Press CTR-C to copy XML [help]


Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

Project: com.github.pmonks/bvpbot 1.0.20260331

Scan Information (show all):

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency Vulnerability IDs Package Highest Severity CVE Count Confidence Evidence Count
aero-1.1.6.jar pkg:maven/aero/aero@1.1.6   0 17
asm-9.2.jar pkg:maven/org.ow2.asm/asm@9.2   0 52
camel-snake-kebab-0.4.3.jar pkg:maven/camel-snake-kebab/camel-snake-kebab@0.4.3   0 12
cheshire-6.1.0.jar pkg:maven/cheshire/cheshire@6.1.0   0 19
clj-2253-0.1.0.jar pkg:maven/org.clojars.pmonks/clj-2253@0.1.0   0 12
clj-wcwidth-1.0.125.jar pkg:maven/com.github.pmonks/clj-wcwidth@1.0.125   0 20
clojure-1.12.4.jar cpe:2.3:a:clojure:clojure:1.12.4:*:*:*:*:*:*:* pkg:maven/org.clojure/clojure@1.12.4   0 Highest 22
clojure.java-time-1.4.3.jar cpe:2.3:a:time_project:time:1.4.3:*:*:*:*:*:*:* pkg:maven/clojure.java-time/clojure.java-time@1.4.3   0 Highest 17
commons-beanutils-1.11.0.jar cpe:2.3:a:apache:commons_beanutils:1.11.0:*:*:*:*:*:*:* pkg:maven/commons-beanutils/commons-beanutils@1.11.0   0 Highest 169
commons-collections-3.2.2.jar cpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:* pkg:maven/commons-collections/commons-collections@3.2.2   0 Highest 83
commons-digester-2.1.jar pkg:maven/commons-digester/commons-digester@2.1   0 97
commons-logging-1.3.5.jar pkg:maven/commons-logging/commons-logging@1.3.5   0 128
commons-validator-1.10.1.jar pkg:maven/commons-validator/commons-validator@1.10.1   0 129
core.async-1.8.741.jar pkg:maven/org.clojure/core.async@1.8.741   0 21
core.cache-1.1.234.jar pkg:maven/org.clojure/core.cache@1.1.234   0 17
core.memoize-1.1.266.jar pkg:maven/org.clojure/core.memoize@1.1.266   0 17
core.specs.alpha-0.4.74.jar cpe:2.3:a:alex_project:alex:0.4.74:*:*:*:*:*:*:* pkg:maven/org.clojure/core.specs.alpha@0.4.74   0 Low 17
data.json-2.3.1.jar pkg:maven/org.clojure/data.json@2.3.1   0 19
data.priority-map-1.2.0.jar pkg:maven/org.clojure/data.priority-map@1.2.0   0 14
discljord-1.3.1.jar pkg:maven/com.github.discljord/discljord@1.3.1   0 12
embroidery-1.0.44.jar pkg:maven/com.github.pmonks/embroidery@1.0.44   0 20
gniazdo-1.2.2.jar pkg:maven/stylefruits/gniazdo@1.2.2   0 17
hato-1.0.0.jar pkg:maven/hato/hato@1.0.0   0 17
http-kit-2.8.1.jar pkg:maven/http-kit/http-kit@2.8.1   0 21
jackson-core-2.20.0.jar cpe:2.3:a:fasterxml:jackson-core:2.20.0:*:*:*:*:*:*:*
cpe:2.3:a:fasterxml:jackson-modules-java8:2.20.0:*:*:*:*:*:*:* 		pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0   0 Highest 46
jackson-dataformat-cbor-2.20.0.jar cpe:2.3:a:fasterxml:jackson-dataformats-binary:2.20.0:*:*:*:*:*:*:* pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.20.0   0 Low 38
jansi-3.30.6.jar (shaded: org.jline:jansi-core:3.30.6) cpe:2.3:a:jline:jline:3.30.6:*:*:*:*:*:*:* pkg:maven/org.jline/jansi-core@3.30.6   0 Highest 9
jansi-3.30.6.jar cpe:2.3:a:jline:jline:3.30.6:*:*:*:*:*:*:* pkg:maven/org.jline/jansi@3.30.6   0 Highest 34
jansi-clj-2.0.0.jar pkg:maven/jansi-clj/jansi-clj@2.0.0   0 17
jcl-over-slf4j-2.0.17.jar pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17   0 30
jetty-io-9.4.58.v20250814.jar cpe:2.3:a:eclipse:jetty:9.4.58:20250814:*:*:*:*:*:*
cpe:2.3:a:jetty:jetty:9.4.58:20250814:*:*:*:*:*:*
cpe:2.3:a:mortbay_jetty:jetty:9.4.58:20250814:*:*:*:*:*:* 		pkg:maven/org.eclipse.jetty/jetty-io@9.4.58.v20250814 MEDIUM 1 Highest 36
jul-to-slf4j-2.0.17.jar pkg:maven/org.slf4j/jul-to-slf4j@2.0.17   0 30
linked-1.3.0.jar pkg:maven/frankiesardo/linked@1.3.0   0 12
log4j-over-slf4j-2.0.17.jar pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17   0 28
logback-core-1.5.22.jar cpe:2.3:a:qos:logback:1.5.22:*:*:*:*:*:*:* pkg:maven/ch.qos.logback/logback-core@1.5.22   0 Highest 38
markov-chains-0.1.1.jar pkg:maven/rm-hull/markov-chains@0.1.1   0 12
mount-0.1.23.jar pkg:maven/mount/mount@0.1.23   0 14
slash-0.6.1-SNAPSHOT.jar pkg:maven/com.github.johnnyjayjay/slash@0.6.1-SNAPSHOT   0 14
slf4j-api-2.0.17.jar pkg:maven/org.slf4j/slf4j-api@2.0.17   0 28
spec.alpha-0.5.238.jar pkg:maven/org.clojure/spec.alpha@0.5.238   0 26
spinner-2.0.297.jar pkg:maven/com.github.pmonks/spinner@2.0.297   0 20
tigris-0.1.2.jar pkg:maven/tigris/tigris@0.1.2   0 18
tools.analyzer-1.2.0.jar pkg:maven/org.clojure/tools.analyzer@1.2.0   0 16
tools.analyzer.jvm-1.3.2.jar pkg:maven/org.clojure/tools.analyzer.jvm@1.3.2   0 17
tools.cli-1.2.245.jar pkg:maven/org.clojure/tools.cli@1.2.245   0 21
tools.logging-1.3.0.jar cpe:2.3:a:alex_project:alex:1.3.0:*:*:*:*:*:*:* pkg:maven/org.clojure/tools.logging@1.3.0   0 Low 15
tools.reader-1.5.0.jar pkg:maven/org.clojure/tools.reader@1.5.0   0 19
websocket-api-9.4.58.v20250814.jar cpe:2.3:a:mortbay_jetty:jetty:9.4.58:20250814:*:*:*:*:*:* pkg:maven/org.eclipse.jetty.websocket/websocket-api@9.4.58.v20250814   0 Highest 38
websocket-client-9.4.58.v20250814.jar cpe:2.3:a:eclipse:jetty:9.4.58:20250814:*:*:*:*:*:*
cpe:2.3:a:jetty:jetty:9.4.58:20250814:*:*:*:*:*:*
cpe:2.3:a:mortbay_jetty:jetty:9.4.58:20250814:*:*:*:*:*:* 		pkg:maven/org.eclipse.jetty.websocket/websocket-client@9.4.58.v20250814 MEDIUM 1 Highest 38
websocket-common-9.4.58.v20250814.jar cpe:2.3:a:eclipse:jetty:9.4.58:20250814:*:*:*:*:*:*
cpe:2.3:a:jetty:jetty:9.4.58:20250814:*:*:*:*:*:*
cpe:2.3:a:mortbay_jetty:jetty:9.4.58:20250814:*:*:*:*:*:*
cpe:2.3:a:websocket-extensions_project:websocket-extensions:9.4.58:20250814:*:*:*:*:*:* 		pkg:maven/org.eclipse.jetty.websocket/websocket-common@9.4.58.v20250814 MEDIUM 1 Highest 40

Dependencies (vulnerable)

aero-1.1.6.jar

Description:

A small library for explicit, intentful configuration.

License:

The MIT License: http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/aero/aero/1.1.6/aero-1.1.6.jar
MD5: b23b46d2bc5fa3b636a2cb40410c1426
SHA1: dc5114c3a8905f61431c4f9dd068a9c919e731ce
SHA256:f4b0a9272da50c8091c5529c9fe355c47234f1eeb95fe92296e2c23f787f3d22

Identifiers

  • pkg:maven/aero/aero@1.1.6   (Confidence:High)

asm-9.2.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html
File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.2/asm-9.2.jar
MD5: 8f184dce9b1bedc675d4a3640d43ddf0
SHA1: 81a03f76019c67362299c40e0ba13405f5467bff
SHA256:b9d4fe4d71938df38839f0eca42aaaa64cf8b313d678da036f0cb3ca199b47f5

Identifiers

  • pkg:maven/org.ow2.asm/asm@9.2   (Confidence:High)

camel-snake-kebab-0.4.3.jar

Description:

A library for word case conversions.

License:

Eclipse Public License 1.0: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/camel-snake-kebab/camel-snake-kebab/0.4.3/camel-snake-kebab-0.4.3.jar
MD5: 4591ec721d8bbe8347ff82ef91c57514
SHA1: 5ae08f83ceb8959971e6334596bff0214bf6fdf2
SHA256:8191f335776310d7857a40ad33254be66adb363806b18136d8843196923ac2c8

Identifiers

  • pkg:maven/camel-snake-kebab/camel-snake-kebab@0.4.3   (Confidence:High)

cheshire-6.1.0.jar

Description:

JSON and JSON SMILE encoding, fast.

License:

The MIT License: http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/cheshire/cheshire/6.1.0/cheshire-6.1.0.jar
MD5: 073def678759286c8000e40e783d3d54
SHA1: d4b11693fcc54dd174e9a946531edd1313d9f767
SHA256:aee0ab6e448195aa095f22c428e20d2bc610591c54c10ec3e183dd3b081639c2

Identifiers

  • pkg:maven/cheshire/cheshire@6.1.0   (Confidence:High)

clj-2253-0.1.0.jar

Description:

A workaround for https://dev.clojure.org/jira/browse/CLJ-2253

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/runner/.m2/repository/org/clojars/pmonks/clj-2253/0.1.0/clj-2253-0.1.0.jar
MD5: cbf13845d65489fac031aee4666b230f
SHA1: 72d1f88f05bbc3b1eb468c33815a417faaa49984
SHA256:7409e379bd788541b80b38872ca5668f9695b0214a2898ca78828cb476115d51

Identifiers

  • pkg:maven/org.clojars.pmonks/clj-2253@0.1.0   (Confidence:High)

clj-wcwidth-1.0.125.jar

Description:

Pure Clojure implementations of wcwidth/wcswidth.

License:

MPL-2.0: https://www.mozilla.org/en-US/MPL/2.0/
File Path: /home/runner/.m2/repository/com/github/pmonks/clj-wcwidth/1.0.125/clj-wcwidth-1.0.125.jar
MD5: fb2783e0e04721939202cd0a51f698e5
SHA1: 20d2e7ce47326798b40d0952e04abab86d38e770
SHA256:30a64ed364f7d2c05088c18ef095dc0695241bca9e0a46e8aa35c944e28152a1

Identifiers

  • pkg:maven/com.github.pmonks/clj-wcwidth@1.0.125   (Confidence:High)

clojure-1.12.4.jar

Description:

Clojure core environment and runtime library.

License:

Eclipse Public License 1.0: http://opensource.org/licenses/eclipse-1.0.php
File Path: /home/runner/.m2/repository/org/clojure/clojure/1.12.4/clojure-1.12.4.jar
MD5: c9e27ed601e1c83392c78fd9f3e7ecec
SHA1: 580cd548600f63b597efea7e94c3e55be2d12537
SHA256:4b81e9ba6da38c45d9cc58023c674062b8c9f0714f33ff00ded22e6a949da177

Identifiers

clojure.java-time-1.4.3.jar

Description:

Clojure wrapper for Java 8 Time API

License:

MIT License: http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/clojure/java-time/clojure.java-time/1.4.3/clojure.java-time-1.4.3.jar
MD5: fce88000603ed0dea2be33e0fffa5836
SHA1: 11cea239151350d663d35f03913e07626ca69f01
SHA256:8f7e14031a531c1bc79859f4deabe215f8c15f81d66e09bdf7b4d9749b8325a7

Identifiers

commons-beanutils-1.11.0.jar

Description:

Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-beanutils/commons-beanutils/1.11.0/commons-beanutils-1.11.0.jar
MD5: 32ed51f196dfda19e0dc1ce53eeed29e
SHA1: ac03ea606d13de04c2e4508227680faff151f491
SHA256:9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709

Identifiers

commons-collections-3.2.2.jar

Description:

Types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256:eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8

Identifiers

commons-digester-2.1.jar

Description:

    The Digester package lets you configure an XML to Java object mapping module
    which triggers certain actions called rules whenever a particular 
    pattern of nested XML elements is recognized.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-digester/commons-digester/2.1/commons-digester-2.1.jar
MD5: 528445033f22da28f5047b6abcd1c7c9
SHA1: 73a8001e7a54a255eef0f03521ec1805dc738ca0
SHA256:e0b2b980a84fc6533c5ce291f1917b32c507f62bcad64198fff44368c2196a3d

Identifiers

  • pkg:maven/commons-digester/commons-digester@2.1   (Confidence:High)

commons-logging-1.3.5.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well-known logging systems.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-logging/commons-logging/1.3.5/commons-logging-1.3.5.jar
MD5: 9ca067b073153c86c2da350c0f2cdf70
SHA1: a3fcc5d3c29b2b03433aa2d2f2d2c1b1638924a1
SHA256:6d7a744e4027649fbb50895df9497d109f98c766a637062fe8d2eabbb3140ba4

Identifiers

  • pkg:maven/commons-logging/commons-logging@1.3.5   (Confidence:High)

commons-validator-1.10.1.jar

Description:

    Apache Commons Validator provides the building blocks for both client-side and server-side data validation.
    It may be used standalone or with a framework like Struts.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/commons-validator/commons-validator/1.10.1/commons-validator-1.10.1.jar
MD5: d618186ce8b682c51b1a7e72d11f5c88
SHA1: cdf5c2a69aad509c4db54786f19f1e1ccc471bcf
SHA256:ed74711a78d793ca37f6075e4a1e93d107233dfd20d0bb17e32bad88d38e56aa

Identifiers

  • pkg:maven/commons-validator/commons-validator@1.10.1   (Confidence:High)

core.async-1.8.741.jar

Description:

Facilities for async programming and communication in Clojure

File Path: /home/runner/.m2/repository/org/clojure/core.async/1.8.741/core.async-1.8.741.jar
MD5: cdd5b4b278d48a7e75138f15e90c4902
SHA1: 0568d9b06541900b0dc024ca900092e6b1bde76d
SHA256:288489a4f0e580f43e1913cba842b32959ef01e2d1bc3a01db2e97c79c9c655a

Identifiers

  • pkg:maven/org.clojure/core.async@1.8.741   (Confidence:High)

core.cache-1.1.234.jar

Description:

Cache library for Clojure.

License:

Eclipse Public License 1.0: https://opensource.org/license/epl-1-0/
File Path: /home/runner/.m2/repository/org/clojure/core.cache/1.1.234/core.cache-1.1.234.jar
MD5: c74f1627e4c7bc82173ee885049ca95b
SHA1: 4efde969ef1c0659f7b0e6e28c85263d9af01299
SHA256:ba9071044edb7b009288b2c5f800a7dcd918b0f1725c5ba800469238df972f63

Identifiers

  • pkg:maven/org.clojure/core.cache@1.1.234   (Confidence:High)

core.memoize-1.1.266.jar

Description:

A memoization library for Clojure

License:

Eclipse Public License 1.0: https://opensource.org/license/epl-1-0/
File Path: /home/runner/.m2/repository/org/clojure/core.memoize/1.1.266/core.memoize-1.1.266.jar
MD5: 70a78543850b17e61d8a122e8cb6f4a7
SHA1: e2cc0e3a742723a52e72373aebc556b678909ddc
SHA256:5792a21d6d90a1f5e68d4a10f65607aa21f6c484eb9d1a421cefc1f8ac26f18e

Identifiers

  • pkg:maven/org.clojure/core.memoize@1.1.266   (Confidence:High)

core.specs.alpha-0.4.74.jar

Description:

Specs for clojure.core

License:

Eclipse Public License 1.0: https://opensource.org/license/epl-1-0/
File Path: /home/runner/.m2/repository/org/clojure/core.specs.alpha/0.4.74/core.specs.alpha-0.4.74.jar
MD5: ebd37b9a3c39e6b769fc1463737cb8d4
SHA1: d56a8d4c666ff8140e6d0a62d41263134be39254
SHA256:eb73ac08cf49ba840c88ba67beef11336ca554333d9408808d78946e0feb9ddb

Identifiers

  • pkg:maven/org.clojure/core.specs.alpha@0.4.74   (Confidence:High)
  • cpe:2.3:a:alex_project:alex:0.4.74:*:*:*:*:*:*:*   (Confidence:Low)   

data.json-2.3.1.jar

Description:

Generating/parsing JSON from/to Clojure data structures

File Path: /home/runner/.m2/repository/org/clojure/data.json/2.3.1/data.json-2.3.1.jar
MD5: c40582783bbba064e6d2eab43067c183
SHA1: bccad454332d350fcf088ad65e961b9ed7687b7b
SHA256:ab6fcad6c5a174eecf6424c789064288626bf0434aab6414c9947df26e3ee4e2

Identifiers

  • pkg:maven/org.clojure/data.json@2.3.1   (Confidence:High)

data.priority-map-1.2.0.jar

File Path: /home/runner/.m2/repository/org/clojure/data.priority-map/1.2.0/data.priority-map-1.2.0.jar
MD5: 2cfe73a5c938e7fd15d36bcbe29b5918
SHA1: a07772b9f061023198635d1b1425d936507f5ec7
SHA256:a4523626a1ccc4fce0d1efe6df16897fc3e34b58738f0462e4536af17dea02f0

Identifiers

  • pkg:maven/org.clojure/data.priority-map@1.2.0   (Confidence:High)

discljord-1.3.1.jar

Description:

A Clojure wrapper library for the Discord API, with full API coverage (except voice, for now), and high scalability.

License:

Eclipse Public License: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/com/github/discljord/discljord/1.3.1/discljord-1.3.1.jar
MD5: 3d3b7aff80ce893282e7eaaadd708061
SHA1: df0e0be3ff5ae9e072b1dfa8422eaa5deb3a3251
SHA256:361fc69812dbf436458f1716afeeb5ae8f7210fc798cd3b3fb27d39449b369aa

Identifiers

  • pkg:maven/com.github.discljord/discljord@1.3.1   (Confidence:High)

embroidery-1.0.44.jar

Description:

A Clojure micro-library for leveraging virtual threads on JVMs that support them.

License:

Apache-2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/com/github/pmonks/embroidery/1.0.44/embroidery-1.0.44.jar
MD5: 0141ce9e67e5c76af519e98fc5a8bf5d
SHA1: 0ce7accc8b0fe2fcb13b0e509c322de914390ad2
SHA256:f978771dcca1ef87a0668cee9911882fea462791f20a6166b93edc356d35f152

Identifiers

  • pkg:maven/com.github.pmonks/embroidery@1.0.44   (Confidence:High)

gniazdo-1.2.2.jar

Description:

A WebSocket client for Clojure

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/stylefruits/gniazdo/1.2.2/gniazdo-1.2.2.jar
MD5: 475a727ac1787ab0afc92e70062de2f5
SHA1: e7eafb16875928396d58c8d62c857d728ef7587a
SHA256:799c9dd0dcb3c6418e72d4e2ef2cb8be12e529db5619e98849b4046adab9129f

Identifiers

  • pkg:maven/stylefruits/gniazdo@1.2.2   (Confidence:High)

hato-1.0.0.jar

Description:

An HTTP client for Clojure, wrapping JDK 11's HttpClient.

License:

The MIT License: http://opensource.org/licenses/mit-license.php
File Path: /home/runner/.m2/repository/hato/hato/1.0.0/hato-1.0.0.jar
MD5: 169f69866f7e0eaf8f5a38ad049bcecf
SHA1: 6a1bea52787ef5419f9d4475bce4997581ee6276
SHA256:6b65a8f6145ec577b015cbfa3703c2d00f5e9f964bc6fca7b71dfc56a4ffe029

Identifiers

  • pkg:maven/hato/hato@1.0.0   (Confidence:High)

http-kit-2.8.1.jar

Description:

Simple, high-performance event-driven HTTP client+server for Clojure

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.html
File Path: /home/runner/.m2/repository/http-kit/http-kit/2.8.1/http-kit-2.8.1.jar
MD5: b2e1c511125b476851ff9c6a82d4b2dc
SHA1: ddcee7f29444e13f78f4c6423e3302c39455f4cd
SHA256:05e632f9b08da3cebefd51c334ccab650b3b8bc43068443661472606b804d2f2

Identifiers

  • pkg:maven/http-kit/http-kit@2.8.1   (Confidence:High)

jackson-core-2.20.0.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.20.0/jackson-core-2.20.0.jar
MD5: 3536b524a7106dae1b4feb71e6f5ff74
SHA1: 3c97f7fad069f7cfae639d790bd93d6a0b2dff31
SHA256:bc0cf46075877201f8406ee7de2741ae7df6c066f5f0457bd80632a718c06e72

Identifiers

  • pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.0   (Confidence:High)
  • cpe:2.3:a:fasterxml:jackson-core:2.20.0:*:*:*:*:*:*:*   (Confidence:Highest)   
  • cpe:2.3:a:fasterxml:jackson-modules-java8:2.20.0:*:*:*:*:*:*:*   (Confidence:Low)   

jackson-dataformat-cbor-2.20.0.jar

Description:

Support for reading and writing Concise Binary Object Representation
([CBOR](https://www.rfc-editor.org/info/rfc7049)
encoded data using Jackson abstractions (streaming API, data binding, tree model)

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-cbor/2.20.0/jackson-dataformat-cbor-2.20.0.jar
MD5: d7d1d6cba1ee620ac11b84c0cb76a52f
SHA1: c10e9032bec62df3089ca1cbdef43a1453aca261
SHA256:ab075616cbd67f5676f89825ec9c8bc7b54c84dbe934b162145b34172370b5d6

Identifiers

  • pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-cbor@2.20.0   (Confidence:High)
  • cpe:2.3:a:fasterxml:jackson-dataformats-binary:2.20.0:*:*:*:*:*:*:*   (Confidence:Low)   

jansi-3.30.6.jar (shaded: org.jline:jansi-core:3.30.6)

File Path: /home/runner/.m2/repository/org/jline/jansi/3.30.6/jansi-3.30.6.jar/META-INF/maven/org.jline/jansi-core/pom.xml
MD5: 196caffbfe94ec7e1a11041a7b3e735a
SHA1: afc33af36000d1934e88c17ea016f7009e9522bb
SHA256:690fa0d12668fbd2503324fc34eac2f1f7f23aff6109cd67c5054e1b38f9aa4d

Identifiers

jansi-3.30.6.jar

Description:

JLine

License:

The BSD License: https://opensource.org/licenses/BSD-3-Clause
File Path: /home/runner/.m2/repository/org/jline/jansi/3.30.6/jansi-3.30.6.jar
MD5: 2cadda409fa8cf5d7f9c7fcc78046c14
SHA1: 80e9cbb4db1bb9f81d41b2ba3a4c27fda028e22a
SHA256:d08b2580fd7d36c76f2b9785540e1cc546ace009c6721f5ba05159fbc87ed754

Identifiers

jansi-clj-2.0.0.jar

Description:

Clojure Wrapper around Jansi.

License:

MIT: https://choosealicense.com/licenses/mit
File Path: /home/runner/.m2/repository/jansi-clj/jansi-clj/2.0.0/jansi-clj-2.0.0.jar
MD5: 53bf3d39f2a68d2a7661005691348c5b
SHA1: fa356c4004f6efe6a240c8049de97b33e7882339
SHA256:c41cc7420ef93f684f37f2a90bcd633cad6e2f1d2f46cbc8000b0001c27f077e

Identifiers

  • pkg:maven/jansi-clj/jansi-clj@2.0.0   (Confidence:High)

jcl-over-slf4j-2.0.17.jar

Description:

JCL 1.2 implemented over SLF4J

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/slf4j/jcl-over-slf4j/2.0.17/jcl-over-slf4j-2.0.17.jar
MD5: 4fcd46ca51e55b9fd9b0db34474927e0
SHA1: 76ea503eb688f06556a9ba69995d7eab63e34531
SHA256:affd06771589ebfe454bb11315a4f466ecaa135b95f3e7939534cf1d2fd7064c

Identifiers

  • pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17   (Confidence:High)

jetty-io-9.4.58.v20250814.jar

Description:

Jetty module for Jetty :: IO Utility

License:

http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-io/9.4.58.v20250814/jetty-io-9.4.58.v20250814.jar
MD5: e0a82e5c51fbecba26a129c886be9c1b
SHA1: e198dae4d91fa79d9c1e2e039870d49c487c45cf
SHA256:f55b2cc7c05244fd7b1773e99979b740002b0186e45b8a688243d89c7006fe21

Identifiers

CVE-2025-11143  

The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response. At the very least, differential parsing may divulge implementation details.
CWE-20 Improper Input Validation

CVSSv3:
  • Base Score: MEDIUM (6.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:3.9/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

jul-to-slf4j-2.0.17.jar

Description:

JUL to SLF4J bridge

License:

https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/jul-to-slf4j/2.0.17/jul-to-slf4j-2.0.17.jar
MD5: a42936c56611e4794c42908fb3d3a647
SHA1: 524cb6ccc2b68a57604750e1ab8b13b5a786a6aa
SHA256:a7afcd23b9cfd1475e55c94f943b808c5922035e7e2c2a5c65a487a4106bc538

Identifiers

  • pkg:maven/org.slf4j/jul-to-slf4j@2.0.17   (Confidence:High)

linked-1.3.0.jar

Description:

Efficient ordered map and set.

License:

Eclipse Public License: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/frankiesardo/linked/1.3.0/linked-1.3.0.jar
MD5: 116a0e136ec5951eaede8a50d08d2617
SHA1: a9e0a8b3fb028b91b6d46305c629dacd63857e9e
SHA256:f952b1d95a5f5cc105ac8ff96656dd12540d5ea28e31f68e101778820f204d3a

Identifiers

  • pkg:maven/frankiesardo/linked@1.3.0   (Confidence:High)

log4j-over-slf4j-2.0.17.jar

Description:

Log4j implemented over SLF4J

License:

Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/slf4j/log4j-over-slf4j/2.0.17/log4j-over-slf4j-2.0.17.jar
MD5: ec3cf11fe022ffd852ab84e9b8b69a96
SHA1: 55e55c79a0b89ccc9e411049005c02b7514e0cf9
SHA256:cbf30eaf95357ab7babf9be123da9cc702f0fe83b23392b7a62589d60b5862d1

Identifiers

  • pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17   (Confidence:High)

logback-core-1.5.22.jar

Description:

logback-core module

License:

http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html
File Path: /home/runner/.m2/repository/ch/qos/logback/logback-core/1.5.22/logback-core-1.5.22.jar
MD5: a001d8dfa6910cbeb38fa7714778a046
SHA1: 7c3ee4420b36bd499fa4f9f18a81d54a64fe0218
SHA256:7561b7a525364612966ff3823f8c62a81a3262742d455301f479273ef55570b8

Identifiers

markov-chains-0.1.1.jar

Description:

A library (and application examples) of stochastic discrete-time Markov Chains (DTMC) in Clojure

License:

The MIT License (MIT): http://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/rm-hull/markov-chains/0.1.1/markov-chains-0.1.1.jar
MD5: fe09104ac559adb0da1367b904ce70b7
SHA1: 3fd0d4c4dc53345b1c55f764f27fe157f792d69b
SHA256:441c1da2d134e2ba63d4efbe706f58704edd5cfeb28cd1641c213e04b18bac4f

Identifiers

  • pkg:maven/rm-hull/markov-chains@0.1.1   (Confidence:High)

mount-0.1.23.jar

Description:

managing Clojure and ClojureScript app state since (reset)

License:

Eclipse Public License: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/mount/mount/0.1.23/mount-0.1.23.jar
MD5: e05e8dfcf58c72d3076f4a445b4dcba4
SHA1: 8d25e82c18c07d90a365dbab7abc9ac88d464f58
SHA256:cf71918bc8e44098d9b58a962a9d7a52d38dd1e92fb9149d347aaf35e54a82be

Identifiers

  • pkg:maven/mount/mount@0.1.23   (Confidence:High)

slash-0.6.1-SNAPSHOT.jar

Description:

A library for handling and routing Discord interactions

License:

MIT License: https://mit-license.org
File Path: /home/runner/.m2/repository/com/github/johnnyjayjay/slash/0.6.1-SNAPSHOT/slash-0.6.1-SNAPSHOT.jar
MD5: 767b85763ca68091a9adfb2077b92aae
SHA1: 066e8d320d1c1c713b54df2fd4944ada4a2fe3eb
SHA256:4df07f01e439471f46fbe43dc4bf189fdd27c492177b5d1d222b8c9895d11797

Identifiers

  • pkg:maven/com.github.johnnyjayjay/slash@0.6.1-SNAPSHOT   (Confidence:High)

slf4j-api-2.0.17.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832

Identifiers

  • pkg:maven/org.slf4j/slf4j-api@2.0.17   (Confidence:High)

spec.alpha-0.5.238.jar

Description:

Specification of data and functions

License:

Eclipse Public License 1.0: https://opensource.org/license/epl-1-0/
File Path: /home/runner/.m2/repository/org/clojure/spec.alpha/0.5.238/spec.alpha-0.5.238.jar
MD5: 9f5ea5239dc04d6a8115add1e4f5f23a
SHA1: 4eb5dea521c4e6e1f68c2c47517f14a922003e60
SHA256:94cd99b6ea639641f37af4860a643b6ed399ee5a8be5d717cff0b663c8d75077

Identifiers

  • pkg:maven/org.clojure/spec.alpha@0.5.238   (Confidence:High)

spinner-2.0.297.jar

Description:

Simple ANSI text progress indicators for command line Clojure apps.

License:

MPL-2.0: https://www.mozilla.org/en-US/MPL/2.0/
File Path: /home/runner/.m2/repository/com/github/pmonks/spinner/2.0.297/spinner-2.0.297.jar
MD5: e2bfaef26c099726d2ffcad5bd78abba
SHA1: cf888bfafd5bf1d4b57436983e6106c115330b6c
SHA256:b48d8f674950695fe9b20c5bbd21c7672377b8861538731244e50e86dcb66ccc

Identifiers

  • pkg:maven/com.github.pmonks/spinner@2.0.297   (Confidence:High)

tigris-0.1.2.jar

Description:

Stream-to-stream JSON string encoding

License:

Eclipse Public License: http://www.eclipse.org/legal/epl-v10.html
File Path: /home/runner/.m2/repository/tigris/tigris/0.1.2/tigris-0.1.2.jar
MD5: 5f33b5d6ca167cc92fb782b7d876262c
SHA1: a122db758561d995a83cbb40f252b64d8b0f506e
SHA256:49aa648edb6c14e57095a11b391eaee606578323fb79755f92331ac6300f97a0

Identifiers

  • pkg:maven/tigris/tigris@0.1.2   (Confidence:High)

tools.analyzer-1.2.0.jar

Description:

An analyzer for Clojure code, written in Clojure and producing AST in EDN

File Path: /home/runner/.m2/repository/org/clojure/tools.analyzer/1.2.0/tools.analyzer-1.2.0.jar
MD5: ddc1a592cfc5ce14a2b848c7523e81d4
SHA1: c74b1c275ff3fc505b1e13dd0fe85c83e8aa202c
SHA256:7801a5a7ef4fd77f560c30a638594447c3aa71ee78b7f088553b7919bd0033bb

Identifiers

  • pkg:maven/org.clojure/tools.analyzer@1.2.0   (Confidence:High)

tools.analyzer.jvm-1.3.2.jar

Description:

Additional jvm-specific passes for tools.analyzer

File Path: /home/runner/.m2/repository/org/clojure/tools.analyzer.jvm/1.3.2/tools.analyzer.jvm-1.3.2.jar
MD5: 9e5a388bc9ef6f9ab6e3643df0cb45a5
SHA1: 0cf3cb32a9c0d5292645c8ba760f5e502fa0125e
SHA256:d8a2d59205a21281f305f3d5439ffc302182c307f9be962a76ce814a6620693d

Identifiers

  • pkg:maven/org.clojure/tools.analyzer.jvm@1.3.2   (Confidence:High)

tools.cli-1.2.245.jar

File Path: /home/runner/.m2/repository/org/clojure/tools.cli/1.2.245/tools.cli-1.2.245.jar
MD5: fb5b5609d0642b5f8e32017214185c34
SHA1: 3c06e80cae3c5162f60fa7c49e1f8b227396f80b
SHA256:7f100dc125c744e8038524d286ec22a18bfed14c42e7e1b66500e8c3d432c151

Identifiers

  • pkg:maven/org.clojure/tools.cli@1.2.245   (Confidence:High)

tools.logging-1.3.0.jar

File Path: /home/runner/.m2/repository/org/clojure/tools.logging/1.3.0/tools.logging-1.3.0.jar
MD5: b6b3c2ffeb27a25eab2d6e0e3a6e6b57
SHA1: 07d45477c1b61230b0d1fcf36afccc02155a4b32
SHA256:826969b78d9ada327de6b7da0f176457d95614fa38c280326610f31a6b515c91

Identifiers

  • pkg:maven/org.clojure/tools.logging@1.3.0   (Confidence:High)
  • cpe:2.3:a:alex_project:alex:1.3.0:*:*:*:*:*:*:*   (Confidence:Low)   

tools.reader-1.5.0.jar

Description:

A Clojure reader in Clojure

License:

Eclipse Public License 1.0: https://opensource.org/license/epl-1-0/
File Path: /home/runner/.m2/repository/org/clojure/tools.reader/1.5.0/tools.reader-1.5.0.jar
MD5: 90aeb9ddb25d485920ff3fd248315d54
SHA1: 4149c49bec1f3614f76b13c0a81797cfabef112e
SHA256:bfc8f709efb843f2ccc4daa93e2842ceb86e7b8d11d5544dc0ee68b6a0f4db3c

Identifiers

  • pkg:maven/org.clojure/tools.reader@1.5.0   (Confidence:High)

websocket-api-9.4.58.v20250814.jar

Description:

Jetty module for Jetty :: Websocket :: API

License:

http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/jetty/websocket/websocket-api/9.4.58.v20250814/websocket-api-9.4.58.v20250814.jar
MD5: 9e727b200ea070b382dab0522f366510
SHA1: 8375bc732739de33bbe164989d37576762eaa38d
SHA256:213d146065ebf2cbfa8a9c06b4cdfe79f94c0af3f93c15d9e67c0e3af015067f

Identifiers

websocket-client-9.4.58.v20250814.jar

Description:

Jetty module for Jetty :: Websocket :: Client

License:

http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/jetty/websocket/websocket-client/9.4.58.v20250814/websocket-client-9.4.58.v20250814.jar
MD5: 0e6e61895792fcba7584a46b45995b2d
SHA1: def27af0dc52086738483191761bd8edd08ff625
SHA256:fdb8648fb1139ab001c8d5ebc4f3ab5baf007f48bd86ec2969c504ac3011f878

Identifiers

CVE-2025-11143  

The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response. At the very least, differential parsing may divulge implementation details.
CWE-20 Improper Input Validation

CVSSv3:
  • Base Score: MEDIUM (6.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:3.9/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)

websocket-common-9.4.58.v20250814.jar

Description:

Jetty module for Jetty :: Websocket :: Common

License:

http://www.apache.org/licenses/LICENSE-2.0, https://www.eclipse.org/org/documents/epl-v10.php
File Path: /home/runner/.m2/repository/org/eclipse/jetty/websocket/websocket-common/9.4.58.v20250814/websocket-common-9.4.58.v20250814.jar
MD5: 3bd0ba23faeca12f9fa9015bd83598a3
SHA1: 35d5d3b947643920cfcf82f02d0c139a7c338c5a
SHA256:07c62b7ceaff2d7160aff98b912f28da9f2c66ed7adec972e39af5176afec1ae

Identifiers

CVE-2025-11143  

The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response. At the very least, differential parsing may divulge implementation details.
CWE-20 Improper Input Validation

CVSSv3:
  • Base Score: MEDIUM (6.5)
  • Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:3.9/RC:R/MAV:A

References:

Vulnerable Software & Versions: (show all)



This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.