Press CTR-C to copy XML [help]


Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

 Sponsor

Project: Bedework: index related utility classes

org.bedework:bw-util-index:6.1.0-SNAPSHOT

Scan Information (show all):

Summary

Summary of Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
HdrHistogram-2.2.2.jarpkg:maven/org.hdrhistogram/HdrHistogram@2.2.2 025
RoaringBitmap-1.3.0.jarpkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0 025
aggs-matrix-stats-client-2.18.0.jarcpe:2.3:a:pro_search:pro_search:2.18.0:*:*:*:*:*:*:*pkg:maven/org.opensearch.plugin/aggs-matrix-stats-client@2.18.0 0Low38
angus-activation-2.0.2.jarcpe:2.3:a:eclipse:jakarta_mail:2.0.2:*:*:*:*:*:*:*pkg:maven/org.eclipse.angus/angus-activation@2.0.2 0Low35
angus-mail-2.0.3.jar (shaded: org.eclipse.angus:angus-core:2.0.3)pkg:maven/org.eclipse.angus/angus-core@2.0.3 09
angus-mail-2.0.3.jar (shaded: org.eclipse.angus:imap:2.0.3)pkg:maven/org.eclipse.angus/imap@2.0.3 09
angus-mail-2.0.3.jar (shaded: org.eclipse.angus:logging-mailhandler:2.0.3)pkg:maven/org.eclipse.angus/logging-mailhandler@2.0.3 09
angus-mail-2.0.3.jar (shaded: org.eclipse.angus:pop3:2.0.3)pkg:maven/org.eclipse.angus/pop3@2.0.3 09
angus-mail-2.0.3.jar (shaded: org.eclipse.angus:smtp:2.0.3)pkg:maven/org.eclipse.angus/smtp@2.0.3 09
angus-mail-2.0.3.jarcpe:2.3:a:eclipse:jakarta_mail:2.0.3:*:*:*:*:*:*:*pkg:maven/org.eclipse.angus/angus-mail@2.0.3 0Low28
bw-base-2.0.0.jarpkg:maven/org.bedework/bw-base@2.0.0 042
bw-util-caching-6.0.0.jarpkg:maven/org.bedework/bw-util-caching@6.0.0 044
bw-util-config-6.0.0.jarpkg:maven/org.bedework/bw-util-config@6.0.0 044
bw-util-http-6.0.0.jarpkg:maven/org.bedework/bw-util-http@6.0.0 044
bw-util-jmx-6.0.0.jarpkg:maven/org.bedework/bw-util-jmx@6.0.0 044
bw-util-logging-6.0.0.jarpkg:maven/org.bedework/bw-util-logging@6.0.0 044
bw-util-misc-6.0.0.jarcpe:2.3:a:utils_project:utils:6.0.0:*:*:*:*:*:*:*pkg:maven/org.bedework/bw-util-misc@6.0.0 0Low44
bw-util-tz-6.0.1.jarpkg:maven/org.bedework/bw-util-tz@6.0.1 042
bw-util-xml-6.0.0.jarpkg:maven/org.bedework/bw-util-xml@6.0.0 044
commons-codec-1.17.1.jarpkg:maven/commons-codec/commons-codec@1.17.1 0121
commons-lang3-3.18.0.jarcpe:2.3:a:apache:commons_lang:3.18.0:*:*:*:*:*:*:*pkg:maven/org.apache.commons/commons-lang3@3.18.0 0Highest145
commons-logging-1.2.jarpkg:maven/commons-logging/commons-logging@1.2 0117
commons-text-1.13.0.jarcpe:2.3:a:apache:commons_text:1.13.0:*:*:*:*:*:*:*pkg:maven/org.apache.commons/commons-text@1.13.0 0Highest73
compiler-0.9.14.jarpkg:maven/com.github.spullara.mustache.java/compiler@0.9.14 031
httpasyncclient-4.1.5.jarcpe:2.3:a:apache:httpasyncclient:4.1.5:*:*:*:*:*:*:*pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5 0Highest28
httpclient-4.5.14.jarcpe:2.3:a:apache:httpclient:4.5.14:*:*:*:*:*:*:*pkg:maven/org.apache.httpcomponents/httpclient@4.5.14 0Highest32
httpcore-4.4.16.jarpkg:maven/org.apache.httpcomponents/httpcore@4.4.16 032
httpcore-nio-4.4.16.jarpkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16 030
ical4j-3.0.24.jarpkg:maven/org.bedework.ical4j/ical4j@3.0.24 038
jackson-core-2.18.2.jarcpe:2.3:a:fasterxml:jackson-modules-java8:2.18.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2 0Low47
jackson-databind-2.18.2.jarcpe:2.3:a:fasterxml:jackson-databind:2.18.2:*:*:*:*:*:*:*
cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.2:*:*:*:*:*:*:*		pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2 0Highest41
jackson-dataformat-cbor-2.17.2.jarcpe:2.3:a:fasterxml:jackson-dataformats-binary:2.17.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.17.2 0Low39
jackson-dataformat-yaml-2.18.2.jarcpe:2.3:a:fasterxml:jackson-dataformat-xml:2.18.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.2 0Highest39
jakarta.activation-api-2.1.3.jarpkg:maven/jakarta.activation/jakarta.activation-api@2.1.3 045
jakarta.annotation-api-3.0.0.jarcpe:2.3:a:oracle:projects:3.0.0:*:*:*:*:*:*:*pkg:maven/jakarta.annotation/jakarta.annotation-api@3.0.0 0Low42
jakarta.mail-api-2.1.3.jarcpe:2.3:a:eclipse:jakarta_mail:2.1.3:*:*:*:*:*:*:*pkg:maven/jakarta.mail/jakarta.mail-api@2.1.3 0High36
jna-5.13.0.jarcpe:2.3:a:oracle:java_se:5.13.0:*:*:*:*:*:*:*pkg:maven/net.java.dev.jna/jna@5.13.0 0Low48
jna-5.13.0.jar: jnidispatch.dll 02
jna-5.13.0.jar: jnidispatch.dll 02
jna-5.13.0.jar: jnidispatch.dll 02
joda-time-2.12.7.jarpkg:maven/joda-time/joda-time@2.12.7 047
jopt-simple-5.0.4.jarpkg:maven/net.sf.jopt-simple/jopt-simple@5.0.4 023
jzlib-1.1.3.jarcpe:2.3:a:jcraft:jzlib:1.1.3:*:*:*:*:*:*:*pkg:maven/com.jcraft/jzlib@1.1.3 0Highest34
lang-mustache-client-2.18.0.jarcpe:2.3:a:pro_search:pro_search:2.18.0:*:*:*:*:*:*:*pkg:maven/org.opensearch.plugin/lang-mustache-client@2.18.0 0Low38
log4j-jul-2.21.0.jarcpe:2.3:a:apache:log4j:2.21.0:*:*:*:*:*:*:*pkg:maven/org.apache.logging.log4j/log4j-jul@2.21.0 0Highest27
lucene-analysis-common-9.12.0.jarpkg:maven/org.apache.lucene/lucene-analysis-common@9.12.0 027
lucene-backward-codecs-9.12.0.jarpkg:maven/org.apache.lucene/lucene-backward-codecs@9.12.0 025
lucene-core-9.12.0.jarpkg:maven/org.apache.lucene/lucene-core@9.12.0 030
lucene-grouping-9.12.0.jarpkg:maven/org.apache.lucene/lucene-grouping@9.12.0 028
lucene-highlighter-9.12.0.jarpkg:maven/org.apache.lucene/lucene-highlighter@9.12.0 026
lucene-join-9.12.0.jarpkg:maven/org.apache.lucene/lucene-join@9.12.0 028
lucene-memory-9.12.0.jarpkg:maven/org.apache.lucene/lucene-memory@9.12.0 027
lucene-misc-9.12.0.jarpkg:maven/org.apache.lucene/lucene-misc@9.12.0 028
lucene-queries-9.12.0.jarpkg:maven/org.apache.lucene/lucene-queries@9.12.0 027
lucene-queryparser-9.12.0.jarpkg:maven/org.apache.lucene/lucene-queryparser@9.12.0 027
lucene-sandbox-9.12.0.jarpkg:maven/org.apache.lucene/lucene-sandbox@9.12.0 028
lucene-spatial-extras-9.12.0.jarpkg:maven/org.apache.lucene/lucene-spatial-extras@9.12.0 027
lucene-spatial3d-9.12.0.jarpkg:maven/org.apache.lucene/lucene-spatial3d@9.12.0 027
lucene-suggest-9.12.0.jarpkg:maven/org.apache.lucene/lucene-suggest@9.12.0 028
mapper-extras-client-2.18.0.jarcpe:2.3:a:git-extras_project:git-extras:2.18.0:*:*:*:*:*:*:*pkg:maven/org.opensearch.plugin/mapper-extras-client@2.18.0 0Low38
opensearch-core-2.18.0.jarcpe:2.3:a:pro_search:pro_search:2.18.0:*:*:*:*:*:*:*pkg:maven/org.opensearch/opensearch-core@2.18.0 0Low38
org.bedework:bw-util-indexing:6.1.0-SNAPSHOTpkg:maven/org.bedework/bw-util-indexing@6.1.0-SNAPSHOT 06
parent-join-client-2.18.0.jarcpe:2.3:a:pro_search:pro_search:2.18.0:*:*:*:*:*:*:*pkg:maven/org.opensearch.plugin/parent-join-client@2.18.0 0Low40
protobuf-java-3.25.5.jarcpe:2.3:a:google:protobuf:3.25.5:*:*:*:*:*:*:*
cpe:2.3:a:google:protobuf-java:3.25.5:*:*:*:*:*:*:*
cpe:2.3:a:protobuf:protobuf:3.25.5:*:*:*:*:*:*:*		pkg:maven/com.google.protobuf/protobuf-java@3.25.5HIGH1Highest27
rank-eval-client-2.18.0.jarcpe:2.3:a:pro_search:pro_search:2.18.0:*:*:*:*:*:*:*pkg:maven/org.opensearch.plugin/rank-eval-client@2.18.0 0Low36
reactive-streams-1.0.4.jarpkg:maven/org.reactivestreams/reactive-streams@1.0.4 027
reactor-core-3.5.20.jarpkg:maven/io.projectreactor/reactor-core@3.5.20 040
snakeyaml-2.0.jarcpe:2.3:a:snakeyaml_project:snakeyaml:2.0:*:*:*:*:*:*:*pkg:maven/org.yaml/snakeyaml@2.0 0Highest42
t-digest-3.2.jarpkg:maven/com.tdunning/t-digest@3.2 026
zstd-jni-1.5.5-5.jarpkg:maven/com.github.luben/zstd-jni@1.5.5-5 043
zstd-jni-1.5.5-5.jar: libzstd-jni-1.5.5-5.dll 04
zstd-jni-1.5.5-5.jar: libzstd-jni-1.5.5-5.dll 04

Dependencies (vulnerable)

HdrHistogram-2.2.2.jar

Description:

        HdrHistogram supports the recording and analyzing sampled data value
        counts across a configurable integer value range with configurable value
        precision within the range. Value precision is expressed as the number of
        significant digits in the value recording, and provides control over value
        quantization behavior across the value range and the subsequent value
        resolution at any given level.

License:

Public Domain, per Creative Commons CC0: http://creativecommons.org/publicdomain/zero/1.0/
BSD-2-Clause: https://opensource.org/licenses/BSD-2-Clause
File Path: /home/runner/.m2/repository/org/hdrhistogram/HdrHistogram/2.2.2/HdrHistogram-2.2.2.jar
MD5: 41f807bf0c681d6f692c408a6e217eaf
SHA1: 7959933ebcc0f05b2eaa5af0a0c8689fa257b15c
SHA256:22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
HdrHistogram-2.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

RoaringBitmap-1.3.0.jar

Description:

Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.

License:

Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/roaringbitmap/RoaringBitmap/1.3.0/RoaringBitmap-1.3.0.jar
MD5: 5ea65118238dc208252d95ff1868599c
SHA1: a46ce7a2dc494da69700ab421f081b1583857f6d
SHA256:73443a71a2e2401c7d518a487983539fcaf5f9652efbd178f929e7b6d36881d0
Referenced In Project/Scope: Bedework: opensearch related utility classes:runtime
RoaringBitmap-1.3.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

aggs-matrix-stats-client-2.18.0.jar

Description:

OpenSearch subproject :modules:aggs-matrix-stats

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opensearch/plugin/aggs-matrix-stats-client/2.18.0/aggs-matrix-stats-client-2.18.0.jar
MD5: 2363e265e885a3583c5312e13e8c4003
SHA1: 9723a42b65e2742c549f046a05f29e78b266cdca
SHA256:a9c809721bcfc4537481ade4cdba7cd43fb8216b600cff260aa316d4d73b95f5
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
aggs-matrix-stats-client-2.18.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0

Identifiers

angus-activation-2.0.2.jar

Description:

 Implementation

License:

http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-activation/2.0.2/angus-activation-2.0.2.jar
MD5: 42bba74155dc773eca277ee7a16f74be
SHA1: 41f1e0ddd157c856926ed149ab837d110955a9fc
SHA256:6dd3bcffc22bce83b07376a0e2e094e4964a3195d4118fb43e380ef35436cc1e
Referenced In Project/Scope: Bedework: opensearch related utility classes:runtime
angus-activation-2.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-tz@6.0.1

Identifiers

angus-mail-2.0.3.jar (shaded: org.eclipse.angus:angus-core:2.0.3)

File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.3/angus-mail-2.0.3.jar/META-INF/maven/org.eclipse.angus/angus-core/pom.xml
MD5: 9907dbe21768f81f0436f492e8ceca57
SHA1: 108609abe9269199421273dfe2b5520c00ac800c
SHA256:a52a66e7dd0b6006ab29360dfe735a9d32243f70be56ea1af92bc7dca11fd1ed
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile

Identifiers

angus-mail-2.0.3.jar (shaded: org.eclipse.angus:imap:2.0.3)

File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.3/angus-mail-2.0.3.jar/META-INF/maven/org.eclipse.angus/imap/pom.xml
MD5: 55d43d94fda869a2551af9303a7ea370
SHA1: fed2fd168251a00aef8e0ebfc379a58a05aa6346
SHA256:2769e1c98f6d6ae4285eb0872ae1d20ce78bd503ed7a824d406e22e25e9d1b16
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile

Identifiers

angus-mail-2.0.3.jar (shaded: org.eclipse.angus:logging-mailhandler:2.0.3)

File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.3/angus-mail-2.0.3.jar/META-INF/maven/org.eclipse.angus/logging-mailhandler/pom.xml
MD5: eb9a0a396f32310dcaeddef53c4fecf2
SHA1: 9d10a9bd90cb079dcdb9b1ab25e1d1f6c253e78d
SHA256:e9546707cf60f5eace422c9f542ba2548fcef1639f1270e103720d54a4ea2a66
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile

Identifiers

angus-mail-2.0.3.jar (shaded: org.eclipse.angus:pop3:2.0.3)

File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.3/angus-mail-2.0.3.jar/META-INF/maven/org.eclipse.angus/pop3/pom.xml
MD5: f814ea6c49648addacecaad34e700890
SHA1: fad30d04e576332a8ce304438a8c60444a2a15fd
SHA256:1bf0ed0c897f7825319a0b4a8926a95a7a4430ddf4d9c11b6d1af7a34acf5261
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile

Identifiers

angus-mail-2.0.3.jar (shaded: org.eclipse.angus:smtp:2.0.3)

File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.3/angus-mail-2.0.3.jar/META-INF/maven/org.eclipse.angus/smtp/pom.xml
MD5: 88fdc95cc63d9167e76af8fd06ad205d
SHA1: 3d3b38a40ef48a4feb95a7e4d6d133df2b58c5b0
SHA256:f69db19b0c17d856e923ce29d4d6089e5dcafa30678fe549c11d316712ca3fae
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile

Identifiers

angus-mail-2.0.3.jar

Description:

Angus Mail Provider

License:

http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html, http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-mail/2.0.3/angus-mail-2.0.3.jar
MD5: 44f609355db6385cec29ef7eab9be8ea
SHA1: 56f811522d693700013768db83b741a65da6c61c
SHA256:6b5b6fc2ba633c53733d829c56cae51d343fb1eadee3e17b8eea01a49edc72d3
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
angus-mail-2.0.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-tz@6.0.1

Identifiers

bw-base-2.0.0.jar

Description:

This project provides base classes, types and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-base/2.0.0/bw-base-2.0.0.jar
MD5: 0480624145ad4fc5daeba898b7132099
SHA1: b24b7279e0475bb3c8c84e37af400ad87877c955
SHA256:10d27642e3bf1f2f4f85320293b5041b7e34cba02cc2656f29e79f75cee97cc5
Referenced In Projects/Scopes:
  • Bedework: indexing related utility classes:compile
  • Bedework: opensearch related utility classes:compile

bw-base-2.0.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-indexing@6.1.0-SNAPSHOT

Identifiers

bw-util-caching-6.0.0.jar

Description:

This project provides a number of utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-caching/6.0.0/bw-util-caching-6.0.0.jar
MD5: 44bc8428b5ae09dcd7b595cae4a97d8c
SHA1: b7dcd007403e6ab183abf3deeccf9965d9a45012
SHA256:2e13d843d2d80ec209937c153fc1995ad5ee47b51bd5b9565153c753ddb589f5
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
bw-util-caching-6.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-tz@6.0.1

Identifiers

bw-util-config-6.0.0.jar

Description:

This project provides a number of utility configuration classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-config/6.0.0/bw-util-config-6.0.0.jar
MD5: 974d4ee4953df439fc3753869cc469da
SHA1: c1f787f23f0c5028280a457d0709418ea332fe09
SHA256:97ee0ce50094f85f881d63fb423dfb7ae1973843ac6028f0488860394553aa60
Referenced In Projects/Scopes:
  • Bedework: indexing related utility classes:compile
  • Bedework: opensearch related utility classes:compile

bw-util-config-6.0.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-util-indexing@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT

Identifiers

bw-util-http-6.0.0.jar

Description:

Network (http, DAV,servlet etc) related utilities

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-http/6.0.0/bw-util-http-6.0.0.jar
MD5: 4f65ed8a06332bb4eb2937abee9a2086
SHA1: dd8d7fcc509c6a3de1e2e331144dfae1d302bd51
SHA256:36a211c6527c86826f5125307b9278640e6cfe086efb044c580a80eb1d6c56f0
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
bw-util-http-6.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-tz@6.0.1

Identifiers

bw-util-jmx-6.0.0.jar

Description:

This project provides a number of utility configuration classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-jmx/6.0.0/bw-util-jmx-6.0.0.jar
MD5: e7ffae94c51d5c62aa657c7f321607b5
SHA1: cbfbb6e89fa5adac492adcc48866cfec62cc932d
SHA256:60b3d4ce24901fc1ab0b741be3413efaffb263f99f368062618478c67e7fd3b9
Referenced In Projects/Scopes:
  • Bedework: indexing related utility classes:compile
  • Bedework: opensearch related utility classes:compile

bw-util-jmx-6.0.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-indexing@6.1.0-SNAPSHOT

Identifiers

bw-util-logging-6.0.0.jar

Description:

This project provides logging utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-logging/6.0.0/bw-util-logging-6.0.0.jar
MD5: 2c63b9031e2d0852a00e57753320b409
SHA1: a12c15e6670f1298c8c4779d08b24595e921aceb
SHA256:e26bbaf5a5dcad998990fdc647f448b2e2dcac6eb628be6945fe24d53759b745
Referenced In Projects/Scopes:
  • Bedework: indexing related utility classes:compile
  • Bedework: opensearch related utility classes:compile

bw-util-logging-6.0.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT
  • pkg:maven/org.bedework/bw-util-config@6.0.0

Identifiers

bw-util-misc-6.0.0.jar

Description:

This project provides a number of utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-misc/6.0.0/bw-util-misc-6.0.0.jar
MD5: a54be794abde392b2c1f7fb2935ad372
SHA1: ca14c1131c38ac51caa478cb4ea5df738fc6f106
SHA256:a2243c42722fcaa848e6f0fca44634c0c5685e57bb0c2a2d2f394bf9543bd5ae
Referenced In Projects/Scopes:
  • Bedework: indexing related utility classes:compile
  • Bedework: opensearch related utility classes:compile

bw-util-misc-6.0.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-util-config@6.0.0
  • pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT

Identifiers

bw-util-tz-6.0.1.jar

Description:

Timezone utility classes

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-tz/6.0.1/bw-util-tz-6.0.1.jar
MD5: 87ca95f1235febf7d80860c2d944241b
SHA1: 358de5b7d58ae48071d37fbced87f352ec657596
SHA256:85c1c060a14bbad1368a03b3a5ad97f81d0507b6db74b5269fa8315a0d1d3c05
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
bw-util-tz-6.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT

Identifiers

bw-util-xml-6.0.0.jar

Description:

This project provides a number of utility classes and methods

License:

Apache License Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/org/bedework/bw-util-xml/6.0.0/bw-util-xml-6.0.0.jar
MD5: 9511e1c44083306be4587dcacaea03a0
SHA1: a5486ab6b6da48523d7fc224662a3ddbbb26b090
SHA256:cd96fdeb127ccdf57f7ce99c63b27933b407b7b64cc4f723b79342c47908658a
Referenced In Projects/Scopes:
  • Bedework: indexing related utility classes:compile
  • Bedework: opensearch related utility classes:compile

bw-util-xml-6.0.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-util-config@6.0.0
  • pkg:maven/org.bedework/bw-util-config@6.0.0

Identifiers

commons-codec-1.17.1.jar

Description:

     The Apache Commons Codec component contains encoders and decoders for
     various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-codec/commons-codec/1.17.1/commons-codec-1.17.1.jar
MD5: 7b3438ab4c6d91e0066d410947e43f3e
SHA1: 973638b7149d333563584137ebf13a691bb60579
SHA256:f9f6cb103f2ddc3c99a9d80ada2ae7bf0685111fd6bffccb72033d1da4e6ff23
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
commons-codec-1.17.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0

Identifiers

commons-lang3-3.18.0.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-lang3/3.18.0/commons-lang3-3.18.0.jar
MD5: 48b9886957920a4cdb602780ca345087
SHA1: fb14946f0e39748a6571de0635acbe44e7885491
SHA256:4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720
Referenced In Projects/Scopes:
  • Bedework: indexing related utility classes:compile
  • Bedework: opensearch related utility classes:compile

commons-lang3-3.18.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-util-config@6.0.0
  • pkg:maven/org.bedework/bw-util-tz@6.0.1

Identifiers

commons-logging-1.2.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-logging/commons-logging/1.2/commons-logging-1.2.jar
MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686
SHA256:daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
commons-logging-1.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0

Identifiers

commons-text-1.13.0.jar

Description:

Apache Commons Text is a set of utility functions and reusable components for the purpose of processing
    and manipulating text that should be of use in a Java environment.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/commons/commons-text/1.13.0/commons-text-1.13.0.jar
MD5: 4b4766452c04316e3ef6ffe3490d6b10
SHA1: ba2ed5521c491cabf7ecdb57f77922561c2e8958
SHA256:1e323a501127df78ed0987f345d69d65d0ea7fa3d4fb5b3f84aaeba3a8b20f38
Referenced In Projects/Scopes:
  • Bedework: indexing related utility classes:compile
  • Bedework: opensearch related utility classes:compile

commons-text-1.13.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.bedework/bw-util-misc@6.0.0
  • pkg:maven/org.bedework/bw-util-config@6.0.0

Identifiers

compiler-0.9.14.jar

Description:

Implementation of mustache.js for Java

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/com/github/spullara/mustache/java/compiler/0.9.14/compiler-0.9.14.jar
MD5: 98d75faf04c0855013d77df55e71421a
SHA1: e6df8b5aabb80d6eb6d8fef312a56d66b7659ba6
SHA256:99a7e7855609135006f078e6de7ee69daad9c42f98e679d56f80653cb17526b9
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
compiler-0.9.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0

Identifiers

httpasyncclient-4.1.5.jar

Description:

   Apache HttpComponents AsyncClient

File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpasyncclient/4.1.5/httpasyncclient-4.1.5.jar
MD5: 5346c547bfd0da64eb3dc54be9380d65
SHA1: cd18227f1eb8e9a263286c1d7362ceb24f6f9b32
SHA256:0c1877489a9d1ba4fa50f6cfcab11d1123618858cb31d56afaab5afdd5064d99
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
httpasyncclient-4.1.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0

Identifiers

httpclient-4.5.14.jar

Description:

   Apache HttpComponents Client

File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jar
MD5: 2cb357c4b763f47e58af6cad47df6ba3
SHA1: 1194890e6f56ec29177673f2f12d0b8e627dec98
SHA256:c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
httpclient-4.5.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-tz@6.0.1

Identifiers

httpcore-4.4.16.jar

Description:

   Apache HttpComponents Core (blocking I/O)

File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpcore/4.4.16/httpcore-4.4.16.jar
MD5: 28d2cd9bf8789fd2ec774fb88436ebd1
SHA1: 51cf043c87253c9f58b539c9f7e44c8894223850
SHA256:6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
httpcore-4.4.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-tz@6.0.1

Identifiers

httpcore-nio-4.4.16.jar

Description:

   Apache HttpComponents Core (non-blocking I/O)

File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpcore-nio/4.4.16/httpcore-nio-4.4.16.jar
MD5: 597c450f3401e98103e835824ab43e77
SHA1: cd21c80a9956be48c4c1cfd2f594ba02857d0927
SHA256:4018736ede2d321034e8517ea90baefb31831a8608afccc446d8a699fb1d00d4
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
httpcore-nio-4.4.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0

Identifiers

ical4j-3.0.24.jar

Description:

A Java library for reading and writing iCalendar (*.ics) files

License:

BSD 3-Clause License: https://github.com/ical4j/ical4j/raw/refs/heads/develop/LICENSE.txt
File Path: /home/runner/.m2/repository/org/bedework/ical4j/ical4j/3.0.24/ical4j-3.0.24.jar
MD5: 8a13d47cb0406201477c9ebbd54d9a27
SHA1: d1aef2a3d985edbf59726889a1ff0adc18b20122
SHA256:042344cb9f0bd8429ba6a14a8f4d9c4486dbdd739e852539a42c7baff50614ff
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
ical4j-3.0.24.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-tz@6.0.1

Identifiers

jackson-core-2.18.2.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.18.2/jackson-core-2.18.2.jar
MD5: bf935e6eca3a57defa13918661905cb0
SHA1: fb64ccac5c27dca8819418eb4e443a9f496d9ee7
SHA256:d8054ae7c0d1c2d2f55d28e46026ebe5892881f3fab5f439233184381c3b4a1f
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
jackson-core-2.18.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-tz@6.0.1

Identifiers

jackson-databind-2.18.2.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.2/jackson-databind-2.18.2.jar
MD5: 1b56887bcd3eaea1ff710eb673e610b0
SHA1: deef8697b92141fb6caf7aa86966cff4eec9b04f
SHA256:4b364e6850dc89172fcf1d4dd26b8ff5488eda44ff4657e22dd265203dd5ab3c
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
jackson-databind-2.18.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT

Identifiers

jackson-dataformat-cbor-2.17.2.jar

Description:

Support for reading and writing Concise Binary Object Representation
([CBOR](https://www.rfc-editor.org/info/rfc7049)
encoded data using Jackson abstractions (streaming API, data binding, tree model)

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-cbor/2.17.2/jackson-dataformat-cbor-2.17.2.jar
MD5: 8791b95fb115255e534697a8f15f23b4
SHA1: 57fa7c1b5104bbc4599278d13933a937ee058e68
SHA256:1d7dc634ba3d7981d7017f4f44d43cf371e922c80028b4eb3e5374ce6546d5f6
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
jackson-dataformat-cbor-2.17.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch-x-content@2.18.0

Identifiers

jackson-dataformat-yaml-2.18.2.jar

Description:

Support for reading and writing YAML-encoded data via Jackson abstractions.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.18.2/jackson-dataformat-yaml-2.18.2.jar
MD5: 823869062440ee6a273ca421727eda2f
SHA1: d000e13505d1cf564371516fa3d5b8769a779dc9
SHA256:381a1c0711e4bb88561a6c0008b5a945465628ca07764ccd66a0d97ee07ad612
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
jackson-dataformat-yaml-2.18.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch-x-content@2.18.0

Identifiers

jakarta.activation-api-2.1.3.jar

Description:

  Specification

License:

EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar
MD5: 76e7b680375ea9f40f3ddbd702efcd25
SHA1: fa165bd70cda600368eee31555222776a46b881f
SHA256:01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
jakarta.activation-api-2.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-tz@6.0.1

Identifiers

jakarta.annotation-api-3.0.0.jar

Description:

Jakarta Annotations API

License:

EPL 2.0: https://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/annotation/jakarta.annotation-api/3.0.0/jakarta.annotation-api-3.0.0.jar
MD5: 7faffaab962918da4cf5ddfd76609dd2
SHA1: 54f928fadec906a99d558536756d171917b9d936
SHA256:b01f55552284cfb149411e64eabca75e942d26d2e1786b32914250e4330afaa2
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
jakarta.annotation-api-3.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

jakarta.mail-api-2.1.3.jar

Description:

  Specification API

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/runner/.m2/repository/jakarta/mail/jakarta.mail-api/2.1.3/jakarta.mail-api-2.1.3.jar
MD5: 288a687deb06b87602ce14cd03dddff4
SHA1: a327aa5f514ba86e80d54584417d7376ed2bde0e
SHA256:8051b58d75f982f9a5b963b3765426e824b2a64865ef0af17205e455b98db05c
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
jakarta.mail-api-2.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-tz@6.0.1

Identifiers

jna-5.13.0.jar

Description:

Java Native Access

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.13.0/jna-5.13.0.jar
MD5: bd2e5bc6b4b020c2d9a6e17a8e9bcef1
SHA1: 1200e7ebeedbe0d10062093f32925a912020e747
SHA256:66d4f819a062a51a1d5627bffc23fac55d1677f0e0a1feba144aabdd670a64bb
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
jna-5.13.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

jna-5.13.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.13.0/jna-5.13.0.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: 1d3902f504da15af632c84e5c0219f63
SHA1: dbb6d15f1c240778bd76715b6eb4254e4712e31f
SHA256:29fe4c6371b0b1685909c5b5f69d4976244006f81a2ffc9342a8948bbd8fa8a0
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile

Identifiers

  • None

jna-5.13.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.13.0/jna-5.13.0.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 34d12b1e2af72d9bb267bbc8c0d53e4a
SHA1: d9ed8776645f6b4f52df16132450863c47ea92d7
SHA256:13b2cac3f50368ab97fa2e3b0d0d2cb612f68449d5bbd6de187fc85ee4469d03
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile

Identifiers

  • None

jna-5.13.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.13.0/jna-5.13.0.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: 676f82a561fafeec6d8cf6d8319dee2d
SHA1: 01759bb9e7dd8513c1d25baff2c8ab3298db720d
SHA256:1b06cba48eea2ad4881bc88a2749e40500dbc87c1a2149290eb61d473a64e4c1
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile

Identifiers

  • None

joda-time-2.12.7.jar

Description:

Date and time library to replace JDK date handling

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/joda-time/joda-time/2.12.7/joda-time-2.12.7.jar
MD5: e8bb877dfb6d67f6cc78a524264ba83b
SHA1: d015b997eccd511e5567218a51651ff0625f6f25
SHA256:385282b005818cfaccdbe8bd2429811e7e641782f2b88932a6b8ff51d668f616
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
joda-time-2.12.7.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

jopt-simple-5.0.4.jar

Description:

A Java library for parsing command line options

License:

The MIT License: http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/net/sf/jopt-simple/jopt-simple/5.0.4/jopt-simple-5.0.4.jar
MD5: eb0d9dffe9b0eddead68fe678be76c49
SHA1: 4fdac2fbe92dfad86aa6e9301736f6b4342a3f5c
SHA256:df26cc58f235f477db07f753ba5a3ab243ebe5789d9f89ecf68dd62ea9a66c28
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
jopt-simple-5.0.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

jzlib-1.1.3.jar

Description:

JZlib is a re-implementation of zlib in pure Java

License:

BSD: http://www.jcraft.com/jzlib/LICENSE.txt
File Path: /home/runner/.m2/repository/com/jcraft/jzlib/1.1.3/jzlib-1.1.3.jar
MD5: 386d3714fef534d21175d8885ae48bf7
SHA1: c01428efa717624f7aabf4df319939dda9646b2d
SHA256:89b1360f407381bf61fde411019d8cbd009ebb10cff715f3669017a031027560
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
jzlib-1.1.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lang-mustache-client-2.18.0.jar

Description:

OpenSearch subproject :modules:lang-mustache

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opensearch/plugin/lang-mustache-client/2.18.0/lang-mustache-client-2.18.0.jar
MD5: 51dbbca49045eb90a4195b94002bde90
SHA1: d05e6fd5c74b28111398786bcd66ab531606e6f3
SHA256:c5c1f1cbc289015cd720602ce59249775d5a935789392c398706e7c6c330bcaf
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lang-mustache-client-2.18.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0

Identifiers

log4j-jul-2.21.0.jar

Description:

The Apache Log4j implementation of java.util.logging

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-jul/2.21.0/log4j-jul-2.21.0.jar
MD5: c98eb03d1d3fbc7ce41c1c230b6db8af
SHA1: f0da61113f4a47654677e6a98b1e13ca7de2483d
SHA256:d8805608f92c0ac468ae7b469182415390ab6c414d9116ae4865461595ecdbdc
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
log4j-jul-2.21.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-analysis-common-9.12.0.jar

Description:

Apache Lucene (module: common)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-analysis-common/9.12.0/lucene-analysis-common-9.12.0.jar
MD5: 29f3cd7f2279d7d027f01db58c30aa4f
SHA1: 4c2503cfaba37249e20ea877555cb52ee89d1ae1
SHA256:8c79d8741f711cc6d7501805b03f7b5f505805d09cab1beb95f0be24b6d27655
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-analysis-common-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-backward-codecs-9.12.0.jar

Description:

Apache Lucene (module: backward-codecs)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-backward-codecs/9.12.0/lucene-backward-codecs-9.12.0.jar
MD5: 1f94a415e05164526bc186d8e804318c
SHA1: 68fe98c94e9644a584ea1bf525e68d9406fc61ec
SHA256:a42c17f304c9bf1e8411ebdcf91baf2df2d00c7bfa13bca9e41ccf381d78cfba
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-backward-codecs-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-core-9.12.0.jar

Description:

Apache Lucene (module: core)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-core/9.12.0/lucene-core-9.12.0.jar
MD5: dd2ac67819c84831a53ec739d4889852
SHA1: fdb055d569bb20bfce9618fe2b01c29bab7f290c
SHA256:6c7b774b75cd8f369e246f365a47caa54ae991cae6afa49c7f339e9921ca58a0
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-core-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-grouping-9.12.0.jar

Description:

Apache Lucene (module: grouping)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-grouping/9.12.0/lucene-grouping-9.12.0.jar
MD5: 47dbdd3868f23a5e03040cc1b7ed58d8
SHA1: ccf99f8db57aa97b2c1f95c5cc2a11156a043921
SHA256:ffc02d047f4f036c5a5f409baaf8e19abca165deccc3e57e7a422560f4de1219
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-grouping-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-highlighter-9.12.0.jar

Description:

Apache Lucene (module: highlighter)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-highlighter/9.12.0/lucene-highlighter-9.12.0.jar
MD5: d85f7b69d7e3856673b4d530ea9cf25f
SHA1: e93429f66fbcd3b58d81f01223d6ce5688047296
SHA256:5094e1b38f02eb72500a4283ac0f654e2e81943c5359b629567dd7900c935a59
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-highlighter-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-join-9.12.0.jar

Description:

Apache Lucene (module: join)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-join/9.12.0/lucene-join-9.12.0.jar
MD5: 3b73d309d14e204001bc3ddcc271309c
SHA1: 14c802d6955eaf11107375a2ada8fe8ec53b3e01
SHA256:c49cb1be843295b2c7158c03755f222416fad9915114bc7f74649d20f4fc43d6
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-join-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-memory-9.12.0.jar

Description:

Apache Lucene (module: memory)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-memory/9.12.0/lucene-memory-9.12.0.jar
MD5: 9c6ca4aa099d1d089848140923763423
SHA1: ffe090339540876b40df792aee51a42af6b3f37f
SHA256:fdbb9c9b3270ce06370d094f1a80dbbbf81b2638b55fa14cc817469092899f01
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-memory-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-misc-9.12.0.jar

Description:

Apache Lucene (module: misc)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-misc/9.12.0/lucene-misc-9.12.0.jar
MD5: c28964f78ec89c1fa2847da312602ff8
SHA1: ad17704ee90eb926b6d3105f7027485cdadbecd9
SHA256:7989d094b4b168ce9ef2949e13f6bfe820829944e50831881be1adeddbe02c04
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-misc-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-queries-9.12.0.jar

Description:

Apache Lucene (module: queries)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-queries/9.12.0/lucene-queries-9.12.0.jar
MD5: ec93396f39b4ae7b9dbacb5871d3db13
SHA1: 3ac2a62b0b55c5725bb65f0c5454f9f8a401cf43
SHA256:3b4da6b1673e4edd141c7b86538cc61f6ff3386106f1f5e179c9fe2d30ea2fca
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-queries-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-queryparser-9.12.0.jar

Description:

Apache Lucene (module: queryparser)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-queryparser/9.12.0/lucene-queryparser-9.12.0.jar
MD5: 8e6f0ce84c8ce693a9d79bda684b62c5
SHA1: 55959399373876f4c184944315458dc6b88fbd81
SHA256:fc866b7bbfc199436feb24be7dd5c575445342eb283bfe07dd519eab131d3675
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-queryparser-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-sandbox-9.12.0.jar

Description:

Apache Lucene (module: sandbox)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-sandbox/9.12.0/lucene-sandbox-9.12.0.jar
MD5: b65767a8ab92b0e688b7c0513e3865c4
SHA1: f65882536d681c11a1cbc920e5679201101e3603
SHA256:2262f39a241f435dba61f230e7528205c34f4bf0008faa57f0808476bb782996
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-sandbox-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-spatial-extras-9.12.0.jar

Description:

Apache Lucene (module: spatial-extras)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-spatial-extras/9.12.0/lucene-spatial-extras-9.12.0.jar
MD5: 2b7ab2559d05efe02153ecf85ef39689
SHA1: 9d00cc7cc2279822ef6740f0677cafacfb439fa8
SHA256:ea41de3b2da573e488033b8b1c2033e17c27ce39957cf6acb8904297ae6e1747
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-spatial-extras-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-spatial3d-9.12.0.jar

Description:

Apache Lucene (module: spatial3d)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-spatial3d/9.12.0/lucene-spatial3d-9.12.0.jar
MD5: 2a1686e9486b5c69b03223a43b5644d4
SHA1: e3092632ca1d4427d3ebb2c866ac89d90f5b61ec
SHA256:4263e163937024838a8761618b1ce4eba06857adca0c9385d1ac014ec2937de6
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-spatial3d-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

lucene-suggest-9.12.0.jar

Description:

Apache Lucene (module: suggest)

License:

Apache 2: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/apache/lucene/lucene-suggest/9.12.0/lucene-suggest-9.12.0.jar
MD5: 1673b456a0b294d8acde89cfe16b1bfb
SHA1: e1c6636499317ebe498f3490a1ec8b86b8a363dd
SHA256:1606fb9c7cf57d88b2824916c00280c92e14bcde798a6b78b27e0db8f13227f0
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
lucene-suggest-9.12.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

mapper-extras-client-2.18.0.jar

Description:

OpenSearch subproject :modules:mapper-extras

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opensearch/plugin/mapper-extras-client/2.18.0/mapper-extras-client-2.18.0.jar
MD5: 77fecad0a940cd2b048f26345c65d40c
SHA1: 032c072b45d8857cdb0a75d580d2f01615a25bca
SHA256:3954b4ba652e2bbca5770ed9f65fcda4bee63acda637be5aec7f0b8abd1d42c5
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
mapper-extras-client-2.18.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0

Identifiers

opensearch-core-2.18.0.jar

Description:

OpenSearch subproject :libs:opensearch-core

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opensearch/opensearch-core/2.18.0/opensearch-core-2.18.0.jar
MD5: ebb64345becadd901655d22c57248bc7
SHA1: a688e0d46fdd4d8f8378ecf799586027dea7bcba
SHA256:d59d1f1a34931aa8aae28673d04d4e4cd126ec32c5857e1e36202f5b0cb8f219
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
opensearch-core-2.18.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT

Identifiers

org.bedework:bw-util-indexing:6.1.0-SNAPSHOT

Description:

This project provides a number of index related utility classes and methods

License:

Apache License Version 2.0 http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/work/bw-util-index/bw-util-index/bw-util-indexing/pom.xml

Referenced In Project/Scope: Bedework: opensearch related utility classes
org.bedework:bw-util-indexing:6.1.0-SNAPSHOT is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT

Identifiers

parent-join-client-2.18.0.jar

Description:

OpenSearch subproject :modules:parent-join

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opensearch/plugin/parent-join-client/2.18.0/parent-join-client-2.18.0.jar
MD5: a23a54791314cbd2fbcab96f89e7ba78
SHA1: 47677684e9e7a1b2631324d9215e8ea1bdffcd39
SHA256:b5ccd41ee8a23860626e7bee461238033e76d9b2a7d1f3502b88eb19c48967ee
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
parent-join-client-2.18.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0

Identifiers

protobuf-java-3.25.5.jar

Description:

    Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.

License:

https://opensource.org/licenses/BSD-3-Clause
File Path: /home/runner/.m2/repository/com/google/protobuf/protobuf-java/3.25.5/protobuf-java-3.25.5.jar
MD5: 639cfcf9717cf4e4dd9e808e6f8d24a4
SHA1: 5ae5c9ec39930ae9b5a61b32b93288818ec05ec1
SHA256:8540247fad9e06baefa8fb45eb313802d019f485f14300e0f9d6b556ed88e753
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
protobuf-java-3.25.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

CVE-2024-7254  

Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.
CWE-787 Out-of-bounds Write, CWE-20 Improper Input Validation

CVSSv4:
  • Base Score: HIGH (8.7)
  • Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:N/V:X/RE:X/U:X
CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

rank-eval-client-2.18.0.jar

Description:

OpenSearch subproject :modules:rank-eval

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/opensearch/plugin/rank-eval-client/2.18.0/rank-eval-client-2.18.0.jar
MD5: 65f5291df65db98e1a3d2506343faa03
SHA1: 56dc295ee03a3585875e5e7f1c083e5f9a69e6c6
SHA256:53f9e4bc5158aa2d1950718e6b58c59bc12ec958a38ceb0191c6f8cf9065112e
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
rank-eval-client-2.18.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch.client/opensearch-rest-high-level-client@2.18.0

Identifiers

reactive-streams-1.0.4.jar

Description:

A Protocol for Asynchronous Non-Blocking Data Sequence

License:

MIT-0: https://spdx.org/licenses/MIT-0.html
File Path: /home/runner/.m2/repository/org/reactivestreams/reactive-streams/1.0.4/reactive-streams-1.0.4.jar
MD5: eda7978509c32d99166745cc144c99cd
SHA1: 3864a1320d97d7b045f729a326e1e077661f31b7
SHA256:f75ca597789b3dac58f61857b9ac2e1034a68fa672db35055a8fb4509e325f28
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
reactive-streams-1.0.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

reactor-core-3.5.20.jar

Description:

Non-Blocking Reactive Foundation for the JVM

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/projectreactor/reactor-core/3.5.20/reactor-core-3.5.20.jar
MD5: 3a171266f2cafd6561fe2bd1e056b802
SHA1: 1fc0f91e2b93778a974339d2c24363d7f34f90b4
SHA256:aa392c5df0790af7b580595b9f809661446613735125b95eed76fae6a2f4c6b6
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
reactor-core-3.5.20.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

snakeyaml-2.0.jar

Description:

YAML 1.1 parser and emitter for Java

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/yaml/snakeyaml/2.0/snakeyaml-2.0.jar
MD5: caf24b81b9d57e6d4f68b1ccd36e00a3
SHA1: 3aab2116756442bf0d4cd1c089b24d34c3baa253
SHA256:880c9d896e4b74a06c549c15ca496450165d6909fa15d7e662bee8f6a66d7afa
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
snakeyaml-2.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.bedework/bw-util-opensearch@6.1.0-SNAPSHOT

Identifiers

t-digest-3.2.jar

Description:

Data structure which allows accurate estimation of quantiles and related rank statistics

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/tdunning/t-digest/3.2/t-digest-3.2.jar
MD5: 4b8777b2b4e278aace50b2c068ce7c63
SHA1: 2ab94758b0276a8a26102adf8d528cf6d0567b9a
SHA256:03db291a8887b474f90db67bfb1f92d084e990150037e231babbb374ee11d7c3
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
t-digest-3.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

zstd-jni-1.5.5-5.jar

Description:

JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.

License:

BSD 2-Clause License: https://opensource.org/licenses/BSD-2-Clause
File Path: /home/runner/.m2/repository/com/github/luben/zstd-jni/1.5.5-5/zstd-jni-1.5.5-5.jar
MD5: 0e164757192c4dcf3c524f6cabeb8494
SHA1: 74ffdc5f140080adacf5278287aadd950179f848
SHA256:c78d4e139894f555d956d12fbfcf3d45af751d4b2f183880ed5f99b69b284416
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile
zstd-jni-1.5.5-5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.opensearch/opensearch@2.18.0

Identifiers

zstd-jni-1.5.5-5.jar: libzstd-jni-1.5.5-5.dll

File Path: /home/runner/.m2/repository/com/github/luben/zstd-jni/1.5.5-5/zstd-jni-1.5.5-5.jar/win/amd64/libzstd-jni-1.5.5-5.dll
MD5: dd7b3e9fa3d360d0631352a8fca476c4
SHA1: cd9aef493ac65a086ac2a1ae69b6a8e3e445b41a
SHA256:e6cf254c5e379b4b7d65a727dc7c1f49391cfc6fc79045d75687d01ea841eb3b
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile

Identifiers

  • None

zstd-jni-1.5.5-5.jar: libzstd-jni-1.5.5-5.dll

File Path: /home/runner/.m2/repository/com/github/luben/zstd-jni/1.5.5-5/zstd-jni-1.5.5-5.jar/win/x86/libzstd-jni-1.5.5-5.dll
MD5: cb9f5dcd507a3ebf8f6b085507d9616f
SHA1: 5283b3a6f6b26232063c5c0b50b5c532a23c2cb4
SHA256:f3dfe7c2d81f2ee311c49c39d7b131581a15a71499b51eb6f7fe082c2904b1a1
Referenced In Project/Scope: Bedework: opensearch related utility classes:compile

Identifiers

  • None


This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.