Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 5.3.0
Report Generated On: Sun, 1 Mar 2020 20:45:19 GMT
Dependencies Scanned: 5 (5 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE Checked: 2020-03-01T16:55:46
NVD CVE Modified: 2020-03-01T15:01:49
VersionCheckOn: 2020-03-01T16:55:47

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
httpclient-4.5.11.jar	cpe:2.3:a:apache:httpclient:4.5.11:::::::*	pkg:maven/org.apache.httpcomponents/httpclient@4.5.11	Highest	34
httpcore-4.4.13.jar		pkg:maven/org.apache.httpcomponents/httpcore@4.4.13		34
commons-logging-1.2.jar		pkg:maven/commons-logging/commons-logging@1.2		36
commons-codec-1.11.jar		pkg:maven/commons-codec/commons-codec@1.11		42
jsoup-1.13.1.jar	cpe:2.3:a:jsoup:jsoup:1.13.1:::::::*	pkg:maven/org.jsoup/jsoup@1.13.1	Highest	31

Dependencies

httpclient-4.5.11.jar

Description:

   Apache HttpComponents Client

File Path: /builds/uweplonus/html-crawler/.m2/repository/org/apache/httpcomponents/httpclient/4.5.11/httpclient-4.5.11.jar
MD5: b2e56688392087372feb9968dd2b32b4
SHA1: f6d42fee5110c227bac18a550a297e028f2fb21a
SHA256:1420aabd81fd0bb9a0acf6d3bc03dddc1b6f3398914cfd03c70e44ce69f290a4
Referenced In Project/Scope:HTML Crawler:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	org.apache.httpcomponents.httpclient	Medium
Vendor	file	name	httpclient	High
Vendor	jar	package name	httpclient	Highest
Vendor	pom	groupid	org.apache.httpcomponents	Highest
Vendor	pom	url	http://hc.apache.org/httpcomponents-client	Highest
Vendor	pom	name	Apache HttpClient	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache.httpcomponents	Medium
Vendor	pom	parent-artifactid	httpcomponents-client	Low
Vendor	jar	package name	client	Highest
Vendor	jar	package name	apache	Highest
Vendor	pom	artifactid	httpclient	Low
Vendor	Manifest	implementation-url	http://hc.apache.org/httpcomponents-client	Low
Vendor	pom	parent-groupid	org.apache.httpcomponents	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	groupid	apache.httpcomponents	Highest
Product	pom	artifactid	httpclient	Highest
Product	Manifest	automatic-module-name	org.apache.httpcomponents.httpclient	Medium
Product	Manifest	specification-title	Apache HttpClient	Medium
Product	file	name	httpclient	High
Product	jar	package name	httpclient	Highest
Product	jar	package name	http	Highest
Product	pom	name	Apache HttpClient	High
Product	pom	groupid	apache.httpcomponents	Low
Product	pom	url	http://hc.apache.org/httpcomponents-client	Medium
Product	pom	parent-groupid	org.apache.httpcomponents	Low
Product	jar	package name	client	Highest
Product	Manifest	Implementation-Title	Apache HttpClient	High
Product	jar	package name	apache	Highest
Product	pom	parent-artifactid	httpcomponents-client	Medium
Product	Manifest	implementation-url	http://hc.apache.org/httpcomponents-client	Low
Version	pom	version	4.5.11	Highest
Version	file	version	4.5.11	Highest
Version	Manifest	Implementation-Version	4.5.11	High

Identifiers

pkg:maven/org.apache.httpcomponents/httpclient@4.5.11 (Confidence:High)
cpe:2.3:a:apache:httpclient:4.5.11:*:*:*:*:*:*:* (Confidence:Highest)

httpcore-4.4.13.jar

Description:

   Apache HttpComponents Core (blocking I/O)

File Path: /builds/uweplonus/html-crawler/.m2/repository/org/apache/httpcomponents/httpcore/4.4.13/httpcore-4.4.13.jar
MD5: e07a248f61c52776a2366c075dcd4963
SHA1: 853b96d3afbb7bf8cc303fe27ee96836a10c1834
SHA256:e06e89d40943245fcfa39ec537cdbfce3762aecde8f9c597780d2b00c2b43424
Referenced In Project/Scope:HTML Crawler:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	org.apache.httpcomponents.httpcore	Medium
Vendor	pom	groupid	org.apache.httpcomponents	Highest
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	artifactid	httpcore	Low
Vendor	pom	name	Apache HttpCore	High
Vendor	Manifest	implementation-url	http://hc.apache.org/httpcomponents-core-ga	Low
Vendor	jar	package name	apache	Highest
Vendor	Manifest	url	http://hc.apache.org/httpcomponents-core-ga	Low
Vendor	pom	parent-groupid	org.apache.httpcomponents	Medium
Vendor	pom	parent-artifactid	httpcomponents-core	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	file	name	httpcore	High
Vendor	pom	groupid	apache.httpcomponents	Highest
Vendor	Manifest	implementation-build	${scmBranch}@r${buildNumber}; 2020-01-09 12:56:55+0000	Low
Vendor	pom	url	http://hc.apache.org/httpcomponents-core-ga	Highest
Product	Manifest	automatic-module-name	org.apache.httpcomponents.httpcore	Medium
Product	jar	package name	http	Highest
Product	pom	groupid	apache.httpcomponents	Low
Product	pom	parent-groupid	org.apache.httpcomponents	Low
Product	pom	artifactid	httpcore	Highest
Product	pom	name	Apache HttpCore	High
Product	Manifest	implementation-url	http://hc.apache.org/httpcomponents-core-ga	Low
Product	jar	package name	apache	Highest
Product	pom	parent-artifactid	httpcomponents-core	Medium
Product	Manifest	url	http://hc.apache.org/httpcomponents-core-ga	Low
Product	pom	url	http://hc.apache.org/httpcomponents-core-ga	Medium
Product	Manifest	Implementation-Title	HttpComponents Apache HttpCore	High
Product	Manifest	specification-title	HttpComponents Apache HttpCore	Medium
Product	file	name	httpcore	High
Product	Manifest	implementation-build	${scmBranch}@r${buildNumber}; 2020-01-09 12:56:55+0000	Low
Version	pom	version	4.4.13	Highest
Version	Manifest	Implementation-Version	4.4.13	High
Version	file	version	4.4.13	Highest

Identifiers

pkg:maven/org.apache.httpcomponents/httpcore@4.4.13 (Confidence:High)

commons-logging-1.2.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /builds/uweplonus/html-crawler/.m2/repository/commons-logging/commons-logging/1.2/commons-logging-1.2.jar
MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686
SHA256:daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636
Referenced In Project/Scope:HTML Crawler:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-logging/	Low
Vendor	pom	name	Apache Commons Logging	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	jar	package name	logging	Highest
Vendor	jar	package name	commons	Highest
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	jar	package name	apache	Highest
Vendor	Manifest	implementation-build	tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	Manifest	bundle-symbolicname	org.apache.commons.logging	Medium
Vendor	file	name	commons-logging	High
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	artifactid	commons-logging	Low
Vendor	pom	groupid	commons-logging	Highest
Vendor	pom	url	http://commons.apache.org/proper/commons-logging/	Highest
Product	Manifest	Bundle-Name	Apache Commons Logging	Medium
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-logging/	Low
Product	pom	name	Apache Commons Logging	High
Product	pom	url	http://commons.apache.org/proper/commons-logging/	Medium
Product	pom	artifactid	commons-logging	Highest
Product	jar	package name	logging	Highest
Product	jar	package name	commons	Highest
Product	pom	parent-groupid	org.apache.commons	Low
Product	jar	package name	apache	Highest
Product	Manifest	implementation-build	tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200	Low
Product	pom	groupid	commons-logging	Low
Product	Manifest	bundle-symbolicname	org.apache.commons.logging	Medium
Product	file	name	commons-logging	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	Manifest	Implementation-Title	Apache Commons Logging	High
Product	Manifest	specification-title	Apache Commons Logging	Medium
Version	Manifest	Implementation-Version	1.2	High
Version	pom	parent-version	1.2	Low
Version	file	version	1.2	Highest
Version	pom	version	1.2	Highest

Identifiers

pkg:maven/commons-logging/commons-logging@1.2 (Confidence:High)

commons-codec-1.11.jar

Description:

     The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /builds/uweplonus/html-crawler/.m2/repository/commons-codec/commons-codec/1.11/commons-codec-1.11.jar
MD5: 567159b1ae257a43e1391a8f59d24cfe
SHA1: 3acb4705652e16236558f0f4f2192cc33c3bd189
SHA256:e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d
Referenced In Project/Scope:HTML Crawler:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	org.apache.commons.codec	Medium
Vendor	file	name	commons-codec	High
Vendor	pom	url	http://commons.apache.org/proper/commons-codec/	Highest
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	codec	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	jar	package name	commons	Highest
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-codec/	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	groupid	commons-codec	Highest
Vendor	Manifest	implementation-url	http://commons.apache.org/proper/commons-codec/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.codec	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	jar	package name	encoder	Highest
Vendor	pom	artifactid	commons-codec	Low
Vendor	pom	name	Apache Commons Codec	High
Vendor	Manifest	Implementation-Vendor-Id	commons-codec	Medium
Product	Manifest	automatic-module-name	org.apache.commons.codec	Medium
Product	pom	groupid	commons-codec	Low
Product	file	name	commons-codec	High
Product	Manifest	specification-title	Apache Commons Codec	Medium
Product	pom	artifactid	commons-codec	Highest
Product	jar	package name	codec	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	Implementation-Title	Apache Commons Codec	High
Product	Manifest	Bundle-Name	Apache Commons Codec	Medium
Product	pom	url	http://commons.apache.org/proper/commons-codec/	Medium
Product	jar	package name	commons	Highest
Product	pom	parent-groupid	org.apache.commons	Low
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-codec/	Low
Product	jar	package name	apache	Highest
Product	Manifest	implementation-url	http://commons.apache.org/proper/commons-codec/	Low
Product	Manifest	bundle-symbolicname	org.apache.commons.codec	Medium
Product	jar	package name	encoder	Highest
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	name	Apache Commons Codec	High
Version	file	version	1.11	Highest
Version	pom	version	1.11	Highest
Version	pom	parent-version	1.11	Low
Version	Manifest	Implementation-Version	1.11	High

Identifiers

pkg:maven/commons-codec/commons-codec@1.11 (Confidence:High)

jsoup-1.13.1.jar

Description:

jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers do.

License:

The MIT License: https://jsoup.org/license

File Path: /builds/uweplonus/html-crawler/.m2/repository/org/jsoup/jsoup/1.13.1/jsoup-1.13.1.jar
MD5: 5ee148bf2db7c6d81edb7904e970e9db
SHA1: f9577f3732bb7caa4fee8aba5053158f4010c118
SHA256:e2b99c0d2fa39f69f27efb1c0016390713feb2f2e02d8ea7f1c36b780271598a
Referenced In Project/Scope:HTML Crawler:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	org.jsoup	Medium
Vendor	pom	name	jsoup Java HTML Parser	High
Vendor	file	name	jsoup	High
Vendor	pom	groupid	org.jsoup	Highest
Vendor	Manifest	bundle-symbolicname	org.jsoup	Medium
Vendor	pom	organization url	https://jhy.io/	Medium
Vendor	jar	package name	parser	Highest
Vendor	jar	package name	jsoup	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	pom	organization name	Jonathan Hedley	High
Vendor	pom	groupid	jsoup	Highest
Vendor	Manifest	bundle-docurl	https://jsoup.org/	Low
Vendor	pom	url	https://jsoup.org/	Highest
Vendor	pom	artifactid	jsoup	Low
Product	Manifest	automatic-module-name	org.jsoup	Medium
Product	pom	name	jsoup Java HTML Parser	High
Product	pom	groupid	jsoup	Low
Product	pom	artifactid	jsoup	Highest
Product	file	name	jsoup	High
Product	jar	package name	parser	Highest
Product	Manifest	bundle-symbolicname	org.jsoup	Medium
Product	jar	package name	jsoup	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	pom	url	https://jsoup.org/	Medium
Product	pom	organization url	https://jhy.io/	Low
Product	Manifest	bundle-docurl	https://jsoup.org/	Low
Product	Manifest	Bundle-Name	jsoup Java HTML Parser	Medium
Product	pom	organization name	Jonathan Hedley	Low
Version	pom	version	1.13.1	Highest
Version	file	version	1.13.1	Highest
Version	Manifest	Bundle-Version	1.13.1	High

Identifiers

pkg:maven/org.jsoup/jsoup@1.13.1 (Confidence:High)
cpe:2.3:a:jsoup:jsoup:1.13.1:*:*:*:*:*:*:* (Confidence:Highest)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: HTML Crawler

org.sw4j.tool.html:crawler:0.1.0-SNAPSHOT

Summary

Dependencies

httpclient-4.5.11.jar

Evidence

Identifiers

httpcore-4.4.13.jar

Evidence

Identifiers

commons-logging-1.2.jar

Evidence

Identifiers

commons-codec-1.11.jar

Evidence

Identifiers

jsoup-1.13.1.jar

Evidence

Identifiers