven-annotations-3.2.0.jar
MD5: 127396b14eb51fd93eb587308f079768
SHA1: 23a99089ff682152e86ab1691a8232db325def09
SHA256:9f9396f361f0d45d435355c1f2b57980307abd81f3131083ec18f54fbbaa5ecb
Referenced In Project/Scope: scriptable-dataset:provided
modernizer-maven-annotations-3.2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/scriptable-dataset@3.1.1

Identifiers

  • pkg:maven/org.gaul/modernizer-maven-annotations@3.2.0  (Confidence:High)

ojdbc11-23.26.0.0.0.jar

Description:

 Oracle JDBC Driver compatible with JDK11, JDK17, JDK19, and JDK21

License:

Oracle Free Use Terms and Conditions (FUTC): https://www.oracle.com/downloads/licenses/oracle-free-license.html
File Path: C:\Users\Jeremy\.m2\repository\com\oracle\database\jdbc\ojdbc11\23.26.0.0.0\ojdbc11-23.26.0.0.0.jar
MD5: dd15886101e9e7f5eaf293881c72a072
SHA1: aea576f3827874d02b3dbd3ea6518955d0d1f1c7
SHA256:ef295bf01374dac7d791b3bc6526d10e8910ecac4645a95a3ca0c01cfc5c21d0
Referenced In Project/Scope: scriptable-dataset:provided
ojdbc11-23.26.0.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/scriptable-dataset@3.1.1

Identifiers

opentest4j-1.3.0.jar

Description:

Open Test Alliance for the JVM

License:

The Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\opentest4j\opentest4j\1.3.0\opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256:48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Project/Scope: scriptable-dataset:compile
opentest4j-1.3.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.junit.jupiter/junit-jupiter-api@6.0.1

Identifiers

  • pkg:maven/org.opentest4j/opentest4j@1.3.0  (Confidence:High)

postgresql-42.7.8.jar

Description:

PostgreSQL JDBC Driver Postgresql

License:

BSD-2-Clause: https://jdbc.postgresql.org/about/license.html
File Path: C:\Users\Jeremy\.m2\repository\org\postgresql\postgresql\42.7.8\postgresql-42.7.8.jar
MD5: d5626352279a40e69e863fcff564e2f1
SHA1: 81b840fbfe0a6c0b7aa14c6bd4856108d36ed780
SHA256:2a32a9dcbc42d67a50ad3a0de5efd102c8d2be46720045f2cbd6689f160ab7c7
Referenced In Project/Scope: scriptable-dataset:provided
postgresql-42.7.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/scriptable-dataset@3.1.1

Identifiers

  • pkg:maven/org.postgresql/postgresql@42.7.8  (Confidence:High)
  • cpe:2.3:a:postgresql:postgresql_jdbc_driver:42.7.8:*:*:*:*:*:*:*  (Confidence:Low)  

slf4j-api-2.0.17.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit
File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\slf4j-api\2.0.17\slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Project/Scope: scriptable-dataset:compile
slf4j-api-2.0.17.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/scriptable-dataset@3.1.1

Identifiers

  • pkg:maven/org.slf4j/slf4j-api@2.0.17  (Confidence:High)

snakeyaml-2.5.jar

Description:

YAML 1.1 parser and emitter for Java

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\yaml\snakeyaml\2.5\snakeyaml-2.5.jar
MD5: 8d3b7581db5c7620db55183f33a4f2ad
SHA1: 2d53ddec134280cb384c1e35d094e5f71c1f2316
SHA256:e6682acf1ace77508ef13649cbf4f8d09d2cf5457bdb61d25ffb6ac0233d78dd
Referenced In Project/Scope: scriptable-dataset:compile
snakeyaml-2.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/scriptable-dataset@3.1.1

Identifiers

spotbugs-annotations-4.9.8.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: C:\Users\Jeremy\.m2\repository\com\github\spotbugs\spotbugs-annotations\4.9.8\spotbugs-annotations-4.9.8.jar
MD5: d4c2e7bd090be697ad409a4e75684a94
SHA1: ca4a2783a6123e67124fd7feb4caccd2e2ac9a73
SHA256:6f69d6fe9c55a54dcb30e87d8fa2d5f52246af50d7a3445246d9539ef221be1c
Referenced In Project/Scope: scriptable-dataset:provided
spotbugs-annotations-4.9.8.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.hazendaz/scriptable-dataset@3.1.1

Identifiers

  • pkg:maven/com.github.spotbugs/spotbugs-annotations@4.9.8  (Confidence:High)


This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.