Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: google group | github issues

Project: element-path-finder

Scan Information (show all):

Display: Showing Vulnerable Dependencies (click to show all)

Dependency CPE GAV Highest Severity CVE Count CPE Confidence Evidence Count
json-20160810.jar org.json:json:20160810    0 25
gson-2.8.0.jar com.google.code.gson:gson:2.8.0    0 23
jcip-annotations-1.0.jar net.jcip:jcip-annotations:1.0    0 20

Dependencies

json-20160810.jar

Description:  JSON is a light-weight, language independent, data interchange format. See http://www.JSON.org/ The files in this package implement JSON encoders/decoders in Java. It also includes the capability to convert between JSON and XML, HTTP headers, Cookies, and CDL. This is a reference implementation. There is a large number of JSON packages in Java. Perhaps someday the Java community will standardize on one. Until then, choose carefully. The license includes this restriction: "The software shall be used for good, not evil." If your conscience cannot live with that, then choose a different package.

License:

The JSON License: http://json.org/license.html
File Path: C:\Users\v094303\.m2\repository\org\json\json\20160810\json-20160810.jar
MD5: 2f7f899f0766e65017744a4c4fc14d46
SHA1: aca5eb39e2a12fddd6c472b240afe9ebea3a6733
Referenced In Project/Scope: element-path-finder:compile

Identifiers

gson-2.8.0.jar

File Path: C:\Users\v094303\.m2\repository\com\google\code\gson\gson\2.8.0\gson-2.8.0.jar
MD5: a42f1f5bfa4e6f123ddcab3de7e0ff81
SHA1: c4ba5371a29ac9b2ad6129b1d39ea38750043eff
Referenced In Project/Scope: element-path-finder:compile

Identifiers

jcip-annotations-1.0.jar

File Path: C:\Users\v094303\.m2\repository\net\jcip\jcip-annotations\1.0\jcip-annotations-1.0.jar
MD5: 9d5272954896c5a5d234f66b7372b17a
SHA1: afba4942caaeaf46aab0b976afd57cc7c181467e
Referenced In Project/Scope: element-path-finder:compile

Identifiers



This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the Node Security Platform.