Press CTR-C to copy XML [help]


Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

 Sponsor

Project: root project 'gradle-plugins'

io.freefair.gradle:gradle-plugins:8.2.2

Scan Information (show all):

Summary

Display: Showing Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
aether-api-1.0.0.v20140518.jarpkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518 030
aether-impl-1.0.0.v20140518.jarpkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518 030
aether-spi-1.0.0.v20140518.jarpkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518 030
aether-util-1.0.0.v20140518.jarpkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518 032
annotations-13.0.jarpkg:maven/org.jetbrains/annotations@13.0 035
aopalliance-1.0.jarpkg:maven/aopalliance/aopalliance@1.0 011
apiguardian-api-1.1.2.jarpkg:maven/org.apiguardian/apiguardian-api@1.1.2 028
asm-9.5.jarpkg:maven/org.ow2.asm/asm@9.5 022
asm-analysis-9.5.jarpkg:maven/org.ow2.asm/asm-analysis@9.5 031
asm-commons-9.5.jarpkg:maven/org.ow2.asm/asm-commons@9.5 028
asm-tree-9.5.jarpkg:maven/org.ow2.asm/asm-tree@9.5 028
asm-util-9.5.jarpkg:maven/org.ow2.asm/asm-util@9.5 028
aspectj-plugin-8.2.2.jarpkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2 013
assertj-core-3.24.2.jarpkg:maven/org.assertj/assertj-core@3.24.2 034
byte-buddy-1.12.21.jarpkg:maven/net.bytebuddy/byte-buddy@1.12.21 032
cdi-api-1.2.jarcpe:2.3:a:redhat:jboss_weld:1.2:*:*:*:*:*:*:*pkg:maven/javax.enterprise/cdi-api@1.2 0Low72
classgraph-4.8.149.jarpkg:maven/io.github.classgraph/classgraph@4.8.149 045
classgraph-4.8.162.jarpkg:maven/io.github.classgraph/classgraph@4.8.162 045
code-generator-api-8.2.2.jarpkg:maven/io.freefair.gradle/code-generator-api@8.2.2 013
code-generator-plugin-8.2.2.jarpkg:maven/io.freefair.gradle/code-generator-plugin@8.2.2 013
commons-codec-1.11.jarpkg:maven/commons-codec/commons-codec@1.11 0106
commons-collections-3.2.1.jarcpe:2.3:a:apache:commons_collections:3.2.1:*:*:*:*:*:*:*pkg:maven/commons-collections/commons-collections@3.2.1HIGH1Highest83
commons-compress-1.23.0.jarcpe:2.3:a:apache:commons_compress:1.23.0:*:*:*:*:*:*:*pkg:maven/org.apache.commons/commons-compress@1.23.0 0Highest111
commons-io-2.11.0.jarcpe:2.3:a:apache:commons_io:2.11.0:*:*:*:*:*:*:*pkg:maven/commons-io/commons-io@2.11.0 0Highest126
commons-lang-2.4.jarpkg:maven/commons-lang/commons-lang@2.4 0107
commons-logging-1.2.jarpkg:maven/commons-logging/commons-logging@1.2 0120
compress-plugin-8.2.2.jarpkg:maven/io.freefair.gradle/compress-plugin@8.2.2 013
converter-gson-2.9.0.jarpkg:maven/com.squareup.retrofit2/converter-gson@2.9.0 021
dec-0.1.2.jarpkg:maven/org.brotli/dec@0.1.2 026
doxia-logging-api-1.11.1.jarpkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1 031
doxia-sink-api-1.11.1.jarpkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1 031
embedded-sass-plugin-8.2.2.jarpkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2 013
git-plugin-8.2.2.jarpkg:maven/io.freefair.gradle/git-plugin@8.2.2 013
github-plugin-8.2.2.jarpkg:maven/io.freefair.gradle/github-plugin@8.2.2 013
gradle-node-plugin-5.0.0.jarpkg:maven/com.github.node-gradle/gradle-node-plugin@5.0.0 013
gson-2.8.5.jarcpe:2.3:a:google:gson:2.8.5:*:*:*:*:*:*:*pkg:maven/com.google.code.gson/gson@2.8.5HIGH1Highest28
guava-16.0.1.jarcpe:2.3:a:google:guava:16.0.1:*:*:*:*:*:*:*pkg:maven/com.google.guava/guava@16.0.1HIGH3Highest22
httpclient-4.5.14.jarcpe:2.3:a:apache:httpclient:4.5.14:*:*:*:*:*:*:*pkg:maven/org.apache.httpcomponents/httpclient@4.5.14 0Highest35
httpcore-4.4.16.jarpkg:maven/org.apache.httpcomponents/httpcore@4.4.16 035
jackson-annotations-2.14.2.jarcpe:2.3:a:fasterxml:jackson-modules-java8:2.14.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2 0Low41
jackson-annotations-2.15.2.jarcpe:2.3:a:fasterxml:jackson-modules-java8:2.15.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2 0Low41
jackson-core-2.14.2.jarcpe:2.3:a:fasterxml:jackson-modules-java8:2.14.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2 0Low48
jackson-core-2.15.2.jarcpe:2.3:a:fasterxml:jackson-modules-java8:2.15.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2 0Low50
jackson-databind-2.14.2.jarcpe:2.3:a:fasterxml:jackson-databind:2.14.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2MEDIUM1Highest44
jackson-databind-2.15.2.jarcpe:2.3:a:fasterxml:jackson-databind:2.15.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2MEDIUM1Highest44
jacoco-plugin-8.2.2.jarpkg:maven/io.freefair.gradle/jacoco-plugin@8.2.2 013
javapoet-1.13.0.jarpkg:maven/com.squareup/javapoet@1.13.0 026
javax.annotation-api-1.2.jarpkg:maven/javax.annotation/javax.annotation-api@1.2 047
javax.inject-1.jarpkg:maven/javax.inject/javax.inject@1 011
jna-5.6.0.jarcpe:2.3:a:oracle:java_se:5.6.0:*:*:*:*:*:*:*pkg:maven/net.java.dev.jna/jna@5.6.0 0Low42
jsoup-1.16.1.jarcpe:2.3:a:jsoup:jsoup:1.16.1:*:*:*:*:*:*:*pkg:maven/org.jsoup/jsoup@1.16.1 0Highest43
jtidy-r938.jarcpe:2.3:a:jtidy_project:jtidy:r938:*:*:*:*:*:*:*pkg:maven/net.sf.jtidy/jtidy@r938HIGH1Highest56
junit-jupiter-api-5.10.0.jarpkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.0 031
junit-platform-commons-1.10.0.jarpkg:maven/org.junit.platform/junit-platform-commons@1.10.0 035
kotlin-android-extensions-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-android-extensions@1.8.20 0Low21
kotlin-annotation-processing-gradle-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-annotation-processing-gradle@1.8.20 0Low18
kotlin-compiler-embeddable-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.8.20 0Low17
kotlin-compiler-runner-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-compiler-runner@1.8.20 0Low18
kotlin-daemon-client-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-daemon-client@1.8.20 0Low20
kotlin-daemon-embeddable-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-daemon-embeddable@1.8.20 0Low20
kotlin-gradle-plugin-1.8.20-gradle76.jar (shaded: com.github.gundy:semver4j:0.16.4)pkg:maven/com.github.gundy/semver4j@0.16.4 015
kotlin-gradle-plugin-1.8.20-gradle76.jar (shaded: com.google.code.gson:gson:2.8.9)cpe:2.3:a:google:gson:2.8.9:*:*:*:*:*:*:*pkg:maven/com.google.code.gson/gson@2.8.9 0Highest9
kotlin-gradle-plugin-1.8.20-gradle76.jar (shaded: com.google.guava:guava:29.0-jre)cpe:2.3:a:google:guava:29.0:*:*:*:*:*:*:*pkg:maven/com.google.guava/guava@29.0-jreHIGH2Highest9
kotlin-gradle-plugin-1.8.20-gradle76.jar (shaded: org.antlr:antlr4-runtime:4.5.2-1)pkg:maven/org.antlr/antlr4-runtime@4.5.2-1 09
kotlin-gradle-plugin-1.8.20-gradle76.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20 0Low20
kotlin-gradle-plugin-annotations-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-annotations@1.8.20 0Low19
kotlin-gradle-plugin-api-1.8.20-gradle76.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.8.20 0Low21
kotlin-gradle-plugin-idea-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-idea@1.8.20 0Low14
kotlin-gradle-plugin-idea-proto-1.8.20.jar (shaded: com.google.protobuf:protobuf-java:3.21.9)cpe:2.3:a:google:protobuf-java:3.21.9:*:*:*:*:*:*:*
cpe:2.3:a:protobuf:protobuf:3.21.9:*:*:*:*:*:*:*		pkg:maven/com.google.protobuf/protobuf-java@3.21.9 0Highest9
kotlin-gradle-plugin-idea-proto-1.8.20.jar (shaded: com.google.protobuf:protobuf-kotlin:3.21.9)cpe:2.3:a:google:protobuf-kotlin:3.21.9:*:*:*:*:*:*:*
cpe:2.3:a:protobuf:protobuf:3.21.9:*:*:*:*:*:*:*		pkg:maven/com.google.protobuf/protobuf-kotlin@3.21.9 0Highest9
kotlin-gradle-plugin-idea-proto-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-idea-proto@1.8.20 0Low21
kotlin-gradle-plugin-model-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-model@1.8.20 0Low21
kotlin-klib-commonizer-api-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-api@1.8.20 0Low19
kotlin-klib-commonizer-embeddable-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.8.20 0Low20
kotlin-native-utils-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*
cpe:2.3:a:utils_project:utils:1.8.20:*:*:*:*:*:*:*		pkg:maven/org.jetbrains.kotlin/kotlin-native-utils@1.8.20 0Low19
kotlin-project-model-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-project-model@1.8.20 0Low21
kotlin-reflect-1.6.10.jarcpe:2.3:a:jetbrains:kotlin:1.6.10:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.6.10 0Low23
kotlin-reflect-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.8.20 0Low23
kotlin-script-runtime-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-script-runtime@1.8.20 0Low19
kotlin-scripting-common-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-scripting-common@1.8.20 0Low18
kotlin-scripting-compiler-embeddable-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20 0Low21
kotlin-scripting-compiler-impl-embeddable-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-impl-embeddable@1.8.20 0Low20
kotlin-scripting-jvm-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-scripting-jvm@1.8.20 0Low19
kotlin-stdlib-1.6.20.jarcpe:2.3:a:jetbrains:kotlin:1.6.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.6.20 0Low17
kotlin-stdlib-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-stdlib@1.8.20 0Low17
kotlin-stdlib-common-1.6.20.jarcpe:2.3:a:jetbrains:kotlin:1.6.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.6.20 0Low13
kotlin-stdlib-common-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.8.20 0Low13
kotlin-stdlib-jdk7-1.6.20.jarcpe:2.3:a:jetbrains:kotlin:1.6.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.6.20 0Low22
kotlin-stdlib-jdk7-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.8.20 0Low19
kotlin-stdlib-jdk8-1.6.20.jarcpe:2.3:a:jetbrains:kotlin:1.6.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.6.20 0Low20
kotlin-stdlib-jdk8-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20 0Low19
kotlin-tooling-core-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-tooling-core@1.8.20 0Low14
kotlin-util-io-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-util-io@1.8.20 0Low19
kotlin-util-klib-1.8.20.jarcpe:2.3:a:jetbrains:kotlin:1.8.20:*:*:*:*:*:*:*pkg:maven/org.jetbrains.kotlin/kotlin-util-klib@1.8.20 0Low19
kotlinx-coroutines-core-jvm-1.5.0.jarpkg:maven/org.jetbrains.kotlinx/kotlinx-coroutines-core-jvm@1.5.0 013
logging-interceptor-4.11.0.jarcpe:2.3:a:squareup:okhttp:4.11.0:*:*:*:*:*:*:*
cpe:2.3:a:squareup:okhttp3:4.11.0:*:*:*:*:*:*:*		pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0 0Low17
lombok-1.18.28.jarpkg:maven/org.projectlombok/lombok@1.18.28 016
lombok-1.18.28.jar: mavenEcjBootstrapAgent.jar 07
lombok-plugin-8.2.2.jarpkg:maven/io.freefair.gradle/lombok-plugin@8.2.2 013
maven-aether-provider-3.2.5.jarpkg:maven/org.apache.maven/maven-aether-provider@3.2.5 028
maven-artifact-3.2.5.jarpkg:maven/org.apache.maven/maven-artifact@3.2.5 028
maven-core-3.2.5.jarcpe:2.3:a:apache:maven:3.2.5:*:*:*:*:*:*:*pkg:maven/org.apache.maven/maven-core@3.2.5CRITICAL1Highest26
maven-model-3.2.5.jarpkg:maven/org.apache.maven/maven-model@3.2.5 028
maven-model-3.9.4.jarpkg:maven/org.apache.maven/maven-model@3.9.4 029
maven-model-builder-3.2.5.jarpkg:maven/org.apache.maven/maven-model-builder@3.2.5 034
maven-plugin-8.2.2.jarcpe:2.3:a:gradle:maven:8.2.2:*:*:*:*:*:*:*pkg:maven/io.freefair.gradle/maven-plugin@8.2.2 0Highest13
maven-plugin-annotations-3.9.0.jarpkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.9.0 029
maven-plugin-api-3.2.5.jarpkg:maven/org.apache.maven/maven-plugin-api@3.2.5 028
maven-plugin-plugin-3.9.0.jarpkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0 035
maven-plugin-plugin-8.2.2.jarcpe:2.3:a:gradle:maven:8.2.2:*:*:*:*:*:*:*pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2 0Highest13
maven-plugin-tools-annotations-3.9.0.jarpkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0 031
maven-plugin-tools-api-3.9.0.jarpkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-api@3.9.0 031
maven-plugin-tools-generators-3.9.0.jarpkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0 031
maven-plugin-tools-java-3.9.0.jarpkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-java@3.9.0 031
maven-reporting-api-3.1.1.jarpkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1 038
maven-repository-metadata-3.2.5.jarpkg:maven/org.apache.maven/maven-repository-metadata@3.2.5 028
maven-settings-3.2.5.jarpkg:maven/org.apache.maven/maven-settings@3.2.5CRITICAL128
maven-settings-builder-3.2.5.jarpkg:maven/org.apache.maven/maven-settings-builder@3.2.5 028
mkdocs-plugin-8.2.2.jarcpe:2.3:a:mkdocs:mkdocs:8.2.2:*:*:*:*:*:*:*pkg:maven/io.freefair.gradle/mkdocs-plugin@8.2.2 0Highest13
okhttp-4.11.0.jarcpe:2.3:a:squareup:okhttp:4.11.0:*:*:*:*:*:*:*
cpe:2.3:a:squareup:okhttp3:4.11.0:*:*:*:*:*:*:*		pkg:maven/com.squareup.okhttp3/okhttp@4.11.0 0Low15
okhttp-plugin-8.2.2.jarpkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2 013
okio-jvm-3.2.0.jarcpe:2.3:a:squareup:okio:3.2.0:*:*:*:*:*:*:*pkg:maven/com.squareup.okio/okio-jvm@3.2.0HIGH1Low17
opentest4j-1.3.0.jarpkg:maven/org.opentest4j/opentest4j@1.3.0 023
org.eclipse.sisu.inject-0.3.5.jarpkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5 032
org.eclipse.sisu.plexus-0.3.5.jarpkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5 030
org.jacoco.agent-0.8.9.jarpkg:maven/org.jacoco/org.jacoco.agent@0.8.9 029
org.jacoco.agent-0.8.9.jar: jacocoagent.jar (shaded: org.jacoco:org.jacoco.agent.rt:0.8.9)pkg:maven/org.jacoco/org.jacoco.agent.rt@0.8.9 09
org.jacoco.agent-0.8.9.jar: jacocoagent.jar 019
org.jacoco.ant-0.8.9.jarcpe:2.3:a:apache:ant:0.8.9:*:*:*:*:*:*:*pkg:maven/org.jacoco/org.jacoco.ant@0.8.9 0Low29
org.jacoco.core-0.8.9.jarpkg:maven/org.jacoco/org.jacoco.core@0.8.9 029
org.jacoco.report-0.8.9.jarpkg:maven/org.jacoco/org.jacoco.report@0.8.9 029
org.jacoco.report-0.8.9.jar: prettify.js 00
org.jacoco.report-0.8.9.jar: sort.js 00
packageurl-java-1.4.1.jarpkg:maven/com.github.package-url/packageurl-java@1.4.1 030
plantuml-1.2023.10.jarcpe:2.3:a:plantuml:plantuml:1.2023.10:*:*:*:*:*:*:*pkg:maven/net.sourceforge.plantuml/plantuml@1.2023.10 0Highest22
plantuml-1.2023.10.jar: default.js 00
plantuml-1.2023.10.jar: onmouseinteractivefooter.js 00
plantuml-plugin-8.2.2.jarcpe:2.3:a:plantuml:plantuml:8.2.2:*:*:*:*:*:*:*pkg:maven/io.freefair.gradle/plantuml-plugin@8.2.2 0Highest13
plexus-archiver-4.7.1.jarcpe:2.3:a:codehaus-plexus:plexus-archiver:4.7.1:*:*:*:*:*:*:*pkg:maven/org.codehaus.plexus/plexus-archiver@4.7.1CRITICAL1Highest25
plexus-build-api-0.0.7.jarpkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7 029
plexus-cipher-1.4.jarpkg:maven/org.sonatype.plexus/plexus-cipher@1.4 033
plexus-classworlds-2.5.2.jarpkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2 029
plexus-component-annotations-1.5.5.jarpkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5 030
plexus-interpolation-1.21.jarpkg:maven/org.codehaus.plexus/plexus-interpolation@1.21 028
plexus-io-3.4.1.jarpkg:maven/org.codehaus.plexus/plexus-io@3.4.1 027
plexus-java-1.1.2.jarpkg:maven/org.codehaus.plexus/plexus-java@1.1.2 030
plexus-sec-dispatcher-1.3.jarpkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3 033
plexus-utils-3.5.1.jarcpe:2.3:a:plexus-utils_project:plexus-utils:3.5.1:*:*:*:*:*:*:*
cpe:2.3:a:utils_project:utils:3.5.1:*:*:*:*:*:*:*		pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1 0Highest30
plexus-velocity-1.2.jarpkg:maven/org.codehaus.plexus/plexus-velocity@1.2 028
plugin-utils-8.2.2.jarcpe:2.3:a:utils_project:utils:8.2.2:*:*:*:*:*:*:*pkg:maven/io.freefair.gradle/plugin-utils@8.2.2 0Highest13
protobuf-java-3.23.4.jarcpe:2.3:a:google:protobuf-java:3.23.4:*:*:*:*:*:*:*
cpe:2.3:a:protobuf:protobuf:3.23.4:*:*:*:*:*:*:*		pkg:maven/com.google.protobuf/protobuf-java@3.23.4 0Low24
qdox-2.0.3.jarpkg:maven/com.thoughtworks.qdox/qdox@2.0.3 052
quicktype-plugin-8.2.2.jarpkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2 013
retrofit-2.9.0.jarcpe:2.3:a:squareup:retrofit:2.9.0:*:*:*:*:*:*:*pkg:maven/com.squareup.retrofit2/retrofit@2.9.0 0Low13
sass-embedded-host-1.15.2.jarpkg:maven/de.larsgrefer.sass/sass-embedded-host@1.15.2 019
sass-embedded-protocol-1.15.2.jarpkg:maven/de.larsgrefer.sass/sass-embedded-protocol@1.15.2 015
settings-plugin-8.2.2.jarpkg:maven/io.freefair.gradle/settings-plugin@8.2.2 013
sisu-guice-3.2.3-no_aop.jarpkg:maven/org.sonatype.sisu/sisu-guice@3.2.3 032
slf4j-api-1.7.36.jarpkg:maven/org.slf4j/slf4j-api@1.7.36 032
slf4j-api-2.0.7.jarpkg:maven/org.slf4j/slf4j-api@2.0.7 034
snappy-0.4.jarpkg:maven/org.iq80.snappy/snappy@0.4 035
trove4j-1.0.20200330.jarpkg:maven/org.jetbrains.intellij.deps/trove4j@1.0.20200330 011
velocity-1.7.jarcpe:2.3:a:apache:velocity_engine:1.7:*:*:*:*:*:*:*pkg:maven/org.apache.velocity/velocity@1.7HIGH1Highest27
wagon-provider-api-2.4.jarcpe:2.3:a:apache:maven_wagon:2.4:*:*:*:*:*:*:*pkg:maven/org.apache.maven.wagon/wagon-provider-api@2.4 0Highest28
webjars-locator-core-0.53.jarpkg:maven/org.webjars/webjars-locator-core@0.53 026
xz-1.9.jarcpe:2.3:a:tukaani:xz:1.9:*:*:*:*:*:*:*pkg:maven/org.tukaani/xz@1.9 0Highest24
zstd-jni-1.5.5-2.jarpkg:maven/com.github.luben/zstd-jni@1.5.5-2 030

Dependencies (vulnerable)

aether-api-1.0.0.v20140518.jar

Description:

    The application programming interface for the repository system.

License:

http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.aether/aether-api/1.0.0.v20140518/be68e917f454dcd841865ad7cf9b7615b26a51f7/aether-api-1.0.0.v20140518.jar
MD5: b05ef5410dad83a4e9ba50e08e0dbbf4
SHA1: be68e917f454dcd841865ad7cf9b7615b26a51f7
SHA256:84b98521684ab22f9528470fa6d8ab68a230e1b211623c989ba7016c306eb773
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

aether-api-1.0.0.v20140518.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

aether-impl-1.0.0.v20140518.jar

Description:

    An implementation of the repository system.

License:

http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.aether/aether-impl/1.0.0.v20140518/a5ee67be2c99dfb95ad61235d749c92ae09c926e/aether-impl-1.0.0.v20140518.jar
MD5: 819d1c095629b2bd9ed0980395c91b7d
SHA1: a5ee67be2c99dfb95ad61235d749c92ae09c926e
SHA256:9a9b60e685385225f08e662cb9f60d96610b0987f0f47bbf3f0c92df8a897d00
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

aether-impl-1.0.0.v20140518.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

aether-spi-1.0.0.v20140518.jar

Description:

    The service provider interface for repository system implementations and repository connectors.

License:

http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.aether/aether-spi/1.0.0.v20140518/985a9a12b904fb3bafd4dc6b49f6a084845703a1/aether-spi-1.0.0.v20140518.jar
MD5: 51c5870c01f48af3231ce6499464827a
SHA1: 985a9a12b904fb3bafd4dc6b49f6a084845703a1
SHA256:a3266d127a4e9f4aa9c4fa0986e31eec784e866f79112e1840d1667e17c10fb2
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

aether-spi-1.0.0.v20140518.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

aether-util-1.0.0.v20140518.jar

Description:

    A collection of utility classes to ease usage of the repository system.

License:

http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.aether/aether-util/1.0.0.v20140518/7df5ba98ce8b78985d75fdd8c2981fe69234ef85/aether-util-1.0.0.v20140518.jar
MD5: 08495ee7ecf90f0b528e7d65471532af
SHA1: 7df5ba98ce8b78985d75fdd8c2981fe69234ef85
SHA256:aff0951639837c4e3a4699a421fa79f410032f603f5c6a5bba435e98531f3984
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

aether-util-1.0.0.v20140518.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

annotations-13.0.jar

Description:

A set of annotations used for code inspection support and code documentation.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains/annotations/13.0/919f0dfe192fb4e063e7dacadee7f8bb9a2672a9/annotations-13.0.jar
MD5: f4fb462172517b46b6cd90003508515a
SHA1: 919f0dfe192fb4e063e7dacadee7f8bb9a2672a9
SHA256:ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • quicktype-plugin:kotlinCompilerPluginClasspathMain
  • maven-plugin-plugin:compileClasspath
  • okhttp-plugin:runtimeClasspath
  • quicktype-plugin:apiDependenciesMetadata
  • quicktype-plugin:kotlinKlibCommonizerClasspath
  • maven-plugin-plugin:runtimeClasspath
  • okhttp-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata
  • quicktype-plugin:runtimeClasspath
  • github-plugin:compileClasspath
  • quicktype-plugin:kotlinCompilerPluginClasspathTest
  • quicktype-plugin:compileClasspath
  • github-plugin:runtimeClasspath
  • maven-plugin:compileClasspath
  • maven-plugin:runtimeClasspath
  • quicktype-plugin:kotlinCompilerClasspath

annotations-13.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.8.20
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20
  • pkg:maven/com.squareup.okhttp3/okhttp@4.11.0
  • pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.8.20
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0
  • pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.8.20
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp@4.11.0
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0
  • pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20

Identifiers

aopalliance-1.0.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/aopalliance/aopalliance/1.0/235ba8b489512805ac13a8f9ea77a1ca5ebe3e8/aopalliance-1.0.jar
MD5: 04177054e180d09e3998808efa0401c7
SHA1: 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
SHA256:0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

aopalliance-1.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

apiguardian-api-1.1.2.jar

Description:

@API Guardian

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apiguardian/apiguardian-api/1.1.2/a231e0d844d2721b0fa1b238006d15c6ded6842a/apiguardian-api-1.1.2.jar
MD5: 8c7de3f82037fa4a2e8be2a2f13092af
SHA1: a231e0d844d2721b0fa1b238006d15c6ded6842a
SHA256:b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38
Referenced In Project/Scope: test-common:compileClasspath
apiguardian-api-1.1.2.jar is in the transitive dependency tree of the listed items.Included by:

  • pkg:maven/org.junit/junit-bom@5.10.0
  • pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.0

Identifiers

asm-9.5.jar

License:

BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.ow2.asm/asm/9.5/dc6ea1875f4d64fbc85e1691c95b96a3d8569c90/asm-9.5.jar
MD5: 29721ee4b5eacf0a34b204c345c8bc69
SHA1: dc6ea1875f4d64fbc85e1691c95b96a3d8569c90
SHA256:b62e84b5980729751b0458c534cf1366f727542bb8d158621335682a460f0353
Referenced In Projects/Scopes:
  • quicktype-plugin:jacocoAnt
  • code-generator-api:jacocoAnt
  • compress-plugin:jacocoAnt
  • documentation:javadocClasspath
  • maven-plugin-plugin:jacocoAnt
  • okhttp-plugin:jacocoAnt
  • maven-plugin-plugin:compileClasspath
  • aspectj-plugin:jacocoAnt
  • jacoco-plugin:jacocoAnt
  • maven-plugin-plugin:runtimeClasspath
  • plugin-utils:jacocoAnt
  • maven-plugin:jacocoAnt
  • settings-plugin:jacocoAnt
  • jacoco-plugin:compileClasspath
  • mkdocs-plugin:jacocoAnt
  • plantuml-plugin:jacocoAnt
  • github-plugin:jacocoAnt
  • embedded-sass-plugin:jacocoAnt
  • lombok-plugin:jacocoAnt
  • test-common:jacocoAnt
  • test-code-generator:jacocoAnt
  • code-generator-plugin:jacocoAnt
  • git-plugin:jacocoAnt

asm-9.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9

Identifiers

asm-analysis-9.5.jar

License:

BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.ow2.asm/asm-analysis/9.5/490bacc77de7cbc0be1a30bb3471072d705be4a4/asm-analysis-9.5.jar
MD5: 4df0adafc78ebba404d4037987d36b61
SHA1: 490bacc77de7cbc0be1a30bb3471072d705be4a4
SHA256:39f1cf1791335701c3b02cae7b2bc21057ec9a55b2240789cb6d552b2b2c62fa
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

asm-analysis-9.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0

Identifiers

asm-commons-9.5.jar

License:

BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.ow2.asm/asm-commons/9.5/19ab5b5800a3910d30d3a3e64fdb00fd0cb42de0/asm-commons-9.5.jar
MD5: 7d1fce986192f71722b19754e4cb9e61
SHA1: 19ab5b5800a3910d30d3a3e64fdb00fd0cb42de0
SHA256:72eee9fbafb9de8d9463f20dd584a48ceeb7e5152ad4c987bfbe17dd4811c9ae
Referenced In Projects/Scopes:
  • quicktype-plugin:jacocoAnt
  • code-generator-api:jacocoAnt
  • compress-plugin:jacocoAnt
  • documentation:javadocClasspath
  • maven-plugin-plugin:jacocoAnt
  • okhttp-plugin:jacocoAnt
  • maven-plugin-plugin:compileClasspath
  • aspectj-plugin:jacocoAnt
  • jacoco-plugin:jacocoAnt
  • maven-plugin-plugin:runtimeClasspath
  • plugin-utils:jacocoAnt
  • maven-plugin:jacocoAnt
  • settings-plugin:jacocoAnt
  • jacoco-plugin:compileClasspath
  • mkdocs-plugin:jacocoAnt
  • plantuml-plugin:jacocoAnt
  • github-plugin:jacocoAnt
  • embedded-sass-plugin:jacocoAnt
  • lombok-plugin:jacocoAnt
  • test-common:jacocoAnt
  • test-code-generator:jacocoAnt
  • code-generator-plugin:jacocoAnt
  • git-plugin:jacocoAnt

asm-commons-9.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9

Identifiers

asm-tree-9.5.jar

License:

BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.ow2.asm/asm-tree/9.5/fd33c8b6373abaa675be407082fdfda35021254a/asm-tree-9.5.jar
MD5: 44755681b7d6fa7143afbb438e55c20c
SHA1: fd33c8b6373abaa675be407082fdfda35021254a
SHA256:3c33a648191079aeaeaeb7c19a49b153952f9e40fe86fbac5205554ddd9acd94
Referenced In Projects/Scopes:
  • quicktype-plugin:jacocoAnt
  • code-generator-api:jacocoAnt
  • compress-plugin:jacocoAnt
  • documentation:javadocClasspath
  • maven-plugin-plugin:jacocoAnt
  • okhttp-plugin:jacocoAnt
  • maven-plugin-plugin:compileClasspath
  • aspectj-plugin:jacocoAnt
  • jacoco-plugin:jacocoAnt
  • maven-plugin-plugin:runtimeClasspath
  • plugin-utils:jacocoAnt
  • maven-plugin:jacocoAnt
  • settings-plugin:jacocoAnt
  • jacoco-plugin:compileClasspath
  • mkdocs-plugin:jacocoAnt
  • plantuml-plugin:jacocoAnt
  • github-plugin:jacocoAnt
  • embedded-sass-plugin:jacocoAnt
  • lombok-plugin:jacocoAnt
  • test-common:jacocoAnt
  • test-code-generator:jacocoAnt
  • code-generator-plugin:jacocoAnt
  • git-plugin:jacocoAnt

asm-tree-9.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9

Identifiers

asm-util-9.5.jar

License:

BSD-3-Clause;link=https://asm.ow2.io/LICENSE.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.ow2.asm/asm-util/9.5/64b5a1fc8c1b15ed2efd6a063e976bc8d3dc5ffe/asm-util-9.5.jar
MD5: ad0016249fb68bb9196babefd47b80dc
SHA1: 64b5a1fc8c1b15ed2efd6a063e976bc8d3dc5ffe
SHA256:c467f1bb3c08888f47243e2d475209b34a772d627e44fca06752e18bb038bd74
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

asm-util-9.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0

Identifiers

aspectj-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/aspectj-plugin/build/libs/aspectj-plugin-8.2.2.jar
MD5: 5150603daf79adb5e89ef62ae3ab46d8
SHA1: 82f91f29a77295bbf834e67f41e8fc3f527b1acf
SHA256:707f896bde9783a8a8be9db53497195c41cb8f0b76b4c2e60211b2418c6246b7
Referenced In Project/Scope: documentation:javadocClasspath
aspectj-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

assertj-core-3.24.2.jar

Description:

Rich and fluent assertions for testing in Java

License:

"Apache License, Version 2.0";link="https://www.apache.org/licenses/LICENSE-2.0.txt"
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.assertj/assertj-core/3.24.2/ebbf338e33f893139459ce5df023115971c2786f/assertj-core-3.24.2.jar
MD5: b596a91049e6ce526bc5595c1bebea2c
SHA1: ebbf338e33f893139459ce5df023115971c2786f
SHA256:df3d0b348f1fe806bdddcb10fa4ae63c6679e9888d4bc7055f09848517976aa3
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • test-common:compileClasspath
  • test-common:runtimeClasspath

assertj-core-3.24.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/io.freefair.gradle/test-common@8.2.2

Identifiers

byte-buddy-1.12.21.jar

Description:

        Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.bytebuddy/byte-buddy/1.12.21/1a257bbdb9288f2558d3767cc2cc22b499d5091c/byte-buddy-1.12.21.jar
MD5: 50a7c31e5a3b01c15df6a5415e7b3cdb
SHA1: 1a257bbdb9288f2558d3767cc2cc22b499d5091c
SHA256:f6f45c2237a7f132c16745ad2a52c4cdde58028b11ee80b09f0d422f4930d685
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • test-common:compileClasspath
  • test-common:runtimeClasspath

byte-buddy-1.12.21.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/org.assertj/assertj-core@3.24.2
  • pkg:maven/org.assertj/assertj-core@3.24.2

Identifiers

cdi-api-1.2.jar

Description:

APIs for CDI (Contexts and Dependency Injection for Java EE)

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/javax.enterprise/cdi-api/1.2/53bba91dc3968adf411e076df020cf207283d7dc/cdi-api-1.2.jar
MD5: 2a8c973affa178efb89e6c50f78d79da
SHA1: 53bba91dc3968adf411e076df020cf207283d7dc
SHA256:cc5ce2cbc62fe96bf59af00bba00bde823a1094462b4364747863510b76c0518
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

cdi-api-1.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

classgraph-4.8.149.jar

Description:

The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.

License:

The MIT License (MIT): http://opensource.org/licenses/MIT
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/io.github.classgraph/classgraph/4.8.149/4bc2f188bc9001473d4a26ac488c2ae1a3e906de/classgraph-4.8.149.jar
MD5: 7fca2eb70908395af9ac43858b428c35
SHA1: 4bc2f188bc9001473d4a26ac488c2ae1a3e906de
SHA256:ece8abfe1277450a8b95e57fc56991dca1fd42ffefdad88f65fe171ac576f604
Referenced In Projects/Scopes:
  • embedded-sass-plugin:runtimeClasspath
  • embedded-sass-plugin:compileClasspath

classgraph-4.8.149.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.webjars/webjars-locator-core@0.53
  • pkg:maven/org.webjars/webjars-locator-core@0.53

Identifiers

classgraph-4.8.162.jar

Description:

The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.

License:

The MIT License (MIT): http://opensource.org/licenses/MIT
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/io.github.classgraph/classgraph/4.8.162/85bc1625bc8aac51ad32971ebb26a3e35cb97356/classgraph-4.8.162.jar
MD5: 3ded56585fa8cb2900b1abc98386553f
SHA1: 85bc1625bc8aac51ad32971ebb26a3e35cb97356
SHA256:ea30b2d5e29e89d52706bcecf7a6ae3b44682d4a1566a5f22b9453f9be2a970c
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • code-generator-plugin:compileClasspath
  • code-generator-plugin:runtimeClasspath

classgraph-4.8.162.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/code-generator-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/code-generator-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/code-generator-plugin@8.2.2

Identifiers

code-generator-api-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/code-generator-api/build/libs/code-generator-api-8.2.2.jar
MD5: 69422261505f972198d1e34afc6560a0
SHA1: 0288750ae7ad8390b640121167f49c4285a155e3
SHA256:2c6980ffd4f98b21008ae87a4edef5a946a969352ca01c852d83485a5f17f868
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • code-generator-plugin:compileClasspath
  • test-code-generator:compileClasspath
  • test-code-generator:runtimeClasspath
  • code-generator-plugin:runtimeClasspath

code-generator-api-8.2.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/code-generator-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/test-code-generator@8.2.2
  • pkg:maven/io.freefair.gradle/documentation@8.2.2
  • pkg:maven/io.freefair.gradle/code-generator-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/code-generator-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/test-code-generator@8.2.2
  • pkg:maven/io.freefair.gradle/test-code-generator@8.2.2

Identifiers

code-generator-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/code-generator-plugin/build/libs/code-generator-plugin-8.2.2.jar
MD5: 23610260b7ab8d9fb1d80375720f45b6
SHA1: 7a6abe1ab7f7bff71030d3e16490e60a29c8f8ec
SHA256:9a6a8520eded1798b488033de03458dee43e11bcc9e8ba71373644d60cbad56d
Referenced In Project/Scope: documentation:javadocClasspath
code-generator-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

commons-codec-1.11.jar

Description:

     The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/commons-codec/commons-codec/1.11/3acb4705652e16236558f0f4f2192cc33c3bd189/commons-codec-1.11.jar
MD5: 567159b1ae257a43e1391a8f59d24cfe
SHA1: 3acb4705652e16236558f0f4f2192cc33c3bd189
SHA256:e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

commons-codec-1.11.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

commons-collections-3.2.1.jar

Description:

Types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/commons-collections/commons-collections/3.2.1/761ea405b9b37ced573d2df0d1e3a4e0f9edc668/commons-collections-3.2.1.jar
MD5: 13bc641afd7fd95e09b260f69c1e4c91
SHA1: 761ea405b9b37ced573d2df0d1e3a4e0f9edc668
SHA256:87363a4c94eaabeefd8b930cb059f66b64c9f7d632862f23de3012da7660047b
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

commons-collections-3.2.1.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

CVE-2015-6420  

Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
CWE-502 Deserialization of Untrusted Data

CVSSv2:
  • Base Score: HIGH (7.5)
  • Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P

References:

Vulnerable Software & Versions: (show all)

commons-compress-1.23.0.jar

Description:

Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.commons/commons-compress/1.23.0/4af2060ea9b0c8b74f1854c6cafe4d43cfc161fc/commons-compress-1.23.0.jar
MD5: 96b88349958aeaa15cdf6e5e877bdced
SHA1: 4af2060ea9b0c8b74f1854c6cafe4d43cfc161fc
SHA256:c267f17160e9ef662b4d78b7f29dca7c82b15c5cff2cb6a9865ef4ab3dd5b787
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • compress-plugin:compileClasspath
  • compress-plugin:runtimeClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

commons-compress-1.23.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2

Identifiers

commons-io-2.11.0.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/commons-io/commons-io/2.11.0/a2503f302b11ebde7ebc3df41daebe0e4eea3689/commons-io-2.11.0.jar
MD5: 3b4b7ccfaeceeac240b804839ee1a1ca
SHA1: a2503f302b11ebde7ebc3df41daebe0e4eea3689
SHA256:961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

commons-io-2.11.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0

Identifiers

commons-lang-2.4.jar

Description:

        Commons Lang, a package of Java utility classes for the
        classes that are in java.lang's hierarchy, or are considered to be so
        standard as to justify existence in java.lang.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/commons-lang/commons-lang/2.4/16313e02a793435009f1e458fa4af5d879f6fb11/commons-lang-2.4.jar
MD5: 237a8e845441bad2e535c57d985c8204
SHA1: 16313e02a793435009f1e458fa4af5d879f6fb11
SHA256:2c73b940c91250bc98346926270f13a6a10bb6e29d2c9316a70d134e382c873e
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

commons-lang-2.4.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

commons-logging-1.2.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/commons-logging/commons-logging/1.2/4bfc12adfe4842bf07b657f0369c4cb522955686/commons-logging-1.2.jar
MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686
SHA256:daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

commons-logging-1.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

compress-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/compress-plugin/build/libs/compress-plugin-8.2.2.jar
MD5: 5297b56356cc684d64a13538b3201b79
SHA1: a2a32330ffa34678e2a4c7af121a06ea7b4c5aa5
SHA256:b0a2b6e666badd7c6a15a259294f47b933e09f89790ba934d2ae4f640cc1aa96
Referenced In Project/Scope: documentation:javadocClasspath
compress-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

converter-gson-2.9.0.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.squareup.retrofit2/converter-gson/2.9.0/fc93484fc67ab52b1e0ccbdaa3922d8a6678e097/converter-gson-2.9.0.jar
MD5: a4d032098e196d2735c1cff92968ab20
SHA1: fc93484fc67ab52b1e0ccbdaa3922d8a6678e097
SHA256:32aa206b9a29c9df5eda93a092cfb3b0b9133e232c062baa882f0319f0e79f0e
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • github-plugin:compileClasspath
  • github-plugin:runtimeClasspath

converter-gson-2.9.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2

Identifiers

dec-0.1.2.jar

Description:

Brotli is a generic-purpose lossless compression algorithm.

License:

http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.brotli/dec/0.1.2/c26a897ae0d524809eef1c786cc6183b4ddcc3b/dec-0.1.2.jar
MD5: 4b1cd14cf29733941cc536b27e6aedfa
SHA1: 0c26a897ae0d524809eef1c786cc6183b4ddcc3b
SHA256:615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • compress-plugin:compileClasspath
  • compress-plugin:runtimeClasspath

dec-0.1.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2

Identifiers

doxia-logging-api-1.11.1.jar

Description:

Doxia Logging API.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.doxia/doxia-logging-api/1.11.1/ee28757cce6ee0215bac550dead25074c97c532d/doxia-logging-api-1.11.1.jar
MD5: 6452e33a36b87939630e0b18f8ffcff0
SHA1: ee28757cce6ee0215bac550dead25074c97c532d
SHA256:243c66f842cd2b3ded7c6d2c36b177a65c3f5d94800cef988ba3e29ec8cf60c9
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

doxia-logging-api-1.11.1.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

doxia-sink-api-1.11.1.jar

Description:

Doxia Sink API.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.doxia/doxia-sink-api/1.11.1/59c2255f58c78fbbcb7e638e82bd2914e78aec8b/doxia-sink-api-1.11.1.jar
MD5: b1bd5c9efde9f14969fa881b87fe709b
SHA1: 59c2255f58c78fbbcb7e638e82bd2914e78aec8b
SHA256:39ac38bb7d752ea003be17a0065522e4e1b076a4f7e374bea55259f3e133f28f
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

doxia-sink-api-1.11.1.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

embedded-sass-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/embedded-sass-plugin/build/libs/embedded-sass-plugin-8.2.2.jar
MD5: a1182b1bab424021a3dda2d0adeeb207
SHA1: a8f3cd0ceecae2ffcf49d92c3390c0af71155aaf
SHA256:35a8e223984d4e60b3bbd7dbe8994e5274ad60befa3ee9ba2985add1d16df2e9
Referenced In Project/Scope: documentation:javadocClasspath
embedded-sass-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

git-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/git-plugin/build/libs/git-plugin-8.2.2.jar
MD5: 7b05cc8b10b0d83e727af22b86570693
SHA1: fa10764a139a9bd55737c253f2ca3926e8ae8f49
SHA256:e36a7c187866523cf4e5030389d83ed1f63f11f1472a9537cc2b9a5271e1a741
Referenced In Project/Scope: documentation:javadocClasspath
git-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

github-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/github-plugin/build/libs/github-plugin-8.2.2.jar
MD5: 02567675b639330c4d3e15bf1fe22c11
SHA1: 7b3ec30e62fbd3a83694be634abbd14ab780cd51
SHA256:7141d592e16b5cc077aacfebec4286bf9ee4f42b094042fcd4887c1026373bd6
Referenced In Project/Scope: documentation:javadocClasspath
github-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

gradle-node-plugin-5.0.0.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.github.node-gradle/gradle-node-plugin/5.0.0/32619fc6128b09ceaf9554453066fc3b97b89f0d/gradle-node-plugin-5.0.0.jar
MD5: de5da9f0a35e64a1d0a80a2f65c28540
SHA1: 32619fc6128b09ceaf9554453066fc3b97b89f0d
SHA256:5453ac9499de195c290f46e17d6d1776697bc35142334b479fb2f7b118ddb7f4
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

gradle-node-plugin-5.0.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2

Identifiers

gson-2.8.5.jar

Description:

Gson JSON library

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.google.code.gson/gson/2.8.5/f645ed69d595b24d4cf8b3fbb64cc505bede8829/gson-2.8.5.jar
MD5: 089104cb90d8b4e1aa00b1f5faef0742
SHA1: f645ed69d595b24d4cf8b3fbb64cc505bede8829
SHA256:233a0149fc365c9f6edbd683cfe266b19bdc773be98eabdaf6b3c924b48e7d81
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • github-plugin:compileClasspath
  • github-plugin:runtimeClasspath

gson-2.8.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0

Identifiers

CVE-2022-25647  

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.
CWE-502 Deserialization of Untrusted Data

CVSSv2:
  • Base Score: MEDIUM (5.0)
  • Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions: (show all)

guava-16.0.1.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.

    Guava has only one code dependency - javax.annotation,
    per the JSR-305 spec.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.google.guava/guava/16.0.1/5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5/guava-16.0.1.jar
MD5: a68693df58191585d9af914cfbe6067a
SHA1: 5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5
SHA256:a896857d07845d38c7dc5bbc0457b6d9b0f62ecffda010e5e9ec12d561f676d3
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

guava-16.0.1.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

CVE-2023-2976  

Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.

Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.
CWE-552 Files or Directories Accessible to External Parties

CVSSv3:
  • Base Score: HIGH (7.1)
  • Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References:

Vulnerable Software & Versions:

CVE-2018-10237  

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.
CWE-770 Allocation of Resources Without Limits or Throttling

CVSSv2:
  • Base Score: MEDIUM (4.3)
  • Vector: /AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSSv3:
  • Base Score: MEDIUM (5.9)
  • Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions: (show all)

CVE-2020-8908  

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the created directory is world-readable (readable by an attacker with access to the system). The method in question has been marked @Deprecated in versions 30.0 and later and should not be used. For Android developers, we recommend choosing a temporary directory API provided by Android, such as context.getCacheDir(). For other Java developers, we recommend migrating to the Java 7 API java.nio.file.Files.createTempDirectory() which explicitly configures permissions of 700, or configuring the Java runtime's java.io.tmpdir system property to point to a location whose permissions are appropriately configured.
CWE-732 Incorrect Permission Assignment for Critical Resource

CVSSv2:
  • Base Score: LOW (2.1)
  • Vector: /AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSSv3:
  • Base Score: LOW (3.3)
  • Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References:

Vulnerable Software & Versions: (show all)

httpclient-4.5.14.jar

Description:

   Apache HttpComponents Client

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.httpcomponents/httpclient/4.5.14/1194890e6f56ec29177673f2f12d0b8e627dec98/httpclient-4.5.14.jar
MD5: 2cb357c4b763f47e58af6cad47df6ba3
SHA1: 1194890e6f56ec29177673f2f12d0b8e627dec98
SHA256:c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

httpclient-4.5.14.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

httpcore-4.4.16.jar

Description:

   Apache HttpComponents Core (blocking I/O)

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.httpcomponents/httpcore/4.4.16/51cf043c87253c9f58b539c9f7e44c8894223850/httpcore-4.4.16.jar
MD5: 28d2cd9bf8789fd2ec774fb88436ebd1
SHA1: 51cf043c87253c9f58b539c9f7e44c8894223850
SHA256:6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

httpcore-4.4.16.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

jackson-annotations-2.14.2.jar

Description:

Core annotations used for value types, used by Jackson data binding package.

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-annotations/2.14.2/a7aae9525864930723e3453ab799521fdfd9d873/jackson-annotations-2.14.2.jar
MD5: 10d19982a8890f6eb37557af2f58e272
SHA1: a7aae9525864930723e3453ab799521fdfd9d873
SHA256:2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d
Referenced In Project/Scope: quicktype-plugin:runtimeClasspath
jackson-annotations-2.14.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.node-gradle/gradle-node-plugin@5.0.0

Identifiers

jackson-annotations-2.15.2.jar

Description:

Core annotations used for value types, used by Jackson data binding package.

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-annotations/2.15.2/4724a65ac8e8d156a24898d50fd5dbd3642870b8/jackson-annotations-2.15.2.jar
MD5: 71dabcaac955a8bd17b5bba6580aac5b
SHA1: 4724a65ac8e8d156a24898d50fd5dbd3642870b8
SHA256:04e21f94dcfee4b078fa5a5f53047b785aaba69d19de392f616e7a7fe5d3882f
Referenced In Project/Scope: documentation:javadocClasspath
jackson-annotations-2.15.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2

Identifiers

jackson-core-2.14.2.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.14.2/f804090e6399ce0cf78242db086017512dd71fcc/jackson-core-2.14.2.jar
MD5: 6ee422ee4c481b2d5aacb2b5e36a7dc0
SHA1: f804090e6399ce0cf78242db086017512dd71fcc
SHA256:b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a
Referenced In Project/Scope: quicktype-plugin:runtimeClasspath
jackson-core-2.14.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.node-gradle/gradle-node-plugin@5.0.0

Identifiers

jackson-core-2.15.2.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.15.2/a6fe1836469a69b3ff66037c324d75fc66ef137c/jackson-core-2.15.2.jar
MD5: e51fdee85b48e6637ad9e85ee76b58df
SHA1: a6fe1836469a69b3ff66037c324d75fc66ef137c
SHA256:303c99e82b1faa91a0bae5d8fbeb56f7e2adf9b526a900dd723bf140d62bd4b4
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • embedded-sass-plugin:runtimeClasspath
  • embedded-sass-plugin:compileClasspath

jackson-core-2.15.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.webjars/webjars-locator-core@0.53
  • pkg:maven/org.webjars/webjars-locator-core@0.53

Identifiers

jackson-databind-2.14.2.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.14.2/1e71fddbc80bb86f71a6345ac1e8ab8a00e7134/jackson-databind-2.14.2.jar
MD5: c1b12dd14734cd1986132bf55042dd7e
SHA1: 01e71fddbc80bb86f71a6345ac1e8ab8a00e7134
SHA256:501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424
Referenced In Project/Scope: quicktype-plugin:runtimeClasspath
jackson-databind-2.14.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.node-gradle/gradle-node-plugin@5.0.0

Identifiers

CVE-2023-35116  

** DISPUTED ** jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker.
CWE-770 Allocation of Resources Without Limits or Throttling

CVSSv3:
  • Base Score: MEDIUM (4.7)
  • Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions:

jackson-databind-2.15.2.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.15.2/9353b021f10c307c00328f52090de2bdb4b6ff9c/jackson-databind-2.15.2.jar
MD5: 20ac0d0526a456274409fa852eb74087
SHA1: 9353b021f10c307c00328f52090de2bdb4b6ff9c
SHA256:0eb2fdad6e40ab8832a78c9b22f58196dd970594e8d3d5a26ead87847c4f3a96
Referenced In Project/Scope: documentation:javadocClasspath
jackson-databind-2.15.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2

Identifiers

CVE-2023-35116  

** DISPUTED ** jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker.
CWE-770 Allocation of Resources Without Limits or Throttling

CVSSv3:
  • Base Score: MEDIUM (4.7)
  • Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions:

jacoco-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/jacoco-plugin/build/libs/jacoco-plugin-8.2.2.jar
MD5: 219056d45430d7a5456a15759042acf6
SHA1: 8c76faf86d4d218dc3fcd77046fbe1ab2b3710ac
SHA256:8023f6a13a14adcc0668fe65531c71c0a2a5f5384d6b00182c35b6f9810a5222
Referenced In Project/Scope: documentation:javadocClasspath
jacoco-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

javapoet-1.13.0.jar

Description:

Use beautiful Java code to generate beautiful Java code.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.squareup/javapoet/1.13.0/d6562d385049f35eb50403fa86bb11cce76b866a/javapoet-1.13.0.jar
MD5: 8d9a3cbeaa83e6700478b73c33a1b4fe
SHA1: d6562d385049f35eb50403fa86bb11cce76b866a
SHA256:4c7517e848a71b36d069d12bb3bf46a70fd4cda3105d822b0ed2e19c00b69291
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • test-common:compileClasspath
  • test-common:runtimeClasspath

javapoet-1.13.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/io.freefair.gradle/test-common@8.2.2

Identifiers

javax.annotation-api-1.2.jar

Description:

Common Annotations for the JavaTM Platform API

License:

CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/javax.annotation/javax.annotation-api/1.2/479c1e06db31c432330183f5cae684163f186146/javax.annotation-api-1.2.jar
MD5: 75fe320d2b3763bd6883ae1ede35e987
SHA1: 479c1e06db31c432330183f5cae684163f186146
SHA256:5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

javax.annotation-api-1.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

javax.inject-1.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/javax.inject/javax.inject/1/6975da39a7040257bd51d21a231b76c915872d38/javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

javax.inject-1.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

jna-5.6.0.jar

Description:

JNA Library

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.java.dev.jna/jna/5.6.0/330f2244e9030119ab3030fc3fededc86713d9cc/jna-5.6.0.jar
MD5: 56892d6f4d27019833fd53b7cc57ec86
SHA1: 330f2244e9030119ab3030fc3fededc86713d9cc
SHA256:5557e235a8aa2f9766d5dc609d67948f2a8832c2d796cea9ef1d6cbe0b3b7eaf
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:kotlinKlibCommonizerClasspath
  • quicktype-plugin:kotlinCompilerClasspath

jna-5.6.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

jsoup-1.16.1.jar

Description:

jsoup is a Java library for working with real-world HTML. It provides a very convenient API for fetching URLs and extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers do.

License:

The MIT License: https://jsoup.org/license
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jsoup/jsoup/1.16.1/ae551410a16433984cd4a8603622fafa9d8299f0/jsoup-1.16.1.jar
MD5: ed35af29909c856c8ee4c4001d660e0f
SHA1: ae551410a16433984cd4a8603622fafa9d8299f0
SHA256:1f115726540ddf71958c14bc517ebfc49cf481e91cd917b0face84f01272e901
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

jsoup-1.16.1.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

jtidy-r938.jar

Description:

    JTidy is a Java port of HTML Tidy, a HTML syntax checker and pretty printer. Like its non-Java cousin, JTidy can be
    used as a tool for cleaning up malformed and faulty HTML. In addition, JTidy provides a DOM interface to the
    document that is being processed, which effectively makes you able to use JTidy as a DOM parser for real-world HTML.

License:

Java HTML Tidy License: http://jtidy.svn.sourceforge.net/viewvc/jtidy/trunk/jtidy/LICENSE.txt?revision=95
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.sf.jtidy/jtidy/r938/ab08d87a225a715a69107732b67f21e1da930349/jtidy-r938.jar
MD5: 6a9121561b8f98c0a8fb9b6e57f50e6b
SHA1: ab08d87a225a715a69107732b67f21e1da930349
SHA256:6fc03e51e73fa884f06e7eae0761e045e56fdeb4e146a4d952e3023cc9e3fb43
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

jtidy-r938.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

CVE-2023-34623  

An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
CWE-787 Out-of-bounds Write

CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions:

junit-jupiter-api-5.10.0.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-api/5.10.0/2fe4ba3d31d5067878e468c96aa039005a9134d3/junit-jupiter-api-5.10.0.jar
MD5: d976b1d3b22eded7c2e496ea881ed77f
SHA1: 2fe4ba3d31d5067878e468c96aa039005a9134d3
SHA256:108088fd7ea46a8e65a0ce7f5d75ae3ff7865606770a078715f5a6e5709e17d8
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • test-common:compileClasspath
  • test-common:runtimeClasspath

junit-jupiter-api-5.10.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/org.junit/junit-bom@5.10.0
  • pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.0
  • pkg:maven/org.junit/junit-bom@5.10.0
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.0

Identifiers

junit-platform-commons-1.10.0.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-commons/1.10.0/d533ff2c286eaf963566f92baf5f8a06628d2609/junit-platform-commons-1.10.0.jar
MD5: 0cef49daddba2084397f34eca55502f9
SHA1: d533ff2c286eaf963566f92baf5f8a06628d2609
SHA256:6083db08ca11fca1e16099d0dcfede0193d80b3762b276349d80d3da536791b2
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • test-common:compileClasspath
  • test-common:runtimeClasspath

junit-platform-commons-1.10.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/org.junit/junit-bom@5.10.0
  • pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.0
  • pkg:maven/org.junit/junit-bom@5.10.0
  • pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.0

Identifiers

kotlin-android-extensions-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-android-extensions/1.8.20/6f25b7cf95167fbf487125a71758de4c0aa15da2/kotlin-android-extensions-1.8.20.jar
MD5: 2371feea00da6dcb36a5b0d09ca44451
SHA1: 6f25b7cf95167fbf487125a71758de4c0aa15da2
SHA256:8b0d485871f09dce9eebf2ab4ea70b08d373011160327d42c8ae0134ecf8268a
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath

kotlin-android-extensions-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-annotation-processing-gradle-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-annotation-processing-gradle/1.8.20/52361dad4f2c22f4e39c173001b1c4c2b4e61cb6/kotlin-annotation-processing-gradle-1.8.20.jar
MD5: 97ca3e187b4022558a91382a0e7ccc9a
SHA1: 52361dad4f2c22f4e39c173001b1c4c2b4e61cb6
SHA256:8277ec12cac724a802bee701d5729fa6cbe12ab1520856183104746642d7374b
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath

kotlin-annotation-processing-gradle-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-compiler-embeddable-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-compiler-embeddable/1.8.20/78d9baa57f65babf9e0a93e51f62f26f5f35ac3e/kotlin-compiler-embeddable-1.8.20.jar
MD5: 13de50e6fde16cef3982f8ef707cde6c
SHA1: 78d9baa57f65babf9e0a93e51f62f26f5f35ac3e
SHA256:5655386be55d45a78d887372bbd59d03e06750f7756108d14139e8d7e4b2e179
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:kotlinKlibCommonizerClasspath
  • quicktype-plugin:kotlinCompilerClasspath

kotlin-compiler-embeddable-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-compiler-runner-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-compiler-runner/1.8.20/8644ded58287ff9ef568471c4f0aa7078ee4da58/kotlin-compiler-runner-1.8.20.jar
MD5: 33988d21b19187a0ae17745501fd5762
SHA1: 8644ded58287ff9ef568471c4f0aa7078ee4da58
SHA256:97e43499428f66889bc935c8bd9a836875b75178c61fd396603ce41d6db2f748
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath

kotlin-compiler-runner-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-daemon-client-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-daemon-client/1.8.20/b6f15c748f4c2f3aeb1735ce52400ed3c0eae09a/kotlin-daemon-client-1.8.20.jar
MD5: ad96b9a349fc182b1783747ea8e3f8b8
SHA1: b6f15c748f4c2f3aeb1735ce52400ed3c0eae09a
SHA256:298c910661e624ada4a9fb541e6db74843eb5a9f280c8739d1d4252577a8e80d
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath

kotlin-daemon-client-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-daemon-embeddable-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-daemon-embeddable/1.8.20/c1b808fbe5fee60bd0504a54778120ef40f383d4/kotlin-daemon-embeddable-1.8.20.jar
MD5: 43d8672f3e1ffee12aaef620e939a636
SHA1: c1b808fbe5fee60bd0504a54778120ef40f383d4
SHA256:4602bd521a708f32deced0921d06c7977056c5887359cdabfc7070e9732cb353
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:kotlinKlibCommonizerClasspath
  • quicktype-plugin:kotlinCompilerClasspath

kotlin-daemon-embeddable-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-gradle-plugin-1.8.20-gradle76.jar (shaded: com.github.gundy:semver4j:0.16.4)

Description:

Java implementation of a node-style SemVer expression parser/evaluator

License:

MIT License: http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin/1.8.20/7508a92238a34ef55cdbf9a0a6871a14af23d87f/kotlin-gradle-plugin-1.8.20-gradle76.jar/META-INF/maven/com.github.gundy/semver4j/pom.xml
MD5: b2f793eaa1115b41eaa8bb63080406f8
SHA1: ca8df209029884f283afdcd7b104fb88576a18b1
SHA256:32001db2443b339dd21f5b79ff29d1ade722d1ba080c214bde819f0f72d1604d
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

Identifiers

kotlin-gradle-plugin-1.8.20-gradle76.jar (shaded: com.google.code.gson:gson:2.8.9)

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin/1.8.20/7508a92238a34ef55cdbf9a0a6871a14af23d87f/kotlin-gradle-plugin-1.8.20-gradle76.jar/META-INF/maven/com.google.code.gson/gson/pom.xml
MD5: 6cddce19473acd4bb9cfe35fad04f802
SHA1: e40b03e4cc2b52efb19af75c07596e9d15a52d82
SHA256:afded6e6a690fbf3ad4ae65ada397f0a90a5f630b303d1b741b9c97926fdd4de
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

Identifiers

kotlin-gradle-plugin-1.8.20-gradle76.jar (shaded: com.google.guava:guava:29.0-jre)

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin/1.8.20/7508a92238a34ef55cdbf9a0a6871a14af23d87f/kotlin-gradle-plugin-1.8.20-gradle76.jar/META-INF/maven/com.google.guava/guava/pom.xml
MD5: d1ed8d2bec41bdbdee173c0545b0a238
SHA1: e40cdee0d70244df1e963daac53a16241aea4585
SHA256:9027e934098903d287f1ba61c8b65f01d1d1e1da7a6fbcc04bf3de0544014426
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

Identifiers

CVE-2023-2976  

Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.

Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.
CWE-552 Files or Directories Accessible to External Parties

CVSSv3:
  • Base Score: HIGH (7.1)
  • Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References:

Vulnerable Software & Versions:

CVE-2020-8908  

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the created directory is world-readable (readable by an attacker with access to the system). The method in question has been marked @Deprecated in versions 30.0 and later and should not be used. For Android developers, we recommend choosing a temporary directory API provided by Android, such as context.getCacheDir(). For other Java developers, we recommend migrating to the Java 7 API java.nio.file.Files.createTempDirectory() which explicitly configures permissions of 700, or configuring the Java runtime's java.io.tmpdir system property to point to a location whose permissions are appropriately configured.
CWE-732 Incorrect Permission Assignment for Critical Resource

CVSSv2:
  • Base Score: LOW (2.1)
  • Vector: /AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSSv3:
  • Base Score: LOW (3.3)
  • Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References:

Vulnerable Software & Versions: (show all)

kotlin-gradle-plugin-1.8.20-gradle76.jar (shaded: org.antlr:antlr4-runtime:4.5.2-1)

Description:

The ANTLR 4 Runtime

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin/1.8.20/7508a92238a34ef55cdbf9a0a6871a14af23d87f/kotlin-gradle-plugin-1.8.20-gradle76.jar/META-INF/maven/org.antlr/antlr4-runtime/pom.xml
MD5: be6f8b9c66278c52274a8e6ba6fe351a
SHA1: 6c4013c6b772dd3e8cc00837ccf5edd7619e8d21
SHA256:93bac9b6bc714d559904ed43242782a8cbe543cebf0104bb3ecc1786a9cb661e
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

Identifiers

kotlin-gradle-plugin-1.8.20-gradle76.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin/1.8.20/7508a92238a34ef55cdbf9a0a6871a14af23d87f/kotlin-gradle-plugin-1.8.20-gradle76.jar
MD5: c74bf28b9b5812e39e33a63fc5c915c2
SHA1: 7508a92238a34ef55cdbf9a0a6871a14af23d87f
SHA256:4445babba17729ecadd13ffc5e6e84bf988f52c4da4dfde39450d4310fd8c103
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

kotlin-gradle-plugin-1.8.20-gradle76.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-gradle-plugin-annotations-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-annotations/1.8.20/e4254b95d5b4abe86ba97afb6214877f9fc76a05/kotlin-gradle-plugin-annotations-1.8.20.jar
MD5: e7a47837dc25576526de67febaa557c9
SHA1: e4254b95d5b4abe86ba97afb6214877f9fc76a05
SHA256:32baa93f157652b6d3a870a41c967fc09195261110d4b7acf9fb53409ef0cf1c
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • aspectj-plugin:compileClasspath
  • aspectj-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

kotlin-gradle-plugin-annotations-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-gradle-plugin-api-1.8.20-gradle76.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-api/1.8.20/1d909998b74b7873ac71bd04ce5f145f3d68bcfd/kotlin-gradle-plugin-api-1.8.20-gradle76.jar
MD5: e41beab7bd327fae951a5df163809f94
SHA1: 1d909998b74b7873ac71bd04ce5f145f3d68bcfd
SHA256:ac52bc66abff67f46c39002759559a4d8fce79a3104e8301555f201a105e9512
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • aspectj-plugin:compileClasspath
  • aspectj-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

kotlin-gradle-plugin-api-1.8.20-gradle76.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-gradle-plugin-idea-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-idea/1.8.20/13317df8a0bde5c9ff11de6bfc24ca47466786a9/kotlin-gradle-plugin-idea-1.8.20.jar
MD5: 4d469aa75f5e297285ebf27d3a1267d4
SHA1: 13317df8a0bde5c9ff11de6bfc24ca47466786a9
SHA256:503049a1dfc2830a2347dd1bf298d2727e99d2e9673b15c2884e208553dd6adb
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath

kotlin-gradle-plugin-idea-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-gradle-plugin-idea-proto-1.8.20.jar (shaded: com.google.protobuf:protobuf-java:3.21.9)

Description:

    Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-idea-proto/1.8.20/69552a6b5dc117659cbd54cabd3dae8efd6c66aa/kotlin-gradle-plugin-idea-proto-1.8.20.jar/META-INF/maven/com.google.protobuf/protobuf-java/pom.xml
MD5: a2dfabfa0f929c53986cf63a10619aae
SHA1: bd038b83cdb28c8102b00f2163f908e23bc3eb61
SHA256:66b34002eee26fd0e3d9387ef7d8e70021cf049ad93b083eb8f7143bbd176d29
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath

Identifiers

kotlin-gradle-plugin-idea-proto-1.8.20.jar (shaded: com.google.protobuf:protobuf-kotlin:3.21.9)

Description:

    Kotlin core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-idea-proto/1.8.20/69552a6b5dc117659cbd54cabd3dae8efd6c66aa/kotlin-gradle-plugin-idea-proto-1.8.20.jar/META-INF/maven/com.google.protobuf/protobuf-kotlin/pom.xml
MD5: af12eecad210f41ac71b549f62e38a7b
SHA1: 222361a7e9f4f7bb1291ea81e57c615a3d6082bd
SHA256:74408f909e1d9c3969055c431ac013485f5aa75c71214e9a933ee58f98853123
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath

Identifiers

kotlin-gradle-plugin-idea-proto-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-idea-proto/1.8.20/69552a6b5dc117659cbd54cabd3dae8efd6c66aa/kotlin-gradle-plugin-idea-proto-1.8.20.jar
MD5: be6e436be3aeff03a33a965120a711d0
SHA1: 69552a6b5dc117659cbd54cabd3dae8efd6c66aa
SHA256:a9bd6d04aab7d74bffc60a9485f90c0f4524d1e94a2ee6fc0f78ee8d56f2aeeb
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath

kotlin-gradle-plugin-idea-proto-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-gradle-plugin-model-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-gradle-plugin-model/1.8.20/3355c8a7b895f1bd9b5fdf18e89971152518a93b/kotlin-gradle-plugin-model-1.8.20.jar
MD5: 4875d2ee0e8842a0f7c2072cc46da77f
SHA1: 3355c8a7b895f1bd9b5fdf18e89971152518a93b
SHA256:ae8b0092380fbf74dcffe3ce1e29fe18178e1abd31134d971dea3617b5357a39
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

kotlin-gradle-plugin-model-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-klib-commonizer-api-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-klib-commonizer-api/1.8.20/3f0bd627c3b7de32cced0d24fad29539ba432bc4/kotlin-klib-commonizer-api-1.8.20.jar
MD5: 008cc8cf57d5ebcf179c9d02d151e022
SHA1: 3f0bd627c3b7de32cced0d24fad29539ba432bc4
SHA256:9a93d99b26044f648ca8aa0491b53b14b3415cbc7e05b43ce12b031a22a27040
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath

kotlin-klib-commonizer-api-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-klib-commonizer-embeddable-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable/1.8.20/7031468409e4d2b7eba586c100158bf38f7b19a2/kotlin-klib-commonizer-embeddable-1.8.20.jar
MD5: d9c35d4c31b7a468cf7c1998922ccad8
SHA1: 7031468409e4d2b7eba586c100158bf38f7b19a2
SHA256:3803e9b9f9f77f239fdcc82d677b8ae62326b3245bc443d256e64d55c7e647c0
Referenced In Project/Scope: quicktype-plugin:kotlinKlibCommonizerClasspath
kotlin-klib-commonizer-embeddable-1.8.20.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2

Identifiers

kotlin-native-utils-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-native-utils/1.8.20/d490644e215629f7f23f1c9ba5eb8bf96f4b8504/kotlin-native-utils-1.8.20.jar
MD5: 941181f73cd0a0f1ccb75aa0ded967f8
SHA1: d490644e215629f7f23f1c9ba5eb8bf96f4b8504
SHA256:a2eca6b8b5b3cf40b8c0482d2cf5631272ddd945d76082eb67a6e8e71f0a855e
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • aspectj-plugin:compileClasspath
  • aspectj-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

kotlin-native-utils-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-project-model-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-project-model/1.8.20/1c22ceafd66b8e1dcd9e9c662a1bbb276528d4c7/kotlin-project-model-1.8.20.jar
MD5: 09d2ab98ca592291b0ac6c5818d0a9b6
SHA1: 1c22ceafd66b8e1dcd9e9c662a1bbb276528d4c7
SHA256:46cf347746096cfa156c7da8f335f6adaacabf9881c164400a387a4819248984
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • aspectj-plugin:compileClasspath
  • aspectj-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

kotlin-project-model-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-reflect-1.6.10.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-reflect/1.6.10/1cbe9c92c12a94eea200d23c2bbaedaf3daf5132/kotlin-reflect-1.6.10.jar
MD5: a22187e3070e39a1cdb6a53970fa714d
SHA1: 1cbe9c92c12a94eea200d23c2bbaedaf3daf5132
SHA256:3277ac102ae17aad10a55abec75ff5696c8d109790396434b496e75087854203
Referenced In Projects/Scopes:

  • quicktype-plugin:kotlinKlibCommonizerClasspath
  • quicktype-plugin:kotlinCompilerClasspath

kotlin-reflect-1.6.10.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.8.20

Identifiers

kotlin-reflect-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-reflect/1.8.20/ea6ffe3c1bb1229f4d9279ae51395c54e7132d53/kotlin-reflect-1.8.20.jar
MD5: 83da750e2159ed3369e5c0d3661146b7
SHA1: ea6ffe3c1bb1229f4d9279ae51395c54e7132d53
SHA256:531e3c3f9b0c45f9a21f1642174453066a1066bec0190254a6331b331814ab8b
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

kotlin-reflect-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2

Identifiers

kotlin-script-runtime-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-script-runtime/1.8.20/c850771e723701f9d63dbcf641429c0f29290074/kotlin-script-runtime-1.8.20.jar
MD5: f4095be9ce8faf5994eb911c25f0c87f
SHA1: c850771e723701f9d63dbcf641429c0f29290074
SHA256:4bddc06cad20bb843fbd24094b1dc3c31f55508c6918885e8b548f2ebaa8a93e
Referenced In Projects/Scopes:

  • quicktype-plugin:kotlinCompilerPluginClasspathTest
  • quicktype-plugin:kotlinCompilerPluginClasspathMain
  • quicktype-plugin:kotlinKlibCommonizerClasspath
  • quicktype-plugin:kotlinCompilerClasspath

kotlin-script-runtime-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20

Identifiers

kotlin-scripting-common-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-scripting-common/1.8.20/f19996e3a40658541fe2108c483fd3301c4a3416/kotlin-scripting-common-1.8.20.jar
MD5: 689c0b29921e5204e2b7e88adf33a923
SHA1: f19996e3a40658541fe2108c483fd3301c4a3416
SHA256:a1c6cf4bb49db97a7082bc461acfdf3e163af1b625ab9baa5d7e3e5f9648badc
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:kotlinCompilerPluginClasspathTest
  • quicktype-plugin:kotlinCompilerPluginClasspathMain

kotlin-scripting-common-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-scripting-compiler-embeddable-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable/1.8.20/3c8fdcb527dd400398ec8e2985c89dba4af8871e/kotlin-scripting-compiler-embeddable-1.8.20.jar
MD5: 53c6b29b13776985fbb8e026f1513637
SHA1: 3c8fdcb527dd400398ec8e2985c89dba4af8871e
SHA256:67c4bbe4d58f2c76aa4249ab9b8b36e95023d318d33f8a2a1e8fe743b4b1f32a
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:kotlinCompilerPluginClasspathTest
  • quicktype-plugin:kotlinCompilerPluginClasspathMain

kotlin-scripting-compiler-embeddable-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-scripting-compiler-impl-embeddable-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-scripting-compiler-impl-embeddable/1.8.20/3b1ec379939d04bc0e1264b695ed949bc5c9bea3/kotlin-scripting-compiler-impl-embeddable-1.8.20.jar
MD5: bdd4f9f743bc9a40a50187d66861e816
SHA1: 3b1ec379939d04bc0e1264b695ed949bc5c9bea3
SHA256:e789192f39357dbdf4c8a94cd2fafe860de0c0530d34bf1c2c634b75b880f4a2
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:kotlinCompilerPluginClasspathTest
  • quicktype-plugin:kotlinCompilerPluginClasspathMain

kotlin-scripting-compiler-impl-embeddable-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-scripting-jvm-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-scripting-jvm/1.8.20/51c8efbe177ebcaa89c82d01663c60060a120dd2/kotlin-scripting-jvm-1.8.20.jar
MD5: ecc01a18aeb825fa3f3e72a0fcdf88a9
SHA1: 51c8efbe177ebcaa89c82d01663c60060a120dd2
SHA256:2e1889c89c785440ac126935187baaa83a6fc66deeb530491f943a38bf3bc8c0
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:kotlinCompilerPluginClasspathTest
  • quicktype-plugin:kotlinCompilerPluginClasspathMain

kotlin-scripting-jvm-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-stdlib-1.6.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib/1.6.20/6cedc143badbb4f1c6b7f5a340b04edff1743208/kotlin-stdlib-1.6.20.jar
MD5: a843670513e4890c9e080b51fd8dc9ba
SHA1: 6cedc143badbb4f1c6b7f5a340b04edff1743208
SHA256:eeb51c2b67b26233fd81d0bc4f8044ec849718890905763ceffd84a31e2cb799
Referenced In Projects/Scopes:

  • github-plugin:compileClasspath
  • github-plugin:runtimeClasspath
  • maven-plugin-plugin:compileClasspath
  • okhttp-plugin:runtimeClasspath
  • maven-plugin-plugin:runtimeClasspath
  • maven-plugin:compileClasspath
  • okhttp-plugin:compileClasspath
  • maven-plugin:runtimeClasspath

kotlin-stdlib-1.6.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/com.squareup.okhttp3/okhttp@4.11.0
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp@4.11.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0

Identifiers

kotlin-stdlib-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib/1.8.20/e72fc5e03ec6c064c678a6bd0d955c88d55b0c4a/kotlin-stdlib-1.8.20.jar
MD5: 2b3d65e24952649bf7534017c64b435e
SHA1: e72fc5e03ec6c064c678a6bd0d955c88d55b0c4a
SHA256:4395647b1961d9fb730a34e8dbe56c293157bc0759004cca63d9b5ee6653e5c7
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:kotlinCompilerPluginClasspathTest
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:kotlinCompilerPluginClasspathMain
  • quicktype-plugin:apiDependenciesMetadata
  • quicktype-plugin:kotlinKlibCommonizerClasspath
  • quicktype-plugin:kotlinCompilerClasspath
  • quicktype-plugin:implementationDependenciesMetadata

kotlin-stdlib-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.8.20
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.8.20
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20

Identifiers

kotlin-stdlib-common-1.6.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib-common/1.6.20/27b4562b6713d70f458c6d7ea39aadacb8e6a92b/kotlin-stdlib-common-1.6.20.jar
MD5: 2067bd14cd5efaa4721e7fc224bd52ad
SHA1: 27b4562b6713d70f458c6d7ea39aadacb8e6a92b
SHA256:8da40a2520d30dcb1012176fe93d24e82d08a3e346c37e0343b0fb6f64f6be01
Referenced In Projects/Scopes:

  • github-plugin:compileClasspath
  • github-plugin:runtimeClasspath
  • maven-plugin-plugin:compileClasspath
  • okhttp-plugin:runtimeClasspath
  • maven-plugin-plugin:runtimeClasspath
  • maven-plugin:compileClasspath
  • okhttp-plugin:compileClasspath
  • maven-plugin:runtimeClasspath

kotlin-stdlib-common-1.6.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/com.squareup.okhttp3/okhttp@4.11.0
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp@4.11.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0

Identifiers

kotlin-stdlib-common-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib-common/1.8.20/5eddaaf234c8c49d03eebeb6a14feb7f90faca71/kotlin-stdlib-common-1.8.20.jar
MD5: af45a8873880f027f47d573e1483a6dc
SHA1: 5eddaaf234c8c49d03eebeb6a14feb7f90faca71
SHA256:fa20188abaa8ecf1d0035e93a969b071f10e45a1c8378c314521eade73f75fd5
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:kotlinCompilerPluginClasspathTest
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:kotlinCompilerPluginClasspathMain
  • quicktype-plugin:apiDependenciesMetadata
  • quicktype-plugin:kotlinKlibCommonizerClasspath
  • quicktype-plugin:kotlinCompilerClasspath
  • quicktype-plugin:implementationDependenciesMetadata

kotlin-stdlib-common-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.8.20
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.8.20
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-reflect@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-scripting-compiler-embeddable@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20

Identifiers

kotlin-stdlib-jdk7-1.6.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib-jdk7/1.6.20/f8629f336bad4001c89e9cffa5ef3d4b5d0f5e22/kotlin-stdlib-jdk7-1.6.20.jar
MD5: 663de4333c8de50827423fdd50dbdc28
SHA1: f8629f336bad4001c89e9cffa5ef3d4b5d0f5e22
SHA256:aa2fa2e81355c4d98dd97da2169bf401f842261378f5b1cbea1aa11855d67620
Referenced In Projects/Scopes:

  • github-plugin:compileClasspath
  • github-plugin:runtimeClasspath
  • maven-plugin-plugin:compileClasspath
  • okhttp-plugin:runtimeClasspath
  • maven-plugin-plugin:runtimeClasspath
  • maven-plugin:compileClasspath
  • okhttp-plugin:compileClasspath
  • maven-plugin:runtimeClasspath

kotlin-stdlib-jdk7-1.6.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/com.squareup.okhttp3/okhttp@4.11.0
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp@4.11.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0

Identifiers

kotlin-stdlib-jdk7-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib-jdk7/1.8.20/3aa51faf20aae8b31e1a4bc54f8370673d7b7df4/kotlin-stdlib-jdk7-1.8.20.jar
MD5: da3588af3bb0c9122dbae3d733dddf53
SHA1: 3aa51faf20aae8b31e1a4bc54f8370673d7b7df4
SHA256:af1ec40c3b951afdcc0c2a0173c7b81763c5281c2d5bafbf0a8544a24c5dcc0c
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:apiDependenciesMetadata
  • quicktype-plugin:implementationDependenciesMetadata

kotlin-stdlib-jdk7-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.8.20

Identifiers

kotlin-stdlib-jdk8-1.6.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib-jdk8/1.6.20/dab8089bca6ac0e394c37281ea8cff2f99acd421/kotlin-stdlib-jdk8-1.6.20.jar
MD5: fed044b594860fabbec6e2c951f16467
SHA1: dab8089bca6ac0e394c37281ea8cff2f99acd421
SHA256:fdab1bf120e2b5e7ab6d7888e9ebc024ec6b8ca729361296395dab634b213695
Referenced In Projects/Scopes:

  • github-plugin:compileClasspath
  • github-plugin:runtimeClasspath
  • maven-plugin-plugin:compileClasspath
  • okhttp-plugin:runtimeClasspath
  • maven-plugin-plugin:runtimeClasspath
  • maven-plugin:compileClasspath
  • okhttp-plugin:compileClasspath
  • maven-plugin:runtimeClasspath

kotlin-stdlib-jdk8-1.6.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/com.squareup.okhttp3/okhttp@4.11.0
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp@4.11.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0

Identifiers

kotlin-stdlib-jdk8-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-stdlib-jdk8/1.8.20/73576ddf378c5b4f1f6b449fe6b119b8183fc078/kotlin-stdlib-jdk8-1.8.20.jar
MD5: 2097cb28602f5a6320bcc1bd74914db9
SHA1: 73576ddf378c5b4f1f6b449fe6b119b8183fc078
SHA256:e398b67977622718bf18ff99b739c7d9da060f33fb458a2e25203221c16af010
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:apiDependenciesMetadata
  • quicktype-plugin:implementationDependenciesMetadata

kotlin-stdlib-jdk8-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2

Identifiers

kotlin-tooling-core-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-tooling-core/1.8.20/6ab3d6c8e8d13c2748ecf0b74978fbd191def027/kotlin-tooling-core-1.8.20.jar
MD5: b9b9d52aa6a68a0f75445b37fd625d81
SHA1: 6ab3d6c8e8d13c2748ecf0b74978fbd191def027
SHA256:7a412677e73a59588cdad4cb9c7f8e3bb70bae5db66933b4b3f3ece0071b4cad
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • aspectj-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

kotlin-tooling-core-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-util-io-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-util-io/1.8.20/845b590111343b11034db2a6febeac83102a8cbb/kotlin-util-io-1.8.20.jar
MD5: faf2d012f163201a497dafc6c5c7a2b4
SHA1: 845b590111343b11034db2a6febeac83102a8cbb
SHA256:2d251d7a48bde1e1ec816969275473a044bb341bfe1c08593a0b51f1ef3f8b7b
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • aspectj-plugin:compileClasspath
  • aspectj-plugin:runtimeClasspath
  • quicktype-plugin:compileClasspath
  • quicktype-plugin:implementationDependenciesMetadata

kotlin-util-io-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin-api@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlin-util-klib-1.8.20.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlin/kotlin-util-klib/1.8.20/762b166115f504dbae778aa06eaf33b4cccc0cd2/kotlin-util-klib-1.8.20.jar
MD5: 5bbd4ce26d752a00e27e12d7c81bd33f
SHA1: 762b166115f504dbae778aa06eaf33b4cccc0cd2
SHA256:51bc74326401b4d3fa4e784f89c51c7932ee52998b619271e88f175dead82242
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath

kotlin-util-klib-1.8.20.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

kotlinx-coroutines-core-jvm-1.5.0.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.kotlinx/kotlinx-coroutines-core-jvm/1.5.0/d8cebccdcddd029022aa8646a5a953ff88b13ac8/kotlinx-coroutines-core-jvm-1.5.0.jar
MD5: 0a0d2e63b7d71b97778cbd41bb3dfce0
SHA1: d8cebccdcddd029022aa8646a5a953ff88b13ac8
SHA256:78d6cc7135f84d692ff3752fcfd1fa1bbe0940d7df70652e4f1eaeec0c78afbb
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath

kotlinx-coroutines-core-jvm-1.5.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

logging-interceptor-4.11.0.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.squareup.okhttp3/logging-interceptor/4.11.0/87fa769912b1f738f3c2dd87e3bca4d1d7f0e666/logging-interceptor-4.11.0.jar
MD5: 7452d90e84c3421511c66d43ddef1197
SHA1: 87fa769912b1f738f3c2dd87e3bca4d1d7f0e666
SHA256:b99f2d488fce9ac5aebf75783a7848f83fa7a7aac143820c4ebd49db8499db8c
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • github-plugin:compileClasspath
  • github-plugin:runtimeClasspath
  • maven-plugin-plugin:compileClasspath
  • okhttp-plugin:runtimeClasspath
  • maven-plugin-plugin:runtimeClasspath
  • maven-plugin:compileClasspath
  • okhttp-plugin:compileClasspath
  • maven-plugin:runtimeClasspath

logging-interceptor-4.11.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0

Identifiers

lombok-1.18.28.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.projectlombok/lombok/1.18.28/a2ff5da8bcd8b1b26f36b806ced63213362c6dcc/lombok-1.18.28.jar
MD5: 99be6bf05b7244ab44af156500cc3f0e
SHA1: a2ff5da8bcd8b1b26f36b806ced63213362c6dcc
SHA256:b774dc4fca543225d8b5e8c1637eb413c4363b2e613e95222776f792a8cec0e0
Referenced In Projects/Scopes:

  • plugin-utils:lombok
  • test-common:annotationProcessor
  • maven-plugin:annotationProcessor
  • mkdocs-plugin:annotationProcessor
  • code-generator-plugin:annotationProcessor
  • jacoco-plugin:lombok
  • code-generator-plugin:compileClasspath
  • lombok-plugin:compileClasspath
  • quicktype-plugin:lombok
  • quicktype-plugin:annotationProcessor
  • github-plugin:compileClasspath
  • okhttp-plugin:lombok
  • test-code-generator:annotationProcessor
  • git-plugin:annotationProcessor
  • test-code-generator:lombok
  • git-plugin:lombok
  • code-generator-api:annotationProcessor
  • settings-plugin:annotationProcessor
  • embedded-sass-plugin:annotationProcessor
  • code-generator-api:lombok
  • lombok-plugin:lombok
  • okhttp-plugin:compileClasspath
  • aspectj-plugin:lombok
  • git-plugin:compileClasspath
  • code-generator-api:compileClasspath
  • embedded-sass-plugin:lombok
  • okhttp-plugin:annotationProcessor
  • plugin-utils:compileClasspath
  • test-common:lombok
  • mkdocs-plugin:lombok
  • settings-plugin:lombok
  • maven-plugin:lombok
  • maven-plugin-plugin:compileClasspath
  • compress-plugin:lombok
  • settings-plugin:compileClasspath
  • lombok-plugin:annotationProcessor
  • aspectj-plugin:compileClasspath
  • compress-plugin:compileClasspath
  • maven-plugin:compileClasspath
  • test-common:compileClasspath
  • embedded-sass-plugin:compileClasspath
  • github-plugin:lombok
  • plantuml-plugin:annotationProcessor
  • jacoco-plugin:annotationProcessor
  • plugin-utils:annotationProcessor
  • aspectj-plugin:annotationProcessor
  • mkdocs-plugin:compileClasspath
  • maven-plugin-plugin:annotationProcessor
  • quicktype-plugin:compileOnlyDependenciesMetadata
  • jacoco-plugin:compileClasspath
  • compress-plugin:annotationProcessor
  • maven-plugin-plugin:lombok
  • plantuml-plugin:compileClasspath
  • plantuml-plugin:lombok
  • quicktype-plugin:compileClasspath
  • github-plugin:annotationProcessor
  • test-code-generator:compileClasspath
  • code-generator-plugin:lombok

lombok-1.18.28.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/plugin-utils@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/plantuml-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/plugin-utils@8.2.2
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/code-generator-api@8.2.2
  • pkg:maven/io.freefair.gradle/plantuml-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/mkdocs-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/test-code-generator@8.2.2
  • pkg:maven/io.freefair.gradle/code-generator-api@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/lombok-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/jacoco-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/mkdocs-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/io.freefair.gradle/plugin-utils@8.2.2
  • pkg:maven/io.freefair.gradle/jacoco-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/test-code-generator@8.2.2
  • pkg:maven/io.freefair.gradle/test-code-generator@8.2.2
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/code-generator-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/git-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/settings-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/jacoco-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/code-generator-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/code-generator-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/mkdocs-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/settings-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/code-generator-api@8.2.2
  • pkg:maven/io.freefair.gradle/lombok-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/git-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/git-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/plantuml-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/lombok-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/settings-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2

Identifiers

lombok-1.18.28.jar: mavenEcjBootstrapAgent.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.projectlombok/lombok/1.18.28/a2ff5da8bcd8b1b26f36b806ced63213362c6dcc/lombok-1.18.28.jar/lombok/launch/mavenEcjBootstrapAgent.jar
MD5: a1d753fe8aaf60ad853aa91a66c2995f
SHA1: 322bba74fc2f92977a1cb37423a3ec278db13726
SHA256:347036133d49df4fd1d625fa4e7906ddd968291cef7590bb2f8398dd2413d4e4
Referenced In Projects/Scopes:

  • plugin-utils:lombok
  • test-common:annotationProcessor
  • maven-plugin:annotationProcessor
  • mkdocs-plugin:annotationProcessor
  • code-generator-plugin:annotationProcessor
  • jacoco-plugin:lombok
  • code-generator-plugin:compileClasspath
  • lombok-plugin:compileClasspath
  • quicktype-plugin:lombok
  • quicktype-plugin:annotationProcessor
  • github-plugin:compileClasspath
  • okhttp-plugin:lombok
  • test-code-generator:annotationProcessor
  • git-plugin:annotationProcessor
  • test-code-generator:lombok
  • git-plugin:lombok
  • code-generator-api:annotationProcessor
  • settings-plugin:annotationProcessor
  • embedded-sass-plugin:annotationProcessor
  • code-generator-api:lombok
  • lombok-plugin:lombok
  • okhttp-plugin:compileClasspath
  • aspectj-plugin:lombok
  • git-plugin:compileClasspath
  • code-generator-api:compileClasspath
  • embedded-sass-plugin:lombok
  • okhttp-plugin:annotationProcessor
  • plugin-utils:compileClasspath
  • test-common:lombok
  • mkdocs-plugin:lombok
  • settings-plugin:lombok
  • maven-plugin:lombok
  • maven-plugin-plugin:compileClasspath
  • compress-plugin:lombok
  • settings-plugin:compileClasspath
  • lombok-plugin:annotationProcessor
  • aspectj-plugin:compileClasspath
  • compress-plugin:compileClasspath
  • maven-plugin:compileClasspath
  • test-common:compileClasspath
  • embedded-sass-plugin:compileClasspath
  • github-plugin:lombok
  • plantuml-plugin:annotationProcessor
  • jacoco-plugin:annotationProcessor
  • plugin-utils:annotationProcessor
  • aspectj-plugin:annotationProcessor
  • mkdocs-plugin:compileClasspath
  • maven-plugin-plugin:annotationProcessor
  • quicktype-plugin:compileOnlyDependenciesMetadata
  • jacoco-plugin:compileClasspath
  • compress-plugin:annotationProcessor
  • maven-plugin-plugin:lombok
  • plantuml-plugin:compileClasspath
  • plantuml-plugin:lombok
  • quicktype-plugin:compileClasspath
  • github-plugin:annotationProcessor
  • test-code-generator:compileClasspath
  • code-generator-plugin:lombok

Identifiers

  • None

lombok-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/lombok-plugin/build/libs/lombok-plugin-8.2.2.jar
MD5: 8086d77c0e4545592a61fb75540f3cbe
SHA1: 4acb1fe3caca5b64fe84b0da4bf12facc84191c2
SHA256:3e7abae8faf1d1e8067d3edfa8ed3cb6425771ec8f91ca32b6c5831b13bd9956
Referenced In Project/Scope: documentation:javadocClasspath
lombok-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

maven-aether-provider-3.2.5.jar

Description:

Extensions to Aether for utilizing Maven POM and repository metadata.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-aether-provider/3.2.5/dfddf469d20b877b184dda5d6e60f0c75f558a72/maven-aether-provider-3.2.5.jar
MD5: 5b6cc79c8c8abc3c92ae7d57c4cbb078
SHA1: dfddf469d20b877b184dda5d6e60f0c75f558a72
SHA256:703944b922d5351aad53b842f7dd38439b7213425f13c6c7f034b8b699b7d578
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-aether-provider-3.2.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

maven-artifact-3.2.5.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-artifact/3.2.5/bf5ce89d5f7ff57f2a33e78067ba97e62bae007d/maven-artifact-3.2.5.jar
MD5: 6ca73ba6de24218f238a45d8a06e519b
SHA1: bf5ce89d5f7ff57f2a33e78067ba97e62bae007d
SHA256:270385907ecfbcb256fe5afb883869fd57a5c021b5242693743ef787605c6335
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-artifact-3.2.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

maven-core-3.2.5.jar

Description:

Maven Core classes.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-core/3.2.5/fbec7cf0df4fbc2896a6768ae59053877c05c241/maven-core-3.2.5.jar
MD5: 0988ce2795bb72277a0199179154d398
SHA1: fbec7cf0df4fbc2896a6768ae59053877c05c241
SHA256:4f1a0af8997e1daf778b91c5ae9e973f92df699439d909fdec7fc6055c09de12
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-core-3.2.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

CVE-2021-26291  

Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository. Maven is changing the default behavior in 3.8.1+ to no longer follow http (non-SSL) repository references by default. More details available in the referenced urls. If you are currently using a repository manager to govern the repositories used by your builds, you are unaffected by the risks present in the legacy behavior, and are unaffected by this vulnerability and change to default behavior. See this link for more information about repository management: https://maven.apache.org/repository-management.html
CWE-346 Origin Validation Error

CVSSv2:
  • Base Score: MEDIUM (6.4)
  • Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:N
CVSSv3:
  • Base Score: CRITICAL (9.1)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References:

Vulnerable Software & Versions: (show all)

maven-model-3.2.5.jar

Description:

Model for Maven POM (Project Object Model)

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-model/3.2.5/ced305476a43e8a042a59e94ef38b3291d9ce1e7/maven-model-3.2.5.jar
MD5: 16ceccebac412654c427dcd66df4f6f9
SHA1: ced305476a43e8a042a59e94ef38b3291d9ce1e7
SHA256:8d439cc1661349dab1c69eed0f831336d187e162cc6d68aa4deefcff57ee0624
Referenced In Project/Scope: maven-plugin-plugin:compileClasspath
maven-model-3.2.5.jar is in the transitive dependency tree of the listed items.Included by:

  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0

Identifiers

maven-model-3.9.4.jar

Description:

Model for Maven POM (Project Object Model)

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-model/3.9.4/5b79d873cf6d13b3fc4020eac04e2a62ebbfa0aa/maven-model-3.9.4.jar
MD5: d507b64e6608681ce809307a9e669316
SHA1: 5b79d873cf6d13b3fc4020eac04e2a62ebbfa0aa
SHA256:7931dc8dda878eef46988d9fd07c4ade3c91892d7fb3208c742cb9457135bb15
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:runtimeClasspath
  • maven-plugin:compileClasspath
  • maven-plugin:runtimeClasspath

maven-model-3.9.4.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

maven-model-builder-3.2.5.jar

Description:

The effective model builder, with inheritance, profile activation, interpolation, ...

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-model-builder/3.2.5/7a32f3966fab463df9cdae95fd6df8c2e561e3ae/maven-model-builder-3.2.5.jar
MD5: a216c67dae851a4cedb4b431a674eba2
SHA1: 7a32f3966fab463df9cdae95fd6df8c2e561e3ae
SHA256:cc5321269d080ad6694458f53186be5391a21c488ab3a7d6dd73123c7681879d
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-model-builder-3.2.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

maven-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/maven-plugin/build/libs/maven-plugin-8.2.2.jar
MD5: 87f9d7afe1e85b56de9dd72e24885f75
SHA1: ab09510c6fd1e06555c2deb55e41b9ce5cd94891
SHA256:0607dec306c919946cea34cf13074f93a921d68ca5ff26b0500cdd8a9c36071f
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/documentation@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2

Identifiers

maven-plugin-annotations-3.9.0.jar

Description:

Java annotations to use in Mojos

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.plugin-tools/maven-plugin-annotations/3.9.0/a24f7830b2f8811e4bfd5c4c569f13198db261f/maven-plugin-annotations-3.9.0.jar
MD5: 43a9454b4318c740c27a5c2f2d8079b3
SHA1: 0a24f7830b2f8811e4bfd5c4c569f13198db261f
SHA256:6518bbac60808e1b74927bdc15a9f2a58073d23fa525d24032c229b426431585
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-plugin-annotations-3.9.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0

Identifiers

maven-plugin-api-3.2.5.jar

Description:

The API for plugins - Mojos - development.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-plugin-api/3.2.5/5c6893f4ac5425d07c4053f3c4e27b2a3b37c516/maven-plugin-api-3.2.5.jar
MD5: 11a402fb287811b6a249a553e9af5383
SHA1: 5c6893f4ac5425d07c4053f3c4e27b2a3b37c516
SHA256:194a6f0ce889ed3b0d8a9bc4d3c79541e878098b7e303e4ac76c1031850772c3
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-plugin-api-3.2.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

maven-plugin-plugin-3.9.0.jar

Description:

The Plugin Plugin is used to create a Maven plugin descriptor for any Mojo's found in the source tree,
    to include in the JAR. It is also used to generate Xdoc files for the Mojos as well as the artifact metadata
    and a generic help goal.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.plugins/maven-plugin-plugin/3.9.0/c3b9cc33d875a0025cfe301c74c639ff84319174/maven-plugin-plugin-3.9.0.jar
MD5: fe640d03c2ea7206d014c47ce802ca83
SHA1: c3b9cc33d875a0025cfe301c74c639ff84319174
SHA256:814df814d2132e4f264b158b7eaba812f4e2c39af4f9b49a1e3f1e2457573d55
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath

maven-plugin-plugin-3.9.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/documentation@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2

Identifiers

maven-plugin-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/maven-plugin-plugin/build/libs/maven-plugin-plugin-8.2.2.jar
MD5: 023b8246443928295569d0c90fc00a3f
SHA1: 53355b030883c8ad94a1c689a280a55f206ce12f
SHA256:b0a5a025190a91baae1661262f6c5492871046713d4e044fad841c5e23981477
Referenced In Project/Scope: documentation:javadocClasspath
maven-plugin-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

maven-plugin-tools-annotations-3.9.0.jar

Description:

Descriptor extractor for plugins written in Java with Java annotations.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.plugin-tools/maven-plugin-tools-annotations/3.9.0/7012d67976aa048276a82f33cfa0aa2e69782a8e/maven-plugin-tools-annotations-3.9.0.jar
MD5: ae7923369b37d593fe5b8c59975abe8a
SHA1: 7012d67976aa048276a82f33cfa0aa2e69782a8e
SHA256:15f8867e39d4b2df09c5d9e38efec9c81dfa8c6834bf8d3ebcb16f7f72013faf
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-plugin-tools-annotations-3.9.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2

Identifiers

maven-plugin-tools-api-3.9.0.jar

Description:

The Maven Plugin Tools Extractor API provides an API to extract descriptor information from Maven Plugins.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.plugin-tools/maven-plugin-tools-api/3.9.0/1b17da59e5ece27aa1c8d44417c45294febb758b/maven-plugin-tools-api-3.9.0.jar
MD5: 0964f8ea6012182eba0c6717f3c872a7
SHA1: 1b17da59e5ece27aa1c8d44417c45294febb758b
SHA256:b0dc0bebf235f99983b7fd8449bae799f00896b17ba1c331654ffe1b2340e5a2
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-plugin-tools-api-3.9.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

maven-plugin-tools-generators-3.9.0.jar

Description:

The Maven Plugin Tools Generators provide content generation (XML descriptor, documentation, help goal) from
    plugin descriptor extracted from plugin sources.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.plugin-tools/maven-plugin-tools-generators/3.9.0/ed93fa99dd704d2b180c9871951ce7591e955/maven-plugin-tools-generators-3.9.0.jar
MD5: 2fe1ddbcc1df7bc5b67aed31d339a887
SHA1: 000ed93fa99dd704d2b180c9871951ce7591e955
SHA256:4c796d7324183d035dd85f3e2de18651ac76cd1f1877a6b84ca9b7cee2ebeb9d
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-plugin-tools-generators-3.9.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2

Identifiers

maven-plugin-tools-java-3.9.0.jar

Description:

Descriptor extractor for plugins written in Java annotated with Mojo Javadoc Tags.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.plugin-tools/maven-plugin-tools-java/3.9.0/400bf051f22c2dfc309df99becd2e5413a5e1e14/maven-plugin-tools-java-3.9.0.jar
MD5: d904c92bccb488b3d29f423013f3893f
SHA1: 400bf051f22c2dfc309df99becd2e5413a5e1e14
SHA256:d7f2ee639772285d3972cc6ecb04c4a3506c708faef06a125e6a72998259056d
Referenced In Project/Scope: documentation:javadocClasspath
maven-plugin-tools-java-3.9.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0

Identifiers

maven-reporting-api-3.1.1.jar

Description:

API to manage report generation.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.reporting/maven-reporting-api/3.1.1/74ca00a13e46d065071cdf6376d7d231e0208916/maven-reporting-api-3.1.1.jar
MD5: 1e1e0b2f189c861995e33a2a746501bb
SHA1: 74ca00a13e46d065071cdf6376d7d231e0208916
SHA256:25be6603c97d28fa3dcd122073054271c8fcaf667d220dce7a26a61a6f3cffd1
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-reporting-api-3.1.1.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

maven-repository-metadata-3.2.5.jar

Description:

Per-directory local and remote repository metadata.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-repository-metadata/3.2.5/17049c63ce63654c112eeb82797edee49f8a4601/maven-repository-metadata-3.2.5.jar
MD5: bda12e2d6070d417a6118c6ba769fd4f
SHA1: 17049c63ce63654c112eeb82797edee49f8a4601
SHA256:62b517b77f24edebdee0e382ecddb44bb6632b7c08c528d625aed7d2980df12b
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-repository-metadata-3.2.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

maven-settings-3.2.5.jar

Description:

Maven Settings model.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-settings/3.2.5/52179da78893ed7afea98d980c55e658fb04d9b4/maven-settings-3.2.5.jar
MD5: 9f78e75d76e2f92c08cbbc859bf6e272
SHA1: 52179da78893ed7afea98d980c55e658fb04d9b4
SHA256:1874d4ee660b935675a60bdb2ef63e0ff5a81769f4fc04a035fa9d4c4e238224
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-settings-3.2.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

CVE-2021-26291 (OSSINDEX)  

Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository. Maven is changing the default behavior in 3.8.1+ to no longer follow http (non-SSL) repository references by default. More details available in the referenced urls. If you are currently using a repository manager to govern the repositories used by your builds, you are unaffected by the risks present in the legacy behavior, and are unaffected by this vulnerability and change to default behavior. See this link for more information about repository management: https://maven.apache.org/repository-management.html
CWE-346 Origin Validation Error

CVSSv3:
  • Base Score: CRITICAL (9.1)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References:

Vulnerable Software & Versions (OSSINDEX):

  • cpe:2.3:a:org.apache.maven:maven-settings:3.2.5:*:*:*:*:*:*:*

maven-settings-builder-3.2.5.jar

Description:

The effective settings builder, with inheritance and password decryption.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven/maven-settings-builder/3.2.5/7fd98de76398a3ff5c1d9a7b85f26cb65a862578/maven-settings-builder-3.2.5.jar
MD5: c48b8a83cd03a5672f07b559ca1a5307
SHA1: 7fd98de76398a3ff5c1d9a7b85f26cb65a862578
SHA256:9c5a014ceb8abb55e997dcc41d17bbe0ae145db574be6b7186e75950c241269f
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

maven-settings-builder-3.2.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

mkdocs-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/mkdocs-plugin/build/libs/mkdocs-plugin-8.2.2.jar
MD5: 465ba8a8ce6fdbd669ef278130b859af
SHA1: 93388d162873f2e99d4b7e7bd6d359f1a81afb97
SHA256:93fc0c983e87aaffc4092656a64bd8363e0312e8639a5836341fbdc38a20e003
Referenced In Project/Scope: documentation:javadocClasspath
mkdocs-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

okhttp-4.11.0.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.squareup.okhttp3/okhttp/4.11.0/436932d695b2c43f2c86b8111c596179cd133d56/okhttp-4.11.0.jar
MD5: 8f53e26319679de3ea22261b1899a99c
SHA1: 436932d695b2c43f2c86b8111c596179cd133d56
SHA256:ee8f6bd6cd1257013d748330f4ca147638a9fbcb52fb388d5ac93cf53408745d
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • github-plugin:compileClasspath
  • github-plugin:runtimeClasspath
  • maven-plugin-plugin:compileClasspath
  • okhttp-plugin:runtimeClasspath
  • maven-plugin-plugin:runtimeClasspath
  • maven-plugin:compileClasspath
  • okhttp-plugin:compileClasspath
  • maven-plugin:runtimeClasspath

okhttp-4.11.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0

Identifiers

  • pkg:maven/com.squareup.okhttp3/okhttp@4.11.0  (Confidence:Highest)
  • cpe:2.3:a:squareup:okhttp:4.11.0:*:*:*:*:*:*:*  (Confidence:Low)  
  • cpe:2.3:a:squareup:okhttp3:4.11.0:*:*:*:*:*:*:*  (Confidence:Low)  

okhttp-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/okhttp-plugin/build/libs/okhttp-plugin-8.2.2.jar
MD5: 6e02783950fa855fb283caf8fc57d937
SHA1: 3bc70bfce0b0cf13cd0328177f35d7c26e3e9b2d
SHA256:9d36c8ea35d32b6c2b07a40c814217383bd9bba4a99ff46edd04036f37b04a58
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • github-plugin:compileClasspath
  • github-plugin:runtimeClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath
  • maven-plugin:compileClasspath
  • maven-plugin:runtimeClasspath

okhttp-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/documentation@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2

Identifiers

okio-jvm-3.2.0.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.squareup.okio/okio-jvm/3.2.0/332d1c5dc82b0241cb1d35bb0901d28470cc89ca/okio-jvm-3.2.0.jar
MD5: 93417dbcbbb0e56d272b7ad5b28afede
SHA1: 332d1c5dc82b0241cb1d35bb0901d28470cc89ca
SHA256:b642baef4c570055de4cb3d1667b2b16dced901ff8066345a063691aa06025a4
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • github-plugin:compileClasspath
  • github-plugin:runtimeClasspath
  • maven-plugin-plugin:compileClasspath
  • okhttp-plugin:runtimeClasspath
  • maven-plugin-plugin:runtimeClasspath
  • maven-plugin:compileClasspath
  • okhttp-plugin:compileClasspath
  • maven-plugin:runtimeClasspath

okio-jvm-3.2.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/com.squareup.okhttp3/okhttp@4.11.0
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/com.squareup.retrofit2/retrofit@2.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp@4.11.0
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/com.squareup.okhttp3/okhttp-bom@4.11.0
  • pkg:maven/com.squareup.okhttp3/logging-interceptor@4.11.0

Identifiers

CVE-2023-3635  

GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.
CWE-681 Incorrect Conversion between Numeric Types

CVSSv3:
  • Base Score: HIGH (7.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Vulnerable Software & Versions:

opentest4j-1.3.0.jar

License:

The Apache License, Version 2.0
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.opentest4j/opentest4j/1.3.0/152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e/opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256:48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • test-common:compileClasspath
  • test-common:runtimeClasspath

opentest4j-1.3.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/org.junit/junit-bom@5.10.0
  • pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.0
  • pkg:maven/org.junit/junit-bom@5.10.0
  • pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.0

Identifiers

org.eclipse.sisu.inject-0.3.5.jar

License:

http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.sisu/org.eclipse.sisu.inject/0.3.5/d4265dd4f0f1d7a06d80df5a5f475d5ff9c17140/org.eclipse.sisu.inject-0.3.5.jar
MD5: 1b296b0ddd911ed3750b3df93b395cd5
SHA1: d4265dd4f0f1d7a06d80df5a5f475d5ff9c17140
SHA256:c5994010bcdce1d2bd603a4d50c47191ddbd7875d1157b23aaa26d33c82fda13
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

org.eclipse.sisu.inject-0.3.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

org.eclipse.sisu.plexus-0.3.5.jar

License:

http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.eclipse.sisu/org.eclipse.sisu.plexus/0.3.5/d71996bb2e536f966b3b70e647067fff3b73d32f/org.eclipse.sisu.plexus-0.3.5.jar
MD5: 30c4a9fa2137698ed66c8542f1be196a
SHA1: d71996bb2e536f966b3b70e647067fff3b73d32f
SHA256:7e4c61096d70826f20f7a7d55c59a5528e7aa5ad247ee2dfe544e4dd25f6a784
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

org.eclipse.sisu.plexus-0.3.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

org.jacoco.agent-0.8.9.jar

Description:

JaCoCo Agent

License:

https://www.eclipse.org/legal/epl-2.0/
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.agent/0.8.9/9af6e948fe6611437a691c4052cc7ff59cfa9a87/org.jacoco.agent-0.8.9.jar
MD5: b09c7ffaede51aeb5f351b32ed942082
SHA1: 9af6e948fe6611437a691c4052cc7ff59cfa9a87
SHA256:c067e29a49063220e75215eff1bc234584ad002e747afdf13a69662be5b0e07d
Referenced In Projects/Scopes:
  • quicktype-plugin:jacocoAnt
  • code-generator-api:jacocoAnt
  • compress-plugin:jacocoAnt
  • documentation:javadocClasspath
  • maven-plugin-plugin:jacocoAnt
  • okhttp-plugin:jacocoAgent
  • jacoco-plugin:jacocoAnt
  • maven-plugin:jacocoAgent
  • mkdocs-plugin:jacocoAgent
  • settings-plugin:jacocoAgent
  • plantuml-plugin:jacocoAnt
  • git-plugin:jacocoAgent
  • github-plugin:jacocoAnt
  • embedded-sass-plugin:jacocoAnt
  • aspectj-plugin:jacocoAgent
  • test-code-generator:jacocoAnt
  • git-plugin:jacocoAnt
  • github-plugin:jacocoAgent
  • maven-plugin-plugin:jacocoAgent
  • test-common:jacocoAgent
  • code-generator-plugin:jacocoAgent
  • okhttp-plugin:jacocoAnt
  • aspectj-plugin:jacocoAnt
  • compress-plugin:jacocoAgent
  • plugin-utils:jacocoAnt
  • plantuml-plugin:jacocoAgent
  • maven-plugin:jacocoAnt
  • settings-plugin:jacocoAnt
  • jacoco-plugin:compileClasspath
  • quicktype-plugin:jacocoAgent
  • plugin-utils:jacocoAgent
  • code-generator-api:jacocoAgent
  • mkdocs-plugin:jacocoAnt
  • test-code-generator:jacocoAgent
  • lombok-plugin:jacocoAgent
  • embedded-sass-plugin:jacocoAgent
  • lombok-plugin:jacocoAnt
  • test-common:jacocoAnt
  • jacoco-plugin:jacocoAgent
  • code-generator-plugin:jacocoAnt

org.jacoco.agent-0.8.9.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/code-generator-plugin@8.2.2
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/io.freefair.gradle/jacoco-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/mkdocs-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/code-generator-api@8.2.2
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/io.freefair.gradle/lombok-plugin@8.2.2
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/io.freefair.gradle/git-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/settings-plugin@8.2.2
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/io.freefair.gradle/plugin-utils@8.2.2
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/io.freefair.gradle/plantuml-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/io.freefair.gradle/test-common@8.2.2
  • pkg:maven/io.freefair.gradle/test-code-generator@8.2.2
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9

Identifiers

org.jacoco.agent-0.8.9.jar: jacocoagent.jar (shaded: org.jacoco:org.jacoco.agent.rt:0.8.9)

Description:

JaCoCo Java Agent

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.agent/0.8.9/9af6e948fe6611437a691c4052cc7ff59cfa9a87/org.jacoco.agent-0.8.9.jar/jacocoagent.jar/META-INF/maven/org.jacoco/org.jacoco.agent.rt/pom.xml
MD5: 06f8be91bf1dee590f62342c16f4cb5e
SHA1: b76c6513056458a597ff2fee17812306d1517b1d
SHA256:d1e4d1e96612c192aa62af1e4fb053720b74b890d38b5cec03bc4a0fa62b58b2
Referenced In Projects/Scopes:

  • quicktype-plugin:jacocoAnt
  • code-generator-api:jacocoAnt
  • compress-plugin:jacocoAnt
  • documentation:javadocClasspath
  • maven-plugin-plugin:jacocoAnt
  • okhttp-plugin:jacocoAgent
  • jacoco-plugin:jacocoAnt
  • maven-plugin:jacocoAgent
  • mkdocs-plugin:jacocoAgent
  • settings-plugin:jacocoAgent
  • plantuml-plugin:jacocoAnt
  • git-plugin:jacocoAgent
  • github-plugin:jacocoAnt
  • embedded-sass-plugin:jacocoAnt
  • aspectj-plugin:jacocoAgent
  • test-code-generator:jacocoAnt
  • git-plugin:jacocoAnt
  • github-plugin:jacocoAgent
  • maven-plugin-plugin:jacocoAgent
  • test-common:jacocoAgent
  • code-generator-plugin:jacocoAgent
  • okhttp-plugin:jacocoAnt
  • aspectj-plugin:jacocoAnt
  • compress-plugin:jacocoAgent
  • plugin-utils:jacocoAnt
  • plantuml-plugin:jacocoAgent
  • maven-plugin:jacocoAnt
  • settings-plugin:jacocoAnt
  • jacoco-plugin:compileClasspath
  • quicktype-plugin:jacocoAgent
  • plugin-utils:jacocoAgent
  • code-generator-api:jacocoAgent
  • mkdocs-plugin:jacocoAnt
  • test-code-generator:jacocoAgent
  • lombok-plugin:jacocoAgent
  • embedded-sass-plugin:jacocoAgent
  • lombok-plugin:jacocoAnt
  • test-common:jacocoAnt
  • jacoco-plugin:jacocoAgent
  • code-generator-plugin:jacocoAnt

Identifiers

org.jacoco.agent-0.8.9.jar: jacocoagent.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.agent/0.8.9/9af6e948fe6611437a691c4052cc7ff59cfa9a87/org.jacoco.agent-0.8.9.jar/jacocoagent.jar
MD5: e852c5e07bc13ffdc6a68303799f80ad
SHA1: ad836d1c585c7e1dbf5cf828efa34528d9700303
SHA256:191734a0b7ef97606e6a09ae584c4acab47eb30fcb4c555d3d440d4e0d71d73d
Referenced In Projects/Scopes:

  • quicktype-plugin:jacocoAnt
  • code-generator-api:jacocoAnt
  • compress-plugin:jacocoAnt
  • documentation:javadocClasspath
  • maven-plugin-plugin:jacocoAnt
  • okhttp-plugin:jacocoAgent
  • jacoco-plugin:jacocoAnt
  • maven-plugin:jacocoAgent
  • mkdocs-plugin:jacocoAgent
  • settings-plugin:jacocoAgent
  • plantuml-plugin:jacocoAnt
  • git-plugin:jacocoAgent
  • github-plugin:jacocoAnt
  • embedded-sass-plugin:jacocoAnt
  • aspectj-plugin:jacocoAgent
  • test-code-generator:jacocoAnt
  • git-plugin:jacocoAnt
  • github-plugin:jacocoAgent
  • maven-plugin-plugin:jacocoAgent
  • test-common:jacocoAgent
  • code-generator-plugin:jacocoAgent
  • okhttp-plugin:jacocoAnt
  • aspectj-plugin:jacocoAnt
  • compress-plugin:jacocoAgent
  • plugin-utils:jacocoAnt
  • plantuml-plugin:jacocoAgent
  • maven-plugin:jacocoAnt
  • settings-plugin:jacocoAnt
  • jacoco-plugin:compileClasspath
  • quicktype-plugin:jacocoAgent
  • plugin-utils:jacocoAgent
  • code-generator-api:jacocoAgent
  • mkdocs-plugin:jacocoAnt
  • test-code-generator:jacocoAgent
  • lombok-plugin:jacocoAgent
  • embedded-sass-plugin:jacocoAgent
  • lombok-plugin:jacocoAnt
  • test-common:jacocoAnt
  • jacoco-plugin:jacocoAgent
  • code-generator-plugin:jacocoAnt

Identifiers

  • None

org.jacoco.ant-0.8.9.jar

Description:

JaCoCo Ant Tasks

License:

https://www.eclipse.org/legal/epl-2.0/
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.ant/0.8.9/4b48634d95f05a435a4ad10d1c4d71d07bbf95a1/org.jacoco.ant-0.8.9.jar
MD5: d1fb6d2b6dda5d08ccb585310824e16a
SHA1: 4b48634d95f05a435a4ad10d1c4d71d07bbf95a1
SHA256:5695ecd24f04c421b12a74f4b44042857b16eed0bc049ff38dd6dc40abca7bef
Referenced In Projects/Scopes:
  • quicktype-plugin:jacocoAnt
  • code-generator-api:jacocoAnt
  • compress-plugin:jacocoAnt
  • documentation:javadocClasspath
  • maven-plugin-plugin:jacocoAnt
  • okhttp-plugin:jacocoAnt
  • aspectj-plugin:jacocoAnt
  • jacoco-plugin:jacocoAnt
  • plugin-utils:jacocoAnt
  • maven-plugin:jacocoAnt
  • settings-plugin:jacocoAnt
  • jacoco-plugin:compileClasspath
  • mkdocs-plugin:jacocoAnt
  • plantuml-plugin:jacocoAnt
  • github-plugin:jacocoAnt
  • embedded-sass-plugin:jacocoAnt
  • lombok-plugin:jacocoAnt
  • test-common:jacocoAnt
  • test-code-generator:jacocoAnt
  • code-generator-plugin:jacocoAnt
  • git-plugin:jacocoAnt

org.jacoco.ant-0.8.9.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/test-code-generator@8.2.2
  • pkg:maven/io.freefair.gradle/plantuml-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/plugin-utils@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/documentation@8.2.2
  • pkg:maven/io.freefair.gradle/jacoco-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/lombok-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/settings-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/okhttp-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/code-generator-api@8.2.2
  • pkg:maven/io.freefair.gradle/mkdocs-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/code-generator-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/git-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/jacoco-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/test-common@8.2.2

Identifiers

org.jacoco.core-0.8.9.jar

Description:

JaCoCo Core

License:

https://www.eclipse.org/legal/epl-2.0/
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.core/0.8.9/60b6ad6c57a4822b571bec969ebe7182b7b43397/org.jacoco.core-0.8.9.jar
MD5: 2cdb1eae0b33f537d72bc39b0f3ae43a
SHA1: 60b6ad6c57a4822b571bec969ebe7182b7b43397
SHA256:a33e041dd97530ea57d6dde0e2635ea51680827d2dc0de372d3ccc45b51e68c7
Referenced In Projects/Scopes:
  • quicktype-plugin:jacocoAnt
  • code-generator-api:jacocoAnt
  • compress-plugin:jacocoAnt
  • documentation:javadocClasspath
  • maven-plugin-plugin:jacocoAnt
  • okhttp-plugin:jacocoAnt
  • aspectj-plugin:jacocoAnt
  • jacoco-plugin:jacocoAnt
  • plugin-utils:jacocoAnt
  • maven-plugin:jacocoAnt
  • settings-plugin:jacocoAnt
  • jacoco-plugin:compileClasspath
  • mkdocs-plugin:jacocoAnt
  • plantuml-plugin:jacocoAnt
  • github-plugin:jacocoAnt
  • embedded-sass-plugin:jacocoAnt
  • lombok-plugin:jacocoAnt
  • test-common:jacocoAnt
  • test-code-generator:jacocoAnt
  • code-generator-plugin:jacocoAnt
  • git-plugin:jacocoAnt

org.jacoco.core-0.8.9.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9

Identifiers

org.jacoco.report-0.8.9.jar

Description:

JaCoCo Report

License:

https://www.eclipse.org/legal/epl-2.0/
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.report/0.8.9/1d06d0cc1d25d32d519486b527f57c943cf87dca/org.jacoco.report-0.8.9.jar
MD5: 1c1b753d6cdde063e931f53ba147ed99
SHA1: 1d06d0cc1d25d32d519486b527f57c943cf87dca
SHA256:0d36b87cdea59f98c8cf26367003b4735d5c3187411d4649ddfefdeed387b63e
Referenced In Projects/Scopes:
  • quicktype-plugin:jacocoAnt
  • code-generator-api:jacocoAnt
  • compress-plugin:jacocoAnt
  • documentation:javadocClasspath
  • maven-plugin-plugin:jacocoAnt
  • okhttp-plugin:jacocoAnt
  • aspectj-plugin:jacocoAnt
  • jacoco-plugin:jacocoAnt
  • plugin-utils:jacocoAnt
  • maven-plugin:jacocoAnt
  • settings-plugin:jacocoAnt
  • jacoco-plugin:compileClasspath
  • mkdocs-plugin:jacocoAnt
  • plantuml-plugin:jacocoAnt
  • github-plugin:jacocoAnt
  • embedded-sass-plugin:jacocoAnt
  • lombok-plugin:jacocoAnt
  • test-common:jacocoAnt
  • test-code-generator:jacocoAnt
  • code-generator-plugin:jacocoAnt
  • git-plugin:jacocoAnt

org.jacoco.report-0.8.9.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9
  • pkg:maven/org.jacoco/org.jacoco.ant@0.8.9

Identifiers

org.jacoco.report-0.8.9.jar: prettify.js

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.report/0.8.9/1d06d0cc1d25d32d519486b527f57c943cf87dca/org.jacoco.report-0.8.9.jar/org/jacoco/report/internal/html/resources/prettify.js
MD5: 4b337aaa3c606cfc1a6ff1986db2c8cb
SHA1: 290093755739da933c180ae7e7ebf283724dad1d
SHA256:743c6c4cab9499cd0bfe18a5a62281eccce843f47ec75eedb32eeb29c755aa68
Referenced In Projects/Scopes:

  • quicktype-plugin:jacocoAnt
  • code-generator-api:jacocoAnt
  • compress-plugin:jacocoAnt
  • documentation:javadocClasspath
  • maven-plugin-plugin:jacocoAnt
  • okhttp-plugin:jacocoAnt
  • aspectj-plugin:jacocoAnt
  • jacoco-plugin:jacocoAnt
  • plugin-utils:jacocoAnt
  • maven-plugin:jacocoAnt
  • settings-plugin:jacocoAnt
  • jacoco-plugin:compileClasspath
  • mkdocs-plugin:jacocoAnt
  • plantuml-plugin:jacocoAnt
  • github-plugin:jacocoAnt
  • embedded-sass-plugin:jacocoAnt
  • lombok-plugin:jacocoAnt
  • test-common:jacocoAnt
  • test-code-generator:jacocoAnt
  • code-generator-plugin:jacocoAnt
  • git-plugin:jacocoAnt

Identifiers

  • None

org.jacoco.report-0.8.9.jar: sort.js

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jacoco/org.jacoco.report/0.8.9/1d06d0cc1d25d32d519486b527f57c943cf87dca/org.jacoco.report-0.8.9.jar/org/jacoco/report/internal/html/resources/sort.js
MD5: d101d06d26e7deaf2b224e0d2137509a
SHA1: 2c715325b546adf5beff3d624ce002a7256e3efe
SHA256:7ff293dabc89d68e33d5611f2de0dbbbcfed7e0177726fab5f9dcc0b91f593af
Referenced In Projects/Scopes:

  • quicktype-plugin:jacocoAnt
  • code-generator-api:jacocoAnt
  • compress-plugin:jacocoAnt
  • documentation:javadocClasspath
  • maven-plugin-plugin:jacocoAnt
  • okhttp-plugin:jacocoAnt
  • aspectj-plugin:jacocoAnt
  • jacoco-plugin:jacocoAnt
  • plugin-utils:jacocoAnt
  • maven-plugin:jacocoAnt
  • settings-plugin:jacocoAnt
  • jacoco-plugin:compileClasspath
  • mkdocs-plugin:jacocoAnt
  • plantuml-plugin:jacocoAnt
  • github-plugin:jacocoAnt
  • embedded-sass-plugin:jacocoAnt
  • lombok-plugin:jacocoAnt
  • test-common:jacocoAnt
  • test-code-generator:jacocoAnt
  • code-generator-plugin:jacocoAnt
  • git-plugin:jacocoAnt

Identifiers

  • None

packageurl-java-1.4.1.jar

Description:

The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal
        specification for describing a package via a "mostly universal" URL.

License:

MIT: https://opensource.org/licenses/MIT
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.github.package-url/packageurl-java/1.4.1/a0d1009191c1cf6b04f40d26e4717596f3a90e0/packageurl-java-1.4.1.jar
MD5: f8b3a23e6402d317b612251c83d292e7
SHA1: 0a0d1009191c1cf6b04f40d26e4717596f3a90e0
SHA256:8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • github-plugin:compileClasspath
  • github-plugin:runtimeClasspath

packageurl-java-1.4.1.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2

Identifiers

plantuml-1.2023.10.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.sourceforge.plantuml/plantuml/1.2023.10/37be9cbf937581133a256da0b239529bcf657557/plantuml-1.2023.10.jar
MD5: 28f9d76ebed6db091f80cd6487a5dd86
SHA1: 37be9cbf937581133a256da0b239529bcf657557
SHA256:5a6d114409be4b2a03f2c9d86a50c61f17201537e676c8dc9f0f302036204610
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • plantuml-plugin:compileClasspath

plantuml-1.2023.10.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/plantuml-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

plantuml-1.2023.10.jar: default.js

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.sourceforge.plantuml/plantuml/1.2023.10/37be9cbf937581133a256da0b239529bcf657557/plantuml-1.2023.10.jar/svg/default.js
MD5: 2ea3fc778111da6c287c742fd32023d9
SHA1: 419024dadbaa67f19ee5b8956eefa701ed3c068b
SHA256:b12967a940ebb3b3914dfe765b9b72916897f3f6a86a497f1ffa308d17da1f3e
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • plantuml-plugin:compileClasspath

Identifiers

  • None

plantuml-1.2023.10.jar: onmouseinteractivefooter.js

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/net.sourceforge.plantuml/plantuml/1.2023.10/37be9cbf937581133a256da0b239529bcf657557/plantuml-1.2023.10.jar/svg/onmouseinteractivefooter.js
MD5: a62b900322928cc1922cc3ee48d6f300
SHA1: 5ba41a8018b018ac566db6abf0d8d4b1ca51d1b6
SHA256:9088fe529d7a1f2468c476b106fcefff67a929f91b7759641b871f95dff13489
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • plantuml-plugin:compileClasspath

Identifiers

  • None

plantuml-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/plantuml-plugin/build/libs/plantuml-plugin-8.2.2.jar
MD5: c58f53ce92a29819007e73e2db1d79af
SHA1: 3eeffd1816fb2958d833a877edaeefacb3373bd2
SHA256:80e37b3fd084eeee6ae666ce185dab8f99b356dfe00385ae27bfdf51c7f63a88
Referenced In Project/Scope: documentation:javadocClasspath
plantuml-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

plexus-archiver-4.7.1.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-archiver/4.7.1/b9ef00eb7f3df17f1a4b8804aff1f34241513283/plexus-archiver-4.7.1.jar
MD5: dd0a71c59268dc98624a841a068e97c1
SHA1: b9ef00eb7f3df17f1a4b8804aff1f34241513283
SHA256:0147f87bc617d9af51f56175a8625cfecbdd6cd6bc21d7ecb5e0b1f70e6dca98
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

plexus-archiver-4.7.1.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0

Identifiers

CVE-2023-37460  

Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Prior to version 4.8.0, using AbstractUnArchiver for extracting an archive might lead to an arbitrary file creation and possibly remote code execution. When extracting an archive with an entry that already exists in the destination directory as a symbolic link whose target does not exist - the `resolveFile()` function will return the symlink's source instead of its target, which will pass the verification that ensures the file will not be extracted outside of the destination directory. Later `Files.newOutputStream()`, that follows symlinks by default,  will actually write the entry's content to the symlink's target. Whoever uses plexus archiver to extract an untrusted archive is vulnerable to an arbitrary file creation and possibly remote code execution. Version 4.8.0 contains a patch for this issue.
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-61 UNIX Symbolic Link (Symlink) Following

CVSSv3:
  • Base Score: CRITICAL (9.8)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Vulnerable Software & Versions:

plexus-build-api-0.0.7.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.sonatype.plexus/plexus-build-api/0.0.7/e6ba5cd4bfd8de00235af936e7f63eb24ed436e6/plexus-build-api-0.0.7.jar
MD5: 49f0f8c6bdf2687e358870a4fc1559c6
SHA1: e6ba5cd4bfd8de00235af936e7f63eb24ed436e6
SHA256:934171640fbd3d2495c50b79b0d9adb11e2c83e65bad157df8fe34bcac0ff798
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath

plexus-build-api-0.0.7.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0

Identifiers

plexus-cipher-1.4.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.sonatype.plexus/plexus-cipher/1.4/50ade46f23bb38cd984b4ec560c46223432aac38/plexus-cipher-1.4.jar
MD5: 7b2d6fcf0d5800d5b1ce09d98d98dcaf
SHA1: 50ade46f23bb38cd984b4ec560c46223432aac38
SHA256:5a15fdba22669e0fdd06e10dcce6320879e1f7398fbc910cd0677b50672a78c4
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

plexus-cipher-1.4.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

plexus-classworlds-2.5.2.jar

Description:

A class loader framework

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-classworlds/2.5.2/4abb111bfdace5b8167db4c0ef74644f3f88f142/plexus-classworlds-2.5.2.jar
MD5: 53b54feee8cef6b843bd6748bda4bfa7
SHA1: 4abb111bfdace5b8167db4c0ef74644f3f88f142
SHA256:b2931d41740490a8d931cbe0cfe9ac20deb66cca606e679f52522f7f534c9fd7
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

plexus-classworlds-2.5.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

plexus-component-annotations-1.5.5.jar

Description:

    Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-component-annotations/1.5.5/c72f2660d0cbed24246ddb55d7fdc4f7374d2078/plexus-component-annotations-1.5.5.jar
MD5: ef37dcdb84030422db428b63c4354e5b
SHA1: c72f2660d0cbed24246ddb55d7fdc4f7374d2078
SHA256:4df7a6a7be64b35bbccf60b5c115697f9ea3421d22674ae67135dde375fcca1f
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

plexus-component-annotations-1.5.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

plexus-interpolation-1.21.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-interpolation/1.21/f92de59d295f16868001644acc21720f3ec9eb15/plexus-interpolation-1.21.jar
MD5: 6629656495f4e5eac4f244fe3b252ea1
SHA1: f92de59d295f16868001644acc21720f3ec9eb15
SHA256:aba7980581027ad5fc74a27ee4d64aad74932fdb32694967242d03fc50290d1f
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

plexus-interpolation-1.21.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

plexus-io-3.4.1.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-io/3.4.1/e9dc0280372501917a124af943dcb709f73577a2/plexus-io-3.4.1.jar
MD5: 7921fc78e18b1dc3dabe8ca5e3558657
SHA1: e9dc0280372501917a124af943dcb709f73577a2
SHA256:ac3be07c2968f98656604ddb8fdf08f1cfc560bc7b329fd17847f151510dc2c4
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

plexus-io-3.4.1.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0

Identifiers

plexus-java-1.1.2.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-java/1.1.2/aa761869ff6c4b7624923a850b05fd9342a931d6/plexus-java-1.1.2.jar
MD5: 1c196172a9c28f441b8e3c73639fe1a2
SHA1: aa761869ff6c4b7624923a850b05fd9342a931d6
SHA256:83659e0d3fa0eda61dc4e8d78ea5a5fe05b7985f88b8557716c295409e64b7f5
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

plexus-java-1.1.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

plexus-sec-dispatcher-1.3.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.sonatype.plexus/plexus-sec-dispatcher/1.3/dedc02034fb8fcd7615d66593228cb71709134b4/plexus-sec-dispatcher-1.3.jar
MD5: 53160199f5667de3fca69b723173639b
SHA1: dedc02034fb8fcd7615d66593228cb71709134b4
SHA256:3b0559bb8432f28937efe6ca193ef54a8506d0075d73fd7406b9b116c6a11063
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

plexus-sec-dispatcher-1.3.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

plexus-utils-3.5.1.jar

Description:

A collection of various utility classes to ease working with strings, files, command lines, XML and
    more.

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-utils/3.5.1/c6bfb17c97ecc8863e88778ea301be742c62b06d/plexus-utils-3.5.1.jar
MD5: cdec471a77f52e687d0df4c43f392a71
SHA1: c6bfb17c97ecc8863e88778ea301be742c62b06d
SHA256:86e0255d4c879c61b4833ed7f13124e8bb679df47debb127326e7db7dd49a07b
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath
  • maven-plugin:compileClasspath
  • maven-plugin:runtimeClasspath

plexus-utils-3.5.1.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven/maven-model@3.9.4
  • pkg:maven/org.apache.maven/maven-model@3.9.4
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/maven-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

plexus-velocity-1.2.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.codehaus.plexus/plexus-velocity/1.2/1331b9d6bbf99ead362c68c2f318ebe5fedda598/plexus-velocity-1.2.jar
MD5: 7d7805136e8165f53c944612a809f1a6
SHA1: 1331b9d6bbf99ead362c68c2f318ebe5fedda598
SHA256:b4c4a0dbeacad54306a1ae230eff5ab45d58e3ab88c86ab7245d3a0772be57ab
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

plexus-velocity-1.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

plugin-utils-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/plugin-utils/build/libs/plugin-utils-8.2.2.jar
MD5: df2d7468198ff081464da15e2e592bbf
SHA1: 18092ee5dbdf964c2a7c15a78cd1b6ef2fd273fd
SHA256:ed4ca6acda0a1b31a4446d97a605c3166d878c72d311270acc1b0854bd240e34
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • aspectj-plugin:compileClasspath
  • aspectj-plugin:runtimeClasspath
  • git-plugin:compileClasspath
  • git-plugin:runtimeClasspath
  • github-plugin:compileClasspath
  • github-plugin:runtimeClasspath

plugin-utils-8.2.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/git-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/git-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/documentation@8.2.2
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/git-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

protobuf-java-3.23.4.jar

Description:

Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.

License:

https://opensource.org/licenses/BSD-3-Clause
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.google.protobuf/protobuf-java/3.23.4/5cc1be17aed4e1e396c6b5359518f369a42ebc37/protobuf-java-3.23.4.jar
MD5: 2ba07863c839f3584938a1ef7e594e33
SHA1: 5cc1be17aed4e1e396c6b5359518f369a42ebc37
SHA256:2fc98a20224d88c8c3dd9a403a8c3930ce0e275aa847ad3734fcbb2db012498b
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • embedded-sass-plugin:runtimeClasspath
  • embedded-sass-plugin:compileClasspath

protobuf-java-3.23.4.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/de.larsgrefer.sass/sass-embedded-host@1.15.2
  • pkg:maven/de.larsgrefer.sass/sass-embedded-host@1.15.2

Identifiers

qdox-2.0.3.jar

Description:

    QDox is a high speed, small footprint parser for extracting class/interface/method definitions from source files
    complete with JavaDoc @tags. It is designed to be used by active code generators or documentation tools.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.thoughtworks.qdox/qdox/2.0.3/d70143d2a58e7b16a8ec73a495508d43a085d83b/qdox-2.0.3.jar
MD5: 1a599568ea16556d01a008d9e062ac89
SHA1: d70143d2a58e7b16a8ec73a495508d43a085d83b
SHA256:ff70c10165714fe9546c418a65d74ecd5d57623ba408cecde9428f0a609b5d1c
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

qdox-2.0.3.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

quicktype-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/quicktype-plugin/build/libs/quicktype-plugin-8.2.2.jar
MD5: 7f6fc30834ebc45db7f61d3ca822991f
SHA1: ea725ebb3f6b057624d6189be0d31d540ec759ea
SHA256:ada4454e14a304388ad2ca9df58ca5ec7b3ee9c5819146de83eec083c621bd6d
Referenced In Project/Scope: documentation:javadocClasspath
quicktype-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

retrofit-2.9.0.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.squareup.retrofit2/retrofit/2.9.0/d8fdfbd5da952141a665a403348b74538efc05ff/retrofit-2.9.0.jar
MD5: 890d951895e6d080185377c741526002
SHA1: d8fdfbd5da952141a665a403348b74538efc05ff
SHA256:e6ea1929c46852f5bec66ab3357da383476cef4e8d1deefdbf195b79cc4d6581
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • github-plugin:compileClasspath
  • github-plugin:runtimeClasspath

retrofit-2.9.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/github-plugin@8.2.2
  • pkg:maven/com.squareup.retrofit2/converter-gson@2.9.0

Identifiers

sass-embedded-host-1.15.2.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/de.larsgrefer.sass/sass-embedded-host/1.15.2/f9c25001cc8e4935f9dd10b78f2c2dc529bf8fb6/sass-embedded-host-1.15.2.jar
MD5: 83705b8520620853a571221da6275088
SHA1: f9c25001cc8e4935f9dd10b78f2c2dc529bf8fb6
SHA256:f2c06c74055cffd4f8ad214dff6579d5716d2a2aec3d89a0d0b50f4b4bcfc296
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • embedded-sass-plugin:runtimeClasspath
  • embedded-sass-plugin:compileClasspath

sass-embedded-host-1.15.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2

Identifiers

sass-embedded-protocol-1.15.2.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/de.larsgrefer.sass/sass-embedded-protocol/1.15.2/986e92de7fe7e8602a6253101b10a0fc8632dbbf/sass-embedded-protocol-1.15.2.jar
MD5: 8f1aba8632c626a2b70cfd337b36ce57
SHA1: 986e92de7fe7e8602a6253101b10a0fc8632dbbf
SHA256:884cbd8478dd53cf2625ef33ae9280336d2637dae5363ecb7a0ad211d26337d8
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • embedded-sass-plugin:runtimeClasspath
  • embedded-sass-plugin:compileClasspath

sass-embedded-protocol-1.15.2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/de.larsgrefer.sass/sass-embedded-host@1.15.2
  • pkg:maven/de.larsgrefer.sass/sass-embedded-host@1.15.2

Identifiers

settings-plugin-8.2.2.jar

File Path: /home/runner/work/gradle-plugins/gradle-plugins/settings-plugin/build/libs/settings-plugin-8.2.2.jar
MD5: 22370371d25e6860b050a9c705fa859f
SHA1: e5f58addd93977b9085ee32366b3b30322b8fac4
SHA256:fd24997f7dcfde62c09a6a8477ccb06f37e5d46ee42b76bcae3c34b578068dde
Referenced In Project/Scope: documentation:javadocClasspath
settings-plugin-8.2.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.freefair.gradle/documentation@8.2.2

Identifiers

sisu-guice-3.2.3-no_aop.jar

Description:

Patched build of Guice: a lightweight dependency injection framework for Java 6 and above

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.sonatype.sisu/sisu-guice/3.2.3/6b8262f32ff7b60881aed3e7aa9d81fdb48330e9/sisu-guice-3.2.3-no_aop.jar
MD5: 733be430711a32f2b9ba72da565cab2f
SHA1: 6b8262f32ff7b60881aed3e7aa9d81fdb48330e9
SHA256:004af7012b6d11ab585ae841130ff091dcad6531d7bf13db4d7deac91589eef4
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

sisu-guice-3.2.3-no_aop.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

slf4j-api-1.7.36.jar

Description:

The slf4j API

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.slf4j/slf4j-api/1.7.36/6c62681a2f655b49963a5983b8b0950a6120ae14/slf4j-api-1.7.36.jar
MD5: 872da51f5de7f3923da4de871d57fd85
SHA1: 6c62681a2f655b49963a5983b8b0950a6120ae14
SHA256:d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0
Referenced In Projects/Scopes:

  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

slf4j-api-1.7.36.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

slf4j-api-2.0.7.jar

Description:

The slf4j API

License:

http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.slf4j/slf4j-api/2.0.7/41eb7184ea9d556f23e18b5cb99cad1f8581fc00/slf4j-api-2.0.7.jar
MD5: 403dffa46cdd2e3c82da19df4f394a4c
SHA1: 41eb7184ea9d556f23e18b5cb99cad1f8581fc00
SHA256:5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • embedded-sass-plugin:runtimeClasspath
  • embedded-sass-plugin:compileClasspath

slf4j-api-2.0.7.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/de.larsgrefer.sass/sass-embedded-host@1.15.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.webjars/webjars-locator-core@0.53
  • pkg:maven/org.webjars/webjars-locator-core@0.53
  • pkg:maven/de.larsgrefer.sass/sass-embedded-host@1.15.2

Identifiers

snappy-0.4.jar

Description:

Port of Snappy to Java

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.iq80.snappy/snappy/0.4/a42b2d92a89efd35bb14738000dabcac6bd07a8d/snappy-0.4.jar
MD5: f0792d1dbe7f90d8b34c7c19961e0073
SHA1: a42b2d92a89efd35bb14738000dabcac6bd07a8d
SHA256:46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

snappy-0.4.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0

Identifiers

trove4j-1.0.20200330.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.jetbrains.intellij.deps/trove4j/1.0.20200330/3afb14d5f9ceb459d724e907a21145e8ff394f02/trove4j-1.0.20200330.jar
MD5: bb75697e375d588a9d3f8f2653b30f77
SHA1: 3afb14d5f9ceb459d724e907a21145e8ff394f02
SHA256:c5fd725bffab51846bf3c77db1383c60aaaebfe1b7fe2f00d23fe1b7df0a439d
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • quicktype-plugin:runtimeClasspath
  • quicktype-plugin:kotlinKlibCommonizerClasspath
  • quicktype-plugin:kotlinCompilerClasspath

trove4j-1.0.20200330.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.jetbrains.kotlin/kotlin-compiler-embeddable@1.8.20
  • pkg:maven/io.freefair.gradle/quicktype-plugin@8.2.2
  • pkg:maven/org.jetbrains.kotlin/kotlin-gradle-plugin@1.8.20
  • pkg:maven/org.jetbrains.kotlin/kotlin-klib-commonizer-embeddable@1.8.20
  • pkg:maven/io.freefair.gradle/aspectj-plugin@8.2.2

Identifiers

velocity-1.7.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.velocity/velocity/1.7/2ceb567b8f3f21118ecdec129fe1271dbc09aa7a/velocity-1.7.jar
MD5: 3692dd72f8367cb35fb6280dc2916725
SHA1: 2ceb567b8f3f21118ecdec129fe1271dbc09aa7a
SHA256:ec92dae810034f4b46dbb16ef4364a4013b0efb24a8c5dd67435cae46a290d8e
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

velocity-1.7.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

CVE-2020-13936  

An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity templates running Apache Velocity Engine versions up to 2.2.
NVD-CWE-noinfo

CVSSv2:
  • Base Score: HIGH (9.0)
  • Vector: /AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSSv3:
  • Base Score: HIGH (8.8)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Vulnerable Software & Versions: (show all)

wagon-provider-api-2.4.jar

Description:

Maven Wagon API that defines the contract between different Wagon implementations

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.apache.maven.wagon/wagon-provider-api/2.4/e40429d9dd849c5fe0bdf97062b1d9358d99826d/wagon-provider-api-2.4.jar
MD5: 882add48c16ceb068eacb5a19e636c1e
SHA1: e40429d9dd849c5fe0bdf97062b1d9358d99826d
SHA256:f65d8d59d71bca18ffa259b5a6de67697bc65b9ff1142c7bb4417ab4b1cacd92
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • maven-plugin-plugin:compileClasspath
  • maven-plugin-plugin:runtimeClasspath

wagon-provider-api-2.4.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@3.9.0

Identifiers

webjars-locator-core-0.53.jar

Description:

WebJar Locator Core functionality

License:

MIT: https://github.com/webjars/webjars-locator-core/blob/master/LICENSE.md
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.webjars/webjars-locator-core/0.53/6c1a5163ee8dd317913000ede5084b192f5f0dd9/webjars-locator-core-0.53.jar
MD5: d7a31a9288744a81b40aae304cc129e7
SHA1: 6c1a5163ee8dd317913000ede5084b192f5f0dd9
SHA256:0ca3694f2d2226add8d67e10ef8c43487f75271caa317fd367626055c1f0f608
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • embedded-sass-plugin:runtimeClasspath
  • embedded-sass-plugin:compileClasspath

webjars-locator-core-0.53.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/embedded-sass-plugin@8.2.2

Identifiers

xz-1.9.jar

File Path: /home/runner/.gradle/caches/modules-2/files-2.1/org.tukaani/xz/1.9/1ea4bec1a921180164852c65006d928617bd2caf/xz-1.9.jar
MD5: 57c2fbfeb55e307ccae52e5322082e02
SHA1: 1ea4bec1a921180164852c65006d928617bd2caf
SHA256:211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5
Referenced In Projects/Scopes:

  • documentation:javadocClasspath
  • compress-plugin:compileClasspath
  • compress-plugin:runtimeClasspath
  • maven-plugin-plugin:runtimeClasspath

xz-1.9.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2
  • pkg:maven/io.freefair.gradle/compress-plugin@8.2.2

Identifiers

zstd-jni-1.5.5-2.jar

Description:

JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.

License:

https://opensource.org/licenses/BSD-2-Clause;description=BSD 2-Clause License
File Path: /home/runner/.gradle/caches/modules-2/files-2.1/com.github.luben/zstd-jni/1.5.5-2/33cb577c70dae09e7d6d2942100ca1ef9512e856/zstd-jni-1.5.5-2.jar
MD5: 725b09a13c090777763ef14b40a3dd29
SHA1: 33cb577c70dae09e7d6d2942100ca1ef9512e856
SHA256:284c0c8b648f17c22da6b70605a73044f1f6b6ab5862900a37e1f107771a825b
Referenced In Projects/Scopes:
  • documentation:javadocClasspath
  • maven-plugin-plugin:runtimeClasspath

zstd-jni-1.5.5-2.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@3.9.0
  • pkg:maven/io.freefair.gradle/maven-plugin-plugin@8.2.2
  • pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@3.9.0

Identifiers



This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.