Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.1.6
Report Generated On: Mon, 24 Aug 2026 00:27:10 -0700
Dependencies Scanned: 17 (13 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2026-08-24T00:26:11-07
NVD API Last Modified: 2026-08-24T07:16:54Z

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
AbsoluteLayout-RELEASE290.jar		pkg:maven/org.netbeans.external/AbsoluteLayout@RELEASE290		25
bcpkix-jdk18on-1.85.jar				23
bcprov-jdk18on-1.85.jar				23
bcutil-jdk18on-1.85.jar				25
flatlaf-3.7.2.jar				16
ftplet-api-1.2.1.jar		pkg:maven/org.apache.ftpserver/[email protected]		42
ftpserver-core-1.2.1.jar		pkg:maven/org.apache.ftpserver/[email protected]		37
json-20260814.jar		pkg:maven/org.json/json@20260814		31
logback-core-1.5.37.jar	cpe:2.3:a:qos:logback:1.5.37:::::::*	pkg:maven/ch.qos.logback/[email protected]	Highest	37
mina-core-2.2.9.jar	cpe:2.3:a:apache:mina:2.2.9:::::::*	pkg:maven/org.apache.mina/[email protected]	Highest	29
slf4j-api-2.0.18.jar		pkg:maven/org.slf4j/[email protected]		28
sqlite-jdbc-3.53.4.0.jar	cpe:2.3:a:sqlite:sqlite:3.53.4.0:::::::* cpe:2.3:a:sqlite_jdbc_project:sqlite_jdbc:3.53.4.0:::::::*	pkg:maven/io.github.willena/[email protected]	Highest	35
sshd-core-2.19.0.jar	cpe:2.3:a:apache:sshd:2.19.0:::::::*	pkg:maven/org.apache.sshd/[email protected]	Highest	27

Dependencies (vulnerable)

AbsoluteLayout-RELEASE290.jar

Description:

POM and identification for artifact that was not possible to uniquely identify as a maven dependency.

File Path: /lib/AbsoluteLayout-RELEASE290.jar
MD5: 6c04b49b0b68eb310b29c60bcbd39db5
SHA1: 409c90d09b61262b7c1e4759fd5e921e66b914cc
SHA256:cbe5600e86eb64761e11e4cb046804a070bc214e00b9fa61413b59017089dfd1

Evidence

Type	Source	Name	Value	Confidence
Vendor	central	artifactid	AbsoluteLayout	Highest
Vendor	central	groupid	org.netbeans.external	Highest
Vendor	file	name	AbsoluteLayout-RELEASE290	High
Vendor	jar	package name	awtextra	Low
Vendor	jar	package name	lib	Low
Vendor	jar	package name	netbeans	Low
Vendor	Manifest	netbeans-own-library	true	Low
Vendor	pom	artifactid	AbsoluteLayout	Low
Vendor	pom	groupid	org.netbeans.external	Highest
Vendor	pom	name	Maven definition for AbsoluteLayout.jar - external part of NetBeans module.	High
Vendor	pom	parent-artifactid	netbeans-parent	Low
Vendor	pom	parent-groupid	org.apache.netbeans	Medium
Product	central	artifactid	AbsoluteLayout	Highest
Product	file	name	AbsoluteLayout-RELEASE290	High
Product	jar	package name	awtextra	Low
Product	jar	package name	lib	Low
Product	Manifest	netbeans-own-library	true	Low
Product	pom	artifactid	AbsoluteLayout	Highest
Product	pom	groupid	org.netbeans.external	Highest
Product	pom	name	Maven definition for AbsoluteLayout.jar - external part of NetBeans module.	High
Product	pom	parent-artifactid	netbeans-parent	Medium
Product	pom	parent-groupid	org.apache.netbeans	Medium
Version	central	version	RELEASE290	Highest
Version	pom	parent-version	RELEASE290	Low
Version	pom	version	RELEASE290	Highest

Identifiers

pkg:maven/org.netbeans.external/AbsoluteLayout@RELEASE290 (Confidence:High)

bcpkix-jdk18on-1.85.jar

File Path: /lib/bcpkix-jdk18on-1.85.jar
MD5: 8247f481c8eeef03925277ca33f72255
SHA1: b33d047adc6801a1cfc8ffe1634b23b306a670c1
SHA256:c9f82b2d4e99c4bbdfccf684e52cc06ea06a0b567bfd0d08f9c5a3f417055996

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bcpkix-jdk18on	High
Vendor	jar	package name	bouncycastle	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Vendor	Manifest	bundle-symbolicname	bcpkix	Medium
Vendor	Manifest	caller-allowable-codebase	*	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	trusted-library	true	Low
Product	file	name	bcpkix-jdk18on	High
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	Bundle-Name	bcpkix	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Product	Manifest	bundle-symbolicname	bcpkix	Medium
Product	Manifest	caller-allowable-codebase	*	Low
Product	Manifest	codebase	*	Low
Product	Manifest	multi-release	true	Low
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	trusted-library	true	Low
Version	file	name	bcpkix-jdk18on	Medium
Version	file	version	1.85	High
Version	Manifest	Bundle-Version	1.85	High

Identifiers

None

bcprov-jdk18on-1.85.jar

File Path: /lib/bcprov-jdk18on-1.85.jar
MD5: e564b4f846cd76cca8253c7c9febb44e
SHA1: 2320b854dffe134687f7266bb22021b779e576d3
SHA256:20af26bf6060bb8005cc2389916812c1e0e998dc48d2ced7131b89461b54cff7

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bcprov-jdk18on	High
Vendor	jar	package name	bouncycastle	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Vendor	Manifest	bundle-symbolicname	bcprov	Medium
Vendor	Manifest	caller-allowable-codebase	*	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	trusted-library	true	Low
Product	file	name	bcprov-jdk18on	High
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	Bundle-Name	bcprov	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Product	Manifest	bundle-symbolicname	bcprov	Medium
Product	Manifest	caller-allowable-codebase	*	Low
Product	Manifest	codebase	*	Low
Product	Manifest	multi-release	true	Low
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	trusted-library	true	Low
Version	file	name	bcprov-jdk18on	Medium
Version	file	version	1.85	High
Version	Manifest	Bundle-Version	1.85	High

Identifiers

None

bcutil-jdk18on-1.85.jar

File Path: /lib/bcutil-jdk18on-1.85.jar
MD5: 7c90e18e7e709e7ceb14b2682e5ddcca
SHA1: c41082d6f61628919b675970563f5615e4427c9f
SHA256:590f55ed5d68529239898a4a5c4f730b6e37f45d1cfa3fbe51f8485abe32c42d

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	bcutil-jdk18on	High
Vendor	jar	package name	bouncycastle	Low
Vendor	jar	package name	oer	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Vendor	Manifest	bundle-symbolicname	bcutil	Medium
Vendor	Manifest	caller-allowable-codebase	*	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	trusted-library	true	Low
Product	file	name	bcutil-jdk18on	High
Product	jar	package name	oer	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	Bundle-Name	bcutil	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Product	Manifest	bundle-symbolicname	bcutil	Medium
Product	Manifest	caller-allowable-codebase	*	Low
Product	Manifest	codebase	*	Low
Product	Manifest	multi-release	true	Low
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	trusted-library	true	Low
Version	file	name	bcutil-jdk18on	Medium
Version	file	version	1.85	High
Version	Manifest	Bundle-Version	1.85	High

Identifiers

None

flatlaf-3.7.2.jar

File Path: /lib/flatlaf-3.7.2.jar
MD5: a0d9747cdda2aa5f29d3aca1331aaa76
SHA1: fcf9f3f276b11c7f5fc525838073ddcd80abda6a
SHA256:917aff3963c88d797d0fd9b9ccbd70f7681c101df9d11c59e2bc7a3a6c0fabf4

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	flatlaf	High
Vendor	jar	package name	flatlaf	Low
Vendor	jar	package name	formdev	Highest
Vendor	jar	package name	formdev	Low
Vendor	jar	package name	ui	Low
Vendor	Manifest	implementation-copyright	Copyright (C) 2019-2026 FormDev Software GmbH. All rights reserved.	Low
Vendor	Manifest	Implementation-Vendor	FormDev Software GmbH	High
Vendor	Manifest	multi-release	true	Low
Product	file	name	flatlaf	High
Product	jar	package name	flatlaf	Low
Product	jar	package name	formdev	Highest
Product	jar	package name	ui	Low
Product	Manifest	implementation-copyright	Copyright (C) 2019-2026 FormDev Software GmbH. All rights reserved.	Low
Product	Manifest	multi-release	true	Low
Version	file	version	3.7.2	High
Version	Manifest	Implementation-Version	3.7.2	High

Identifiers

None

ftplet-api-1.2.1.jar

Description:

 Ftplets are, similar to servlets, an API to plug into the
    request lifecycle of FtpServer. Ftplets are called on session connect
    and disconnect as well as before and after each command within a user
    session.

License:

https://www.apache.org/licenses/LICENSE-2.0

File Path: /lib/ftplet-api-1.2.1.jar
MD5: 9348ff07ad7bb52a2c46eca81e0282ab
SHA1: 6939c4a9858206e52163d700452d407d5001ad10
SHA256:36e47834dfa4225448aaaa5460b304f26e99e837c4a80ef5b41d090735be9b07

Evidence

Type	Source	Name	Value	Confidence
Vendor	central	artifactid	ftplet-api	Highest
Vendor	central	groupid	org.apache.ftpserver	Highest
Vendor	file	name	ftplet-api	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	apache	Low
Vendor	jar	package name	ftplet	Highest
Vendor	jar	package name	ftplet	Low
Vendor	jar	package name	ftpserver	Low
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	https://www.apache.org/	Low
Vendor	Manifest	bundle-symbolicname	ftplet-api	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	ftplet-api	Low
Vendor	pom	groupid	org.apache.ftpserver	Highest
Vendor	pom	name	Apache Ftplet API	High
Vendor	pom	parent-artifactid	ftpserver-parent	Low
Vendor	pom	url	https://mina.apache.org/ftpserver-project	Highest
Product	central	artifactid	ftplet-api	Highest
Product	file	name	ftplet-api	High
Product	jar	package name	apache	Highest
Product	jar	package name	ftplet	Highest
Product	jar	package name	ftplet	Low
Product	jar	package name	ftpserver	Highest
Product	jar	package name	ftpserver	Low
Product	jar	package name	user	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	https://www.apache.org/	Low
Product	Manifest	Bundle-Name	Apache Ftplet API	Medium
Product	Manifest	bundle-symbolicname	ftplet-api	Medium
Product	Manifest	Implementation-Title	Apache Ftplet API	High
Product	Manifest	specification-title	Apache Ftplet API	Medium
Product	pom	artifactid	ftplet-api	Highest
Product	pom	groupid	org.apache.ftpserver	Highest
Product	pom	name	Apache Ftplet API	High
Product	pom	parent-artifactid	ftpserver-parent	Medium
Product	pom	url	https://mina.apache.org/ftpserver-project	Medium
Version	central	version	1.2.1	Highest
Version	file	version	1.2.1	High
Version	Manifest	Bundle-Version	1.2.1	High
Version	Manifest	Implementation-Version	1.2.1	High
Version	pom	version	1.2.1	Highest

Identifiers

pkg:maven/org.apache.ftpserver/[email protected] (Confidence:High)

ftpserver-core-1.2.1.jar

Description:

The Apache Software Foundation provides support for the Apache community of open-source software projects.    The Apache projects are characterized by a collaborative, consensus based development process, an open and    pragmatic software license, and a desire to create high quality software that leads the way in its field.    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers    and users.

License:

https://www.apache.org/licenses/LICENSE-2.0

File Path: /lib/ftpserver-core-1.2.1.jar
MD5: 0ff0231871fcaf8433c6180d139d9ee4
SHA1: 26fa6f102e8cf4d2234aa1f01d45fe00e3f424b2
SHA256:18279abb21abd74e10bb60d5ac6fa044044cc40f1b34d62418e906f50d4212ec

Evidence

Type	Source	Name	Value	Confidence
Vendor	central	artifactid	ftpserver-core	Highest
Vendor	central	groupid	org.apache.ftpserver	Highest
Vendor	file	name	ftpserver-core	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	apache	Low
Vendor	jar	package name	ftpserver	Highest
Vendor	jar	package name	ftpserver	Low
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	https://www.apache.org/	Low
Vendor	Manifest	bundle-symbolicname	ftpserver-core	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	ftpserver-core	Low
Vendor	pom	groupid	org.apache.ftpserver	Highest
Vendor	pom	name	Apache FtpServer Core	High
Vendor	pom	parent-artifactid	ftpserver-parent	Low
Product	central	artifactid	ftpserver-core	Highest
Product	file	name	ftpserver-core	High
Product	jar	package name	apache	Highest
Product	jar	package name	ftpserver	Highest
Product	jar	package name	ftpserver	Low
Product	jar	package name	impl	Low
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	https://www.apache.org/	Low
Product	Manifest	Bundle-Name	Apache FtpServer Core	Medium
Product	Manifest	bundle-symbolicname	ftpserver-core	Medium
Product	Manifest	Implementation-Title	Apache FtpServer Core	High
Product	Manifest	specification-title	Apache FtpServer Core	Medium
Product	pom	artifactid	ftpserver-core	Highest
Product	pom	groupid	org.apache.ftpserver	Highest
Product	pom	name	Apache FtpServer Core	High
Product	pom	parent-artifactid	ftpserver-parent	Medium
Version	central	version	1.2.1	Highest
Version	file	version	1.2.1	High
Version	Manifest	Bundle-Version	1.2.1	High
Version	Manifest	Implementation-Version	1.2.1	High
Version	pom	version	1.2.1	Highest

Identifiers

pkg:maven/org.apache.ftpserver/[email protected] (Confidence:High)

json-20260814.jar

Description:

        JSON is a light-weight, language independent, data interchange format.
        See http://www.JSON.org/

        The files in this package implement JSON encoders/decoders in Java.
        It also includes the capability to convert between JSON and XML, HTTP
        headers, Cookies, and CDL.

        This is a reference implementation. There are a large number of JSON packages
        in Java. Perhaps someday the Java community will standardize on one. Until
        then, choose carefully.

License:

Public Domain: https://github.com/stleary/JSON-java/blob/master/LICENSE

File Path: /lib/json-20260814.jar
MD5: 5d507e40a3a4b3d291de773a8dd12821
SHA1: a1d979d4b336516526d00ff423e4a8d4ba27670f
SHA256:7dd2de1533e766e2b6c07d8194da85145ad313a167a4760050f5c9b6839604fe

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	json-20260814	High
Vendor	jar	package name	cdl	Highest
Vendor	jar	package name	http	Highest
Vendor	jar	package name	json	Highest
Vendor	jar	package name	xml	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	json	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	json	Low
Vendor	pom	developer email	[email protected]	Low
Vendor	pom	developer name	Douglas Crockford	Medium
Vendor	pom	groupid	org.json	Highest
Vendor	pom	name	JSON in Java	High
Vendor	pom	url	douglascrockford/JSON-java	Highest
Product	file	name	json-20260814	High
Product	jar	package name	cdl	Highest
Product	jar	package name	http	Highest
Product	jar	package name	json	Highest
Product	jar	package name	xml	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	JSON in Java	Medium
Product	Manifest	bundle-symbolicname	json	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	json	Highest
Product	pom	developer email	[email protected]	Low
Product	pom	developer name	Douglas Crockford	Low
Product	pom	groupid	org.json	Highest
Product	pom	name	JSON in Java	High
Product	pom	url	douglascrockford/JSON-java	High
Version	file	version	20260814	Medium
Version	pom	version	20260814	Highest

Identifiers

pkg:maven/org.json/json@20260814 (Confidence:High)

logback-core-1.5.37.jar

Description:

logback-core module

License:

https://www.eclipse.org/legal/epl-v20.html, https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

File Path: /lib/logback-core-1.5.37.jar
MD5: 606908ba3c9d8a6cbd46069b7ce908c5
SHA1: 41df60907428d396d02134253eee8bd385a31601
SHA256:c142955d757d923c6c626296bd97be2e0db1cfd33adeadbf2e2927403391e0a1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	logback-core	High
Vendor	jar	package name	ch	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	logback	Highest
Vendor	jar	package name	qos	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.qos.ch	Low
Vendor	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Vendor	Manifest	Implementation-Vendor	QOS.ch	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Vendor	Manifest	specification-vendor	QOS.ch	Low
Vendor	pom	artifactid	logback-core	Low
Vendor	pom	groupid	ch.qos.logback	Highest
Vendor	pom	name	Logback Core Module	High
Vendor	pom	parent-artifactid	logback-parent	Low
Product	file	name	logback-core	High
Product	jar	package name	ch	Highest
Product	jar	package name	core	Highest
Product	jar	package name	logback	Highest
Product	jar	package name	qos	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.qos.ch	Low
Product	Manifest	Bundle-Name	Logback Core Module	Medium
Product	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Product	Manifest	Implementation-Title	Logback Core Module	High
Product	Manifest	multi-release	true	Low
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Product	Manifest	specification-title	Logback Core Module	Medium
Product	pom	artifactid	logback-core	Highest
Product	pom	groupid	ch.qos.logback	Highest
Product	pom	name	Logback Core Module	High
Product	pom	parent-artifactid	logback-parent	Medium
Version	file	version	1.5.37	High
Version	Manifest	Bundle-Version	1.5.37	High
Version	Manifest	Implementation-Version	1.5.37	High
Version	pom	version	1.5.37	Highest

Related Dependencies

Identifiers

pkg:maven/ch.qos.logback/[email protected] (Confidence:High)
cpe:2.3:a:qos:logback:1.5.37:*:*:*:*:*:*:* (Confidence:Highest)

mina-core-2.2.9.jar

Description:

Apache MINA is a network application framework which helps users develop high performance and highly scalable network applications easily.  It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /lib/mina-core-2.2.9.jar
MD5: 992215a47671e632ca7d36f51981d930
SHA1: a0c46b655acdceda1315b34057f7bb1f426cdbb2
SHA256:09b4b5e416834e5281dd0dfccac1a10413d6f42c89f133b1c43641e34f33e840

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	mina-core	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	mina	Highest
Vendor	Manifest	automatic-module-name	org.apache.mina.core	Medium
Vendor	Manifest	build-jdk-spec	25	Low
Vendor	Manifest	bundle-docurl	https://mina.apache.org/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.mina.core	Medium
Vendor	pom	artifactid	mina-core	Low
Vendor	pom	groupid	org.apache.mina	Highest
Vendor	pom	name	Apache MINA Core	High
Vendor	pom	parent-artifactid	mina-parent	Low
Product	file	name	mina-core	High
Product	jar	package name	apache	Highest
Product	jar	package name	core	Highest
Product	jar	package name	event	Highest
Product	jar	package name	mina	Highest
Product	Manifest	automatic-module-name	org.apache.mina.core	Medium
Product	Manifest	build-jdk-spec	25	Low
Product	Manifest	bundle-docurl	https://mina.apache.org/	Low
Product	Manifest	Bundle-Name	Apache MINA Core	Medium
Product	Manifest	bundle-symbolicname	org.apache.mina.core	Medium
Product	pom	artifactid	mina-core	Highest
Product	pom	groupid	org.apache.mina	Highest
Product	pom	name	Apache MINA Core	High
Product	pom	parent-artifactid	mina-parent	Medium
Version	file	version	2.2.9	High
Version	Manifest	Bundle-Version	2.2.9	High
Version	pom	version	2.2.9	Highest

Identifiers

pkg:maven/org.apache.mina/[email protected] (Confidence:High)
cpe:2.3:a:apache:mina:2.2.9:*:*:*:*:*:*:* (Confidence:Highest)

slf4j-api-2.0.18.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit

File Path: /lib/slf4j-api-2.0.18.jar
MD5: fe2837bd49bfb76657419002fed20ca9
SHA1: 78a9e7a37cd6360e0b818e86341b24123d28d4df
SHA256:44508fd1576500688c790b190acdd16fec4f8c79a3e0b900afd70503cf055f55

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	jar	package name	slf4j	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	SLF4J API Module	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.18	High
Version	Manifest	Bundle-Version	2.0.18	High
Version	Manifest	Implementation-Version	2.0.18	High
Version	pom	version	2.0.18	Highest

Identifiers

pkg:maven/org.slf4j/[email protected] (Confidence:High)

sqlite-jdbc-3.53.4.0.jar

Description:

SQLite JDBC library with encryption and authentication support

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /lib/sqlite-jdbc-3.53.4.0.jar
MD5: e7298769bda94aae64f4469dfa7c3e47
SHA1: 11afebcbe413f202089b0f5ded84242a857bf0d9
SHA256:233a1c6a5178ed3b86a52186c78dcec008c63b50db50c6ee2a21d9a94a7bf51e

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	sqlite-jdbc	High
Vendor	jar	package name	jdbc	Highest
Vendor	jar	package name	sqlite	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-symbolicname	io.github.willena.sqlite-jdbc;singleton:=true	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Vendor	pom	artifactid	sqlite-jdbc	Low
Vendor	pom	developer email	[email protected]	Low
Vendor	pom	developer id	Willena	Medium
Vendor	pom	developer name	Guillaume Villena	Medium
Vendor	pom	developer org	Guillaume's projects	Medium
Vendor	pom	groupid	io.github.willena	Highest
Vendor	pom	name	SQLite JDBC	High
Vendor	pom	url	Willena/sqlite-jdbc-crypt	Highest
Product	file	name	sqlite-jdbc	High
Product	jar	package name	9	Highest
Product	jar	package name	jdbc	Highest
Product	jar	package name	sqlite	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	Bundle-Name	SQLite JDBC	Medium
Product	Manifest	bundle-symbolicname	io.github.willena.sqlite-jdbc;singleton:=true	Medium
Product	Manifest	multi-release	true	Low
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin 5.1.9	Low
Product	pom	artifactid	sqlite-jdbc	Highest
Product	pom	developer email	[email protected]	Low
Product	pom	developer id	Willena	Low
Product	pom	developer name	Guillaume Villena	Low
Product	pom	developer org	Guillaume's projects	Low
Product	pom	groupid	io.github.willena	Highest
Product	pom	name	SQLite JDBC	High
Product	pom	url	Willena/sqlite-jdbc-crypt	High
Version	file	version	3.53.4.0	High
Version	Manifest	Bundle-Version	3.53.4.0	High
Version	pom	version	3.53.4.0	Highest

Identifiers

pkg:maven/io.github.willena/[email protected] (Confidence:High)
cpe:2.3:a:sqlite:sqlite:3.53.4.0:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:sqlite_jdbc_project:sqlite_jdbc:3.53.4.0:*:*:*:*:*:*:* (Confidence:Highest)

sshd-core-2.19.0.jar

File Path: /lib/sshd-core-2.19.0.jar
MD5: cee9fbdd10183ca2be22e95ab5707087
SHA1: e1524d99feece8d50db0a75f43f99818c649dd97
SHA256:7215350bf71d95a34494f823a7451f966a2995b59e99fdf8ee9cbd63ef78cdb3

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	sshd-core	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	sshd	Highest
Vendor	Manifest	automatic-module-name	org.apache.sshd.core	Medium
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	sshd-core	Low
Vendor	pom	groupid	org.apache.sshd	Highest
Vendor	pom	name	Apache Mina SSHD :: Core	High
Vendor	pom	parent-artifactid	sshd	Low
Product	file	name	sshd-core	High
Product	jar	package name	apache	Highest
Product	jar	package name	core	Highest
Product	jar	package name	sshd	Highest
Product	Manifest	automatic-module-name	org.apache.sshd.core	Medium
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	Implementation-Title	Apache Mina SSHD :: Core	High
Product	Manifest	specification-title	Apache Mina SSHD :: Core	Medium
Product	pom	artifactid	sshd-core	Highest
Product	pom	groupid	org.apache.sshd	Highest
Product	pom	name	Apache Mina SSHD :: Core	High
Product	pom	parent-artifactid	sshd	Medium
Version	file	version	2.19.0	High
Version	Manifest	Implementation-Version	2.19.0	High
Version	pom	version	2.19.0	Highest

Related Dependencies

Identifiers

pkg:maven/org.apache.sshd/[email protected] (Confidence:High)
cpe:2.3:a:apache:sshd:2.19.0:*:*:*:*:*:*:* (Confidence:Highest)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: Porta SFTP Server

Summary

Dependencies (vulnerable)

AbsoluteLayout-RELEASE290.jar

Evidence

Identifiers

bcpkix-jdk18on-1.85.jar

Evidence

Identifiers

bcprov-jdk18on-1.85.jar

Evidence

Identifiers

bcutil-jdk18on-1.85.jar

Evidence

Identifiers

flatlaf-3.7.2.jar

Evidence

Identifiers

ftplet-api-1.2.1.jar

Evidence

Identifiers

ftpserver-core-1.2.1.jar

Evidence

Identifiers

json-20260814.jar

Evidence

Identifiers

logback-core-1.5.37.jar

Evidence

Related Dependencies

Identifiers

mina-core-2.2.9.jar

Evidence

Identifiers

slf4j-api-2.0.18.jar

Evidence

Identifiers

sqlite-jdbc-3.53.4.0.jar

Evidence

Identifiers

sshd-core-2.19.0.jar

Evidence

Related Dependencies

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor