Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Dependency | Vulnerability IDs | Package | Highest Severity | CVE Count | Confidence | Evidence Count |
---|---|---|---|---|---|---|
lombok-1.18.38.jar | pkg:maven/org.projectlombok/lombok@1.18.38 | 0 | 36 | |||
lombok-1.18.38.jar: mavenEcjBootstrapAgent.jar | 0 | 7 | ||||
net.andresbustamante:y-a-foot-commons-api:2.0.0-SNAPSHOT | pkg:maven/net.andresbustamante/y-a-foot-commons-api@2.0.0-SNAPSHOT | 0 | 6 | |||
net.andresbustamante:y-a-foot-users-api:2.0.0-SNAPSHOT | pkg:maven/net.andresbustamante/y-a-foot-users-api@2.0.0-SNAPSHOT | 0 | 6 |
Description:
Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!
License:
The MIT License: https://projectlombok.org/LICENSEFile Path: /opt/tomcat/.m2/repository/org/projectlombok/lombok/1.18.38/lombok-1.18.38.jar
File Path: /opt/tomcat/.m2/repository/org/projectlombok/lombok/1.18.38/lombok-1.18.38.jar/lombok/launch/mavenEcjBootstrapAgent.jar
MD5: 885d5d6be90a5dcd4b82cdf741e3f31a
SHA1: e1f7f1779f40157fd0b984c1bc32a0cb45cae66e
SHA256:74a80a6ee84e5c6fe497dfcc46a46dbe30578525e747eb531e918ee0750c8da9
Referenced In Project/Scope: Core API:provided
Description:
Shared API classes and interfaces
File Path: /opt/tomcat/.jenkins/workspace/y-a-foot_y-a-foot_build_develop/y-a-foot-commons-api/pom.xml
Referenced In Project/Scope: Core API
net.andresbustamante:y-a-foot-commons-api:2.0.0-SNAPSHOT is in the transitive dependency tree of the listed items.Included by: pkg:maven/net.andresbustamante/y-a-foot-core-api@2.0.0-SNAPSHOT
Description:
Users API classes and interfaces
File Path: /opt/tomcat/.jenkins/workspace/y-a-foot_y-a-foot_build_develop/y-a-foot-users-api/pom.xml
Referenced In Project/Scope: Core API
net.andresbustamante:y-a-foot-users-api:2.0.0-SNAPSHOT is in the transitive dependency tree of the listed items.Included by: pkg:maven/net.andresbustamante/y-a-foot-core-api@2.0.0-SNAPSHOT