Press CTR-C to copy XML [help]

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

### How to read the report | Suppressing false positives | Getting Help: github issues
Sponsor

## Project: project ':standalone'

#### pdfc:standalone:25.10

Scan Information (show all):

- dependency-check version: 10.0.3
- Report Generated On: Wed, 5 Nov 2025 19:58:09 +0100
- Dependencies Scanned: 128 (127 unique)
- Vulnerable Dependencies: 0
- Vulnerabilities Found: 0
- Vulnerabilities Suppressed: 1 (show)
- ...
- NVD API Last Checked: 2025-11-05T18:56:11Z
- NVD API Last Modified: 2024-09-18T11:15:10Z
- NVD Cache Last Checked: 2025-11-05T18:56:11Z
- NVD Cache Last Modified: 2024-09-18T11:15:10Z

## Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency | Vulnerability IDs | Package | Highest Severity | CVE Count | Confidence | Evidence Count
--- | --- | --- | --- | --- | --- | ---
Merlia-0.jar |  | pkg:maven/lib/Merlia@0 |  | 0 |  | 12
analysis.language.zip: analysis.language.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 33
analysis.language.zip: guava.jar | cpe:2.3:a:google:guava:33.4.8:*:*:*:*:*:*:* | pkg:maven/com.google.guava/guava@33.4.8-jre |  | 0 | Highest | 24
analysis.language.zip: jsonic.jar |  |  |  | 0 |  | 7
analysis.language.zip: language-detector.jar |  | pkg:maven/com.optimaize.languagedetector/language-detector@0.6 |  | 0 |  | 26
annotations-3.0.1.jar (shaded: com.google.code.findbugs:jsr305:3.0.1) |  | pkg:maven/com.google.code.findbugs/jsr305@3.0.1 |  | 0 |  | 9
annotations-3.0.1.jar |  | pkg:maven/com.google.code.findbugs/annotations@3.0.1 |  | 0 |  | 42
command.jsonexport.zip: command.jsonexport.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 32
comparison.api.zip: comparison.api.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 30
comparison.rpc.zip: comparison.rpc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 32
comparison.webgui.zip: comparison.webgui.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 22
comparison.webgui.zip: comparison.webgui.jar: app.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: compare.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: contextmenuextension.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: contingent.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: controller.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: descriptionarea.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: dropzone.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: export.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: factory.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: model.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: multipasswordpanel.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: mycomparisons.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: passwordpanel.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: pdfcconfig.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: profil.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: profileentry.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: publishdialog.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: publishprofiledialog.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: report.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: scroller.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: searchcomponent.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: userlist.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: visibilitysettings.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: zoomer.js |  |  |  | 0 |  | 0
filter.area.zip: filter.area.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.baselinetable.zip: filter.baselinetable.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.cmappatch.zip: filter.cmappatch.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.headerfooter.zip: filter.headerfooter.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.hiderotation.zip: filter.hiderotation.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.invisibleelements.zip: filter.invisibleelements.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.multicolumn.zip: filter.multicolumn.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.ocr.zip: filter.ocr.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.pagerange.zip: filter.pagerange.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 32
filter.regex.zip: filter.regex.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.regex.zip: filter.regex.jar: filterrenderer.js |  |  |  | 0 |  | 0
filter.texttransform.zip: filter.texttransform.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.urllookup.zip: filter.urllookup.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 33
hamcrest-3.0.jar |  | pkg:maven/org.hamcrest/hamcrest@3.0 |  | 0 |  | 17
inetcore-25.10-tools.jar |  | pkg:maven/shared/inetcore@25.10 |  | 0 |  | 9
inetcore-25.10.jar (shaded: com.inet.shared:inetcore:null) |  |  |  | 0 |  | 27
inetcore-25.10.jar |  | pkg:maven/shared/inetcore@25.10 |  | 0 |  | 35
java-21-jre-x64-linux.tar.gz: java-21-jre-x64-linux.tar: jrt-fs.jar | cpe:2.3:a:eclipse:platform:21.0.8:*:*:*:*:*:*:* |  |  | 0 | Medium | 12
jcip-annotations-1.0.jar |  | pkg:maven/net.jcip/jcip-annotations@1.0 |  | 0 |  | 13
jlessc-1.14.jar |  | pkg:maven/de.inetsoftware/jlessc@1.14 |  | 0 |  | 19
jsr305-3.0.2.jar |  | pkg:maven/com.google.code.findbugs/jsr305@3.0.2 |  | 0 |  | 20
junit-4.13.2.jar | cpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:* | pkg:maven/junit/junit@4.13.2 |  | 0 | Highest | 17
junit-jupiter-5.13.4.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4 |  | 0 |  | 21
junit-jupiter-api-5.13.4.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-api@5.13.4 |  | 0 |  | 31
junit-jupiter-engine-5.13.4.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4 |  | 0 |  | 33
junit-jupiter-params-5.13.4.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-params@5.13.4 |  | 0 |  | 32
junit-platform-commons-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-commons@1.13.4 |  | 0 |  | 34
junit-platform-engine-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-engine@1.13.4 |  | 0 |  | 32
junit-platform-launcher-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-launcher@1.13.4 |  | 0 |  | 33
junit-platform-suite-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-suite@1.13.4 |  | 0 |  | 21
junit-platform-suite-api-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-suite-api@1.13.4 |  | 0 |  | 34
junit-platform-suite-commons-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-suite-commons@1.13.4 |  | 0 |  | 34
junit-platform-suite-engine-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-suite-engine@1.13.4 |  | 0 |  | 34
junit-vintage-engine-5.13.4.jar |  | pkg:maven/org.junit.vintage/junit-vintage-engine@5.13.4 |  | 0 |  | 33
maintenance.pdfc.zip: maintenance.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 22
maintenance.pdfc.zip: maintenance.pdfc.jar: app.js |  |  |  | 0 |  | 0
maintenance.pdfc.zip: maintenance.pdfc.jar: comparisons.js |  |  |  | 0 |  | 0
ocr.tesseract.zip: commons-logging.jar |  | pkg:maven/commons-logging/commons-logging@1.3.4 |  | 0 |  | 127
ocr.tesseract.zip: fontbox.jar |  | pkg:maven/org.apache.pdfbox/fontbox@3.0.5 |  | 0 |  | 32
ocr.tesseract.zip: jai-imageio-core.jar |  | pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0 |  | 0 |  | 40
ocr.tesseract.zip: jbig2-imageio.jar | cpe:2.3:a:apache:pdfbox:3.0.4:*:*:*:*:*:*:* | pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4 |  | 0 | Highest | 128
ocr.tesseract.zip: jboss-vfs.jar |  | pkg:maven/org.jboss/jboss-vfs@3.3.2.Final |  | 0 |  | 33
ocr.tesseract.zip: jna.jar | cpe:2.3:a:oracle:java_se:5.14.0:*:*:*:*:*:*:* |  |  | 0 | Low | 36
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: lept4j.jar |  | pkg:maven/net.sourceforge.lept4j/lept4j@1.19.1 |  | 0 |  | 25
ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: ocr.tesseract.jar | cpe:2.3:a:tesseract_ocr_project:tesseract_ocr:25.10.233:*:*:*:*:*:*:* cpe:2.3:a:tesseract_project:tesseract:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 33
ocr.tesseract.zip: pdfbox.jar | cpe:2.3:a:apache:pdfbox:3.0.5:*:*:*:*:*:*:* | pkg:maven/org.apache.pdfbox/pdfbox@3.0.5 |  | 0 | Highest | 30
ocr.tesseract.zip: tess4j.jar | cpe:2.3:a:tesseract_project:tesseract:5.12.0:*:*:*:*:*:*:* | pkg:maven/net.sourceforge.tess4j/tess4j@5.12.0 |  | 0 | Low | 42
ocr.tesseract.zip: tess4j.jar: libtesseract541.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: tess4j.jar: libtesseract541.dll |  |  |  | 0 |  | 4
opentest4j-1.3.0.jar |  | pkg:maven/org.opentest4j/opentest4j@1.3.0 |  | 0 |  | 23
parser.image.zip: parser.image.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 31
parser.pdf.config.zip: parser.pdf.config.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 31
parser.text.zip: parser.text.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfc.standalone.zip: pdfc.standalone.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfc.standalone.zip: pdfc.standalone.jar: bridge.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: bridgeConfig.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: bridgePDFC.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: extraMenu.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: removeHeader.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: removePDFCElements.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: theme.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: translation.js |  |  |  | 0 |  | 0
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:collate:77.1) |  | pkg:maven/com.ibm.icu/collate@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:core:77.1) |  | pkg:maven/com.ibm.icu/core@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:currdata:77.1) |  | pkg:maven/com.ibm.icu/currdata@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:langdata:77.1) |  | pkg:maven/com.ibm.icu/langdata@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:regiondata:77.1) |  | pkg:maven/com.ibm.icu/regiondata@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:translit:77.1) |  | pkg:maven/com.ibm.icu/translit@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar | cpe:2.3:a:icu-project:international_components_for_unicode:77.1:*:*:*:*:*:*:* cpe:2.3:a:unicode:international_components_for_unicode:77.1:*:*:*:*:*:*:* | pkg:maven/com.ibm.icu/icu4j@77.1 |  | 0 | Low | 49
pdfc.zip: pdfc-javadoc.jar |  |  |  | 0 |  | 2
pdfc.zip: pdfc-javadoc.jar: jquery-3.6.1.min.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js |  | pkg:javascript/jquery-ui@1.13.1 |  | 0 |  | 3
pdfc.zip: pdfc-javadoc.jar: member-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: module-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: package-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: script.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: search.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: tag-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: type-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 30
pdfcserver.zip: pdfcserver.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfcserver.zip: pdfcserver.jar: compareconfigrenderer.js |  |  |  | 0 |  | 0
pdfcsetupwizard.zip: pdfcsetupwizard.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 21
pdfcsetupwizard.zip: pdfcsetupwizard.jar: controller.js |  |  |  | 0 |  | 0
processbridge.pdfc.zip: processbridge.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 22
slf4j-api-2.0.16.jar |  | pkg:maven/org.slf4j/slf4j-api@2.0.16 |  | 0 |  | 32
taskplanner.pdfc.zip: taskplanner.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* |  |  | 0 | Low | 21

## Dependencies (vulnerable)

### Merlia-0.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/lib/Merlia/0/e4af937135679cc07f99529ee7ca127519bd3a06/Merlia-0.jar
MD5: 3eb81fb3cc977f1a3eb1fb26b2b38666
SHA1: e4af937135679cc07f99529ee7ca127519bd3a06
SHA256:b1d1878d936c27b010e6f3c123d8d7f2f7f6960a53e5b01b1b1c3d104c29b0a8
Referenced In Project/Scope: standalone:inetPlugin
Merlia-0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | Merlia-0 | High
Vendor | gradle | artifactid | Merlia | Highest
Vendor | gradle | groupid | lib | Highest
Vendor | jar | package name | inet | Low
Vendor | jar | package name | tds | Low
Product | file | name | Merlia-0 | High
Product | gradle | artifactid | Merlia | Highest
Product | jar | package name | tds | Low
Version | file | name | Merlia-0 | Medium
Version | file | version | 0 | Medium
Version | gradle | version | 0 | Highest
Version | Manifest | driver-version | 8.13 | Medium

#### Identifiers

- pkg:maven/lib/Merlia@0 (Confidence:Highest)

### analysis.language.zip: analysis.language.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/analysis.language.jar
MD5: 8568e79f452c7788af157aeae489443b
SHA1: 97fa1b042b60fae0d4c4cd1d1d9659479e572fa3
SHA256:d3850b35652725b18c4b3f3cd900935b3e752cfe7a330258332803ca278e6103
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | analysis.language | High
Vendor | jar | package name | analysis | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:41 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | analysis.language | High
Product | jar | package name | analysis | Highest
Product | jar | package name | analysis | Low
Product | jar | package name | language | Highest
Product | jar | package name | language | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:41 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | analysis.language | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | analysis.language | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### analysis.language.zip: guava.jar

Description:

        Guava is a suite of core and expanded libraries that include
        utility classes, Google's collections, I/O classes, and
        much more.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/guava.jar
MD5: 72920caab34426c5815e3b00f80e3b01
SHA1: e70a3268e6cd3e7d458aa15787ce6811c34e96ae
SHA256:f3d7f57f67fd622f4d468dfdd692b3a5e3909246c28017ac3263405f0fe617ed
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | guava | High
Vendor | jar | package name | google | Highest
Vendor | Manifest | build-jdk-spec | 11 | Low
Vendor | Manifest | bundle-docurl | https://github.com/google/guava/ | Low
Vendor | Manifest | bundle-symbolicname | com.google.guava | Medium
Vendor | Manifest | multi-release | true | Low
Vendor | pom | artifactid | guava | Low
Vendor | pom | groupid | com.google.guava | Highest
Vendor | pom | name | Guava: Google Core Libraries for Java | High
Vendor | pom | parent-artifactid | guava-parent | Low
Vendor | pom | url | google/guava | Highest
Product | file | name | guava | High
Product | jar | package name | google | Highest
Product | Manifest | build-jdk-spec | 11 | Low
Product | Manifest | bundle-docurl | https://github.com/google/guava/ | Low
Product | Manifest | Bundle-Name | Guava: Google Core Libraries for Java | Medium
Product | Manifest | bundle-symbolicname | com.google.guava | Medium
Product | Manifest | multi-release | true | Low
Product | pom | artifactid | guava | Highest
Product | pom | groupid | com.google.guava | Highest
Product | pom | name | Guava: Google Core Libraries for Java | High
Product | pom | parent-artifactid | guava-parent | Medium
Product | pom | url | google/guava | High
Version | pom | version | 33.4.8-jre | Highest

#### Identifiers

- pkg:maven/com.google.guava/guava@33.4.8-jre (Confidence:High)
- cpe:2.3:a:google:guava:33.4.8:*:*:*:*:*:*:* (Confidence:Highest)

### analysis.language.zip: jsonic.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/jsonic.jar
MD5: 504496d0069da0121c059c219147e90c
SHA1: 98e8a1f25aa40ed92ff2ecca4d1301d48b552452
SHA256:150e3ac24b103cb0cd50595018dbe3c8ba4b3dee81a76eb4b987607f96e9602b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jsonic | High
Vendor | jar | package name | arnx | Low
Vendor | jar | package name | jsonic | Low
Vendor | jar | package name | net | Low
Product | file | name | jsonic | High
Product | jar | package name | arnx | Low
Product | jar | package name | jsonic | Low

#### Identifiers

- None

### analysis.language.zip: language-detector.jar

Description:

            Language Detection Library for Java.

License:

    Apache 2: http://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/language-detector.jar
MD5: e5475d5cabd54e5ddf6428d63864888f
SHA1: 52fee1eaa101f8d3e30b7095e1b6e0054d514dde
SHA256:f53ecc3d71da9ebc82edd10fb35638d32e8b9d849273dd717a021eca02f2278d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | language-detector | High
Vendor | jar | package name | langdetect | Low
Vendor | jar | package name | languagedetector | Highest
Vendor | jar | package name | optimaize | Highest
Vendor | jar | package name | optimaize | Low
Vendor | pom | artifactid | language-detector | Low
Vendor | pom | developer name | Fabian Kessler | Medium
Vendor | pom | developer name | François ROLAND | Medium
Vendor | pom | developer name | Nakatani Shuyo | Medium
Vendor | pom | developer name | Robert Theis | Medium
Vendor | pom | groupid | com.optimaize.languagedetector | Highest
Vendor | pom | name | language-detector | High
Vendor | pom | url | optimaize/language-detector | Highest
Product | file | name | language-detector | High
Product | jar | package name | langdetect | Low
Product | jar | package name | languagedetector | Highest
Product | jar | package name | optimaize | Highest
Product | pom | artifactid | language-detector | Highest
Product | pom | developer name | Fabian Kessler | Low
Product | pom | developer name | François ROLAND | Low
Product | pom | developer name | Nakatani Shuyo | Low
Product | pom | developer name | Robert Theis | Low
Product | pom | groupid | com.optimaize.languagedetector | Highest
Product | pom | name | language-detector | High
Product | pom | url | optimaize/language-detector | High
Version | pom | version | 0.6 | Highest

#### Identifiers

- pkg:maven/com.optimaize.languagedetector/language-detector@0.6 (Confidence:High)

### annotations-3.0.1.jar (shaded: com.google.code.findbugs:jsr305:3.0.1)

Description:

    JSR305 Annotations for Findbugs

License:

    The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/annotations/3.0.1/fc019a2216218990d64dfe756e7aa20f0069dea2/annotations-3.0.1.jar/META-INF/maven/com.google.code.findbugs/jsr305/pom.xml
MD5: d08567d16867a0b79bc8149683918452
SHA1: d04690f71f3393e23f30998d9534365274fa5f9f
SHA256:4170a761dc5bfd3981a8e6f7aab9e2acdce82d34fd5aa9bb11e3c090d25314ce
Referenced In Project/Scope: standalone:inetPlugin

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | jsr305 | Low
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-jsr305 | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | pom | artifactid | jsr305 | Highest
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-jsr305 | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | pom | version | 3.0.1 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/jsr305@3.0.1 (Confidence:High)

### annotations-3.0.1.jar

Description:

    Annotation the FindBugs tool supports

License:

    GNU Lesser Public License: http://www.gnu.org/licenses/lgpl.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/annotations/3.0.1/fc019a2216218990d64dfe756e7aa20f0069dea2/annotations-3.0.1.jar
MD5: fc4f102f22ba4f1df3f1d7cc6b202152
SHA1: fc019a2216218990d64dfe756e7aa20f0069dea2
SHA256:6b47ff0a6de0ce17cbedc3abb0828ca5bce3009d53ea47b3723ff023c4742f79
Referenced In Project/Scope: standalone:inetPlugin
annotations-3.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.14

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | annotations | High
Vendor | gradle | artifactid | annotations | Highest
Vendor | gradle | groupid | com.google.code.findbugs | Highest
Vendor | jar | package name | annotation | Highest
Vendor | jar | package name | annotations | Highest
Vendor | jar | package name | findbugs | Highest
Vendor | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low
Vendor | Manifest | bundle-symbolicname | findbugsAnnotations | Medium
Vendor | pom | artifactid | annotations | Low
Vendor | pom | developer email | Loskutov@gmx.de | Low
Vendor | pom | developer email | pugh at cs.umd.edu | Low
Vendor | pom | developer id | al | Medium
Vendor | pom | developer id | bp | Medium
Vendor | pom | developer name | Andrey Loskutov | Medium
Vendor | pom | developer name | Bill Pugh | Medium
Vendor | pom | developer name | Keith Lea | Medium
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-Annotations | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | file | name | annotations | High
Product | gradle | artifactid | annotations | Highest
Product | jar | package name | annotation | Highest
Product | jar | package name | annotations | Highest
Product | jar | package name | findbugs | Highest
Product | Manifest | Bundle-Name | FindBugs-Annotations | Medium
Product | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low
Product | Manifest | bundle-symbolicname | findbugsAnnotations | Medium
Product | pom | artifactid | annotations | Highest
Product | pom | developer email | Loskutov@gmx.de | Low
Product | pom | developer email | pugh at cs.umd.edu | Low
Product | pom | developer id | al | Low
Product | pom | developer id | bp | Low
Product | pom | developer name | Andrey Loskutov | Low
Product | pom | developer name | Bill Pugh | Low
Product | pom | developer name | Keith Lea | Low
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-Annotations | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | file | version | 3.0.1 | High
Version | gradle | version | 3.0.1 | Highest
Version | Manifest | Bundle-Version | 3.0.1 | High
Version | pom | version | 3.0.1 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/annotations@3.0.1 (Confidence:High)

### command.jsonexport.zip: command.jsonexport.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/command.jsonexport.zip/command.jsonexport.jar
MD5: b0e9e2f3e1e7fe4669080eaac39412f7
SHA1: 9a851b97f48b136e340811ea90d5dd739399f881
SHA256:e1994ff9d976df8e645391978945358024de9807683b07479fdaeee8a1bb4a3b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | command.jsonexport | High
Vendor | jar | package name | command | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:41 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | command.jsonexport | High
Product | jar | package name | command | Highest
Product | jar | package name | command | Low
Product | jar | package name | json | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:41 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | command.jsonexport | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | command.jsonexport | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### comparison.api.zip: comparison.api.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.api.zip/comparison.api.jar
MD5: a1f65f3b898bba7817fdf75a4e458ad2
SHA1: f89ae4cbfa7031aeb87c391fd4f0beac5337a0fc
SHA256:1dacaa56f32f9f8b5c86e2633af68f6cfd07180e0d3180a078863dcdb2d8efd1
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.api | High
Vendor | jar | package name | comparisonapi | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:34 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.api | High
Product | jar | package name | comparisonapi | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:34 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.api | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | comparison.api | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### comparison.rpc.zip: comparison.rpc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.rpc.zip/comparison.rpc.jar
MD5: 4613e94da0e60059b39732dfde543b5e
SHA1: 0acc6fab1921030453570c2d5a79c73977261075
SHA256:49dd1bbc497427c4be820d0a4a823a89978f261f5c714bc5e61f641046025aed
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.rpc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | rpc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:34 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.rpc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | rpc | Highest
Product | jar | package name | rpc | Low
Product | jar | package name | websocket | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:34 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.rpc | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | comparison.rpc | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### comparison.webgui.zip: comparison.webgui.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar
MD5: 1ef41b1f3a6a105023346f41be1fbc65
SHA1: 64d05a94a26be886f022c5b5cf2efce26eca5805
SHA256:96624fedaa50b75a4eadb5ee752549a4449fa4b2c27ceabc2bf1abb1b4f45554
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.webgui | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | webgui | Low
Vendor | Manifest | built-date | 2025-11-05 19:35 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.webgui | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | server | Low
Product | jar | package name | webgui | Highest
Product | jar | package name | webgui | Low
Product | Manifest | built-date | 2025-11-05 19:35 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.webgui | High
Product | Manifest | specification-title | comparison.webgui | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### comparison.webgui.zip: comparison.webgui.jar: app.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/app.js
MD5: 2e4ad8b6a0f9a76284c281df29d4ae4d
SHA1: c715d01b3797ea1cc4e3615d97412a8d2cf8a067
SHA256:c1ace93a6f794644bab65004932e9335d040e375a3d93c6ca4f7029bc5e06e59
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: compare.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/compare.js
MD5: 6b51954c7a299af1f898d3f564bde203
SHA1: c840cfecd51004f94fd0ee982c9db6ee63fb04cc
SHA256:6a7ab442206a31de5e93cd43b3736f314afd89a075e642d6c72a5891f01ae06e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: contextmenuextension.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/drive/contextmenuextension.js
MD5: b5f087715014cac13f4ccbc40c947f1c
SHA1: bf853c9b9c629eb66ce96fd12a24e973aa2cb1c6
SHA256:3096c6232dfe34a586f3d3bf0175b12bbd3b20a25d2f499da0aaa390a122d97b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: contingent.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/contingent.js
MD5: 10782a90b423f2db0450adaa8944f25a
SHA1: 8d7242260155b1bc6cbca8cd0fa034c3be0c021b
SHA256:c54c35e7c00b764c4e9b7511916a30510158e88b8c8e5ee4d61c7302a7d87295
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: controller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/controller.js
MD5: aacf28f3a507db78d714d36140550854
SHA1: 17c29a4631e4ae05cd4cefb76cea06e6ee94046f
SHA256:b305eec27b595654e3edced1f288390c04ce7f19f8fd058129dbf5167c9cd05c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: descriptionarea.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/descriptionarea.js
MD5: 14028f3ecbcfc96a785ea29eec407af0
SHA1: c89033c6f1414aabc1e006e78079167ab6ffb194
SHA256:64973d746a823e043ad9df56ce9aff83dbe2f89cea86bed498cfe1dc82d799ca
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: dropzone.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/dropzone.js
MD5: 2856733a745b9f8fdb7e8f5806f32299
SHA1: e644c116bc9337732ee3fd448430f5ad7c9056f1
SHA256:37993d37570580a0b7d0ab92083862738ab1aa30c9767241a29173342a08e1bb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: export.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/export.js
MD5: e1a2cc48050ef9b378b8a53a081d082a
SHA1: 5cd7fe1140bd00b2f6db400724b659ae7abbadd9
SHA256:17fe08df83d82b913f8d1416e4ce5c2530ee55f4a35348f6c9dad90fde158ec7
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: factory.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/factory.js
MD5: 74c60c48fbcc1dea077c4e2a1f617446
SHA1: 09bad3af86aad6976b1898fb818c73aa532efeb5
SHA256:4c7ce44ad7127235a295e80100e58fd41897a69602fac5320c774560546061a9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: model.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/model.js
MD5: a0ce24ce0abb9a25fbcb93919008d176
SHA1: 91de96e8843f7ed1bba7b94b4d869f3e7c07f2ad
SHA256:6deeec42335e4e4062ab72773fa598a37afda2b1207451a35d6ee9df31124836
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: multipasswordpanel.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/multipasswordpanel.js
MD5: 34d4d5fd0cf1fa77d569e928af1a00aa
SHA1: 230e35fe5f8f5a48ccd930cee3c79f16df858b97
SHA256:28be5c583ef3c82dca061d79f33a43f3672421b6a1b42e460a444f296d49a79a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: mycomparisons.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/mycomparisons.js
MD5: ec823fcf834bc8b9c79050fc5ee6a84e
SHA1: 0683120ef8ec8c044248b93375348549fce783d5
SHA256:713e5065e3623b225277c4718c9763e2785272ded0b6cc476f0ff20724401017
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: passwordpanel.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/passwordpanel.js
MD5: 4e69b1954226ce194fd836df7ad77e35
SHA1: 6e79c7f2354f08c8effe8adfd66c6dcaff4bdb8c
SHA256:6078c754f425f4087a05cf8e6aca77ab5b6c9df996e5143d730f32bd8f46ca21
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: pdfcconfig.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/pdfcconfig.js
MD5: 676338e9e274fd0d9ab59db49e3ea86f
SHA1: 5c8a910bd5453a9e9ff6163db9f760533e9db5b6
SHA256:3cbb5959eb832a0c7880d2a0c58a4f82cc6e66b177b4aeeef49a87540265b96f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: profil.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/profil.js
MD5: a80e7a67200f9bebc58cc1b1f648ba81
SHA1: 67a71dca22d20ed3e4cacd59e7b013052bba6059
SHA256:1eb1aed349f9e8d0781de9f352733a58b6a4fcac9e89d259888005099b5216d8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: profileentry.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/profileentry.js
MD5: 70fba9a0806250f9fc3f559012ebdfc5
SHA1: 911155de0ffa9aff766b028eff7d2a74557da44c
SHA256:7dc35ebc9b13805fc2160bd904bea53c880ab49854079e55e4f141984b6ab075
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: publishdialog.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/publishdialog.js
MD5: 3c6b3557cb70409b766dcadc7593ef40
SHA1: 15ab54e19f4ed112a10fc9bb380d5613f4c9e10f
SHA256:bc6ff09abcaa54afd0b07b558cec428824f5e1b157a5459e3eb2308802eca100
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: publishprofiledialog.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/publishprofiledialog.js
MD5: 15cb57cdb21d62986b893e35495ac8d0
SHA1: 060e44459b5a3e7b684be7a9faaefd5683a22ea9
SHA256:c1ce1c1ef7c98cb682a6844bec27307b2e7aee3403b607ce6743394984d5f481
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: report.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/report.js
MD5: 161485eaea5b9b5f65d479f48911c56f
SHA1: edc976c964a05132b9b34aa9b3d8d282147bbc04
SHA256:35e773c2f1fa99f13a7aac090863d403636547f5b7df7e0c05a88b3eda6f1ecc
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: scroller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/scroller.js
MD5: 258842a58c95114e959f659bfa15d9a7
SHA1: f947fcba0b63cc56cacedf1d9f3f812b3330586b
SHA256:4d7e9feb475bec916fc11571fbf16ac1f9113abf4db43bdd18bd4f3ae0560666
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: searchcomponent.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/searchcomponent.js
MD5: bdc3caac35d953edd2e6f68c0d4bfd74
SHA1: ef70a291cb7226084945b2648356f3a389b7fa58
SHA256:36620c84f1984fc0d8f98256fb345a0329ab25c834dcfa8c916d552ff370799e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: userlist.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/userlist.js
MD5: f0280a91fc83e571ef486c22a7f93ef7
SHA1: 68abf77cf988cad21dd9dad06a89175f906b1d9e
SHA256:1b0b6bc3b19aa7a697b17a94c617ad8e1807b10ac7de9d9292bfdc3f929c41cb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: visibilitysettings.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/visibilitysettings.js
MD5: 1f6d120c92d4c7e6c41cc4368b09ebac
SHA1: 9cdf600708312b16e2d9eadd26aea32da1ffc7d2
SHA256:50fe2d4678259193d90aae7c481487d02566b4c92ba3ca4d7c2cf13c9e345250
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: zoomer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/zoomer.js
MD5: 9292c505ec54cc329a2c2f0dc6612a43
SHA1: 724665a18dfc42d5fb8ba99a8010022de75bfccd
SHA256:d9d4db5a4a662a0887793825308e350047a54dc41810200c7ffb732c57a61f1c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### filter.area.zip: filter.area.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.area.zip/filter.area.jar
MD5: 8a219989493af79035bf3fa24df7da77
SHA1: 832ab7b6714c228836bec80db090bdad1a13f3c0
SHA256:48ce7e2b09de0653e30e7fc69198887235861e0842bf29561cf7b5a55ab021f1
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.area | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:41 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.area | High
Product | jar | package name | area | Highest
Product | jar | package name | area | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:41 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.area | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.area | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### filter.baselinetable.zip: filter.baselinetable.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.baselinetable.zip/filter.baselinetable.jar
MD5: 0f43432689dd2dbc27a57591a7635066
SHA1: 2b912235788943c759bd773e911c3563500b4eca
SHA256:4f37f6f4f3f20ae5d802d37f75cda57f7363ac002a5502295b4b473f0e14e942
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.baselinetable | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:39 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.baselinetable | High
Product | jar | package name | baselinetable | Highest
Product | jar | package name | baselinetable | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:39 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.baselinetable | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.baselinetable | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### filter.cmappatch.zip: filter.cmappatch.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.cmappatch.zip/filter.cmappatch.jar
MD5: 9883de3c6daf444ceb43106ebbc1dcef
SHA1: c1e1ee1dff7ac890f55d24308aaa246a38493e31
SHA256:d210568ef3395af9930909e67380fbd9eef879f750ae87b0885425289162c77e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.cmappatch | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:35 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.cmappatch | High
Product | jar | package name | cmappatch | Highest
Product | jar | package name | cmappatch | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:35 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.cmappatch | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.cmappatch | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### filter.headerfooter.zip: filter.headerfooter.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.headerfooter.zip/filter.headerfooter.jar
MD5: 5b31935819ee1f106816e59e79f74c97
SHA1: 1b56a2c415b7273beb922dc6560029082460834c
SHA256:87daa3a67b6179f49a67b5b45983310fd12c3f107f87d1bc774f048ccaddf75b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.headerfooter | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:37 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.headerfooter | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | headerfooter | Highest
Product | jar | package name | headerfooter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:37 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.headerfooter | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.headerfooter | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### filter.hiderotation.zip: filter.hiderotation.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.hiderotation.zip/filter.hiderotation.jar
MD5: fbb59d53724511ac7df4172bd5c1ed45
SHA1: 3f176d6018df165fd802205fc181650a8c029aa7
SHA256:7ec96938cf787b0af3ecd98f46628f725efe8d24bcf2502644c0beee2e5e750f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.hiderotation | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:34 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.hiderotation | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | hiderotation | Highest
Product | jar | package name | hiderotation | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:34 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.hiderotation | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.hiderotation | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### filter.invisibleelements.zip: filter.invisibleelements.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.invisibleelements.zip/filter.invisibleelements.jar
MD5: d3f34f6a00b195b87b3c299fa166446f
SHA1: ee27130385b07c8f227425e84310ea9432e651d4
SHA256:8764d786b819c50ddfbfb75c4616ef2e5629177e86cb59abff5cb339e90a6b95
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.invisibleelements | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:34 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.invisibleelements | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | invisibleelements | Highest
Product | jar | package name | invisibleelements | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:34 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.invisibleelements | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.invisibleelements | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### filter.multicolumn.zip: filter.multicolumn.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.multicolumn.zip/filter.multicolumn.jar
MD5: dcbbc7dcfd6fb9c4398666ad97dbad99
SHA1: 395854379aa1b4e5df6c9ddfd14ea83eb252da6c
SHA256:438e25b7c75021db49798050927be8f20dcfc89507f0b78d403a72b379f901fd
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.multicolumn | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:34 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.multicolumn | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | multicolumn | Highest
Product | jar | package name | multicolumn | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:34 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.multicolumn | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.multicolumn | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### filter.ocr.zip: filter.ocr.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.ocr.zip/filter.ocr.jar
MD5: b8bd245447ca0567f06f57341400c057
SHA1: bd1a1c795c19496bc19d4e9b12b366216e561576
SHA256:bf7390ee667e9789c035f60aa9d7c4557cdc3cc6cb9c5e5d080094e546559ee1
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.ocr | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:34 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.ocr | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | ocr | Highest
Product | jar | package name | ocr | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:34 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.ocr | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.ocr | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### filter.pagerange.zip: filter.pagerange.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.pagerange.zip/filter.pagerange.jar
MD5: e2318c604fe781ff8626a72997ab6d9d
SHA1: 1d0d1b1916dbe18c0f5df526a6bf6ef38e245cdc
SHA256:dec51c6231843c5326cddfe87b230517941cae4e1fffcf0da2a4dc6f60acf528
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.pagerange | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:39 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.pagerange | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | page | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:39 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.pagerange | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.pagerange | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### filter.regex.zip: filter.regex.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.regex.zip/filter.regex.jar
MD5: d81c6115a59b5929f399de2c25e7ae5a
SHA1: 1c8f4a60d6b22ff065a2febe431ccf949fd002cf
SHA256:ccb9a5d5d5e99a81ef49a06259545965ca405a80010b24e4537986ad5486c1aa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.regex | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:37 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.regex | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | regex | Highest
Product | jar | package name | regex | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:37 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.regex | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.regex | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### filter.regex.zip: filter.regex.jar: filterrenderer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.regex.zip/filter.regex.jar/com/inet/pdfc/filter/regex/structure/filterrenderer.js
MD5: fed6198a818efccd3e71fac743e61c3f
SHA1: dc6d579196c5b147daac7e14e034e2b004ca36f2
SHA256:87b3e46faf43504c51e1ad9407e3d6c17a3bcd8170c14ea7df3b1f4282275442
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### filter.texttransform.zip: filter.texttransform.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.texttransform.zip/filter.texttransform.jar
MD5: e13bd8781571879636cec7328abdf3dd
SHA1: 8d241ca27f63443c9728c28ae12bebb2a6ae84e6
SHA256:2a815cd8709047a883e0a11be86f6e7fde5c8d43102f2e31827c47edc368ea45
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.texttransform | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:38 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.texttransform | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | texttransform | Highest
Product | jar | package name | texttransform | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:38 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.texttransform | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.texttransform | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### filter.urllookup.zip: filter.urllookup.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.urllookup.zip/filter.urllookup.jar
MD5: 5adbe126e87d9eee0328b2fbd4d15138
SHA1: c4b889266687fe965a391d007b4fba85ec130bef
SHA256:a0c94b7676734cfba8db8c4a32f52a30a4a820f0ce1b6b491770e42904d1018c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.urllookup | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:41 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.urllookup | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | urllookup | Highest
Product | jar | package name | urllookup | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:41 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.urllookup | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.urllookup | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### hamcrest-3.0.jar

License:

    BSD-3-Clause

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.hamcrest/hamcrest/3.0/8fd9b78a8e6a6510a078a9e30e9e86a6035cfaf7/hamcrest-3.0.jar
MD5: 781023c38b054e9cf1c818c77895e1eb
SHA1: 8fd9b78a8e6a6510a078a9e30e9e86a6035cfaf7
SHA256:5d66b6a4a680755cb6ed7cb104fa7835ef644667586ff0737adeb977c39ecdbc
Referenced In Project/Scope: standalone:inetPlugin
hamcrest-3.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | hamcrest | High
Vendor | gradle | artifactid | hamcrest | Highest
Vendor | gradle | groupid | org.hamcrest | Highest
Vendor | jar | package name | hamcrest | Highest
Vendor | jar | package name | hamcrest | Low
Vendor | Manifest | automatic-module-name | org.hamcrest | Medium
Vendor | Manifest | bundle-symbolicname | org.hamcrest | Medium
Vendor | Manifest | Implementation-Vendor | hamcrest.org | High
Product | file | name | hamcrest | High
Product | gradle | artifactid | hamcrest | Highest
Product | jar | package name | hamcrest | Highest
Product | Manifest | automatic-module-name | org.hamcrest | Medium
Product | Manifest | Bundle-Name | org.hamcrest | Medium
Product | Manifest | bundle-symbolicname | org.hamcrest | Medium
Product | Manifest | Implementation-Title | hamcrest | High
Version | file | version | 3.0 | High
Version | Manifest | Implementation-Version | 3.0 | High

#### Identifiers

- pkg:maven/org.hamcrest/hamcrest@3.0 (Confidence:Highest)

### inetcore-25.10-tools.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/25.10/aec888ccb8535bf3516275b97b9ce8d3f1a41c66/inetcore-25.10-tools.jar
MD5: 988583a8393c1b1b4afd2f9872ede7df
SHA1: aec888ccb8535bf3516275b97b9ce8d3f1a41c66
SHA256:4e8019a0b3dc05444fe7f63af6e21fac9e18d5a47d5a87ed47a73f7eb052f43b
Referenced In Project/Scope: standalone:inetPlugin
inetcore-25.10-tools.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | inetcore | High
Vendor | gradle | artifactid | inetcore | Highest
Vendor | gradle | groupid | shared | Highest
Vendor | jar | package name | test | Low
Product | file | name | inetcore | High
Product | gradle | artifactid | inetcore | Highest
Version | file | name | inetcore | Medium
Version | file | version | 25.10 | High
Version | gradle | version | 25.10 | Highest

#### Identifiers

- pkg:maven/shared/inetcore@25.10 (Confidence:Highest)

### inetcore-25.10.jar (shaded: com.inet.shared:inetcore:null)

Description:

    A blend composite defines the rule according to which a drawing primitive (known as the source) is mixed with existing graphics (know as the destination.)

    ColorUtilities contains a set of tools to perform common color operations easily.

License:

    LGPL: http://www.gnu.org/licenses/lgpl.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/25.10/d236e2554f326012d1e0690a61c1c690cb547ed0/inetcore-25.10.jar/META-INF/com/inet/shared/utils/BlendComposite/pom.xml
MD5: 15e3963148212192804e2b1a2b73ad1c
SHA1: 1095ba4522949a04590ab9c98b7f684e92579ef9
SHA256:e5556987ad0b1ede84a994741147dadf6de0cb7d80b845f530e2a96505b79151
Referenced In Project/Scope: standalone:inetPlugin

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | inetcore | Low
Vendor | pom | developer email | contact@inetsoftware.de | Low
Vendor | pom | developer email | morgand@apache.org | Low
Vendor | pom | developer id | inetsoftware | Medium
Vendor | pom | developer id | romainguy | Medium
Vendor | pom | developer id | sun | Medium
Vendor | pom | developer name | i-net /// software | Medium
Vendor | pom | developer name | Romain Guy | Medium
Vendor | pom | developer name | Sun | Medium
Vendor | pom | developer org | Sun | Medium
Vendor | pom | groupid | com.inet.shared | Highest
Vendor | pom | name | BlendComposite and ColorUtilities | High
Vendor | pom (hint) | developer id | oracle | Medium
Vendor | pom (hint) | developer name | oracle | Medium
Vendor | pom (hint) | developer org | oracle | Medium
Product | pom | artifactid | inetcore | Highest
Product | pom | developer email | contact@inetsoftware.de | Low
Product | pom | developer email | morgand@apache.org | Low
Product | pom | developer id | inetsoftware | Low
Product | pom | developer id | romainguy | Low
Product | pom | developer id | sun | Low
Product | pom | developer name | i-net /// software | Low
Product | pom | developer name | Romain Guy | Low
Product | pom | developer name | Sun | Low
Product | pom | developer org | Sun | Low
Product | pom | groupid | com.inet.shared | Highest
Product | pom | name | BlendComposite and ColorUtilities | High

#### Identifiers

- None

### inetcore-25.10.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/25.10/d236e2554f326012d1e0690a61c1c690cb547ed0/inetcore-25.10.jar
MD5: 055b5bf33a775fdbc46ee9d2b2bbc572
SHA1: d236e2554f326012d1e0690a61c1c690cb547ed0
SHA256:0cf2583fab2957e4fc05ff03bcc59545dc9fbabe67cece66c0191d69f92f23c1
Referenced In Project/Scope: standalone:inetPlugin
inetcore-25.10.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | inetcore | High
Vendor | gradle | artifactid | inetcore | Highest
Vendor | gradle | groupid | shared | Highest
Vendor | jar | package name | i | Highest
Vendor | jar | package name | inet | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 15:36 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | shared | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | inetcore | High
Product | gradle | artifactid | inetcore | Highest
Product | jar | package name | permissions | Highest
Product | jar | package name | shared | Highest
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 15:36 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | shared | Low
Product | Manifest | Implementation-Title | inetcore | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | inetcore | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | file | name | inetcore | Medium
Version | file | version | 25.10 | High
Version | gradle | version | 25.10 | Highest
Version | jar | package name | permissions | Highest
Version | jar | package name | shared | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- pkg:maven/shared/inetcore@25.10 (Confidence:Highest)

### java-21-jre-x64-linux.tar.gz: java-21-jre-x64-linux.tar: jrt-fs.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/java-21-jre-x64-linux.tar.gz/java-21-jre-x64-linux.tar/jre-11/lib/jrt-fs.jar
MD5: fd232b1a93c699d86f56595d88cc54da
SHA1: 5c034ec23e7858f7e3a5be3970833e12a9555f11
SHA256:ca81222a25fccfd0ecc9ef5c3d1efee0634e7938ab3c245e69b5bc0a55019028
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jrt-fs | High
Vendor | jar | package name | internal | Low
Vendor | jar | package name | jdk | Low
Vendor | jar | package name | jimage | Low
Vendor | Manifest | Implementation-Vendor | Eclipse Adoptium | High
Vendor | Manifest | specification-vendor | Oracle Corporation | Low
Product | file | name | jrt-fs | High
Product | jar | package name | internal | Low
Product | jar | package name | jimage | Low
Product | Manifest | Implementation-Title | Java Runtime Environment | High
Product | Manifest | specification-title | Java Platform API Specification | Medium
Version | Manifest | Implementation-Version | 21.0.8 | High

#### Identifiers

- cpe:2.3:a:eclipse:platform:21.0.8:*:*:*:*:*:*:* (Confidence:Medium)

### jcip-annotations-1.0.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/net.jcip/jcip-annotations/1.0/afba4942caaeaf46aab0b976afd57cc7c181467e/jcip-annotations-1.0.jar
MD5: 9d5272954896c5a5d234f66b7372b17a
SHA1: afba4942caaeaf46aab0b976afd57cc7c181467e
SHA256:be5805392060c71474bf6c9a67a099471274d30b83eef84bfc4e0889a4f1dcc0
Referenced In Project/Scope: standalone:inetPlugin
jcip-annotations-1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.14

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jcip-annotations | High
Vendor | gradle | artifactid | jcip-annotations | Highest
Vendor | gradle | groupid | net.jcip | Highest
Vendor | jar | package name | annotations | Low
Vendor | jar | package name | jcip | Low
Vendor | jar | package name | net | Low
Product | file | name | jcip-annotations | High
Product | gradle | artifactid | jcip-annotations | Highest
Product | jar | package name | annotations | Low
Product | jar | package name | jcip | Low
Version | file | name | jcip-annotations | Medium
Version | file | version | 1.0 | High
Version | gradle | version | 1.0 | Highest

#### Identifiers

- pkg:maven/net.jcip/jcip-annotations@1.0 (Confidence:Highest)

### jlessc-1.14.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/de.inetsoftware/jlessc/1.14/5b2789630acdc41bab5c86da8937ffef3811a3c3/jlessc-1.14.jar
MD5: 73ef6dc09f0efda918ffcf67677ad2b0
SHA1: 5b2789630acdc41bab5c86da8937ffef3811a3c3
SHA256:5445ebb2231d943301b977e2b30451fc704835ea9b5f96fa64618c608938cb52
Referenced In Project/Scope: standalone:inetPlugin
jlessc-1.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jlessc | High
Vendor | gradle | artifactid | jlessc | Highest
Vendor | gradle | groupid | de.inetsoftware | Highest
Vendor | jar | package name | inet | Low
Vendor | jar | package name | less | Low
Vendor | jar | package name | lib | Low
Vendor | Manifest | automatic-module-name | de.inetsoftware.jlessc | Medium
Vendor | Manifest | bundle-symbolicname | de.inetsoftware.jlessc | Medium
Vendor | Manifest | Implementation-Vendor | i-net software GmbH, Berlin, Germany | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Product | file | name | jlessc | High
Product | gradle | artifactid | jlessc | Highest
Product | jar | package name | less | Low
Product | jar | package name | lib | Low
Product | Manifest | automatic-module-name | de.inetsoftware.jlessc | Medium
Product | Manifest | bundle-symbolicname | de.inetsoftware.jlessc | Medium
Product | Manifest | Implementation-Title | JLessC, a Less CSS compiler | High
Version | file | version | 1.14 | High
Version | Manifest | Implementation-Version | 1.14 | High

#### Identifiers

- pkg:maven/de.inetsoftware/jlessc@1.14 (Confidence:Highest)

### jsr305-3.0.2.jar

Description:

    JSR305 Annotations for Findbugs

License:

    The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/jsr305/3.0.2/25ea2e8b0c338a877313bd4672d3fe056ea78f0d/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: standalone:inetPlugin
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.14

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jsr305 | High
Vendor | gradle | artifactid | jsr305 | Highest
Vendor | gradle | groupid | com.google.code.findbugs | Highest
Vendor | Manifest | bundle-symbolicname | org.jsr-305 | Medium
Vendor | pom | artifactid | jsr305 | Low
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-jsr305 | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | file | name | jsr305 | High
Product | gradle | artifactid | jsr305 | Highest
Product | Manifest | Bundle-Name | FindBugs-jsr305 | Medium
Product | Manifest | bundle-symbolicname | org.jsr-305 | Medium
Product | pom | artifactid | jsr305 | Highest
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-jsr305 | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | file | version | 3.0.2 | High
Version | gradle | version | 3.0.2 | Highest
Version | Manifest | Bundle-Version | 3.0.2 | High
Version | pom | version | 3.0.2 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

### junit-4.13.2.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/junit/junit/4.13.2/8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12/junit-4.13.2.jar
MD5: d98a9a02a99a9acd22d7653cbcc1f31f
SHA1: 8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12
SHA256:8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3
Referenced In Project/Scope: standalone:inetPlugin
junit-4.13.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit | High
Vendor | gradle | artifactid | junit | Highest
Vendor | gradle | groupid | junit | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | Manifest | automatic-module-name | junit | Medium
Vendor | Manifest | implementation-url | http://junit.org | Low
Vendor | Manifest | Implementation-Vendor | JUnit | High
Vendor | Manifest | Implementation-Vendor-Id | junit | Medium
Product | file | name | junit | High
Product | gradle | artifactid | junit | Highest
Product | jar | package name | junit | Highest
Product | Manifest | automatic-module-name | junit | Medium
Product | Manifest | Implementation-Title | JUnit | High
Product | Manifest | implementation-url | http://junit.org | Low
Version | file | version | 4.13.2 | High
Version | Manifest | Implementation-Version | 4.13.2 | High

#### Identifiers

- pkg:maven/junit/junit@4.13.2 (Confidence:Highest)
- cpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:* (Confidence:Highest)

### junit-jupiter-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter/5.13.4/93547b3eca48a61f65f735c1898d3ec196e34149/junit-jupiter-5.13.4.jar
MD5: 3f4e38bdbea73c98a50f08b7c6e33426
SHA1: 93547b3eca48a61f65f735c1898d3ec196e34149
SHA256:b960f79217dd01c863031b678f07df4730bbf1eac650c74ad6b0c61faad78379
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter | High
Vendor | gradle | artifactid | junit-jupiter | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | module-info | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-jupiter | High
Product | gradle | artifactid | junit-jupiter | Highest
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter (Aggregator) | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter | Medium
Product | Manifest | Implementation-Title | junit-jupiter | High
Product | Manifest | specification-title | junit-jupiter | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4 (Confidence:Highest)

### junit-jupiter-api-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-api/5.13.4/2817f736551fe4949b79924715ef6f594ee072f4/junit-jupiter-api-5.13.4.jar
MD5: d9981621212d598a4ba380342094c92f
SHA1: 2817f736551fe4949b79924715ef6f594ee072f4
SHA256:d1bb81abfd9e03418306b4e6a3390c8db52c58372e749c2980ac29f0c08278f1
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-api-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-api | High
Vendor | gradle | artifactid | junit-jupiter-api | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | api | Highest
Vendor | jar | package name | api | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-api | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-jupiter-api | High
Product | gradle | artifactid | junit-jupiter-api | Highest
Product | jar | package name | api | Highest
Product | jar | package name | api | Low
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter API | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-api | Medium
Product | Manifest | Implementation-Title | junit-jupiter-api | High
Product | Manifest | specification-title | junit-jupiter-api | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-api@5.13.4 (Confidence:Highest)

### junit-jupiter-engine-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-engine/5.13.4/d29fc8b6a28d21b8741f299ae4deb3e3aa68b2e8/junit-jupiter-engine-5.13.4.jar
MD5: 3416ff6cff3dd4ea789b92338a49b9b2
SHA1: d29fc8b6a28d21b8741f299ae4deb3e3aa68b2e8
SHA256:027404a92fe618b72465792a257951495c503a7d5751e2791e0f51c87f67f5bc
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-engine-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-engine | High
Vendor | gradle | artifactid | junit-jupiter-engine | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.13.4" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-jupiter-engine | High
Product | gradle | artifactid | junit-jupiter-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter Engine | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-engine | Medium
Product | Manifest | Implementation-Title | junit-jupiter-engine | High
Product | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.13.4" | Low
Product | Manifest | specification-title | junit-jupiter-engine | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4 (Confidence:Highest)

### junit-jupiter-params-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-params/5.13.4/c8930eb7fcfbed0b191703ab53f48475a75bd17/junit-jupiter-params-5.13.4.jar
MD5: a1db21cc54b627a085918626a3908c9e
SHA1: 0c8930eb7fcfbed0b191703ab53f48475a75bd17
SHA256:3a8c6365716dbb698c0d49a05456c1e1ad05c406613c550f9dd50037872efc41
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-params-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-params | High
Vendor | gradle | artifactid | junit-jupiter-params | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | jar | package name | params | Highest
Vendor | jar | package name | params | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-params | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-jupiter-params | High
Product | gradle | artifactid | junit-jupiter-params | Highest
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | jar | package name | params | Highest
Product | jar | package name | params | Low
Product | jar | package name | shadow | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter Params | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-params | Medium
Product | Manifest | Implementation-Title | junit-jupiter-params | High
Product | Manifest | specification-title | junit-jupiter-params | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-params@5.13.4 (Confidence:Highest)

### junit-platform-commons-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-commons/1.13.4/8f63c7ed05b473d95cc63d1082054d7bfcf9c0e5/junit-platform-commons-1.13.4.jar
MD5: 7c39b85780e5bec0a23408959ac83fa9
SHA1: 8f63c7ed05b473d95cc63d1082054d7bfcf9c0e5
SHA256:1c25ca641ebaae44ff3ad21ca1b2ef68d0dd84bfeb07c4805ba7840899b77408
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-commons-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-commons | High
Vendor | gradle | artifactid | junit-platform-commons | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | commons | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | org | Highest
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-commons | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | multi-release | true | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-commons | High
Product | gradle | artifactid | junit-platform-commons | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | commons | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Commons | Medium
Product | Manifest | bundle-symbolicname | junit-platform-commons | Medium
Product | Manifest | Implementation-Title | junit-platform-commons | High
Product | Manifest | multi-release | true | Low
Product | Manifest | specification-title | junit-platform-commons | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-commons@1.13.4 (Confidence:Highest)

### junit-platform-engine-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-engine/1.13.4/cdd49063ae6e25494d1a9a08f4a9ab5de2b73bcb/junit-platform-engine-1.13.4.jar
MD5: 736aa9e83f7ba2b54adb5f86821fd4dd
SHA1: cdd49063ae6e25494d1a9a08f4a9ab5de2b73bcb
SHA256:390c5f77b84283a64b644f88251b397e0b0debb80bdcc50f899881aecff43a5a
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-engine-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-engine | High
Vendor | gradle | artifactid | junit-platform-engine | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-engine | High
Product | gradle | artifactid | junit-platform-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | support | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Engine API | Medium
Product | Manifest | bundle-symbolicname | junit-platform-engine | Medium
Product | Manifest | Implementation-Title | junit-platform-engine | High
Product | Manifest | specification-title | junit-platform-engine | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-engine@1.13.4 (Confidence:Highest)

### junit-platform-launcher-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-launcher/1.13.4/e72a4d00af6177569fd57df4c8c4bb241c6aa4b6/junit-platform-launcher-1.13.4.jar
MD5: bdfea9c8c038752c70631934b2067073
SHA1: e72a4d00af6177569fd57df4c8c4bb241c6aa4b6
SHA256:0b0beaeb6880a31149641d2d848b863712885469670c12099586d7f798522564
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-launcher-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-launcher | High
Vendor | gradle | artifactid | junit-platform-launcher | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | launcher | Highest
Vendor | jar | package name | launcher | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-launcher | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.13.4" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-launcher | High
Product | gradle | artifactid | junit-platform-launcher | Highest
Product | jar | package name | junit | Highest
Product | jar | package name | launcher | Highest
Product | jar | package name | launcher | Low
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Launcher | Medium
Product | Manifest | bundle-symbolicname | junit-platform-launcher | Medium
Product | Manifest | Implementation-Title | junit-platform-launcher | High
Product | Manifest | provide-capability | org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.13.4" | Low
Product | Manifest | specification-title | junit-platform-launcher | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-launcher@1.13.4 (Confidence:Highest)

### junit-platform-suite-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite/1.13.4/7af47cc4d0fbbd9a940644799a69f1f4c3ec4ee7/junit-platform-suite-1.13.4.jar
MD5: 378c01f6aba4143235fcd78ee5e1490f
SHA1: 7af47cc4d0fbbd9a940644799a69f1f4c3ec4ee7
SHA256:8088a80b47f5a7e73fa107f466dfa6a86776ca496fc2e7724aba65202d467913
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite | High
Vendor | gradle | artifactid | junit-platform-suite | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | module-info | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-suite | High
Product | gradle | artifactid | junit-platform-suite | Highest
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite (Aggregator) | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite | Medium
Product | Manifest | Implementation-Title | junit-platform-suite | High
Product | Manifest | specification-title | junit-platform-suite | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4 (Confidence:Highest)

### junit-platform-suite-api-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-api/1.13.4/7e29167859b8b66ae9bc60f63f33202b1c8b77e3/junit-platform-suite-api-1.13.4.jar
MD5: 53ff3dfddb5bc864217e7442ca0a8243
SHA1: 7e29167859b8b66ae9bc60f63f33202b1c8b77e3
SHA256:9a05bf77e128371f5b3e25ffc89f7af467a9f68dd365fdfced469ebcf533abc9
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-api-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-api | High
Vendor | gradle | artifactid | junit-platform-suite-api | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | api | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-api | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-suite-api | High
Product | gradle | artifactid | junit-platform-suite-api | Highest
Product | jar | package name | api | Highest
Product | jar | package name | api | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite API | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-api | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-api | High
Product | Manifest | specification-title | junit-platform-suite-api | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-api@1.13.4 (Confidence:Highest)

### junit-platform-suite-commons-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-commons/1.13.4/65f946a08a21ddecb266dd3010977111bbc84043/junit-platform-suite-commons-1.13.4.jar
MD5: ecab6fa371485191490729865ca59fba
SHA1: 65f946a08a21ddecb266dd3010977111bbc84043
SHA256:e7dacfcfa3bc692c0a7a413cefd5f51ae420415a14d39091bdf88aebfdba70b6
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-commons-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-commons | High
Vendor | gradle | artifactid | junit-platform-suite-commons | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-commons | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-suite-commons | High
Product | gradle | artifactid | junit-platform-suite-commons | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | commons | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite Commons | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-commons | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-commons | High
Product | Manifest | specification-title | junit-platform-suite-commons | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-commons@1.13.4 (Confidence:Highest)

### junit-platform-suite-engine-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-engine/1.13.4/b888a7a9e00b25cc19b4d45dbd4dcfe0b3a4f6ca/junit-platform-suite-engine-1.13.4.jar
MD5: 69e03866f05f55ea65268adc36fa3fc0
SHA1: b888a7a9e00b25cc19b4d45dbd4dcfe0b3a4f6ca
SHA256:3b34fd8172d70d0d7c59155e487bd8e77d43bdbfdcfe1d78c2b4eea55e9acb92
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-engine-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-engine | High
Vendor | gradle | artifactid | junit-platform-suite-engine | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-suite-engine | High
Product | gradle | artifactid | junit-platform-suite-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite Engine | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-engine | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-engine | High
Product | Manifest | specification-title | junit-platform-suite-engine | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-engine@1.13.4 (Confidence:Highest)

### junit-vintage-engine-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.vintage/junit-vintage-engine/5.13.4/9fa3f512a7b8de3013eb63e51623c9e73f8d0e34/junit-vintage-engine-5.13.4.jar
MD5: 77270af1c5e9ea55a3705683f261eddd
SHA1: 9fa3f512a7b8de3013eb63e51623c9e73f8d0e34
SHA256:066b702d850ebcde36f2a8181b46a2f0f1416129d1dc63c3a1e1531006e74739
Referenced In Project/Scope: standalone:inetPlugin
junit-vintage-engine-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-vintage-engine | High
Vendor | gradle | artifactid | junit-vintage-engine | Highest
Vendor | gradle | groupid | org.junit.vintage | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | vintage | Highest
Vendor | jar | package name | vintage | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-vintage-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.13.4" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-vintage-engine | High
Product | gradle | artifactid | junit-vintage-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | vintage | Highest
Product | jar | package name | vintage | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Vintage Engine | Medium
Product | Manifest | bundle-symbolicname | junit-vintage-engine | Medium
Product | Manifest | Implementation-Title | junit-vintage-engine | High
Product | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.13.4" | Low
Product | Manifest | specification-title | junit-vintage-engine | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.vintage/junit-vintage-engine@5.13.4 (Confidence:Highest)

### maintenance.pdfc.zip: maintenance.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar
MD5: cc151b98c3cd23ee2d4f2700d6feec67
SHA1: d6c962d0ead6efc2c3b259a645111cedcabb7a02
SHA256:735317b7173122f9dfdf56ad999aeef542f59f43c4b72b74b7bd06c765e4cea2
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | maintenance.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugins | Low
Vendor | Manifest | built-date | 2025-11-05 19:35 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | maintenance.pdfc | High
Product | jar | package name | maintenance | Highest
Product | jar | package name | maintenance | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugins | Low
Product | Manifest | built-date | 2025-11-05 19:35 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | maintenance.pdfc | High
Product | Manifest | specification-title | maintenance.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### maintenance.pdfc.zip: maintenance.pdfc.jar: app.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar/com/inet/pdfc/plugins/maintenance/server/comparisons/js/app.js
MD5: 5e534fcce6f689d176c6f3b40fc4454f
SHA1: e5f82942adf62444636d28e904add7c61a18ea32
SHA256:d08c1c9da221cbd9c38a26e0235b0da7c3bed4ab30f504aa741d4085a42f7294
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### maintenance.pdfc.zip: maintenance.pdfc.jar: comparisons.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar/com/inet/pdfc/plugins/maintenance/server/comparisons/js/comparisons.js
MD5: dc34a947f1122f6f845deb82b822f15c
SHA1: 7a1528b00bb5229be98689b8c465b37c39bfa0ff
SHA256:27b0ebba3a0c757e921cb562be691ee971fa06d1247423ff2c16f71d87d51bee
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### ocr.tesseract.zip: commons-logging.jar

Description:

    Apache Commons Logging is a thin adapter allowing configurable bridging to other,
        well-known logging systems.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/commons-logging.jar
MD5: e7a1e7cb6a89241ed9bfec4c25b6c645
SHA1: b9fc14968d63a8b8a8a2c1885fe3e90564239708
SHA256:bc2dfe32f1ef06509e6a065144c1adf7b420eabf11a87f30bd127f8faa332016
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | commons-logging | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | logging | Highest
Vendor | Manifest | automatic-module-name | org.apache.commons.logging | Medium
Vendor | Manifest | build-jdk-spec | 17 | Low
Vendor | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-logging/ | Low
Vendor | Manifest | bundle-symbolicname | org.apache.commons.commons-logging | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | multi-release | true | Low
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | commons-logging | Low
Vendor | pom | developer email | baliuka@apache.org | Low
Vendor | pom | developer email | costin@apache.org | Low
Vendor | pom | developer email | craigmcc@apache.org | Low
Vendor | pom | developer email | dennisl@apache.org | Low
Vendor | pom | developer email | donaldp@apache.org | Low
Vendor | pom | developer email | ggregory at apache.org | Low
Vendor | pom | developer email | morgand@apache.org | Low
Vendor | pom | developer email | rdonkin@apache.org | Low
Vendor | pom | developer email | rsitze@apache.org | Low
Vendor | pom | developer email | rwaldhoff@apache.org | Low
Vendor | pom | developer email | sanders@apache.org | Low
Vendor | pom | developer email | skitching@apache.org | Low
Vendor | pom | developer email | tn@apache.org | Low
Vendor | pom | developer id | baliuka | Medium
Vendor | pom | developer id | bstansberry | Medium
Vendor | pom | developer id | costin | Medium
Vendor | pom | developer id | craigmcc | Medium
Vendor | pom | developer id | dennisl | Medium
Vendor | pom | developer id | donaldp | Medium
Vendor | pom | developer id | ggregory | Medium
Vendor | pom | developer id | morgand | Medium
Vendor | pom | developer id | rdonkin | Medium
Vendor | pom | developer id | rsitze | Medium
Vendor | pom | developer id | rwaldhoff | Medium
Vendor | pom | developer id | sanders | Medium
Vendor | pom | developer id | skitching | Medium
Vendor | pom | developer id | tn | Medium
Vendor | pom | developer name | Brian Stansberry | Medium
Vendor | pom | developer name | Costin Manolache | Medium
Vendor | pom | developer name | Craig McClanahan | Medium
Vendor | pom | developer name | Dennis Lundberg | Medium
Vendor | pom | developer name | Gary Gregory | Medium
Vendor | pom | developer name | Juozas Baliuka | Medium
Vendor | pom | developer name | Morgan Delagrange | Medium
Vendor | pom | developer name | Peter Donald | Medium
Vendor | pom | developer name | Richard Sitze | Medium
Vendor | pom | developer name | Robert Burrell Donkin | Medium
Vendor | pom | developer name | Rodney Waldhoff | Medium
Vendor | pom | developer name | Scott Sanders | Medium
Vendor | pom | developer name | Simon Kitching | Medium
Vendor | pom | developer name | Thomas Neidhart | Medium
Vendor | pom | developer org | Apache | Medium
Vendor | pom | developer org | The Apache Software Foundation | Medium
Vendor | pom | developer org URL | https://www.apache.org/ | Medium
Vendor | pom | groupid | commons-logging | Highest
Vendor | pom | name | Apache Commons Logging | High
Vendor | pom | parent-artifactid | commons-parent | Low
Vendor | pom | parent-groupid | org.apache.commons | Medium
Vendor | pom | url | https://commons.apache.org/proper/commons-logging/ | Highest
Product | file | name | commons-logging | High
Product | jar | package name | apache | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | logging | Highest
Product | Manifest | automatic-module-name | org.apache.commons.logging | Medium
Product | Manifest | build-jdk-spec | 17 | Low
Product | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-logging/ | Low
Product | Manifest | Bundle-Name | Apache Commons Logging | Medium
Product | Manifest | bundle-symbolicname | org.apache.commons.commons-logging | Medium
Product | Manifest | Implementation-Title | Apache Commons Logging | High
Product | Manifest | multi-release | true | Low
Product | Manifest | specification-title | Apache Commons Logging | Medium
Product | pom | artifactid | commons-logging | Highest
Product | pom | developer email | baliuka@apache.org | Low
Product | pom | developer email | costin@apache.org | Low
Product | pom | developer email | craigmcc@apache.org | Low
Product | pom | developer email | dennisl@apache.org | Low
Product | pom | developer email | donaldp@apache.org | Low
Product | pom | developer email | ggregory at apache.org | Low
Product | pom | developer email | morgand@apache.org | Low
Product | pom | developer email | rdonkin@apache.org | Low
Product | pom | developer email | rsitze@apache.org | Low
Product | pom | developer email | rwaldhoff@apache.org | Low
Product | pom | developer email | sanders@apache.org | Low
Product | pom | developer email | skitching@apache.org | Low
Product | pom | developer email | tn@apache.org | Low
Product | pom | developer id | baliuka | Low
Product | pom | developer id | bstansberry | Low
Product | pom | developer id | costin | Low
Product | pom | developer id | craigmcc | Low
Product | pom | developer id | dennisl | Low
Product | pom | developer id | donaldp | Low
Product | pom | developer id | ggregory | Low
Product | pom | developer id | morgand | Low
Product | pom | developer id | rdonkin | Low
Product | pom | developer id | rsitze | Low
Product | pom | developer id | rwaldhoff | Low
Product | pom | developer id | sanders | Low
Product | pom | developer id | skitching | Low
Product | pom | developer id | tn | Low
Product | pom | developer name | Brian Stansberry | Low
Product | pom | developer name | Costin Manolache | Low
Product | pom | developer name | Craig McClanahan | Low
Product | pom | developer name | Dennis Lundberg | Low
Product | pom | developer name | Gary Gregory | Low
Product | pom | developer name | Juozas Baliuka | Low
Product | pom | developer name | Morgan Delagrange | Low
Product | pom | developer name | Peter Donald | Low
Product | pom | developer name | Richard Sitze | Low
Product | pom | developer name | Robert Burrell Donkin | Low
Product | pom | developer name | Rodney Waldhoff | Low
Product | pom | developer name | Scott Sanders | Low
Product | pom | developer name | Simon Kitching | Low
Product | pom | developer name | Thomas Neidhart | Low
Product | pom | developer org | Apache | Low
Product | pom | developer org | The Apache Software Foundation | Low
Product | pom | developer org URL | https://www.apache.org/ | Low
Product | pom | groupid | commons-logging | Highest
Product | pom | name | Apache Commons Logging | High
Product | pom | parent-artifactid | commons-parent | Medium
Product | pom | parent-groupid | org.apache.commons | Medium
Product | pom | url | https://commons.apache.org/proper/commons-logging/ | Medium
Version | Manifest | Bundle-Version | 1.3.4 | High
Version | Manifest | Implementation-Version | 1.3.4 | High
Version | pom | parent-version | 1.3.4 | Low
Version | pom | version | 1.3.4 | Highest

#### Identifiers

- pkg:maven/commons-logging/commons-logging@1.3.4 (Confidence:High)

### ocr.tesseract.zip: fontbox.jar

Description:

        The Apache FontBox library is an open source Java tool to obtain low level information
        from font files. FontBox is a subproject of Apache PDFBox.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/fontbox.jar
MD5: 76fe707f08787cd215f287da48ed7e1b
SHA1: b4a068e1dba2b9832a108cdf6e9a3249680e3ce8
SHA256:e8a62be2df27a0d44191b6669c0b18df6efe5271232db8dcb8745d5d9774755b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | fontbox | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | fontbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.fontbox | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Vendor | Manifest | bundle-symbolicname | org.apache.pdfbox.fontbox | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | fontbox | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache FontBox | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Vendor | pom | url | http://pdfbox.apache.org/ | Highest
Product | file | name | fontbox | High
Product | jar | package name | apache | Highest
Product | jar | package name | fontbox | Highest
Product | Manifest | automatic-module-name | org.apache.fontbox | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Product | Manifest | Bundle-Name | Apache FontBox | Medium
Product | Manifest | bundle-symbolicname | org.apache.pdfbox.fontbox | Medium
Product | Manifest | Implementation-Title | Apache FontBox | High
Product | Manifest | specification-title | Apache FontBox | Medium
Product | pom | artifactid | fontbox | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache FontBox | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Product | pom | url | http://pdfbox.apache.org/ | Medium
Version | Manifest | Bundle-Version | 3.0.5 | High
Version | Manifest | Implementation-Version | 3.0.5 | High
Version | pom | version | 3.0.5 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/fontbox@3.0.5 (Confidence:High)

### ocr.tesseract.zip: jai-imageio-core.jar

Description:

        Java Advanced Imaging Image I/O Tools API core, but without the classes
        involved with javax.media.jai dependencies, JPEG2000 or
        codecLibJIIO, meaning that this library can be distributed under the
        modified BSD license and should be GPL compatible.

License:

    BSD 3-clause License w/nuclear disclaimer: LICENSE.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jai-imageio-core.jar
MD5: 6978d733bfb55c0a82639f724fe5f3bb
SHA1: fb6d79b929556362a241b2f65a04e538062f0077
SHA256:8ad3c68e9efffb10ac87ff8bc589adf64b04a729c5194c079efd0643607fd72a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jai-imageio-core | High
Vendor | jar | package name | github | Highest
Vendor | Manifest | bundle-docurl | https://github.com/jai-imageio/ | Low
Vendor | Manifest | bundle-symbolicname | jai-imageio-core | Medium
Vendor | Manifest | extension-name | com.github.jai-imageio-jai-imageio-core | Medium
Vendor | Manifest | Implementation-Vendor | https://github.com/jai-imageio/ jai-imageio GitHub group | High
Vendor | Manifest | specification-vendor | Sun Microsystems, Inc. | Low
Vendor | Manifest | url | https://github.com/jai-imageio/jai-imageio-core | Low
Vendor | pom | artifactid | jai-imageio-core | Low
Vendor | pom | developer email | stian@s11.no | Low
Vendor | pom | developer name | Stian Soiland-Reyes | Medium
Vendor | pom | developer org | s11 | Medium
Vendor | pom | developer org URL | http://s11.no/ | Medium
Vendor | pom | groupid | com.github.jai-imageio | Highest
Vendor | pom | name | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Vendor | pom | organization name | jai-imageio GitHub group | High
Vendor | pom | organization url | jai-imageio/ | Medium
Vendor | pom | url | jai-imageio/jai-imageio-core | Highest
Product | file | name | jai-imageio-core | High
Product | jar | package name | github | Highest
Product | Manifest | bundle-docurl | https://github.com/jai-imageio/ | Low
Product | Manifest | Bundle-Name | Java Advanced Imaging Image I/O Tools API core (standalone) | Medium
Product | Manifest | bundle-symbolicname | jai-imageio-core | Medium
Product | Manifest | extension-name | com.github.jai-imageio-jai-imageio-core | Medium
Product | Manifest | Implementation-Title | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Product | Manifest | specification-title | Java Advanced Imaging | Medium
Product | Manifest | url | https://github.com/jai-imageio/jai-imageio-core | Low
Product | pom | artifactid | jai-imageio-core | Highest
Product | pom | developer email | stian@s11.no | Low
Product | pom | developer name | Stian Soiland-Reyes | Low
Product | pom | developer org | s11 | Low
Product | pom | developer org URL | http://s11.no/ | Low
Product | pom | groupid | com.github.jai-imageio | Highest
Product | pom | name | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Product | pom | organization name | jai-imageio GitHub group | Low
Product | pom | url | jai-imageio/ | High
Product | pom | url | jai-imageio/jai-imageio-core | High
Version | Manifest | Bundle-Version | 1.4.0 | High
Version | Manifest | Implementation-Version | 1.4.0 | High
Version | pom | version | 1.4.0 | Highest

#### Identifiers

- pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0 (Confidence:High)

### ocr.tesseract.zip: jbig2-imageio.jar

Description:

    	Java Image I/O plugin for reading JBIG2-compressed image data.
    	Formerly known as the levigo JBig2 ImageIO plugin (com.levigo.jbig2:levigo-jbig2-imageio).

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jbig2-imageio.jar
MD5: c51f45dc3d29bbf716774f9ff9e95ad6
SHA1: ad09a9bb94ea791ea81fb6c5bc2b13dd77872598
SHA256:29cb2951622f10acf61fd0656c4e6fa5562194a9095f7a1d26aa426e2f6b17eb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jbig2-imageio | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | image | Highest
Vendor | jar | package name | jbig2 | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Vendor | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | Implementation-Vendor-Id | org.apache.pdfbox | Medium
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | jbig2-imageio | Low
Vendor | pom | developer id | adam | Medium
Vendor | pom | developer id | blitchfield | Medium
Vendor | pom | developer id | carrier | Medium
Vendor | pom | developer id | danielwilson | Medium
Vendor | pom | developer id | gbailleul | Medium
Vendor | pom | developer id | hennejg | Medium
Vendor | pom | developer id | holdersn | Medium
Vendor | pom | developer id | jahewson | Medium
Vendor | pom | developer id | jeremias | Medium
Vendor | pom | developer id | jukka | Medium
Vendor | pom | developer id | kjackson | Medium
Vendor | pom | developer id | koch | Medium
Vendor | pom | developer id | koehlecn | Medium
Vendor | pom | developer id | lehmi | Medium
Vendor | pom | developer id | leleueri | Medium
Vendor | pom | developer id | mmayer | Medium
Vendor | pom | developer id | msayhoun | Medium
Vendor | pom | developer id | pkoch | Medium
Vendor | pom | developer id | tallison | Medium
Vendor | pom | developer id | tboehme | Medium
Vendor | pom | developer id | tchojecki | Medium
Vendor | pom | developer id | tilman | Medium
Vendor | pom | developer id | vfed | Medium
Vendor | pom | developer name | Adam Nichols | Medium
Vendor | pom | developer name | Andreas Lehmkühler | Medium
Vendor | pom | developer name | Ben Litchfield | Medium
Vendor | pom | developer name | Brian Carrier | Medium
Vendor | pom | developer name | Carolin Köhler | Medium
Vendor | pom | developer name | Daniel Wilson | Medium
Vendor | pom | developer name | Eric Leleu | Medium
Vendor | pom | developer name | Guillaume Bailleul | Medium
Vendor | pom | developer name | Jeremias Maerki | Medium
Vendor | pom | developer name | Johannes Koch | Medium
Vendor | pom | developer name | John Hewson | Medium
Vendor | pom | developer name | Jukka Zitting | Medium
Vendor | pom | developer name | Jörg Henne | Medium
Vendor | pom | developer name | Kevin Jackson | Medium
Vendor | pom | developer name | Maruan Sayhoun | Medium
Vendor | pom | developer name | Matthäus Mayer | Medium
Vendor | pom | developer name | Phillipp Koch | Medium
Vendor | pom | developer name | Sebastian Holder | Medium
Vendor | pom | developer name | Thomas Chojecki | Medium
Vendor | pom | developer name | Tilman Hausherr | Medium
Vendor | pom | developer name | Tim Allison | Medium
Vendor | pom | developer name | Timo Boehme | Medium
Vendor | pom | developer name | Villu Ruusmann | Medium
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | PDFBox JBIG2 ImageIO plugin | High
Vendor | pom | organization name | The Apache Software Foundation | High
Vendor | pom | organization url | http://pdfbox.apache.org | Medium
Vendor | pom | parent-artifactid | apache | Low
Vendor | pom | parent-groupid | org.apache | Medium
Product | file | name | jbig2-imageio | High
Product | jar | package name | apache | Highest
Product | jar | package name | image | Highest
Product | jar | package name | jbig2 | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Product | Manifest | Implementation-Title | PDFBox JBIG2 ImageIO plugin | High
Product | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Product | Manifest | specification-title | PDFBox JBIG2 ImageIO plugin | Medium
Product | pom | artifactid | jbig2-imageio | Highest
Product | pom | developer id | adam | Low
Product | pom | developer id | blitchfield | Low
Product | pom | developer id | carrier | Low
Product | pom | developer id | danielwilson | Low
Product | pom | developer id | gbailleul | Low
Product | pom | developer id | hennejg | Low
Product | pom | developer id | holdersn | Low
Product | pom | developer id | jahewson | Low
Product | pom | developer id | jeremias | Low
Product | pom | developer id | jukka | Low
Product | pom | developer id | kjackson | Low
Product | pom | developer id | koch | Low
Product | pom | developer id | koehlecn | Low
Product | pom | developer id | lehmi | Low
Product | pom | developer id | leleueri | Low
Product | pom | developer id | mmayer | Low
Product | pom | developer id | msayhoun | Low
Product | pom | developer id | pkoch | Low
Product | pom | developer id | tallison | Low
Product | pom | developer id | tboehme | Low
Product | pom | developer id | tchojecki | Low
Product | pom | developer id | tilman | Low
Product | pom | developer id | vfed | Low
Product | pom | developer name | Adam Nichols | Low
Product | pom | developer name | Andreas Lehmkühler | Low
Product | pom | developer name | Ben Litchfield | Low
Product | pom | developer name | Brian Carrier | Low
Product | pom | developer name | Carolin Köhler | Low
Product | pom | developer name | Daniel Wilson | Low
Product | pom | developer name | Eric Leleu | Low
Product | pom | developer name | Guillaume Bailleul | Low
Product | pom | developer name | Jeremias Maerki | Low
Product | pom | developer name | Johannes Koch | Low
Product | pom | developer name | John Hewson | Low
Product | pom | developer name | Jukka Zitting | Low
Product | pom | developer name | Jörg Henne | Low
Product | pom | developer name | Kevin Jackson | Low
Product | pom | developer name | Maruan Sayhoun | Low
Product | pom | developer name | Matthäus Mayer | Low
Product | pom | developer name | Phillipp Koch | Low
Product | pom | developer name | Sebastian Holder | Low
Product | pom | developer name | Thomas Chojecki | Low
Product | pom | developer name | Tilman Hausherr | Low
Product | pom | developer name | Tim Allison | Low
Product | pom | developer name | Timo Boehme | Low
Product | pom | developer name | Villu Ruusmann | Low
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | PDFBox JBIG2 ImageIO plugin | High
Product | pom | organization name | The Apache Software Foundation | Low
Product | pom | organization url | http://pdfbox.apache.org | Low
Product | pom | parent-artifactid | apache | Medium
Product | pom | parent-groupid | org.apache | Medium
Version | Manifest | Implementation-Version | 3.0.4 | High
Version | pom | parent-version | 3.0.4 | Low
Version | pom | version | 3.0.4 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4 (Confidence:High)
- cpe:2.3:a:apache:pdfbox:3.0.4:*:*:*:*:*:*:* (Confidence:Highest)

### ocr.tesseract.zip: jboss-vfs.jar

Description:

    A VFS library

License:

    Apache License 2.0: http://repository.jboss.org/licenses/apache-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jboss-vfs.jar
MD5: ecf3234794d1b7d03dc1eb5380328e04
SHA1: 748b9f156f35bf63ead9887f040cfc48af18f7f0
SHA256:33a84eac3f1027551146247e3ef4057dc8840cfc8cd436cb2f925b6f5d2126e9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jboss-vfs | High
Vendor | jar | package name | jboss | Highest
Vendor | jar | package name | vfs | Highest
Vendor | Manifest | automatic-module-name | org.jboss.vfs | Medium
Vendor | Manifest | build-jdk-spec | 11 | Low
Vendor | Manifest | implementation-url | http://www.jboss.org | Low
Vendor | Manifest | Implementation-Vendor | JBoss, A division of Red Hat, Inc | High
Vendor | Manifest | specification-vendor | JBoss, A division of Red Hat, Inc | Low
Vendor | pom | artifactid | jboss-vfs | Low
Vendor | pom | groupid | org.jboss | Highest
Vendor | pom | name | JBoss VFS | High
Vendor | pom | organization name | JBoss, A division of Red Hat, Inc | High
Vendor | pom | organization url | http://www.jboss.org | Medium
Vendor | pom | parent-artifactid | jboss-parent | Low
Vendor | pom | url | http://www.jboss.org | Highest
Product | file | name | jboss-vfs | High
Product | jar | package name | jboss | Highest
Product | jar | package name | vfs | Highest
Product | Manifest | automatic-module-name | org.jboss.vfs | Medium
Product | Manifest | build-jdk-spec | 11 | Low
Product | Manifest | Implementation-Title | JBoss VFS | High
Product | Manifest | implementation-url | http://www.jboss.org | Low
Product | Manifest | specification-title | JBoss VFS | Medium
Product | pom | artifactid | jboss-vfs | Highest
Product | pom | groupid | org.jboss | Highest
Product | pom | name | JBoss VFS | High
Product | pom | organization name | JBoss, A division of Red Hat, Inc | Low
Product | pom | organization url | http://www.jboss.org | Low
Product | pom | parent-artifactid | jboss-parent | Medium
Product | pom | url | http://www.jboss.org | Medium
Version | Manifest | Implementation-Version | 3.3.2.Final | High
Version | pom | parent-version | 3.3.2.Final | Low
Version | pom | version | 3.3.2.Final | Highest

#### Identifiers

- pkg:maven/org.jboss/jboss-vfs@3.3.2.Final (Confidence:High)

### ocr.tesseract.zip: jna.jar

Description:

    JNA Library

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar
MD5: 9bb1338e58031463c300f643cb3c41fa
SHA1: d9c6794f22c2e3c846b02d51c6a95c304e8e056b
SHA256:336f2ae25222389eb9f3c90f8f7c3a6258c33581964b2338bf836b3b865b049e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jna | High
Vendor | jar | package name | jna | Highest
Vendor | jar | package name | jna | Low
Vendor | jar | package name | sun | Highest
Vendor | jar | package name | sun | Low
Vendor | jar (hint) | package name | oracle | Highest
Vendor | jar (hint) | package name | oracle | Low
Vendor | Manifest | automatic-module-name | com.sun.jna | Medium
Vendor | Manifest | bundle-activationpolicy | lazy | Low
Vendor | Manifest | bundle-category | jni | Low
Vendor | Manifest | bundle-nativecode | com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 | Low
Vendor | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.6 | Low
Vendor | Manifest | bundle-symbolicname | com.sun.jna | Medium
Vendor | Manifest | Implementation-Vendor | JNA Development Team | High
Vendor | Manifest | specification-vendor | JNA Development Team | Low
Product | file | name | jna | High
Product | jar | package name | jna | Highest
Product | jar | package name | jna | Low
Product | jar | package name | library | Highest
Product | jar | package name | native | Highest
Product | jar | package name | sun | Highest
Product | jar | package name | win32 | Highest
Product | Manifest | automatic-module-name | com.sun.jna | Medium
Product | Manifest | bundle-activationpolicy | lazy | Low
Product | Manifest | bundle-category | jni | Low
Product | Manifest | Bundle-Name | jna | Medium
Product | Manifest | bundle-nativecode | com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 | Low
Product | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.6 | Low
Product | Manifest | bundle-symbolicname | com.sun.jna | Medium
Product | Manifest | Implementation-Title | com.sun.jna | High
Product | Manifest | specification-title | Java Native Access (JNA) | Medium
Version | jar | package name | jna | Highest
Version | jar | package name | sun | Highest
Version | jar | package name | win32 | Highest
Version | Manifest | Bundle-Version | 5.14.0 | High
Version | Manifest | Implementation-Version | 5.14.0 (b0) | High

#### Identifiers

- cpe:2.3:a:oracle:java_se:5.14.0:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: f6bef568e690d361a5dcc165f5ad4b1f
SHA1: 05638a4aaafa689a6c246530823afdc18d3fd438
SHA256:b9d1479b9619b7ece4a36b6ae31365ffaf15a1355d4f6da02f8b5f09df2fa82f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 719d6ba1946c25aa61ce82f90d77ffd5
SHA1: 94d2191378cac5719daecc826fc116816284c406
SHA256:69c45175ecfd25af023f96ac0bb2c45e6a95e3ba8a5a50ee7969ccab14825c44
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: e15183ef9c6c255b76fda73d01ca7ecb
SHA1: f816f998c43204230d9ea3eecffb5f8372a32c2e
SHA256:38650a0612730c52580c9f32ff766b44b1c5a426d52e7dd7a53687bf3389ac2c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: lept4j.jar

Description:

            # Lept4J

            ## Description:

            A Java JNA wrapper for Leptonica Image Processing library.

            Lept4J is released and distributed under the Apache License, v2.0.

License:

    Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar
MD5: 70889e28b7569dd54e7da9ced01dabdf
SHA1: ec69d554f05e030b5e06295a4d39057634759549
SHA256:5feb69a8fc9550809b23cb980270cdf99368dea330ba7d98789e2dc93f8bef6f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | lept4j | High
Vendor | jar | package name | lept4j | Highest
Vendor | jar | package name | leptonica | Highest
Vendor | jar | package name | net | Highest
Vendor | jar | package name | sourceforge | Highest
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | pom | artifactid | lept4j | Low
Vendor | pom | developer email | nguyenq@users.sf.net | Low
Vendor | pom | developer name | Quan Nguyen | Medium
Vendor | pom | groupid | net.sourceforge.lept4j | Highest
Vendor | pom | name | Lept4J - Leptonica for Java | High
Vendor | pom | url | nguyenq/lept4j | Highest
Product | file | name | lept4j | High
Product | jar | package name | lept4j | Highest
Product | jar | package name | leptonica | Highest
Product | jar | package name | net | Highest
Product | jar | package name | sourceforge | Highest
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | pom | artifactid | lept4j | Highest
Product | pom | developer email | nguyenq@users.sf.net | Low
Product | pom | developer name | Quan Nguyen | Low
Product | pom | groupid | net.sourceforge.lept4j | Highest
Product | pom | name | Lept4J - Leptonica for Java | High
Product | pom | url | nguyenq/lept4j | High
Version | pom | version | 1.19.1 | Highest

#### Identifiers

- pkg:maven/net.sourceforge.lept4j/lept4j@1.19.1 (Confidence:High)

### ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar/win32-x86-64/libleptonica1841.dll
MD5: 981b8e38e33018fff693c8e3ec0f2254
SHA1: 91a9cd0a874d614bc8a8946d2e0a8573e8b96ac1
SHA256:0b2cb584baeb38b90033344b4d70830b33ba01396fb9142b9b733e83c8a73fb8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libleptonica1841 | High
Product | file | name | libleptonica1841 | High
Version | file | name | libleptonica1841 | Medium
Version | file | version | 1841 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar/win32-x86/libleptonica1841.dll
MD5: 64f0634192bcf75ade5ea06f8119512d
SHA1: b387acaa5209f796fb3065395548d2adcbad620e
SHA256:405e5263b72cb7d63c723fd85a124201cd66aa9a983b3a1c1e4c82003c91bcaa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libleptonica1841 | High
Product | file | name | libleptonica1841 | High
Version | file | name | libleptonica1841 | Medium
Version | file | version | 1841 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: ocr.tesseract.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/ocr.tesseract.jar
MD5: c3edbd1698553344696b82710a6e51fd
SHA1: ab59e9b43982c8853465d54dce25a6e9e478588f
SHA256:03f06d7f732267316ccd94b4b61632e6745f762efc668dca92799da199d2cd3b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | ocr.tesseract | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | ocr | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:34 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | ocr.tesseract | High
Product | jar | package name | ocr | Highest
Product | jar | package name | ocr | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | tesseract | Highest
Product | jar | package name | tesseract | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:34 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | ocr.tesseract | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | ocr.tesseract | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:tesseract_ocr_project:tesseract_ocr:25.10.233:*:*:*:*:*:*:* (Confidence:Low)
- cpe:2.3:a:tesseract_project:tesseract:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: pdfbox.jar

Description:

            The Apache PDFBox library is an open source Java tool for working with PDF documents.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox.jar
MD5: f6ae0d983002caad75515488a3091dab
SHA1: c34109061c3a0d85d871d9edc469ac0682f81856
SHA256:f0e5d3a1e573c707e4fbcc2ee8e42ea8ca1d5261bdcb3a05a08d2118553c1e5a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfbox | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Vendor | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | pdfbox | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache PDFBox | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Product | file | name | pdfbox | High
Product | jar | package name | apache | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Product | Manifest | Bundle-Name | Apache PDFBox | Medium
Product | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Product | Manifest | Implementation-Title | Apache PDFBox | High
Product | Manifest | specification-title | Apache PDFBox | Medium
Product | pom | artifactid | pdfbox | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache PDFBox | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Version | Manifest | Bundle-Version | 3.0.5 | High
Version | Manifest | Implementation-Version | 3.0.5 | High
Version | pom | version | 3.0.5 | Highest

#### Related Dependencies

- ocr.tesseract.zip: pdfbox-debugger.jar
  - File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox-debugger.jar
  - MD5: d55d7e2d0ad7790c653e4ea136faa569
  - SHA1: 750d08a268dc586f71fb6d8af484b07be9372eb3
  - SHA256: 39719096b2af98c856ec083f0818938e8ab18ec2be85a2a525e46a65b36f570d
  - pkg:maven/org.apache.pdfbox/pdfbox-debugger@3.0.5

#### Identifiers

- pkg:maven/org.apache.pdfbox/pdfbox@3.0.5 (Confidence:High)
- cpe:2.3:a:apache:pdfbox:3.0.5:*:*:*:*:*:*:* (Confidence:Highest)

### ocr.tesseract.zip: tess4j.jar

Description:

            # Tess4J

            ## Description:

            A Java JNA wrapper for Tesseract OCR API.

            Tess4J is released and distributed under the Apache License, v2.0.

            ## Features:

            The library provides optical character recognition (OCR) support for:

            TIFF, JPEG, GIF, PNG, and BMP image formats
            Multi-page TIFF images
            PDF document format

License:

    Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar
MD5: f6a0f08fbc08771303e5cb8dffbc949a
SHA1: 851d6f93d97a155d8831736ad1031a539946014e
SHA256:e65bcc6328ab575684038d45e1891fa48e0d8255097a628baee0d8cfeb5ea816
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | tess4j | High
Vendor | jar | package name | net | Highest
Vendor | jar | package name | recognition | Highest
Vendor | jar | package name | sourceforge | Highest
Vendor | jar | package name | tess4j | Highest
Vendor | jar | package name | tesseract | Highest
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | implementation-url | http://tess4j.sourceforge.net | Low
Vendor | Manifest | Implementation-Vendor | Tess4J | High
Vendor | Manifest | specification-vendor | Tess4J | Low
Vendor | pom | artifactid | tess4j | Low
Vendor | pom | developer email | nguyenq@users.sf.net | Low
Vendor | pom | developer email | osoriojaques@gmail.com | Low
Vendor | pom | developer name | O.J. Sousa Rodrigues | Medium
Vendor | pom | developer name | Quan Nguyen | Medium
Vendor | pom | groupid | net.sourceforge.tess4j | Highest
Vendor | pom | name | Tess4J - Tesseract for Java | High
Vendor | pom | organization name | Tess4J | High
Vendor | pom | organization url | http://tess4j.sourceforge.net | Medium
Vendor | pom | url | http://tess4j.sourceforge.net | Highest
Product | file | name | tess4j | High
Product | jar | package name | net | Highest
Product | jar | package name | recognition | Highest
Product | jar | package name | sourceforge | Highest
Product | jar | package name | tess4j | Highest
Product | jar | package name | tesseract | Highest
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | Implementation-Title | Tess4J - Tesseract for Java | High
Product | Manifest | implementation-url | http://tess4j.sourceforge.net | Low
Product | Manifest | specification-title | Tess4J - Tesseract for Java | Medium
Product | pom | artifactid | tess4j | Highest
Product | pom | developer email | nguyenq@users.sf.net | Low
Product | pom | developer email | osoriojaques@gmail.com | Low
Product | pom | developer name | O.J. Sousa Rodrigues | Low
Product | pom | developer name | Quan Nguyen | Low
Product | pom | groupid | net.sourceforge.tess4j | Highest
Product | pom | name | Tess4J - Tesseract for Java | High
Product | pom | organization name | Tess4J | Low
Product | pom | organization url | http://tess4j.sourceforge.net | Low
Product | pom | url | http://tess4j.sourceforge.net | Medium
Version | Manifest | Implementation-Version | 5.12.0 | High
Version | pom | version | 5.12.0 | Highest

#### Identifiers

- pkg:maven/net.sourceforge.tess4j/tess4j@5.12.0 (Confidence:High)
- cpe:2.3:a:tesseract_project:tesseract:5.12.0:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: tess4j.jar: libtesseract541.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar/win32-x86-64/libtesseract541.dll
MD5: 1246c1e50200dc43722e926e28fc7c03
SHA1: d8a78040e9c7c71ccaeb627b73c41c66a18b5157
SHA256:8180efb176e09b7218144fe69d84c0cf6b6187e20d8529f1138bd77396d6f4fa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libtesseract541 | High
Product | file | name | libtesseract541 | High
Version | file | name | libtesseract541 | Medium
Version | file | version | 541 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: tess4j.jar: libtesseract541.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar/win32-x86/libtesseract541.dll
MD5: cbf57c8eb12e95512e67638f344ae537
SHA1: 5531d539121fd0aa57d11febd2e8b2a5c13fca05
SHA256:d4d1843d9efeeec1ca53c4ebe6d39e22e5bf17f5bee8b9eedb3bcef7c3c8c84d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libtesseract541 | High
Product | file | name | libtesseract541 | High
Version | file | name | libtesseract541 | Medium
Version | file | version | 541 | Medium

#### Identifiers

- None

### opentest4j-1.3.0.jar

License:

    The Apache License, Version 2.0

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.opentest4j/opentest4j/1.3.0/152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e/opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256:48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Project/Scope: standalone:inetPlugin
opentest4j-1.3.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | opentest4j | High
Vendor | gradle | artifactid | opentest4j | Highest
Vendor | gradle | groupid | org.opentest4j | Highest
Vendor | jar | package name | opentest4j | Highest
Vendor | jar | package name | opentest4j | Low
Vendor | Manifest | build-date | 2023-07-06 | Low
Vendor | Manifest | build-revision | 214973bfa4e7e9be7d04e623202cc4147c7036d2 | Low
Vendor | Manifest | build-time | 14:25:06.116+0200 | Low
Vendor | Manifest | bundle-symbolicname | org.opentest4j | Medium
Vendor | Manifest | Implementation-Vendor | opentest4j.org | High
Vendor | Manifest | specification-vendor | opentest4j.org | Low
Product | file | name | opentest4j | High
Product | gradle | artifactid | opentest4j | Highest
Product | jar | package name | opentest4j | Highest
Product | Manifest | build-date | 2023-07-06 | Low
Product | Manifest | build-revision | 214973bfa4e7e9be7d04e623202cc4147c7036d2 | Low
Product | Manifest | build-time | 14:25:06.116+0200 | Low
Product | Manifest | Bundle-Name | opentest4j | Medium
Product | Manifest | bundle-symbolicname | org.opentest4j | Medium
Product | Manifest | Implementation-Title | opentest4j | High
Product | Manifest | specification-title | opentest4j | Medium
Version | file | version | 1.3.0 | High
Version | Manifest | Implementation-Version | 1.3.0 | High

#### Identifiers

- pkg:maven/org.opentest4j/opentest4j@1.3.0 (Confidence:Highest)

### parser.image.zip: parser.image.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.image.zip/parser.image.jar
MD5: 17f5ce43cb1a239c4e2c9a4e7b8fd9e0
SHA1: 5efc1c6f28de70e335d9e90d0fbfdb0d7d42f625
SHA256:fa229fd7b5514c397fd0ff8684c3a1560027d0da7930b337cecd021311bf4f78
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.image | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:34 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.image | High
Product | jar | package name | imageparser | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugin | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:34 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.image | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.image | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### parser.pdf.config.zip: parser.pdf.config.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.pdf.config.zip/parser.pdf.config.jar
MD5: f2492c4f1e0d7c54060b9fef3be3525b
SHA1: f4d0b2ef3b5ac788dafe7736a38086f3ddbb6794
SHA256:c91529fe795a58a2ff6af159f1675a6ed8e784768e3418a0455d2b60acc34929
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.pdf.config | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:34 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.pdf.config | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | pdfparserconfig | Low
Product | jar | package name | plugin | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:34 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.pdf.config | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.pdf.config | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### parser.text.zip: parser.text.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.text.zip/parser.text.jar
MD5: 97da3ec683fd97056048ffe3392ccf7c
SHA1: 04cf6399f5ac2c3e1cb2b8b3fb22a49bd5deb04d
SHA256:362913f3536386b62a7b4986e7c0948cad074b2b2e15903e332fbb3d21817a53
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.text | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:34 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.text | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugin | Low
Product | jar | package name | textparser | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:34 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.text | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.text | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.standalone.zip: pdfc.standalone.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar
MD5: f537234041810ae3e910737f352c04b3
SHA1: 7b4fefa18278f1bc30ed49e132d4efd5b1bcf8da
SHA256:f64f5264e90a9230858de45cfeafe215dc33d4f4e18863e2feb6e55e5ee6b879
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc.standalone | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | standalone | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:41 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfc.standalone | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | standalone | Highest
Product | jar | package name | standalone | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:41 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfc.standalone | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfc.standalone | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.standalone.zip: pdfc.standalone.jar: bridge.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridge.js
MD5: 93a24df267249dca305f5af83c047f48
SHA1: 2690836189ad0dd3715568d15b8bba5a3a9fbc93
SHA256:b17c61dcfca7e59009ebe3e57ec254ad68c2dc080d9a194d867a185902e6a433
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: bridgeConfig.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridgeConfig.js
MD5: 50c7b33549870b71c25e22443829ba78
SHA1: 0a50eb333055885b58537a1463009c6d321ca110
SHA256:7ba9c85404a965c72b736350b26b97bef813b9e523081ed2bf1f9b7303ba0ce4
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: bridgePDFC.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridgePDFC.js
MD5: 918410e4e9590ab87b5ca1ea983ebdf1
SHA1: 422e9fa020147687e2c79fa87f8d7ac23d964df1
SHA256:3d95bb11030e08751e23f02d299b19e2c8db823a14217bdc0cea034a1e23199d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: extraMenu.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/extraMenu.js
MD5: 76f716ef25759cac5242607c7d46afab
SHA1: ffd9728b1116de8148c96cb1aac069abc994692f
SHA256:0f2b1cc0136aacbc57993ce598a490e36849a34cdaccea15f213b1f2410fc002
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: removeHeader.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/removeHeader.js
MD5: 6155f56ea46454fd9b26ec029b07cb4c
SHA1: fdbb377d77e7a33fccd3e56eda617da18a45af3c
SHA256:7f74294ea3dd2d4561aadf5deb9e1436af5cd08d3f53754b8c2e2321ddad3687
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: removePDFCElements.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/removePDFCElements.js
MD5: cf23507d05d2a8f690f9489d131e7de7
SHA1: bff6a66569787ecf08f314c176220be0ef16f86c
SHA256:3d2d7526c75020284374f9298157f8fb7d0c37d38d079cffda17b94f9b73690a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: theme.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/theme.js
MD5: 9ee2557b2355cd5367ad7b7cdf3505e2
SHA1: 6a8e3c4a8964395018faac989bbbd37abf148cd3
SHA256:0acc32f71a37d0f0f7485be6746f688e449df07e6db3b5ad01973ad7fc3aa53a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: translation.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/translation.js
MD5: 087098ce4993357914ab7ee2ca130bc0
SHA1: b77b0d98a5a98b3a5c9317333f29c0c18d36d86e
SHA256:26eb8ace7faad440f3aedd47c1c3f6c1603fe7b150213ad32a4251d1226a3895
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:collate:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/collate/pom.xml
MD5: 992a39f99fe3dc15c118ae48dbd677b7
SHA1: 464299894060cb85408673b5a0c114bd198452ad
SHA256:1d2b90273cc853edcc755cf6e0dd5315c22bb0adacbc01c79bc437d2fcac402f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | collate | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | collate | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/collate@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:core:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/core/pom.xml
MD5: 502c9d2f06cf62c5ac285bab7809991f
SHA1: bc36a1f957d482728432241bcb57d8a658380a08
SHA256:f206b5ca5da0270f41d189f2ea4fa21378ccf84636a9b5ae95c36020df3b650a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | core | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | core | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/core@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:currdata:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/currdata/pom.xml
MD5: c135b97d469b8ccf8d9c956167c9f430
SHA1: 64f64417795107669e127461da338cf4a0d0bf69
SHA256:c189ab6128f84d96348f1fd05ac60fbb8be783c628be71b0549a90f8222f7440
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | currdata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | currdata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/currdata@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:langdata:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/langdata/pom.xml
MD5: 4bf78b2e96a7103d760c462eec229e1d
SHA1: 5cbfae9d81b33328d9957a04537f9b1cea94a9d3
SHA256:d135a2d4bcd4ffe15c7f4950083be429ea611b7eb991f79ba9efd1aa28d519aa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | langdata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | langdata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/langdata@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:regiondata:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/regiondata/pom.xml
MD5: 82587df137f511ae93d6a1c1eb3a6b85
SHA1: dab45b6568a01e28324a83ef144817fda24d6f7a
SHA256:063896c31cded4ded5e25fa43026cc0cb5f78cbf5ab7a2d433a96f69d25c7e3d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | regiondata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | regiondata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/regiondata@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:translit:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/translit/pom.xml
MD5: 16f6a16e682ddf80814caf2f4786a3f7
SHA1: f28c6551ff41ed52a8f758a32e561d60ff8b0aec
SHA256:74354d4b8cc7c3cc5d37cc8c934ef902ccf6e78ac20b9e629b5dd4536edac5a9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | translit | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | translit | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/translit@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar

Description:

    International Components for Unicode for Java (ICU4J) is a mature, widely used Java library
        providing Unicode and Globalization support

License:

    Unicode-3.0: https://raw.githubusercontent.com/unicode-org/icu/maint/maint-77/LICENSE

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar
MD5: 3e8d6fc9877483a0699efa1843b92326
SHA1: 38693cf0b1d7362a8b726af74dc06026a7c23809
SHA256:b3640b9f416a4411fd33c59abbeea8fd57d024c23e1819bf9673220a97499fe3
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | icu4j | High
Vendor | file (hint) | name | icu-project | High
Vendor | file (hint) | name | unicode | High
Vendor | jar | package name | ibm | Highest
Vendor | jar | package name | icu | Highest
Vendor | Manifest | automatic-module-name | com.ibm.icu | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-copyright | © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html | Low
Vendor | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low
Vendor | Manifest | bundle-symbolicname | com.ibm.icu | Medium
Vendor | Manifest | Implementation-Vendor | Unicode, Inc. | High
Vendor | Manifest | Implementation-Vendor-Id | org.unicode | Medium
Vendor | pom | artifactid | icu4j | Low
Vendor | pom | developer id | markusicu | Medium
Vendor | pom | developer id | richgillam | Medium
Vendor | pom | developer name | Markus Scherer | Medium
Vendor | pom | developer name | Richard Gillam | Medium
Vendor | pom | developer org | Google | Medium
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | name | ICU4J | High
Vendor | pom | url | https://icu.unicode.org/ | Highest
Vendor | pom (hint) | artifactid | icu-project | Low
Vendor | pom (hint) | artifactid | unicode | Low
Vendor | pom (hint) | name | icu-project | High
Vendor | pom (hint) | name | unicode | High
Product | file | name | icu4j | High
Product | hint analyzer | product | international_components_for_unicode | Highest
Product | jar | package name | ibm | Highest
Product | jar | package name | icu | Highest
Product | Manifest | automatic-module-name | com.ibm.icu | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-copyright | © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html | Low
Product | Manifest | Bundle-Name | ICU4J | Medium
Product | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low
Product | Manifest | bundle-symbolicname | com.ibm.icu | Medium
Product | Manifest | Implementation-Title | International Components for Unicode for Java | High
Product | Manifest | specification-title | International Components for Unicode for Java | Medium
Product | pom | artifactid | icu4j | Highest
Product | pom | developer id | markusicu | Low
Product | pom | developer id | richgillam | Low
Product | pom | developer name | Markus Scherer | Low
Product | pom | developer name | Richard Gillam | Low
Product | pom | developer org | Google | Low
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | name | ICU4J | High
Product | pom | url | https://icu.unicode.org/ | Medium
Version | Manifest | Bundle-Version | 77.1 | High
Version | Manifest | Implementation-Version | 77.1 | High
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/icu4j@77.1 (Confidence:High)
- cpe:2.3:a:icu-project:international_components_for_unicode:77.1:*:*:*:*:*:*:* (Confidence:Low)
- cpe:2.3:a:unicode:international_components_for_unicode:77.1:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.zip: pdfc-javadoc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar
MD5: bd750b8f2ad3a018c71626e849f76122
SHA1: 1f2a0f238de2945580c8f4043b5faacc01c1234d
SHA256:61fa9a4a4c8165adbe0f2af8f0d0745d19f6396e69162456ae6bca1ad04f25e7
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc-javadoc | High
Product | file | name | pdfc-javadoc | High

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: jquery-3.6.1.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-dir/jquery-3.6.1.min.js
MD5: 00727d1d5d9c90f7de826f1a4a9cc632
SHA1: ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2
SHA256:a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-dir/jquery-ui.min.js
MD5: 32059df39c14a910ccc2325f6a3cd62f
SHA1: d3289f1b527a3f054d303ec769402e037fbfcf4b
SHA256:672f278182cdf04f3c62a5b8d93f406791854a28791f27aecdb9981573c61424
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jquery-ui | High
Product | file | name | jquery-ui | High
Version | file | version | 1.13.1 | High

#### Identifiers

- pkg:javascript/jquery-ui@1.13.1 (Confidence:Highest)

### pdfc.zip: pdfc-javadoc.jar: member-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/member-search-index.js
MD5: 6b0d6c845b62b81d696f7a43af181584
SHA1: f74a3e9265358bdea3995af040606c885ac0e922
SHA256:fbf37a555a8f7b84d00249055e409779700ff5623d8f34ec963d7b3515218d53
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: module-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/module-search-index.js
MD5: a33da0f469acbd03f77bf407bac505f5
SHA1: 1e996ce630c6e1ada3ea86d7b71dabca0180f8e8
SHA256:814a05983e3267d591c7e62b314eb8eb0504eee844c8a70d494f6edbaa0f4f18
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: package-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/package-search-index.js
MD5: 704b175752fd9646f0b53f0630993ec3
SHA1: ab8c6e78cec3f37d42bae22d017bbb92b736d663
SHA256:e85fb555ff19b3ac1934c0188d4e33f4443ddc4cd557c7dee9b6de5a0a952a05
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: script.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script.js
MD5: baf9d9e16237acbdce975a33c54ee8ae
SHA1: cc6a3c8d72f17eff0d613ddfcf7c1095535573f7
SHA256:9a027b197c6b3b44c4952797b2eb0477318a03093a5bbad089e12959e562b975
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: search.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/search.js
MD5: cb277f670590ffec20a12745260518dc
SHA1: 4b222ef8d1c52e1ce5ceb40a3b5c1fb9cad01eca
SHA256:47c74de257f7e407a21e5d22519b664cfa1c83d04c362bff466c8424b702d31f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: tag-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/tag-search-index.js
MD5: 95810a7878ddd3f49d938eb6b5c0f1b2
SHA1: 4d0358e131242bfb1a29d1db368e9e24381ad979
SHA256:e31bd7c6847cd8b49a884fe01244f740ad184cdb7aa6449830be21985158f0d9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: type-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/type-search-index.js
MD5: 709163eef2bdfcabf43d6f1058f7e5c3
SHA1: 0471197c5a2b7bd7ef511433127b1497472e8c54
SHA256:576b26c4b6ae1b4a14e18d6ecf749dfcd7c34408db9dfbdf27f7aa9575b70105
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc.jar
MD5: bc53b2943ef80e52467a8e7385ed176b
SHA1: af63cb0d5ec59cc022a14bbf321bd0b0bb2031e6
SHA256:77772d4cdeda85ba0fa3e80c2724e9068754d9210bf5f665d1f4626d1549f604
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:19 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | permissions | Highest
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:19 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfc | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfc | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | jar | package name | permissions | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### pdfcserver.zip: pdfcserver.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcserver.zip/pdfcserver.jar
MD5: 1cd4b2b5091a2b31a7b744ae9f268bce
SHA1: f1e92de5d7e5e7e6bf12d37a692bce509b9ab348
SHA256:1c90bb35a12bff63837b07d8278bdc2488256165139a14694e03287809b9099b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfcserver | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | server | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-11-05 19:18 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfcserver | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | persistence | Low
Product | jar | package name | server | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-11-05 19:18 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfcserver | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfcserver | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### pdfcserver.zip: pdfcserver.jar: compareconfigrenderer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcserver.zip/pdfcserver.jar/com/inet/pdfc/server/structure/compareconfigrenderer.js
MD5: ca54201f240ce7fea03db4f46ecd818a
SHA1: 420f31523aa51830c134d193dae0a692eff5b4da
SHA256:0aa678824bea93ed82b1747fc75512915488e2d65b5f11c9c22d4214bb129cec
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfcsetupwizard.zip: pdfcsetupwizard.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcsetupwizard.zip/pdfcsetupwizard.jar
MD5: b5ff42f1fffdd9eaf3c5590e9d849b5d
SHA1: 63db793b01a3e76ba451c857d5fce27fb2964ca4
SHA256:3dabfd771d4ee2e8b01196679d59c0ae9582ee126ef05fec1912bc24e647da5e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfcsetupwizard | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | setupwizard | Low
Vendor | Manifest | built-date | 2025-11-05 19:34 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfcsetupwizard | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | setupwizard | Low
Product | jar | package name | steps | Low
Product | Manifest | built-date | 2025-11-05 19:34 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfcsetupwizard | High
Product | Manifest | specification-title | pdfcsetupwizard | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### pdfcsetupwizard.zip: pdfcsetupwizard.jar: controller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcsetupwizard.zip/pdfcsetupwizard.jar/com/inet/pdfc/setupwizard/steps/license/controller.js
MD5: b21c2ee13289577d98bbb1687726af34
SHA1: 9032230fff5222847734d3cb4723103733f88e92
SHA256:6c1d316ea3da704c21cc9e3fa2426863fa173c3d44a212506fc4bc1e187991e9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### processbridge.pdfc.zip: processbridge.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/processbridge.pdfc.zip/processbridge.pdfc.jar
MD5: 581471e7e42081d8ac73cc88bfe38931
SHA1: 98fcbc857bb6bb7c1fc380af1ee4e46cdca75053
SHA256:7f945e6b347d5d7d65e724c45295ae0add0f483ac2e02a8a350be33d1802eae5
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | processbridge.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | processbridge | Low
Vendor | Manifest | built-date | 2025-11-05 19:38 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | processbridge.pdfc | High
Product | jar | package name | api | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | processbridge | Highest
Product | jar | package name | processbridge | Low
Product | Manifest | built-date | 2025-11-05 19:38 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | processbridge.pdfc | High
Product | Manifest | specification-title | processbridge.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

### slf4j-api-2.0.16.jar

Description:

    The slf4j API

License:

    http://www.opensource.org/licenses/mit-license.php

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.slf4j/slf4j-api/2.0.16/172931663a09a1fa515567af5fbef00897d3c04/slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256:a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Project/Scope: standalone:inetPlugin
slf4j-api-2.0.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | slf4j-api | High
Vendor | gradle | artifactid | slf4j-api | Highest
Vendor | gradle | groupid | org.slf4j | Highest
Vendor | jar | package name | slf4j | Highest
Vendor | Manifest | build-jdk-spec | 21 | Low
Vendor | Manifest | bundle-docurl | http://www.slf4j.org | Low
Vendor | Manifest | bundle-symbolicname | slf4j.api | Medium
Vendor | Manifest | multi-release | true | Low
Vendor | pom | artifactid | slf4j-api | Low
Vendor | pom | groupid | org.slf4j | Highest
Vendor | pom | name | SLF4J API Module | High
Vendor | pom | parent-artifactid | slf4j-parent | Low
Vendor | pom | url | http://www.slf4j.org | Highest
Product | file | name | slf4j-api | High
Product | gradle | artifactid | slf4j-api | Highest
Product | jar | package name | slf4j | Highest
Product | Manifest | build-jdk-spec | 21 | Low
Product | Manifest | bundle-docurl | http://www.slf4j.org | Low
Product | Manifest | Bundle-Name | SLF4J API Module | Medium
Product | Manifest | bundle-symbolicname | slf4j.api | Medium
Product | Manifest | Implementation-Title | slf4j-api | High
Product | Manifest | multi-release | true | Low
Product | pom | artifactid | slf4j-api | Highest
Product | pom | groupid | org.slf4j | Highest
Product | pom | name | SLF4J API Module | High
Product | pom | parent-artifactid | slf4j-parent | Medium
Product | pom | url | http://www.slf4j.org | Medium
Version | file | version | 2.0.16 | High
Version | gradle | version | 2.0.16 | Highest
Version | Manifest | Bundle-Version | 2.0.16 | High
Version | Manifest | Implementation-Version | 2.0.16 | High
Version | pom | version | 2.0.16 | Highest

#### Identifiers

- pkg:maven/org.slf4j/slf4j-api@2.0.16 (Confidence:High)

### taskplanner.pdfc.zip: taskplanner.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/taskplanner.pdfc.zip/taskplanner.pdfc.jar
MD5: 9169ce16204dfb3c662b5d231c9a2e59
SHA1: 624c11c65f39dec39d1da018af7fdfd168216b4a
SHA256:f18bf18ee34d7d161c0a751c2c03c9e187d42b5d342b76b88ca29d6edeac7233
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | taskplanner.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | taskplanner | Low
Vendor | Manifest | built-date | 2025-11-05 19:38 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | taskplanner.pdfc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | taskplanner | Highest
Product | jar | package name | taskplanner | Low
Product | Manifest | built-date | 2025-11-05 19:38 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | taskplanner.pdfc | High
Product | Manifest | specification-title | taskplanner.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.233 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.233:*:*:*:*:*:*:* (Confidence:Low)

## Suppressed Vulnerabilities

### pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-dir/jquery-ui.min.js
MD5: 32059df39c14a910ccc2325f6a3cd62f
SHA1: d3289f1b527a3f054d303ec769402e037fbfcf4b
SHA256: 672f278182cdf04f3c62a5b8d93f406791854a28791f27aecdb9981573c61424
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jquery-ui | High
Product | file | name | jquery-ui | High
Version | file | version | 1.13.1 | High

#### Suppressed Identifiers

- None

#### Suppressed Vulnerabilities

CVE-2022-31160 suppressed

    jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a label makes that parent label contents considered as the input label. Calling `.checkboxradio( "refresh" )` on such a widget and the initial HTML contained encoded HTML entities will make them erroneously get decoded. This can lead to potentially executing JavaScript code. The bug has been patched in jQuery UI 1.13.2. To remediate the issue, someone who can change the initial HTML can wrap all the non-input contents of the `label` in a `span`.

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Notes: JavaDoc embedded JQuery UI - requires updated Java Version with newer javadoc
CVSSv3:

- MEDIUM (6.1)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A

References:

- info - https://github.com/advisories/GHSA-h6gj-6jjq-h8g9
- info - https://github.com/jquery/jquery-ui/commit/8cc5bae1caa1fcf96bf5862c5646c787020ba3f9
- info - https://github.com/jquery/jquery-ui/issues/2101
- info - https://nvd.nist.gov/vuln/detail/CVE-2022-31160
- security-advisories@github.com - EXPLOIT,MITIGATION,RELEASE_NOTES,THIRD_PARTY_ADVISORY
- security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY
- security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY
- security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY
- security-advisories@github.com - THIRD_PARTY_ADVISORY
- security-advisories@github.com - THIRD_PARTY_ADVISORY

Vulnerable Software & Versions (NVD):

- cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.0:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.1:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.2:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.3:*:*:*:*:drupal:*:*
- cpe:2.3:a:jqueryui:jquery_ui:*:*:*:*:*:jquery:*:* versions up to (excluding) 1.13.2
- cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*

This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.