Press CTR-C to copy XML [help]

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

### How to read the report | Suppressing false positives | Getting Help: github issues
Sponsor

## Project: project ':standalone'

#### pdfc:standalone:25.10

Scan Information (show all):

- dependency-check version: 10.0.3
- Report Generated On: Mon, 1 Dec 2025 16:59:35 +0100
- Dependencies Scanned: 128 (127 unique)
- Vulnerable Dependencies: 0
- Vulnerabilities Found: 0
- Vulnerabilities Suppressed: 0
- ...
- NVD API Last Checked: 2025-12-01T15:57:34Z
- NVD API Last Modified: 2024-09-18T11:15:10Z
- NVD Cache Last Checked: 2025-12-01T15:57:34Z
- NVD Cache Last Modified: 2024-09-18T11:15:10Z

## Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency | Vulnerability IDs | Package | Highest Severity | CVE Count | Confidence | Evidence Count
--- | --- | --- | --- | --- | --- | ---
Merlia-0.jar |  | pkg:maven/lib/Merlia@0 |  | 0 |  | 12
analysis.language.zip: analysis.language.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 33
analysis.language.zip: guava.jar | cpe:2.3:a:google:guava:33.4.8:*:*:*:*:*:*:* | pkg:maven/com.google.guava/guava@33.4.8-jre |  | 0 | Highest | 24
analysis.language.zip: jsonic.jar |  |  |  | 0 |  | 7
analysis.language.zip: language-detector.jar |  | pkg:maven/com.optimaize.languagedetector/language-detector@0.6 |  | 0 |  | 26
annotations-3.0.1.jar (shaded: com.google.code.findbugs:jsr305:3.0.1) |  | pkg:maven/com.google.code.findbugs/jsr305@3.0.1 |  | 0 |  | 9
annotations-3.0.1.jar |  | pkg:maven/com.google.code.findbugs/annotations@3.0.1 |  | 0 |  | 42
command.jsonexport.zip: command.jsonexport.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 32
comparison.api.zip: comparison.api.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 30
comparison.rpc.zip: comparison.rpc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 32
comparison.webgui.zip: comparison.webgui.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 22
comparison.webgui.zip: comparison.webgui.jar: app.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: compare.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: contextmenuextension.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: contingent.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: controller.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: descriptionarea.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: dropzone.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: export.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: factory.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: model.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: multipasswordpanel.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: mycomparisons.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: passwordpanel.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: pdfcconfig.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: profil.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: profileentry.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: publishdialog.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: publishprofiledialog.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: report.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: scroller.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: searchcomponent.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: userlist.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: visibilitysettings.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: zoomer.js |  |  |  | 0 |  | 0
filter.area.zip: filter.area.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.baselinetable.zip: filter.baselinetable.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.cmappatch.zip: filter.cmappatch.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.headerfooter.zip: filter.headerfooter.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.hiderotation.zip: filter.hiderotation.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.invisibleelements.zip: filter.invisibleelements.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.multicolumn.zip: filter.multicolumn.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.ocr.zip: filter.ocr.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.pagerange.zip: filter.pagerange.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 32
filter.regex.zip: filter.regex.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.regex.zip: filter.regex.jar: filterrenderer.js |  |  |  | 0 |  | 0
filter.texttransform.zip: filter.texttransform.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.urllookup.zip: filter.urllookup.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 33
hamcrest-3.0.jar |  | pkg:maven/org.hamcrest/hamcrest@3.0 |  | 0 |  | 17
inetcore-25.10-tools.jar |  | pkg:maven/shared/inetcore@25.10 |  | 0 |  | 9
inetcore-25.10.jar (shaded: com.inet.shared:inetcore:null) |  |  |  | 0 |  | 27
inetcore-25.10.jar |  | pkg:maven/shared/inetcore@25.10 |  | 0 |  | 35
java-21-jre-x64-linux.tar.gz: java-21-jre-x64-linux.tar: jrt-fs.jar | cpe:2.3:a:eclipse:platform:21.0.9:*:*:*:*:*:*:* |  |  | 0 | Medium | 12
jcip-annotations-1.0.jar |  | pkg:maven/net.jcip/jcip-annotations@1.0 |  | 0 |  | 13
jlessc-1.14.jar |  | pkg:maven/de.inetsoftware/jlessc@1.14 |  | 0 |  | 19
jsr305-3.0.2.jar |  | pkg:maven/com.google.code.findbugs/jsr305@3.0.2 |  | 0 |  | 20
junit-4.13.2.jar | cpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:* | pkg:maven/junit/junit@4.13.2 |  | 0 | Highest | 17
junit-jupiter-5.13.4.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4 |  | 0 |  | 21
junit-jupiter-api-5.13.4.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-api@5.13.4 |  | 0 |  | 31
junit-jupiter-engine-5.13.4.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4 |  | 0 |  | 33
junit-jupiter-params-5.13.4.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-params@5.13.4 |  | 0 |  | 32
junit-platform-commons-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-commons@1.13.4 |  | 0 |  | 34
junit-platform-engine-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-engine@1.13.4 |  | 0 |  | 32
junit-platform-launcher-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-launcher@1.13.4 |  | 0 |  | 33
junit-platform-suite-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-suite@1.13.4 |  | 0 |  | 21
junit-platform-suite-api-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-suite-api@1.13.4 |  | 0 |  | 34
junit-platform-suite-commons-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-suite-commons@1.13.4 |  | 0 |  | 34
junit-platform-suite-engine-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-suite-engine@1.13.4 |  | 0 |  | 34
junit-vintage-engine-5.13.4.jar |  | pkg:maven/org.junit.vintage/junit-vintage-engine@5.13.4 |  | 0 |  | 33
maintenance.pdfc.zip: maintenance.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 22
maintenance.pdfc.zip: maintenance.pdfc.jar: app.js |  |  |  | 0 |  | 0
maintenance.pdfc.zip: maintenance.pdfc.jar: comparisons.js |  |  |  | 0 |  | 0
ocr.tesseract.zip: commons-logging.jar |  | pkg:maven/commons-logging/commons-logging@1.3.4 |  | 0 |  | 127
ocr.tesseract.zip: fontbox.jar |  | pkg:maven/org.apache.pdfbox/fontbox@3.0.5 |  | 0 |  | 32
ocr.tesseract.zip: jai-imageio-core.jar |  | pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0 |  | 0 |  | 40
ocr.tesseract.zip: jbig2-imageio.jar | cpe:2.3:a:apache:pdfbox:3.0.4:*:*:*:*:*:*:* | pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4 |  | 0 | Highest | 128
ocr.tesseract.zip: jboss-vfs.jar |  | pkg:maven/org.jboss/jboss-vfs@3.3.2.Final |  | 0 |  | 33
ocr.tesseract.zip: jna.jar | cpe:2.3:a:oracle:java_se:5.14.0:*:*:*:*:*:*:* |  |  | 0 | Low | 36
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: lept4j.jar |  | pkg:maven/net.sourceforge.lept4j/lept4j@1.19.1 |  | 0 |  | 25
ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: ocr.tesseract.jar | cpe:2.3:a:tesseract_ocr_project:tesseract_ocr:25.10.259:*:*:*:*:*:*:* cpe:2.3:a:tesseract_project:tesseract:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 33
ocr.tesseract.zip: pdfbox.jar | cpe:2.3:a:apache:pdfbox:3.0.5:*:*:*:*:*:*:* | pkg:maven/org.apache.pdfbox/pdfbox@3.0.5 |  | 0 | Highest | 30
ocr.tesseract.zip: tess4j.jar | cpe:2.3:a:tesseract_project:tesseract:5.12.0:*:*:*:*:*:*:* | pkg:maven/net.sourceforge.tess4j/tess4j@5.12.0 |  | 0 | Low | 42
ocr.tesseract.zip: tess4j.jar: libtesseract541.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: tess4j.jar: libtesseract541.dll |  |  |  | 0 |  | 4
opentest4j-1.3.0.jar |  | pkg:maven/org.opentest4j/opentest4j@1.3.0 |  | 0 |  | 23
parser.image.zip: parser.image.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 31
parser.pdf.config.zip: parser.pdf.config.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 31
parser.text.zip: parser.text.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfc.standalone.zip: pdfc.standalone.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfc.standalone.zip: pdfc.standalone.jar: bridge.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: bridgeConfig.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: bridgePDFC.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: extraMenu.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: removeHeader.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: removePDFCElements.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: theme.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: translation.js |  |  |  | 0 |  | 0
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:collate:77.1) |  | pkg:maven/com.ibm.icu/collate@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:core:77.1) |  | pkg:maven/com.ibm.icu/core@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:currdata:77.1) |  | pkg:maven/com.ibm.icu/currdata@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:langdata:77.1) |  | pkg:maven/com.ibm.icu/langdata@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:regiondata:77.1) |  | pkg:maven/com.ibm.icu/regiondata@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:translit:77.1) |  | pkg:maven/com.ibm.icu/translit@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar | cpe:2.3:a:icu-project:international_components_for_unicode:77.1:*:*:*:*:*:*:* cpe:2.3:a:unicode:international_components_for_unicode:77.1:*:*:*:*:*:*:* | pkg:maven/com.ibm.icu/icu4j@77.1 |  | 0 | Low | 49
pdfc.zip: pdfc-javadoc.jar |  |  |  | 0 |  | 2
pdfc.zip: pdfc-javadoc.jar: jquery-3.7.1.min.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: member-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: module-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: package-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: script.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: search.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: tag-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: type-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 30
pdfcserver.zip: pdfcserver.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfcserver.zip: pdfcserver.jar: compareconfigrenderer.js |  |  |  | 0 |  | 0
pdfcsetupwizard.zip: pdfcsetupwizard.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 21
pdfcsetupwizard.zip: pdfcsetupwizard.jar: controller.js |  |  |  | 0 |  | 0
processbridge.pdfc.zip: processbridge.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 22
slf4j-api-2.0.16.jar |  | pkg:maven/org.slf4j/slf4j-api@2.0.16 |  | 0 |  | 32
taskplanner.pdfc.zip: taskplanner.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* |  |  | 0 | Low | 21

## Dependencies (vulnerable)

### Merlia-0.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/lib/Merlia/0/e4af937135679cc07f99529ee7ca127519bd3a06/Merlia-0.jar
MD5: 3eb81fb3cc977f1a3eb1fb26b2b38666
SHA1: e4af937135679cc07f99529ee7ca127519bd3a06
SHA256:b1d1878d936c27b010e6f3c123d8d7f2f7f6960a53e5b01b1b1c3d104c29b0a8
Referenced In Project/Scope: standalone:inetPlugin
Merlia-0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | Merlia-0 | High
Vendor | gradle | artifactid | Merlia | Highest
Vendor | gradle | groupid | lib | Highest
Vendor | jar | package name | inet | Low
Vendor | jar | package name | tds | Low
Product | file | name | Merlia-0 | High
Product | gradle | artifactid | Merlia | Highest
Product | jar | package name | tds | Low
Version | file | name | Merlia-0 | Medium
Version | file | version | 0 | Medium
Version | gradle | version | 0 | Highest
Version | Manifest | driver-version | 8.13 | Medium

#### Identifiers

- pkg:maven/lib/Merlia@0 (Confidence:Highest)

### analysis.language.zip: analysis.language.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/analysis.language.jar
MD5: cf66bbc9ef533c89c5cf2d7639999bd8
SHA1: b0b3246e5eb0beb47ebb7d1e3ca5ba055d432ac9
SHA256:8b023e8e0640da720c1d369aa8f2f5d12cd69e9c933bf859a80afc0a121b16d1
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | analysis.language | High
Vendor | jar | package name | analysis | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:40 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | analysis.language | High
Product | jar | package name | analysis | Highest
Product | jar | package name | analysis | Low
Product | jar | package name | language | Highest
Product | jar | package name | language | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:40 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | analysis.language | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | analysis.language | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### analysis.language.zip: guava.jar

Description:

        Guava is a suite of core and expanded libraries that include
        utility classes, Google's collections, I/O classes, and
        much more.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/guava.jar
MD5: 72920caab34426c5815e3b00f80e3b01
SHA1: e70a3268e6cd3e7d458aa15787ce6811c34e96ae
SHA256:f3d7f57f67fd622f4d468dfdd692b3a5e3909246c28017ac3263405f0fe617ed
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | guava | High
Vendor | jar | package name | google | Highest
Vendor | Manifest | build-jdk-spec | 11 | Low
Vendor | Manifest | bundle-docurl | https://github.com/google/guava/ | Low
Vendor | Manifest | bundle-symbolicname | com.google.guava | Medium
Vendor | Manifest | multi-release | true | Low
Vendor | pom | artifactid | guava | Low
Vendor | pom | groupid | com.google.guava | Highest
Vendor | pom | name | Guava: Google Core Libraries for Java | High
Vendor | pom | parent-artifactid | guava-parent | Low
Vendor | pom | url | google/guava | Highest
Product | file | name | guava | High
Product | jar | package name | google | Highest
Product | Manifest | build-jdk-spec | 11 | Low
Product | Manifest | bundle-docurl | https://github.com/google/guava/ | Low
Product | Manifest | Bundle-Name | Guava: Google Core Libraries for Java | Medium
Product | Manifest | bundle-symbolicname | com.google.guava | Medium
Product | Manifest | multi-release | true | Low
Product | pom | artifactid | guava | Highest
Product | pom | groupid | com.google.guava | Highest
Product | pom | name | Guava: Google Core Libraries for Java | High
Product | pom | parent-artifactid | guava-parent | Medium
Product | pom | url | google/guava | High
Version | pom | version | 33.4.8-jre | Highest

#### Identifiers

- pkg:maven/com.google.guava/guava@33.4.8-jre (Confidence:High)
- cpe:2.3:a:google:guava:33.4.8:*:*:*:*:*:*:* (Confidence:Highest)

### analysis.language.zip: jsonic.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/jsonic.jar
MD5: 504496d0069da0121c059c219147e90c
SHA1: 98e8a1f25aa40ed92ff2ecca4d1301d48b552452
SHA256:150e3ac24b103cb0cd50595018dbe3c8ba4b3dee81a76eb4b987607f96e9602b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jsonic | High
Vendor | jar | package name | arnx | Low
Vendor | jar | package name | jsonic | Low
Vendor | jar | package name | net | Low
Product | file | name | jsonic | High
Product | jar | package name | arnx | Low
Product | jar | package name | jsonic | Low

#### Identifiers

- None

### analysis.language.zip: language-detector.jar

Description:

            Language Detection Library for Java.

License:

    Apache 2: http://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/language-detector.jar
MD5: e5475d5cabd54e5ddf6428d63864888f
SHA1: 52fee1eaa101f8d3e30b7095e1b6e0054d514dde
SHA256:f53ecc3d71da9ebc82edd10fb35638d32e8b9d849273dd717a021eca02f2278d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | language-detector | High
Vendor | jar | package name | langdetect | Low
Vendor | jar | package name | languagedetector | Highest
Vendor | jar | package name | optimaize | Highest
Vendor | jar | package name | optimaize | Low
Vendor | pom | artifactid | language-detector | Low
Vendor | pom | developer name | Fabian Kessler | Medium
Vendor | pom | developer name | François ROLAND | Medium
Vendor | pom | developer name | Nakatani Shuyo | Medium
Vendor | pom | developer name | Robert Theis | Medium
Vendor | pom | groupid | com.optimaize.languagedetector | Highest
Vendor | pom | name | language-detector | High
Vendor | pom | url | optimaize/language-detector | Highest
Product | file | name | language-detector | High
Product | jar | package name | langdetect | Low
Product | jar | package name | languagedetector | Highest
Product | jar | package name | optimaize | Highest
Product | pom | artifactid | language-detector | Highest
Product | pom | developer name | Fabian Kessler | Low
Product | pom | developer name | François ROLAND | Low
Product | pom | developer name | Nakatani Shuyo | Low
Product | pom | developer name | Robert Theis | Low
Product | pom | groupid | com.optimaize.languagedetector | Highest
Product | pom | name | language-detector | High
Product | pom | url | optimaize/language-detector | High
Version | pom | version | 0.6 | Highest

#### Identifiers

- pkg:maven/com.optimaize.languagedetector/language-detector@0.6 (Confidence:High)

### annotations-3.0.1.jar (shaded: com.google.code.findbugs:jsr305:3.0.1)

Description:

    JSR305 Annotations for Findbugs

License:

    The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/annotations/3.0.1/fc019a2216218990d64dfe756e7aa20f0069dea2/annotations-3.0.1.jar/META-INF/maven/com.google.code.findbugs/jsr305/pom.xml
MD5: d08567d16867a0b79bc8149683918452
SHA1: d04690f71f3393e23f30998d9534365274fa5f9f
SHA256:4170a761dc5bfd3981a8e6f7aab9e2acdce82d34fd5aa9bb11e3c090d25314ce
Referenced In Project/Scope: standalone:inetPlugin

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | jsr305 | Low
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-jsr305 | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | pom | artifactid | jsr305 | Highest
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-jsr305 | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | pom | version | 3.0.1 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/jsr305@3.0.1 (Confidence:High)

### annotations-3.0.1.jar

Description:

    Annotation the FindBugs tool supports

License:

    GNU Lesser Public License: http://www.gnu.org/licenses/lgpl.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/annotations/3.0.1/fc019a2216218990d64dfe756e7aa20f0069dea2/annotations-3.0.1.jar
MD5: fc4f102f22ba4f1df3f1d7cc6b202152
SHA1: fc019a2216218990d64dfe756e7aa20f0069dea2
SHA256:6b47ff0a6de0ce17cbedc3abb0828ca5bce3009d53ea47b3723ff023c4742f79
Referenced In Project/Scope: standalone:inetPlugin
annotations-3.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.14

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | annotations | High
Vendor | gradle | artifactid | annotations | Highest
Vendor | gradle | groupid | com.google.code.findbugs | Highest
Vendor | jar | package name | annotation | Highest
Vendor | jar | package name | annotations | Highest
Vendor | jar | package name | findbugs | Highest
Vendor | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low
Vendor | Manifest | bundle-symbolicname | findbugsAnnotations | Medium
Vendor | pom | artifactid | annotations | Low
Vendor | pom | developer email | Loskutov@gmx.de | Low
Vendor | pom | developer email | pugh at cs.umd.edu | Low
Vendor | pom | developer id | al | Medium
Vendor | pom | developer id | bp | Medium
Vendor | pom | developer name | Andrey Loskutov | Medium
Vendor | pom | developer name | Bill Pugh | Medium
Vendor | pom | developer name | Keith Lea | Medium
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-Annotations | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | file | name | annotations | High
Product | gradle | artifactid | annotations | Highest
Product | jar | package name | annotation | Highest
Product | jar | package name | annotations | Highest
Product | jar | package name | findbugs | Highest
Product | Manifest | Bundle-Name | FindBugs-Annotations | Medium
Product | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low
Product | Manifest | bundle-symbolicname | findbugsAnnotations | Medium
Product | pom | artifactid | annotations | Highest
Product | pom | developer email | Loskutov@gmx.de | Low
Product | pom | developer email | pugh at cs.umd.edu | Low
Product | pom | developer id | al | Low
Product | pom | developer id | bp | Low
Product | pom | developer name | Andrey Loskutov | Low
Product | pom | developer name | Bill Pugh | Low
Product | pom | developer name | Keith Lea | Low
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-Annotations | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | file | version | 3.0.1 | High
Version | gradle | version | 3.0.1 | Highest
Version | Manifest | Bundle-Version | 3.0.1 | High
Version | pom | version | 3.0.1 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/annotations@3.0.1 (Confidence:High)

### command.jsonexport.zip: command.jsonexport.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/command.jsonexport.zip/command.jsonexport.jar
MD5: 15c2a4d44ea0f957f5cdd5179cee2139
SHA1: 59c76b81c483c1ed1ab21a8eb31cf681de25f964
SHA256:4309ab709f7aa5b5ed390228e641c808096db7347c3f056af18ff19cf4d0e3d5
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | command.jsonexport | High
Vendor | jar | package name | command | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:40 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | command.jsonexport | High
Product | jar | package name | command | Highest
Product | jar | package name | command | Low
Product | jar | package name | json | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:40 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | command.jsonexport | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | command.jsonexport | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### comparison.api.zip: comparison.api.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.api.zip/comparison.api.jar
MD5: 83c4c4ef548e8df4d57d751d27e2c69d
SHA1: b5724cf09e013be76477e962ecf32e201ab41d27
SHA256:c988f52d2f11a92ee466c3d8679a1ba6816615238b1660ccbf865f6c72e6afde
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.api | High
Vendor | jar | package name | comparisonapi | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:31 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.api | High
Product | jar | package name | comparisonapi | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:31 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.api | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | comparison.api | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### comparison.rpc.zip: comparison.rpc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.rpc.zip/comparison.rpc.jar
MD5: 6161b0d5ebe049bad2aeb648000acacd
SHA1: 51e6fae8dbfa31fb58b0e76bf6b7ca2e61fbb266
SHA256:ea5a75dde0f27763887e0bb6a970c9875a8bc153e37692ff7c3a94c74da4b862
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.rpc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | rpc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:31 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.rpc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | rpc | Highest
Product | jar | package name | rpc | Low
Product | jar | package name | websocket | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:31 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.rpc | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | comparison.rpc | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### comparison.webgui.zip: comparison.webgui.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar
MD5: a220250d791a22f78739e44c335c7a93
SHA1: d6c46e1791ae19e123b714b8c88084157e3fb82a
SHA256:14fcebf281c8a28f81bf2cf51b73c1e89881db9a9a1cd4404c4b30eb94fc2ad2
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.webgui | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | webgui | Low
Vendor | Manifest | built-date | 2025-12-01 16:32 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.webgui | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | server | Low
Product | jar | package name | webgui | Highest
Product | jar | package name | webgui | Low
Product | Manifest | built-date | 2025-12-01 16:32 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.webgui | High
Product | Manifest | specification-title | comparison.webgui | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### comparison.webgui.zip: comparison.webgui.jar: app.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/app.js
MD5: 2e4ad8b6a0f9a76284c281df29d4ae4d
SHA1: c715d01b3797ea1cc4e3615d97412a8d2cf8a067
SHA256:c1ace93a6f794644bab65004932e9335d040e375a3d93c6ca4f7029bc5e06e59
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: compare.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/compare.js
MD5: 6b51954c7a299af1f898d3f564bde203
SHA1: c840cfecd51004f94fd0ee982c9db6ee63fb04cc
SHA256:6a7ab442206a31de5e93cd43b3736f314afd89a075e642d6c72a5891f01ae06e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: contextmenuextension.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/drive/contextmenuextension.js
MD5: b5f087715014cac13f4ccbc40c947f1c
SHA1: bf853c9b9c629eb66ce96fd12a24e973aa2cb1c6
SHA256:3096c6232dfe34a586f3d3bf0175b12bbd3b20a25d2f499da0aaa390a122d97b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: contingent.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/contingent.js
MD5: 10782a90b423f2db0450adaa8944f25a
SHA1: 8d7242260155b1bc6cbca8cd0fa034c3be0c021b
SHA256:c54c35e7c00b764c4e9b7511916a30510158e88b8c8e5ee4d61c7302a7d87295
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: controller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/controller.js
MD5: aacf28f3a507db78d714d36140550854
SHA1: 17c29a4631e4ae05cd4cefb76cea06e6ee94046f
SHA256:b305eec27b595654e3edced1f288390c04ce7f19f8fd058129dbf5167c9cd05c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: descriptionarea.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/descriptionarea.js
MD5: 14028f3ecbcfc96a785ea29eec407af0
SHA1: c89033c6f1414aabc1e006e78079167ab6ffb194
SHA256:64973d746a823e043ad9df56ce9aff83dbe2f89cea86bed498cfe1dc82d799ca
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: dropzone.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/dropzone.js
MD5: 2856733a745b9f8fdb7e8f5806f32299
SHA1: e644c116bc9337732ee3fd448430f5ad7c9056f1
SHA256:37993d37570580a0b7d0ab92083862738ab1aa30c9767241a29173342a08e1bb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: export.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/export.js
MD5: e1a2cc48050ef9b378b8a53a081d082a
SHA1: 5cd7fe1140bd00b2f6db400724b659ae7abbadd9
SHA256:17fe08df83d82b913f8d1416e4ce5c2530ee55f4a35348f6c9dad90fde158ec7
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: factory.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/factory.js
MD5: 74c60c48fbcc1dea077c4e2a1f617446
SHA1: 09bad3af86aad6976b1898fb818c73aa532efeb5
SHA256:4c7ce44ad7127235a295e80100e58fd41897a69602fac5320c774560546061a9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: model.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/model.js
MD5: a0ce24ce0abb9a25fbcb93919008d176
SHA1: 91de96e8843f7ed1bba7b94b4d869f3e7c07f2ad
SHA256:6deeec42335e4e4062ab72773fa598a37afda2b1207451a35d6ee9df31124836
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: multipasswordpanel.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/multipasswordpanel.js
MD5: 34d4d5fd0cf1fa77d569e928af1a00aa
SHA1: 230e35fe5f8f5a48ccd930cee3c79f16df858b97
SHA256:28be5c583ef3c82dca061d79f33a43f3672421b6a1b42e460a444f296d49a79a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: mycomparisons.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/mycomparisons.js
MD5: ec823fcf834bc8b9c79050fc5ee6a84e
SHA1: 0683120ef8ec8c044248b93375348549fce783d5
SHA256:713e5065e3623b225277c4718c9763e2785272ded0b6cc476f0ff20724401017
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: passwordpanel.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/passwordpanel.js
MD5: 4e69b1954226ce194fd836df7ad77e35
SHA1: 6e79c7f2354f08c8effe8adfd66c6dcaff4bdb8c
SHA256:6078c754f425f4087a05cf8e6aca77ab5b6c9df996e5143d730f32bd8f46ca21
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: pdfcconfig.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/pdfcconfig.js
MD5: 676338e9e274fd0d9ab59db49e3ea86f
SHA1: 5c8a910bd5453a9e9ff6163db9f760533e9db5b6
SHA256:3cbb5959eb832a0c7880d2a0c58a4f82cc6e66b177b4aeeef49a87540265b96f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: profil.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/profil.js
MD5: a80e7a67200f9bebc58cc1b1f648ba81
SHA1: 67a71dca22d20ed3e4cacd59e7b013052bba6059
SHA256:1eb1aed349f9e8d0781de9f352733a58b6a4fcac9e89d259888005099b5216d8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: profileentry.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/profileentry.js
MD5: 70fba9a0806250f9fc3f559012ebdfc5
SHA1: 911155de0ffa9aff766b028eff7d2a74557da44c
SHA256:7dc35ebc9b13805fc2160bd904bea53c880ab49854079e55e4f141984b6ab075
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: publishdialog.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/publishdialog.js
MD5: 3c6b3557cb70409b766dcadc7593ef40
SHA1: 15ab54e19f4ed112a10fc9bb380d5613f4c9e10f
SHA256:bc6ff09abcaa54afd0b07b558cec428824f5e1b157a5459e3eb2308802eca100
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: publishprofiledialog.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/publishprofiledialog.js
MD5: 15cb57cdb21d62986b893e35495ac8d0
SHA1: 060e44459b5a3e7b684be7a9faaefd5683a22ea9
SHA256:c1ce1c1ef7c98cb682a6844bec27307b2e7aee3403b607ce6743394984d5f481
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: report.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/report.js
MD5: 161485eaea5b9b5f65d479f48911c56f
SHA1: edc976c964a05132b9b34aa9b3d8d282147bbc04
SHA256:35e773c2f1fa99f13a7aac090863d403636547f5b7df7e0c05a88b3eda6f1ecc
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: scroller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/scroller.js
MD5: 258842a58c95114e959f659bfa15d9a7
SHA1: f947fcba0b63cc56cacedf1d9f3f812b3330586b
SHA256:4d7e9feb475bec916fc11571fbf16ac1f9113abf4db43bdd18bd4f3ae0560666
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: searchcomponent.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/searchcomponent.js
MD5: bdc3caac35d953edd2e6f68c0d4bfd74
SHA1: ef70a291cb7226084945b2648356f3a389b7fa58
SHA256:36620c84f1984fc0d8f98256fb345a0329ab25c834dcfa8c916d552ff370799e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: userlist.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/userlist.js
MD5: f0280a91fc83e571ef486c22a7f93ef7
SHA1: 68abf77cf988cad21dd9dad06a89175f906b1d9e
SHA256:1b0b6bc3b19aa7a697b17a94c617ad8e1807b10ac7de9d9292bfdc3f929c41cb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: visibilitysettings.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/visibilitysettings.js
MD5: 1f6d120c92d4c7e6c41cc4368b09ebac
SHA1: 9cdf600708312b16e2d9eadd26aea32da1ffc7d2
SHA256:50fe2d4678259193d90aae7c481487d02566b4c92ba3ca4d7c2cf13c9e345250
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: zoomer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/zoomer.js
MD5: 9292c505ec54cc329a2c2f0dc6612a43
SHA1: 724665a18dfc42d5fb8ba99a8010022de75bfccd
SHA256:d9d4db5a4a662a0887793825308e350047a54dc41810200c7ffb732c57a61f1c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### filter.area.zip: filter.area.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.area.zip/filter.area.jar
MD5: 7a8c0150cc73f0da2e0c5ec6ad47fcee
SHA1: ef1c8c22aa24807caca314932fcb4dfc5c0afb63
SHA256:e6c378f0d26d47e324ca2e407b3b87905d30472ace6d3429b5e1ad3e62a7e0d4
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.area | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:38 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.area | High
Product | jar | package name | area | Highest
Product | jar | package name | area | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:38 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.area | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.area | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### filter.baselinetable.zip: filter.baselinetable.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.baselinetable.zip/filter.baselinetable.jar
MD5: 20d9e70081890c6f20c73eee861de1ba
SHA1: 035d25b8de509d6225020a13f8d52a440abe9d7d
SHA256:927ffa28cb74ab869ba980425208e7a2fd50a19244a643b4f6d83523cfd9ef34
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.baselinetable | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:36 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.baselinetable | High
Product | jar | package name | baselinetable | Highest
Product | jar | package name | baselinetable | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:36 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.baselinetable | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.baselinetable | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### filter.cmappatch.zip: filter.cmappatch.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.cmappatch.zip/filter.cmappatch.jar
MD5: fe4fc3dc1697e241fdeff09e034d33ae
SHA1: 8a60edc717dd408890e4076200e52f53c497157b
SHA256:cb1396310cb00930350153ccba7a98e664e05795813de4d075bbe00e80f0a188
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.cmappatch | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:33 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.cmappatch | High
Product | jar | package name | cmappatch | Highest
Product | jar | package name | cmappatch | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:33 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.cmappatch | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.cmappatch | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### filter.headerfooter.zip: filter.headerfooter.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.headerfooter.zip/filter.headerfooter.jar
MD5: d00ab31426c6d7b5cdca5c975d562137
SHA1: 5764591e34886a894cafb503886c41c354ce9b1c
SHA256:10ddb2bfc64e501eb4f37d7d81c8978701116d175005d6fce20e11026af1cf22
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.headerfooter | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:36 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.headerfooter | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | headerfooter | Highest
Product | jar | package name | headerfooter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:36 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.headerfooter | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.headerfooter | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### filter.hiderotation.zip: filter.hiderotation.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.hiderotation.zip/filter.hiderotation.jar
MD5: 6bef36a13f674d85cdfb55cc0033b37d
SHA1: ea9e58e02edd117e3f0f7ea1a6bf735dec3197fe
SHA256:57d5042bcf089732df23b786cc4f4a1082501bab72b6731eab958adc8b9a3c6c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.hiderotation | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:31 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.hiderotation | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | hiderotation | Highest
Product | jar | package name | hiderotation | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:31 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.hiderotation | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.hiderotation | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### filter.invisibleelements.zip: filter.invisibleelements.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.invisibleelements.zip/filter.invisibleelements.jar
MD5: 43c6c143cd05e951ea54fad882a1b7ee
SHA1: babec59d4fbe698eb677d7506374e2344c8cae19
SHA256:ed2ad85197e89cad7d27c4f1adaa895c70274f9316211ad51da9f4669ac47472
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.invisibleelements | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:32 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.invisibleelements | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | invisibleelements | Highest
Product | jar | package name | invisibleelements | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:32 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.invisibleelements | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.invisibleelements | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### filter.multicolumn.zip: filter.multicolumn.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.multicolumn.zip/filter.multicolumn.jar
MD5: 1e2cd1f2345a4dd009004c2eda1ce284
SHA1: c2b8bda2e0411b5f1c4e84f673bc487a742a44d5
SHA256:a7400ced5ad8a6b30354561859e481eab69bc483ae1ffea48097ead500d5ae2c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.multicolumn | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:32 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.multicolumn | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | multicolumn | Highest
Product | jar | package name | multicolumn | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:32 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.multicolumn | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.multicolumn | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### filter.ocr.zip: filter.ocr.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.ocr.zip/filter.ocr.jar
MD5: fea8ba3d02d824fc83e12a0186b391c4
SHA1: 4b2d5eda1bba43ab4f41ceb8d150091c108faf3a
SHA256:8b5e1a40fe5efc1f93df9cee6814f6417e6438327d31d908e0ca9bddfdfa0404
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.ocr | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:32 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.ocr | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | ocr | Highest
Product | jar | package name | ocr | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:32 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.ocr | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.ocr | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### filter.pagerange.zip: filter.pagerange.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.pagerange.zip/filter.pagerange.jar
MD5: 395ff7e1eb4ea71f5d9415ccb316af2d
SHA1: e28d83fd02e2dd90c9f5937048687e8a874b4102
SHA256:6654a1ccd6c61229bcc6deb90c240d813179d3ed2ae5629fa94258895c3a2f2d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.pagerange | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:36 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.pagerange | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | page | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:36 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.pagerange | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.pagerange | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### filter.regex.zip: filter.regex.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.regex.zip/filter.regex.jar
MD5: bc92815db5baba18da017bcfc083921a
SHA1: e0120000849368612d7873c03373b26e6fce69ab
SHA256:29071753cb963dd639ad5f86b87ca6316765a070e024bd807fa10d43371bca87
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.regex | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:36 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.regex | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | regex | Highest
Product | jar | package name | regex | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:36 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.regex | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.regex | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### filter.regex.zip: filter.regex.jar: filterrenderer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.regex.zip/filter.regex.jar/com/inet/pdfc/filter/regex/structure/filterrenderer.js
MD5: fed6198a818efccd3e71fac743e61c3f
SHA1: dc6d579196c5b147daac7e14e034e2b004ca36f2
SHA256:87b3e46faf43504c51e1ad9407e3d6c17a3bcd8170c14ea7df3b1f4282275442
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### filter.texttransform.zip: filter.texttransform.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.texttransform.zip/filter.texttransform.jar
MD5: 7341980fcac8ccd6dc79d7272080bd16
SHA1: 78ede61181b8a287e0d9dbe7ea00658a7347b855
SHA256:d73b606229391ab156f02e8727c753effab86c13b68a96a234d69758441b4781
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.texttransform | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:35 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.texttransform | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | texttransform | Highest
Product | jar | package name | texttransform | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:35 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.texttransform | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.texttransform | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### filter.urllookup.zip: filter.urllookup.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.urllookup.zip/filter.urllookup.jar
MD5: 746f5f9d1875ef1ece63e468408b94b4
SHA1: d2688d2accd1b4c4074cc860fad6d37706763b2b
SHA256:01ae4b72660c71c7b670f8ff19af2cf1c0a4ce6a1bf7b472cc6de8ba216622fd
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.urllookup | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:39 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.urllookup | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | urllookup | Highest
Product | jar | package name | urllookup | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:39 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.urllookup | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.urllookup | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### hamcrest-3.0.jar

License:

    BSD-3-Clause

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.hamcrest/hamcrest/3.0/8fd9b78a8e6a6510a078a9e30e9e86a6035cfaf7/hamcrest-3.0.jar
MD5: 781023c38b054e9cf1c818c77895e1eb
SHA1: 8fd9b78a8e6a6510a078a9e30e9e86a6035cfaf7
SHA256:5d66b6a4a680755cb6ed7cb104fa7835ef644667586ff0737adeb977c39ecdbc
Referenced In Project/Scope: standalone:inetPlugin
hamcrest-3.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | hamcrest | High
Vendor | gradle | artifactid | hamcrest | Highest
Vendor | gradle | groupid | org.hamcrest | Highest
Vendor | jar | package name | hamcrest | Highest
Vendor | jar | package name | hamcrest | Low
Vendor | Manifest | automatic-module-name | org.hamcrest | Medium
Vendor | Manifest | bundle-symbolicname | org.hamcrest | Medium
Vendor | Manifest | Implementation-Vendor | hamcrest.org | High
Product | file | name | hamcrest | High
Product | gradle | artifactid | hamcrest | Highest
Product | jar | package name | hamcrest | Highest
Product | Manifest | automatic-module-name | org.hamcrest | Medium
Product | Manifest | Bundle-Name | org.hamcrest | Medium
Product | Manifest | bundle-symbolicname | org.hamcrest | Medium
Product | Manifest | Implementation-Title | hamcrest | High
Version | file | version | 3.0 | High
Version | Manifest | Implementation-Version | 3.0 | High

#### Identifiers

- pkg:maven/org.hamcrest/hamcrest@3.0 (Confidence:Highest)

### inetcore-25.10-tools.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/25.10/19f2cc4355bcb3ecfb37b2a69c7374664aa0efeb/inetcore-25.10-tools.jar
MD5: 3e75f6af5e3e43fea404d7689626b759
SHA1: 19f2cc4355bcb3ecfb37b2a69c7374664aa0efeb
SHA256:37173495d86b6774b5d9c5227ad23fa32838b11576c3e1814e98d769375f2df1
Referenced In Project/Scope: standalone:inetPlugin
inetcore-25.10-tools.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | inetcore | High
Vendor | gradle | artifactid | inetcore | Highest
Vendor | gradle | groupid | shared | Highest
Vendor | jar | package name | test | Low
Product | file | name | inetcore | High
Product | gradle | artifactid | inetcore | Highest
Version | file | name | inetcore | Medium
Version | file | version | 25.10 | High
Version | gradle | version | 25.10 | Highest

#### Identifiers

- pkg:maven/shared/inetcore@25.10 (Confidence:Highest)

### inetcore-25.10.jar (shaded: com.inet.shared:inetcore:null)

Description:

    A blend composite defines the rule according to which a drawing primitive (known as the source) is mixed with existing graphics (know as the destination.)

    ColorUtilities contains a set of tools to perform common color operations easily.

License:

    LGPL: http://www.gnu.org/licenses/lgpl.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/25.10/9b550204bc3d74708af2bb6d5b25da821364cd7c/inetcore-25.10.jar/META-INF/com/inet/shared/utils/BlendComposite/pom.xml
MD5: 15e3963148212192804e2b1a2b73ad1c
SHA1: 1095ba4522949a04590ab9c98b7f684e92579ef9
SHA256:e5556987ad0b1ede84a994741147dadf6de0cb7d80b845f530e2a96505b79151
Referenced In Project/Scope: standalone:inetPlugin

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | inetcore | Low
Vendor | pom | developer email | contact@inetsoftware.de | Low
Vendor | pom | developer email | morgand@apache.org | Low
Vendor | pom | developer id | inetsoftware | Medium
Vendor | pom | developer id | romainguy | Medium
Vendor | pom | developer id | sun | Medium
Vendor | pom | developer name | i-net /// software | Medium
Vendor | pom | developer name | Romain Guy | Medium
Vendor | pom | developer name | Sun | Medium
Vendor | pom | developer org | Sun | Medium
Vendor | pom | groupid | com.inet.shared | Highest
Vendor | pom | name | BlendComposite and ColorUtilities | High
Vendor | pom (hint) | developer id | oracle | Medium
Vendor | pom (hint) | developer name | oracle | Medium
Vendor | pom (hint) | developer org | oracle | Medium
Product | pom | artifactid | inetcore | Highest
Product | pom | developer email | contact@inetsoftware.de | Low
Product | pom | developer email | morgand@apache.org | Low
Product | pom | developer id | inetsoftware | Low
Product | pom | developer id | romainguy | Low
Product | pom | developer id | sun | Low
Product | pom | developer name | i-net /// software | Low
Product | pom | developer name | Romain Guy | Low
Product | pom | developer name | Sun | Low
Product | pom | developer org | Sun | Low
Product | pom | groupid | com.inet.shared | Highest
Product | pom | name | BlendComposite and ColorUtilities | High

#### Identifiers

- None

### inetcore-25.10.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/25.10/9b550204bc3d74708af2bb6d5b25da821364cd7c/inetcore-25.10.jar
MD5: d5f5b662f2619ce8b4c1c8897b2eb091
SHA1: 9b550204bc3d74708af2bb6d5b25da821364cd7c
SHA256:188ce99e31bd7509457c80d2e6919837e267752b6adc1d51dccc53c2a734c36f
Referenced In Project/Scope: standalone:inetPlugin
inetcore-25.10.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | inetcore | High
Vendor | gradle | artifactid | inetcore | Highest
Vendor | gradle | groupid | shared | Highest
Vendor | jar | package name | i | Highest
Vendor | jar | package name | inet | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 12:32 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | shared | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | inetcore | High
Product | gradle | artifactid | inetcore | Highest
Product | jar | package name | permissions | Highest
Product | jar | package name | shared | Highest
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 12:32 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | shared | Low
Product | Manifest | Implementation-Title | inetcore | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | inetcore | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | file | name | inetcore | Medium
Version | file | version | 25.10 | High
Version | gradle | version | 25.10 | Highest
Version | jar | package name | permissions | Highest
Version | jar | package name | shared | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- pkg:maven/shared/inetcore@25.10 (Confidence:Highest)

### java-21-jre-x64-linux.tar.gz: java-21-jre-x64-linux.tar: jrt-fs.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/java-21-jre-x64-linux.tar.gz/java-21-jre-x64-linux.tar/jre-11/lib/jrt-fs.jar
MD5: 276de9c23c2c16d354492597c6b9832f
SHA1: 266df3de8a88656fe28e132bc6dbdbe2cc724b20
SHA256:494c3d85ab7e8758d5fff4f168ad11817ded6c48409c8056803bb72f589b4abb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jrt-fs | High
Vendor | jar | package name | internal | Low
Vendor | jar | package name | jdk | Low
Vendor | jar | package name | jimage | Low
Vendor | Manifest | Implementation-Vendor | Eclipse Adoptium | High
Vendor | Manifest | specification-vendor | Oracle Corporation | Low
Product | file | name | jrt-fs | High
Product | jar | package name | internal | Low
Product | jar | package name | jimage | Low
Product | Manifest | Implementation-Title | Java Runtime Environment | High
Product | Manifest | specification-title | Java Platform API Specification | Medium
Version | Manifest | Implementation-Version | 21.0.9 | High

#### Identifiers

- cpe:2.3:a:eclipse:platform:21.0.9:*:*:*:*:*:*:* (Confidence:Medium)

### jcip-annotations-1.0.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/net.jcip/jcip-annotations/1.0/afba4942caaeaf46aab0b976afd57cc7c181467e/jcip-annotations-1.0.jar
MD5: 9d5272954896c5a5d234f66b7372b17a
SHA1: afba4942caaeaf46aab0b976afd57cc7c181467e
SHA256:be5805392060c71474bf6c9a67a099471274d30b83eef84bfc4e0889a4f1dcc0
Referenced In Project/Scope: standalone:inetPlugin
jcip-annotations-1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.14

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jcip-annotations | High
Vendor | gradle | artifactid | jcip-annotations | Highest
Vendor | gradle | groupid | net.jcip | Highest
Vendor | jar | package name | annotations | Low
Vendor | jar | package name | jcip | Low
Vendor | jar | package name | net | Low
Product | file | name | jcip-annotations | High
Product | gradle | artifactid | jcip-annotations | Highest
Product | jar | package name | annotations | Low
Product | jar | package name | jcip | Low
Version | file | name | jcip-annotations | Medium
Version | file | version | 1.0 | High
Version | gradle | version | 1.0 | Highest

#### Identifiers

- pkg:maven/net.jcip/jcip-annotations@1.0 (Confidence:Highest)

### jlessc-1.14.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/de.inetsoftware/jlessc/1.14/5b2789630acdc41bab5c86da8937ffef3811a3c3/jlessc-1.14.jar
MD5: 73ef6dc09f0efda918ffcf67677ad2b0
SHA1: 5b2789630acdc41bab5c86da8937ffef3811a3c3
SHA256:5445ebb2231d943301b977e2b30451fc704835ea9b5f96fa64618c608938cb52
Referenced In Project/Scope: standalone:inetPlugin
jlessc-1.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jlessc | High
Vendor | gradle | artifactid | jlessc | Highest
Vendor | gradle | groupid | de.inetsoftware | Highest
Vendor | jar | package name | inet | Low
Vendor | jar | package name | less | Low
Vendor | jar | package name | lib | Low
Vendor | Manifest | automatic-module-name | de.inetsoftware.jlessc | Medium
Vendor | Manifest | bundle-symbolicname | de.inetsoftware.jlessc | Medium
Vendor | Manifest | Implementation-Vendor | i-net software GmbH, Berlin, Germany | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Product | file | name | jlessc | High
Product | gradle | artifactid | jlessc | Highest
Product | jar | package name | less | Low
Product | jar | package name | lib | Low
Product | Manifest | automatic-module-name | de.inetsoftware.jlessc | Medium
Product | Manifest | bundle-symbolicname | de.inetsoftware.jlessc | Medium
Product | Manifest | Implementation-Title | JLessC, a Less CSS compiler | High
Version | file | version | 1.14 | High
Version | Manifest | Implementation-Version | 1.14 | High

#### Identifiers

- pkg:maven/de.inetsoftware/jlessc@1.14 (Confidence:Highest)

### jsr305-3.0.2.jar

Description:

    JSR305 Annotations for Findbugs

License:

    The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/jsr305/3.0.2/25ea2e8b0c338a877313bd4672d3fe056ea78f0d/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: standalone:inetPlugin
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.14

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jsr305 | High
Vendor | gradle | artifactid | jsr305 | Highest
Vendor | gradle | groupid | com.google.code.findbugs | Highest
Vendor | Manifest | bundle-symbolicname | org.jsr-305 | Medium
Vendor | pom | artifactid | jsr305 | Low
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-jsr305 | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | file | name | jsr305 | High
Product | gradle | artifactid | jsr305 | Highest
Product | Manifest | Bundle-Name | FindBugs-jsr305 | Medium
Product | Manifest | bundle-symbolicname | org.jsr-305 | Medium
Product | pom | artifactid | jsr305 | Highest
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-jsr305 | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | file | version | 3.0.2 | High
Version | gradle | version | 3.0.2 | Highest
Version | Manifest | Bundle-Version | 3.0.2 | High
Version | pom | version | 3.0.2 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

### junit-4.13.2.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/junit/junit/4.13.2/8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12/junit-4.13.2.jar
MD5: d98a9a02a99a9acd22d7653cbcc1f31f
SHA1: 8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12
SHA256:8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3
Referenced In Project/Scope: standalone:inetPlugin
junit-4.13.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit | High
Vendor | gradle | artifactid | junit | Highest
Vendor | gradle | groupid | junit | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | Manifest | automatic-module-name | junit | Medium
Vendor | Manifest | implementation-url | http://junit.org | Low
Vendor | Manifest | Implementation-Vendor | JUnit | High
Vendor | Manifest | Implementation-Vendor-Id | junit | Medium
Product | file | name | junit | High
Product | gradle | artifactid | junit | Highest
Product | jar | package name | junit | Highest
Product | Manifest | automatic-module-name | junit | Medium
Product | Manifest | Implementation-Title | JUnit | High
Product | Manifest | implementation-url | http://junit.org | Low
Version | file | version | 4.13.2 | High
Version | Manifest | Implementation-Version | 4.13.2 | High

#### Identifiers

- pkg:maven/junit/junit@4.13.2 (Confidence:Highest)
- cpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:* (Confidence:Highest)

### junit-jupiter-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter/5.13.4/93547b3eca48a61f65f735c1898d3ec196e34149/junit-jupiter-5.13.4.jar
MD5: 3f4e38bdbea73c98a50f08b7c6e33426
SHA1: 93547b3eca48a61f65f735c1898d3ec196e34149
SHA256:b960f79217dd01c863031b678f07df4730bbf1eac650c74ad6b0c61faad78379
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/pdfc/standalone@25.10
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter | High
Vendor | gradle | artifactid | junit-jupiter | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | module-info | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-jupiter | High
Product | gradle | artifactid | junit-jupiter | Highest
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter (Aggregator) | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter | Medium
Product | Manifest | Implementation-Title | junit-jupiter | High
Product | Manifest | specification-title | junit-jupiter | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4 (Confidence:Highest)

### junit-jupiter-api-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-api/5.13.4/2817f736551fe4949b79924715ef6f594ee072f4/junit-jupiter-api-5.13.4.jar
MD5: d9981621212d598a4ba380342094c92f
SHA1: 2817f736551fe4949b79924715ef6f594ee072f4
SHA256:d1bb81abfd9e03418306b4e6a3390c8db52c58372e749c2980ac29f0c08278f1
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-api-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-api | High
Vendor | gradle | artifactid | junit-jupiter-api | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | api | Highest
Vendor | jar | package name | api | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-api | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-jupiter-api | High
Product | gradle | artifactid | junit-jupiter-api | Highest
Product | jar | package name | api | Highest
Product | jar | package name | api | Low
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter API | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-api | Medium
Product | Manifest | Implementation-Title | junit-jupiter-api | High
Product | Manifest | specification-title | junit-jupiter-api | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-api@5.13.4 (Confidence:Highest)

### junit-jupiter-engine-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-engine/5.13.4/d29fc8b6a28d21b8741f299ae4deb3e3aa68b2e8/junit-jupiter-engine-5.13.4.jar
MD5: 3416ff6cff3dd4ea789b92338a49b9b2
SHA1: d29fc8b6a28d21b8741f299ae4deb3e3aa68b2e8
SHA256:027404a92fe618b72465792a257951495c503a7d5751e2791e0f51c87f67f5bc
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-engine-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/pdfc/standalone@25.10
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-engine | High
Vendor | gradle | artifactid | junit-jupiter-engine | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.13.4" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-jupiter-engine | High
Product | gradle | artifactid | junit-jupiter-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter Engine | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-engine | Medium
Product | Manifest | Implementation-Title | junit-jupiter-engine | High
Product | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.13.4" | Low
Product | Manifest | specification-title | junit-jupiter-engine | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4 (Confidence:Highest)

### junit-jupiter-params-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-params/5.13.4/c8930eb7fcfbed0b191703ab53f48475a75bd17/junit-jupiter-params-5.13.4.jar
MD5: a1db21cc54b627a085918626a3908c9e
SHA1: 0c8930eb7fcfbed0b191703ab53f48475a75bd17
SHA256:3a8c6365716dbb698c0d49a05456c1e1ad05c406613c550f9dd50037872efc41
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-params-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-params | High
Vendor | gradle | artifactid | junit-jupiter-params | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | jar | package name | params | Highest
Vendor | jar | package name | params | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-params | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-jupiter-params | High
Product | gradle | artifactid | junit-jupiter-params | Highest
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | jar | package name | params | Highest
Product | jar | package name | params | Low
Product | jar | package name | shadow | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter Params | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-params | Medium
Product | Manifest | Implementation-Title | junit-jupiter-params | High
Product | Manifest | specification-title | junit-jupiter-params | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-params@5.13.4 (Confidence:Highest)

### junit-platform-commons-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-commons/1.13.4/8f63c7ed05b473d95cc63d1082054d7bfcf9c0e5/junit-platform-commons-1.13.4.jar
MD5: 7c39b85780e5bec0a23408959ac83fa9
SHA1: 8f63c7ed05b473d95cc63d1082054d7bfcf9c0e5
SHA256:1c25ca641ebaae44ff3ad21ca1b2ef68d0dd84bfeb07c4805ba7840899b77408
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-commons-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-commons | High
Vendor | gradle | artifactid | junit-platform-commons | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | commons | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | org | Highest
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-commons | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | multi-release | true | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-commons | High
Product | gradle | artifactid | junit-platform-commons | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | commons | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Commons | Medium
Product | Manifest | bundle-symbolicname | junit-platform-commons | Medium
Product | Manifest | Implementation-Title | junit-platform-commons | High
Product | Manifest | multi-release | true | Low
Product | Manifest | specification-title | junit-platform-commons | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-commons@1.13.4 (Confidence:Highest)

### junit-platform-engine-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-engine/1.13.4/cdd49063ae6e25494d1a9a08f4a9ab5de2b73bcb/junit-platform-engine-1.13.4.jar
MD5: 736aa9e83f7ba2b54adb5f86821fd4dd
SHA1: cdd49063ae6e25494d1a9a08f4a9ab5de2b73bcb
SHA256:390c5f77b84283a64b644f88251b397e0b0debb80bdcc50f899881aecff43a5a
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-engine-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-engine | High
Vendor | gradle | artifactid | junit-platform-engine | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-engine | High
Product | gradle | artifactid | junit-platform-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | support | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Engine API | Medium
Product | Manifest | bundle-symbolicname | junit-platform-engine | Medium
Product | Manifest | Implementation-Title | junit-platform-engine | High
Product | Manifest | specification-title | junit-platform-engine | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-engine@1.13.4 (Confidence:Highest)

### junit-platform-launcher-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-launcher/1.13.4/e72a4d00af6177569fd57df4c8c4bb241c6aa4b6/junit-platform-launcher-1.13.4.jar
MD5: bdfea9c8c038752c70631934b2067073
SHA1: e72a4d00af6177569fd57df4c8c4bb241c6aa4b6
SHA256:0b0beaeb6880a31149641d2d848b863712885469670c12099586d7f798522564
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-launcher-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-launcher | High
Vendor | gradle | artifactid | junit-platform-launcher | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | launcher | Highest
Vendor | jar | package name | launcher | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-launcher | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.13.4" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-launcher | High
Product | gradle | artifactid | junit-platform-launcher | Highest
Product | jar | package name | junit | Highest
Product | jar | package name | launcher | Highest
Product | jar | package name | launcher | Low
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Launcher | Medium
Product | Manifest | bundle-symbolicname | junit-platform-launcher | Medium
Product | Manifest | Implementation-Title | junit-platform-launcher | High
Product | Manifest | provide-capability | org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.13.4" | Low
Product | Manifest | specification-title | junit-platform-launcher | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-launcher@1.13.4 (Confidence:Highest)

### junit-platform-suite-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite/1.13.4/7af47cc4d0fbbd9a940644799a69f1f4c3ec4ee7/junit-platform-suite-1.13.4.jar
MD5: 378c01f6aba4143235fcd78ee5e1490f
SHA1: 7af47cc4d0fbbd9a940644799a69f1f4c3ec4ee7
SHA256:8088a80b47f5a7e73fa107f466dfa6a86776ca496fc2e7724aba65202d467913
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/pdfc/standalone@25.10
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite | High
Vendor | gradle | artifactid | junit-platform-suite | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | module-info | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-suite | High
Product | gradle | artifactid | junit-platform-suite | Highest
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite (Aggregator) | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite | Medium
Product | Manifest | Implementation-Title | junit-platform-suite | High
Product | Manifest | specification-title | junit-platform-suite | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4 (Confidence:Highest)

### junit-platform-suite-api-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-api/1.13.4/7e29167859b8b66ae9bc60f63f33202b1c8b77e3/junit-platform-suite-api-1.13.4.jar
MD5: 53ff3dfddb5bc864217e7442ca0a8243
SHA1: 7e29167859b8b66ae9bc60f63f33202b1c8b77e3
SHA256:9a05bf77e128371f5b3e25ffc89f7af467a9f68dd365fdfced469ebcf533abc9
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-api-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-api | High
Vendor | gradle | artifactid | junit-platform-suite-api | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | api | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-api | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-suite-api | High
Product | gradle | artifactid | junit-platform-suite-api | Highest
Product | jar | package name | api | Highest
Product | jar | package name | api | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite API | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-api | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-api | High
Product | Manifest | specification-title | junit-platform-suite-api | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-api@1.13.4 (Confidence:Highest)

### junit-platform-suite-commons-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-commons/1.13.4/65f946a08a21ddecb266dd3010977111bbc84043/junit-platform-suite-commons-1.13.4.jar
MD5: ecab6fa371485191490729865ca59fba
SHA1: 65f946a08a21ddecb266dd3010977111bbc84043
SHA256:e7dacfcfa3bc692c0a7a413cefd5f51ae420415a14d39091bdf88aebfdba70b6
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-commons-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-commons | High
Vendor | gradle | artifactid | junit-platform-suite-commons | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-commons | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-suite-commons | High
Product | gradle | artifactid | junit-platform-suite-commons | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | commons | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite Commons | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-commons | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-commons | High
Product | Manifest | specification-title | junit-platform-suite-commons | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-commons@1.13.4 (Confidence:Highest)

### junit-platform-suite-engine-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-engine/1.13.4/b888a7a9e00b25cc19b4d45dbd4dcfe0b3a4f6ca/junit-platform-suite-engine-1.13.4.jar
MD5: 69e03866f05f55ea65268adc36fa3fc0
SHA1: b888a7a9e00b25cc19b4d45dbd4dcfe0b3a4f6ca
SHA256:3b34fd8172d70d0d7c59155e487bd8e77d43bdbfdcfe1d78c2b4eea55e9acb92
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-engine-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-engine | High
Vendor | gradle | artifactid | junit-platform-suite-engine | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-suite-engine | High
Product | gradle | artifactid | junit-platform-suite-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite Engine | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-engine | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-engine | High
Product | Manifest | specification-title | junit-platform-suite-engine | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-engine@1.13.4 (Confidence:Highest)

### junit-vintage-engine-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.vintage/junit-vintage-engine/5.13.4/9fa3f512a7b8de3013eb63e51623c9e73f8d0e34/junit-vintage-engine-5.13.4.jar
MD5: 77270af1c5e9ea55a3705683f261eddd
SHA1: 9fa3f512a7b8de3013eb63e51623c9e73f8d0e34
SHA256:066b702d850ebcde36f2a8181b46a2f0f1416129d1dc63c3a1e1531006e74739
Referenced In Project/Scope: standalone:inetPlugin
junit-vintage-engine-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/pdfc/standalone@25.10
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-vintage-engine | High
Vendor | gradle | artifactid | junit-vintage-engine | Highest
Vendor | gradle | groupid | org.junit.vintage | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | vintage | Highest
Vendor | jar | package name | vintage | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-vintage-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.13.4" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-vintage-engine | High
Product | gradle | artifactid | junit-vintage-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | vintage | Highest
Product | jar | package name | vintage | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Vintage Engine | Medium
Product | Manifest | bundle-symbolicname | junit-vintage-engine | Medium
Product | Manifest | Implementation-Title | junit-vintage-engine | High
Product | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.13.4" | Low
Product | Manifest | specification-title | junit-vintage-engine | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.vintage/junit-vintage-engine@5.13.4 (Confidence:Highest)

### maintenance.pdfc.zip: maintenance.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar
MD5: 5129ad97fef7455fc92b3797aa29f29b
SHA1: 221fab5938e685e228ded62687028fc7ef88131a
SHA256:c8bcdf0b44494a3133a4a998162e53b3c4924cda0812fee2f23ce319f31d3ffa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | maintenance.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugins | Low
Vendor | Manifest | built-date | 2025-12-01 16:32 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | maintenance.pdfc | High
Product | jar | package name | maintenance | Highest
Product | jar | package name | maintenance | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugins | Low
Product | Manifest | built-date | 2025-12-01 16:32 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | maintenance.pdfc | High
Product | Manifest | specification-title | maintenance.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### maintenance.pdfc.zip: maintenance.pdfc.jar: app.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar/com/inet/pdfc/plugins/maintenance/server/comparisons/js/app.js
MD5: 5e534fcce6f689d176c6f3b40fc4454f
SHA1: e5f82942adf62444636d28e904add7c61a18ea32
SHA256:d08c1c9da221cbd9c38a26e0235b0da7c3bed4ab30f504aa741d4085a42f7294
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### maintenance.pdfc.zip: maintenance.pdfc.jar: comparisons.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar/com/inet/pdfc/plugins/maintenance/server/comparisons/js/comparisons.js
MD5: dc34a947f1122f6f845deb82b822f15c
SHA1: 7a1528b00bb5229be98689b8c465b37c39bfa0ff
SHA256:27b0ebba3a0c757e921cb562be691ee971fa06d1247423ff2c16f71d87d51bee
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### ocr.tesseract.zip: commons-logging.jar

Description:

    Apache Commons Logging is a thin adapter allowing configurable bridging to other,
        well-known logging systems.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/commons-logging.jar
MD5: e7a1e7cb6a89241ed9bfec4c25b6c645
SHA1: b9fc14968d63a8b8a8a2c1885fe3e90564239708
SHA256:bc2dfe32f1ef06509e6a065144c1adf7b420eabf11a87f30bd127f8faa332016
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | commons-logging | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | logging | Highest
Vendor | Manifest | automatic-module-name | org.apache.commons.logging | Medium
Vendor | Manifest | build-jdk-spec | 17 | Low
Vendor | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-logging/ | Low
Vendor | Manifest | bundle-symbolicname | org.apache.commons.commons-logging | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | multi-release | true | Low
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | commons-logging | Low
Vendor | pom | developer email | baliuka@apache.org | Low
Vendor | pom | developer email | costin@apache.org | Low
Vendor | pom | developer email | craigmcc@apache.org | Low
Vendor | pom | developer email | dennisl@apache.org | Low
Vendor | pom | developer email | donaldp@apache.org | Low
Vendor | pom | developer email | ggregory at apache.org | Low
Vendor | pom | developer email | morgand@apache.org | Low
Vendor | pom | developer email | rdonkin@apache.org | Low
Vendor | pom | developer email | rsitze@apache.org | Low
Vendor | pom | developer email | rwaldhoff@apache.org | Low
Vendor | pom | developer email | sanders@apache.org | Low
Vendor | pom | developer email | skitching@apache.org | Low
Vendor | pom | developer email | tn@apache.org | Low
Vendor | pom | developer id | baliuka | Medium
Vendor | pom | developer id | bstansberry | Medium
Vendor | pom | developer id | costin | Medium
Vendor | pom | developer id | craigmcc | Medium
Vendor | pom | developer id | dennisl | Medium
Vendor | pom | developer id | donaldp | Medium
Vendor | pom | developer id | ggregory | Medium
Vendor | pom | developer id | morgand | Medium
Vendor | pom | developer id | rdonkin | Medium
Vendor | pom | developer id | rsitze | Medium
Vendor | pom | developer id | rwaldhoff | Medium
Vendor | pom | developer id | sanders | Medium
Vendor | pom | developer id | skitching | Medium
Vendor | pom | developer id | tn | Medium
Vendor | pom | developer name | Brian Stansberry | Medium
Vendor | pom | developer name | Costin Manolache | Medium
Vendor | pom | developer name | Craig McClanahan | Medium
Vendor | pom | developer name | Dennis Lundberg | Medium
Vendor | pom | developer name | Gary Gregory | Medium
Vendor | pom | developer name | Juozas Baliuka | Medium
Vendor | pom | developer name | Morgan Delagrange | Medium
Vendor | pom | developer name | Peter Donald | Medium
Vendor | pom | developer name | Richard Sitze | Medium
Vendor | pom | developer name | Robert Burrell Donkin | Medium
Vendor | pom | developer name | Rodney Waldhoff | Medium
Vendor | pom | developer name | Scott Sanders | Medium
Vendor | pom | developer name | Simon Kitching | Medium
Vendor | pom | developer name | Thomas Neidhart | Medium
Vendor | pom | developer org | Apache | Medium
Vendor | pom | developer org | The Apache Software Foundation | Medium
Vendor | pom | developer org URL | https://www.apache.org/ | Medium
Vendor | pom | groupid | commons-logging | Highest
Vendor | pom | name | Apache Commons Logging | High
Vendor | pom | parent-artifactid | commons-parent | Low
Vendor | pom | parent-groupid | org.apache.commons | Medium
Vendor | pom | url | https://commons.apache.org/proper/commons-logging/ | Highest
Product | file | name | commons-logging | High
Product | jar | package name | apache | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | logging | Highest
Product | Manifest | automatic-module-name | org.apache.commons.logging | Medium
Product | Manifest | build-jdk-spec | 17 | Low
Product | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-logging/ | Low
Product | Manifest | Bundle-Name | Apache Commons Logging | Medium
Product | Manifest | bundle-symbolicname | org.apache.commons.commons-logging | Medium
Product | Manifest | Implementation-Title | Apache Commons Logging | High
Product | Manifest | multi-release | true | Low
Product | Manifest | specification-title | Apache Commons Logging | Medium
Product | pom | artifactid | commons-logging | Highest
Product | pom | developer email | baliuka@apache.org | Low
Product | pom | developer email | costin@apache.org | Low
Product | pom | developer email | craigmcc@apache.org | Low
Product | pom | developer email | dennisl@apache.org | Low
Product | pom | developer email | donaldp@apache.org | Low
Product | pom | developer email | ggregory at apache.org | Low
Product | pom | developer email | morgand@apache.org | Low
Product | pom | developer email | rdonkin@apache.org | Low
Product | pom | developer email | rsitze@apache.org | Low
Product | pom | developer email | rwaldhoff@apache.org | Low
Product | pom | developer email | sanders@apache.org | Low
Product | pom | developer email | skitching@apache.org | Low
Product | pom | developer email | tn@apache.org | Low
Product | pom | developer id | baliuka | Low
Product | pom | developer id | bstansberry | Low
Product | pom | developer id | costin | Low
Product | pom | developer id | craigmcc | Low
Product | pom | developer id | dennisl | Low
Product | pom | developer id | donaldp | Low
Product | pom | developer id | ggregory | Low
Product | pom | developer id | morgand | Low
Product | pom | developer id | rdonkin | Low
Product | pom | developer id | rsitze | Low
Product | pom | developer id | rwaldhoff | Low
Product | pom | developer id | sanders | Low
Product | pom | developer id | skitching | Low
Product | pom | developer id | tn | Low
Product | pom | developer name | Brian Stansberry | Low
Product | pom | developer name | Costin Manolache | Low
Product | pom | developer name | Craig McClanahan | Low
Product | pom | developer name | Dennis Lundberg | Low
Product | pom | developer name | Gary Gregory | Low
Product | pom | developer name | Juozas Baliuka | Low
Product | pom | developer name | Morgan Delagrange | Low
Product | pom | developer name | Peter Donald | Low
Product | pom | developer name | Richard Sitze | Low
Product | pom | developer name | Robert Burrell Donkin | Low
Product | pom | developer name | Rodney Waldhoff | Low
Product | pom | developer name | Scott Sanders | Low
Product | pom | developer name | Simon Kitching | Low
Product | pom | developer name | Thomas Neidhart | Low
Product | pom | developer org | Apache | Low
Product | pom | developer org | The Apache Software Foundation | Low
Product | pom | developer org URL | https://www.apache.org/ | Low
Product | pom | groupid | commons-logging | Highest
Product | pom | name | Apache Commons Logging | High
Product | pom | parent-artifactid | commons-parent | Medium
Product | pom | parent-groupid | org.apache.commons | Medium
Product | pom | url | https://commons.apache.org/proper/commons-logging/ | Medium
Version | Manifest | Bundle-Version | 1.3.4 | High
Version | Manifest | Implementation-Version | 1.3.4 | High
Version | pom | parent-version | 1.3.4 | Low
Version | pom | version | 1.3.4 | Highest

#### Identifiers

- pkg:maven/commons-logging/commons-logging@1.3.4 (Confidence:High)

### ocr.tesseract.zip: fontbox.jar

Description:

        The Apache FontBox library is an open source Java tool to obtain low level information
        from font files. FontBox is a subproject of Apache PDFBox.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/fontbox.jar
MD5: 76fe707f08787cd215f287da48ed7e1b
SHA1: b4a068e1dba2b9832a108cdf6e9a3249680e3ce8
SHA256:e8a62be2df27a0d44191b6669c0b18df6efe5271232db8dcb8745d5d9774755b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | fontbox | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | fontbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.fontbox | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Vendor | Manifest | bundle-symbolicname | org.apache.pdfbox.fontbox | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | fontbox | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache FontBox | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Vendor | pom | url | http://pdfbox.apache.org/ | Highest
Product | file | name | fontbox | High
Product | jar | package name | apache | Highest
Product | jar | package name | fontbox | Highest
Product | Manifest | automatic-module-name | org.apache.fontbox | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Product | Manifest | Bundle-Name | Apache FontBox | Medium
Product | Manifest | bundle-symbolicname | org.apache.pdfbox.fontbox | Medium
Product | Manifest | Implementation-Title | Apache FontBox | High
Product | Manifest | specification-title | Apache FontBox | Medium
Product | pom | artifactid | fontbox | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache FontBox | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Product | pom | url | http://pdfbox.apache.org/ | Medium
Version | Manifest | Bundle-Version | 3.0.5 | High
Version | Manifest | Implementation-Version | 3.0.5 | High
Version | pom | version | 3.0.5 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/fontbox@3.0.5 (Confidence:High)

### ocr.tesseract.zip: jai-imageio-core.jar

Description:

        Java Advanced Imaging Image I/O Tools API core, but without the classes
        involved with javax.media.jai dependencies, JPEG2000 or
        codecLibJIIO, meaning that this library can be distributed under the
        modified BSD license and should be GPL compatible.

License:

    BSD 3-clause License w/nuclear disclaimer: LICENSE.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jai-imageio-core.jar
MD5: 6978d733bfb55c0a82639f724fe5f3bb
SHA1: fb6d79b929556362a241b2f65a04e538062f0077
SHA256:8ad3c68e9efffb10ac87ff8bc589adf64b04a729c5194c079efd0643607fd72a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jai-imageio-core | High
Vendor | jar | package name | github | Highest
Vendor | Manifest | bundle-docurl | https://github.com/jai-imageio/ | Low
Vendor | Manifest | bundle-symbolicname | jai-imageio-core | Medium
Vendor | Manifest | extension-name | com.github.jai-imageio-jai-imageio-core | Medium
Vendor | Manifest | Implementation-Vendor | https://github.com/jai-imageio/ jai-imageio GitHub group | High
Vendor | Manifest | specification-vendor | Sun Microsystems, Inc. | Low
Vendor | Manifest | url | https://github.com/jai-imageio/jai-imageio-core | Low
Vendor | pom | artifactid | jai-imageio-core | Low
Vendor | pom | developer email | stian@s11.no | Low
Vendor | pom | developer name | Stian Soiland-Reyes | Medium
Vendor | pom | developer org | s11 | Medium
Vendor | pom | developer org URL | http://s11.no/ | Medium
Vendor | pom | groupid | com.github.jai-imageio | Highest
Vendor | pom | name | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Vendor | pom | organization name | jai-imageio GitHub group | High
Vendor | pom | organization url | jai-imageio/ | Medium
Vendor | pom | url | jai-imageio/jai-imageio-core | Highest
Product | file | name | jai-imageio-core | High
Product | jar | package name | github | Highest
Product | Manifest | bundle-docurl | https://github.com/jai-imageio/ | Low
Product | Manifest | Bundle-Name | Java Advanced Imaging Image I/O Tools API core (standalone) | Medium
Product | Manifest | bundle-symbolicname | jai-imageio-core | Medium
Product | Manifest | extension-name | com.github.jai-imageio-jai-imageio-core | Medium
Product | Manifest | Implementation-Title | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Product | Manifest | specification-title | Java Advanced Imaging | Medium
Product | Manifest | url | https://github.com/jai-imageio/jai-imageio-core | Low
Product | pom | artifactid | jai-imageio-core | Highest
Product | pom | developer email | stian@s11.no | Low
Product | pom | developer name | Stian Soiland-Reyes | Low
Product | pom | developer org | s11 | Low
Product | pom | developer org URL | http://s11.no/ | Low
Product | pom | groupid | com.github.jai-imageio | Highest
Product | pom | name | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Product | pom | organization name | jai-imageio GitHub group | Low
Product | pom | url | jai-imageio/ | High
Product | pom | url | jai-imageio/jai-imageio-core | High
Version | Manifest | Bundle-Version | 1.4.0 | High
Version | Manifest | Implementation-Version | 1.4.0 | High
Version | pom | version | 1.4.0 | Highest

#### Identifiers

- pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0 (Confidence:High)

### ocr.tesseract.zip: jbig2-imageio.jar

Description:

    	Java Image I/O plugin for reading JBIG2-compressed image data.
    	Formerly known as the levigo JBig2 ImageIO plugin (com.levigo.jbig2:levigo-jbig2-imageio).

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jbig2-imageio.jar
MD5: c51f45dc3d29bbf716774f9ff9e95ad6
SHA1: ad09a9bb94ea791ea81fb6c5bc2b13dd77872598
SHA256:29cb2951622f10acf61fd0656c4e6fa5562194a9095f7a1d26aa426e2f6b17eb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jbig2-imageio | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | image | Highest
Vendor | jar | package name | jbig2 | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Vendor | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | Implementation-Vendor-Id | org.apache.pdfbox | Medium
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | jbig2-imageio | Low
Vendor | pom | developer id | adam | Medium
Vendor | pom | developer id | blitchfield | Medium
Vendor | pom | developer id | carrier | Medium
Vendor | pom | developer id | danielwilson | Medium
Vendor | pom | developer id | gbailleul | Medium
Vendor | pom | developer id | hennejg | Medium
Vendor | pom | developer id | holdersn | Medium
Vendor | pom | developer id | jahewson | Medium
Vendor | pom | developer id | jeremias | Medium
Vendor | pom | developer id | jukka | Medium
Vendor | pom | developer id | kjackson | Medium
Vendor | pom | developer id | koch | Medium
Vendor | pom | developer id | koehlecn | Medium
Vendor | pom | developer id | lehmi | Medium
Vendor | pom | developer id | leleueri | Medium
Vendor | pom | developer id | mmayer | Medium
Vendor | pom | developer id | msayhoun | Medium
Vendor | pom | developer id | pkoch | Medium
Vendor | pom | developer id | tallison | Medium
Vendor | pom | developer id | tboehme | Medium
Vendor | pom | developer id | tchojecki | Medium
Vendor | pom | developer id | tilman | Medium
Vendor | pom | developer id | vfed | Medium
Vendor | pom | developer name | Adam Nichols | Medium
Vendor | pom | developer name | Andreas Lehmkühler | Medium
Vendor | pom | developer name | Ben Litchfield | Medium
Vendor | pom | developer name | Brian Carrier | Medium
Vendor | pom | developer name | Carolin Köhler | Medium
Vendor | pom | developer name | Daniel Wilson | Medium
Vendor | pom | developer name | Eric Leleu | Medium
Vendor | pom | developer name | Guillaume Bailleul | Medium
Vendor | pom | developer name | Jeremias Maerki | Medium
Vendor | pom | developer name | Johannes Koch | Medium
Vendor | pom | developer name | John Hewson | Medium
Vendor | pom | developer name | Jukka Zitting | Medium
Vendor | pom | developer name | Jörg Henne | Medium
Vendor | pom | developer name | Kevin Jackson | Medium
Vendor | pom | developer name | Maruan Sayhoun | Medium
Vendor | pom | developer name | Matthäus Mayer | Medium
Vendor | pom | developer name | Phillipp Koch | Medium
Vendor | pom | developer name | Sebastian Holder | Medium
Vendor | pom | developer name | Thomas Chojecki | Medium
Vendor | pom | developer name | Tilman Hausherr | Medium
Vendor | pom | developer name | Tim Allison | Medium
Vendor | pom | developer name | Timo Boehme | Medium
Vendor | pom | developer name | Villu Ruusmann | Medium
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | PDFBox JBIG2 ImageIO plugin | High
Vendor | pom | organization name | The Apache Software Foundation | High
Vendor | pom | organization url | http://pdfbox.apache.org | Medium
Vendor | pom | parent-artifactid | apache | Low
Vendor | pom | parent-groupid | org.apache | Medium
Product | file | name | jbig2-imageio | High
Product | jar | package name | apache | Highest
Product | jar | package name | image | Highest
Product | jar | package name | jbig2 | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Product | Manifest | Implementation-Title | PDFBox JBIG2 ImageIO plugin | High
Product | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Product | Manifest | specification-title | PDFBox JBIG2 ImageIO plugin | Medium
Product | pom | artifactid | jbig2-imageio | Highest
Product | pom | developer id | adam | Low
Product | pom | developer id | blitchfield | Low
Product | pom | developer id | carrier | Low
Product | pom | developer id | danielwilson | Low
Product | pom | developer id | gbailleul | Low
Product | pom | developer id | hennejg | Low
Product | pom | developer id | holdersn | Low
Product | pom | developer id | jahewson | Low
Product | pom | developer id | jeremias | Low
Product | pom | developer id | jukka | Low
Product | pom | developer id | kjackson | Low
Product | pom | developer id | koch | Low
Product | pom | developer id | koehlecn | Low
Product | pom | developer id | lehmi | Low
Product | pom | developer id | leleueri | Low
Product | pom | developer id | mmayer | Low
Product | pom | developer id | msayhoun | Low
Product | pom | developer id | pkoch | Low
Product | pom | developer id | tallison | Low
Product | pom | developer id | tboehme | Low
Product | pom | developer id | tchojecki | Low
Product | pom | developer id | tilman | Low
Product | pom | developer id | vfed | Low
Product | pom | developer name | Adam Nichols | Low
Product | pom | developer name | Andreas Lehmkühler | Low
Product | pom | developer name | Ben Litchfield | Low
Product | pom | developer name | Brian Carrier | Low
Product | pom | developer name | Carolin Köhler | Low
Product | pom | developer name | Daniel Wilson | Low
Product | pom | developer name | Eric Leleu | Low
Product | pom | developer name | Guillaume Bailleul | Low
Product | pom | developer name | Jeremias Maerki | Low
Product | pom | developer name | Johannes Koch | Low
Product | pom | developer name | John Hewson | Low
Product | pom | developer name | Jukka Zitting | Low
Product | pom | developer name | Jörg Henne | Low
Product | pom | developer name | Kevin Jackson | Low
Product | pom | developer name | Maruan Sayhoun | Low
Product | pom | developer name | Matthäus Mayer | Low
Product | pom | developer name | Phillipp Koch | Low
Product | pom | developer name | Sebastian Holder | Low
Product | pom | developer name | Thomas Chojecki | Low
Product | pom | developer name | Tilman Hausherr | Low
Product | pom | developer name | Tim Allison | Low
Product | pom | developer name | Timo Boehme | Low
Product | pom | developer name | Villu Ruusmann | Low
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | PDFBox JBIG2 ImageIO plugin | High
Product | pom | organization name | The Apache Software Foundation | Low
Product | pom | organization url | http://pdfbox.apache.org | Low
Product | pom | parent-artifactid | apache | Medium
Product | pom | parent-groupid | org.apache | Medium
Version | Manifest | Implementation-Version | 3.0.4 | High
Version | pom | parent-version | 3.0.4 | Low
Version | pom | version | 3.0.4 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4 (Confidence:High)
- cpe:2.3:a:apache:pdfbox:3.0.4:*:*:*:*:*:*:* (Confidence:Highest)

### ocr.tesseract.zip: jboss-vfs.jar

Description:

    A VFS library

License:

    Apache License 2.0: http://repository.jboss.org/licenses/apache-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jboss-vfs.jar
MD5: ecf3234794d1b7d03dc1eb5380328e04
SHA1: 748b9f156f35bf63ead9887f040cfc48af18f7f0
SHA256:33a84eac3f1027551146247e3ef4057dc8840cfc8cd436cb2f925b6f5d2126e9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jboss-vfs | High
Vendor | jar | package name | jboss | Highest
Vendor | jar | package name | vfs | Highest
Vendor | Manifest | automatic-module-name | org.jboss.vfs | Medium
Vendor | Manifest | build-jdk-spec | 11 | Low
Vendor | Manifest | implementation-url | http://www.jboss.org | Low
Vendor | Manifest | Implementation-Vendor | JBoss, A division of Red Hat, Inc | High
Vendor | Manifest | specification-vendor | JBoss, A division of Red Hat, Inc | Low
Vendor | pom | artifactid | jboss-vfs | Low
Vendor | pom | groupid | org.jboss | Highest
Vendor | pom | name | JBoss VFS | High
Vendor | pom | organization name | JBoss, A division of Red Hat, Inc | High
Vendor | pom | organization url | http://www.jboss.org | Medium
Vendor | pom | parent-artifactid | jboss-parent | Low
Vendor | pom | url | http://www.jboss.org | Highest
Product | file | name | jboss-vfs | High
Product | jar | package name | jboss | Highest
Product | jar | package name | vfs | Highest
Product | Manifest | automatic-module-name | org.jboss.vfs | Medium
Product | Manifest | build-jdk-spec | 11 | Low
Product | Manifest | Implementation-Title | JBoss VFS | High
Product | Manifest | implementation-url | http://www.jboss.org | Low
Product | Manifest | specification-title | JBoss VFS | Medium
Product | pom | artifactid | jboss-vfs | Highest
Product | pom | groupid | org.jboss | Highest
Product | pom | name | JBoss VFS | High
Product | pom | organization name | JBoss, A division of Red Hat, Inc | Low
Product | pom | organization url | http://www.jboss.org | Low
Product | pom | parent-artifactid | jboss-parent | Medium
Product | pom | url | http://www.jboss.org | Medium
Version | Manifest | Implementation-Version | 3.3.2.Final | High
Version | pom | parent-version | 3.3.2.Final | Low
Version | pom | version | 3.3.2.Final | Highest

#### Identifiers

- pkg:maven/org.jboss/jboss-vfs@3.3.2.Final (Confidence:High)

### ocr.tesseract.zip: jna.jar

Description:

    JNA Library

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar
MD5: 9bb1338e58031463c300f643cb3c41fa
SHA1: d9c6794f22c2e3c846b02d51c6a95c304e8e056b
SHA256:336f2ae25222389eb9f3c90f8f7c3a6258c33581964b2338bf836b3b865b049e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jna | High
Vendor | jar | package name | jna | Highest
Vendor | jar | package name | jna | Low
Vendor | jar | package name | sun | Highest
Vendor | jar | package name | sun | Low
Vendor | jar (hint) | package name | oracle | Highest
Vendor | jar (hint) | package name | oracle | Low
Vendor | Manifest | automatic-module-name | com.sun.jna | Medium
Vendor | Manifest | bundle-activationpolicy | lazy | Low
Vendor | Manifest | bundle-category | jni | Low
Vendor | Manifest | bundle-nativecode | com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 | Low
Vendor | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.6 | Low
Vendor | Manifest | bundle-symbolicname | com.sun.jna | Medium
Vendor | Manifest | Implementation-Vendor | JNA Development Team | High
Vendor | Manifest | specification-vendor | JNA Development Team | Low
Product | file | name | jna | High
Product | jar | package name | jna | Highest
Product | jar | package name | jna | Low
Product | jar | package name | library | Highest
Product | jar | package name | native | Highest
Product | jar | package name | sun | Highest
Product | jar | package name | win32 | Highest
Product | Manifest | automatic-module-name | com.sun.jna | Medium
Product | Manifest | bundle-activationpolicy | lazy | Low
Product | Manifest | bundle-category | jni | Low
Product | Manifest | Bundle-Name | jna | Medium
Product | Manifest | bundle-nativecode | com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 | Low
Product | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.6 | Low
Product | Manifest | bundle-symbolicname | com.sun.jna | Medium
Product | Manifest | Implementation-Title | com.sun.jna | High
Product | Manifest | specification-title | Java Native Access (JNA) | Medium
Version | jar | package name | jna | Highest
Version | jar | package name | sun | Highest
Version | jar | package name | win32 | Highest
Version | Manifest | Bundle-Version | 5.14.0 | High
Version | Manifest | Implementation-Version | 5.14.0 (b0) | High

#### Identifiers

- cpe:2.3:a:oracle:java_se:5.14.0:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: f6bef568e690d361a5dcc165f5ad4b1f
SHA1: 05638a4aaafa689a6c246530823afdc18d3fd438
SHA256:b9d1479b9619b7ece4a36b6ae31365ffaf15a1355d4f6da02f8b5f09df2fa82f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 719d6ba1946c25aa61ce82f90d77ffd5
SHA1: 94d2191378cac5719daecc826fc116816284c406
SHA256:69c45175ecfd25af023f96ac0bb2c45e6a95e3ba8a5a50ee7969ccab14825c44
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: e15183ef9c6c255b76fda73d01ca7ecb
SHA1: f816f998c43204230d9ea3eecffb5f8372a32c2e
SHA256:38650a0612730c52580c9f32ff766b44b1c5a426d52e7dd7a53687bf3389ac2c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: lept4j.jar

Description:

            # Lept4J

            ## Description:

            A Java JNA wrapper for Leptonica Image Processing library.

            Lept4J is released and distributed under the Apache License, v2.0.

License:

    Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar
MD5: 70889e28b7569dd54e7da9ced01dabdf
SHA1: ec69d554f05e030b5e06295a4d39057634759549
SHA256:5feb69a8fc9550809b23cb980270cdf99368dea330ba7d98789e2dc93f8bef6f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | lept4j | High
Vendor | jar | package name | lept4j | Highest
Vendor | jar | package name | leptonica | Highest
Vendor | jar | package name | net | Highest
Vendor | jar | package name | sourceforge | Highest
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | pom | artifactid | lept4j | Low
Vendor | pom | developer email | nguyenq@users.sf.net | Low
Vendor | pom | developer name | Quan Nguyen | Medium
Vendor | pom | groupid | net.sourceforge.lept4j | Highest
Vendor | pom | name | Lept4J - Leptonica for Java | High
Vendor | pom | url | nguyenq/lept4j | Highest
Product | file | name | lept4j | High
Product | jar | package name | lept4j | Highest
Product | jar | package name | leptonica | Highest
Product | jar | package name | net | Highest
Product | jar | package name | sourceforge | Highest
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | pom | artifactid | lept4j | Highest
Product | pom | developer email | nguyenq@users.sf.net | Low
Product | pom | developer name | Quan Nguyen | Low
Product | pom | groupid | net.sourceforge.lept4j | Highest
Product | pom | name | Lept4J - Leptonica for Java | High
Product | pom | url | nguyenq/lept4j | High
Version | pom | version | 1.19.1 | Highest

#### Identifiers

- pkg:maven/net.sourceforge.lept4j/lept4j@1.19.1 (Confidence:High)

### ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar/win32-x86-64/libleptonica1841.dll
MD5: 981b8e38e33018fff693c8e3ec0f2254
SHA1: 91a9cd0a874d614bc8a8946d2e0a8573e8b96ac1
SHA256:0b2cb584baeb38b90033344b4d70830b33ba01396fb9142b9b733e83c8a73fb8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libleptonica1841 | High
Product | file | name | libleptonica1841 | High
Version | file | name | libleptonica1841 | Medium
Version | file | version | 1841 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar/win32-x86/libleptonica1841.dll
MD5: 64f0634192bcf75ade5ea06f8119512d
SHA1: b387acaa5209f796fb3065395548d2adcbad620e
SHA256:405e5263b72cb7d63c723fd85a124201cd66aa9a983b3a1c1e4c82003c91bcaa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libleptonica1841 | High
Product | file | name | libleptonica1841 | High
Version | file | name | libleptonica1841 | Medium
Version | file | version | 1841 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: ocr.tesseract.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/ocr.tesseract.jar
MD5: d1e927d3f0020236fb00faf7ef22fbbe
SHA1: 589132cd846c2b4052ae47268f536f16c4939e15
SHA256:f9a6615afe08cd5b650c9011b77462006b990d9d999ac8119b2ff2e8ad8f69d4
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | ocr.tesseract | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | ocr | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:33 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | ocr.tesseract | High
Product | jar | package name | ocr | Highest
Product | jar | package name | ocr | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | tesseract | Highest
Product | jar | package name | tesseract | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:33 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | ocr.tesseract | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | ocr.tesseract | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:tesseract_ocr_project:tesseract_ocr:25.10.259:*:*:*:*:*:*:* (Confidence:Low)
- cpe:2.3:a:tesseract_project:tesseract:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: pdfbox.jar

Description:

            The Apache PDFBox library is an open source Java tool for working with PDF documents.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox.jar
MD5: f6ae0d983002caad75515488a3091dab
SHA1: c34109061c3a0d85d871d9edc469ac0682f81856
SHA256:f0e5d3a1e573c707e4fbcc2ee8e42ea8ca1d5261bdcb3a05a08d2118553c1e5a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfbox | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Vendor | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | pdfbox | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache PDFBox | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Product | file | name | pdfbox | High
Product | jar | package name | apache | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Product | Manifest | Bundle-Name | Apache PDFBox | Medium
Product | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Product | Manifest | Implementation-Title | Apache PDFBox | High
Product | Manifest | specification-title | Apache PDFBox | Medium
Product | pom | artifactid | pdfbox | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache PDFBox | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Version | Manifest | Bundle-Version | 3.0.5 | High
Version | Manifest | Implementation-Version | 3.0.5 | High
Version | pom | version | 3.0.5 | Highest

#### Related Dependencies

- ocr.tesseract.zip: pdfbox-debugger.jar
  - File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox-debugger.jar
  - MD5: d55d7e2d0ad7790c653e4ea136faa569
  - SHA1: 750d08a268dc586f71fb6d8af484b07be9372eb3
  - SHA256: 39719096b2af98c856ec083f0818938e8ab18ec2be85a2a525e46a65b36f570d
  - pkg:maven/org.apache.pdfbox/pdfbox-debugger@3.0.5

#### Identifiers

- pkg:maven/org.apache.pdfbox/pdfbox@3.0.5 (Confidence:High)
- cpe:2.3:a:apache:pdfbox:3.0.5:*:*:*:*:*:*:* (Confidence:Highest)

### ocr.tesseract.zip: tess4j.jar

Description:

            # Tess4J

            ## Description:

            A Java JNA wrapper for Tesseract OCR API.

            Tess4J is released and distributed under the Apache License, v2.0.

            ## Features:

            The library provides optical character recognition (OCR) support for:

            TIFF, JPEG, GIF, PNG, and BMP image formats
            Multi-page TIFF images
            PDF document format

License:

    Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar
MD5: f6a0f08fbc08771303e5cb8dffbc949a
SHA1: 851d6f93d97a155d8831736ad1031a539946014e
SHA256:e65bcc6328ab575684038d45e1891fa48e0d8255097a628baee0d8cfeb5ea816
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | tess4j | High
Vendor | jar | package name | net | Highest
Vendor | jar | package name | recognition | Highest
Vendor | jar | package name | sourceforge | Highest
Vendor | jar | package name | tess4j | Highest
Vendor | jar | package name | tesseract | Highest
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | implementation-url | http://tess4j.sourceforge.net | Low
Vendor | Manifest | Implementation-Vendor | Tess4J | High
Vendor | Manifest | specification-vendor | Tess4J | Low
Vendor | pom | artifactid | tess4j | Low
Vendor | pom | developer email | nguyenq@users.sf.net | Low
Vendor | pom | developer email | osoriojaques@gmail.com | Low
Vendor | pom | developer name | O.J. Sousa Rodrigues | Medium
Vendor | pom | developer name | Quan Nguyen | Medium
Vendor | pom | groupid | net.sourceforge.tess4j | Highest
Vendor | pom | name | Tess4J - Tesseract for Java | High
Vendor | pom | organization name | Tess4J | High
Vendor | pom | organization url | http://tess4j.sourceforge.net | Medium
Vendor | pom | url | http://tess4j.sourceforge.net | Highest
Product | file | name | tess4j | High
Product | jar | package name | net | Highest
Product | jar | package name | recognition | Highest
Product | jar | package name | sourceforge | Highest
Product | jar | package name | tess4j | Highest
Product | jar | package name | tesseract | Highest
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | Implementation-Title | Tess4J - Tesseract for Java | High
Product | Manifest | implementation-url | http://tess4j.sourceforge.net | Low
Product | Manifest | specification-title | Tess4J - Tesseract for Java | Medium
Product | pom | artifactid | tess4j | Highest
Product | pom | developer email | nguyenq@users.sf.net | Low
Product | pom | developer email | osoriojaques@gmail.com | Low
Product | pom | developer name | O.J. Sousa Rodrigues | Low
Product | pom | developer name | Quan Nguyen | Low
Product | pom | groupid | net.sourceforge.tess4j | Highest
Product | pom | name | Tess4J - Tesseract for Java | High
Product | pom | organization name | Tess4J | Low
Product | pom | organization url | http://tess4j.sourceforge.net | Low
Product | pom | url | http://tess4j.sourceforge.net | Medium
Version | Manifest | Implementation-Version | 5.12.0 | High
Version | pom | version | 5.12.0 | Highest

#### Identifiers

- pkg:maven/net.sourceforge.tess4j/tess4j@5.12.0 (Confidence:High)
- cpe:2.3:a:tesseract_project:tesseract:5.12.0:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: tess4j.jar: libtesseract541.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar/win32-x86-64/libtesseract541.dll
MD5: 1246c1e50200dc43722e926e28fc7c03
SHA1: d8a78040e9c7c71ccaeb627b73c41c66a18b5157
SHA256:8180efb176e09b7218144fe69d84c0cf6b6187e20d8529f1138bd77396d6f4fa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libtesseract541 | High
Product | file | name | libtesseract541 | High
Version | file | name | libtesseract541 | Medium
Version | file | version | 541 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: tess4j.jar: libtesseract541.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar/win32-x86/libtesseract541.dll
MD5: cbf57c8eb12e95512e67638f344ae537
SHA1: 5531d539121fd0aa57d11febd2e8b2a5c13fca05
SHA256:d4d1843d9efeeec1ca53c4ebe6d39e22e5bf17f5bee8b9eedb3bcef7c3c8c84d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libtesseract541 | High
Product | file | name | libtesseract541 | High
Version | file | name | libtesseract541 | Medium
Version | file | version | 541 | Medium

#### Identifiers

- None

### opentest4j-1.3.0.jar

License:

    The Apache License, Version 2.0

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.opentest4j/opentest4j/1.3.0/152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e/opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256:48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Project/Scope: standalone:inetPlugin
opentest4j-1.3.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | opentest4j | High
Vendor | gradle | artifactid | opentest4j | Highest
Vendor | gradle | groupid | org.opentest4j | Highest
Vendor | jar | package name | opentest4j | Highest
Vendor | jar | package name | opentest4j | Low
Vendor | Manifest | build-date | 2023-07-06 | Low
Vendor | Manifest | build-revision | 214973bfa4e7e9be7d04e623202cc4147c7036d2 | Low
Vendor | Manifest | build-time | 14:25:06.116+0200 | Low
Vendor | Manifest | bundle-symbolicname | org.opentest4j | Medium
Vendor | Manifest | Implementation-Vendor | opentest4j.org | High
Vendor | Manifest | specification-vendor | opentest4j.org | Low
Product | file | name | opentest4j | High
Product | gradle | artifactid | opentest4j | Highest
Product | jar | package name | opentest4j | Highest
Product | Manifest | build-date | 2023-07-06 | Low
Product | Manifest | build-revision | 214973bfa4e7e9be7d04e623202cc4147c7036d2 | Low
Product | Manifest | build-time | 14:25:06.116+0200 | Low
Product | Manifest | Bundle-Name | opentest4j | Medium
Product | Manifest | bundle-symbolicname | org.opentest4j | Medium
Product | Manifest | Implementation-Title | opentest4j | High
Product | Manifest | specification-title | opentest4j | Medium
Version | file | version | 1.3.0 | High
Version | Manifest | Implementation-Version | 1.3.0 | High

#### Identifiers

- pkg:maven/org.opentest4j/opentest4j@1.3.0 (Confidence:Highest)

### parser.image.zip: parser.image.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.image.zip/parser.image.jar
MD5: 18f006b811bf2de6b7137569ebb5b295
SHA1: c6dd0b00f0b8058c0ad883cc8412493aa42a4eaf
SHA256:d76365f099ae07b06a1a3faaee84a4c8dbf6e3ac05e936d77398dd610893db9b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.image | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:31 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.image | High
Product | jar | package name | imageparser | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugin | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:31 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.image | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.image | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### parser.pdf.config.zip: parser.pdf.config.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.pdf.config.zip/parser.pdf.config.jar
MD5: 82e77b4f3a14dc9b7301eb6c1b28cd07
SHA1: 9295cf3d9e8eb6dd4564a6be29cc3f48c46448d9
SHA256:f896d82cf9529c2fb88abca79e2ed21755a034eaad1c789dbe551a5a61d27a92
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.pdf.config | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:31 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.pdf.config | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | pdfparserconfig | Low
Product | jar | package name | plugin | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:31 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.pdf.config | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.pdf.config | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### parser.text.zip: parser.text.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.text.zip/parser.text.jar
MD5: c8a748e4dd640f09b66fd5cdfd66febb
SHA1: 41633d5ced64708d36c3a44568ee0ce7109d38d7
SHA256:bfde338096770b164909344f958628e5d44bea24afa2dc1150d23cc9e8cee274
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.text | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:31 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.text | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugin | Low
Product | jar | package name | textparser | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:31 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.text | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.text | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.standalone.zip: pdfc.standalone.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar
MD5: f249ae59994f20d3f27590a6f74523f0
SHA1: 9211bb02d8a7d661a3434c233813e586bf13849b
SHA256:b3c59e87e237010de3c51a8380c0dbecd37cd3ac6ccaea8d978f1995c9687945
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc.standalone | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | standalone | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:39 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfc.standalone | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | standalone | Highest
Product | jar | package name | standalone | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:39 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfc.standalone | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfc.standalone | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.standalone.zip: pdfc.standalone.jar: bridge.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridge.js
MD5: 93a24df267249dca305f5af83c047f48
SHA1: 2690836189ad0dd3715568d15b8bba5a3a9fbc93
SHA256:b17c61dcfca7e59009ebe3e57ec254ad68c2dc080d9a194d867a185902e6a433
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: bridgeConfig.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridgeConfig.js
MD5: 50c7b33549870b71c25e22443829ba78
SHA1: 0a50eb333055885b58537a1463009c6d321ca110
SHA256:7ba9c85404a965c72b736350b26b97bef813b9e523081ed2bf1f9b7303ba0ce4
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: bridgePDFC.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridgePDFC.js
MD5: 918410e4e9590ab87b5ca1ea983ebdf1
SHA1: 422e9fa020147687e2c79fa87f8d7ac23d964df1
SHA256:3d95bb11030e08751e23f02d299b19e2c8db823a14217bdc0cea034a1e23199d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: extraMenu.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/extraMenu.js
MD5: 76f716ef25759cac5242607c7d46afab
SHA1: ffd9728b1116de8148c96cb1aac069abc994692f
SHA256:0f2b1cc0136aacbc57993ce598a490e36849a34cdaccea15f213b1f2410fc002
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: removeHeader.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/removeHeader.js
MD5: 6155f56ea46454fd9b26ec029b07cb4c
SHA1: fdbb377d77e7a33fccd3e56eda617da18a45af3c
SHA256:7f74294ea3dd2d4561aadf5deb9e1436af5cd08d3f53754b8c2e2321ddad3687
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: removePDFCElements.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/removePDFCElements.js
MD5: cf23507d05d2a8f690f9489d131e7de7
SHA1: bff6a66569787ecf08f314c176220be0ef16f86c
SHA256:3d2d7526c75020284374f9298157f8fb7d0c37d38d079cffda17b94f9b73690a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: theme.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/theme.js
MD5: 9ee2557b2355cd5367ad7b7cdf3505e2
SHA1: 6a8e3c4a8964395018faac989bbbd37abf148cd3
SHA256:0acc32f71a37d0f0f7485be6746f688e449df07e6db3b5ad01973ad7fc3aa53a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: translation.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/translation.js
MD5: 087098ce4993357914ab7ee2ca130bc0
SHA1: b77b0d98a5a98b3a5c9317333f29c0c18d36d86e
SHA256:26eb8ace7faad440f3aedd47c1c3f6c1603fe7b150213ad32a4251d1226a3895
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:collate:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/collate/pom.xml
MD5: 992a39f99fe3dc15c118ae48dbd677b7
SHA1: 464299894060cb85408673b5a0c114bd198452ad
SHA256:1d2b90273cc853edcc755cf6e0dd5315c22bb0adacbc01c79bc437d2fcac402f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | collate | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | collate | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/collate@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:core:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/core/pom.xml
MD5: 502c9d2f06cf62c5ac285bab7809991f
SHA1: bc36a1f957d482728432241bcb57d8a658380a08
SHA256:f206b5ca5da0270f41d189f2ea4fa21378ccf84636a9b5ae95c36020df3b650a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | core | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | core | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/core@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:currdata:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/currdata/pom.xml
MD5: c135b97d469b8ccf8d9c956167c9f430
SHA1: 64f64417795107669e127461da338cf4a0d0bf69
SHA256:c189ab6128f84d96348f1fd05ac60fbb8be783c628be71b0549a90f8222f7440
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | currdata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | currdata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/currdata@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:langdata:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/langdata/pom.xml
MD5: 4bf78b2e96a7103d760c462eec229e1d
SHA1: 5cbfae9d81b33328d9957a04537f9b1cea94a9d3
SHA256:d135a2d4bcd4ffe15c7f4950083be429ea611b7eb991f79ba9efd1aa28d519aa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | langdata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | langdata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/langdata@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:regiondata:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/regiondata/pom.xml
MD5: 82587df137f511ae93d6a1c1eb3a6b85
SHA1: dab45b6568a01e28324a83ef144817fda24d6f7a
SHA256:063896c31cded4ded5e25fa43026cc0cb5f78cbf5ab7a2d433a96f69d25c7e3d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | regiondata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | regiondata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/regiondata@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:translit:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/translit/pom.xml
MD5: 16f6a16e682ddf80814caf2f4786a3f7
SHA1: f28c6551ff41ed52a8f758a32e561d60ff8b0aec
SHA256:74354d4b8cc7c3cc5d37cc8c934ef902ccf6e78ac20b9e629b5dd4536edac5a9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | translit | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | translit | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/translit@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar

Description:

    International Components for Unicode for Java (ICU4J) is a mature, widely used Java library
        providing Unicode and Globalization support

License:

    Unicode-3.0: https://raw.githubusercontent.com/unicode-org/icu/maint/maint-77/LICENSE

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar
MD5: 3e8d6fc9877483a0699efa1843b92326
SHA1: 38693cf0b1d7362a8b726af74dc06026a7c23809
SHA256:b3640b9f416a4411fd33c59abbeea8fd57d024c23e1819bf9673220a97499fe3
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | icu4j | High
Vendor | file (hint) | name | icu-project | High
Vendor | file (hint) | name | unicode | High
Vendor | jar | package name | ibm | Highest
Vendor | jar | package name | icu | Highest
Vendor | Manifest | automatic-module-name | com.ibm.icu | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-copyright | © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html | Low
Vendor | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low
Vendor | Manifest | bundle-symbolicname | com.ibm.icu | Medium
Vendor | Manifest | Implementation-Vendor | Unicode, Inc. | High
Vendor | Manifest | Implementation-Vendor-Id | org.unicode | Medium
Vendor | pom | artifactid | icu4j | Low
Vendor | pom | developer id | markusicu | Medium
Vendor | pom | developer id | richgillam | Medium
Vendor | pom | developer name | Markus Scherer | Medium
Vendor | pom | developer name | Richard Gillam | Medium
Vendor | pom | developer org | Google | Medium
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | name | ICU4J | High
Vendor | pom | url | https://icu.unicode.org/ | Highest
Vendor | pom (hint) | artifactid | icu-project | Low
Vendor | pom (hint) | artifactid | unicode | Low
Vendor | pom (hint) | name | icu-project | High
Vendor | pom (hint) | name | unicode | High
Product | file | name | icu4j | High
Product | hint analyzer | product | international_components_for_unicode | Highest
Product | jar | package name | ibm | Highest
Product | jar | package name | icu | Highest
Product | Manifest | automatic-module-name | com.ibm.icu | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-copyright | © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html | Low
Product | Manifest | Bundle-Name | ICU4J | Medium
Product | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low
Product | Manifest | bundle-symbolicname | com.ibm.icu | Medium
Product | Manifest | Implementation-Title | International Components for Unicode for Java | High
Product | Manifest | specification-title | International Components for Unicode for Java | Medium
Product | pom | artifactid | icu4j | Highest
Product | pom | developer id | markusicu | Low
Product | pom | developer id | richgillam | Low
Product | pom | developer name | Markus Scherer | Low
Product | pom | developer name | Richard Gillam | Low
Product | pom | developer org | Google | Low
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | name | ICU4J | High
Product | pom | url | https://icu.unicode.org/ | Medium
Version | Manifest | Bundle-Version | 77.1 | High
Version | Manifest | Implementation-Version | 77.1 | High
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/icu4j@77.1 (Confidence:High)
- cpe:2.3:a:icu-project:international_components_for_unicode:77.1:*:*:*:*:*:*:* (Confidence:Low)
- cpe:2.3:a:unicode:international_components_for_unicode:77.1:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.zip: pdfc-javadoc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar
MD5: d9ccf6d418ae17fa49ca3e58f26c3216
SHA1: 36aa327f28ac2fa17476a67cc0b9dc4b1eb349d2
SHA256:5daaffffdcd89f50173bc7d62b5aa66b4a99fb4809ea2def3f1c7ed0f1b8fc4c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc-javadoc | High
Product | file | name | pdfc-javadoc | High

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: jquery-3.7.1.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-dir/jquery-3.7.1.min.js
MD5: 2c872dbe60f4ba70fb85356113d8b35e
SHA1: ee48592d1fff952fcf06ce0b666ed4785493afdc
SHA256:fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-dir/jquery-ui.min.js
MD5: a443ef25e4d347d30d3222a401f9ae54
SHA1: 47c18aebea0d1116f19b279134e50c9f0d381405
SHA256:a6c0904499f1efeef05641bd28fd7c73785e60f69ce9c699daf65af8b3720703
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: member-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/member-search-index.js
MD5: 6b0d6c845b62b81d696f7a43af181584
SHA1: f74a3e9265358bdea3995af040606c885ac0e922
SHA256:fbf37a555a8f7b84d00249055e409779700ff5623d8f34ec963d7b3515218d53
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: module-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/module-search-index.js
MD5: a33da0f469acbd03f77bf407bac505f5
SHA1: 1e996ce630c6e1ada3ea86d7b71dabca0180f8e8
SHA256:814a05983e3267d591c7e62b314eb8eb0504eee844c8a70d494f6edbaa0f4f18
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: package-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/package-search-index.js
MD5: 704b175752fd9646f0b53f0630993ec3
SHA1: ab8c6e78cec3f37d42bae22d017bbb92b736d663
SHA256:e85fb555ff19b3ac1934c0188d4e33f4443ddc4cd557c7dee9b6de5a0a952a05
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: script.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script.js
MD5: 33752b38a1be87b6104cf5bdd7ffc6a9
SHA1: e3aa5200cbabd88c6e041e081e31c037127197b6
SHA256:cbcc9c6530d4b8243436efb89516537f3d6b3a4eceaa0e6256c57bdb8ddb544d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: search.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/search.js
MD5: cb277f670590ffec20a12745260518dc
SHA1: 4b222ef8d1c52e1ce5ceb40a3b5c1fb9cad01eca
SHA256:47c74de257f7e407a21e5d22519b664cfa1c83d04c362bff466c8424b702d31f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: tag-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/tag-search-index.js
MD5: 95810a7878ddd3f49d938eb6b5c0f1b2
SHA1: 4d0358e131242bfb1a29d1db368e9e24381ad979
SHA256:e31bd7c6847cd8b49a884fe01244f740ad184cdb7aa6449830be21985158f0d9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: type-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/type-search-index.js
MD5: 709163eef2bdfcabf43d6f1058f7e5c3
SHA1: 0471197c5a2b7bd7ef511433127b1497472e8c54
SHA256:576b26c4b6ae1b4a14e18d6ecf749dfcd7c34408db9dfbdf27f7aa9575b70105
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc.jar
MD5: a2bc6195d50fca2306d74fb8a7cb585f
SHA1: a3366946b0eee87489cb30c9cd9e886abef5afbd
SHA256:401f7c83bac3a71b9baf0b84333fa8ef1fad0a3ef42b649ddc24689bab00b292
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:17 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | permissions | Highest
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:17 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfc | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfc | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | jar | package name | permissions | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### pdfcserver.zip: pdfcserver.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcserver.zip/pdfcserver.jar
MD5: ee6f1afcc59ca80bbe3d289c05c8288a
SHA1: 1fcb1004061700767c080abfc81ec31886b18905
SHA256:57836462c3117cdc92b8e15d193e319514fa0557cd3f290c0403547041d6d65c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfcserver | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | server | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-12-01 16:17 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfcserver | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | persistence | Low
Product | jar | package name | server | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-12-01 16:17 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfcserver | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfcserver | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### pdfcserver.zip: pdfcserver.jar: compareconfigrenderer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcserver.zip/pdfcserver.jar/com/inet/pdfc/server/structure/compareconfigrenderer.js
MD5: ca54201f240ce7fea03db4f46ecd818a
SHA1: 420f31523aa51830c134d193dae0a692eff5b4da
SHA256:0aa678824bea93ed82b1747fc75512915488e2d65b5f11c9c22d4214bb129cec
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfcsetupwizard.zip: pdfcsetupwizard.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcsetupwizard.zip/pdfcsetupwizard.jar
MD5: ff7edc3f187c62d8b8f8f880aca02cd3
SHA1: f7802840d908be35df73a8fb4353984f117cff32
SHA256:f5998261f266ef060ae01c2b49ed107d656f45b712e98ad939f1a6d2799e6b64
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfcsetupwizard | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | setupwizard | Low
Vendor | Manifest | built-date | 2025-12-01 16:32 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfcsetupwizard | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | setupwizard | Low
Product | jar | package name | steps | Low
Product | Manifest | built-date | 2025-12-01 16:32 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfcsetupwizard | High
Product | Manifest | specification-title | pdfcsetupwizard | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### pdfcsetupwizard.zip: pdfcsetupwizard.jar: controller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcsetupwizard.zip/pdfcsetupwizard.jar/com/inet/pdfc/setupwizard/steps/license/controller.js
MD5: b21c2ee13289577d98bbb1687726af34
SHA1: 9032230fff5222847734d3cb4723103733f88e92
SHA256:6c1d316ea3da704c21cc9e3fa2426863fa173c3d44a212506fc4bc1e187991e9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### processbridge.pdfc.zip: processbridge.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/processbridge.pdfc.zip/processbridge.pdfc.jar
MD5: 973c0ee19716604a82ef450c8a379e67
SHA1: 8f88ea3dd48fa333d328397884652e06fc4b0457
SHA256:fd7598789e7c9f93c4df9d9ed42c07c92c0aec9feb478ade2d7cfa6b488bf1b9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | processbridge.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | processbridge | Low
Vendor | Manifest | built-date | 2025-12-01 16:35 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | processbridge.pdfc | High
Product | jar | package name | api | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | processbridge | Highest
Product | jar | package name | processbridge | Low
Product | Manifest | built-date | 2025-12-01 16:35 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | processbridge.pdfc | High
Product | Manifest | specification-title | processbridge.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

### slf4j-api-2.0.16.jar

Description:

    The slf4j API

License:

    http://www.opensource.org/licenses/mit-license.php

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.slf4j/slf4j-api/2.0.16/172931663a09a1fa515567af5fbef00897d3c04/slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256:a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Project/Scope: standalone:inetPlugin
slf4j-api-2.0.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | slf4j-api | High
Vendor | gradle | artifactid | slf4j-api | Highest
Vendor | gradle | groupid | org.slf4j | Highest
Vendor | jar | package name | slf4j | Highest
Vendor | Manifest | build-jdk-spec | 21 | Low
Vendor | Manifest | bundle-docurl | http://www.slf4j.org | Low
Vendor | Manifest | bundle-symbolicname | slf4j.api | Medium
Vendor | Manifest | multi-release | true | Low
Vendor | pom | artifactid | slf4j-api | Low
Vendor | pom | groupid | org.slf4j | Highest
Vendor | pom | name | SLF4J API Module | High
Vendor | pom | parent-artifactid | slf4j-parent | Low
Vendor | pom | url | http://www.slf4j.org | Highest
Product | file | name | slf4j-api | High
Product | gradle | artifactid | slf4j-api | Highest
Product | jar | package name | slf4j | Highest
Product | Manifest | build-jdk-spec | 21 | Low
Product | Manifest | bundle-docurl | http://www.slf4j.org | Low
Product | Manifest | Bundle-Name | SLF4J API Module | Medium
Product | Manifest | bundle-symbolicname | slf4j.api | Medium
Product | Manifest | Implementation-Title | slf4j-api | High
Product | Manifest | multi-release | true | Low
Product | pom | artifactid | slf4j-api | Highest
Product | pom | groupid | org.slf4j | Highest
Product | pom | name | SLF4J API Module | High
Product | pom | parent-artifactid | slf4j-parent | Medium
Product | pom | url | http://www.slf4j.org | Medium
Version | file | version | 2.0.16 | High
Version | gradle | version | 2.0.16 | Highest
Version | Manifest | Bundle-Version | 2.0.16 | High
Version | Manifest | Implementation-Version | 2.0.16 | High
Version | pom | version | 2.0.16 | Highest

#### Identifiers

- pkg:maven/org.slf4j/slf4j-api@2.0.16 (Confidence:High)

### taskplanner.pdfc.zip: taskplanner.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/taskplanner.pdfc.zip/taskplanner.pdfc.jar
MD5: 35538965ee18ec25228ecd7cba5beeb8
SHA1: dbe963d2e80ab6a76ca864a6e8a03046a3fa11e7
SHA256:e190f0f841de598d9c249690f97df6c3482fd2b5b90130940dd25b33e8df7cbd
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | taskplanner.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | taskplanner | Low
Vendor | Manifest | built-date | 2025-12-01 16:36 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | taskplanner.pdfc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | taskplanner | Highest
Product | jar | package name | taskplanner | Low
Product | Manifest | built-date | 2025-12-01 16:36 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | taskplanner.pdfc | High
Product | Manifest | specification-title | taskplanner.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.259 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.259:*:*:*:*:*:*:* (Confidence:Low)

This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.