Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

 Sponsor

Project: oshi-demo

com.github.oshi:oshi-demo:6.6.6-SNAPSHOT

Scan Information (show all):

Summary

Display: Showing Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
com.github.oshi:oshi-core:6.6.6-SNAPSHOTpkg:maven/com.github.oshi/oshi-core@6.6.6-SNAPSHOT 06
jackson-core-2.18.0.jarcpe:2.3:a:fasterxml:jackson-modules-java8:2.18.0:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.0 0Low47
jackson-databind-2.18.0.jarcpe:2.3:a:fasterxml:jackson-databind:2.18.0:*:*:*:*:*:*:*
cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.0:*:*:*:*:*:*:*
pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.0 0Highest41
jfreechart-1.5.5.jarcpe:2.3:a:time_project:time:1.5.5:*:*:*:*:*:*:*pkg:maven/org.jfree/jfreechart@1.5.5 0Low37
jna-5.15.0.jarcpe:2.3:a:oracle:java_se:5.15.0:*:*:*:*:*:*:*pkg:maven/net.java.dev.jna/jna@5.15.0 0Low48
jna-5.15.0.jar: jnidispatch.dll 02
jna-5.15.0.jar: jnidispatch.dll 02
jna-5.15.0.jar: jnidispatch.dll 02
jna-platform-5.15.0.jarpkg:maven/net.java.dev.jna/jna-platform@5.15.0 044
slf4j-api-2.0.16.jarpkg:maven/org.slf4j/slf4j-api@2.0.16 029
slf4j-simple-2.0.16.jarpkg:maven/org.slf4j/slf4j-simple@2.0.16 037

Dependencies (vulnerable)

com.github.oshi:oshi-core:6.6.6-SNAPSHOT

Description:

A JNA-based (native) operating system information library for Java that aims to provide a
        cross-platform implementation to retrieve system information, such as version, memory, CPU, disk, battery, etc.

License:

SPDX-License-Identifier: MIT https://opensource.org/licenses/MIT
File Path: /home/runner/work/oshi/oshi/oshi-core/pom.xml

Referenced In Project/Scope: oshi-demo
com.github.oshi:oshi-core:6.6.6-SNAPSHOT is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-demo@6.6.6-SNAPSHOT

Identifiers

jackson-core-2.18.0.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.18.0/jackson-core-2.18.0.jar
MD5: 9cfce35068c5ea1c987cf1f1cab537b2
SHA1: 65e8ead7de5d8f7a53e296c363bea3182f21f925
SHA256:215bbd7c8fd65be504cb92ff3aa1c4b790fc7b14cca72f4546aac4143c101bb5
Referenced In Project/Scope: oshi-demo:compile
jackson-core-2.18.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.0

Identifiers

jackson-databind-2.18.0.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.18.0/jackson-databind-2.18.0.jar
MD5: 00c8c4671939735ac93117eb6c43b10e
SHA1: 8dba1f789a75fc30b59303574fe2b269afa4d3bc
SHA256:2bf1927b7f3224683ed0157a1ec3b0ede75179da3e597d78c572d56ed00f9f3c
Referenced In Project/Scope: oshi-demo:compile
jackson-databind-2.18.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-demo@6.6.6-SNAPSHOT

Identifiers

jfreechart-1.5.5.jar

Description:

        JFreeChart is a class library, written in Java, for generating charts. 
        Utilising the Java2D API, it supports a wide range of chart types including
        bar charts, pie charts, line charts, XY-plots, time series plots, Sankey charts
        and more.
    

License:

GNU Lesser General Public Licence: http://www.gnu.org/licenses/lgpl.txt
File Path: /home/runner/.m2/repository/org/jfree/jfreechart/1.5.5/jfreechart-1.5.5.jar
MD5: f39186dfa4084491a92094f6ed195427
SHA1: 4147651ba863c28090a585a6f1e91c7a9bcc1f12
SHA256:0912b43a7dd4456c9fd4012fcc9c7b14fd70732adfeaead996824b734a036d5a
Referenced In Project/Scope: oshi-demo:compile
jfreechart-1.5.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-demo@6.6.6-SNAPSHOT

Identifiers

jna-5.15.0.jar

Description:

Java Native Access

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.15.0/jna-5.15.0.jar
MD5: cd756a719c1892e56d9c9d424e8983bb
SHA1: 01ee1d80ff44f08280188f7c0e740d57207841ac
SHA256:a564158d28ab5127fc6a958028ed54279fe0999662c46425b6a3b09a2a52094d
Referenced In Project/Scope: oshi-demo:compile
jna-5.15.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-core@6.6.6-SNAPSHOT

Identifiers

jna-5.15.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.15.0/jna-5.15.0.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: 302945a811fd8e21bcdd5226c73b6f74
SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607c
SHA256:b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699d
Referenced In Project/Scope: oshi-demo:compile

Identifiers

  • None

jna-5.15.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.15.0/jna-5.15.0.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 2d2475f1f026dd54e9f3e787ae4f81da
SHA1: 27ff882ac271db547aee520b38e3ba9aa91e136c
SHA256:5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
Referenced In Project/Scope: oshi-demo:compile

Identifiers

  • None

jna-5.15.0.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.15.0/jna-5.15.0.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: 0caa1ef75a807f9dde05084fa2219a5c
SHA1: 2f5e1cd82cde192905c7510ce99037b67d980640
SHA256:752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44
Referenced In Project/Scope: oshi-demo:compile

Identifiers

  • None

jna-platform-5.15.0.jar

Description:

Java Native Access Platform

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-platform/5.15.0/jna-platform-5.15.0.jar
MD5: 41d91e4a13428fb79c12024cb92a4091
SHA1: 86b502cad57d45da172b5e3231c537b042e296ef
SHA256:18b7f6e7d34ce89309a6d9052ae1a987e8e64057e2f683e01e50f2f2b59cd153
Referenced In Project/Scope: oshi-demo:compile
jna-platform-5.15.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-core@6.6.6-SNAPSHOT

Identifiers

slf4j-api-2.0.16.jar

Description:

The slf4j API

License:

http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.16/slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256:a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Project/Scope: oshi-demo:compile
slf4j-api-2.0.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-core@6.6.6-SNAPSHOT

Identifiers

slf4j-simple-2.0.16.jar

Description:

SLF4J Simple Provider

License:

http://www.opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-simple/2.0.16/slf4j-simple-2.0.16.jar
MD5: 58c531dfe60020700c53c45fdf6234bf
SHA1: 56d3d8e59293543780ad35af4ee4a5d9c111a588
SHA256:effc32018658bea09d1e08c7d1060ccad46c086960f583d07dd7ffe9c1172a47
Referenced In Project/Scope: oshi-demo:compile
slf4j-simple-2.0.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-demo@6.6.6-SNAPSHOT

Identifiers



This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.