Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.0.0
Report Generated On: Sun, 6 Apr 2025 12:01:00 +0200
Dependencies Scanned: 17 (15 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-04-06T11:50:29+02
NVD API Last Modified: 2025-04-06T09:15:14Z

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
j2mod-3.2.1.jar	cpe:2.3:a:steve_project:steve:3.2.1:::::::*	pkg:maven/com.ghgande/j2mod@3.2.1	Low	64
jSerialComm-2.10.4.jar	cpe:2.3:a:fazecast:jserialcomm:2.10.4:::::::*	pkg:maven/com.fazecast/jSerialComm@2.10.4	Low	30
jSerialComm-2.10.4.jar: jSerialComm.dll				2
jSerialComm-2.10.4.jar: jSerialComm.dll				2
jSerialComm-2.10.4.jar: jSerialComm.dll				2
jSerialComm-2.10.4.jar: jSerialComm.dll				2
jackson-core-2.18.3.jar	cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.3:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.3	Low	47
jackson-databind-2.17.2.jar	cpe:2.3:a:fasterxml:jackson-databind:2.17.2:::::::* cpe:2.3:a:fasterxml:jackson-modules-java8:2.17.2:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2	Highest	41
jamod-1.2.jar		pkg:maven/net.wimpi/jamod@1.2		36
logback-core-1.5.16.jar	cpe:2.3:a:qos:logback:1.5.16:::::::*	pkg:maven/ch.qos.logback/logback-core@1.5.16	Highest	39
lombok-1.18.36.jar		pkg:maven/org.projectlombok/lombok@1.18.36		36
lombok-1.18.36.jar: mavenEcjBootstrapAgent.jar				7
org.eclipse.paho.client.mqttv3-1.2.5.jar	cpe:2.3:a:eclipse:paho_java_client:1.2.5:::::::*	pkg:maven/org.eclipse.paho/org.eclipse.paho.client.mqttv3@1.2.5	Highest	32
rxtx-2.1.7.jar		pkg:maven/org.rxtx/rxtx@2.1.7		16
slf4j-api-2.0.17.jar		pkg:maven/org.slf4j/slf4j-api@2.0.17		29

Dependencies (vulnerable)

j2mod-3.2.1.jar

Description:

A Modbus TCP/UDP/Serial Master and Slave implementation

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /var/lib/jenkins/.m2/repository/com/ghgande/j2mod/3.2.1/j2mod-3.2.1.jar
MD5: 5bfeb9f916235bf93edbdfcdfedb5ed5
SHA1: 7c93c1e05b3c71a430b2c9363864c42292566a1b
SHA256:d33bdb39c6505c11873d0c5c90b4993626cc37ebd4abc3c5fa1aca3eab8d53e2
Referenced In Project/Scope: SolarEdge:compile
pkg:maven/org.flasby/solaredge@1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	j2mod	High
Vendor	jar	package name	ghgande	Highest
Vendor	jar	package name	j2mod	Highest
Vendor	jar	package name	modbus	Highest
Vendor	jar	package name	slave	Highest
Vendor	Manifest	bundle-symbolicname	com.ghgande.j2mod	Medium
Vendor	Manifest	implemenation-vendor	${project.organization.name}	Medium
Vendor	pom	artifactid	j2mod	Highest
Vendor	pom	artifactid	j2mod	Low
Vendor	pom	developer email	http://www.ghgande.com	Low
Vendor	pom	developer email	jdcharlton@user.sourceforge.com	Low
Vendor	pom	developer email	steve.ohara@4ng.co.uk	Low
Vendor	pom	developer email	wimpi@user.sourceforge.com	Low
Vendor	pom	developer id	jdcharlton	Medium
Vendor	pom	developer id	jhaugh	Medium
Vendor	pom	developer id	sohara	Medium
Vendor	pom	developer id	wimpi	Medium
Vendor	pom	developer name	Dieter Wimberger	Medium
Vendor	pom	developer name	John Charlton	Medium
Vendor	pom	developer name	Julie Haugh	Medium
Vendor	pom	developer name	Steve O'Hara	Medium
Vendor	pom	developer org	4NG	Medium
Vendor	pom	developer org	greenHouse Gas and Electric	Medium
Vendor	pom	developer org	SourceForge	Medium
Vendor	pom	developer org URL	http://jamod.sourceforge.net	Medium
Vendor	pom	developer org URL	http://www.4ng.co.uk	Medium
Vendor	pom	developer org URL	http://www.ghgande.com	Medium
Vendor	pom	groupid	com.ghgande	Highest
Vendor	pom	name	j2mod	High
Vendor	pom	url	steveohara/j2mod	Highest
Product	file	name	j2mod	High
Product	jar	package name	ghgande	Highest
Product	jar	package name	j2mod	Highest
Product	jar	package name	modbus	Highest
Product	jar	package name	slave	Highest
Product	Manifest	Bundle-Name	j2mod	Medium
Product	Manifest	bundle-symbolicname	com.ghgande.j2mod	Medium
Product	Manifest	Implementation-Title	j2mod	High
Product	pom	artifactid	j2mod	Highest
Product	pom	developer email	http://www.ghgande.com	Low
Product	pom	developer email	jdcharlton@user.sourceforge.com	Low
Product	pom	developer email	steve.ohara@4ng.co.uk	Low
Product	pom	developer email	wimpi@user.sourceforge.com	Low
Product	pom	developer id	jdcharlton	Low
Product	pom	developer id	jhaugh	Low
Product	pom	developer id	sohara	Low
Product	pom	developer id	wimpi	Low
Product	pom	developer name	Dieter Wimberger	Low
Product	pom	developer name	John Charlton	Low
Product	pom	developer name	Julie Haugh	Low
Product	pom	developer name	Steve O'Hara	Low
Product	pom	developer org	4NG	Low
Product	pom	developer org	greenHouse Gas and Electric	Low
Product	pom	developer org	SourceForge	Low
Product	pom	developer org URL	http://jamod.sourceforge.net	Low
Product	pom	developer org URL	http://www.4ng.co.uk	Low
Product	pom	developer org URL	http://www.ghgande.com	Low
Product	pom	groupid	com.ghgande	Highest
Product	pom	name	j2mod	High
Product	pom	url	steveohara/j2mod	High
Version	file	version	3.2.1	High
Version	Manifest	Bundle-Version	3.2.1	High
Version	Manifest	Implementation-Version	3.2.1	High
Version	pom	version	3.2.1	Highest

Identifiers

pkg:maven/com.ghgande/j2mod@3.2.1 (Confidence:High)
cpe:2.3:a:steve_project:steve:3.2.1:*:*:*:*:*:*:* (Confidence:Low)

jSerialComm-2.10.4.jar

Description:

A platform-independent serial communications library for Java.

License:

GNU Lesser GPL, Version 3: http://www.gnu.org/licenses/lgpl.html
Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0

File Path: /var/lib/jenkins/.m2/repository/com/fazecast/jSerialComm/2.10.4/jSerialComm-2.10.4.jar
MD5: 46cd1207d1d4ed59f9b41161b5927480
SHA1: c817941580159787741a85a53d1834e39b536dee
SHA256:d472dcf3668c36f61f0470b83b0f166055425cd7d743efe5e245758826552850
Referenced In Project/Scope: SolarEdge:compile
pkg:maven/com.ghgande/j2mod@3.2.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jSerialComm	High
Vendor	jar	package name	fazecast	Highest
Vendor	jar	package name	jserialcomm	Highest
Vendor	Manifest	bundle-symbolicname	com.fazecast.jSerialComm	Medium
Vendor	Manifest	Implementation-Vendor	Fazecast, Inc.	High
Vendor	pom	artifactid	jSerialComm	Highest
Vendor	pom	artifactid	jSerialComm	Low
Vendor	pom	developer email	will.hedgecock@fazecast.com	Low
Vendor	pom	developer id	hedgecrw	Medium
Vendor	pom	developer name	Will Hedgecock	Medium
Vendor	pom	groupid	com.fazecast	Highest
Vendor	pom	name	jSerialComm	High
Vendor	pom	url	http://fazecast.github.io/jSerialComm/	Highest
Product	file	name	jSerialComm	High
Product	jar	package name	fazecast	Highest
Product	jar	package name	jserialcomm	Highest
Product	Manifest	Bundle-Name	jSerialComm	Medium
Product	Manifest	bundle-symbolicname	com.fazecast.jSerialComm	Medium
Product	Manifest	Implementation-Title	jSerialComm: Java Serial Communications Library	High
Product	pom	artifactid	jSerialComm	Highest
Product	pom	developer email	will.hedgecock@fazecast.com	Low
Product	pom	developer id	hedgecrw	Low
Product	pom	developer name	Will Hedgecock	Low
Product	pom	groupid	com.fazecast	Highest
Product	pom	name	jSerialComm	High
Product	pom	url	http://fazecast.github.io/jSerialComm/	Medium
Version	file	version	2.10.4	High
Version	Manifest	Bundle-Version	2.10.4	High
Version	Manifest	Implementation-Version	2.10.4	High
Version	pom	version	2.10.4	Highest

Identifiers

pkg:maven/com.fazecast/jSerialComm@2.10.4 (Confidence:High)
cpe:2.3:a:fazecast:jserialcomm:2.10.4:*:*:*:*:*:*:* (Confidence:Low)

jSerialComm-2.10.4.jar: jSerialComm.dll

File Path: /var/lib/jenkins/.m2/repository/com/fazecast/jSerialComm/2.10.4/jSerialComm-2.10.4.jar/Windows/aarch64/jSerialComm.dll
MD5: b17fcb28a9b23a6f8f8ae00d65c0c7f9
SHA1: cc11b605910e11f8999a8ce04e8855aff46dec9a
SHA256:e5543a6fa5ce80db261af1575b4b01691332cda5af210c1e4232bf2db41add5f
Referenced In Project/Scope: SolarEdge:compile

Evidence

Identifiers

None

jSerialComm-2.10.4.jar: jSerialComm.dll

File Path: /var/lib/jenkins/.m2/repository/com/fazecast/jSerialComm/2.10.4/jSerialComm-2.10.4.jar/Windows/armv7/jSerialComm.dll
MD5: fe69d5d7a117f1e1247c92ed562c2da5
SHA1: 1f71cc45de9ed2c9864ac131316227e2b870210e
SHA256:84e75064b28e10d0e537f59c341477995fe2d1b7e1cb5ce5fdf7b2fa76f64873
Referenced In Project/Scope: SolarEdge:compile

Evidence

Identifiers

None

jSerialComm-2.10.4.jar: jSerialComm.dll

File Path: /var/lib/jenkins/.m2/repository/com/fazecast/jSerialComm/2.10.4/jSerialComm-2.10.4.jar/Windows/x86/jSerialComm.dll
MD5: ab595635a9c1883659ddf76fec5a62d8
SHA1: 7bea3c61f9681f6c07352ebd5d5ea4b4ce6bb9e0
SHA256:fe4900e7ec67c9aebf9efa4ddcebc2fb82f93eb991a705e2fa32653b9889902d
Referenced In Project/Scope: SolarEdge:compile

Evidence

Identifiers

None

jSerialComm-2.10.4.jar: jSerialComm.dll

File Path: /var/lib/jenkins/.m2/repository/com/fazecast/jSerialComm/2.10.4/jSerialComm-2.10.4.jar/Windows/x86_64/jSerialComm.dll
MD5: d499b64ac9e02976619f5f2ef4d8d417
SHA1: 1cec87fe201662319ffa654913b4d89fbc9d10d3
SHA256:500357c37ac6e7e007c5b87263200f04c067b3d363f380620551e2919ce281e8
Referenced In Project/Scope: SolarEdge:compile

Evidence

Identifiers

None

jackson-core-2.18.3.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /var/lib/jenkins/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.18.3/jackson-core-2.18.3.jar
MD5: b36e17ef5ba214242b700f8e621e6f12
SHA1: 78f80c259268200e588aa204dd97ecf09b76916e
SHA256:056bc4d3e5e53ce821450fa97b3f9e0f8dde125cf6da6884353bb1f09582e1d9
Referenced In Project/Scope: SolarEdge:compile
pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jackson-core	High
Vendor	jar	package name	base	Highest
Vendor	jar	package name	com	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	jar	package name	jackson	Highest
Vendor	jar	package name	json	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	artifactid	jackson-core	Highest
Vendor	pom	artifactid	jackson-core	Low
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	pom	name	Jackson-core	High
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	url	FasterXML/jackson-core	Highest
Product	file	name	jackson-core	High
Product	hint analyzer	product	java8	Highest
Product	hint analyzer	product	modules	Highest
Product	jar	package name	base	Highest
Product	jar	package name	com	Highest
Product	jar	package name	core	Highest
Product	jar	package name	fasterxml	Highest
Product	jar	package name	jackson	Highest
Product	jar	package name	json	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Product	Manifest	Bundle-Name	Jackson-core	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Product	Manifest	Implementation-Title	Jackson-core	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Jackson-core	Medium
Product	pom	artifactid	jackson-core	Highest
Product	pom	groupid	com.fasterxml.jackson.core	Highest
Product	pom	name	Jackson-core	High
Product	pom	parent-artifactid	jackson-base	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	pom	url	FasterXML/jackson-core	High
Version	file	version	2.18.3	High
Version	Manifest	Bundle-Version	2.18.3	High
Version	Manifest	Implementation-Version	2.18.3	High
Version	pom	version	2.18.3	Highest

Related Dependencies

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.3 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.18.3:*:*:*:*:*:*:* (Confidence:Low)

jackson-databind-2.17.2.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /var/lib/jenkins/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.17.2/jackson-databind-2.17.2.jar
MD5: 3e1ff7c1f0fda885946619a47ef9d5de
SHA1: e6deb029e5901e027c129341fac39e515066b68c
SHA256:c04993f33c0f845342653784f14f38373d005280e6359db5f808701cfae73c0c
Referenced In Project/Scope: SolarEdge:compile
pkg:maven/org.flasby/solaredge@1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jackson-databind	High
Vendor	jar	package name	databind	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	jar	package name	jackson	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	artifactid	jackson-databind	Highest
Vendor	pom	artifactid	jackson-databind	Low
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	pom	name	jackson-databind	High
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	url	FasterXML/jackson	Highest
Product	file	name	jackson-databind	High
Product	hint analyzer	product	java8	Highest
Product	hint analyzer	product	modules	Highest
Product	jar	package name	databind	Highest
Product	jar	package name	fasterxml	Highest
Product	jar	package name	jackson	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson	Low
Product	Manifest	Bundle-Name	jackson-databind	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Product	Manifest	Implementation-Title	jackson-databind	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	jackson-databind	Medium
Product	pom	artifactid	jackson-databind	Highest
Product	pom	groupid	com.fasterxml.jackson.core	Highest
Product	pom	name	jackson-databind	High
Product	pom	parent-artifactid	jackson-base	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	pom	url	FasterXML/jackson	High
Version	file	version	2.17.2	High
Version	Manifest	Bundle-Version	2.17.2	High
Version	Manifest	Implementation-Version	2.17.2	High
Version	pom	version	2.17.2	Highest

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-databind:2.17.2:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.17.2:*:*:*:*:*:*:* (Confidence:Low)

jamod-1.2.jar

Description:

        jamod is an object oriented implementation of the Modbus protocol, realized 100% in Java. It allows to quickly
        realize master and slave applications in various transport flavors (IP and serial).

License:

Apache 2 Style License: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /var/lib/jenkins/.m2/repository/net/wimpi/jamod/1.2/jamod-1.2.jar
MD5: ac632e9abca35ec6aef76b2e855e4813
SHA1: fbc12201cf6682f2635a270948f2fe305cb747f7
SHA256:1e69937fe17a3758df89adcba2852cac2da8e891878e5a4a739873c2e5390fbf
Referenced In Project/Scope: SolarEdge:compile
pkg:maven/org.flasby/solaredge@1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jamod	High
Vendor	jar	package name	modbus	Highest
Vendor	jar	package name	modbus	Low
Vendor	jar	package name	net	Highest
Vendor	jar	package name	net	Low
Vendor	jar	package name	wimpi	Highest
Vendor	jar	package name	wimpi	Low
Vendor	pom	artifactid	jamod	Highest
Vendor	pom	artifactid	jamod	Low
Vendor	pom	developer email	jdcharlton at users.sourceforge.net	Low
Vendor	pom	developer email	wimpi at users.sourceforge.net	Low
Vendor	pom	developer id	jdcharlton	Medium
Vendor	pom	developer id	wimpi	Medium
Vendor	pom	developer name	Dieter Wimberger	Medium
Vendor	pom	developer name	John Charlton	Medium
Vendor	pom	groupid	net.wimpi	Highest
Vendor	pom	name	jamod	High
Vendor	pom	url	http://jamod.sourceforge.net	Highest
Product	file	name	jamod	High
Product	jar	package name	modbus	Highest
Product	jar	package name	modbus	Low
Product	jar	package name	net	Highest
Product	jar	package name	wimpi	Highest
Product	jar	package name	wimpi	Low
Product	pom	artifactid	jamod	Highest
Product	pom	developer email	jdcharlton at users.sourceforge.net	Low
Product	pom	developer email	wimpi at users.sourceforge.net	Low
Product	pom	developer id	jdcharlton	Low
Product	pom	developer id	wimpi	Low
Product	pom	developer name	Dieter Wimberger	Low
Product	pom	developer name	John Charlton	Low
Product	pom	groupid	net.wimpi	Highest
Product	pom	name	jamod	High
Product	pom	url	http://jamod.sourceforge.net	Medium
Version	file	version	1.2	High
Version	pom	version	1.2	Highest

Identifiers

pkg:maven/net.wimpi/jamod@1.2 (Confidence:High)

logback-core-1.5.16.jar

Description:

logback-core module

License:

http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

File Path: /var/lib/jenkins/.m2/repository/ch/qos/logback/logback-core/1.5.16/logback-core-1.5.16.jar
MD5: e850016bab60c8adb79242bcc4bb50e4
SHA1: 4f17700f046900aea2fadf115e2d67fec921f7fd
SHA256:f15e206b98ca25294506d2dadfe5ce2a6da9df9cf7c85d8e7191f99a422df3c9
Referenced In Project/Scope: SolarEdge:compile
pkg:maven/ch.qos.logback/logback-classic@1.5.16

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	logback-core	High
Vendor	jar	package name	ch	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	logback	Highest
Vendor	jar	package name	qos	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.qos.ch	Low
Vendor	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Vendor	Manifest	Implementation-Vendor	QOS.ch	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Vendor	Manifest	specification-vendor	QOS.ch	Low
Vendor	pom	artifactid	logback-core	Highest
Vendor	pom	artifactid	logback-core	Low
Vendor	pom	groupid	ch.qos.logback	Highest
Vendor	pom	name	Logback Core Module	High
Vendor	pom	parent-artifactid	logback-parent	Low
Product	file	name	logback-core	High
Product	jar	package name	21	Highest
Product	jar	package name	ch	Highest
Product	jar	package name	core	Highest
Product	jar	package name	logback	Highest
Product	jar	package name	qos	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.qos.ch	Low
Product	Manifest	Bundle-Name	Logback Core Module	Medium
Product	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Product	Manifest	Implementation-Title	Logback Core Module	High
Product	Manifest	multi-release	true	Low
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Product	Manifest	specification-title	Logback Core Module	Medium
Product	pom	artifactid	logback-core	Highest
Product	pom	groupid	ch.qos.logback	Highest
Product	pom	name	Logback Core Module	High
Product	pom	parent-artifactid	logback-parent	Medium
Version	file	version	1.5.16	High
Version	Manifest	Bundle-Version	1.5.16	High
Version	Manifest	Implementation-Version	1.5.16	High
Version	pom	version	1.5.16	Highest

Related Dependencies

Identifiers

pkg:maven/ch.qos.logback/logback-core@1.5.16 (Confidence:High)
cpe:2.3:a:qos:logback:1.5.16:*:*:*:*:*:*:* (Confidence:Highest)

lombok-1.18.36.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE

File Path: /var/lib/jenkins/.m2/repository/org/projectlombok/lombok/1.18.36/lombok-1.18.36.jar
MD5: 92c08153ae16c161c8cc2cc8185d2724
SHA1: 5a30490a6e14977d97d9c73c924c1f1b5311ea95
SHA256:73b6b05b6a2d365b700bab08d30f94de9d336490bc0acce5b6181fef48cbf18e
Referenced In Project/Scope: SolarEdge:provided
pkg:maven/org.flasby/solaredge@1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	lombok	High
Vendor	jar	package name	java	Highest
Vendor	jar	package name	lombok	Highest
Vendor	jar	package name	tostring	Highest
Vendor	Manifest	automatic-module-name	lombok	Medium
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	pom	artifactid	lombok	Highest
Vendor	pom	artifactid	lombok	Low
Vendor	pom	developer email	reinier@projectlombok.org	Low
Vendor	pom	developer email	roel@projectlombok.org	Low
Vendor	pom	developer id	rspilker	Medium
Vendor	pom	developer id	rzwitserloot	Medium
Vendor	pom	developer name	Reinier Zwitserloot	Medium
Vendor	pom	developer name	Roel Spilker	Medium
Vendor	pom	groupid	org.projectlombok	Highest
Vendor	pom	name	Project Lombok	High
Vendor	pom	url	https://projectlombok.org	Highest
Product	file	name	lombok	High
Product	jar	package name	java	Highest
Product	jar	package name	lombok	Highest
Product	jar	package name	tostring	Highest
Product	Manifest	automatic-module-name	lombok	Medium
Product	Manifest	can-redefine-classes	true	Low
Product	pom	artifactid	lombok	Highest
Product	pom	developer email	reinier@projectlombok.org	Low
Product	pom	developer email	roel@projectlombok.org	Low
Product	pom	developer id	rspilker	Low
Product	pom	developer id	rzwitserloot	Low
Product	pom	developer name	Reinier Zwitserloot	Low
Product	pom	developer name	Roel Spilker	Low
Product	pom	groupid	org.projectlombok	Highest
Product	pom	name	Project Lombok	High
Product	pom	url	https://projectlombok.org	Medium
Version	file	version	1.18.36	High
Version	Manifest	lombok-version	1.18.36	Medium
Version	pom	version	1.18.36	Highest

Identifiers

pkg:maven/org.projectlombok/lombok@1.18.36 (Confidence:High)

lombok-1.18.36.jar: mavenEcjBootstrapAgent.jar

File Path: /var/lib/jenkins/.m2/repository/org/projectlombok/lombok/1.18.36/lombok-1.18.36.jar/lombok/launch/mavenEcjBootstrapAgent.jar
MD5: 27467519bf9615b24cad3b003c4353a9
SHA1: 37d92e0a726a67883ab94bee27c6f292e6318dcd
SHA256:9566d0706d6245cac3cdd9db6d1d81551aa3e727febcf64452c6db9701c40037
Referenced In Project/Scope: SolarEdge:provided

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	mavenEcjBootstrapAgent	High
Vendor	jar	package name	launch	Low
Vendor	jar	package name	lombok	Low
Vendor	Manifest	can-redefine-classes	true	Low
Product	file	name	mavenEcjBootstrapAgent	High
Product	jar	package name	launch	Low
Product	Manifest	can-redefine-classes	true	Low

Identifiers

None

org.eclipse.paho.client.mqttv3-1.2.5.jar

File Path: /var/lib/jenkins/.m2/repository/org/eclipse/paho/org.eclipse.paho.client.mqttv3/1.2.5/org.eclipse.paho.client.mqttv3-1.2.5.jar
MD5: eb09d20835460ad2de7b6d46e77ad113
SHA1: 1546cfc794449c39ad569853843a930104fdc297
SHA256:59914287adac506a28d5e8172eed262a22605f3df4d426b9d92f41dae2448185
Referenced In Project/Scope: SolarEdge:compile
org.eclipse.paho.client.mqttv3-1.2.5.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/org.flasby/solaredge@1.0-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	org.eclipse.paho.client.mqttv3	High
Vendor	jar	package name	client	Highest
Vendor	jar	package name	eclipse	Highest
Vendor	jar	package name	mqttv3	Highest
Vendor	jar	package name	paho	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-activationpolicy	lazy	Low
Vendor	Manifest	bundle-localization	bundle	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.7	Low
Vendor	Manifest	bundle-symbolicname	org.eclipse.paho.client.mqttv3	Medium
Vendor	pom	artifactid	eclipse.paho.client.mqttv3	Low
Vendor	pom	artifactid	org.eclipse.paho.client.mqttv3	Highest
Vendor	pom	groupid	org.eclipse.paho	Highest
Vendor	pom	parent-artifactid	java-parent	Low
Product	file	name	org.eclipse.paho.client.mqttv3	High
Product	jar	package name	client	Highest
Product	jar	package name	eclipse	Highest
Product	jar	package name	mqttv3	Highest
Product	jar	package name	paho	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-activationpolicy	lazy	Low
Product	Manifest	bundle-localization	bundle	Low
Product	Manifest	Bundle-Name	org.eclipse.paho.client.mqttv3	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.7	Low
Product	Manifest	bundle-symbolicname	org.eclipse.paho.client.mqttv3	Medium
Product	pom	artifactid	eclipse.paho.client.mqttv3	Highest
Product	pom	artifactid	org.eclipse.paho.client.mqttv3	Highest
Product	pom	groupid	org.eclipse.paho	Highest
Product	pom	parent-artifactid	java-parent	Medium
Version	file	version	1.2.5	High
Version	Manifest	Bundle-Version	1.2.5	High
Version	pom	version	1.2.5	Highest

Identifiers

pkg:maven/org.eclipse.paho/org.eclipse.paho.client.mqttv3@1.2.5 (Confidence:High)
cpe:2.3:a:eclipse:paho_java_client:1.2.5:*:*:*:*:*:*:* (Confidence:Highest)

rxtx-2.1.7.jar

Description:

RXTX is a native lib providing serial and parallel communication for the Java Development Toolkit (JDK).

License:

GNU Lesser General Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version.: http://www.fsf.org/licensing/licenses/lgpl.html

File Path: /var/lib/jenkins/.m2/repository/org/rxtx/rxtx/2.1.7/rxtx-2.1.7.jar
MD5: f94e90a2030310fc882f814b8f7eccc6
SHA1: e96c946be1e6537378fd532d2742b523df2725a4
SHA256:80c06c307be9c54ecf02cf10db921f42f1809087e85f2f1f772a80b282f326cc
Referenced In Project/Scope: SolarEdge:compile
pkg:maven/net.wimpi/jamod@1.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	rxtx	High
Vendor	jar	package name	gnu	Low
Vendor	jar	package name	io	Low
Vendor	pom	artifactid	rxtx	Highest
Vendor	pom	artifactid	rxtx	Low
Vendor	pom	groupid	org.rxtx	Highest
Vendor	pom	name	RXTX serial and parallel I/O libraries	High
Vendor	pom	url	http://www.rxtx.org	Highest
Product	file	name	rxtx	High
Product	jar	package name	io	Low
Product	pom	artifactid	rxtx	Highest
Product	pom	groupid	org.rxtx	Highest
Product	pom	name	RXTX serial and parallel I/O libraries	High
Product	pom	url	http://www.rxtx.org	Medium
Version	file	version	2.1.7	High
Version	pom	version	2.1.7	Highest

Identifiers

pkg:maven/org.rxtx/rxtx@2.1.7 (Confidence:High)

slf4j-api-2.0.17.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit

File Path: /var/lib/jenkins/.m2/repository/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Project/Scope: SolarEdge:compile
pkg:maven/com.ghgande/j2mod@3.2.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	slf4j-api	Highest
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	jar	package name	slf4j	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	SLF4J API Module	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.17	High
Version	Manifest	Bundle-Version	2.0.17	High
Version	Manifest	Implementation-Version	2.0.17	High
Version	pom	version	2.0.17	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@2.0.17 (Confidence:High)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: SolarEdge

org.flasby:solaredge:1.0-SNAPSHOT

Summary

Dependencies (vulnerable)

j2mod-3.2.1.jar

Evidence

Identifiers

jSerialComm-2.10.4.jar

Evidence

Identifiers

jSerialComm-2.10.4.jar: jSerialComm.dll

Evidence

Identifiers

jSerialComm-2.10.4.jar: jSerialComm.dll

Evidence

Identifiers

jSerialComm-2.10.4.jar: jSerialComm.dll

Evidence

Identifiers

jSerialComm-2.10.4.jar: jSerialComm.dll

Evidence

Identifiers

jackson-core-2.18.3.jar

Evidence

Related Dependencies

Identifiers

jackson-databind-2.17.2.jar

Evidence

Identifiers

jamod-1.2.jar

Evidence

Identifiers

logback-core-1.5.16.jar

Evidence

Related Dependencies

Identifiers

lombok-1.18.36.jar

Evidence

Identifiers

lombok-1.18.36.jar: mavenEcjBootstrapAgent.jar

Evidence

Identifiers

org.eclipse.paho.client.mqttv3-1.2.5.jar

Evidence

Identifiers

rxtx-2.1.7.jar

Evidence

Identifiers

slf4j-api-2.0.17.jar

Evidence

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor