Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Project: playground

Scan Information (show all):

Display: Showing Vulnerable Dependencies (click to show all)

Dependency CPE GAV Highest Severity CVE Count CPE Confidence Evidence Count
aopalliance-1.0.jar aopalliance:aopalliance:1.0   0 13
h2-1.4.190.jar com.h2database:h2:1.4.190   0 21
commons-lang-2.6.jar commons-lang:commons-lang:2.6   0 27
commons-logging-1.2.jar commons-logging:commons-logging:1.2   0 29
javax.servlet-api-3.1.0.jar javax.servlet:javax.servlet-api:3.1.0   0 26
validation-api-1.1.0.Final.jar javax.validation:validation-api:1.1.0.Final   0 17
jstl-1.2.jar javax.servlet:jstl:1.2   0 22
log4j-1.2.17.jar log4j:log4j:1.2.17   0 19
jsonevent-layout-1.7.jar net.logstash.log4j:jsonevent-layout:1.7   0 13
json-smart-1.1.1.jar net.minidev:json-smart:1.1.1   0 15
sitemesh-2.4.2.jar opensymphony:sitemesh:2.4.2   0 15
mybatis-spring-1.2.3.jar org.mybatis:mybatis-spring:1.2.3   0 30
mybatis-3.3.0.jar org.mybatis:mybatis:3.3.0   0 32
mybatis-3.3.0.jar/META-INF/maven/ognl/ognl/pom.xml ognl:ognl:3.0.11   0 6
mybatis-3.3.0.jar/META-INF/maven/org.javassist/javassist/pom.xml org.javassist:javassist:3.18.2-GA   0 5
slf4j-api-1.7.13.jar org.slf4j:slf4j-api:1.7.13   0 21
slf4j-log4j12-1.7.13.jar org.slf4j:slf4j-log4j12:1.7.13   0 21
spring-aop-4.2.3.RELEASE.jar org.springframework:spring-aop:4.2.3.RELEASE   0 17
spring-beans-4.2.3.RELEASE.jar org.springframework:spring-beans:4.2.3.RELEASE   0 16
spring-context-4.2.3.RELEASE.jar cpe:/a:context_project:context:4.2.3 org.springframework:spring-context:4.2.3.RELEASE   0 LOW 16
spring-core-4.2.3.RELEASE.jar cpe:/a:pivotal:spring_framework:4.2.3
cpe:/a:springsource:spring_framework:4.2.3
cpe:/a:vmware:springsource_spring_framework:4.2.3
org.springframework:spring-core:4.2.3.RELEASE   0 LOW 22
spring-expression-4.2.3.RELEASE.jar org.springframework:spring-expression:4.2.3.RELEASE   0 17
spring-jdbc-4.2.3.RELEASE.jar org.springframework:spring-jdbc:4.2.3.RELEASE   0 16
spring-tx-4.2.3.RELEASE.jar org.springframework:spring-tx:4.2.3.RELEASE   0 17
spring-web-4.2.3.RELEASE.jar org.springframework:spring-web:4.2.3.RELEASE   0 17
spring-webmvc-4.2.3.RELEASE.jar org.springframework:spring-webmvc:4.2.3.RELEASE   0 17

Dependencies

aopalliance-1.0.jar

Description: AOP Alliance

License:

Public Domain
File Path: /home/travis/.m2/repository/aopalliance/aopalliance/1.0/aopalliance-1.0.jar
MD5: 04177054e180d09e3998808efa0401c7
SHA1: 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
Referenced In Project: playground

Identifiers

h2-1.4.190.jar

Description: H2 Database Engine

License:

MPL 2.0, and EPL 1.0: http://h2database.com/html/license.html
File Path: /home/travis/.m2/repository/com/h2database/h2/1.4.190/h2-1.4.190.jar
MD5: 9b47b1e3fedd30394a22ec726e1e9ad5
SHA1: df71536d44e3b07f0c15bb632cac51956c55fc3e
Referenced In Project: playground

Identifiers

commons-lang-2.6.jar

Description:  Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/commons-lang/commons-lang/2.6/commons-lang-2.6.jar
MD5: 4d5c1693079575b362edf41500630bbd
SHA1: 0ce1edb914c94ebc388f086c6827e8bdeec71ac2
Referenced In Project: playground

Identifiers

commons-logging-1.2.jar

Description: Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/commons-logging/commons-logging/1.2/commons-logging-1.2.jar
MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686
Referenced In Project: playground

Identifiers

javax.servlet-api-3.1.0.jar

Description: Java(TM) Servlet 3.1 API Design Specification

License:

CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html
File Path: /home/travis/.m2/repository/javax/servlet/javax.servlet-api/3.1.0/javax.servlet-api-3.1.0.jar
MD5: 79de69e9f5ed8c7fcb8342585732bbf7
SHA1: 3cd63d075497751784b2fa84be59432f4905bf7c
Referenced In Project: playground

Identifiers

validation-api-1.1.0.Final.jar

Description:  Bean Validation API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/javax/validation/validation-api/1.1.0.Final/validation-api-1.1.0.Final.jar
MD5: 4c257f52462860b62ab3cdab45f53082
SHA1: 8613ae82954779d518631e05daa73a6a954817d5
Referenced In Project: playground

Identifiers

jstl-1.2.jar

File Path: /home/travis/.m2/repository/jstl/jstl/1.2/jstl-1.2.jar
MD5: 51e15f798e69358cb893e38c50596b9b
SHA1: 74aca283cd4f4b4f3e425f5820cda58f44409547
Referenced In Project: playground

Identifiers

log4j-1.2.17.jar

Description: Apache Log4j 1.2

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/log4j/log4j/1.2.17/log4j-1.2.17.jar
MD5: 04a41f0a068986f0f73485cf507c0f40
SHA1: 5af35056b4d257e4b64b9e8069c0746e8b08629f
Referenced In Project: playground

Identifiers

jsonevent-layout-1.7.jar

Description: Log4j pattern layout that conforms to the logstash json_event format

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/net/logstash/log4j/jsonevent-layout/1.7/jsonevent-layout-1.7.jar
MD5: f79d1eac12457bbf345989129a74eeac
SHA1: 507713504f0ddb75ba512f62763519c43cf46fde
Referenced In Project: playground

Identifiers

json-smart-1.1.1.jar

Description:  JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.

File Path: /home/travis/.m2/repository/net/minidev/json-smart/1.1.1/json-smart-1.1.1.jar
MD5: c382c9109020d001b96329c2057ba933
SHA1: 24a2f903d25e004de30ac602c5b47f2d4e420a59
Referenced In Project: playground

Identifiers

sitemesh-2.4.2.jar

Description: SiteMesh is a web-page layout and decoration framework and web- application integration framework to aid in creating large sites consisting of many pages for which a consistent look/feel, navigation and layout scheme is required.

License:

The Apache Software License, Version 1.1: http://www.opensymphony.com/sitemesh/license.action
File Path: /home/travis/.m2/repository/opensymphony/sitemesh/2.4.2/sitemesh-2.4.2.jar
MD5: b9cd6bb5c6e34555ae430d9c2f2441ba
SHA1: 4cb3b08c96553b0f4595a80917838ca302f67f3f
Referenced In Project: playground

Identifiers

mybatis-spring-1.2.3.jar

Description: An easy-to-use Spring3 bridge for MyBatis sql mapping framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/org/mybatis/mybatis-spring/1.2.3/mybatis-spring-1.2.3.jar
MD5: de409c23fab2613cfd3f3a13774eeaca
SHA1: 18f0297b83960f280bacd68e87f9d374813e099e
Referenced In Project: playground

Identifiers

mybatis-3.3.0.jar

Description: The MyBatis data mapper framework makes it easier to use a relational database with object-oriented applications. MyBatis couples objects with stored procedures or SQL statements using a XML descriptor or annotations. Simplicity is the biggest advantage of the MyBatis data mapper over object relational mapping tools.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/org/mybatis/mybatis/3.3.0/mybatis-3.3.0.jar
MD5: 087cd06fb8ffacee47228a064d321887
SHA1: 7c0e3582a1518b6d8e4e37ce2fc49b7bb6f2040f
Referenced In Project: playground

Identifiers

mybatis-3.3.0.jar/META-INF/maven/ognl/ognl/pom.xml

Description: OGNL - Object Graph Navigation Library

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/org/mybatis/mybatis/3.3.0/mybatis-3.3.0.jar/META-INF/maven/ognl/ognl/pom.xml
MD5: 8ac561b489c804cd0ce0baf4e0daf48e
SHA1: a0e47ea9fa6b74b3592e08201ec203c56ef642c9

Identifiers

  • maven: ognl:ognl:3.0.11   Confidence:HIGH

mybatis-3.3.0.jar/META-INF/maven/org.javassist/javassist/pom.xml

Description:  Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.

License:

MPL 1.1: http://www.mozilla.org/MPL/MPL-1.1.html
LGPL 2.1: http://www.gnu.org/licenses/lgpl-2.1.html
Apache License 2.0: http://www.apache.org/licenses/
File Path: /home/travis/.m2/repository/org/mybatis/mybatis/3.3.0/mybatis-3.3.0.jar/META-INF/maven/org.javassist/javassist/pom.xml
MD5: ceebff0d4a34099e005169409caa8abd
SHA1: 3d271c5efcd004c22bdc6976c99a477458856296

Identifiers

  • maven: org.javassist:javassist:3.18.2-GA   Confidence:HIGH

slf4j-api-1.7.13.jar

Description: The slf4j API

File Path: /home/travis/.m2/repository/org/slf4j/slf4j-api/1.7.13/slf4j-api-1.7.13.jar
MD5: a5168034046d95e07f4aae3f5e2d1c67
SHA1: 7fcf30c25b8f4a9379b9dad0d3f487b25272c026
Referenced In Project: playground

Identifiers

slf4j-log4j12-1.7.13.jar

Description: SLF4J LOG4J-12 Binding

File Path: /home/travis/.m2/repository/org/slf4j/slf4j-log4j12/1.7.13/slf4j-log4j12-1.7.13.jar
MD5: 5ed0e989781fa39925c0880da3376e00
SHA1: 55517a839e93c29d8a6ce8d8504a3e124e3a5a2f
Referenced In Project: playground

Identifiers

spring-aop-4.2.3.RELEASE.jar

Description: Spring AOP

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/org/springframework/spring-aop/4.2.3.RELEASE/spring-aop-4.2.3.RELEASE.jar
MD5: 8f481086bc75e9e91a7b894dcc742f19
SHA1: 6384a57a024df03bfcb1eeccd3d820da98125b92
Referenced In Project: playground

Identifiers

spring-beans-4.2.3.RELEASE.jar

Description: Spring Beans

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/org/springframework/spring-beans/4.2.3.RELEASE/spring-beans-4.2.3.RELEASE.jar
MD5: 42d2fbea849a63ce8d424d67a3ad7a79
SHA1: 249921ead97248410ac04f854075f0a1c1a567e4
Referenced In Project: playground

Identifiers

spring-context-4.2.3.RELEASE.jar

Description: Spring Context

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/org/springframework/spring-context/4.2.3.RELEASE/spring-context-4.2.3.RELEASE.jar
MD5: 58271fabdea43893e51af2740037e42e
SHA1: fb26a160d984eb9cbf01fbf38f4b17e15fdd50e1
Referenced In Project: playground

Identifiers

spring-core-4.2.3.RELEASE.jar

Description: Spring Core

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/org/springframework/spring-core/4.2.3.RELEASE/spring-core-4.2.3.RELEASE.jar
MD5: d32fdda47ac7d787d10d19c0f1129d6f
SHA1: 3ed00dad7a16b2a28df9348294f6a67151f43cf6
Referenced In Project: playground

Identifiers

  • cpe: cpe:/a:pivotal:spring_framework:4.2.3   Confidence:LOW   
  • cpe: cpe:/a:springsource:spring_framework:4.2.3   Confidence:LOW   
  • cpe: cpe:/a:vmware:springsource_spring_framework:4.2.3   Confidence:LOW   
  • maven: org.springframework:spring-core:4.2.3.RELEASE   Confidence:HIGHEST

spring-expression-4.2.3.RELEASE.jar

Description: Spring Expression Language (SpEL)

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/org/springframework/spring-expression/4.2.3.RELEASE/spring-expression-4.2.3.RELEASE.jar
MD5: 28cb643d35788645f6cf50ebc6aa8dcf
SHA1: 67b064c726c276436387c7a183a49deda153a6cc
Referenced In Project: playground

Identifiers

spring-jdbc-4.2.3.RELEASE.jar

Description: Spring JDBC

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/org/springframework/spring-jdbc/4.2.3.RELEASE/spring-jdbc-4.2.3.RELEASE.jar
MD5: 55c90665b184fecb089368fa3260a233
SHA1: 22f129baf3914b6bbaa842f9356c32d93ecf7bc1
Referenced In Project: playground

Identifiers

spring-tx-4.2.3.RELEASE.jar

Description: Spring Transaction

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/org/springframework/spring-tx/4.2.3.RELEASE/spring-tx-4.2.3.RELEASE.jar
MD5: b2683f92dcf1f7adb5402f0c122ca39b
SHA1: 617420d7e0351c334aa4495d6f30ad21c4c643a7
Referenced In Project: playground

Identifiers

spring-web-4.2.3.RELEASE.jar

Description: Spring Web

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/org/springframework/spring-web/4.2.3.RELEASE/spring-web-4.2.3.RELEASE.jar
MD5: 50f56e40c8a3ebfe2ce106c46fd02e1b
SHA1: 98eea3fbe01450fff18aeb7e6003f80a879a049e
Referenced In Project: playground

Identifiers

spring-webmvc-4.2.3.RELEASE.jar

Description: Spring Web MVC

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/travis/.m2/repository/org/springframework/spring-webmvc/4.2.3.RELEASE/spring-webmvc-4.2.3.RELEASE.jar
MD5: b1f92929b345565653c42f1932686a86
SHA1: 46803840259c6d51c531e4f07f4213d758c6ee1d
Referenced In Project: playground

Identifiers



This report contains data retrieved from the National Vulnerability Database.