Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.1.3
Report Generated On: Mon, 14 Jul 2025 03:28:43 GMT
Dependencies Scanned: 24 (23 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-07-14T03:27:41Z
NVD API Last Modified: 2025-07-14T03:15:24Z

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
bw-base-2.0.0.jar		pkg:maven/org.bedework/bw-base@2.0.0		42
bw-db-6.0.0.jar		pkg:maven/org.bedework.database/bw-db@6.0.0		44
bw-util-config-6.0.0.jar		pkg:maven/org.bedework/bw-util-config@6.0.0		44
bw-util-http-6.0.0.jar		pkg:maven/org.bedework/bw-util-http@6.0.0		44
bw-util-jmx-6.0.0.jar		pkg:maven/org.bedework/bw-util-jmx@6.0.0		44
bw-util-logging-6.0.0.jar		pkg:maven/org.bedework/bw-util-logging@6.0.0		44
bw-util-misc-6.0.0.jar	cpe:2.3:a:utils_project:utils:6.0.0:::::::*	pkg:maven/org.bedework/bw-util-misc@6.0.0	Low	44
bw-util-security-6.0.0.jar		pkg:maven/org.bedework/bw-util-security@6.0.0		44
bw-util-servlet-6.0.0.jar		pkg:maven/org.bedework/bw-util-servlet@6.0.0		44
bw-util-xml-6.0.0.jar		pkg:maven/org.bedework/bw-util-xml@6.0.0		44
commons-codec-1.17.1.jar		pkg:maven/commons-codec/commons-codec@1.17.1		121
commons-lang3-3.17.0.jar		pkg:maven/org.apache.commons/commons-lang3@3.17.0		145
commons-logging-1.2.jar		pkg:maven/commons-logging/commons-logging@1.2		117
commons-text-1.13.0.jar	cpe:2.3:a:apache:commons_text:1.13.0:::::::*	pkg:maven/org.apache.commons/commons-text@1.13.0	Highest	73
httpclient-4.5.14.jar	cpe:2.3:a:apache:httpclient:4.5.14:::::::*	pkg:maven/org.apache.httpcomponents/httpclient@4.5.14	Highest	32
httpcore-4.4.16.jar		pkg:maven/org.apache.httpcomponents/httpcore@4.4.16		32
jackson-core-2.18.2.jar	cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.2:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2	Low	47
jackson-databind-2.18.2.jar	cpe:2.3:a:fasterxml:jackson-databind:2.18.2:::::::* cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.2:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2	Highest	41
jakarta.activation-api-2.1.3.jar		pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3		45
jakarta.mail-api-2.1.3.jar		pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3		36
jakarta.persistence-api-3.1.0.jar		pkg:maven/jakarta.persistence/jakarta.persistence-api@3.1.0		40
jasypt-1.9.3.jar	cpe:2.3:a:jasypt_project:jasypt:1.9.3:::::::*	pkg:maven/org.jasypt/jasypt@1.9.3	Highest	30
selfreg.js				0

Dependencies (vulnerable)

bw-base-2.0.0.jar

Description:

This project provides base classes, types and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/runner/.m2/repository/org/bedework/bw-base/2.0.0/bw-base-2.0.0.jar
MD5: 0480624145ad4fc5daeba898b7132099
SHA1: b24b7279e0475bb3c8c84e37af400ad87877c955
SHA256:10d27642e3bf1f2f4f85320293b5041b7e34cba02cc2656f29e79f75cee97cc5
Referenced In Projects/Scopes:

Bedework Self Registration: self registration service common classes:compile
Bedework Self Registration: self registration service web classes:compile

pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bw-base	High
Vendor	jar	package name	base	Highest
Vendor	jar	package name	bedework	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	implementation-url	https://github.com/Bedework/bw-base	Low
Vendor	Manifest	Implementation-Vendor	Bedework	High
Vendor	Manifest	os-arch	x86_64	Low
Vendor	Manifest	os-name	Mac OS X	Medium
Vendor	Manifest	specification-vendor	Bedework	Low
Vendor	pom	artifactid	bw-base	Highest
Vendor	pom	artifactid	bw-base	Low
Vendor	pom	developer name	Arlen Johnson	Medium
Vendor	pom	developer name	Mike Douglass	Medium
Vendor	pom	developer org	Bedework Commercial Services	Medium
Vendor	pom	developer org	Spherical Cow Group	Medium
Vendor	pom	developer org URL	http://sphericalcowgroup.com/	Medium
Vendor	pom	developer org URL	https://bedework.com/	Medium
Vendor	pom	groupid	org.bedework	Highest
Vendor	pom	name	Bedework: base classes	High
Vendor	pom	url	Bedework/bw-base	Highest
Product	file	name	bw-base	High
Product	jar	package name	base	Highest
Product	jar	package name	bedework	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Bedework: base classes	High
Product	Manifest	implementation-url	https://github.com/Bedework/bw-base	Low
Product	Manifest	os-arch	x86_64	Low
Product	Manifest	os-name	Mac OS X	Medium
Product	Manifest	specification-title	Bedework: base classes	Medium
Product	pom	artifactid	bw-base	Highest
Product	pom	developer name	Arlen Johnson	Low
Product	pom	developer name	Mike Douglass	Low
Product	pom	developer org	Bedework Commercial Services	Low
Product	pom	developer org	Spherical Cow Group	Low
Product	pom	developer org URL	http://sphericalcowgroup.com/	Low
Product	pom	developer org URL	https://bedework.com/	Low
Product	pom	groupid	org.bedework	Highest
Product	pom	name	Bedework: base classes	High
Product	pom	url	Bedework/bw-base	High
Version	file	version	2.0.0	High
Version	Manifest	Implementation-Version	2.0.0	High
Version	pom	version	2.0.0	Highest

Identifiers

pkg:maven/org.bedework/bw-base@2.0.0 (Confidence:High)

bw-db-6.0.0.jar

Description:

This project provides a number of database utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/runner/.m2/repository/org/bedework/database/bw-db/6.0.0/bw-db-6.0.0.jar
MD5: 884abb2ea472ff8ac34ceab8becdc40d
SHA1: a30e82aa8caa3f783a67ef8c7ef3589910372711
SHA256:70c57e032a9d15598961db2452573c84a5a01964370e95e3e9dcbe0a367093ac
Referenced In Project/Scope: Bedework Self Registration: self registration service common classes:compile
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bw-db	High
Vendor	jar	package name	bedework	Highest
Vendor	jar	package name	database	Highest
Vendor	jar	package name	db	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	implementation-url	https://github.com/Bedework/bw-util/bw-db	Low
Vendor	Manifest	Implementation-Vendor	Bedework	High
Vendor	Manifest	os-arch	x86_64	Low
Vendor	Manifest	os-name	Mac OS X	Medium
Vendor	Manifest	specification-vendor	Bedework	Low
Vendor	pom	artifactid	bw-db	Highest
Vendor	pom	artifactid	bw-db	Low
Vendor	pom	developer name	Arlen Johnson	Medium
Vendor	pom	developer name	Mike Douglass	Medium
Vendor	pom	developer org	Bedework Commercial Services	Medium
Vendor	pom	developer org	Spherical Cow Group	Medium
Vendor	pom	developer org URL	http://sphericalcowgroup.com/	Medium
Vendor	pom	developer org URL	https://bedework.com/	Medium
Vendor	pom	groupid	org.bedework.database	Highest
Vendor	pom	name	Bedework: database orm independent modules	High
Vendor	pom	url	Bedework/bw-util/bw-db	Highest
Product	file	name	bw-db	High
Product	jar	package name	bedework	Highest
Product	jar	package name	database	Highest
Product	jar	package name	db	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Bedework: database orm independent modules	High
Product	Manifest	implementation-url	https://github.com/Bedework/bw-util/bw-db	Low
Product	Manifest	os-arch	x86_64	Low
Product	Manifest	os-name	Mac OS X	Medium
Product	Manifest	specification-title	Bedework: database orm independent modules	Medium
Product	pom	artifactid	bw-db	Highest
Product	pom	developer name	Arlen Johnson	Low
Product	pom	developer name	Mike Douglass	Low
Product	pom	developer org	Bedework Commercial Services	Low
Product	pom	developer org	Spherical Cow Group	Low
Product	pom	developer org URL	http://sphericalcowgroup.com/	Low
Product	pom	developer org URL	https://bedework.com/	Low
Product	pom	groupid	org.bedework.database	Highest
Product	pom	name	Bedework: database orm independent modules	High
Product	pom	url	Bedework/bw-util/bw-db	High
Version	file	version	6.0.0	High
Version	Manifest	Implementation-Version	6.0.0	High
Version	pom	version	6.0.0	Highest

Identifiers

pkg:maven/org.bedework.database/bw-db@6.0.0 (Confidence:High)

bw-util-config-6.0.0.jar

Description:

This project provides a number of utility configuration classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/runner/.m2/repository/org/bedework/bw-util-config/6.0.0/bw-util-config-6.0.0.jar
MD5: 974d4ee4953df439fc3753869cc469da
SHA1: c1f787f23f0c5028280a457d0709418ea332fe09
SHA256:97ee0ce50094f85f881d63fb423dfb7ae1973843ac6028f0488860394553aa60
Referenced In Projects/Scopes:

Bedework Self Registration: self registration service common classes:compile
Bedework Self Registration: self registration service web classes:compile

pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bw-util-config	High
Vendor	jar	package name	bedework	Highest
Vendor	jar	package name	config	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	implementation-url	https://github.com/Bedework/bw-util-conf/bw-util-config	Low
Vendor	Manifest	Implementation-Vendor	Bedework	High
Vendor	Manifest	os-arch	x86_64	Low
Vendor	Manifest	os-name	Mac OS X	Medium
Vendor	Manifest	specification-vendor	Bedework	Low
Vendor	pom	artifactid	bw-util-config	Highest
Vendor	pom	artifactid	bw-util-config	Low
Vendor	pom	developer name	Arlen Johnson	Medium
Vendor	pom	developer name	Mike Douglass	Medium
Vendor	pom	developer org	Bedework Commercial Services	Medium
Vendor	pom	developer org	Spherical Cow Group	Medium
Vendor	pom	developer org URL	http://sphericalcowgroup.com/	Medium
Vendor	pom	developer org URL	https://bedework.com/	Medium
Vendor	pom	groupid	org.bedework	Highest
Vendor	pom	name	Bedework: base configuration classes	High
Vendor	pom	url	Bedework/bw-util-conf/bw-util-config	Highest
Product	file	name	bw-util-config	High
Product	jar	package name	bedework	Highest
Product	jar	package name	config	Highest
Product	jar	package name	util	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Bedework: base configuration classes	High
Product	Manifest	implementation-url	https://github.com/Bedework/bw-util-conf/bw-util-config	Low
Product	Manifest	os-arch	x86_64	Low
Product	Manifest	os-name	Mac OS X	Medium
Product	Manifest	specification-title	Bedework: base configuration classes	Medium
Product	pom	artifactid	bw-util-config	Highest
Product	pom	developer name	Arlen Johnson	Low
Product	pom	developer name	Mike Douglass	Low
Product	pom	developer org	Bedework Commercial Services	Low
Product	pom	developer org	Spherical Cow Group	Low
Product	pom	developer org URL	http://sphericalcowgroup.com/	Low
Product	pom	developer org URL	https://bedework.com/	Low
Product	pom	groupid	org.bedework	Highest
Product	pom	name	Bedework: base configuration classes	High
Product	pom	url	Bedework/bw-util-conf/bw-util-config	High
Version	file	version	6.0.0	High
Version	Manifest	Implementation-Version	6.0.0	High
Version	pom	version	6.0.0	Highest

Identifiers

pkg:maven/org.bedework/bw-util-config@6.0.0 (Confidence:High)

bw-util-http-6.0.0.jar

Description:

Network (http, DAV,servlet etc) related utilities

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/runner/.m2/repository/org/bedework/bw-util-http/6.0.0/bw-util-http-6.0.0.jar
MD5: 4f65ed8a06332bb4eb2937abee9a2086
SHA1: dd8d7fcc509c6a3de1e2e331144dfae1d302bd51
SHA256:36a211c6527c86826f5125307b9278640e6cfe086efb044c580a80eb1d6c56f0
Referenced In Project/Scope: Bedework Self Registration: self registration service web classes:compile
pkg:maven/org.bedework.selfreg/bw-self-registration-web@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bw-util-http	High
Vendor	jar	package name	bedework	Highest
Vendor	jar	package name	http	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	implementation-url	https://github.com/Bedework/bw-util-network/bw-util-http	Low
Vendor	Manifest	Implementation-Vendor	Bedework	High
Vendor	Manifest	os-arch	x86_64	Low
Vendor	Manifest	os-name	Mac OS X	Medium
Vendor	Manifest	specification-vendor	Bedework	Low
Vendor	pom	artifactid	bw-util-http	Highest
Vendor	pom	artifactid	bw-util-http	Low
Vendor	pom	developer name	Arlen Johnson	Medium
Vendor	pom	developer name	Mike Douglass	Medium
Vendor	pom	developer org	Bedework Commercial Services	Medium
Vendor	pom	developer org	Spherical Cow Group	Medium
Vendor	pom	developer org URL	http://sphericalcowgroup.com/	Medium
Vendor	pom	developer org URL	https://bedework.com/	Medium
Vendor	pom	groupid	org.bedework	Highest
Vendor	pom	name	Bedework: network util - http	High
Vendor	pom	url	Bedework/bw-util-network/bw-util-http	Highest
Product	file	name	bw-util-http	High
Product	jar	package name	bedework	Highest
Product	jar	package name	http	Highest
Product	jar	package name	util	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Bedework: network util - http	High
Product	Manifest	implementation-url	https://github.com/Bedework/bw-util-network/bw-util-http	Low
Product	Manifest	os-arch	x86_64	Low
Product	Manifest	os-name	Mac OS X	Medium
Product	Manifest	specification-title	Bedework: network util - http	Medium
Product	pom	artifactid	bw-util-http	Highest
Product	pom	developer name	Arlen Johnson	Low
Product	pom	developer name	Mike Douglass	Low
Product	pom	developer org	Bedework Commercial Services	Low
Product	pom	developer org	Spherical Cow Group	Low
Product	pom	developer org URL	http://sphericalcowgroup.com/	Low
Product	pom	developer org URL	https://bedework.com/	Low
Product	pom	groupid	org.bedework	Highest
Product	pom	name	Bedework: network util - http	High
Product	pom	url	Bedework/bw-util-network/bw-util-http	High
Version	file	version	6.0.0	High
Version	Manifest	Implementation-Version	6.0.0	High
Version	pom	version	6.0.0	Highest

Identifiers

pkg:maven/org.bedework/bw-util-http@6.0.0 (Confidence:High)

bw-util-jmx-6.0.0.jar

Description:

This project provides a number of utility configuration classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/runner/.m2/repository/org/bedework/bw-util-jmx/6.0.0/bw-util-jmx-6.0.0.jar
MD5: e7ffae94c51d5c62aa657c7f321607b5
SHA1: cbfbb6e89fa5adac492adcc48866cfec62cc932d
SHA256:60b3d4ce24901fc1ab0b741be3413efaffb263f99f368062618478c67e7fd3b9
Referenced In Projects/Scopes:

Bedework Self Registration: self registration service common classes:compile
Bedework Self Registration: self registration service web classes:compile

pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bw-util-jmx	High
Vendor	jar	package name	bedework	Highest
Vendor	jar	package name	jmx	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	implementation-url	https://github.com/Bedework/bw-util-conf/bw-util-jmx	Low
Vendor	Manifest	Implementation-Vendor	Bedework	High
Vendor	Manifest	os-arch	x86_64	Low
Vendor	Manifest	os-name	Mac OS X	Medium
Vendor	Manifest	specification-vendor	Bedework	Low
Vendor	pom	artifactid	bw-util-jmx	Highest
Vendor	pom	artifactid	bw-util-jmx	Low
Vendor	pom	developer name	Arlen Johnson	Medium
Vendor	pom	developer name	Mike Douglass	Medium
Vendor	pom	developer org	Bedework Commercial Services	Medium
Vendor	pom	developer org	Spherical Cow Group	Medium
Vendor	pom	developer org URL	http://sphericalcowgroup.com/	Medium
Vendor	pom	developer org URL	https://bedework.com/	Medium
Vendor	pom	groupid	org.bedework	Highest
Vendor	pom	name	Bedework: JMX config classes	High
Vendor	pom	url	Bedework/bw-util-conf/bw-util-jmx	Highest
Product	file	name	bw-util-jmx	High
Product	jar	package name	bedework	Highest
Product	jar	package name	jmx	Highest
Product	jar	package name	util	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Bedework: JMX config classes	High
Product	Manifest	implementation-url	https://github.com/Bedework/bw-util-conf/bw-util-jmx	Low
Product	Manifest	os-arch	x86_64	Low
Product	Manifest	os-name	Mac OS X	Medium
Product	Manifest	specification-title	Bedework: JMX config classes	Medium
Product	pom	artifactid	bw-util-jmx	Highest
Product	pom	developer name	Arlen Johnson	Low
Product	pom	developer name	Mike Douglass	Low
Product	pom	developer org	Bedework Commercial Services	Low
Product	pom	developer org	Spherical Cow Group	Low
Product	pom	developer org URL	http://sphericalcowgroup.com/	Low
Product	pom	developer org URL	https://bedework.com/	Low
Product	pom	groupid	org.bedework	Highest
Product	pom	name	Bedework: JMX config classes	High
Product	pom	url	Bedework/bw-util-conf/bw-util-jmx	High
Version	file	version	6.0.0	High
Version	Manifest	Implementation-Version	6.0.0	High
Version	pom	version	6.0.0	Highest

Identifiers

pkg:maven/org.bedework/bw-util-jmx@6.0.0 (Confidence:High)

bw-util-logging-6.0.0.jar

Description:

This project provides logging utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/runner/.m2/repository/org/bedework/bw-util-logging/6.0.0/bw-util-logging-6.0.0.jar
MD5: 2c63b9031e2d0852a00e57753320b409
SHA1: a12c15e6670f1298c8c4779d08b24595e921aceb
SHA256:e26bbaf5a5dcad998990fdc647f448b2e2dcac6eb628be6945fe24d53759b745
Referenced In Projects/Scopes:

Bedework Self Registration: self registration service common classes:compile
Bedework Self Registration: self registration service web classes:compile

pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT
pkg:maven/org.bedework.selfreg/bw-self-registration-web@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bw-util-logging	High
Vendor	jar	package name	bedework	Highest
Vendor	jar	package name	logging	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	implementation-url	https://github.com/Bedework/bw-util-logging	Low
Vendor	Manifest	Implementation-Vendor	Bedework	High
Vendor	Manifest	os-arch	x86_64	Low
Vendor	Manifest	os-name	Mac OS X	Medium
Vendor	Manifest	specification-vendor	Bedework	Low
Vendor	pom	artifactid	bw-util-logging	Highest
Vendor	pom	artifactid	bw-util-logging	Low
Vendor	pom	developer name	Arlen Johnson	Medium
Vendor	pom	developer name	Mike Douglass	Medium
Vendor	pom	developer org	Bedework Commercial Services	Medium
Vendor	pom	developer org	Spherical Cow Group	Medium
Vendor	pom	developer org URL	http://sphericalcowgroup.com/	Medium
Vendor	pom	developer org URL	https://bedework.com/	Medium
Vendor	pom	groupid	org.bedework	Highest
Vendor	pom	name	Bedework: logging classes	High
Vendor	pom	url	Bedework/bw-util-logging	Highest
Product	file	name	bw-util-logging	High
Product	jar	package name	bedework	Highest
Product	jar	package name	logging	Highest
Product	jar	package name	util	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Bedework: logging classes	High
Product	Manifest	implementation-url	https://github.com/Bedework/bw-util-logging	Low
Product	Manifest	os-arch	x86_64	Low
Product	Manifest	os-name	Mac OS X	Medium
Product	Manifest	specification-title	Bedework: logging classes	Medium
Product	pom	artifactid	bw-util-logging	Highest
Product	pom	developer name	Arlen Johnson	Low
Product	pom	developer name	Mike Douglass	Low
Product	pom	developer org	Bedework Commercial Services	Low
Product	pom	developer org	Spherical Cow Group	Low
Product	pom	developer org URL	http://sphericalcowgroup.com/	Low
Product	pom	developer org URL	https://bedework.com/	Low
Product	pom	groupid	org.bedework	Highest
Product	pom	name	Bedework: logging classes	High
Product	pom	url	Bedework/bw-util-logging	High
Version	file	version	6.0.0	High
Version	Manifest	Implementation-Version	6.0.0	High
Version	pom	version	6.0.0	Highest

Identifiers

pkg:maven/org.bedework/bw-util-logging@6.0.0 (Confidence:High)

bw-util-misc-6.0.0.jar

Description:

This project provides a number of utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/runner/.m2/repository/org/bedework/bw-util-misc/6.0.0/bw-util-misc-6.0.0.jar
MD5: a54be794abde392b2c1f7fb2935ad372
SHA1: ca14c1131c38ac51caa478cb4ea5df738fc6f106
SHA256:a2243c42722fcaa848e6f0fca44634c0c5685e57bb0c2a2d2f394bf9543bd5ae
Referenced In Projects/Scopes:

Bedework Self Registration: self registration service common classes:compile
Bedework Self Registration: self registration service web classes:compile

pkg:maven/org.bedework.selfreg/bw-self-registration-web@6.1.0-SNAPSHOT
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bw-util-misc	High
Vendor	jar	package name	bedework	Highest
Vendor	jar	package name	misc	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	implementation-url	https://github.com/Bedework/bw-util/bw-util-misc	Low
Vendor	Manifest	Implementation-Vendor	Bedework	High
Vendor	Manifest	os-arch	x86_64	Low
Vendor	Manifest	os-name	Mac OS X	Medium
Vendor	Manifest	specification-vendor	Bedework	Low
Vendor	pom	artifactid	bw-util-misc	Highest
Vendor	pom	artifactid	bw-util-misc	Low
Vendor	pom	developer name	Arlen Johnson	Medium
Vendor	pom	developer name	Mike Douglass	Medium
Vendor	pom	developer org	Bedework Commercial Services	Medium
Vendor	pom	developer org	Spherical Cow Group	Medium
Vendor	pom	developer org URL	http://sphericalcowgroup.com/	Medium
Vendor	pom	developer org URL	https://bedework.com/	Medium
Vendor	pom	groupid	org.bedework	Highest
Vendor	pom	name	Bedework: misc utils	High
Vendor	pom	url	Bedework/bw-util/bw-util-misc	Highest
Product	file	name	bw-util-misc	High
Product	jar	package name	bedework	Highest
Product	jar	package name	misc	Highest
Product	jar	package name	util	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Bedework: misc utils	High
Product	Manifest	implementation-url	https://github.com/Bedework/bw-util/bw-util-misc	Low
Product	Manifest	os-arch	x86_64	Low
Product	Manifest	os-name	Mac OS X	Medium
Product	Manifest	specification-title	Bedework: misc utils	Medium
Product	pom	artifactid	bw-util-misc	Highest
Product	pom	developer name	Arlen Johnson	Low
Product	pom	developer name	Mike Douglass	Low
Product	pom	developer org	Bedework Commercial Services	Low
Product	pom	developer org	Spherical Cow Group	Low
Product	pom	developer org URL	http://sphericalcowgroup.com/	Low
Product	pom	developer org URL	https://bedework.com/	Low
Product	pom	groupid	org.bedework	Highest
Product	pom	name	Bedework: misc utils	High
Product	pom	url	Bedework/bw-util/bw-util-misc	High
Version	file	version	6.0.0	High
Version	Manifest	Implementation-Version	6.0.0	High
Version	pom	version	6.0.0	Highest

Identifiers

pkg:maven/org.bedework/bw-util-misc@6.0.0 (Confidence:High)
cpe:2.3:a:utils_project:utils:6.0.0:*:*:*:*:*:*:* (Confidence:Low)

bw-util-security-6.0.0.jar

Description:

Security utility classes

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/runner/.m2/repository/org/bedework/bw-util-security/6.0.0/bw-util-security-6.0.0.jar
MD5: 158ac569a1c39ee52eae2d2b82f78571
SHA1: 0fd5f1740787be5bc842b53c835db1dc7eae19d2
SHA256:a7b13c687b8abb2391b3a79f20f2c8b11d4fd4778218c603fd7c1e6f81715722
Referenced In Project/Scope: Bedework Self Registration: self registration service common classes:compile
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bw-util-security	High
Vendor	jar	package name	bedework	Highest
Vendor	jar	package name	security	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	implementation-url	https://github.com/Bedework/bw-util-security	Low
Vendor	Manifest	Implementation-Vendor	Bedework	High
Vendor	Manifest	os-arch	x86_64	Low
Vendor	Manifest	os-name	Mac OS X	Medium
Vendor	Manifest	specification-vendor	Bedework	Low
Vendor	pom	artifactid	bw-util-security	Highest
Vendor	pom	artifactid	bw-util-security	Low
Vendor	pom	developer name	Arlen Johnson	Medium
Vendor	pom	developer name	Mike Douglass	Medium
Vendor	pom	developer org	Bedework Commercial Services	Medium
Vendor	pom	developer org	Spherical Cow Group	Medium
Vendor	pom	developer org URL	http://sphericalcowgroup.com/	Medium
Vendor	pom	developer org URL	https://bedework.com/	Medium
Vendor	pom	groupid	org.bedework	Highest
Vendor	pom	name	Bedework: security utility classes	High
Vendor	pom	url	Bedework/bw-util-security	Highest
Product	file	name	bw-util-security	High
Product	jar	package name	bedework	Highest
Product	jar	package name	security	Highest
Product	jar	package name	util	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Bedework: security utility classes	High
Product	Manifest	implementation-url	https://github.com/Bedework/bw-util-security	Low
Product	Manifest	os-arch	x86_64	Low
Product	Manifest	os-name	Mac OS X	Medium
Product	Manifest	specification-title	Bedework: security utility classes	Medium
Product	pom	artifactid	bw-util-security	Highest
Product	pom	developer name	Arlen Johnson	Low
Product	pom	developer name	Mike Douglass	Low
Product	pom	developer org	Bedework Commercial Services	Low
Product	pom	developer org	Spherical Cow Group	Low
Product	pom	developer org URL	http://sphericalcowgroup.com/	Low
Product	pom	developer org URL	https://bedework.com/	Low
Product	pom	groupid	org.bedework	Highest
Product	pom	name	Bedework: security utility classes	High
Product	pom	url	Bedework/bw-util-security	High
Version	file	version	6.0.0	High
Version	Manifest	Implementation-Version	6.0.0	High
Version	pom	version	6.0.0	Highest

Identifiers

pkg:maven/org.bedework/bw-util-security@6.0.0 (Confidence:High)

bw-util-servlet-6.0.0.jar

Description:

Network (http, DAV,servlet etc) related utilities

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/runner/.m2/repository/org/bedework/bw-util-servlet/6.0.0/bw-util-servlet-6.0.0.jar
MD5: e5a0f2c1dd1773dc9b7947d5e3511b2a
SHA1: 73ea43b83be937e3bdb6612420bd2ff7c6382d57
SHA256:aa4ebbe3ffbbdc8ce2be7fd5bd130c47e607a3000bec2f496f9d2bd30cc7b874
Referenced In Project/Scope: Bedework Self Registration: self registration service web classes:compile
pkg:maven/org.bedework.selfreg/bw-self-registration-web@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bw-util-servlet	High
Vendor	jar	package name	bedework	Highest
Vendor	jar	package name	servlet	Highest
Vendor	jar	package name	util	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	implementation-url	https://github.com/Bedework/bw-util-network/bw-util-servlet	Low
Vendor	Manifest	Implementation-Vendor	Bedework	High
Vendor	Manifest	os-arch	x86_64	Low
Vendor	Manifest	os-name	Mac OS X	Medium
Vendor	Manifest	specification-vendor	Bedework	Low
Vendor	pom	artifactid	bw-util-servlet	Highest
Vendor	pom	artifactid	bw-util-servlet	Low
Vendor	pom	developer name	Arlen Johnson	Medium
Vendor	pom	developer name	Mike Douglass	Medium
Vendor	pom	developer org	Bedework Commercial Services	Medium
Vendor	pom	developer org	Spherical Cow Group	Medium
Vendor	pom	developer org URL	http://sphericalcowgroup.com/	Medium
Vendor	pom	developer org URL	https://bedework.com/	Medium
Vendor	pom	groupid	org.bedework	Highest
Vendor	pom	name	Bedework: network util - servlet support	High
Vendor	pom	url	Bedework/bw-util-network/bw-util-servlet	Highest
Product	file	name	bw-util-servlet	High
Product	jar	package name	bedework	Highest
Product	jar	package name	servlet	Highest
Product	jar	package name	util	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Bedework: network util - servlet support	High
Product	Manifest	implementation-url	https://github.com/Bedework/bw-util-network/bw-util-servlet	Low
Product	Manifest	os-arch	x86_64	Low
Product	Manifest	os-name	Mac OS X	Medium
Product	Manifest	specification-title	Bedework: network util - servlet support	Medium
Product	pom	artifactid	bw-util-servlet	Highest
Product	pom	developer name	Arlen Johnson	Low
Product	pom	developer name	Mike Douglass	Low
Product	pom	developer org	Bedework Commercial Services	Low
Product	pom	developer org	Spherical Cow Group	Low
Product	pom	developer org URL	http://sphericalcowgroup.com/	Low
Product	pom	developer org URL	https://bedework.com/	Low
Product	pom	groupid	org.bedework	Highest
Product	pom	name	Bedework: network util - servlet support	High
Product	pom	url	Bedework/bw-util-network/bw-util-servlet	High
Version	file	version	6.0.0	High
Version	Manifest	Implementation-Version	6.0.0	High
Version	pom	version	6.0.0	Highest

Identifiers

pkg:maven/org.bedework/bw-util-servlet@6.0.0 (Confidence:High)

bw-util-xml-6.0.0.jar

Description:

This project provides a number of utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/runner/.m2/repository/org/bedework/bw-util-xml/6.0.0/bw-util-xml-6.0.0.jar
MD5: 9511e1c44083306be4587dcacaea03a0
SHA1: a5486ab6b6da48523d7fc224662a3ddbbb26b090
SHA256:cd96fdeb127ccdf57f7ce99c63b27933b407b7b64cc4f723b79342c47908658a
Referenced In Projects/Scopes:

Bedework Self Registration: self registration service common classes:compile
Bedework Self Registration: self registration service web classes:compile

pkg:maven/org.bedework/bw-util-config@6.0.0
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bw-util-xml	High
Vendor	jar	package name	bedework	Highest
Vendor	jar	package name	util	Highest
Vendor	jar	package name	xml	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	implementation-url	https://github.com/Bedework/bw-util/bw-util-xml	Low
Vendor	Manifest	Implementation-Vendor	Bedework	High
Vendor	Manifest	os-arch	x86_64	Low
Vendor	Manifest	os-name	Mac OS X	Medium
Vendor	Manifest	specification-vendor	Bedework	Low
Vendor	pom	artifactid	bw-util-xml	Highest
Vendor	pom	artifactid	bw-util-xml	Low
Vendor	pom	developer name	Arlen Johnson	Medium
Vendor	pom	developer name	Mike Douglass	Medium
Vendor	pom	developer org	Bedework Commercial Services	Medium
Vendor	pom	developer org	Spherical Cow Group	Medium
Vendor	pom	developer org URL	http://sphericalcowgroup.com/	Medium
Vendor	pom	developer org URL	https://bedework.com/	Medium
Vendor	pom	groupid	org.bedework	Highest
Vendor	pom	name	Bedework: util to handle xml	High
Vendor	pom	url	Bedework/bw-util/bw-util-xml	Highest
Product	file	name	bw-util-xml	High
Product	jar	package name	bedework	Highest
Product	jar	package name	util	Highest
Product	jar	package name	xml	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Bedework: util to handle xml	High
Product	Manifest	implementation-url	https://github.com/Bedework/bw-util/bw-util-xml	Low
Product	Manifest	os-arch	x86_64	Low
Product	Manifest	os-name	Mac OS X	Medium
Product	Manifest	specification-title	Bedework: util to handle xml	Medium
Product	pom	artifactid	bw-util-xml	Highest
Product	pom	developer name	Arlen Johnson	Low
Product	pom	developer name	Mike Douglass	Low
Product	pom	developer org	Bedework Commercial Services	Low
Product	pom	developer org	Spherical Cow Group	Low
Product	pom	developer org URL	http://sphericalcowgroup.com/	Low
Product	pom	developer org URL	https://bedework.com/	Low
Product	pom	groupid	org.bedework	Highest
Product	pom	name	Bedework: util to handle xml	High
Product	pom	url	Bedework/bw-util/bw-util-xml	High
Version	file	version	6.0.0	High
Version	Manifest	Implementation-Version	6.0.0	High
Version	pom	version	6.0.0	Highest

Identifiers

pkg:maven/org.bedework/bw-util-xml@6.0.0 (Confidence:High)

commons-codec-1.17.1.jar

Description:

     The Apache Commons Codec component contains encoders and decoders for
     various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/commons-codec/commons-codec/1.17.1/commons-codec-1.17.1.jar
MD5: 7b3438ab4c6d91e0066d410947e43f3e
SHA1: 973638b7149d333563584137ebf13a691bb60579
SHA256:f9f6cb103f2ddc3c99a9d80ada2ae7bf0685111fd6bffccb72033d1da4e6ff23
Referenced In Projects/Scopes:

Bedework Self Registration: self registration service common classes:compile
Bedework Self Registration: self registration service web classes:compile

pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-codec	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	codec	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	digest	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.codec	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-codec/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-codec	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-codec	Highest
Vendor	pom	artifactid	commons-codec	Low
Vendor	pom	developer email	bayard@apache.org	Low
Vendor	pom	developer email	chtompki@apache.org	Low
Vendor	pom	developer email	dgraham@apache.org	Low
Vendor	pom	developer email	dlr@finemaltcoding.com	Low
Vendor	pom	developer email	ggregory at apache.org	Low
Vendor	pom	developer email	jon@collab.net	Low
Vendor	pom	developer email	julius@apache.org	Low
Vendor	pom	developer email	mattsicker@apache.org	Low
Vendor	pom	developer email	rwaldhoff@apache.org	Low
Vendor	pom	developer email	sanders@totalsync.com	Low
Vendor	pom	developer email	tn@apache.org	Low
Vendor	pom	developer email	tobrien@apache.org	Low
Vendor	pom	developer id	bayard	Medium
Vendor	pom	developer id	chtompki	Medium
Vendor	pom	developer id	dgraham	Medium
Vendor	pom	developer id	dlr	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	jon	Medium
Vendor	pom	developer id	julius	Medium
Vendor	pom	developer id	mattsicker	Medium
Vendor	pom	developer id	rwaldhoff	Medium
Vendor	pom	developer id	sanders	Medium
Vendor	pom	developer id	tn	Medium
Vendor	pom	developer id	tobrien	Medium
Vendor	pom	developer name	Daniel Rall	Medium
Vendor	pom	developer name	David Graham	Medium
Vendor	pom	developer name	Gary Gregory	Medium
Vendor	pom	developer name	Henri Yandell	Medium
Vendor	pom	developer name	Jon S. Stevens	Medium
Vendor	pom	developer name	Julius Davies	Medium
Vendor	pom	developer name	Matt Sicker	Medium
Vendor	pom	developer name	Rob Tompkins	Medium
Vendor	pom	developer name	Rodney Waldhoff	Medium
Vendor	pom	developer name	Scott Sanders	Medium
Vendor	pom	developer name	Thomas Neidhart	Medium
Vendor	pom	developer name	Tim OBrien	Medium
Vendor	pom	developer org	The Apache Software Foundation	Medium
Vendor	pom	developer org URL	http://juliusdavies.ca/	Medium
Vendor	pom	developer org URL	https://www.apache.org/	Medium
Vendor	pom	groupid	commons-codec	Highest
Vendor	pom	name	Apache Commons Codec	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	url	https://commons.apache.org/proper/commons-codec/	Highest
Product	file	name	commons-codec	High
Product	jar	package name	apache	Highest
Product	jar	package name	codec	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	digest	Highest
Product	Manifest	automatic-module-name	org.apache.commons.codec	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-codec/	Low
Product	Manifest	Bundle-Name	Apache Commons Codec	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-codec	Medium
Product	Manifest	Implementation-Title	Apache Commons Codec	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Apache Commons Codec	Medium
Product	pom	artifactid	commons-codec	Highest
Product	pom	developer email	bayard@apache.org	Low
Product	pom	developer email	chtompki@apache.org	Low
Product	pom	developer email	dgraham@apache.org	Low
Product	pom	developer email	dlr@finemaltcoding.com	Low
Product	pom	developer email	ggregory at apache.org	Low
Product	pom	developer email	jon@collab.net	Low
Product	pom	developer email	julius@apache.org	Low
Product	pom	developer email	mattsicker@apache.org	Low
Product	pom	developer email	rwaldhoff@apache.org	Low
Product	pom	developer email	sanders@totalsync.com	Low
Product	pom	developer email	tn@apache.org	Low
Product	pom	developer email	tobrien@apache.org	Low
Product	pom	developer id	bayard	Low
Product	pom	developer id	chtompki	Low
Product	pom	developer id	dgraham	Low
Product	pom	developer id	dlr	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	jon	Low
Product	pom	developer id	julius	Low
Product	pom	developer id	mattsicker	Low
Product	pom	developer id	rwaldhoff	Low
Product	pom	developer id	sanders	Low
Product	pom	developer id	tn	Low
Product	pom	developer id	tobrien	Low
Product	pom	developer name	Daniel Rall	Low
Product	pom	developer name	David Graham	Low
Product	pom	developer name	Gary Gregory	Low
Product	pom	developer name	Henri Yandell	Low
Product	pom	developer name	Jon S. Stevens	Low
Product	pom	developer name	Julius Davies	Low
Product	pom	developer name	Matt Sicker	Low
Product	pom	developer name	Rob Tompkins	Low
Product	pom	developer name	Rodney Waldhoff	Low
Product	pom	developer name	Scott Sanders	Low
Product	pom	developer name	Thomas Neidhart	Low
Product	pom	developer name	Tim OBrien	Low
Product	pom	developer org	The Apache Software Foundation	Low
Product	pom	developer org URL	http://juliusdavies.ca/	Low
Product	pom	developer org URL	https://www.apache.org/	Low
Product	pom	groupid	commons-codec	Highest
Product	pom	name	Apache Commons Codec	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	url	https://commons.apache.org/proper/commons-codec/	Medium
Version	file	version	1.17.1	High
Version	Manifest	Bundle-Version	1.17.1	High
Version	Manifest	Implementation-Version	1.17.1	High
Version	pom	parent-version	1.17.1	Low
Version	pom	version	1.17.1	Highest

Identifiers

pkg:maven/commons-codec/commons-codec@1.17.1 (Confidence:High)

commons-lang3-3.17.0.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/apache/commons/commons-lang3/3.17.0/commons-lang3-3.17.0.jar
MD5: 7730df72b7fdff4a3a32d89a314f826a
SHA1: b17d2136f0460dcc0d2016ceefca8723bdf4ee70
SHA256:6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4
Referenced In Projects/Scopes:

Bedework Self Registration: self registration service common classes:compile
Bedework Self Registration: self registration service web classes:compile

pkg:maven/org.bedework/bw-util-misc@6.0.0
pkg:maven/org.bedework/bw-util-misc@6.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-lang3	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	lang3	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-lang3	Highest
Vendor	pom	artifactid	commons-lang3	Low
Vendor	pom	developer email	bayard@apache.org	Low
Vendor	pom	developer email	britter@apache.org	Low
Vendor	pom	developer email	chtompki@apache.org	Low
Vendor	pom	developer email	djones@apache.org	Low
Vendor	pom	developer email	dlr@finemaltcoding.com	Low
Vendor	pom	developer email	ggregory at apache.org	Low
Vendor	pom	developer email	jcarman@apache.org	Low
Vendor	pom	developer email	joerg.schaible@gmx.de	Low
Vendor	pom	developer email	lguibert@apache.org	Low
Vendor	pom	developer email	oheger@apache.org	Low
Vendor	pom	developer email	pbenedict@apache.org	Low
Vendor	pom	developer email	rdonkin@apache.org	Low
Vendor	pom	developer email	scolebourne@joda.org	Low
Vendor	pom	developer email	stevencaswell@apache.org	Low
Vendor	pom	developer id	bayard	Medium
Vendor	pom	developer id	britter	Medium
Vendor	pom	developer id	chtompki	Medium
Vendor	pom	developer id	djones	Medium
Vendor	pom	developer id	dlr	Medium
Vendor	pom	developer id	fredrik	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	jcarman	Medium
Vendor	pom	developer id	joehni	Medium
Vendor	pom	developer id	lguibert	Medium
Vendor	pom	developer id	mbenson	Medium
Vendor	pom	developer id	niallp	Medium
Vendor	pom	developer id	oheger	Medium
Vendor	pom	developer id	pbenedict	Medium
Vendor	pom	developer id	rdonkin	Medium
Vendor	pom	developer id	scaswell	Medium
Vendor	pom	developer id	scolebourne	Medium
Vendor	pom	developer name	Benedikt Ritter	Medium
Vendor	pom	developer name	Daniel Rall	Medium
Vendor	pom	developer name	Duncan Jones	Medium
Vendor	pom	developer name	Fredrik Westermarck	Medium
Vendor	pom	developer name	Gary Gregory	Medium
Vendor	pom	developer name	Henri Yandell	Medium
Vendor	pom	developer name	James Carman	Medium
Vendor	pom	developer name	Joerg Schaible	Medium
Vendor	pom	developer name	Loic Guibert	Medium
Vendor	pom	developer name	Matt Benson	Medium
Vendor	pom	developer name	Niall Pemberton	Medium
Vendor	pom	developer name	Oliver Heger	Medium
Vendor	pom	developer name	Paul Benedict	Medium
Vendor	pom	developer name	Rob Tompkins	Medium
Vendor	pom	developer name	Robert Burrell Donkin	Medium
Vendor	pom	developer name	Stephen Colebourne	Medium
Vendor	pom	developer name	Steven Caswell	Medium
Vendor	pom	developer org	Carman Consulting, Inc.	Medium
Vendor	pom	developer org	CollabNet, Inc.	Medium
Vendor	pom	developer org	SITA ATS Ltd	Medium
Vendor	pom	developer org	The Apache Software Foundation	Medium
Vendor	pom	developer org URL	https://www.apache.org/	Medium
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	pom	name	Apache Commons Lang	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	url	https://commons.apache.org/proper/commons-lang/	Highest
Product	file	name	commons-lang3	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	lang3	Highest
Product	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Product	Manifest	Bundle-Name	Apache Commons Lang	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Product	Manifest	Implementation-Title	Apache Commons Lang	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Apache Commons Lang	Medium
Product	pom	artifactid	commons-lang3	Highest
Product	pom	developer email	bayard@apache.org	Low
Product	pom	developer email	britter@apache.org	Low
Product	pom	developer email	chtompki@apache.org	Low
Product	pom	developer email	djones@apache.org	Low
Product	pom	developer email	dlr@finemaltcoding.com	Low
Product	pom	developer email	ggregory at apache.org	Low
Product	pom	developer email	jcarman@apache.org	Low
Product	pom	developer email	joerg.schaible@gmx.de	Low
Product	pom	developer email	lguibert@apache.org	Low
Product	pom	developer email	oheger@apache.org	Low
Product	pom	developer email	pbenedict@apache.org	Low
Product	pom	developer email	rdonkin@apache.org	Low
Product	pom	developer email	scolebourne@joda.org	Low
Product	pom	developer email	stevencaswell@apache.org	Low
Product	pom	developer id	bayard	Low
Product	pom	developer id	britter	Low
Product	pom	developer id	chtompki	Low
Product	pom	developer id	djones	Low
Product	pom	developer id	dlr	Low
Product	pom	developer id	fredrik	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	jcarman	Low
Product	pom	developer id	joehni	Low
Product	pom	developer id	lguibert	Low
Product	pom	developer id	mbenson	Low
Product	pom	developer id	niallp	Low
Product	pom	developer id	oheger	Low
Product	pom	developer id	pbenedict	Low
Product	pom	developer id	rdonkin	Low
Product	pom	developer id	scaswell	Low
Product	pom	developer id	scolebourne	Low
Product	pom	developer name	Benedikt Ritter	Low
Product	pom	developer name	Daniel Rall	Low
Product	pom	developer name	Duncan Jones	Low
Product	pom	developer name	Fredrik Westermarck	Low
Product	pom	developer name	Gary Gregory	Low
Product	pom	developer name	Henri Yandell	Low
Product	pom	developer name	James Carman	Low
Product	pom	developer name	Joerg Schaible	Low
Product	pom	developer name	Loic Guibert	Low
Product	pom	developer name	Matt Benson	Low
Product	pom	developer name	Niall Pemberton	Low
Product	pom	developer name	Oliver Heger	Low
Product	pom	developer name	Paul Benedict	Low
Product	pom	developer name	Rob Tompkins	Low
Product	pom	developer name	Robert Burrell Donkin	Low
Product	pom	developer name	Stephen Colebourne	Low
Product	pom	developer name	Steven Caswell	Low
Product	pom	developer org	Carman Consulting, Inc.	Low
Product	pom	developer org	CollabNet, Inc.	Low
Product	pom	developer org	SITA ATS Ltd	Low
Product	pom	developer org	The Apache Software Foundation	Low
Product	pom	developer org URL	https://www.apache.org/	Low
Product	pom	groupid	org.apache.commons	Highest
Product	pom	name	Apache Commons Lang	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	url	https://commons.apache.org/proper/commons-lang/	Medium
Version	file	version	3.17.0	High
Version	Manifest	Bundle-Version	3.17.0	High
Version	Manifest	Implementation-Version	3.17.0	High
Version	pom	parent-version	3.17.0	Low
Version	pom	version	3.17.0	Highest

Identifiers

pkg:maven/org.apache.commons/commons-lang3@3.17.0 (Confidence:High)

commons-logging-1.2.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/commons-logging/commons-logging/1.2/commons-logging-1.2.jar
MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686
SHA256:daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636
Referenced In Projects/Scopes:

Bedework Self Registration: self registration service common classes:compile
Bedework Self Registration: self registration service web classes:compile

pkg:maven/org.apache.httpcomponents/httpclient@4.5.14
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-logging	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	logging	Highest
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-logging/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.logging	Medium
Vendor	Manifest	implementation-build	tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-logging	Highest
Vendor	pom	artifactid	commons-logging	Low
Vendor	pom	developer email	baliuka@apache.org	Low
Vendor	pom	developer email	costin@apache.org	Low
Vendor	pom	developer email	craigmcc@apache.org	Low
Vendor	pom	developer email	dennisl@apache.org	Low
Vendor	pom	developer email	donaldp@apache.org	Low
Vendor	pom	developer email	morgand@apache.org	Low
Vendor	pom	developer email	rdonkin@apache.org	Low
Vendor	pom	developer email	rsitze@apache.org	Low
Vendor	pom	developer email	rwaldhoff@apache.org	Low
Vendor	pom	developer email	sanders@apache.org	Low
Vendor	pom	developer email	skitching@apache.org	Low
Vendor	pom	developer email	tn@apache.org	Low
Vendor	pom	developer id	baliuka	Medium
Vendor	pom	developer id	bstansberry	Medium
Vendor	pom	developer id	costin	Medium
Vendor	pom	developer id	craigmcc	Medium
Vendor	pom	developer id	dennisl	Medium
Vendor	pom	developer id	donaldp	Medium
Vendor	pom	developer id	morgand	Medium
Vendor	pom	developer id	rdonkin	Medium
Vendor	pom	developer id	rsitze	Medium
Vendor	pom	developer id	rwaldhoff	Medium
Vendor	pom	developer id	sanders	Medium
Vendor	pom	developer id	skitching	Medium
Vendor	pom	developer id	tn	Medium
Vendor	pom	developer name	Brian Stansberry	Medium
Vendor	pom	developer name	Costin Manolache	Medium
Vendor	pom	developer name	Craig McClanahan	Medium
Vendor	pom	developer name	Dennis Lundberg	Medium
Vendor	pom	developer name	Juozas Baliuka	Medium
Vendor	pom	developer name	Morgan Delagrange	Medium
Vendor	pom	developer name	Peter Donald	Medium
Vendor	pom	developer name	Richard Sitze	Medium
Vendor	pom	developer name	Robert Burrell Donkin	Medium
Vendor	pom	developer name	Rodney Waldhoff	Medium
Vendor	pom	developer name	Scott Sanders	Medium
Vendor	pom	developer name	Simon Kitching	Medium
Vendor	pom	developer name	Thomas Neidhart	Medium
Vendor	pom	developer org	Apache	Medium
Vendor	pom	developer org	The Apache Software Foundation	Medium
Vendor	pom	groupid	commons-logging	Highest
Vendor	pom	name	Apache Commons Logging	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	url	http://commons.apache.org/proper/commons-logging/	Highest
Product	file	name	commons-logging	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	logging	Highest
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-logging/	Low
Product	Manifest	Bundle-Name	Apache Commons Logging	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.logging	Medium
Product	Manifest	implementation-build	tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200	Low
Product	Manifest	Implementation-Title	Apache Commons Logging	High
Product	Manifest	specification-title	Apache Commons Logging	Medium
Product	pom	artifactid	commons-logging	Highest
Product	pom	developer email	baliuka@apache.org	Low
Product	pom	developer email	costin@apache.org	Low
Product	pom	developer email	craigmcc@apache.org	Low
Product	pom	developer email	dennisl@apache.org	Low
Product	pom	developer email	donaldp@apache.org	Low
Product	pom	developer email	morgand@apache.org	Low
Product	pom	developer email	rdonkin@apache.org	Low
Product	pom	developer email	rsitze@apache.org	Low
Product	pom	developer email	rwaldhoff@apache.org	Low
Product	pom	developer email	sanders@apache.org	Low
Product	pom	developer email	skitching@apache.org	Low
Product	pom	developer email	tn@apache.org	Low
Product	pom	developer id	baliuka	Low
Product	pom	developer id	bstansberry	Low
Product	pom	developer id	costin	Low
Product	pom	developer id	craigmcc	Low
Product	pom	developer id	dennisl	Low
Product	pom	developer id	donaldp	Low
Product	pom	developer id	morgand	Low
Product	pom	developer id	rdonkin	Low
Product	pom	developer id	rsitze	Low
Product	pom	developer id	rwaldhoff	Low
Product	pom	developer id	sanders	Low
Product	pom	developer id	skitching	Low
Product	pom	developer id	tn	Low
Product	pom	developer name	Brian Stansberry	Low
Product	pom	developer name	Costin Manolache	Low
Product	pom	developer name	Craig McClanahan	Low
Product	pom	developer name	Dennis Lundberg	Low
Product	pom	developer name	Juozas Baliuka	Low
Product	pom	developer name	Morgan Delagrange	Low
Product	pom	developer name	Peter Donald	Low
Product	pom	developer name	Richard Sitze	Low
Product	pom	developer name	Robert Burrell Donkin	Low
Product	pom	developer name	Rodney Waldhoff	Low
Product	pom	developer name	Scott Sanders	Low
Product	pom	developer name	Simon Kitching	Low
Product	pom	developer name	Thomas Neidhart	Low
Product	pom	developer org	Apache	Low
Product	pom	developer org	The Apache Software Foundation	Low
Product	pom	groupid	commons-logging	Highest
Product	pom	name	Apache Commons Logging	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	url	http://commons.apache.org/proper/commons-logging/	Medium
Version	file	version	1.2	High
Version	Manifest	Implementation-Version	1.2	High
Version	pom	parent-version	1.2	Low
Version	pom	version	1.2	Highest

Identifiers

pkg:maven/commons-logging/commons-logging@1.2 (Confidence:High)

commons-text-1.13.0.jar

Description:

Apache Commons Text is a set of utility functions and reusable components for the purpose of processing
    and manipulating text that should be of use in a Java environment.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/apache/commons/commons-text/1.13.0/commons-text-1.13.0.jar
MD5: 4b4766452c04316e3ef6ffe3490d6b10
SHA1: ba2ed5521c491cabf7ecdb57f77922561c2e8958
SHA256:1e323a501127df78ed0987f345d69d65d0ea7fa3d4fb5b3f84aaeba3a8b20f38
Referenced In Projects/Scopes:

Bedework Self Registration: self registration service common classes:compile
Bedework Self Registration: self registration service web classes:compile

pkg:maven/org.bedework/bw-util-misc@6.0.0
pkg:maven/org.bedework/bw-util-misc@6.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-text	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	text	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.text	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-text	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.text	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-text	Highest
Vendor	pom	artifactid	commons-text	Low
Vendor	pom	developer email	britter@apache.org	Low
Vendor	pom	developer email	chtompki@apache.org	Low
Vendor	pom	developer email	djones@apache.org	Low
Vendor	pom	developer email	ggregory at apache.org	Low
Vendor	pom	developer email	kinow@apache.org	Low
Vendor	pom	developer id	britter	Medium
Vendor	pom	developer id	chtompki	Medium
Vendor	pom	developer id	djones	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	kinow	Medium
Vendor	pom	developer name	Benedikt Ritter	Medium
Vendor	pom	developer name	Bruno P. Kinoshita	Medium
Vendor	pom	developer name	Duncan Jones	Medium
Vendor	pom	developer name	Gary Gregory	Medium
Vendor	pom	developer name	Rob Tompkins	Medium
Vendor	pom	developer org	The Apache Software Foundation	Medium
Vendor	pom	developer org URL	https://www.apache.org/	Medium
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	pom	name	Apache Commons Text	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	url	https://commons.apache.org/proper/commons-text	Highest
Product	file	name	commons-text	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	text	Highest
Product	Manifest	automatic-module-name	org.apache.commons.text	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-text	Low
Product	Manifest	Bundle-Name	Apache Commons Text	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.text	Medium
Product	Manifest	Implementation-Title	Apache Commons Text	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Apache Commons Text	Medium
Product	pom	artifactid	commons-text	Highest
Product	pom	developer email	britter@apache.org	Low
Product	pom	developer email	chtompki@apache.org	Low
Product	pom	developer email	djones@apache.org	Low
Product	pom	developer email	ggregory at apache.org	Low
Product	pom	developer email	kinow@apache.org	Low
Product	pom	developer id	britter	Low
Product	pom	developer id	chtompki	Low
Product	pom	developer id	djones	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	kinow	Low
Product	pom	developer name	Benedikt Ritter	Low
Product	pom	developer name	Bruno P. Kinoshita	Low
Product	pom	developer name	Duncan Jones	Low
Product	pom	developer name	Gary Gregory	Low
Product	pom	developer name	Rob Tompkins	Low
Product	pom	developer org	The Apache Software Foundation	Low
Product	pom	developer org URL	https://www.apache.org/	Low
Product	pom	groupid	org.apache.commons	Highest
Product	pom	name	Apache Commons Text	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	url	https://commons.apache.org/proper/commons-text	Medium
Version	file	version	1.13.0	High
Version	Manifest	Bundle-Version	1.13.0	High
Version	Manifest	Implementation-Version	1.13.0	High
Version	pom	parent-version	1.13.0	Low
Version	pom	version	1.13.0	Highest

Identifiers

pkg:maven/org.apache.commons/commons-text@1.13.0 (Confidence:High)
cpe:2.3:a:apache:commons_text:1.13.0:*:*:*:*:*:*:* (Confidence:Highest)

httpclient-4.5.14.jar

Description:

   Apache HttpComponents Client

File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar
MD5: 2cb357c4b763f47e58af6cad47df6ba3
SHA1: 1194890e6f56ec29177673f2f12d0b8e627dec98
SHA256:c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6
Referenced In Projects/Scopes:

Bedework Self Registration: self registration service common classes:compile
Bedework Self Registration: self registration service web classes:compile

pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	httpclient	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	client	Highest
Vendor	jar	package name	httpclient	Highest
Vendor	Manifest	automatic-module-name	org.apache.httpcomponents.httpclient	Medium
Vendor	Manifest	implementation-url	http://hc.apache.org/httpcomponents-client-ga	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.httpcomponents	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	httpclient	Highest
Vendor	pom	artifactid	httpclient	Low
Vendor	pom	groupid	org.apache.httpcomponents	Highest
Vendor	pom	name	Apache HttpClient	High
Vendor	pom	parent-artifactid	httpcomponents-client	Low
Vendor	pom	url	http://hc.apache.org/httpcomponents-client-ga	Highest
Product	file	name	httpclient	High
Product	jar	package name	apache	Highest
Product	jar	package name	client	Highest
Product	jar	package name	http	Highest
Product	jar	package name	httpclient	Highest
Product	Manifest	automatic-module-name	org.apache.httpcomponents.httpclient	Medium
Product	Manifest	Implementation-Title	Apache HttpClient	High
Product	Manifest	implementation-url	http://hc.apache.org/httpcomponents-client-ga	Low
Product	Manifest	specification-title	Apache HttpClient	Medium
Product	pom	artifactid	httpclient	Highest
Product	pom	groupid	org.apache.httpcomponents	Highest
Product	pom	name	Apache HttpClient	High
Product	pom	parent-artifactid	httpcomponents-client	Medium
Product	pom	url	http://hc.apache.org/httpcomponents-client-ga	Medium
Version	file	version	4.5.14	High
Version	Manifest	Implementation-Version	4.5.14	High
Version	pom	version	4.5.14	Highest

Identifiers

pkg:maven/org.apache.httpcomponents/httpclient@4.5.14 (Confidence:High)
cpe:2.3:a:apache:httpclient:4.5.14:*:*:*:*:*:*:* (Confidence:Highest)

httpcore-4.4.16.jar

Description:

   Apache HttpComponents Core (blocking I/O)

File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar
MD5: 28d2cd9bf8789fd2ec774fb88436ebd1
SHA1: 51cf043c87253c9f58b539c9f7e44c8894223850
SHA256:6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f
Referenced In Projects/Scopes:

Bedework Self Registration: self registration service common classes:compile
Bedework Self Registration: self registration service web classes:compile

pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	httpcore	High
Vendor	jar	package name	apache	Highest
Vendor	Manifest	automatic-module-name	org.apache.httpcomponents.httpcore	Medium
Vendor	Manifest	implementation-build	${scmBranch}@r${buildNumber}; 2022-11-26 09:44:32+0000	Low
Vendor	Manifest	implementation-url	http://hc.apache.org/httpcomponents-core-ga	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	Manifest	url	http://hc.apache.org/httpcomponents-core-ga	Low
Vendor	pom	artifactid	httpcore	Highest
Vendor	pom	artifactid	httpcore	Low
Vendor	pom	groupid	org.apache.httpcomponents	Highest
Vendor	pom	name	Apache HttpCore	High
Vendor	pom	parent-artifactid	httpcomponents-core	Low
Vendor	pom	url	http://hc.apache.org/httpcomponents-core-ga	Highest
Product	file	name	httpcore	High
Product	jar	package name	apache	Highest
Product	jar	package name	http	Highest
Product	Manifest	automatic-module-name	org.apache.httpcomponents.httpcore	Medium
Product	Manifest	implementation-build	${scmBranch}@r${buildNumber}; 2022-11-26 09:44:32+0000	Low
Product	Manifest	Implementation-Title	HttpComponents Apache HttpCore	High
Product	Manifest	implementation-url	http://hc.apache.org/httpcomponents-core-ga	Low
Product	Manifest	specification-title	HttpComponents Apache HttpCore	Medium
Product	Manifest	url	http://hc.apache.org/httpcomponents-core-ga	Low
Product	pom	artifactid	httpcore	Highest
Product	pom	groupid	org.apache.httpcomponents	Highest
Product	pom	name	Apache HttpCore	High
Product	pom	parent-artifactid	httpcomponents-core	Medium
Product	pom	url	http://hc.apache.org/httpcomponents-core-ga	Medium
Version	file	version	4.4.16	High
Version	Manifest	Implementation-Version	4.4.16	High
Version	pom	version	4.4.16	Highest

Identifiers

pkg:maven/org.apache.httpcomponents/httpcore@4.4.16 (Confidence:High)

jackson-core-2.18.2.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.18.2/jackson-core-2.18.2.jar
MD5: bf935e6eca3a57defa13918661905cb0
SHA1: fb64ccac5c27dca8819418eb4e443a9f496d9ee7
SHA256:d8054ae7c0d1c2d2f55d28e46026ebe5892881f3fab5f439233184381c3b4a1f
Referenced In Project/Scope: Bedework Self Registration: self registration service web classes:compile
pkg:maven/org.bedework/bw-util-http@6.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jackson-core	High
Vendor	jar	package name	base	Highest
Vendor	jar	package name	com	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	jar	package name	jackson	Highest
Vendor	jar	package name	json	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	artifactid	jackson-core	Highest
Vendor	pom	artifactid	jackson-core	Low
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	pom	name	Jackson-core	High
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	url	FasterXML/jackson-core	Highest
Product	file	name	jackson-core	High
Product	hint analyzer	product	java8	Highest
Product	hint analyzer	product	modules	Highest
Product	jar	package name	base	Highest
Product	jar	package name	com	Highest
Product	jar	package name	core	Highest
Product	jar	package name	fasterxml	Highest
Product	jar	package name	jackson	Highest
Product	jar	package name	json	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Product	Manifest	Bundle-Name	Jackson-core	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Product	Manifest	Implementation-Title	Jackson-core	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Jackson-core	Medium
Product	pom	artifactid	jackson-core	Highest
Product	pom	groupid	com.fasterxml.jackson.core	Highest
Product	pom	name	Jackson-core	High
Product	pom	parent-artifactid	jackson-base	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	pom	url	FasterXML/jackson-core	High
Version	file	version	2.18.2	High
Version	Manifest	Bundle-Version	2.18.2	High
Version	Manifest	Implementation-Version	2.18.2	High
Version	pom	version	2.18.2	Highest

Related Dependencies

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.2:*:*:*:*:*:*:* (Confidence:Low)

jackson-databind-2.18.2.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.2/jackson-databind-2.18.2.jar
MD5: 1b56887bcd3eaea1ff710eb673e610b0
SHA1: deef8697b92141fb6caf7aa86966cff4eec9b04f
SHA256:4b364e6850dc89172fcf1d4dd26b8ff5488eda44ff4657e22dd265203dd5ab3c
Referenced In Project/Scope: Bedework Self Registration: self registration service web classes:compile
pkg:maven/org.bedework/bw-util-http@6.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jackson-databind	High
Vendor	jar	package name	databind	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	jar	package name	jackson	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	artifactid	jackson-databind	Highest
Vendor	pom	artifactid	jackson-databind	Low
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	pom	name	jackson-databind	High
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	url	FasterXML/jackson	Highest
Product	file	name	jackson-databind	High
Product	hint analyzer	product	java8	Highest
Product	hint analyzer	product	modules	Highest
Product	jar	package name	databind	Highest
Product	jar	package name	fasterxml	Highest
Product	jar	package name	jackson	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson	Low
Product	Manifest	Bundle-Name	jackson-databind	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Product	Manifest	Implementation-Title	jackson-databind	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	jackson-databind	Medium
Product	pom	artifactid	jackson-databind	Highest
Product	pom	groupid	com.fasterxml.jackson.core	Highest
Product	pom	name	jackson-databind	High
Product	pom	parent-artifactid	jackson-base	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	pom	url	FasterXML/jackson	High
Version	file	version	2.18.2	High
Version	Manifest	Bundle-Version	2.18.2	High
Version	Manifest	Implementation-Version	2.18.2	High
Version	pom	version	2.18.2	Highest

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-databind:2.18.2:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.2:*:*:*:*:*:*:* (Confidence:Low)

jakarta.activation-api-2.1.3.jar

Description:

  Specification

License:

EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar
MD5: 76e7b680375ea9f40f3ddbd702efcd25
SHA1: fa165bd70cda600368eee31555222776a46b881f
SHA256:01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627
Referenced In Project/Scope: Bedework Self Registration: self registration service common classes:compile
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.activation-api	High
Vendor	jar	package name	activation	Highest
Vendor	jar	package name	jakarta	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Vendor	Manifest	extension-name	jakarta.activation	Medium
Vendor	Manifest	implementation-build-id	7f7d358	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.activation-api	Highest
Vendor	pom	artifactid	jakarta.activation-api	Low
Vendor	pom	developer email	bill.shannon@oracle.com	Low
Vendor	pom	developer id	shannon	Medium
Vendor	pom	developer name	Bill Shannon	Medium
Vendor	pom	developer org	Oracle	Medium
Vendor	pom	groupid	jakarta.activation	Highest
Vendor	pom	name	Jakarta Activation API	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	jakartaee/jaf-api	Highest
Vendor	pom (hint)	developer org	sun	Medium
Product	file	name	jakarta.activation-api	High
Product	jar	package name	activation	Highest
Product	jar	package name	jakarta	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Activation API	Medium
Product	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Product	Manifest	extension-name	jakarta.activation	Medium
Product	Manifest	implementation-build-id	7f7d358	Low
Product	Manifest	Implementation-Title	Jakarta Activation API	High
Product	Manifest	specification-title	Jakarta Activation Specification	Medium
Product	pom	artifactid	jakarta.activation-api	Highest
Product	pom	developer email	bill.shannon@oracle.com	Low
Product	pom	developer id	shannon	Low
Product	pom	developer name	Bill Shannon	Low
Product	pom	developer org	Oracle	Low
Product	pom	groupid	jakarta.activation	Highest
Product	pom	name	Jakarta Activation API	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	jakartaee/jaf-api	High
Version	file	version	2.1.3	High
Version	Manifest	Bundle-Version	2.1.3	High
Version	pom	parent-version	2.1.3	Low
Version	pom	version	2.1.3	Highest

Identifiers

pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3 (Confidence:High)

jakarta.mail-api-2.1.3.jar

Description:

  Specification API

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/runner/.m2/repository/jakarta/mail/jakarta.mail-api/2.1.3/jakarta.mail-api-2.1.3.jar
MD5: 288a687deb06b87602ce14cd03dddff4
SHA1: a327aa5f514ba86e80d54584417d7376ed2bde0e
SHA256:8051b58d75f982f9a5b963b3765426e824b2a64865ef0af17205e455b98db05c
Referenced In Project/Scope: Bedework Self Registration: self registration service common classes:compile
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.mail-api	High
Vendor	jar	package name	jakarta	Highest
Vendor	jar	package name	mail	Highest
Vendor	jar	package name	version	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.mail-api	Medium
Vendor	Manifest	extension-name	jakarta.mail	Medium
Vendor	Manifest	implementation-build-id	0f448dc	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.mail-api	Highest
Vendor	pom	artifactid	jakarta.mail-api	Low
Vendor	pom	groupid	jakarta.mail	Highest
Vendor	pom	name	Jakarta Mail API	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	file	name	jakarta.mail-api	High
Product	jar	package name	jakarta	Highest
Product	jar	package name	mail	Highest
Product	jar	package name	version	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Mail API	Medium
Product	Manifest	bundle-symbolicname	jakarta.mail-api	Medium
Product	Manifest	extension-name	jakarta.mail	Medium
Product	Manifest	implementation-build-id	0f448dc	Low
Product	Manifest	Implementation-Title	Jakarta Mail API	High
Product	Manifest	specification-title	Jakarta Mail Specification	Medium
Product	pom	artifactid	jakarta.mail-api	Highest
Product	pom	groupid	jakarta.mail	Highest
Product	pom	name	Jakarta Mail API	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Version	file	version	2.1.3	High
Version	Manifest	Bundle-Version	2.1.3	High
Version	pom	parent-version	2.1.3	Low
Version	pom	version	2.1.3	Highest

Identifiers

pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3 (Confidence:High)

jakarta.persistence-api-3.1.0.jar

Description:

Jakarta Persistence 3.1 API jar

License:

Eclipse Public License v. 2.0: http://www.eclipse.org/legal/epl-2.0
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/runner/.m2/repository/jakarta/persistence/jakarta.persistence-api/3.1.0/jakarta.persistence-api-3.1.0.jar
MD5: 35a1b7dfb38cf44ff795be607b0e6b5b
SHA1: 66901fa1c373c6aff65c13791cc11da72060a8d6
SHA256:475389446d35c6f46c565728b756dc508c284644ea2690644e0d8e7e339d42fd
Referenced In Projects/Scopes:

Bedework Self Registration: self registration service common classes:compile
Bedework Self Registration: self registration service web classes:compile

pkg:maven/org.bedework.database/bw-db@6.0.0
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.persistence-api	High
Vendor	jar	package name	jakarta	Highest
Vendor	jar	package name	persistence	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.persistence-api	Medium
Vendor	Manifest	extension-name	jakarta.persistence	Medium
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.persistence-api	Highest
Vendor	pom	artifactid	jakarta.persistence-api	Low
Vendor	pom	developer id	lukasj	Medium
Vendor	pom	developer name	Lukas Jungmann	Medium
Vendor	pom	developer org	Oracle, Inc.	Medium
Vendor	pom	groupid	jakarta.persistence	Highest
Vendor	pom	name	Jakarta Persistence API	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	eclipse-ee4j/jpa-api	Highest
Product	file	name	jakarta.persistence-api	High
Product	jar	package name	jakarta	Highest
Product	jar	package name	persistence	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Persistence API jar	Medium
Product	Manifest	bundle-symbolicname	jakarta.persistence-api	Medium
Product	Manifest	extension-name	jakarta.persistence	Medium
Product	pom	artifactid	jakarta.persistence-api	Highest
Product	pom	developer id	lukasj	Low
Product	pom	developer name	Lukas Jungmann	Low
Product	pom	developer org	Oracle, Inc.	Low
Product	pom	groupid	jakarta.persistence	Highest
Product	pom	name	Jakarta Persistence API	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	eclipse-ee4j/jpa-api	High
Version	file	version	3.1.0	High
Version	Manifest	Bundle-Version	3.1.0	High
Version	Manifest	Implementation-Version	3.1.0	High
Version	pom	parent-version	3.1.0	Low
Version	pom	version	3.1.0	Highest

Identifiers

pkg:maven/jakarta.persistence/jakarta.persistence-api@3.1.0 (Confidence:High)

jasypt-1.9.3.jar

Description:

Java library which enables encryption in java apps with minimum effort.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/org/jasypt/jasypt/1.9.3/jasypt-1.9.3.jar
MD5: 39327c7e38782102ecdb3c9dc4e8dcd3
SHA1: 0d99ef9540f51c617f2a293b460f025d2ee563dd
SHA256:f481fbb8dd8ce754bfde7552af4fcbe8c5e303d53663bb3d8ce9d4338e0e55aa
Referenced In Project/Scope: Bedework Self Registration: self registration service common classes:compile
pkg:maven/org.bedework.selfreg/bw-self-registration-common@6.1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jasypt	High
Vendor	jar	package name	encryption	Highest
Vendor	jar	package name	jasypt	Highest
Vendor	jar	package name	jasypt	Low
Vendor	jar	package name	org	Highest
Vendor	pom	artifactid	jasypt	Highest
Vendor	pom	artifactid	jasypt	Low
Vendor	pom	developer email	dfernandez AT users.sourceforge.net	Low
Vendor	pom	developer id	dfernandez	Medium
Vendor	pom	developer name	Daniel Fernandez	Medium
Vendor	pom	groupid	org.jasypt	Highest
Vendor	pom	name	JASYPT: Java Simplified Encryption	High
Vendor	pom	organization name	The JASYPT team	High
Vendor	pom	organization url	http://www.jasypt.org	Medium
Vendor	pom	url	http://www.jasypt.org	Highest
Product	file	name	jasypt	High
Product	jar	package name	encryption	Highest
Product	jar	package name	jasypt	Highest
Product	jar	package name	org	Highest
Product	pom	artifactid	jasypt	Highest
Product	pom	developer email	dfernandez AT users.sourceforge.net	Low
Product	pom	developer id	dfernandez	Low
Product	pom	developer name	Daniel Fernandez	Low
Product	pom	groupid	org.jasypt	Highest
Product	pom	name	JASYPT: Java Simplified Encryption	High
Product	pom	organization name	The JASYPT team	Low
Product	pom	organization url	http://www.jasypt.org	Low
Product	pom	url	http://www.jasypt.org	Medium
Version	file	version	1.9.3	High
Version	pom	version	1.9.3	Highest

Identifiers

pkg:maven/org.jasypt/jasypt@1.9.3 (Confidence:High)
cpe:2.3:a:jasypt_project:jasypt:1.9.3:*:*:*:*:*:*:* (Confidence:Highest)

selfreg.js

File Path: /home/runner/work/bw-self-registration/bw-self-registration/bw-self-registration-war/src/main/webapp/docs/resources/selfreg.js
MD5: 625d042ba9da97de45c5ef8e592b048c
SHA1: 4dca788c594177c060c667f0684aa3a4d60712bc
SHA256:b71734cc0204723229d380528cb22a8ada49f52cc93f9dce742e30d1d59173e6
Referenced In Project/Scope: Bedework Self Registration: self registration service war

Evidence

Identifiers

None

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: Bedework Self Registration: self-registration service for users

org.bedework.selfreg:bw-self-registration:6.1.0-SNAPSHOT

Summary

Dependencies (vulnerable)

bw-base-2.0.0.jar

Evidence

Identifiers

bw-db-6.0.0.jar

Evidence

Identifiers

bw-util-config-6.0.0.jar

Evidence

Identifiers

bw-util-http-6.0.0.jar

Evidence

Identifiers

bw-util-jmx-6.0.0.jar

Evidence

Identifiers

bw-util-logging-6.0.0.jar

Evidence

Identifiers

bw-util-misc-6.0.0.jar

Evidence

Identifiers

bw-util-security-6.0.0.jar

Evidence

Identifiers

bw-util-servlet-6.0.0.jar

Evidence

Identifiers

bw-util-xml-6.0.0.jar

Evidence

Identifiers

commons-codec-1.17.1.jar

Evidence

Identifiers

commons-lang3-3.17.0.jar

Evidence

Identifiers

commons-logging-1.2.jar

Evidence

Identifiers

commons-text-1.13.0.jar

Evidence

Identifiers

httpclient-4.5.14.jar

Evidence

Identifiers

httpcore-4.4.16.jar

Evidence

Identifiers

jackson-core-2.18.2.jar

Evidence

Related Dependencies

Identifiers

jackson-databind-2.18.2.jar

Evidence

Identifiers

jakarta.activation-api-2.1.3.jar

Evidence

Identifiers

jakarta.mail-api-2.1.3.jar

Evidence

Identifiers

jakarta.persistence-api-3.1.0.jar

Evidence

Identifiers

jasypt-1.9.3.jar

Evidence

Identifiers

selfreg.js

Evidence

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor