Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

 Sponsor

Project: Operating System and Hardware Information

com.github.oshi:oshi-parent:6.8.1-SNAPSHOT

Scan Information (show all):

Summary

Display: Showing Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
com.github.oshi:oshi-core-java11:6.8.1-SNAPSHOTpkg:maven/com.github.oshi/oshi-core-java11@6.8.1-SNAPSHOT 06
com.github.oshi:oshi-core:6.8.1-SNAPSHOTpkg:maven/com.github.oshi/oshi-core@6.8.1-SNAPSHOT 06
com.github.oshi:oshi-demo:6.8.1-SNAPSHOTpkg:maven/com.github.oshi/oshi-demo@6.8.1-SNAPSHOT 06
jLibreHardwareMonitor-1.0.5.jarpkg:maven/io.github.pandalxb/jLibreHardwareMonitor@1.0.5 033
jLibreHardwareMonitor-1.0.5.jar: HidSharp.dllpkg:generic/HidSharp@2.1.0 016
jLibreHardwareMonitor-1.0.5.jar: LibreHardwareMonitorLib.dllpkg:generic/LibreHardwareMonitorLib@0.9.4 013
jLibreHardwareMonitor-1.0.5.jar: OpenHardwareMonitorLib.dllpkg:generic/OpenHardwareMonitorLib@0.9.3 011
jPowerShell-1.0.0.jarpkg:maven/io.github.pandalxb/jPowerShell@1.0.0 035
jackson-core-2.18.3.jarcpe:2.3:a:fasterxml:jackson-modules-java8:2.18.3:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.3 0Low47
jackson-databind-2.18.3.jarcpe:2.3:a:fasterxml:jackson-databind:2.18.3:*:*:*:*:*:*:*
cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.3:*:*:*:*:*:*:*
pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.3 0Highest41
jfreechart-1.5.5.jarcpe:2.3:a:time_project:time:1.5.5:*:*:*:*:*:*:*pkg:maven/org.jfree/jfreechart@1.5.5 0Low37
jna-5.17.0.jarcpe:2.3:a:oracle:java_se:5.17.0:*:*:*:*:*:*:*pkg:maven/net.java.dev.jna/jna@5.17.0 0Low48
jna-jpms-5.17.0.jar: jnidispatch.dll 02
jna-jpms-5.17.0.jar: jnidispatch.dll 02
jna-jpms-5.17.0.jar: jnidispatch.dll 02
jna-platform-5.17.0.jarpkg:maven/net.java.dev.jna/jna-platform@5.17.0 042
jna-platform-jpms-5.17.0.jarpkg:maven/net.java.dev.jna/jna-platform-jpms@5.17.0 042
slf4j-api-2.0.17.jarpkg:maven/org.slf4j/slf4j-api@2.0.17 029
slf4j-simple-2.0.17.jarpkg:maven/org.slf4j/slf4j-simple@2.0.17 037

Dependencies (vulnerable)

com.github.oshi:oshi-core-java11:6.8.1-SNAPSHOT

Description:

A JNA-based (native) operating system information library for Java that aims to provide a
        cross-platform implementation to retrieve system information, such as version, memory, CPU, disk, battery, etc.

License:

SPDX-License-Identifier: MIT https://opensource.org/licenses/MIT
File Path: /home/runner/work/oshi/oshi/oshi-core-java11/pom.xml

Referenced In Project/Scope: oshi-dist
com.github.oshi:oshi-core-java11:6.8.1-SNAPSHOT is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-dist@6.8.1-SNAPSHOT

Identifiers

com.github.oshi:oshi-core:6.8.1-SNAPSHOT

Description:

A JNA-based (native) operating system information library for Java that aims to provide a
        cross-platform implementation to retrieve system information, such as version, memory, CPU, disk, battery, etc.

License:

SPDX-License-Identifier: MIT https://opensource.org/licenses/MIT
File Path: /home/runner/work/oshi/oshi/oshi-core/pom.xml

Referenced In Projects/Scopes:
  • oshi-demo
  • oshi-dist

com.github.oshi:oshi-core:6.8.1-SNAPSHOT is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.github.oshi/oshi-dist@6.8.1-SNAPSHOT
  • pkg:maven/com.github.oshi/oshi-demo@6.8.1-SNAPSHOT

Identifiers

com.github.oshi:oshi-demo:6.8.1-SNAPSHOT

Description:

A JNA-based (native) operating system information library for Java that aims to provide a
        cross-platform implementation to retrieve system information, such as version, memory, CPU, disk, battery, etc.

License:

SPDX-License-Identifier: MIT https://opensource.org/licenses/MIT
File Path: /home/runner/work/oshi/oshi/oshi-demo/pom.xml

Referenced In Project/Scope: oshi-dist
com.github.oshi:oshi-demo:6.8.1-SNAPSHOT is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-dist@6.8.1-SNAPSHOT

Identifiers

jLibreHardwareMonitor-1.0.5.jar

Description:

Get all system sensors information from Java

License:

Apache License, Version 2.0: http://wcd taww.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/github/pandalxb/jLibreHardwareMonitor/1.0.5/jLibreHardwareMonitor-1.0.5.jar
MD5: 60548abdaa1cf31160e561d20b9c12c3
SHA1: a00bda1abcd86390bb06926392f91cee033bb8a0
SHA256:f414a8a26dfdc80719504ef4f53297f5128b4760543ca21a35c0d71cd09a4e83
Referenced In Projects/Scopes:
  • oshi-core-java11:compile
  • oshi-core:compile

jLibreHardwareMonitor-1.0.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.github.oshi/oshi-core-java11@6.8.1-SNAPSHOT
  • pkg:maven/com.github.oshi/oshi-core@6.8.1-SNAPSHOT

Identifiers

jLibreHardwareMonitor-1.0.5.jar: HidSharp.dll

Description:

HidSharp

C# HID wrappers

File Path: /home/runner/.m2/repository/io/github/pandalxb/jLibreHardwareMonitor/1.0.5/jLibreHardwareMonitor-1.0.5.jar/lib/HidSharp.dll
MD5: 8d3eb299f8447b633334d1c426a2f0f7
SHA1: 8497ae75f2dd9271d9158a27250288905e8cca28
SHA256:8c58e5fba22acc751032dfe97ce633e4f8a4c96089749bf316d55283b36649c2
Referenced In Projects/Scopes:

  • oshi-core-java11:compile
  • oshi-core:compile

Identifiers

jLibreHardwareMonitor-1.0.5.jar: LibreHardwareMonitorLib.dll

Description:

LibreHardwareMonitorLib

Monitor the temperature sensors, fan speeds, voltages, load and clock speeds of your computer.

File Path: /home/runner/.m2/repository/io/github/pandalxb/jLibreHardwareMonitor/1.0.5/jLibreHardwareMonitor-1.0.5.jar/lib/LibreHardwareMonitorLib.dll
MD5: ca5f27a875cd921a43e054cee361432a
SHA1: a989ad6f4d9eacdc30b31344059a57735e3c5377
SHA256:a0f2728f1734c236a9d02d9e25a88bc4f8cb7bd1faff1770726beb7af06bf8dc
Referenced In Projects/Scopes:

  • oshi-core-java11:compile
  • oshi-core:compile

Identifiers

jLibreHardwareMonitor-1.0.5.jar: OpenHardwareMonitorLib.dll

Description:

Open Hardware Monitor Library

File Path: /home/runner/.m2/repository/io/github/pandalxb/jLibreHardwareMonitor/1.0.5/jLibreHardwareMonitor-1.0.5.jar/lib/OpenHardwareMonitorLib.dll
MD5: 80c5b3e1dbf82abd74a93586625a2540
SHA1: 07b6413c8b6e9ae996ac6bae04004959c9301b2a
SHA256:e8f9ddede1416c7ae3c82d9c702c64ccc712866d1d98a58d7176a1489ebedaaa
Referenced In Projects/Scopes:

  • oshi-core-java11:compile
  • oshi-core:compile

Identifiers

jPowerShell-1.0.0.jar

Description:

API to use PowerShell from Java

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/github/pandalxb/jPowerShell/1.0.0/jPowerShell-1.0.0.jar
MD5: 4c1c543312bd2c51b6a157b4509c247c
SHA1: 24f99ad65255194afbf0d9157cb9583707fa01ac
SHA256:22ec71bf7a6d42954e3a82d62c76d31735cef7734c5e3ca3b81faa8a3d6b4406
Referenced In Projects/Scopes:
  • oshi-core-java11:compile
  • oshi-core:compile

jPowerShell-1.0.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/io.github.pandalxb/jLibreHardwareMonitor@1.0.5
  • pkg:maven/io.github.pandalxb/jLibreHardwareMonitor@1.0.5

Identifiers

jackson-core-2.18.3.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.18.3/jackson-core-2.18.3.jar
MD5: b36e17ef5ba214242b700f8e621e6f12
SHA1: 78f80c259268200e588aa204dd97ecf09b76916e
SHA256:056bc4d3e5e53ce821450fa97b3f9e0f8dde125cf6da6884353bb1f09582e1d9
Referenced In Projects/Scopes:
  • oshi-demo:compile
  • oshi-dist:compile

jackson-core-2.18.3.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.3
  • pkg:maven/com.github.oshi/oshi-demo@6.8.1-SNAPSHOT

Identifiers

jackson-databind-2.18.3.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.3/jackson-databind-2.18.3.jar
MD5: 0cedbc3d377d089e73bb949653b1c76a
SHA1: 537e3886263e3b3464385040453e92567fd509e2
SHA256:510bdda75a7a6186c5bf33b851239488a1450906ae5757121f2e1cc48a7e108f
Referenced In Projects/Scopes:
  • oshi-demo:compile
  • oshi-dist:compile

jackson-databind-2.18.3.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.github.oshi/oshi-demo@6.8.1-SNAPSHOT
  • pkg:maven/com.github.oshi/oshi-demo@6.8.1-SNAPSHOT

Identifiers

jfreechart-1.5.5.jar

Description:

        JFreeChart is a class library, written in Java, for generating charts. 
        Utilising the Java2D API, it supports a wide range of chart types including
        bar charts, pie charts, line charts, XY-plots, time series plots, Sankey charts
        and more.
    

License:

GNU Lesser General Public Licence: http://www.gnu.org/licenses/lgpl.txt
File Path: /home/runner/.m2/repository/org/jfree/jfreechart/1.5.5/jfreechart-1.5.5.jar
MD5: f39186dfa4084491a92094f6ed195427
SHA1: 4147651ba863c28090a585a6f1e91c7a9bcc1f12
SHA256:0912b43a7dd4456c9fd4012fcc9c7b14fd70732adfeaead996824b734a036d5a
Referenced In Projects/Scopes:
  • oshi-demo:compile
  • oshi-dist:compile

jfreechart-1.5.5.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.github.oshi/oshi-demo@6.8.1-SNAPSHOT
  • pkg:maven/com.github.oshi/oshi-demo@6.8.1-SNAPSHOT

Identifiers

jna-5.17.0.jar

Description:

Java Native Access

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.17.0/jna-5.17.0.jar
MD5: 08fc1e1f239ec4511e8d9e5a433f6244
SHA1: 33d12735bef894440780fce64f9758d420c7bae2
SHA256:b3a9408e7c51e08ef0e3bfcc08f443f6ec0f6191ba8cd7c18d53d2b22e5bdbc0
Referenced In Projects/Scopes:
  • oshi-demo:compile
  • oshi-dist:compile
  • oshi-core:compile

jna-5.17.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.github.oshi/oshi-core@6.8.1-SNAPSHOT
  • pkg:maven/com.github.oshi/oshi-core@6.8.1-SNAPSHOT
  • pkg:maven/com.github.oshi/oshi-core@6.8.1-SNAPSHOT

Identifiers

jna-jpms-5.17.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-jpms/5.17.0/jna-jpms-5.17.0.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: 302945a811fd8e21bcdd5226c73b6f74
SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607c
SHA256:b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699d
Referenced In Projects/Scopes:

  • oshi-demo:compile
  • oshi-dist:compile
  • oshi-core-java11:compile
  • oshi-core:compile

Identifiers

  • None

jna-jpms-5.17.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-jpms/5.17.0/jna-jpms-5.17.0.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 2d2475f1f026dd54e9f3e787ae4f81da
SHA1: 27ff882ac271db547aee520b38e3ba9aa91e136c
SHA256:5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
Referenced In Projects/Scopes:

  • oshi-demo:compile
  • oshi-dist:compile
  • oshi-core-java11:compile
  • oshi-core:compile

Identifiers

  • None

jna-jpms-5.17.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-jpms/5.17.0/jna-jpms-5.17.0.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: 0caa1ef75a807f9dde05084fa2219a5c
SHA1: 2f5e1cd82cde192905c7510ce99037b67d980640
SHA256:752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44
Referenced In Projects/Scopes:

  • oshi-demo:compile
  • oshi-dist:compile
  • oshi-core-java11:compile
  • oshi-core:compile

Identifiers

  • None

jna-platform-5.17.0.jar

Description:

Java Native Access Platform

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-platform/5.17.0/jna-platform-5.17.0.jar
MD5: e0ae0c295de31af32a3800e56a5263be
SHA1: a4934c44d25a9d8c2ddf4203affd20330cb3426f
SHA256:b7e3d46c87bad2eb409b0e704916bcd81206168e357312dfddd0e253679cd9e0
Referenced In Projects/Scopes:
  • oshi-demo:compile
  • oshi-dist:compile
  • oshi-core:compile

jna-platform-5.17.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.github.oshi/oshi-core@6.8.1-SNAPSHOT
  • pkg:maven/com.github.oshi/oshi-core@6.8.1-SNAPSHOT
  • pkg:maven/com.github.oshi/oshi-core@6.8.1-SNAPSHOT

Identifiers

jna-platform-jpms-5.17.0.jar

Description:

Java Native Access Platform

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-platform-jpms/5.17.0/jna-platform-jpms-5.17.0.jar
MD5: 1358c9f34d3c816b5716c51770d39613
SHA1: 3e188fef07cb6a9ac434ec30f59e6c622045bf13
SHA256:0754ecfa6ec755b9630fca187431bd6591f304faabf3f9c59cd9e61d66213482
Referenced In Projects/Scopes:
  • oshi-dist:compile
  • oshi-core-java11:compile

jna-platform-jpms-5.17.0.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.github.oshi/oshi-core-java11@6.8.1-SNAPSHOT
  • pkg:maven/com.github.oshi/oshi-core-java11@6.8.1-SNAPSHOT

Identifiers

slf4j-api-2.0.17.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Projects/Scopes:
  • oshi-demo:compile
  • oshi-dist:compile
  • oshi-core-java11:compile
  • oshi-core:compile

slf4j-api-2.0.17.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.github.oshi/oshi-core@6.8.1-SNAPSHOT
  • pkg:maven/com.github.oshi/oshi-core-java11@6.8.1-SNAPSHOT
  • pkg:maven/com.github.oshi/oshi-core@6.8.1-SNAPSHOT
  • pkg:maven/com.github.oshi/oshi-core@6.8.1-SNAPSHOT

Identifiers

slf4j-simple-2.0.17.jar

Description:

SLF4J Simple Provider

License:

https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-simple/2.0.17/slf4j-simple-2.0.17.jar
MD5: 47a7060262b6800b3e0e41db00909b81
SHA1: 9872a3fd794ffe7b18d17747926a64d61526ca96
SHA256:ddfea59ac074c6d3e24ac2c38622d2d963895e17f70b38ed4bdae4d780be6964
Referenced In Projects/Scopes:
  • oshi-demo:compile
  • oshi-dist:compile

slf4j-simple-2.0.17.jar is in the transitive dependency tree of the listed items.Included by:
  • pkg:maven/com.github.oshi/oshi-demo@6.8.1-SNAPSHOT
  • pkg:maven/com.github.oshi/oshi-demo@6.8.1-SNAPSHOT

Identifiers



This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.