Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

 Sponsor

Project: Bedework: calendar engine

org.bedework.caleng:bw-calendar-engine:5.3.0-SNAPSHOT

Scan Information (show all):

Summary

Summary of Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
HdrHistogram-2.2.2.jarpkg:maven/org.hdrhistogram/HdrHistogram@2.2.2LOW225
RoaringBitmap-1.3.0.jarpkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0 025
aggs-matrix-stats-client-2.18.0.jarcpe:2.3:a:pro_search:pro_search:2.18.0:*:*:*:*:*:*:*pkg:maven/org.opensearch.plugin/aggs-matrix-stats-client@2.18.0 0Low38
apache-jdkim-api-0.7.jarpkg:maven/org.bedework/apache-jdkim-api@0.7 039
bw-base-2.0.0.jarpkg:maven/org.bedework/bw-base@2.0.0 042
bw-caldav-server-6.1.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-caldav-server@6.1.0-20260731.035505-1
pkg:maven/org.bedework/bw-caldav-server@6.1.0-SNAPSHOT
 043
bw-caldav-util-6.1.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-caldav-util@6.1.0-20260731.035505-1
pkg:maven/org.bedework/bw-caldav-util@6.1.0-SNAPSHOT
 043
bw-caldav-xml-6.1.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-caldav-xml@6.1.0-20260731.035505-1
pkg:maven/org.bedework/bw-caldav-xml@6.1.0-SNAPSHOT
 039
bw-calendar-annotations-5.3.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-calendar-annotations@5.3.0-20260731.040259-1
pkg:maven/org.bedework/bw-calendar-annotations@5.3.0-SNAPSHOT
 041
bw-calendar-api-5.3.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-calendar-api@5.3.0-20260731.040259-1
pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
 039
bw-calendar-api-ro-5.3.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-calendar-api-ro@5.3.0-20260731.040259-1
pkg:maven/org.bedework/bw-calendar-api-ro@5.3.0-SNAPSHOT
 039
bw-calendar-convert-5.3.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-calendar-convert@5.3.0-20260731.040259-1
pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
 041
bw-calendar-facade-5.3.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-calendar-facade@5.3.0-20260731.040259-1
pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
 039
bw-calendar-sysevents-common-5.3.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-20260731.040259-1
pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
 041
bw-calendar-sysevents-msgs-5.3.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-calendar-sysevents-msgs@5.3.0-20260731.040259-1
pkg:maven/org.bedework/bw-calendar-sysevents-msgs@5.3.0-SNAPSHOT
 041
bw-calws-soap-xml-6.1.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-calws-soap-xml@6.1.0-20260731.034836-1
pkg:maven/org.bedework/bw-calws-soap-xml@6.1.0-SNAPSHOT
 037
bw-dav-access-6.1.1.jarpkg:maven/org.bedework/bw-dav-access@6.1.1 042
bw-db-6.1.0.jarpkg:maven/org.bedework.database/bw-db@6.1.0 044
bw-hibernate-6.1.0.jarpkg:maven/org.bedework.database/bw-hibernate@6.1.0 044
bw-ical4j-vcard-1.1.0.jarpkg:maven/org.bedework/bw-ical4j-vcard@1.1.0 036
bw-icalendar-xml-6.1.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-icalendar-xml@6.1.0-20260731.034813-3
pkg:maven/org.bedework/bw-icalendar-xml@6.1.0-SNAPSHOT
 039
bw-jpa-6.1.0.jarpkg:maven/org.bedework.database/bw-jpa@6.1.0 044
bw-jsforj-2.0.0.jarpkg:maven/org.bedework/bw-jsforj@2.0.0 042
bw-json-2.1.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-json@2.1.0-20260731.034412-3
pkg:maven/org.bedework/bw-json@2.1.0-SNAPSHOT
 041
bw-schemaorgforj-2.1.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-schemaorgforj@2.1.0-20260731.034437-3
pkg:maven/org.bedework/bw-schemaorgforj@2.1.0-SNAPSHOT
 039
bw-synch-ws-xml-6.1.0-SNAPSHOT.jarcpe:2.3:a:web_project:web:6.1.0:snapshot:*:*:*:*:*:*pkg:maven/org.bedework.bw-synch/bw-synch-ws-xml@6.1.0-20260731.035222-1
pkg:maven/org.bedework.bw-synch/bw-synch-ws-xml@6.1.0-SNAPSHOT
 0Low43
bw-util-caching-6.1.1-SNAPSHOT.jarpkg:maven/org.bedework/bw-util-caching@6.1.1-20260731.033918-6
pkg:maven/org.bedework/bw-util-caching@6.1.1-SNAPSHOT
 043
bw-util-config-6.1.1-SNAPSHOT.jarpkg:maven/org.bedework/bw-util-config@6.1.1-20260731.034129-4
pkg:maven/org.bedework/bw-util-config@6.1.1-SNAPSHOT
 043
bw-util-dates-6.0.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-util-dates@6.0.0-20260806.041808-8
pkg:maven/org.bedework/bw-util-dates@6.0.0-SNAPSHOT
 043
bw-util-dav-6.2.2-SNAPSHOT.jarpkg:maven/org.bedework/bw-util-dav@6.2.2-20260731.034502-3
pkg:maven/org.bedework/bw-util-dav@6.2.2-SNAPSHOT
 043
bw-util-http-6.2.2-SNAPSHOT.jarpkg:maven/org.bedework/bw-util-http@6.2.2-20260731.034502-3
pkg:maven/org.bedework/bw-util-http@6.2.2-SNAPSHOT
 043
bw-util-indexing-6.1.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-util-indexing@6.1.0-20260731.034728-3
pkg:maven/org.bedework/bw-util-indexing@6.1.0-SNAPSHOT
 045
bw-util-jmx-6.1.1-SNAPSHOT.jarpkg:maven/org.bedework/bw-util-jmx@6.1.1-20260731.034129-4
pkg:maven/org.bedework/bw-util-jmx@6.1.1-SNAPSHOT
 043
bw-util-json-6.1.1-SNAPSHOT.jarpkg:maven/org.bedework/bw-util-json@6.1.1-20260731.033918-6
pkg:maven/org.bedework/bw-util-json@6.1.1-SNAPSHOT
 043
bw-util-logging-6.0.0.jarpkg:maven/org.bedework/bw-util-logging@6.0.0 044
bw-util-misc-6.1.1-SNAPSHOT.jarcpe:2.3:a:utils_project:utils:6.1.1:snapshot:*:*:*:*:*:*pkg:maven/org.bedework/bw-util-misc@6.1.1-20260731.033918-6
pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT
 0Low43
bw-util-opensearch-6.1.0-SNAPSHOT.jarcpe:2.3:a:open_group:x:6.1.0:snapshot:*:*:*:*:*:*pkg:maven/org.bedework/bw-util-opensearch@6.1.0-20260731.034728-3
pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
 0Low43
bw-util-properties-6.1.1-SNAPSHOT.jarcpe:2.3:a:com-property:com_properties:6.1.1:snapshot:*:*:*:*:*:*pkg:maven/org.bedework/bw-util-properties@6.1.1-20260731.033918-6
pkg:maven/org.bedework/bw-util-properties@6.1.1-SNAPSHOT
 0High43
bw-util-security-6.1.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-util-security@6.1.0-20260731.034613-3
pkg:maven/org.bedework/bw-util-security@6.1.0-SNAPSHOT
 043
bw-util-servlet-6.2.2-SNAPSHOT.jarpkg:maven/org.bedework/bw-util-servlet@6.2.2-20260731.034502-3
pkg:maven/org.bedework/bw-util-servlet@6.2.2-SNAPSHOT
 043
bw-util-tz-6.1.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-util-tz@6.1.0-20260805.040550-5
pkg:maven/org.bedework/bw-util-tz@6.1.0-SNAPSHOT
 041
bw-util-xml-6.1.1-SNAPSHOT.jarpkg:maven/org.bedework/bw-util-xml@6.1.1-20260731.033918-7
pkg:maven/org.bedework/bw-util-xml@6.1.1-SNAPSHOT
 043
bw-util2-calendar-6.1.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-util2-calendar@6.1.0-20260731.034909-2
pkg:maven/org.bedework/bw-util2-calendar@6.1.0-SNAPSHOT
 041
bw-util2-vcard-6.1.0-SNAPSHOT.jarpkg:maven/org.bedework/bw-util2-vcard@6.1.0-20260731.034909-2
pkg:maven/org.bedework/bw-util2-vcard@6.1.0-SNAPSHOT
 041
bw-webdav-6.1.0-SNAPSHOT.jarcpe:2.3:a:web_project:web:6.1.0:snapshot:*:*:*:*:*:*pkg:maven/org.bedework/bw-webdav@6.1.0-20260731.035158-1
pkg:maven/org.bedework/bw-webdav@6.1.0-SNAPSHOT
 0High43
commons-codec-1.17.1.jarpkg:maven/commons-codec/commons-codec@1.17.1 0121
commons-csv-1.13.0.jarpkg:maven/org.apache.commons/commons-csv@1.13.0 087
commons-io-2.20.0.jarcpe:2.3:a:apache:commons_io:2.20.0:*:*:*:*:*:*:*pkg:maven/commons-io/commons-io@2.20.0 0Highest125
commons-lang3-3.18.0.jarcpe:2.3:a:apache:commons_lang:3.18.0:*:*:*:*:*:*:*pkg:maven/org.apache.commons/commons-lang3@3.18.0 0Highest145
commons-logging-1.2.jarpkg:maven/commons-logging/commons-logging@1.2 0117
commons-text-1.14.0.jarcpe:2.3:a:apache:commons_text:1.14.0:*:*:*:*:*:*:*pkg:maven/org.apache.commons/commons-text@1.14.0 0Highest73
compiler-0.9.14.jarpkg:maven/com.github.spullara.mustache.java/compiler@0.9.14 031
httpasyncclient-4.1.5.jarcpe:2.3:a:apache:httpasyncclient:4.1.5:*:*:*:*:*:*:*pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5 0Highest28
httpclient-4.5.14.jarcpe:2.3:a:apache:httpclient:4.5.14:*:*:*:*:*:*:*pkg:maven/org.apache.httpcomponents/httpclient@4.5.14 0Highest32
httpcore-4.4.16.jarcpe:2.3:a:apache:httpcomponents_core:4.4.16:*:*:*:*:*:*:*pkg:maven/org.apache.httpcomponents/httpcore@4.4.16 0Highest32
ical4j-3.0.24.jarpkg:maven/org.bedework.ical4j/ical4j@3.0.24 038
jackson-annotations-2.18.2.jarcpe:2.3:a:fasterxml:jackson-core:2.18.2:*:*:*:*:*:*:*
cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.2:*:*:*:*:*:*:*
pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2 0Highest38
jackson-core-2.18.2.jarcpe:2.3:a:fasterxml:jackson-core:2.18.2:*:*:*:*:*:*:*
cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.2:*:*:*:*:*:*:*
pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2HIGH3Highest47
jackson-databind-2.18.2.jarcpe:2.3:a:fasterxml:jackson-core:2.18.2:*:*:*:*:*:*:*
cpe:2.3:a:fasterxml:jackson-databind:2.18.2:*:*:*:*:*:*:*
cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.2:*:*:*:*:*:*:*
pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2HIGH13Highest41
jackson-dataformat-cbor-2.17.2.jarcpe:2.3:a:fasterxml:jackson-dataformats-binary:2.17.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.17.2HIGH1Low39
jackson-dataformat-smile-2.17.2.jarcpe:2.3:a:fasterxml:jackson-dataformats-binary:2.17.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.17.2HIGH1Low39
jackson-dataformat-yaml-2.18.2.jarcpe:2.3:a:fasterxml:jackson-dataformat-xml:2.18.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.2 0Highest39
jakarta.activation-api-2.1.3.jarpkg:maven/jakarta.activation/jakarta.activation-api@2.1.3 045
jakarta.annotation-api-3.0.0.jarpkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0 042
jakarta.jms-api-3.1.0.jarpkg:maven/jakarta.jms/jakarta.jms-api@3.1.0 035
jakarta.jws-api-3.0.0.jarcpe:2.3:a:oracle:web_services:3.0.0:*:*:*:*:*:*:*pkg:maven/jakarta.jws/jakarta.jws-api@3.0.0 0Low43
jakarta.mail-api-2.1.3.jarcpe:2.3:a:eclipse:jakarta_mail:2.1.3:*:*:*:*:*:*:*pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3 0High36
jakarta.persistence-api-3.1.0.jarpkg:maven/jakarta.persistence/jakarta.persistence-api@3.1.0 040
jakarta.xml.bind-api-4.0.2.jarpkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2 031
jakarta.xml.soap-api-3.0.2.jarpkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2 042
jakarta.xml.ws-api-4.0.2.jarcpe:2.3:a:web_project:web:4.0.2:*:*:*:*:*:*:*pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.2 0Low59
jna-5.13.0.jarpkg:maven/net.java.dev.jna/jna@5.13.0 048
joda-time-2.12.7.jarpkg:maven/joda-time/joda-time@2.12.7 047
jopt-simple-5.0.4.jarpkg:maven/net.sf.jopt-simple/jopt-simple@5.0.4 023
jzlib-1.1.3.jarcpe:2.3:a:jcraft:jzlib:1.1.3:*:*:*:*:*:*:*pkg:maven/com.jcraft/jzlib@1.1.3 0Highest34
lang-mustache-client-2.18.0.jarcpe:2.3:a:pro_search:pro_search:2.18.0:*:*:*:*:*:*:*pkg:maven/org.opensearch.plugin/lang-mustache-client@2.18.0 0Low38
log4j-jul-2.21.0.jarcpe:2.3:a:apache:log4j:2.21.0:*:*:*:*:*:*:*pkg:maven/org.apache.logging.log4j/log4j-jul@2.21.0MEDIUM3Highest27
lucene-analysis-common-9.12.0.jarpkg:maven/org.apache.lucene/lucene-analysis-common@9.12.0 027
lucene-backward-codecs-9.12.0.jarpkg:maven/org.apache.lucene/lucene-backward-codecs@9.12.0 025
lucene-core-9.12.0.jarpkg:maven/org.apache.lucene/lucene-core@9.12.0 030
lucene-grouping-9.12.0.jarpkg:maven/org.apache.lucene/lucene-grouping@9.12.0 028
lucene-highlighter-9.12.0.jarpkg:maven/org.apache.lucene/lucene-highlighter@9.12.0 026
lucene-join-9.12.0.jarpkg:maven/org.apache.lucene/lucene-join@9.12.0 028
lucene-memory-9.12.0.jarpkg:maven/org.apache.lucene/lucene-memory@9.12.0 027
lucene-misc-9.12.0.jarpkg:maven/org.apache.lucene/lucene-misc@9.12.0 028
lucene-queries-9.12.0.jarpkg:maven/org.apache.lucene/lucene-queries@9.12.0 027
lucene-queryparser-9.12.0.jarpkg:maven/org.apache.lucene/lucene-queryparser@9.12.0 027
lucene-sandbox-9.12.0.jarpkg:maven/org.apache.lucene/lucene-sandbox@9.12.0 028
lucene-spatial-extras-9.12.0.jarpkg:maven/org.apache.lucene/lucene-spatial-extras@9.12.0 027
lucene-spatial3d-9.12.0.jarpkg:maven/org.apache.lucene/lucene-spatial3d@9.12.0 027
lucene-suggest-9.12.0.jarpkg:maven/org.apache.lucene/lucene-suggest@9.12.0 028
mapper-extras-client-2.18.0.jarcpe:2.3:a:git-extras_project:git-extras:2.18.0:*:*:*:*:*:*:*pkg:maven/org.opensearch.plugin/mapper-extras-client@2.18.0 0Low38
opensearch-2.18.0.jarcpe:2.3:a:pro_search:pro_search:2.18.0:*:*:*:*:*:*:*pkg:maven/org.opensearch/opensearch@2.18.0HIGH1Low36
opensearch-core-2.18.0.jarcpe:2.3:a:pro_search:pro_search:2.18.0:*:*:*:*:*:*:*pkg:maven/org.opensearch/opensearch-core@2.18.0 0Low38
org.bedework.caleng:bw-calendar-engine-api:5.3.0-SNAPSHOTpkg:maven/org.bedework.caleng/bw-calendar-engine-api@5.3.0-SNAPSHOT 06
org.bedework.caleng:bw-calendar-engine-core-ro:5.3.0-SNAPSHOTpkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT 06
org.bedework.caleng:bw-calendar-engine-core-rw-common:5.3.0-SNAPSHOTpkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-common@5.3.0-SNAPSHOT 06
org.bedework.caleng:bw-calendar-engine-impl:5.3.0-SNAPSHOTpkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT 06
org.bedework.caleng:bw-calendar-engine-indexing:5.3.0-SNAPSHOTpkg:maven/org.bedework.caleng/bw-calendar-engine-indexing@5.3.0-SNAPSHOT 06
org.bedework.caleng:bw-calendar-engine-interfaces:5.3.0-SNAPSHOTpkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT 06
parent-join-client-2.18.0.jarcpe:2.3:a:pro_search:pro_search:2.18.0:*:*:*:*:*:*:*pkg:maven/org.opensearch.plugin/parent-join-client@2.18.0 0Low40
protobuf-java-3.25.5.jarcpe:2.3:a:google:protobuf:3.25.5:*:*:*:*:*:*:*
cpe:2.3:a:google:protobuf-java:3.25.5:*:*:*:*:*:*:*
cpe:2.3:a:protobuf:protobuf:3.25.5:*:*:*:*:*:*:*
pkg:maven/com.google.protobuf/protobuf-java@3.25.5HIGH1Highest27
rank-eval-client-2.18.0.jarcpe:2.3:a:pro_search:pro_search:2.18.0:*:*:*:*:*:*:*pkg:maven/org.opensearch.plugin/rank-eval-client@2.18.0 0Low36
reactive-streams-1.0.4.jarpkg:maven/org.reactivestreams/reactive-streams@1.0.4 027
reactor-core-3.5.20.jarpkg:maven/io.projectreactor/reactor-core@3.5.20HIGH240
slf4j-api-1.7.36.jarpkg:maven/org.slf4j/slf4j-api@1.7.36 029
snakeyaml-2.0.jarcpe:2.3:a:snakeyaml_project:snakeyaml:2.0:*:*:*:*:*:*:*pkg:maven/org.yaml/snakeyaml@2.0 0Highest42
t-digest-3.2.jarpkg:maven/com.tdunning/t-digest@3.2HIGH226
zstd-jni-1.5.5-5.jarpkg:maven/com.github.luben/zstd-jni@1.5.5-5HIGH343

Dependencies (vulnerable)

HdrHistogram-2.2.2.jar

Description:

        HdrHistogram supports the recording and analyzing sampled data value
        counts across a configurable integer value range with configurable value
        precision within the range. Value precision is expressed as the number of
        significant digits in the value recording, and provides control over value
        quantization behavior across the value range and the subsequent value
        resolution at any given level.
    

License:

Public Domain, per Creative Commons CC0: http://creativecommons.org/publicdomain/zero/1.0/
BSD-2-Clause: https://opensource.org/licenses/BSD-2-Clause
File Path: /home/runner/.m2/repository/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar
MD5: 41f807bf0c681d6f692c408a6e217eaf
SHA1: 7959933ebcc0f05b2eaa5af0a0c8689fa257b15c
SHA256:22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

HdrHistogram-2.2.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

CVE-2026-14683 (OSSINDEX)  

A vulnerability was detected in HdrHistogram up to 2.2.2. Affected by this issue is the function org.HdrHistogram.AbstractHistogram.decodeFromCompressedByteBuffer of the file src/main/java/org/HdrHistogram/AbstractHistogram.java. The manipulation of the argument lengthOfCompressedContents results in uncontrolled memory allocation. The attack needs to be approached locally. The exploit is now public and may be used. It is still unclear if this vulnerability genuinely exists. This issue is disputed due to the potential lack of crossing of security boundaries and the pre-requisites for a successful attack.
CWE-400 Uncontrolled Resource Consumption

CVSSv2:
  • Base Score: LOW (2.0)
  • Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:org.hdrhistogram:HdrHistogram:2.2.2:*:*:*:*:*:*:*

CVE-2026-14686 (OSSINDEX)  

A vulnerability was found in HdrHistogram up to 2.2.2. This issue affects the function org.HdrHistogram.DoubleHistogram.recordValue of the file src/main/java/org/HdrHistogram/DoubleHistogram.java of the component Range Check. Performing a manipulation results in incorrect comparison. The attack is only possible with local access. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. This issue is disputed due to the potential lack of crossing of security boundaries and the pre-requisites for a successful attack.

Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://guide.sonatype.com/vulnerability/CVE-2026-14686 for details
CWE-697 Incorrect Comparison

CVSSv2:
  • Base Score: LOW (2.0)
  • Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:org.hdrhistogram:HdrHistogram:2.2.2:*:*:*:*:*:*:*

RoaringBitmap-1.3.0.jar

Description:

Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.

License:

Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/roaringbitmap/RoaringBitmap/1.3.0/RoaringBitmap-1.3.0.jar
MD5: 5ea65118238dc208252d95ff1868599c
SHA1: a46ce7a2dc494da69700ab421f081b1583857f6d
SHA256:73443a71a2e2401c7d518a487983539fcaf5f9652efbd178f929e7b6d36881d0
Referenced In Projects/Scopes:
  • Bedework: calendar engine - indexing support - no db:runtime
  • Bedework: calendar engine - core and db interactions:runtime
  • Bedework: calendar engine - common core rw classes:runtime
  • Bedework: calendar engine - common core - read-only - no db:runtime
  • Bedework: calendar engine - core and openjpa interactions:runtime

RoaringBitmap-1.3.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

aggs-matrix-stats-client-2.18.0.jar

Description:

OpenSearch subproject :modules:aggs-matrix-stats

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opensearch/plugin/aggs-matrix-stats-client/2.18.0/aggs-matrix-stats-client-2.18.0.jar
MD5: 2363e265e885a3583c5312e13e8c4003
SHA1: 9723a42b65e2742c549f046a05f29e78b266cdca
SHA256:a9c809721bcfc4537481ade4cdba7cd43fb8216b600cff260aa316d4d73b95f5
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

aggs-matrix-stats-client-2.18.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

apache-jdkim-api-0.7.jar

Description:

API for a Java implementation for the DKIM specification.

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/apache-jdkim-api/0.7/apache-jdkim-api-0.7.jar
MD5: c54ef4b1ec2a61858085ab6b15543bfc
SHA1: 3459b87752e95b72d610e809be26beb70693bdfb
SHA256:ae2174f7f413ceb6495796a191d89e345acd9b81bf88d39591e4d76461bfa6bb
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

apache-jdkim-api-0.7.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-caldav-util@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT

Identifiers

bw-base-2.0.0.jar

Description:

This project provides base classes, types and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-base/2.0.0/bw-base-2.0.0.jar
MD5: 0480624145ad4fc5daeba898b7132099
SHA1: b24b7279e0475bb3c8c84e37af400ad87877c955
SHA256:10d27642e3bf1f2f4f85320293b5041b7e34cba02cc2656f29e79f75cee97cc5
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-base-2.0.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-inoutsched@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-caldav@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexer@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-hibernate@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexing@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-tools@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT

Identifiers

bw-caldav-server-6.1.0-SNAPSHOT.jar

Description:

A generic CalDAV server - used by bedework

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-caldav-server/6.1.0-SNAPSHOT/bw-caldav-server-6.1.0-SNAPSHOT.jar
MD5: 23ad25b1a75a4de3fed8602cf8f0db7f
SHA1: 0c77fd6b1d8195f3a48010b4f9f3f5a5f1e8c3b6
SHA256:9cd07d0677e7c36474f6a458b5ecb04ef7f2fde8532fc36fbeffe4c05eadcd57
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-caldav-server-6.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-caldav@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-caldav-util-6.1.0-SNAPSHOT.jar

Description:

A generic CalDAV server - used by bedework

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-caldav-util/6.1.0-SNAPSHOT/bw-caldav-util-6.1.0-SNAPSHOT.jar
MD5: 3ee37953e4ce7b1fb9186e6b1fcbb18f
SHA1: 012c63be1f729dd458fc4d32ac53c461efcf9a61
SHA256:4a79115aa5b6d61bd8fa8c6b8bc45666df3cf862d917123108223461ac1ce0fa
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-caldav-util-6.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-caldav-xml-6.1.0-SNAPSHOT.jar

Description:

A generic CalDAV server - used by bedework

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-caldav-xml/6.1.0-SNAPSHOT/bw-caldav-xml-6.1.0-SNAPSHOT.jar
MD5: de4dc54389108f83ea44198939f70d03
SHA1: b73b3267eb71d14f68e96768dc67d5a19889d3c5
SHA256:89e024921242c00e7c6e845c6f320b825a95697b21fa289f6574ae7b6035b730
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-caldav-xml-6.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-caldav-util@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-caldav-server@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-calendar-annotations-5.3.0-SNAPSHOT.jar

Description:

Common calendar classes and code for bedework

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-calendar-annotations/5.3.0-SNAPSHOT/bw-calendar-annotations-5.3.0-SNAPSHOT.jar
MD5: e4a6ded586da9a221efabed4c0eabcfb
SHA1: c12525df3166548b9b062e0e0ec74b4497ab96de
SHA256:9d28ff09adcd44e14daf75981f94d5ccdd3f6a471a77214d94b6a5cec0744224
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-calendar-annotations-5.3.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-calendar-api-5.3.0-SNAPSHOT.jar

Description:

Common calendar classes and code for bedework

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-calendar-api/5.3.0-SNAPSHOT/bw-calendar-api-5.3.0-SNAPSHOT.jar
MD5: cda8135ba5a134f96742b4c67a00a12c
SHA1: b81d791db276e40a06ed813e4f3f3e142d1ab163
SHA256:ea6c269e8c243029b8004e8b1829235e0ab6cd8b25eeee6d2e4f5a047aeeb289
Referenced In Projects/Scopes:
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-calendar-api-5.3.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-caldav@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-tools@5.3.0-SNAPSHOT

Identifiers

bw-calendar-api-ro-5.3.0-SNAPSHOT.jar

Description:

Common calendar classes and code for bedework

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-calendar-api-ro/5.3.0-SNAPSHOT/bw-calendar-api-ro-5.3.0-SNAPSHOT.jar
MD5: 855fcd0a8196a148881deb27f9412ea1
SHA1: 268f7de6b8b30b265e6ffdfa25b228b0bf86f5c6
SHA256:c797aaf3cd4309cf7bbb61508a6d2f200dea36978bdbfc771d841c1a60860f91
Referenced In Projects/Scopes:
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-calendar-api-ro-5.3.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT

Identifiers

bw-calendar-convert-5.3.0-SNAPSHOT.jar

Description:

Common calendar classes and code for bedework

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-calendar-convert/5.3.0-SNAPSHOT/bw-calendar-convert-5.3.0-SNAPSHOT.jar
MD5: 3195247167732d6659c34581774fd397
SHA1: acd209443af81456850f022b79be8b41d4f49db1
SHA256:24f9c798964dcfeb6f6615efb26d3dc9f5592d874891a90273e6e53def4a4d4c
Referenced In Projects/Scopes:
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-calendar-convert-5.3.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-hibernate@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-caldav@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexing@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

bw-calendar-facade-5.3.0-SNAPSHOT.jar

Description:

Common calendar classes and code for bedework

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-calendar-facade/5.3.0-SNAPSHOT/bw-calendar-facade-5.3.0-SNAPSHOT.jar
MD5: 6e8d44e9b8c454f3e3eeee381edb4a58
SHA1: 49c9ad69395a98a079d4b7ba94e950b4bdf86d50
SHA256:8e31ffb3899bdb2865b1bd3d84915c37196f5eea2743bc44d9e04bcc3e36cfe9
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-calendar-facade-5.3.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-inoutsched@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexing@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-tools@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-hibernate@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-caldav@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-chgnote@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexer@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

bw-calendar-sysevents-common-5.3.0-SNAPSHOT.jar

Description:

Common calendar classes and code for bedework

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-calendar-sysevents-common/5.3.0-SNAPSHOT/bw-calendar-sysevents-common-5.3.0-SNAPSHOT.jar
MD5: 5757e32192d09cdecfcdd85e1e06a42f
SHA1: 6eb034db6447c22d6a6c8ca5f4f7f003047d0082
SHA256:9f232b980e16ee80a584b37ee66c46ce3f3396e4803dc8ab3b8d649f92fd3c01
Referenced In Projects/Scopes:
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-calendar-sysevents-common-5.3.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-hibernate@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexer@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-chgnote@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-inoutsched@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

bw-calendar-sysevents-msgs-5.3.0-SNAPSHOT.jar

Description:

Common calendar classes and code for bedework

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-calendar-sysevents-msgs/5.3.0-SNAPSHOT/bw-calendar-sysevents-msgs-5.3.0-SNAPSHOT.jar
MD5: 5e3d60d13cbf9532c1e2cfa280c21f0a
SHA1: 8cb765b22d32c92f54ab5987ac455dd99aa9fb5b
SHA256:b05a6848a69518320dbf4c4e9474f1047761cc67862efc33513c8c311efdf40a
Referenced In Projects/Scopes:
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-calendar-sysevents-msgs-5.3.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-hibernate@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-caldav@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-inoutsched@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-chgnote@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexer@5.3.0-SNAPSHOT

Identifiers

bw-calws-soap-xml-6.1.0-SNAPSHOT.jar

Description:

XML schemas for calws-soap

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-calws-soap-xml/6.1.0-SNAPSHOT/bw-calws-soap-xml-6.1.0-SNAPSHOT.jar
MD5: e94c56f2b72843b0e546c60ad1546440
SHA1: 042bb3953767f59a53c2dd4722f5b3d7e1bbab98
SHA256:b0f6adee20cb063fd14c38d278cf042ccfdedb6950362f5bf1508c48bc7e342b
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-calws-soap-xml-6.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-caldav-server@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util2-calendar@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util2-calendar@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util2-calendar@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-caldav-util@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util2-calendar@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT

Identifiers

bw-dav-access-6.1.1.jar

Description:

This project provides access control as defined by WebDAV and CalDAV

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-dav-access/6.1.1/bw-dav-access-6.1.1.jar
MD5: 0ea29f4fc7af701dc1a1bb8bd0567e1e
SHA1: 563eb2f3cefd7853a4d1addde655c5aa33540278
SHA256:f05f49dd3f3b99da1f4a0e362775770718262d3927f4b30ff97f46531d49b5fc
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-dav-access-6.1.1.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-db-6.1.0.jar

Description:

This project provides a number of database utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/database/bw-db/6.1.0/bw-db-6.1.0.jar
MD5: e9a631d416cb840b215d3e27e6b4eec6
SHA1: bb4e08fd0c0a4d8b2025de0775d399fd32baf73c
SHA256:8a87afb437bdae78ec917ba9aaf5feca2b18a8a396377a3eb4b81eda0c445158
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-db-6.1.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-hibernate@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-hibernate-6.1.0.jar

Description:

Hibernate utility classes

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/database/bw-hibernate/6.1.0/bw-hibernate-6.1.0.jar
MD5: f7f386c66a86336a797ac3d6c7dfe641
SHA1: 74fbc175c72513e8208e4d64ed22a874d7e6ca55
SHA256:6fc43effdf40386fb840dd0f773e51e14d1d161de213faab4931ccb17c081ca6
Referenced In Project/Scope: Bedework: calendar engine - core and db interactions:compile
bw-hibernate-6.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-hibernate@5.3.0-SNAPSHOT

Identifiers

bw-ical4j-vcard-1.1.0.jar

Description:

A fork of ical4j-vcard with customizations for bedework

License:

iCal4j - License: LICENSE
File Path: /home/runner/.m2/repository/org/bedework/bw-ical4j-vcard/1.1.0/bw-ical4j-vcard-1.1.0.jar
MD5: da711c67505b880aaf2a0388d880df89
SHA1: f4b7f4c6db7688d399bf8ec0caab9ea2809f58cc
SHA256:78d6fb05b5be04f5bdf0fbf0ceb1cc5988695d9188dbecff349310f01a0d35d8
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-ical4j-vcard-1.1.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT

Identifiers

bw-icalendar-xml-6.1.0-SNAPSHOT.jar

Description:

XML Icalendar schema for RFC 6321 specification

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-icalendar-xml/6.1.0-SNAPSHOT/bw-icalendar-xml-6.1.0-SNAPSHOT.jar
MD5: 88ad461358ca7bc25383e4f3193ec26a
SHA1: ed83ac98caca7aaffe41b7b23577d30d72266b21
SHA256:4d578f7ac0acfa1b9adad2e86a32d4d348499205deeb0478ba93fc8fcb6a33dc
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-icalendar-xml-6.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-util2-calendar@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util2-calendar@6.1.0-SNAPSHOT

Identifiers

bw-jpa-6.1.0.jar

Description:

jpa utility classes

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/database/bw-jpa/6.1.0/bw-jpa-6.1.0.jar
MD5: 80dd8da049d77ce798ef920c2ae32b62
SHA1: 8b6a6672606b498b4873342f7965135ec4f69371
SHA256:01381120ca39b099b4c5ebb1c5ee5a4fb9832592356f487cea144633f7ec0e24
Referenced In Project/Scope: Bedework: calendar engine - core and db interactions:compile
bw-jpa-6.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework.database/bw-hibernate@6.1.0

Identifiers

bw-jsforj-2.0.0.jar

Description:

JSCalendar/JSContacts support

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-jsforj/2.0.0/bw-jsforj-2.0.0.jar
MD5: 3684676726dac1f2ba9aabf4bfd2b5a9
SHA1: c09c9b7c9912c6e5fd06986fd0f559829f4f7158
SHA256:c7be51a5c8aabd4c871c7bc18205f29edfddb5219c89fe7d5728cdffe14061c4
Referenced In Projects/Scopes:
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-jsforj-2.0.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT

Identifiers

bw-json-2.1.0-SNAPSHOT.jar

Description:

Basic support for json objects and types

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-json/2.1.0-SNAPSHOT/bw-json-2.1.0-SNAPSHOT.jar
MD5: bdcce47358540778dfddd5c1ec6f236a
SHA1: e543b195d7b42f0ea4cc4a65fb155c8a855f31a7
SHA256:bd22aaacfde7e49bfd3d775a7557797fe50c79954873de266e367be13f959433
Referenced In Projects/Scopes:
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-json-2.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT

Identifiers

bw-schemaorgforj-2.1.0-SNAPSHOT.jar

Description:

This project will create and parse schema.org objects.

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-schemaorgforj/2.1.0-SNAPSHOT/bw-schemaorgforj-2.1.0-SNAPSHOT.jar
MD5: 5f2bb1579b0bd2be826a1c49ddcf9591
SHA1: b37a9ec423ac95a621e6147560b2b7ffe59dd119
SHA256:4f8c50d1124e513ad11099c46835f28387ba1f99ce0a6bca496a45cfb554e374
Referenced In Projects/Scopes:
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-schemaorgforj-2.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT

Identifiers

bw-synch-ws-xml-6.1.0-SNAPSHOT.jar

Description:

This project provides a synch engine for external subscriptions for
    Bedework

    It could also be used for 1 way synchronization between any source and server.

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-synch/bw-synch-ws-xml/6.1.0-SNAPSHOT/bw-synch-ws-xml-6.1.0-SNAPSHOT.jar
MD5: 695165de72c4c617e9b6b1c38ef1ee66
SHA1: 89c2c264503635476a9c03351004ac1ee9f28d13
SHA256:f458898ffadd112946966201be9fdb094d05e48f46a6746ef33e532d50110ef8
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-synch-ws-xml-6.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-caldav-util@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT

Identifiers

bw-util-caching-6.1.1-SNAPSHOT.jar

Description:

This project provides a number of utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-caching/6.1.1-SNAPSHOT/bw-util-caching-6.1.1-SNAPSHOT.jar
MD5: 4539203de177e108c316af5a8c7eaccc
SHA1: c74f672173d98668c7e6ed77e83d210a43f4169f
SHA256:4844696483334e6dab436a8de972605cd23d9b65362e81723c91513b64c8fb5f
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-caching-6.1.1-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-chgnote@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT

Identifiers

bw-util-config-6.1.1-SNAPSHOT.jar

Description:

This project provides a number of utility configuration classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-config/6.1.1-SNAPSHOT/bw-util-config-6.1.1-SNAPSHOT.jar
MD5: 61c32d7d4fd7bf21cf1d77894056d81c
SHA1: 7591e566bc1a5af2d053980f7e779cfa0c89e6bd
SHA256:43891c2e6f645e8aad8d57168787d7605ba649702cb5f70fdae2cc3dbefa6a22
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-config-6.1.1-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.database/bw-hibernate@6.1.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-http@6.2.2-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-indexing@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT

Identifiers

bw-util-dates-6.0.0-SNAPSHOT.jar

Description:

Processing of dates for bedework

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-dates/6.0.0-SNAPSHOT/bw-util-dates-6.0.0-SNAPSHOT.jar
MD5: 80667214db399acb6a76dd96099f1831
SHA1: 6180a9595a9b38a9d76f541d34faced5eaeb9c15
SHA256:02811061f83eb94d12dd4362911edbffd36c9b68117cac092907dd805c3fadec
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-dates-6.0.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-util-dav-6.2.2-SNAPSHOT.jar

Description:

Network (http, DAV,servlet etc) related utilities

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-dav/6.2.2-SNAPSHOT/bw-util-dav-6.2.2-SNAPSHOT.jar
MD5: cc6f1ebb452ed11f42fa31d88a445098
SHA1: c2174c6c262657a29684fc37f81d5b4b142473d3
SHA256:607bf2584c7351e77bbfaad617d064a271a7aa3ff40ea5ca5e285053a48b4d14
Referenced In Projects/Scopes:
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile

bw-util-dav-6.2.2-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT

Identifiers

bw-util-http-6.2.2-SNAPSHOT.jar

Description:

Network (http, DAV,servlet etc) related utilities

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-http/6.2.2-SNAPSHOT/bw-util-http-6.2.2-SNAPSHOT.jar
MD5: 15f12d61195a5937a82801e4453883ec
SHA1: 7c1c6d79270af0ca4a489ffc129f5e7e0dc5877b
SHA256:c25593c26c919cb697dd5b161ef04cb3c009da95834eb8fb28063e1c3c833f66
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-http-6.2.2-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-util-indexing-6.1.0-SNAPSHOT.jar

Description:

This project provides a number of index related utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-indexing/6.1.0-SNAPSHOT/bw-util-indexing-6.1.0-SNAPSHOT.jar
MD5: 8dde7ceda6826021a2b20b9bfb00063b
SHA1: c91086acb53e7e5a5a8c1188bc60014290517b89
SHA256:c3fc415afd3ea5f66e8e93d215018b64ede79bebbe5897645d918aab66fbe1c4
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-indexing-6.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

bw-util-jmx-6.1.1-SNAPSHOT.jar

Description:

This project provides a number of utility configuration classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-jmx/6.1.1-SNAPSHOT/bw-util-jmx-6.1.1-SNAPSHOT.jar
MD5: 52c30ff87145d86270ca115cee31ed8a
SHA1: ce0cf95ed0c2e2bea8513c24485c985e7f2c8a6d
SHA256:cd2fa7373a7a97b8daada8e0fa3e946cc2907b21da1027a6d87f65d0793e769f
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-jmx-6.1.1-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.database/bw-hibernate@6.1.0
  • pkg:maven/org.bedework/bw-util-indexing@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-http@6.2.2-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-caldav-server@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

bw-util-json-6.1.1-SNAPSHOT.jar

Description:

This project provides a number of utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-json/6.1.1-SNAPSHOT/bw-util-json-6.1.1-SNAPSHOT.jar
MD5: 21c5f3d05606ad512fdcb0318a0d1857
SHA1: a49b7b024402f5693663ac7de883fa33ef9b4d1f
SHA256:f2d511b4bed50e6c9b551fe006396a3c0920ed01bbc4a0fb9247ea3ca28f3cd8
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-json-6.1.1-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-util-logging-6.0.0.jar

Description:

This project provides logging utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-logging/6.0.0/bw-util-logging-6.0.0.jar
MD5: 2c63b9031e2d0852a00e57753320b409
SHA1: a12c15e6670f1298c8c4779d08b24595e921aceb
SHA256:e26bbaf5a5dcad998990fdc647f448b2e2dcac6eb628be6945fe24d53759b745
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-logging-6.0.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-chgnote@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexer@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-caldav-util@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.database/bw-db@6.1.0
  • pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT

Identifiers

bw-util-misc-6.1.1-SNAPSHOT.jar

Description:

This project provides a number of utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-misc/6.1.1-SNAPSHOT/bw-util-misc-6.1.1-SNAPSHOT.jar
MD5: 8aac00a58e98664cf20c6e5b17ff57c4
SHA1: ea4e57f5835a8223d353bf6f1bf1c6d45bd73c62
SHA256:f078af029454c4347887d0289718b98bc9698d52728fa92bb42e16df75bb3f20
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-misc-6.1.1-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-caldav@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-inoutsched@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-chgnote@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexer@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-hibernate@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexing@5.3.0-SNAPSHOT

Identifiers

bw-util-opensearch-6.1.0-SNAPSHOT.jar

Description:

This project provides a number of index related utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-opensearch/6.1.0-SNAPSHOT/bw-util-opensearch-6.1.0-SNAPSHOT.jar
MD5: bd1a181d91887c71d3fb59a9434147cf
SHA1: f42c9f0baea026512857a0cdd41ec591c8873efa
SHA256:ba5949c902809a711e43eb2044da73fc1046bdbd03ca6932059e9df94125dfce
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-opensearch-6.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexing@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

bw-util-properties-6.1.1-SNAPSHOT.jar

Description:

This project provides a number of utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-properties/6.1.1-SNAPSHOT/bw-util-properties-6.1.1-SNAPSHOT.jar
MD5: b3f2fd0c2762ba293db56abbf9f395bd
SHA1: 3982a712ad3282658b2f83a7da8846c429f649cc
SHA256:1033989b15d79d888149fc44296ccc4886c744b6a11175e166c63c45cc3f6956
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-properties-6.1.1-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-http@6.2.2-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.database/bw-hibernate@6.1.0
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-indexing@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT

Identifiers

bw-util-security-6.1.0-SNAPSHOT.jar

Description:

Security utility classes

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-security/6.1.0-SNAPSHOT/bw-util-security-6.1.0-SNAPSHOT.jar
MD5: 15580333cdf11e5e97a878fbea9fcf7f
SHA1: 3dd5cbf13bdcd513bf533fb485454235dfeb8649
SHA256:414971feb603bbe2ee9a1ca35038a6e5ef729d0de66c9ea1784637a2e9b672d1
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-security-6.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-util-servlet-6.2.2-SNAPSHOT.jar

Description:

Network (http, DAV,servlet etc) related utilities

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-servlet/6.2.2-SNAPSHOT/bw-util-servlet-6.2.2-SNAPSHOT.jar
MD5: e7265d94add3bcf21e71f3d95aeee033
SHA1: 4261ae8c78f0a8be30803c56acd6f358d0f278de
SHA256:28893b9cdf929bb0b16bf6317913f660d21b42a2f36ae729973cd88aabd7f39c
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-servlet-6.2.2-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-util-tz-6.1.0-SNAPSHOT.jar

Description:

Timezone utility classes

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-tz/6.1.0-SNAPSHOT/bw-util-tz-6.1.0-SNAPSHOT.jar
MD5: 8d2184ee623a130bb9319e654bf46e30
SHA1: dba4099ceccbb48a50f3cd42c4508fb66c9a1f6c
SHA256:968ef2cea7d3a445d6a98e9f1866929e61bd48fb9b1a91d029f5bc5d82526421
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-tz-6.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-inoutsched@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT

Identifiers

bw-util-xml-6.1.1-SNAPSHOT.jar

Description:

This project provides a number of utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-xml/6.1.1-SNAPSHOT/bw-util-xml-6.1.1-SNAPSHOT.jar
MD5: e34452ab38c318cd68a18f81dbe227b7
SHA1: 4be260d343978c2838f13fab1e0e871d46292989
SHA256:72dcd6ce6e84a9cac0f193e164b9e8b3ce890897128c833cd881105ca67c9f50
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util-xml-6.1.1-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-util2-calendar-6.1.0-SNAPSHOT.jar

Description:

Utility classes and methods with dependencies

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util2-calendar/6.1.0-SNAPSHOT/bw-util2-calendar-6.1.0-SNAPSHOT.jar
MD5: b6f47433610a2d3b8478d5bbe9e04576
SHA1: b1f35d444229d59e7ac658b10b9f4c288a108398
SHA256:ef3c3af831c3584c2863a6bb077c686a2b758abbfcf7922277f085de3385ddd3
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util2-calendar-6.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-inoutsched@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-hibernate@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-caldav@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-util2-vcard-6.1.0-SNAPSHOT.jar

Description:

Utility classes and methods with dependencies

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util2-vcard/6.1.0-SNAPSHOT/bw-util2-vcard-6.1.0-SNAPSHOT.jar
MD5: 53de16f8765d4006ea5ab5e5a0853811
SHA1: a5c8141f3dcf882510659c23defad6ef017d63ee
SHA256:76ad6719ac976eccf91248be67d95e6af475f59be558addfe96ab355dec3c472
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-util2-vcard-6.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

bw-webdav-6.1.0-SNAPSHOT.jar

Description:

A generic WebDAV servlet

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-webdav/6.1.0-SNAPSHOT/bw-webdav-6.1.0-SNAPSHOT.jar
MD5: b7da10180552b511c1b8114a83ba616c
SHA1: 1c22af97bbad6cc0cfb4c968d0ce616fca21aa30
SHA256:d3c304f39f6454e04c91d15eb86ba7a59476388abbc1645f50a4616ed667d018
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

bw-webdav-6.1.0-SNAPSHOT.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

commons-codec-1.17.1.jar

Description:

     The Apache Commons Codec component contains encoders and decoders for
     various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.
  

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-codec/commons-codec/1.17.1/commons-codec-1.17.1.jar
MD5: 7b3438ab4c6d91e0066d410947e43f3e
SHA1: 973638b7149d333563584137ebf13a691bb60579
SHA256:f9f6cb103f2ddc3c99a9d80ada2ae7bf0685111fd6bffccb72033d1da4e6ff23
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

commons-codec-1.17.1.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-security@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.apache.commons/commons-csv@1.13.0
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

commons-csv-1.13.0.jar

Description:

The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-csv/1.13.0/commons-csv-1.13.0.jar
MD5: 35f98b40a9c6b81cb09792b944587ff5
SHA1: 3ed1c07b3470d986f584196cfdca45587f06d8ad
SHA256:648035ab973875787f3a12313cf239e86b51b4d209f91106ba90eba2fbd561cc
Referenced In Project/Scope: Bedework: calendar engine - various tools:compile
commons-csv-1.13.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework.caleng/bw-calendar-engine-tools@5.3.0-SNAPSHOT

Identifiers

commons-io-2.20.0.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.
  

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar
MD5: 94e7e6b9b5fe82388687b584d3571081
SHA1: 36f3474daec2849c149e877614e7f979b2082cd2
SHA256:df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

commons-io-2.20.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-ical4j-vcard@1.1.0
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.apache.commons/commons-csv@1.13.0
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT

Identifiers

commons-lang3-3.18.0.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.
  

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-lang3/3.18.0/commons-lang3-3.18.0.jar
MD5: 48b9886957920a4cdb602780ca345087
SHA1: fb14946f0e39748a6571de0635acbe44e7885491
SHA256:4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

commons-lang3-3.18.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-tz@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.apache.commons/commons-text@1.14.0
  • pkg:maven/org.bedework/bw-util-tz@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

commons-logging-1.2.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-logging/commons-logging/1.2/commons-logging-1.2.jar
MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686
SHA256:daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

commons-logging-1.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-ical4j-vcard@1.1.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT

Identifiers

commons-text-1.14.0.jar

Description:

Apache Commons Text is a set of utility functions and reusable components for processing
    and manipulating text in a Java environment.
  

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-text/1.14.0/commons-text-1.14.0.jar
MD5: 54960a12a82d52df3d5548d6934d87b2
SHA1: adcb0d4c67eabc79682604b47eb852aaff21138a
SHA256:121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

commons-text-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-tools@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-misc@6.1.1-SNAPSHOT

Identifiers

compiler-0.9.14.jar

Description:

Implementation of mustache.js for Java

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/com/github/spullara/mustache/java/compiler/0.9.14/compiler-0.9.14.jar
MD5: 98d75faf04c0855013d77df55e71421a
SHA1: e6df8b5aabb80d6eb6d8fef312a56d66b7659ba6
SHA256:99a7e7855609135006f078e6de7ee69daad9c42f98e679d56f80653cb17526b9
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

compiler-0.9.14.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

httpasyncclient-4.1.5.jar

Description:

   Apache HttpComponents AsyncClient
  

File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpasyncclient/4.1.5/httpasyncclient-4.1.5.jar
MD5: 5346c547bfd0da64eb3dc54be9380d65
SHA1: cd18227f1eb8e9a263286c1d7362ceb24f6f9b32
SHA256:0c1877489a9d1ba4fa50f6cfcab11d1123618858cb31d56afaab5afdd5064d99
Referenced In Projects/Scopes:

  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

httpasyncclient-4.1.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0

Identifiers

httpclient-4.5.14.jar

Description:

   Apache HttpComponents Client
  

File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar
MD5: 2cb357c4b763f47e58af6cad47df6ba3
SHA1: 1194890e6f56ec29177673f2f12d0b8e627dec98
SHA256:c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6
Referenced In Projects/Scopes:

  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

httpclient-4.5.14.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-http@6.2.2-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT

Identifiers

httpcore-4.4.16.jar

Description:

   Apache HttpComponents Core (blocking I/O)
  

File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar
MD5: 28d2cd9bf8789fd2ec774fb88436ebd1
SHA1: 51cf043c87253c9f58b539c9f7e44c8894223850
SHA256:6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f
Referenced In Projects/Scopes:

  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

httpcore-4.4.16.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-http@6.2.2-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

ical4j-3.0.24.jar

Description:

A Java library for reading and writing iCalendar (*.ics) files

License:

BSD 3-Clause License: https://github.com/ical4j/ical4j/raw/refs/heads/develop/LICENSE.txt
File Path: /home/runner/.m2/repository/org/bedework/ical4j/ical4j/3.0.24/ical4j-3.0.24.jar
MD5: 8a13d47cb0406201477c9ebbd54d9a27
SHA1: d1aef2a3d985edbf59726889a1ff0adc18b20122
SHA256:042344cb9f0bd8429ba6a14a8f4d9c4486dbdd739e852539a42c7baff50614ff
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

ical4j-3.0.24.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT

Identifiers

jackson-annotations-2.18.2.jar

Description:

Core annotations used for value types, used by Jackson data binding package.
  

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-annotations/2.18.2/jackson-annotations-2.18.2.jar
MD5: 79d38d3c51068a2bbc40268d02f80763
SHA1: 985d77751ebc7fce5db115a986bc9aa82f973f4a
SHA256:581bd61000ef7648943f781ca05689e56d03f6052748365a8e2b3a9b5d3fa32f
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jackson-annotations-2.18.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-util-logging@6.0.0
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-tz@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-logging@6.0.0
  • pkg:maven/org.bedework/bw-util-tz@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT

Identifiers

jackson-core-2.18.2.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.18.2/jackson-core-2.18.2.jar
MD5: bf935e6eca3a57defa13918661905cb0
SHA1: fb64ccac5c27dca8819418eb4e443a9f496d9ee7
SHA256:d8054ae7c0d1c2d2f55d28e46026ebe5892881f3fab5f439233184381c3b4a1f
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jackson-core-2.18.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-tz@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-tz@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

CVE-2026-68498 (OSSINDEX)  

jackson-core - Allocation of Resources Without Limits or Throttling

Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://guide.sonatype.com/vulnerability/CVE-2026-68498 for details
CWE-770 Allocation of Resources Without Limits or Throttling

CVSSv2:
  • Base Score: HIGH (8.699999809265137)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.18.2:*:*:*:*:*:*:*

CVE-2026-89407 (OSSINDEX)  

NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates "stringified numbers" with two regular expressions: PATTERN_FLOAT ([+-]?[0-9]*[\.]?[0-9]+([eE][+-]?[0-9]+)?), present since 2.17.0, and PATTERN_FLOAT_TRAILING_DOT, added in 2.17.2. PATTERN_FLOAT places adjacent quantifiers over the same character class -- an optional [0-9]* run, an optional dot, then a required [0-9]+ run -- so input that ultimately fails to match forces Java's backtracking engine to retry every possible split point of the digit run. 



Matching cost therefore grows with the square of the input length. 



An attacker who can supply JSON that an application deserializes into a numeric target type reaches this method through jackson-databind's default String-to-number coercion (StdDeserializer and NumberDeserializers for BigDecimal, BigInteger, Double and Float). 



Because StreamReadConstraints.maxStringLength defaults to 20,000,000 characters, no constraint bounds the input before it reaches the regex. 



Testing by the reporter confirmed O(n^2) growth across five consecutive input-size doublings, with a single 160,000-character string consuming roughly 74 seconds in one call; a small number of concurrent requests of ordinary body size can therefore exhaust a server's request-handling thread pool. 



The affected method does not exist before 2.17.0, so 2.16.x and earlier releases are not affected. 



The fix replaces both regular expressions with a hand-rolled single-pass scan.
CWE-1333 Inefficient Regular Expression Complexity

CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.18.2:*:*:*:*:*:*:*

CVE-2026-89425 (OSSINDEX)  

UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the three sibling parser implementations, including UTF8StreamJsonParser, it never consults ErrorReportConfiguration.getMaxErrorTokenLength() (default 256). A malformed token supplied to a parser created through JsonFactory.createParser(DataInput) is therefore accumulated in full. No StreamReadConstraints setting mitigates this: maxDocumentLength cannot be applied to DataInput sources at all, and maxStringLength does not cover this path because the accumulation bypasses ReadConstrainedTextBuffer. The reporter measured a 20,000,109-character exception message from a 20-million-character malformed token on the DataInput path, against 367 characters for identical input on the InputStream path. Scaling the payload drives the StringBuilder, which also incurs byte-to-char expansion and internal array doubling, to many times the raw payload size and can trigger OutOfMemoryError for the whole JVM. UTF8DataInputJsonParser was introduced in 2.8.0 together with createParser(DataInput); releases before 2.8.0 do not contain the affected class.
CWE-400 Uncontrolled Resource Consumption

CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.18.2:*:*:*:*:*:*:*

jackson-databind-2.18.2.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.2/jackson-databind-2.18.2.jar
MD5: 1b56887bcd3eaea1ff710eb673e610b0
SHA1: deef8697b92141fb6caf7aa86966cff4eec9b04f
SHA256:4b364e6850dc89172fcf1d4dd26b8ff5488eda44ff4657e22dd265203dd5ab3c
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jackson-databind-2.18.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-tz@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-http@6.2.2-SNAPSHOT
  • pkg:maven/org.bedework/bw-util2-calendar@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util2-calendar@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util2-calendar@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

CVE-2026-68497 (OSSINDEX)  

jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by passing the raw string verbatim to DatatypeFactory.newDuration(value) or newXMLGregorianCalendar(value) in CoreXMLDeserializers.Std._deserialize. These deserializers are registered by default with no opt-in, so a plain ObjectMapper or JsonMapper with no polymorphic typing and no special configuration reaches this path. The XML Schema lexical grammar permits numeric components of arbitrary length, which the JDK materializes through the native BigInteger(String) and BigDecimal(String) constructors, both quadratic in digit count. Because the digits sit inside a JSON string token rather than a JSON number token, jackson-core's StreamReadConstraints.maxNumberLength guard never applies; jackson's own NumberDeserializers call validateIntegerLength or validateFPLength before parsing a stringified number, but the XML datatype deserializer omits that pre-check. An unauthenticated attacker can therefore submit a single request of a few megabytes, such as a Duration value consisting of the letter P followed by several million digits and the letter Y, and force tens of seconds to several minutes of single-threaded CPU work; a handful of concurrent requests can saturate a server's worker threads. This affects com.fasterxml.jackson.core:jackson-databind from 2.0.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2.
CWE-1333 Inefficient Regular Expression Complexity

CVSSv2:
  • Base Score: HIGH (8.699999809265137)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.18.2:*:*:*:*:*:*:*

CVE-2026-83557 (OSSINDEX)  

jackson-databind - Deserialization of untrusted data [CVE-2026-83557]
CWE-502 Deserialization of Untrusted Data

CVSSv2:
  • Base Score: HIGH (8.699999809265137)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.18.2:*:*:*:*:*:*:*

CVE-2026-54512  

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator (PTV) is the primary safety mechanism guarding polymorphic deserialization. When polymorphic typing is enabled and a type identifier contains generic parameters (i.e. the type ID string contains <), DatabindContext._resolveAndValidateGeneric() validates only the raw container class name (the substring before <) against the configured PTV. If the container type is approved, the method parses the full canonical type string via TypeFactory.constructFromCanonical() and returns the fully parameterized type without ever validating the nested type arguments against the PTV. The nested type arguments are then resolved, instantiated, and populated as beans during deserialization. An attacker who controls the type ID can therefore place a denied class as a generic type parameter of an allowed container — for example java.util.ArrayList<com.evil.Gadget> when only java.util.ArrayList is allow-listed. The container passes the PTV check; com.evil.Gadget is loaded via Class.forName(name, true, loader), instantiated, and its properties are set from attacker-controlled JSON. This completely bypasses an explicitly configured PTV allow-list. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4.
CWE-502 Deserialization of Untrusted Data, CWE-184 Incomplete List of Disallowed Inputs

CVSSv3:
  • Base Score: HIGH (8.1)
  • Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

CVE-2026-54513  

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() allowlists any array type based only on clazz.isArray(), without validating the array's component (element) type against the configured allowlist. A PTV built with allowIfSubTypeIsArray() plus an explicit concrete-type allowlist therefore still permits EvilType[] even though EvilType is not allowlisted. When Jackson deserializes the elements and no per-element type IDs are present, it instantiates the component type directly with no further PTV check, bypassing the allowlist. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4.
CWE-184 Incomplete List of Disallowed Inputs

CVSSv3:
  • Base Score: HIGH (8.1)
  • Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

CVE-2026-19032 (OSSINDEX)  

jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string bound from untrusted JSON is passed to new URI(value) and then to Path.of(uri). When that throws FileSystemNotFoundException, the code enumerates ServiceLoader<FileSystemProvider> and calls provider.getPath(uri) on the first provider whose scheme matches the attacker-chosen scheme. Untrusted JSON can therefore select and drive an arbitrary registered FileSystemProvider during readValue under a default JsonMapper, and forces provider class loading at the same time. With only the JDK built-in providers (file, jar/zipfs) present, the resolved path is inert and no mount or network I/O occurs; further impact requires a side-effecting third-party FileSystemProvider on the classpath. This affects com.fasterxml.jackson.core:jackson-databind from 2.8.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2. Binding java.nio.file.Path from untrusted JSON should be avoided regardless of version.
CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

CVSSv2:
  • Base Score: MEDIUM (6.900000095367432)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.18.2:*:*:*:*:*:*:*

CVE-2026-54518 (OSSINDEX)  

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4, UnwrappedPropertyHandler.processUnwrappedCreatorProperties() replays buffered JSON into creator parameters but never consults prop.visibleInView(activeView). The normal property-based creator path gates creator properties on the active view, but this unwrapped-creator replay path bypasses that check, so a constructor parameter annotated with both @JsonView(AdminView.class) and @JsonUnwrapped is populated from attacker JSON even when a more restrictive view is active. This vulnerability is fixed in 2.21.4 and 3.1.4.

Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://guide.sonatype.com/vulnerability/CVE-2026-54518 for details
CWE-863 Incorrect Authorization

CVSSv2:
  • Base Score: MEDIUM (6.900000095367432)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.18.2:*:*:*:*:*:*:*

CVE-2026-77310 (OSSINDEX)  

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std._deserialize() calls InetAddress.getByName() on attacker-controlled input, causing eager DNS resolution during deserialization and enabling DNS-based server-side request forgery and internal-host enumeration. This issue is fixed in versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1.
CWE-918 Server-Side Request Forgery (SSRF)

CVSSv2:
  • Base Score: MEDIUM (6.900000095367432)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.18.2:*:*:*:*:*:*:*

CVE-2026-91776 (OSSINDEX)  

TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfo(use = Id.NAME, defaultImpl = ...), every distinct unrecognized type ID resolves to the same fallback deserializer but is retained as its own key in the _deserializers map. That map has no configurable bound and lives for the lifetime of the type deserializer, so an attacker who can repeatedly supply fresh unknown type IDs causes monotonic memory retention across requests. The reporter observed 10,000 retained entries from 10,000 distinct unknown IDs, against a single entry for a control that repeated one unknown ID the same number of times, isolating attacker-controlled key cardinality from request volume. Exploitation requires an application that enables name-based polymorphism with a defaultImpl or equivalent fallback, accepts attacker-influenced type IDs, and reuses a long-lived ObjectMapper across requests. The fix stops caching fallback resolutions for unrecognized IDs and bounds both the number of cached entries and the length of a cacheable type ID.
CWE-400 Uncontrolled Resource Consumption

CVSSv2:
  • Base Score: MEDIUM (6.900000095367432)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.18.2:*:*:*:*:*:*:*

CVE-2026-91777 (OSSINDEX)  

Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference() and the equivalent implementation in MapDeserializer. When a document first creates N unresolved object-ID references in an identity-enabled collection or map and then defines those same IDs in reverse order, completion performs on the order of N * (N + 1) / 2 identity comparisons, so a shallow document whose size grows linearly causes quadratic CPU work during deserialization. The reporter instrumented equals() calls on the ID class and measured exactly 2,003,000 comparisons at N = 2,000, against zero comparisons in the pending-reference lookup path for an equally sized control in which every reference was already resolved. The input requires no deep nesting and no syntactically unusual JSON. Exploitation requires an application that deserializes attacker-influenced JSON into an identity-enabled collection or map. The fix replaces the repeated linear lookup with a keyed pending-reference structure.
CWE-400 Uncontrolled Resource Consumption

CVSSv2:
  • Base Score: MEDIUM (6.900000095367432)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.18.2:*:*:*:*:*:*:*

CVE-2026-59888 (OSSINDEX)  

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector._removeUnwantedIgnorals() records an ignored component under its original implicit name before _renameUsing() applies the naming strategy, allowing the renamed JSON key to be assigned to the Record constructor parameter. This issue is fixed in versions 2.18.8, 2.21.4, and 3.1.4.
CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes

CVSSv2:
  • Base Score: MEDIUM (6.300000190734863)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.18.2:*:*:*:*:*:*:*

CVE-2026-59889 (OSSINDEX)  

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.18.0 until 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1, UnwrappedPropertyHandler.processUnwrapped() replays buffered JSON for a @JsonUnwrapped property and calls prop.deserializeAndSet() without a prop.visibleInView(ctxt.getActiveView()) guard, allowing a property annotated with both @JsonView and @JsonUnwrapped to be written from attacker JSON under a less-privileged active view. This issue is fixed in versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1.

Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://guide.sonatype.com/vulnerability/CVE-2026-59889 for details
CWE-863 Incorrect Authorization

CVSSv2:
  • Base Score: MEDIUM (6.300000190734863)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.18.2:*:*:*:*:*:*:*

CVE-2026-54514  

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.0.0 until 2.18.8, 2.21.4, and 3.1.4, JDKFromStringDeserializer constructed InetSocketAddress with new InetSocketAddress(host, port), which performs eager DNS name resolution for hostname inputs at deserialization time. An application that binds untrusted JSON into a type containing an InetSocketAddress field issues an attacker-chosen DNS query during readValue, before any application-level validation or connect logic. The fix uses InetSocketAddress.createUnresolved(host, port), deferring DNS to an explicit connect. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4.
CWE-918 Server-Side Request Forgery (SSRF)

CVSSv3:
  • Base Score: MEDIUM (5.3)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

CVE-2026-54515  

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again. This vulnerability is fixed in 2.18.9, 2.21.5, and 3.1.4.
CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes

CVSSv3:
  • Base Score: MEDIUM (5.3)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

jackson-dataformat-cbor-2.17.2.jar

Description:

Support for reading and writing Concise Binary Object Representation
([CBOR](https://www.rfc-editor.org/info/rfc7049)
encoded data using Jackson abstractions (streaming API, data binding, tree model)
  

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-cbor/2.17.2/jackson-dataformat-cbor-2.17.2.jar
MD5: 8791b95fb115255e534697a8f15f23b4
SHA1: 57fa7c1b5104bbc4599278d13933a937ee058e68
SHA256:1d7dc634ba3d7981d7017f4f44d43cf371e922c80028b4eb3e5374ce6546d5f6
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jackson-dataformat-cbor-2.17.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

CVE-2026-68495 (OSSINDEX)  

The CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so the maxNameLength limit is not enforced for this format. CBORParser._decodeLongerName() decodes a definite-length property name with no length check, and CBORParser._decodeChunkedName() delegates to the value-oriented _finishChunkedText() routine, which validates maxStringLength rather than maxNameLength. An attacker who can have a CBOR document parsed may therefore embed a single property name of unbounded length; the parser buffers the whole name in memory before returning it, whatever maxNameLength is configured to. Because StreamReadConstraints.maxDocumentLength is also disabled by default, nothing else bounds the name under default settings, so the only limits are the attacker's upload capacity and available heap, leading to memory exhaustion and denial of service. No privileges beyond the ability to submit data to a parsing endpoint are required, and exploitation needs only that the bytes reach CBORFactory parsing, directly or through an ObjectMapper configured with the CBOR module. jackson-core's own JSON parsers enforce maxNameLength incrementally during name decoding; this gap is specific to the binary formats. maxNameLength and validateNameLength were introduced in jackson-core 2.16.0, so releases before 2.16.0 do not contain the constraint that is left unenforced. This issue is tracked together with the Smile parser defect in the same vendor advisory, GHSA-3v8f-v6vx-fmrm, which covers both binary formats. The CBOR parser defect (jackson-dataformats-binary issue #725) is CVE-2026-68495; the Smile parser defect (issue #726) is assigned CVE-2026-68496.
CWE-400 Uncontrolled Resource Consumption

CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:2.17.2:*:*:*:*:*:*:*

jackson-dataformat-smile-2.17.2.jar

Description:

Support for reading and writing Smile ("binary JSON")
encoded data using Jackson abstractions (streaming API, data binding,
tree model)
  

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-smile/2.17.2/jackson-dataformat-smile-2.17.2.jar
MD5: 89616f301f663652a78030d40d31d539
SHA1: 20e956b9b6f67138edd39fab7a506ded19638bcb
SHA256:120b07ad7b7b9097d9a174ab6176e07b6409fb7af3f63fcf3d7147c053be0d29
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jackson-dataformat-smile-2.17.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT

Identifiers

CVE-2026-68496 (OSSINDEX)  

The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so the maxNameLength limit is not enforced for this format. SmileParser._handleLongFieldName() grows its internal name buffer through an unconstrained _growArrayTo() call and performs no length validation. An attacker who can have a Smile document parsed may therefore embed a single property name of unbounded length; the parser buffers the whole name in memory before returning it, whatever maxNameLength is configured to. Because StreamReadConstraints.maxDocumentLength is also disabled by default, nothing else bounds the name under default settings, so the only limits are the attacker's upload capacity and available heap, leading to memory exhaustion and denial of service. No privileges beyond the ability to submit data to a parsing endpoint are required, and exploitation needs only that the bytes reach SmileFactory parsing, directly or through an ObjectMapper configured with the Smile module. jackson-core's own JSON parsers enforce maxNameLength incrementally during name decoding; this gap is specific to the binary formats. maxNameLength and validateNameLength were introduced in jackson-core 2.16.0, so releases before 2.16.0 do not contain the constraint that is left unenforced. This issue is tracked together with the CBOR parser defect in the same vendor advisory, GHSA-3v8f-v6vx-fmrm, which covers both binary formats. The Smile parser defect (jackson-dataformats-binary issue #726) is CVE-2026-68496; the CBOR parser defect (issue #725) is assigned CVE-2026-68495.
CWE-400 Uncontrolled Resource Consumption

CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.fasterxml.jackson.dataformat:jackson-dataformat-smile:2.17.2:*:*:*:*:*:*:*

jackson-dataformat-yaml-2.18.2.jar

Description:

Support for reading and writing YAML-encoded data via Jackson abstractions.
  

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.18.2/jackson-dataformat-yaml-2.18.2.jar
MD5: 823869062440ee6a273ca421727eda2f
SHA1: d000e13505d1cf564371516fa3d5b8769a779dc9
SHA256:381a1c0711e4bb88561a6c0008b5a945465628ca07764ccd66a0d97ee07ad612
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jackson-dataformat-yaml-2.18.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

jakarta.activation-api-2.1.3.jar

Description:

  Specification

License:

EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar
MD5: 76e7b680375ea9f40f3ddbd702efcd25
SHA1: fa165bd70cda600368eee31555222776a46b881f
SHA256:01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jakarta.activation-api-2.1.3.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-caldav-util@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util2-calendar@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2

Identifiers

jakarta.annotation-api-3.0.0.jar

Description:

Jakarta Annotations API

License:

EPL 2.0: https://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/3.0.0/jakarta.annotation-api-3.0.0.jar
MD5: 7faffaab962918da4cf5ddfd76609dd2
SHA1: 54f928fadec906a99d558536756d171917b9d936
SHA256:b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jakarta.annotation-api-3.0.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

jakarta.jms-api-3.1.0.jar

Description:

        Jakarta Messaging describes a means for Java applications to create, send, 
        and receive messages via loosely coupled, reliable asynchronous communication services.
    

License:

Eclipse Public License 2.0: https://projects.eclipse.org/license/epl-2.0
GNU General Public License, version 2 with the GNU Classpath Exception: https://projects.eclipse.org/license/secondary-gpl-2.0-cp
File Path: /home/runner/.m2/repository/jakarta/jms/jakarta.jms-api/3.1.0/jakarta.jms-api-3.1.0.jar
MD5: 68b9809056047472375bf10441b2a26f
SHA1: e194cf91a3f908e4846542849ac11a8e0b3c68ad
SHA256:6605e08075ab389c359451c7854808cf4b1575e1ea6317e534e9d4df088096df
Referenced In Projects/Scopes:
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jakarta.jms-api-3.1.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-sysevents-common@5.3.0-SNAPSHOT

Identifiers

jakarta.jws-api-3.0.0.jar

Description:

Jakarta Web Services Metadata API

License:

Eclipse Distribution License - v 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/jws/jakarta.jws-api/3.0.0/jakarta.jws-api-3.0.0.jar
MD5: 40d2c030ca6afa636a6178eb3eee6a56
SHA1: af8955221689acfde96fbd4b2c1c270589bc6903
SHA256:722a8ac1afe01d70f1f2c7a8289db3f764206c9c2f52a82b045e513be4cacbd7
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jakarta.jws-api-3.0.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-api@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.bw-synch/bw-synch-ws-xml@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-caldav-util@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-interfaces@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util2-calendar@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.bw-synch/bw-synch-ws-xml@6.1.0-SNAPSHOT

Identifiers

jakarta.mail-api-2.1.3.jar

Description:

  Specification API

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/mail/jakarta.mail-api/2.1.3/jakarta.mail-api-2.1.3.jar
MD5: 288a687deb06b87602ce14cd03dddff4
SHA1: a327aa5f514ba86e80d54584417d7376ed2bde0e
SHA256:8051b58d75f982f9a5b963b3765426e824b2a64865ef0af17205e455b98db05c
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jakarta.mail-api-2.1.3.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-tz@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-tz@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

jakarta.persistence-api-3.1.0.jar

Description:

Jakarta Persistence 3.1 API jar

License:

Eclipse Public License v. 2.0: http://www.eclipse.org/legal/epl-2.0
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/persistence/jakarta.persistence-api/3.1.0/jakarta.persistence-api-3.1.0.jar
MD5: 35a1b7dfb38cf44ff795be607b0e6b5b
SHA1: 66901fa1c373c6aff65c13791cc11da72060a8d6
SHA256:475389446d35c6f46c565728b756dc508c284644ea2690644e0d8e7e339d42fd
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jakarta.persistence-api-3.1.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.database/bw-db@6.1.0
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.database/bw-db@6.1.0
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

jakarta.xml.bind-api-4.0.2.jar

Description:

Jakarta XML Binding API 4.0 Design Specification

License:

http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/xml/bind/jakarta.xml.bind-api/4.0.2/jakarta.xml.bind-api-4.0.2.jar
MD5: 0c8f9991081def819435c3ff36e4d93f
SHA1: 6cd5a999b834b63238005b7144136379dc36cad2
SHA256:0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jakarta.xml.bind-api-4.0.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-caldav-util@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-tools@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-convert@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-caldav@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util2-calendar@6.1.0-SNAPSHOT

Identifiers

jakarta.xml.soap-api-3.0.2.jar

Description:

Provides the API for creating and building SOAP messages.

License:

Eclipse Distribution License - v 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/xml/soap/jakarta.xml.soap-api/3.0.2/jakarta.xml.soap-api-3.0.2.jar
MD5: b75eb22ffc46058b28d78874902dd2d3
SHA1: 0445830286faf84fe40a3f47ccd7537d69cd58c4
SHA256:62ecd5c3b5c107779e5ffe84922594c381f7a8e397320a05c3ee3957b5b7863f
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jakarta.xml.soap-api-3.0.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.2
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-caldav-server@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

jakarta.xml.ws-api-4.0.2.jar

Description:

Jakarta XML Web Services API

License:

Eclipse Distribution License - v 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/xml/ws/jakarta.xml.ws-api/4.0.2/jakarta.xml.ws-api-4.0.2.jar
MD5: 9a41e8d9a62fb837d2228d47684a57da
SHA1: 331ecab874ee75b48db661a331319958cb04edec
SHA256:ae500d776eeb64471cd3e3bdfcd6a9e7de6d8f866be6d7e9b2f9ca606d68c203
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jakarta.xml.ws-api-4.0.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT

Identifiers

jna-5.13.0.jar

Description:

Java Native Access

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.13.0/jna-5.13.0.jar
MD5: bd2e5bc6b4b020c2d9a6e17a8e9bcef1
SHA1: 1200e7ebeedbe0d10062093f32925a912020e747
SHA256:66d4f819a062a51a1d5627bffc23fac55d1677f0e0a1feba144aabdd670a64bb
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jna-5.13.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

joda-time-2.12.7.jar

Description:

Date and time library to replace JDK date handling

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/joda-time/joda-time/2.12.7/joda-time-2.12.7.jar
MD5: e8bb877dfb6d67f6cc78a524264ba83b
SHA1: d015b997eccd511e5567218a51651ff0625f6f25
SHA256:385282b005818cfaccdbe8bd2429811e7e641782f2b88932a6b8ff51d668f616
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

joda-time-2.12.7.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

jopt-simple-5.0.4.jar

Description:

A Java library for parsing command line options

License:

The MIT License: http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/net/sf/jopt-simple/jopt-simple/5.0.4/jopt-simple-5.0.4.jar
MD5: eb0d9dffe9b0eddead68fe678be76c49
SHA1: 4fdac2fbe92dfad86aa6e9301736f6b4342a3f5c
SHA256:df26cc58f235f477db07f753ba5a3ab243ebe5789d9f89ecf68dd62ea9a66c28
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jopt-simple-5.0.4.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

jzlib-1.1.3.jar

Description:

JZlib is a re-implementation of zlib in pure Java

License:

BSD: http://www.jcraft.com/jzlib/LICENSE.txt
File Path: /home/runner/.m2/repository/com/jcraft/jzlib/1.1.3/jzlib-1.1.3.jar
MD5: 386d3714fef534d21175d8885ae48bf7
SHA1: c01428efa717624f7aabf4df319939dda9646b2d
SHA256:89b1360f407381bf61fde411019d8cbd009ebb10cff715f3669017a031027560
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

jzlib-1.1.3.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

lang-mustache-client-2.18.0.jar

Description:

OpenSearch subproject :modules:lang-mustache

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opensearch/plugin/lang-mustache-client/2.18.0/lang-mustache-client-2.18.0.jar
MD5: 51dbbca49045eb90a4195b94002bde90
SHA1: d05e6fd5c74b28111398786bcd66ab531606e6f3
SHA256:c5c1f1cbc289015cd720602ce59249775d5a935789392c398706e7c6c330bcaf
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lang-mustache-client-2.18.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

log4j-jul-2.21.0.jar

Description:

The Apache Log4j implementation of java.util.logging

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-jul/2.21.0/log4j-jul-2.21.0.jar
MD5: c98eb03d1d3fbc7ce41c1c230b6db8af
SHA1: f0da61113f4a47654677e6a98b1e13ca7de2483d
SHA256:d8805608f92c0ac468ae7b469182415390ab6c414d9116ae4865461595ecdbdc
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

log4j-jul-2.21.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

CVE-2026-34479  

The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard, producing malformed XML output. Conforming XML parsers are required to reject documents containing such characters with a fatal error, which may cause downstream log processing systems to drop or fail to index affected records.

Two groups of users are affected:

  *  Those using Log4j1XmlLayout directly in a Log4j Core 2 configuration file.
  *  Those using the Log4j 1 configuration compatibility layer with org.apache.log4j.xml.XMLLayout specified as the layout class.


Users are advised to upgrade to Apache Log4j 1-to-Log4j 2 bridge version 2.25.4, which corrects this issue.

Note: The Apache Log4j 1-to-Log4j 2 bridge is deprecated and will not be present in Log4j 3. Users are encouraged to consult the  Log4j 1 to Log4j 2 migration guide https://logging.apache.org/log4j/2.x/migrate-from-log4j1.html , and specifically the section on eliminating reliance on the bridge.
CWE-116 Improper Encoding or Escaping of Output

CVSSv4:
  • Base Score: MEDIUM (6.9)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:N/V:X/RE:X/U:X
CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

CVE-2026-34477  

The fix for  CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161  was incomplete: it addressed hostname verification only when enabled via the  log4j2.sslVerifyHostName https://logging.apache.org/log4j/2.x/manual/systemproperties.html#log4j2.sslVerifyHostName  system property, but not when configured through the  verifyHostName https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName  attribute of the <Ssl> element.

Although the verifyHostName configuration attribute was introduced in Log4j Core 2.12.0, it was silently ignored in all versions through 2.25.3, leaving TLS connections vulnerable to interception regardless of the configured value.

A network-based attacker may be able to perform a man-in-the-middle attack when all of the following conditions are met:

  *  An SMTP, Socket, or Syslog appender is in use.
  *  TLS is configured via a nested <Ssl> element.
  *  The attacker can present a certificate issued by a CA trusted by the appender's configured trust store, or by the default Java trust store if none is configured.
This issue does not affect users of the HTTP appender, which uses a separate  verifyHostname https://logging.apache.org/log4j/2.x/manual/appenders/network.html#HttpAppender-attr-verifyHostName  attribute that was not subject to this bug and verifies host names by default.

Users are advised to upgrade to Apache Log4j Core 2.25.4, which corrects this issue.
CWE-295 Improper Certificate Validation, CWE-297 Improper Validation of Certificate with Host Mismatch

CVSSv4:
  • Base Score: MEDIUM (6.3)
  • Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:N/V:X/RE:X/U:X
CVSSv3:
  • Base Score: MEDIUM (5.9)
  • Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:2.2/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

CVE-2026-49844  

Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue affects Apache Log4j API versions 2.13.1 through 2.25.4 and version 2.26.0.

The fix for CVE-2026-34481 did not cover all code paths: when a MapMessage contains a non-finite IEEE 754 value (NaN, Infinity, or -Infinity), MapMessage.asJson() emits the corresponding bare token. RFC 8259 does not permit these tokens, so a conformant parser rejects the resulting document.

The defect is reachable only when both of the following conditions hold:

  *  The application uses the  message resolver https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message  of JsonTemplateLayout or any other layout that relies on MapMessage.asJson() or MapMessage.getFormattedMessage(new String[]{"JSON"}).
  *  The application logs a MapMessage that contains an attacker-controlled floating-point value.


An attacker who can supply a non-finite value can cause the affected layout to emit malformed JSON, which may corrupt the enclosing log record or disrupt downstream log ingestion and parsing.

Users are advised to upgrade to Apache Log4j API 2.25.5 or 2.26.1, both of which emit RFC 8259-compliant JSON for non-finite values.
CWE-116 Improper Encoding or Escaping of Output

CVSSv4:
  • Base Score: MEDIUM (6.3)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:N/V:X/RE:X/U:X
CVSSv3:
  • Base Score: MEDIUM (5.9)
  • Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:2.2/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

lucene-analysis-common-9.12.0.jar

Description:

Apache Lucene (module: common)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-analysis-common/9.12.0/lucene-analysis-common-9.12.0.jar
MD5: 29f3cd7f2279d7d027f01db58c30aa4f
SHA1: 4c2503cfaba37249e20ea877555cb52ee89d1ae1
SHA256:8c79d8741f711cc6d7501805b03f7b5f505805d09cab1beb95f0be24b6d27655
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-analysis-common-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

lucene-backward-codecs-9.12.0.jar

Description:

Apache Lucene (module: backward-codecs)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-backward-codecs/9.12.0/lucene-backward-codecs-9.12.0.jar
MD5: 1f94a415e05164526bc186d8e804318c
SHA1: 68fe98c94e9644a584ea1bf525e68d9406fc61ec
SHA256:a42c17f304c9bf1e8411ebdcf91baf2df2d00c7bfa13bca9e41ccf381d78cfba
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-backward-codecs-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

lucene-core-9.12.0.jar

Description:

Apache Lucene (module: core)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-core/9.12.0/lucene-core-9.12.0.jar
MD5: dd2ac67819c84831a53ec739d4889852
SHA1: fdb055d569bb20bfce9618fe2b01c29bab7f290c
SHA256:6c7b774b75cd8f369e246f365a47caa54ae991cae6afa49c7f339e9921ca58a0
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-core-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

lucene-grouping-9.12.0.jar

Description:

Apache Lucene (module: grouping)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-grouping/9.12.0/lucene-grouping-9.12.0.jar
MD5: 47dbdd3868f23a5e03040cc1b7ed58d8
SHA1: ccf99f8db57aa97b2c1f95c5cc2a11156a043921
SHA256:ffc02d047f4f036c5a5f409baaf8e19abca165deccc3e57e7a422560f4de1219
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-grouping-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-highlighter-9.12.0.jar

Description:

Apache Lucene (module: highlighter)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-highlighter/9.12.0/lucene-highlighter-9.12.0.jar
MD5: d85f7b69d7e3856673b4d530ea9cf25f
SHA1: e93429f66fbcd3b58d81f01223d6ce5688047296
SHA256:5094e1b38f02eb72500a4283ac0f654e2e81943c5359b629567dd7900c935a59
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-highlighter-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

lucene-join-9.12.0.jar

Description:

Apache Lucene (module: join)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-join/9.12.0/lucene-join-9.12.0.jar
MD5: 3b73d309d14e204001bc3ddcc271309c
SHA1: 14c802d6955eaf11107375a2ada8fe8ec53b3e01
SHA256:c49cb1be843295b2c7158c03755f222416fad9915114bc7f74649d20f4fc43d6
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-join-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

lucene-memory-9.12.0.jar

Description:

Apache Lucene (module: memory)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-memory/9.12.0/lucene-memory-9.12.0.jar
MD5: 9c6ca4aa099d1d089848140923763423
SHA1: ffe090339540876b40df792aee51a42af6b3f37f
SHA256:fdbb9c9b3270ce06370d094f1a80dbbbf81b2638b55fa14cc817469092899f01
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-memory-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-misc-9.12.0.jar

Description:

Apache Lucene (module: misc)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-misc/9.12.0/lucene-misc-9.12.0.jar
MD5: c28964f78ec89c1fa2847da312602ff8
SHA1: ad17704ee90eb926b6d3105f7027485cdadbecd9
SHA256:7989d094b4b168ce9ef2949e13f6bfe820829944e50831881be1adeddbe02c04
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-misc-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-queries-9.12.0.jar

Description:

Apache Lucene (module: queries)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-queries/9.12.0/lucene-queries-9.12.0.jar
MD5: ec93396f39b4ae7b9dbacb5871d3db13
SHA1: 3ac2a62b0b55c5725bb65f0c5454f9f8a401cf43
SHA256:3b4da6b1673e4edd141c7b86538cc61f6ff3386106f1f5e179c9fe2d30ea2fca
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-queries-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

lucene-queryparser-9.12.0.jar

Description:

Apache Lucene (module: queryparser)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-queryparser/9.12.0/lucene-queryparser-9.12.0.jar
MD5: 8e6f0ce84c8ce693a9d79bda684b62c5
SHA1: 55959399373876f4c184944315458dc6b88fbd81
SHA256:fc866b7bbfc199436feb24be7dd5c575445342eb283bfe07dd519eab131d3675
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-queryparser-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-sandbox-9.12.0.jar

Description:

Apache Lucene (module: sandbox)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-sandbox/9.12.0/lucene-sandbox-9.12.0.jar
MD5: b65767a8ab92b0e688b7c0513e3865c4
SHA1: f65882536d681c11a1cbc920e5679201101e3603
SHA256:2262f39a241f435dba61f230e7528205c34f4bf0008faa57f0808476bb782996
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-sandbox-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-spatial-extras-9.12.0.jar

Description:

Apache Lucene (module: spatial-extras)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-spatial-extras/9.12.0/lucene-spatial-extras-9.12.0.jar
MD5: 2b7ab2559d05efe02153ecf85ef39689
SHA1: 9d00cc7cc2279822ef6740f0677cafacfb439fa8
SHA256:ea41de3b2da573e488033b8b1c2033e17c27ce39957cf6acb8904297ae6e1747
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-spatial-extras-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

lucene-spatial3d-9.12.0.jar

Description:

Apache Lucene (module: spatial3d)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-spatial3d/9.12.0/lucene-spatial3d-9.12.0.jar
MD5: 2a1686e9486b5c69b03223a43b5644d4
SHA1: e3092632ca1d4427d3ebb2c866ac89d90f5b61ec
SHA256:4263e163937024838a8761618b1ce4eba06857adca0c9385d1ac014ec2937de6
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-spatial3d-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

lucene-suggest-9.12.0.jar

Description:

Apache Lucene (module: suggest)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-suggest/9.12.0/lucene-suggest-9.12.0.jar
MD5: 1673b456a0b294d8acde89cfe16b1bfb
SHA1: e1c6636499317ebe498f3490a1ec8b86b8a363dd
SHA256:1606fb9c7cf57d88b2824916c00280c92e14bcde798a6b78b27e0db8f13227f0
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

lucene-suggest-9.12.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

mapper-extras-client-2.18.0.jar

Description:

OpenSearch subproject :modules:mapper-extras

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opensearch/plugin/mapper-extras-client/2.18.0/mapper-extras-client-2.18.0.jar
MD5: 77fecad0a940cd2b048f26345c65d40c
SHA1: 032c072b45d8857cdb0a75d580d2f01615a25bca
SHA256:3954b4ba652e2bbca5770ed9f65fcda4bee63acda637be5aec7f0b8abd1d42c5
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

mapper-extras-client-2.18.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0

Identifiers

opensearch-2.18.0.jar

Description:

OpenSearch subproject :server

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opensearch/opensearch/2.18.0/opensearch-2.18.0.jar
MD5: 9fbfafab8449d6e52b5560fc50e40479
SHA1: bd0e53350735ede108c831412a6261b939142786
SHA256:6577dab0328ee363e7761e010b2c11344d14ef4a59e50e1aa631de637fb25a1b
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

opensearch-2.18.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexing@5.3.0-SNAPSHOT

Identifiers

CVE-2025-9624 (OSSINDEX)  

A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs.



This issue affects all OpenSearch versions between 3.0.0 and < 3.3.0 and OpenSearch < 2.19.4.

Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://guide.sonatype.com/vulnerability/CVE-2025-9624 for details
CWE-674 Uncontrolled Recursion

CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:org.opensearch:opensearch:2.18.0:*:*:*:*:*:*:*

opensearch-core-2.18.0.jar

Description:

OpenSearch subproject :libs:opensearch-core

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opensearch/opensearch-core/2.18.0/opensearch-core-2.18.0.jar
MD5: ebb64345becadd901655d22c57248bc7
SHA1: a688e0d46fdd4d8f8378ecf799586027dea7bcba
SHA256:d59d1f1a34931aa8aae28673d04d4e4cd126ec32c5857e1e36202f5b0cb8f219
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

opensearch-core-2.18.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT

Identifiers

org.bedework.caleng:bw-calendar-engine-api:5.3.0-SNAPSHOT

Description:

Main calendar engine code for bedework

License:

Apache License Version 2.0 http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/work/bw-calendar-engine/bw-calendar-engine/bw-calendar-engine-api/pom.xml

Referenced In Projects/Scopes:
  • Bedework: calendar engine - api implementation
  • Bedework: calendar engine - change notifications
  • Bedework: calendar engine - indexer - reindexing
  • Bedework: calendar engine - inbound and outbound scheduling

org.bedework.caleng:bw-calendar-engine-api:5.3.0-SNAPSHOT is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-chgnote@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-inoutsched@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexer@5.3.0-SNAPSHOT

Identifiers

org.bedework.caleng:bw-calendar-engine-core-ro:5.3.0-SNAPSHOT

Description:

Main calendar engine code for bedework

License:

Apache License Version 2.0 http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/work/bw-calendar-engine/bw-calendar-engine/bw-calendar-engine-core-ro/pom.xml

Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and openjpa interactions
  • Bedework: calendar engine - common core rw classes
  • Bedework: calendar engine - core and db interactions

org.bedework.caleng:bw-calendar-engine-core-ro:5.3.0-SNAPSHOT is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-openjpa@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-hibernate@5.3.0-SNAPSHOT

Identifiers

org.bedework.caleng:bw-calendar-engine-core-rw-common:5.3.0-SNAPSHOT

Description:

Main calendar engine code for bedework

License:

Apache License Version 2.0 http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/work/bw-calendar-engine/bw-calendar-engine/bw-calendar-engine-core-rw-common/pom.xml

Referenced In Project/Scope: Bedework: calendar engine - core and db interactions
org.bedework.caleng:bw-calendar-engine-core-rw-common:5.3.0-SNAPSHOT is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-hibernate@5.3.0-SNAPSHOT

Identifiers

org.bedework.caleng:bw-calendar-engine-impl:5.3.0-SNAPSHOT

Description:

Main calendar engine code for bedework

License:

Apache License Version 2.0 http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/work/bw-calendar-engine/bw-calendar-engine/bw-calendar-engine-impl/pom.xml

Referenced In Projects/Scopes:
  • Bedework: calendar engine - change notifications
  • Bedework: calendar engine - indexer - reindexing
  • Bedework: calendar engine - inbound and outbound scheduling

org.bedework.caleng:bw-calendar-engine-impl:5.3.0-SNAPSHOT is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-inoutsched@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-chgnote@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexer@5.3.0-SNAPSHOT

Identifiers

org.bedework.caleng:bw-calendar-engine-indexing:5.3.0-SNAPSHOT

Description:

Main calendar engine code for bedework

License:

Apache License Version 2.0 http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/work/bw-calendar-engine/bw-calendar-engine/bw-calendar-engine-indexing/pom.xml

Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and openjpa interactions
  • Bedework: calendar engine - common core rw classes
  • Bedework: calendar engine - common core - read-only - no db
  • Bedework: calendar engine - core and db interactions

org.bedework.caleng:bw-calendar-engine-indexing:5.3.0-SNAPSHOT is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-hibernate@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-openjpa@5.3.0-SNAPSHOT

Identifiers

org.bedework.caleng:bw-calendar-engine-interfaces:5.3.0-SNAPSHOT

Description:

Main calendar engine code for bedework

License:

Apache License Version 2.0 http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/work/bw-calendar-engine/bw-calendar-engine/bw-calendar-engine-interfaces/pom.xml

Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and openjpa interactions
  • Bedework: calendar engine - common core rw classes
  • Bedework: calendar engine - common core - read-only - no db
  • Bedework: calendar engine - core and db interactions
  • Bedework: calendar engine - api implementation
  • Bedework: calendar engine - change notifications
  • Bedework: calendar engine - indexer - reindexing
  • Bedework: calendar engine - inbound and outbound scheduling

org.bedework.caleng:bw-calendar-engine-interfaces:5.3.0-SNAPSHOT is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-chgnote@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-indexer@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-hibernate@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-common@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-rw-openjpa@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-inoutsched@5.3.0-SNAPSHOT

Identifiers

parent-join-client-2.18.0.jar

Description:

OpenSearch subproject :modules:parent-join

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opensearch/plugin/parent-join-client/2.18.0/parent-join-client-2.18.0.jar
MD5: a23a54791314cbd2fbcab96f89e7ba78
SHA1: 47677684e9e7a1b2631324d9215e8ea1bdffcd39
SHA256:b5ccd41ee8a23860626e7bee461238033e76d9b2a7d1f3502b88eb19c48967ee
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

parent-join-client-2.18.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

protobuf-java-3.25.5.jar

Description:

    Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.
  

License:

https://opensource.org/licenses/BSD-3-Clause
File Path: /home/runner/.m2/repository/com/google/protobuf/protobuf-java/3.25.5/protobuf-java-3.25.5.jar
MD5: 639cfcf9717cf4e4dd9e808e6f8d24a4
SHA1: 5ae5c9ec39930ae9b5a61b32b93288818ec05ec1
SHA256:8540247fad9e06baefa8fb45eb313802d019f485f14300e0f9d6b556ed88e753
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

protobuf-java-3.25.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

CVE-2026-0994  

A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.

Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
CWE-674 Uncontrolled Recursion

CVSSv4:
  • Base Score: HIGH (8.2)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:N/V:X/RE:X/U:X
CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A

References:

Vulnerable Software & Versions:

rank-eval-client-2.18.0.jar

Description:

OpenSearch subproject :modules:rank-eval

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opensearch/plugin/rank-eval-client/2.18.0/rank-eval-client-2.18.0.jar
MD5: 65f5291df65db98e1a3d2506343faa03
SHA1: 56dc295ee03a3585875e5e7f1c083e5f9a69e6c6
SHA256:53f9e4bc5158aa2d1950718e6b58c59bc12ec958a38ceb0191c6f8cf9065112e
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

rank-eval-client-2.18.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

reactive-streams-1.0.4.jar

Description:

A Protocol for Asynchronous Non-Blocking Data Sequence

License:

MIT-0: https://spdx.org/licenses/MIT-0.html
File Path: /home/runner/.m2/repository/org/reactivestreams/reactive-streams/1.0.4/reactive-streams-1.0.4.jar
MD5: eda7978509c32d99166745cc144c99cd
SHA1: 3864a1320d97d7b045f729a326e1e077661f31b7
SHA256:f75ca597789b3dac58f61857b9ac2e1034a68fa672db35055a8fb4509e325f28
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

reactive-streams-1.0.4.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

reactor-core-3.5.20.jar

Description:

Non-Blocking Reactive Foundation for the JVM

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/projectreactor/reactor-core/3.5.20/reactor-core-3.5.20.jar
MD5: 3a171266f2cafd6561fe2bd1e056b802
SHA1: 1fc0f91e2b93778a974339d2c24363d7f34f90b4
SHA256:aa392c5df0790af7b580595b9f809661446613735125b95eed76fae6a2f4c6b6
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

reactor-core-3.5.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

CVE-2026-47857 (OSSINDEX)  

In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition.
Reactor Core 3.8.0 - 3.8.6
Reactor Core 3.5.0 - 3.7.19
Reactor Core 3.4.41 and earlier

Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://guide.sonatype.com/vulnerability/CVE-2026-47857 for details
CWE-190 Integer Overflow or Wraparound

CVSSv2:
  • Base Score: HIGH (8.199999809265137)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:io.projectreactor:reactor-core:3.5.20:*:*:*:*:*:*:*

CVE-2026-47863 (OSSINDEX)  

In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition.
Reactor Core 3.8.0 - 3.8.6
Reactor Core 3.7.19 and earlier

Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://guide.sonatype.com/vulnerability/CVE-2026-47863 for details
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:io.projectreactor:reactor-core:3.5.20:*:*:*:*:*:*:*

slf4j-api-1.7.36.jar

Description:

The slf4j API

File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/1.7.36/slf4j-api-1.7.36.jar
MD5: 872da51f5de7f3923da4de871d57fd85
SHA1: 6c62681a2f655b49963a5983b8b0950a6120ae14
SHA256:d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0
Referenced In Projects/Scopes:

  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

slf4j-api-1.7.36.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-ical4j-vcard@1.1.0
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-impl@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

snakeyaml-2.0.jar

Description:

YAML 1.1 parser and emitter for Java

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/yaml/snakeyaml/2.0/snakeyaml-2.0.jar
MD5: caf24b81b9d57e6d4f68b1ccd36e00a3
SHA1: 3aab2116756442bf0d4cd1c089b24d34c3baa253
SHA256:880c9d896e4b74a06c549c15ca496450165d6909fa15d7e662bee8f6a66d7afa
Referenced In Projects/Scopes:
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - inbound and outbound scheduling:compile
  • Bedework: calendar engine - api implementation:compile
  • Bedework: calendar engine - caldav interface implementation:compile
  • Bedework: calendar engine - indexer - reindexing:compile
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - change notifications:compile
  • Bedework: calendar engine - various tools:compile
  • Bedework: calendar engine - api:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - internal interfaces:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

snakeyaml-2.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-calendar-facade@5.3.0-SNAPSHOT

Identifiers

t-digest-3.2.jar

Description:

Data structure which allows accurate estimation of quantiles and related rank statistics

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/tdunning/t-digest/3.2/t-digest-3.2.jar
MD5: 4b8777b2b4e278aace50b2c068ce7c63
SHA1: 2ab94758b0276a8a26102adf8d528cf6d0567b9a
SHA256:03db291a8887b474f90db67bfb1f92d084e990150037e231babbb374ee11d7c3
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

t-digest-3.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

CVE-2026-87822 (OSSINDEX)  

t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values that bypass validation checks. Attackers can craft malicious serialized digests containing NaN centroids that degrade sorting performance from O(n log n) to O(n squared), causing severe processing delays during merge operations.
CWE-407 Inefficient Algorithmic Complexity

CVSSv2:
  • Base Score: HIGH (8.699999809265137)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.tdunning:t-digest:3.2:*:*:*:*:*:*:*

CVE-2026-87962 (OSSINDEX)  

t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in MergingDigest.fromBytes that fails to validate length and capacity fields from serialized data. Attackers can supply crafted serialized digests with mismatched header fields to trigger ArrayIndexOutOfBoundsException or NegativeArraySizeException, aborting the parsing thread.
CWE-1284 Improper Validation of Specified Quantity in Input

CVSSv2:
  • Base Score: HIGH (8.699999809265137)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.tdunning:t-digest:3.2:*:*:*:*:*:*:*

zstd-jni-1.5.5-5.jar

Description:

JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.

License:

BSD 2-Clause License: https://opensource.org/licenses/BSD-2-Clause
File Path: /home/runner/.m2/repository/com/github/luben/zstd-jni/1.5.5-5/zstd-jni-1.5.5-5.jar
MD5: 0e164757192c4dcf3c524f6cabeb8494
SHA1: 74ffdc5f140080adacf5278287aadd950179f848
SHA256:c78d4e139894f555d956d12fbfcf3d45af751d4b2f183880ed5f99b69b284416
Referenced In Projects/Scopes:
  • Bedework: calendar engine - core and db interactions:compile
  • Bedework: calendar engine - common core rw classes:compile
  • Bedework: calendar engine - common core - read-only - no db:compile
  • Bedework: calendar engine - indexing support - no db:compile
  • Bedework: calendar engine - core and openjpa interactions:compile

zstd-jni-1.5.5-5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT
  • pkg:maven/org.opensearch/opensearch@2.18.0
  • pkg:maven/org.bedework.caleng/bw-calendar-engine-core-ro@5.3.0-SNAPSHOT

Identifiers

CVE-2026-87795 (OSSINDEX)  

zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can supply untrusted offset or length values to read native heap memory into the compression dictionary, typically causing JVM crashes.
CWE-125 Out-of-bounds Read

CVSSv2:
  • Base Score: HIGH (8.800000190734863)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.github.luben:zstd-jni:1.5.5-5:*:*:*:*:*:*:*

CVE-2026-87823 (OSSINDEX)  

zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MIN_VALUE to read unmapped memory, causing JVM termination or extracting arbitrary frame size data from unintended memory locations.
CWE-190 Integer Overflow or Wraparound

CVSSv2:
  • Base Score: HIGH (8.800000190734863)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.github.luben:zstd-jni:1.5.5-5:*:*:*:*:*:*:*

CVE-2026-89045 (OSSINDEX)  

zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to trigger infinite loops. Attackers can pass negative length values to cause the read method to spin indefinitely while holding the stream monitor, blocking all other threads from accessing the stream.
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

CVSSv2:
  • Base Score: MEDIUM (5.099999904632568)
  • Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:com.github.luben:zstd-jni:1.5.5-5:*:*:*:*:*:*:*



This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.