Bump ch.qos.logback:logback-core from 1.5.32 to 1.5.34 in the maven group across 1 directory - #1819
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump ch.qos.logback:logback-core from 1.5.32 to 1.5.34 in the maven group across 1 directory#1819dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
GitHub Actions / Mend CLI scan
succeeded
Aug 22, 2026 in 5m 29s
Mend CLI scan
Mend Scan Results
Status:
SCA scan output
Identified 377 dependencies
Detected 149 vulnerabilities (9 Critical, 63 High, 72 Medium, 5 Low)
Displaying top 50 vulnerabilities. View the full list on the application.
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY | LIBRARY | ID | TOP FIX |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | bcprov-jdk18on-1.74.jar | CVE-2025-14813 | Upgrade to version https://github.com/bcgit/bc-java.git - r1rv84, |
| | | | org.bouncycastle:bcprov-jdk18on:1.84,org.bouncycastle:bcprov-jdk14:1.84, |
| | | | org.bouncycastle:bcprov-jdk15to18:1.84 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | bcprov-jdk18on-1.74.jar | CVE-2026-5598 | Upgrade to version https://github.com/bcgit/bc-java.git - r1rv84, |
| | | | org.bouncycastle:bcprov-jdk18on:1.84,org.bouncycastle:bcprov-jdk14:1.84, |
| | | | org.bouncycastle:bcprov-jdk15to18:1.84 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | bcprov-jdk18on-1.74.jar | CVE-2026-58062 | Upgrade to version org.bouncycastle:bc-fips:2.0.2,org.bouncycastle:bcprov-lts8on:2.73.12, |
| | | | org.bouncycastle:bc-fips:2.1.3,org.bouncycastle:bcprov-jdk18on:1.85, |
| | | | org.bouncycastle:bcprov-jdk15to18:1.85, https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | bcprov-jdk18on-1.74.jar | CVE-2026-59650 | Upgrade to version org.bouncycastle:bcprov-jdk15to18:1.85,org.bouncycastle:bcprov-lts8on:2.73.12, |
| | | | org.bouncycastle:bcprov-jdk18on:1.85, https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | bcprov-jdk18on-1.74.jar | CVE-2026-8763 | Upgrade to version org.bouncycastle:bcprov-jdk18on:1.85,org.bouncycastle:bcprov-jdk15to18:1.85, |
| | | | org.bouncycastle:bc-fips:1.0.2.7,org.bouncycastle:bc-fips:2.1.3, |
| | | | org.bouncycastle:bcprov-lts8on:2.73.12,org.bouncycastle:bc-fips:2.0.2, |
| | | | https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | httpclient5-5.5.1.jar | CVE-2026-71290 | Upgrade to version https://github.com/apache/httpcomponents-client.git - rel/v5.6.4, |
| | | | org.apache.httpcomponents.client5:httpclient5:5.6.4 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | lz4-1.3.0.jar | CVE-2025-12183 | Upgrade to version org.lz4:lz4-java:1.8.1, https://github.com/yawkat/lz4-java.git - v1.8.1 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | netty-handler-4.1.84.Final.jar | CVE-2026-75595 | Upgrade to version io.netty:netty-handler:4.2.17.Final,io.netty:netty-handler:4.1.137.Final, |
| | | | https://github.com/netty/netty.git - netty-4.1.137.Final, https://github.com/netty/netty.git - |
| | | | netty-4.2.17.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | undertow-core-2.2.24.Final.jar | CVE-2025-12543 | Upgrade to version io.undertow:undertow-core:2.2.39.Final, |
| | | | https://github.com/undertow-io/undertow.git - 2.3.21.Final, |
| | | | https://github.com/undertow-io/undertow.git - 2.4.0.Beta1, |
| | | | https://github.com/undertow-io/undertow.git - 2.2.39.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcpkix-jdk18on-1.74.jar | CVE-2026-12802 | Upgrade to version org.bouncycastle:bcpkix-lts8on:2.73.12,org.bouncycastle:bcpkix-fips:2.1.12, |
| | | | org.bouncycastle:bcpkix-jdk18on:1.85,org.bouncycastle:bcpkix-fips:1.0.12, |
| | | | org.bouncycastle:bcpkix-fips:2.0.12,org.bouncycastle:bcpkix-jdk15to18:1.85, |
| | | | https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcpkix-jdk18on-1.74.jar | CVE-2026-59639 | Upgrade to version org.bouncycastle:bcpkix-jdk18on:1.85,org.bouncycastle:bcpkix-lts8on:2.73.12, |
| | | | org.bouncycastle:bcpkix-fips:1.0.12,org.bouncycastle:bcpkix-jdk15to18:1.85, |
| | | | org.bouncycastle:bcpkix-fips:2.1.12,org.bouncycastle:bcpkix-fips:2.0.12, |
| | | | https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcpkix-jdk18on-1.74.jar | CVE-2026-59642 | Upgrade to version org.bouncycastle:bcpkix-fips:1.0.12,org.bouncycastle:bcpkix-fips:2.0.12, |
| | | | org.bouncycastle:bcpkix-jdk15to18:1.85,org.bouncycastle:bcpkix-fips:2.1.12, |
| | | | org.bouncycastle:bcpkix-jdk18on:1.85,org.bouncycastle:bcpkix-lts8on:2.73.12, |
| | | | https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcprov-jdk18on-1.74.jar | CVE-2024-29857 | Upgrade to version org.bouncycastle:bcprov-jdk15to18:1.78, org.bouncycastle:bcprov-jdk18on:1.78, |
| | | | BouncyCastle.Cryptography - 2.3.1 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcprov-jdk18on-1.74.jar | CVE-2024-30172 | Upgrade to version org.bouncycastle:bcprov-jdk18on:1.78,org.bouncycastle:bcprov-jdk15to18:1.78, |
| | | | org.bouncycastle:bcprov-jdk14:1.78, BouncyCastle.Cryptography - 2.3.1 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcprov-jdk18on-1.74.jar | CVE-2024-34447 | Upgrade to version org.bouncycastle:bctls-jdk18on:1.78,org.bouncycastle:bctls-jdk15to18:1.78, |
| | | | org.bouncycastle:bctls-fips:1.0.19 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcprov-jdk18on-1.74.jar | CVE-2026-12803 | Upgrade to version org.bouncycastle:bcprov-jdk15to18:1.85,org.bouncycastle:bcprov-jdk18on:1.85, |
| | | | org.bouncycastle:bcprov-lts8on:2.73.12, https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcprov-jdk18on-1.74.jar | CVE-2026-12816 | Upgrade to version org.bouncycastle:bcprov-jdk15to18:1.85,org.bouncycastle:bcprov-lts8on:2.73.12, |
| | | | org.bouncycastle:bcprov-jdk18on:1.85, https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcprov-jdk18on-1.74.jar | CVE-2026-12860 | Upgrade to version org.bouncycastle:bcprov-jdk18on:1.85,org.bouncycastle:bcprov-lts8on:2.73.12, |
| | | | org.bouncycastle:bcprov-jdk15to18:1.85, https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcprov-jdk18on-1.74.jar | CVE-2026-13506 | Upgrade to version org.bouncycastle:bcprov-lts8on:2.73.12,org.bouncycastle:bc-fips:2.0.2, |
| | | | org.bouncycastle:bc-fips:2.1.3,org.bouncycastle:bc-fips:1.0.2.7,org.bouncycastle:bcprov-jdk18on:1.85 |
| | | | ,org.bouncycastle:bcprov-jdk15to18:1.85, https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcprov-jdk18on-1.74.jar | CVE-2026-14682 | Upgrade to version org.bouncycastle:bc-fips:2.1.3,org.bouncycastle:bcprov-jdk18on:1.85, |
| | | | org.bouncycastle:bc-fips:1.0.2.7,org.bouncycastle:bc-fips:2.0.2, |
| | | | org.bouncycastle:bcprov-lts8on:2.73.12,org.bouncycastle:bcprov-jdk15to18:1.85, |
| | | | https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcprov-jdk18on-1.74.jar | CVE-2026-58059 | Upgrade to version org.bouncycastle:bc-fips:1.0.2.7,org.bouncycastle:bcprov-lts8on:2.73.12, |
| | | | org.bouncycastle:bcprov-jdk18on:1.85,org.bouncycastle:bc-fips:2.1.3,org.bouncycastle:bc-fips:2.0.2, |
| | | | org.bouncycastle:bcprov-jdk15to18:1.85, https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcprov-jdk18on-1.74.jar | CVE-2026-58060 | Upgrade to version org.bouncycastle:bcprov-lts8on:2.73.12,org.bouncycastle:bcprov-jdk18on:1.85, |
| | | | org.bouncycastle:bc-fips:2.1.3,org.bouncycastle:bcprov-jdk15to18:1.85,org.bouncycastle:bc-fips:2.0.2 |
| | | | , https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcprov-jdk18on-1.74.jar | CVE-2026-58061 | Upgrade to version org.bouncycastle:bc-fips:2.1.3,org.bouncycastle:bcprov-jdk18on:1.85, |
| | | | org.bouncycastle:bc-fips:2.0.2,org.bouncycastle:bcprov-lts8on:2.73.12, |
| | | | org.bouncycastle:bcprov-jdk15to18:1.85,org.bouncycastle:bc-fips:1.0.2.7, |
| | | | https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | bcutil-jdk18on-1.74.jar | CVE-2026-59645 | Upgrade to version org.bouncycastle:bcutil-lts8on:2.73.12,org.bouncycastle:bcutil-fips:2.1.7, |
| | | | org.bouncycastle:bcutil-jdk18on:1.85,org.bouncycastle:bcutil-jdk15to18:1.85, |
| | | | org.bouncycastle:bcutil-fips:2.0.7, https://github.com/bcgit/bc-java.git - r1rv85 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | hibernate-validator-6.0.23.Final-redhat-00001.jar | CVE-2025-35036 | Upgrade to version https://github.com/hibernate/hibernate-validator.git - 7.0.0.Final, |
| | | | https://github.com/hibernate/hibernate-validator.git - 6.2.0.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | httpcore5-5.2.jar | CVE-2026-54399 | Upgrade to version org.apache.httpcomponents.core5:httpcore5:5.4.3, |
| | | | org.apache.httpcomponents.core5:httpcore5:5.5-beta2, |
| | | | https://github.com/apache/httpcomponents-core.git - rel/v5.4.3, |
| | | | https://github.com/apache/httpcomponents-core.git - v5.5-beta2 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | httpcore5-5.3.6.jar | CVE-2026-54399 | Upgrade to version org.apache.httpcomponents.core5:httpcore5:5.4.3, |
| | | | org.apache.httpcomponents.core5:httpcore5:5.5-beta2, |
| | | | https://github.com/apache/httpcomponents-core.git - rel/v5.4.3, |
| | | | https://github.com/apache/httpcomponents-core.git - v5.5-beta2 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | httpcore5-h2-5.2.jar | CVE-2026-54428 | Upgrade to version org.apache.httpcomponents.core5:httpcore5-h2:5.5-beta2, |
| | | | https://github.com/apache/httpcomponents-core.git - rel/v5.5-beta2, |
| | | | org.apache.httpcomponents.core5:httpcore5-h2:5.4.3, |
| | | | https://github.com/apache/httpcomponents-core.git - rel/v5.4.3 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | httpcore5-h2-5.3.6.jar | CVE-2026-54428 | Upgrade to version org.apache.httpcomponents.core5:httpcore5-h2:5.5-beta2, |
| | | | https://github.com/apache/httpcomponents-core.git - rel/v5.5-beta2, |
| | | | org.apache.httpcomponents.core5:httpcore5-h2:5.4.3, |
| | | | https://github.com/apache/httpcomponents-core.git - rel/v5.4.3 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | jsoup-1.21.2.jar | CVE-2026-75140 | N/A |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | jsoup-1.22.2.jar | CVE-2026-75140 | N/A |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | keycloak-core-25.0.3.jar | CVE-2024-10039 | N/A |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | keycloak-server-spi-private-25.0.3.jar | CVE-2026-2603 | Upgrade to version https://github.com/keycloak/keycloak.git - 26.4.10, |
| | | | https://github.com/keycloak/keycloak.git - 26.5.5 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | logback-classic-1.5.34.jar | CVE-2026-19880 | Upgrade to version ch.qos.logback:logback-classic:1.6.3 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | logback-core-1.5.34.jar | CVE-2026-13006 | Upgrade to version https://github.com/qos-ch/logback.git - v_1.5.35, |
| | | | ch.qos.logback:logback-core:1.5.35 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | lz4-1.3.0.jar | CVE-2025-66566 | Upgrade to version https://github.com/yawkat/lz4-java.git - v1.10.1 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-4.1.84.Final.jar | CVE-2026-42583 | Upgrade to version https://github.com/netty/netty.git - netty-4.1.133.Final, |
| | | | io.netty:netty-codec:4.1.133.Final,io.netty:netty-codec-compression:4.2.13.Final, |
| | | | https://github.com/netty/netty.git - netty-4.2.13.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-4.1.84.Final.jar | CVE-2026-59901 | io.netty:netty-codec-compression:4.2.16.Final,io.netty:netty-codec:4.1.136.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-dns-4.1.84.Final.jar | CVE-2026-42579 | Upgrade to version io.netty:netty-codec-dns:4.1.133.Final, https://github.com/netty/netty.git - |
| | | | netty-4.1.133.Final,io.netty:netty-codec-dns:4.2.13.Final, https://github.com/netty/netty.git - |
| | | | netty-4.2.13.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-http-4.1.84.Final.jar | CVE-2026-33870 | io.netty:netty-codec-http:4.1.132.Final,io.netty:netty-codec-http:4.2.10.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-http-4.1.84.Final.jar | CVE-2026-42584 | Upgrade to version io.netty:netty-codec-http:4.1.133.Final, https://github.com/netty/netty.git - |
| | | | netty-4.2.13.Final,io.netty:netty-codec-http:4.2.13.Final, https://github.com/netty/netty.git - |
| | | | netty-4.1.133.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-http-4.1.84.Final.jar | CVE-2026-42587 | Upgrade to version https://github.com/netty/netty.git - netty-4.2.13.Final, |
| | | | io.netty:netty-codec-http:4.2.13.Final, https://github.com/netty/netty.git - netty-4.1.133.Final, |
| | | | io.netty:netty-codec-http2:4.1.133.Final,io.netty:netty-codec-http2:4.2.13.Final, |
| | | | io.netty:netty-codec-http:4.1.133.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-http-4.1.84.Final.jar | CVE-2026-55831 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-http-4.1.84.Final.jar | CVE-2026-55833 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-http-4.1.84.Final.jar | CVE-2026-56745 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final, |
| | | | https://github.com/netty/netty.git - netty-4.1.136.Final, https://github.com/netty/netty.git - |
| | | | netty-4.2.16.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-http2-4.1.84.Final.jar | CVE-2023-44487 | Upgrade to version org.eclipse.jetty.http2:http2-server:9.4.53.v20231009,10.0.17,11.0.17, |
| | | | org.eclipse.jetty.http2:jetty-http2-server:12.0.2, |
| | | | org.eclipse.jetty.http2:http2-common:9.4.53.v20231009,10.0.17,11.0.17, |
| | | | org.eclipse.jetty.http2:jetty-http2-common:12.0.2, nghttp - v1.57.0, swift-nio-http2 - 1.28.0, |
| | | | io.netty:netty-codec-http2:4.1.100.Final, trafficserver - 9.2.3, |
| | | | org.apache.tomcat:tomcat-coyote:8.5.94,9.0.81,10.1.14, |
| | | | org.apache.tomcat.embed:tomcat-embed-core:8.5.94,9.0.81,10.1.14, Microsoft.AspNetCore.App - 6.0.23, |
| | | | 7.0.12, contour - v1.26.1, proxygen - v2023.10.16.00, grpc-go - v1.56.3,v1.57.1,v1.58.3, |
| | | | kubernetes/kubernetes - v1.25.15,v1.26.10,v1.27.7,v1.28.3,v1.29.0, kubernetes/apimachinery - |
| | | | v0.25.15,v0.26.10,v0.27.7,v0.28.3,v0.29.0, kubernetes/apiserver- v0.25.15,v0.26.10,v0.27.7,v0.28.3, |
| | | | v0.29.0 |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-http2-4.1.84.Final.jar | CVE-2025-55163 | Upgrade to version https://github.com/netty/netty.git - 4.2.4.Final, |
| | | | https://github.com/netty/netty.git - netty-4.1.124.Final,io.netty:netty-codec-http2:4.1.124.Final, |
| | | | io.netty:netty-codec-http2:4.2.4.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-http2-4.1.84.Final.jar | CVE-2026-33871 | Upgrade to version https://github.com/netty/netty.git - netty-4.1.132.Final, |
| | | | https://github.com/netty/netty.git - netty-4.2.11.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-http2-4.1.84.Final.jar | CVE-2026-42587 | Upgrade to version https://github.com/netty/netty.git - netty-4.2.13.Final, |
| | | | io.netty:netty-codec-http:4.2.13.Final, https://github.com/netty/netty.git - netty-4.1.133.Final, |
| | | | io.netty:netty-codec-http2:4.1.133.Final,io.netty:netty-codec-http2:4.2.13.Final, |
| | | | io.netty:netty-codec-http:4.1.133.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH | netty-codec-http2-4.1.84.Final.jar | CVE-2026-56819 | Upgrade to version io.netty:netty-codec-http2:4.1.136.Final,io.netty:netty-codec-http2:4.2.16.Final, |
| | | | https://github.com/netty/netty.git - netty-4.1.136.Final, https://github.com/netty/netty.git - |
| | | | netty-4.2.16.Final |
+----------+---------------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
Paths at risk
P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity
auth-3.5.1-SNAPSHOT.jar
|-- common-3.5.1-SNAPSHOT.jar
|-- pnc-common-3.5.1.jar
|-- opentelemetry-ext-cli-java-2.0.0.jar
|-- opentelemetry-api-1.51.0.jar [1 MEDIUM]
|-- opentelemetry-exporter-otlp-1.51.0.jar
|-- opentelemetry-exporter-otlp-common-1.51.0.jar
|-- opentelemetry-exporter-common-1.51.0.jar
|-- opentelemetry-api-1.51.0.jar [1 MEDIUM]
|-- opentelemetry-sdk-logs-1.51.0.jar
|-- opentelemetry-api-1.51.0.jar [1 MEDIUM]
|-- opentelemetry-sdk-metrics-1.51.0.jar
|-- opentelemetry-api-1.51.0.jar [1 MEDIUM]
|-- opentelemetry-sdk-1.51.0.jar
|-- opentelemetry-api-1.51.0.jar [1 MEDIUM]
|-- opentelemetry-sdk-common-1.51.0.jar
|-- opentelemetry-api-1.51.0.jar [1 MEDIUM]
|-- opentelemetry-sdk-trace-1.51.0.jar
|-- opentelemetry-api-1.51.0.jar [1 MEDIUM]
|-- opentelemetry-semconv-1.29.0-alpha.jar
|-- opentelemetry-api-1.51.0.jar [1 MEDIUM]
|-- jsoup-1.22.2.jar [1 HIGH, 1 MEDIUM]
|-- rest-api-3.5.14-java-client.jar
|-- undertow-core-2.2.24.Final.jar [1 CRITICAL, 13 HIGH, 3 MEDIUM]
|-- dto-3.5.14.jar
|-- jsoup-1.22.2.jar [1 HIGH, 1 MEDIUM]
|-- keycloak-installed-adapter-25.0.3.jar
|-- undertow-core-2.2.24.Final.jar [1 CRITICAL, 13 HIGH, 3 MEDIUM]
|-- xnio-api-3.8.7.Final.jar [2 HIGH]
|-- xnio-nio-3.8.7.Final.jar
|-- xnio-api-3.8.7.Final.jar [2 HIGH]
|-- bcprov-jdk18on-1.74.jar [5 CRITICAL, 11 HIGH, 13 MEDIUM]
|-- keycloak-adapter-core-25.0.3.jar [1 MEDIUM]
|-- bcprov-jdk18on-1.74.jar [5 CRITICAL, 11 HIGH, 13 MEDIUM]
|-- keycloak-core-25.0.3.jar [1 HIGH, 3 MEDIUM, 2 LOW]
|-- keycloak-crypto-default-25.0.3.jar
|-- bcpkix-jdk18on-1.74.jar [3 HIGH, 5 MEDIUM]
|-- bcprov-jdk18on-1.74.jar [5 CRITICAL, 11 HIGH, 13 MEDIUM]
|-- bcutil-jdk18on-1.74.jar [1 HIGH]
|-- bcprov-jdk18on-1.74.jar [5 CRITICAL, 11 HIGH, 13 MEDIUM]
|-- bcprov-jdk18on-1.74.jar [5 CRITICAL, 11 HIGH, 13 MEDIUM]
|-- keycloak-core-25.0.3.jar [1 HIGH, 3 MEDIUM, 2 LOW]
|-- keycloak-server-spi-private-25.0.3.jar [1 HIGH, 7 MEDIUM, 1 LOW]
|-- keycloak-core-25.0.3.jar [1 HIGH, 3 MEDIUM, 2 LOW]
|-- keycloak-server-spi-25.0.3.jar
|-- keycloak-core-25.0.3.jar [1 HIGH, 3 MEDIUM, 2 LOW]
|-- keycloak-adapter-spi-25.0.3.jar
|-- bcprov-jdk18on-1.74.jar [5 CRITICAL, 11 HIGH, 13 MEDIUM]
|-- keycloak-core-25.0.3.jar [1 HIGH, 3 MEDIUM, 2 LOW]
|-- keycloak-common-25.0.3.jar [2 MEDIUM]
cli-3.5.1-SNAPSHOT.jar
|-- logback-classic-1.5.34.jar [1 HIGH]
|-- logback-core-1.5.34.jar [1 HIGH]
|-- jansi-2.4.3.jar [1 LOW]
|-- jansi-2.4.3.jar [1 LOW]
|-- common-3.5.1-SNAPSHOT.jar
|-- logback-classic-1.5.34.jar [1 HIGH]
|-- pom-manipulation-common-lite-5.3.jar
|-- atlas-identities-1.2.2.jar
|-- logback-classic-1.5.34.jar [1 HIGH]
|-- rest-api-3.5.14-java-client.jar
|-- logback-classic-1.5.34.jar [1 HIGH]
|-- undertow-core-2.2.24.Final.jar [1 CRITICAL, 13 HIGH, 3 MEDIUM]
|-- xnio-api-3.8.7.Final.jar [2 HIGH]
|-- xnio-nio-3.8.7.Final.jar
|-- xnio-api-3.8.7.Final.jar [2 HIGH]
|-- dto-3.5.14.jar
|-- logback-classic-1.5.34.jar [1 HIGH]
|-- jsoup-1.22.2.jar [1 HIGH, 1 MEDIUM]
|-- pig-3.5.1-SNAPSHOT.jar
|-- logback-classic-1.5.34.jar [1 HIGH]
|-- logback-core-1.5.34.jar [1 HIGH]
|-- quarkus-domino-api-0.0.133.jar
|-- quarkus-platform-bom-decomposer-0.0.133.jar
|-- quarkus-bootstrap-maven-resolver-3.35.3.jar
|-- smallrye-beanbag-maven-1.6.1.jar
|-- jsoup-1.22.2.jar [1 HIGH, 1 MEDIUM]
|-- cyclonedx-core-java-12.1.0.jar
|-- json-schema-validator-1.5.9.jar
|-- logback-classic-1.5.34.jar [1 HIGH]
|-- itu-1.14.0.jar
|-- logback-classic-1.5.34.jar [1 HIGH]
|-- undertow-core-2.2.24.Final.jar [1 CRITICAL, 13 HIGH, 3 MEDIUM]
|-- org.eclipse.sisu.inject-1.1.0.jar
|-- guice-5.1.0-classes.jar
|-- guava-28.1-jre.jar [1 MEDIUM, 1 LOW]
|-- javax.el-3.0.1-b12.jar [1 MEDIUM]
|-- licenses-generator-3.5.1-SNAPSHOT.jar
|-- maven-embedder-3.9.16.jar
|-- logback-classic-1.5.34.jar [1 HIGH]
|-- guava-28.1-jre.jar [1 MEDIUM, 1 LOW]
|-- maven-shared-utils-3.4.2.jar
|-- jansi-2.4.3.jar [1 LOW]
|-- jansi-2.4.3.jar [1 LOW]
|-- core-2.6.7.jar
|-- logback-classic-1.5.34.jar [1 HIGH]
... *truncated, see full logs below*
SAST scan output
*no findings*
Loading