Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.2.1
Report Generated On: Fri, 24 Apr 2026 14:51:45 +0200
Dependencies Scanned: 130 (130 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 6 (show)
...
NVD API Last Checked: 2026-04-24T12:48:41Z
NVD API Last Modified: 2026-04-23T22:16:43Z
NVD Cache Last Checked: 2026-04-24T12:48:41Z
NVD Cache Last Modified: 2026-04-23T22:16:43Z

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
Merlia-0.jar		pkg:maven/lib/Merlia@0		12
analysis.language.zip: analysis.language.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	33
analysis.language.zip: guava.jar	cpe:2.3:a:google:guava:33.5.0:::::::*	pkg:maven/com.google.guava/guava@33.5.0-jre	Highest	24
analysis.language.zip: jsonic.jar				7
analysis.language.zip: language-detector.jar		pkg:maven/com.optimaize.languagedetector/language-detector@0.6		26
annotations-3.0.1.jar (shaded: com.google.code.findbugs:jsr305:3.0.1)		pkg:maven/com.google.code.findbugs/jsr305@3.0.1		9
annotations-3.0.1.jar		pkg:maven/com.google.code.findbugs/annotations@3.0.1		42
command.jsonexport.zip: command.jsonexport.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	32
comparison.api.zip: comparison.api.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	30
comparison.rpc.zip: comparison.rpc.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	32
comparison.webgui.zip: comparison.webgui.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	22
comparison.webgui.zip: comparison.webgui.jar: app.js				0
comparison.webgui.zip: comparison.webgui.jar: compare.js				0
comparison.webgui.zip: comparison.webgui.jar: contextmenuextension.js				0
comparison.webgui.zip: comparison.webgui.jar: contingent.js				0
comparison.webgui.zip: comparison.webgui.jar: controller.js				0
comparison.webgui.zip: comparison.webgui.jar: descriptionarea.js				0
comparison.webgui.zip: comparison.webgui.jar: dropzone.js				0
comparison.webgui.zip: comparison.webgui.jar: export.js				0
comparison.webgui.zip: comparison.webgui.jar: factory.js				0
comparison.webgui.zip: comparison.webgui.jar: model.js				0
comparison.webgui.zip: comparison.webgui.jar: multipasswordpanel.js				0
comparison.webgui.zip: comparison.webgui.jar: mycomparisons.js				0
comparison.webgui.zip: comparison.webgui.jar: passwordpanel.js				0
comparison.webgui.zip: comparison.webgui.jar: pdfcconfig.js				0
comparison.webgui.zip: comparison.webgui.jar: profil.js				0
comparison.webgui.zip: comparison.webgui.jar: profileentry.js				0
comparison.webgui.zip: comparison.webgui.jar: publishdialog.js				0
comparison.webgui.zip: comparison.webgui.jar: publishprofiledialog.js				0
comparison.webgui.zip: comparison.webgui.jar: report.js				0
comparison.webgui.zip: comparison.webgui.jar: scroller.js				0
comparison.webgui.zip: comparison.webgui.jar: searchcomponent.js				0
comparison.webgui.zip: comparison.webgui.jar: userlist.js				0
comparison.webgui.zip: comparison.webgui.jar: visibilitysettings.js				0
comparison.webgui.zip: comparison.webgui.jar: zoomer.js				0
filter.area.zip: filter.area.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	33
filter.baselinetable.zip: filter.baselinetable.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	33
filter.cmappatch.zip: filter.cmappatch.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	33
filter.headerfooter.zip: filter.headerfooter.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	33
filter.hiderotation.zip: filter.hiderotation.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	33
filter.invisibleelements.zip: filter.invisibleelements.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	33
filter.multicolumn.zip: filter.multicolumn.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	33
filter.ocr.zip: filter.ocr.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	33
filter.pagerange.zip: filter.pagerange.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	32
filter.regex.zip: filter.regex.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	33
filter.regex.zip: filter.regex.jar: filterrenderer.js				0
filter.texttransform.zip: filter.texttransform.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	33
filter.urllookup.zip: filter.urllookup.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	33
hamcrest-3.0.jar		pkg:maven/org.hamcrest/hamcrest@3.0		39
inetcore-26.4-tools.jar		pkg:maven/shared/inetcore@26.4		9
inetcore-26.4.jar (shaded: com.inet.shared:inetcore:null)				27
inetcore-26.4.jar		pkg:maven/shared/inetcore@26.4		35
java-25-jre-x64-linux.tar.gz: java-25-jre-x64-linux.tar: jrt-fs.jar	cpe:2.3:a:eclipse:platform:25.0.2:::::::*		Medium	12
jcip-annotations-1.0.jar		pkg:maven/net.jcip/jcip-annotations@1.0		21
jlessc-1.15.jar		pkg:maven/de.inetsoftware/jlessc@1.15		40
jsr305-3.0.2.jar		pkg:maven/com.google.code.findbugs/jsr305@3.0.2		20
junit-4.13.2.jar	cpe:2.3:a:junit:junit4:4.13.2:::::::*	pkg:maven/junit/junit@4.13.2	Low	55
junit-jupiter-5.14.0.jar		pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0		74
junit-jupiter-api-5.14.0.jar		pkg:maven/org.junit.jupiter/junit-jupiter-api@5.14.0		84
junit-jupiter-engine-5.14.0.jar		pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0		86
junit-jupiter-params-5.14.0.jar		pkg:maven/org.junit.jupiter/junit-jupiter-params@5.14.0		85
junit-platform-commons-1.14.0.jar	cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:::::::*	pkg:maven/org.junit.platform/junit-platform-commons@1.14.0	Low	87
junit-platform-engine-1.14.0.jar	cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:::::::*	pkg:maven/org.junit.platform/junit-platform-engine@1.14.0	Low	85
junit-platform-launcher-1.14.0.jar	cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:::::::*	pkg:maven/org.junit.platform/junit-platform-launcher@1.14.0	Low	86
junit-platform-suite-1.14.0.jar	cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:::::::*	pkg:maven/org.junit.platform/junit-platform-suite@1.14.0	Low	74
junit-platform-suite-api-1.14.0.jar	cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:::::::*	pkg:maven/org.junit.platform/junit-platform-suite-api@1.14.0	Low	87
junit-platform-suite-commons-1.14.0.jar	cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:::::::*	pkg:maven/org.junit.platform/junit-platform-suite-commons@1.14.0	Low	87
junit-platform-suite-engine-1.14.0.jar	cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:::::::*	pkg:maven/org.junit.platform/junit-platform-suite-engine@1.14.0	Low	87
junit-vintage-engine-5.14.0.jar	cpe:2.3:a:fan_platform_project:fan_platform:5.14.0:::::::*	pkg:maven/org.junit.vintage/junit-vintage-engine@5.14.0	Low	86
maintenance.pdfc.zip: maintenance.pdfc.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	22
maintenance.pdfc.zip: maintenance.pdfc.jar: app.js				0
maintenance.pdfc.zip: maintenance.pdfc.jar: comparisons.js				0
ocr.tesseract.zip: commons-logging.jar		pkg:maven/commons-logging/commons-logging@1.3.4		127
ocr.tesseract.zip: fontbox.jar		pkg:maven/org.apache.pdfbox/fontbox@3.0.7		32
ocr.tesseract.zip: jai-imageio-core.jar		pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0		40
ocr.tesseract.zip: jbig2-imageio.jar		pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4		128
ocr.tesseract.zip: jboss-vfs.jar		pkg:maven/org.jboss/jboss-vfs@3.3.2.Final		33
ocr.tesseract.zip: jna.jar	cpe:2.3:a:oracle:java_se:5.18.1:::::::*		Low	36
ocr.tesseract.zip: jna.jar: jnidispatch.dll				2
ocr.tesseract.zip: jna.jar: jnidispatch.dll				2
ocr.tesseract.zip: jna.jar: jnidispatch.dll				2
ocr.tesseract.zip: lept4j.jar		pkg:maven/net.sourceforge.lept4j/lept4j@1.19.1		25
ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll				4
ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll				4
ocr.tesseract.zip: ocr.tesseract.jar	cpe:2.3:a:tesseract_ocr_project:tesseract_ocr:26.4.216:::::::* cpe:2.3:a:tesseract_project:tesseract:26.4.216:::::::*		Low	33
ocr.tesseract.zip: pdfbox-debugger.jar		pkg:maven/org.apache.pdfbox/pdfbox-debugger@3.0.7		28
ocr.tesseract.zip: pdfbox.jar		pkg:maven/org.apache.pdfbox/pdfbox@3.0.7		30
ocr.tesseract.zip: tess4j.jar	cpe:2.3:a:tesseract_project:tesseract:5.12.0:::::::*	pkg:maven/net.sourceforge.tess4j/tess4j@5.12.0	Low	42
ocr.tesseract.zip: tess4j.jar: libtesseract541.dll				4
ocr.tesseract.zip: tess4j.jar: libtesseract541.dll				4
opentest4j-1.3.0.jar		pkg:maven/org.opentest4j/opentest4j@1.3.0		64
parser.image.zip: parser.image.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	31
parser.pdf.config.zip: parser.pdf.config.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	31
parser.text.zip: parser.text.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	31
pdfc.standalone.zip: pdfc.standalone.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	31
pdfc.standalone.zip: pdfc.standalone.jar: bridge.js				0
pdfc.standalone.zip: pdfc.standalone.jar: bridgeConfig.js				0
pdfc.standalone.zip: pdfc.standalone.jar: bridgePDFC.js				0
pdfc.standalone.zip: pdfc.standalone.jar: extraMenu.js				0
pdfc.standalone.zip: pdfc.standalone.jar: removeHeader.js				0
pdfc.standalone.zip: pdfc.standalone.jar: removePDFCElements.js				0
pdfc.standalone.zip: pdfc.standalone.jar: theme.js				0
pdfc.standalone.zip: pdfc.standalone.jar: translation.js				0
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:collate:78.2)		pkg:maven/com.ibm.icu/collate@78.2		7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:core:78.2)		pkg:maven/com.ibm.icu/core@78.2		7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:currdata:78.2)		pkg:maven/com.ibm.icu/currdata@78.2		7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:langdata:78.2)		pkg:maven/com.ibm.icu/langdata@78.2		7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:regiondata:78.2)		pkg:maven/com.ibm.icu/regiondata@78.2		7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:tools_taglets:78.2)		pkg:maven/com.ibm.icu/tools_taglets@78.2		7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:translit:78.2)		pkg:maven/com.ibm.icu/translit@78.2		7
pdfc.zip: icu4j.jar	cpe:2.3:a:icu-project:international_components_for_unicode:78.2:::::::* cpe:2.3:a:unicode:international_components_for_unicode:78.2:::::::*	pkg:maven/com.ibm.icu/icu4j@78.2	Low	49
pdfc.zip: pdfc-javadoc.jar				2
pdfc.zip: pdfc-javadoc.jar: jquery-3.7.1.min.js				0
pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js				0
pdfc.zip: pdfc-javadoc.jar: member-search-index.js				0
pdfc.zip: pdfc-javadoc.jar: module-search-index.js				0
pdfc.zip: pdfc-javadoc.jar: package-search-index.js				0
pdfc.zip: pdfc-javadoc.jar: script.js				0
pdfc.zip: pdfc-javadoc.jar: search-page.js				0
pdfc.zip: pdfc-javadoc.jar: search.js				0
pdfc.zip: pdfc-javadoc.jar: tag-search-index.js				0
pdfc.zip: pdfc-javadoc.jar: type-search-index.js				0
pdfc.zip: pdfc.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	30
pdfcserver.zip: pdfcserver.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	31
pdfcserver.zip: pdfcserver.jar: compareconfigrenderer.js				0
pdfcsetupwizard.zip: pdfcsetupwizard.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	21
pdfcsetupwizard.zip: pdfcsetupwizard.jar: controller.js				0
processbridge.pdfc.zip: processbridge.pdfc.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	22
slf4j-api-2.0.17.jar		pkg:maven/org.slf4j/slf4j-api@2.0.17		32
taskplanner.pdfc.zip: taskplanner.pdfc.jar	cpe:2.3:a:inetsoftware:pdfc:26.4.216:::::::*		Low	21

Dependencies (vulnerable)

Merlia-0.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/lib/Merlia/0/ec818ab987afcd2d905984971f76a053ca107217/Merlia-0.jar
MD5: b151d3363029f809f49618ce97b8fc11
SHA1: ec818ab987afcd2d905984971f76a053ca107217
SHA256:cfe766dc3f0467f181c389a0a21323a408a674a54360fc6e3d46fdbb542ca453
Referenced In Project/Scope: standalone:inetPlugin
Merlia-0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	Merlia-0	High
Vendor	gradle	artifactid	Merlia	Highest
Vendor	gradle	groupid	lib	Highest
Vendor	jar	package name	inet	Low
Vendor	jar	package name	tds	Low
Product	file	name	Merlia-0	High
Product	gradle	artifactid	Merlia	Highest
Product	jar	package name	tds	Low
Version	file	name	Merlia-0	Medium
Version	file	version	0	Medium
Version	gradle	version	0	Highest
Version	Manifest	driver-version	8.14	Medium

Identifiers

pkg:maven/lib/Merlia@0 (Confidence:Highest)

analysis.language.zip: analysis.language.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/analysis.language.jar
MD5: 848812dfc1fd24aa58bb4062974ee98f
SHA1: 9e23e5280d5fcff83931802c91f96ff679943b59
SHA256:ef69526764e3a428ca3171f8142c09404aca527f86ee700638f57f32e8db0cfe
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	analysis.language	High
Vendor	jar	package name	analysis	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:26	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	analysis.language	High
Product	jar	package name	analysis	Highest
Product	jar	package name	analysis	Low
Product	jar	package name	language	Highest
Product	jar	package name	language	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:26	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	analysis.language	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	analysis.language	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

analysis.language.zip: guava.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/guava.jar
MD5: d9fbf39a41a5bab891348f07668e18c5
SHA1: 8699de25f2f979108d6c1b804a7ba38cda1116bc
SHA256:1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	guava	High
Vendor	jar	package name	google	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Vendor	Manifest	bundle-symbolicname	com.google.guava	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	guava	Low
Vendor	pom	groupid	com.google.guava	Highest
Vendor	pom	name	Guava: Google Core Libraries for Java	High
Vendor	pom	parent-artifactid	guava-parent	Low
Vendor	pom	url	google/guava	Highest
Product	file	name	guava	High
Product	jar	package name	google	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-docurl	https://github.com/google/guava/	Low
Product	Manifest	Bundle-Name	Guava: Google Core Libraries for Java	Medium
Product	Manifest	bundle-symbolicname	com.google.guava	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	guava	Highest
Product	pom	groupid	com.google.guava	Highest
Product	pom	name	Guava: Google Core Libraries for Java	High
Product	pom	parent-artifactid	guava-parent	Medium
Product	pom	url	google/guava	High
Version	pom	version	33.5.0-jre	Highest

Identifiers

pkg:maven/com.google.guava/guava@33.5.0-jre (Confidence:High)
cpe:2.3:a:google:guava:33.5.0:*:*:*:*:*:*:* (Confidence:Highest)

analysis.language.zip: jsonic.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/jsonic.jar
MD5: 504496d0069da0121c059c219147e90c
SHA1: 98e8a1f25aa40ed92ff2ecca4d1301d48b552452
SHA256:150e3ac24b103cb0cd50595018dbe3c8ba4b3dee81a76eb4b987607f96e9602b
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsonic	High
Vendor	jar	package name	arnx	Low
Vendor	jar	package name	jsonic	Low
Vendor	jar	package name	net	Low
Product	file	name	jsonic	High
Product	jar	package name	arnx	Low
Product	jar	package name	jsonic	Low

Identifiers

None

analysis.language.zip: language-detector.jar

Description:

        Language Detection Library for Java.

License:

Apache 2: http://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/language-detector.jar
MD5: e5475d5cabd54e5ddf6428d63864888f
SHA1: 52fee1eaa101f8d3e30b7095e1b6e0054d514dde
SHA256:f53ecc3d71da9ebc82edd10fb35638d32e8b9d849273dd717a021eca02f2278d
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	language-detector	High
Vendor	jar	package name	langdetect	Low
Vendor	jar	package name	languagedetector	Highest
Vendor	jar	package name	optimaize	Highest
Vendor	jar	package name	optimaize	Low
Vendor	pom	artifactid	language-detector	Low
Vendor	pom	developer name	Fabian Kessler	Medium
Vendor	pom	developer name	François ROLAND	Medium
Vendor	pom	developer name	Nakatani Shuyo	Medium
Vendor	pom	developer name	Robert Theis	Medium
Vendor	pom	groupid	com.optimaize.languagedetector	Highest
Vendor	pom	name	language-detector	High
Vendor	pom	url	optimaize/language-detector	Highest
Product	file	name	language-detector	High
Product	jar	package name	langdetect	Low
Product	jar	package name	languagedetector	Highest
Product	jar	package name	optimaize	Highest
Product	pom	artifactid	language-detector	Highest
Product	pom	developer name	Fabian Kessler	Low
Product	pom	developer name	François ROLAND	Low
Product	pom	developer name	Nakatani Shuyo	Low
Product	pom	developer name	Robert Theis	Low
Product	pom	groupid	com.optimaize.languagedetector	Highest
Product	pom	name	language-detector	High
Product	pom	url	optimaize/language-detector	High
Version	pom	version	0.6	Highest

Identifiers

pkg:maven/com.optimaize.languagedetector/language-detector@0.6 (Confidence:High)

annotations-3.0.1.jar (shaded: com.google.code.findbugs:jsr305:3.0.1)

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/annotations/3.0.1/fc019a2216218990d64dfe756e7aa20f0069dea2/annotations-3.0.1.jar/META-INF/maven/com.google.code.findbugs/jsr305/pom.xml
MD5: d08567d16867a0b79bc8149683918452
SHA1: d04690f71f3393e23f30998d9534365274fa5f9f
SHA256:4170a761dc5bfd3981a8e6f7aab9e2acdce82d34fd5aa9bb11e3c090d25314ce
Referenced In Project/Scope: standalone:inetPlugin

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-jsr305	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	pom	version	3.0.1	Highest

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.1 (Confidence:High)

annotations-3.0.1.jar

Description:

Annotation the FindBugs tool supports

License:

GNU Lesser Public License: http://www.gnu.org/licenses/lgpl.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/annotations/3.0.1/fc019a2216218990d64dfe756e7aa20f0069dea2/annotations-3.0.1.jar
MD5: fc4f102f22ba4f1df3f1d7cc6b202152
SHA1: fc019a2216218990d64dfe756e7aa20f0069dea2
SHA256:6b47ff0a6de0ce17cbedc3abb0828ca5bce3009d53ea47b3723ff023c4742f79
Referenced In Project/Scope: standalone:inetPlugin
pkg:maven/de.inetsoftware/jlessc@1.15

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	annotations	High
Vendor	gradle	artifactid	annotations	Highest
Vendor	gradle	groupid	com.google.code.findbugs	Highest
Vendor	jar	package name	annotation	Highest
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	findbugs	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	findbugsAnnotations	Medium
Vendor	pom	artifactid	annotations	Low
Vendor	pom	developer email	Loskutov@gmx.de	Low
Vendor	pom	developer email	pugh at cs.umd.edu	Low
Vendor	pom	developer id	al	Medium
Vendor	pom	developer id	bp	Medium
Vendor	pom	developer name	Andrey Loskutov	Medium
Vendor	pom	developer name	Bill Pugh	Medium
Vendor	pom	developer name	Keith Lea	Medium
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-Annotations	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	file	name	annotations	High
Product	gradle	artifactid	annotations	Highest
Product	jar	package name	annotation	Highest
Product	jar	package name	annotations	Highest
Product	jar	package name	findbugs	Highest
Product	Manifest	Bundle-Name	FindBugs-Annotations	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	findbugsAnnotations	Medium
Product	pom	artifactid	annotations	Highest
Product	pom	developer email	Loskutov@gmx.de	Low
Product	pom	developer email	pugh at cs.umd.edu	Low
Product	pom	developer id	al	Low
Product	pom	developer id	bp	Low
Product	pom	developer name	Andrey Loskutov	Low
Product	pom	developer name	Bill Pugh	Low
Product	pom	developer name	Keith Lea	Low
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-Annotations	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.1	High
Version	gradle	version	3.0.1	Highest
Version	Manifest	Bundle-Version	3.0.1	High
Version	pom	version	3.0.1	Highest

Identifiers

pkg:maven/com.google.code.findbugs/annotations@3.0.1 (Confidence:High)

command.jsonexport.zip: command.jsonexport.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/command.jsonexport.zip/command.jsonexport.jar
MD5: a912514ec42040cd1c48372e77df066d
SHA1: c68aa0473bf671a2100ad6e9c0387d9af226c8cf
SHA256:6ce20f4e7ba06b58b423316ff56a87b07b51e7a18cfb872cb063efeeb361c83b
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	command.jsonexport	High
Vendor	jar	package name	command	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:25	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	command.jsonexport	High
Product	jar	package name	command	Highest
Product	jar	package name	command	Low
Product	jar	package name	json	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:25	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	command.jsonexport	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	command.jsonexport	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

comparison.api.zip: comparison.api.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.api.zip/comparison.api.jar
MD5: 73bd2aba0e6f24a8841c3c4d284dfcf9
SHA1: ad9ad3b364a8c885a10715fbc4710a27266c4b1f
SHA256:55821774d5bc2ca6a80df5bf22a66b022eb8f45ed62787239a678d40fb2b9d8f
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	comparison.api	High
Vendor	jar	package name	comparisonapi	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:18	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	comparison.api	High
Product	jar	package name	comparisonapi	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:18	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	comparison.api	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	comparison.api	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

comparison.rpc.zip: comparison.rpc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.rpc.zip/comparison.rpc.jar
MD5: d91a38c3e21e65f6105c263e0e4944f5
SHA1: 117749dc5ab2e8ae544da035f5e9c6c3f6b29620
SHA256:f56dffe12b689a89e09f3b527b8fb7f533b335ab965eb177e7b7b4612546d958
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	comparison.rpc	High
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	jar	package name	rpc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:18	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	comparison.rpc	High
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	rpc	Highest
Product	jar	package name	rpc	Low
Product	jar	package name	websocket	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:18	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	comparison.rpc	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	comparison.rpc	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

comparison.webgui.zip: comparison.webgui.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar
MD5: bc1350d3a2d01f41946b71d43c4bb167
SHA1: 42d4b47338d3ae52466e6aeff1eaa6b47452ac06
SHA256:c81c8e3af7c244b5979d3340d855c6beeaea4c32e2229d07c0985e193645940a
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	comparison.webgui	High
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	jar	package name	webgui	Low
Vendor	Manifest	built-date	2026-04-24 14:18	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	comparison.webgui	High
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	server	Low
Product	jar	package name	webgui	Highest
Product	jar	package name	webgui	Low
Product	Manifest	built-date	2026-04-24 14:18	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	comparison.webgui	High
Product	Manifest	specification-title	comparison.webgui	Medium
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

comparison.webgui.zip: comparison.webgui.jar: app.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/app.js
MD5: 2e4ad8b6a0f9a76284c281df29d4ae4d
SHA1: c715d01b3797ea1cc4e3615d97412a8d2cf8a067
SHA256:c1ace93a6f794644bab65004932e9335d040e375a3d93c6ca4f7029bc5e06e59
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: compare.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/compare.js
MD5: e3dffad8fdc79ad24cb1d3d4e849ae40
SHA1: fd4bda43516116ef3be6e283e731eba934510679
SHA256:bad23e9e5e75459abc74c728746c9ff536a2e9b079f243f1385925c7aadd0aa0
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: contextmenuextension.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/drive/contextmenuextension.js
MD5: b5f087715014cac13f4ccbc40c947f1c
SHA1: bf853c9b9c629eb66ce96fd12a24e973aa2cb1c6
SHA256:3096c6232dfe34a586f3d3bf0175b12bbd3b20a25d2f499da0aaa390a122d97b
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: contingent.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/contingent.js
MD5: 10782a90b423f2db0450adaa8944f25a
SHA1: 8d7242260155b1bc6cbca8cd0fa034c3be0c021b
SHA256:c54c35e7c00b764c4e9b7511916a30510158e88b8c8e5ee4d61c7302a7d87295
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: controller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/controller.js
MD5: 6c2f36433c707b2d4b817425bdcc95a0
SHA1: 663c582b388026549b3dd1eb1f24ccf6c00a580e
SHA256:b8d538486e005d66d19db1cb1f23874106e5b41670a0528c66122fde3e2a2979
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: descriptionarea.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/descriptionarea.js
MD5: 76d646663feded014e091b897a1f96c8
SHA1: 29d78c632bcd13874400fd21bd156c0daf29bfcc
SHA256:1cc3fbd001cc25e18a6e3ae1f1377b0d41e37416fbcbfe2c42c4f4e03a7be691
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: dropzone.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/dropzone.js
MD5: 7f465ad15714efa6b96053a3f78982e9
SHA1: 870d6ccc2d1beb1d787da7f5ab64967b995e45b7
SHA256:6aa6d9ae16dcd5c5cb9809136f81a2121d16be3e6c9232e188d8ecf8f672bec6
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: export.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/export.js
MD5: e1a2cc48050ef9b378b8a53a081d082a
SHA1: 5cd7fe1140bd00b2f6db400724b659ae7abbadd9
SHA256:17fe08df83d82b913f8d1416e4ce5c2530ee55f4a35348f6c9dad90fde158ec7
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: factory.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/factory.js
MD5: 4adf81b54445f2370da9330cdfa91f23
SHA1: 35135b9094a8d808350576cbbff678dee4be727d
SHA256:280626e7eebdcaee98aa2dcc05e2147eff1b806a050338c19e1510c68b699d5a
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: model.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/model.js
MD5: dd3c915523172ddd31fb80dcdfbedca1
SHA1: 51336c83a03669c98d3b80ef27e00e899b9b033f
SHA256:7ab18426a5d5da1ae923171ba3120c4cf53d5250280d20dc6b611f02ffdecb92
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: multipasswordpanel.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/multipasswordpanel.js
MD5: 34d4d5fd0cf1fa77d569e928af1a00aa
SHA1: 230e35fe5f8f5a48ccd930cee3c79f16df858b97
SHA256:28be5c583ef3c82dca061d79f33a43f3672421b6a1b42e460a444f296d49a79a
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: mycomparisons.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/mycomparisons.js
MD5: 65ecc6d948cb7189567f2b69ddcb036b
SHA1: f5abb2d2ab6527b7449c02383e497078b7af77c6
SHA256:88cf1150d8fa5c54d71fc181b4a0c6e07ae57dd1d03a8c009b3e5c17b5abac86
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: passwordpanel.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/passwordpanel.js
MD5: 4e69b1954226ce194fd836df7ad77e35
SHA1: 6e79c7f2354f08c8effe8adfd66c6dcaff4bdb8c
SHA256:6078c754f425f4087a05cf8e6aca77ab5b6c9df996e5143d730f32bd8f46ca21
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: pdfcconfig.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/pdfcconfig.js
MD5: 676338e9e274fd0d9ab59db49e3ea86f
SHA1: 5c8a910bd5453a9e9ff6163db9f760533e9db5b6
SHA256:3cbb5959eb832a0c7880d2a0c58a4f82cc6e66b177b4aeeef49a87540265b96f
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: profil.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/profil.js
MD5: a80e7a67200f9bebc58cc1b1f648ba81
SHA1: 67a71dca22d20ed3e4cacd59e7b013052bba6059
SHA256:1eb1aed349f9e8d0781de9f352733a58b6a4fcac9e89d259888005099b5216d8
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: profileentry.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/profileentry.js
MD5: 70fba9a0806250f9fc3f559012ebdfc5
SHA1: 911155de0ffa9aff766b028eff7d2a74557da44c
SHA256:7dc35ebc9b13805fc2160bd904bea53c880ab49854079e55e4f141984b6ab075
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: publishdialog.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/publishdialog.js
MD5: 3c6b3557cb70409b766dcadc7593ef40
SHA1: 15ab54e19f4ed112a10fc9bb380d5613f4c9e10f
SHA256:bc6ff09abcaa54afd0b07b558cec428824f5e1b157a5459e3eb2308802eca100
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: publishprofiledialog.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/publishprofiledialog.js
MD5: 15cb57cdb21d62986b893e35495ac8d0
SHA1: 060e44459b5a3e7b684be7a9faaefd5683a22ea9
SHA256:c1ce1c1ef7c98cb682a6844bec27307b2e7aee3403b607ce6743394984d5f481
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: report.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/report.js
MD5: cafb8b7fee4fcb9192f84e74eacc84bc
SHA1: 9c1f8db9c4c82df2c4bb46eb16aa9dc94a002368
SHA256:8ec83f80699f3aab21614b57bd57b94cfe7092ca4586dcf5c5f45ed56cc69687
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: scroller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/scroller.js
MD5: 258842a58c95114e959f659bfa15d9a7
SHA1: f947fcba0b63cc56cacedf1d9f3f812b3330586b
SHA256:4d7e9feb475bec916fc11571fbf16ac1f9113abf4db43bdd18bd4f3ae0560666
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: searchcomponent.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/searchcomponent.js
MD5: bdc3caac35d953edd2e6f68c0d4bfd74
SHA1: ef70a291cb7226084945b2648356f3a389b7fa58
SHA256:36620c84f1984fc0d8f98256fb345a0329ab25c834dcfa8c916d552ff370799e
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: userlist.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/userlist.js
MD5: f0280a91fc83e571ef486c22a7f93ef7
SHA1: 68abf77cf988cad21dd9dad06a89175f906b1d9e
SHA256:1b0b6bc3b19aa7a697b17a94c617ad8e1807b10ac7de9d9292bfdc3f929c41cb
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: visibilitysettings.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/visibilitysettings.js
MD5: 1f6d120c92d4c7e6c41cc4368b09ebac
SHA1: 9cdf600708312b16e2d9eadd26aea32da1ffc7d2
SHA256:50fe2d4678259193d90aae7c481487d02566b4c92ba3ca4d7c2cf13c9e345250
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

comparison.webgui.zip: comparison.webgui.jar: zoomer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/zoomer.js
MD5: 9292c505ec54cc329a2c2f0dc6612a43
SHA1: 724665a18dfc42d5fb8ba99a8010022de75bfccd
SHA256:d9d4db5a4a662a0887793825308e350047a54dc41810200c7ffb732c57a61f1c
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

filter.area.zip: filter.area.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.area.zip/filter.area.jar
MD5: 8a8d6bdee62b3cd447b4ddc52ded963f
SHA1: a4bde690476f465de94ae5e4c0d54bee5bad1535
SHA256:fb34ca659252b743a6e6b5147f4aa3929ffcc26885d96225f8aaf98b6ece547c
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	filter.area	High
Vendor	jar	package name	filter	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:24	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	filter.area	High
Product	jar	package name	area	Highest
Product	jar	package name	area	Low
Product	jar	package name	filter	Highest
Product	jar	package name	filter	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:24	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	filter.area	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	filter.area	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

filter.baselinetable.zip: filter.baselinetable.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.baselinetable.zip/filter.baselinetable.jar
MD5: 6b139f41be5ecdb14a9669a37636db9b
SHA1: 0145fbb85a970e0874100cc4f98b75a164d90777
SHA256:741193229ab7079e2f34ba9ba050857f4b885bd9b86ce24b795cf32bd72594dc
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	filter.baselinetable	High
Vendor	jar	package name	filter	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:18	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	filter.baselinetable	High
Product	jar	package name	baselinetable	Highest
Product	jar	package name	baselinetable	Low
Product	jar	package name	filter	Highest
Product	jar	package name	filter	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:18	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	filter.baselinetable	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	filter.baselinetable	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

filter.cmappatch.zip: filter.cmappatch.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.cmappatch.zip/filter.cmappatch.jar
MD5: ec53b18312dce474746518e9f154df97
SHA1: e82639843874486f8068d55e9f0d432d428d7682
SHA256:df07b6c5bfe638071c85ec78772f04b6b92cb9fe7693aaec352122f42a74dee6
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	filter.cmappatch	High
Vendor	jar	package name	filter	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:19	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	filter.cmappatch	High
Product	jar	package name	cmappatch	Highest
Product	jar	package name	cmappatch	Low
Product	jar	package name	filter	Highest
Product	jar	package name	filter	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:19	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	filter.cmappatch	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	filter.cmappatch	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

filter.headerfooter.zip: filter.headerfooter.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.headerfooter.zip/filter.headerfooter.jar
MD5: 269243195eb801eeeccf3a439f7f6cdd
SHA1: 5f9676fa5d93e5b34c723cda7f5c7b48d42ca916
SHA256:42641afbeab4bd28c867d4f78937ae417c4bd13b027183fbbbec9bd8054c7dce
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	filter.headerfooter	High
Vendor	jar	package name	filter	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:22	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	filter.headerfooter	High
Product	jar	package name	filter	Highest
Product	jar	package name	filter	Low
Product	jar	package name	headerfooter	Highest
Product	jar	package name	headerfooter	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:22	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	filter.headerfooter	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	filter.headerfooter	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

filter.hiderotation.zip: filter.hiderotation.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.hiderotation.zip/filter.hiderotation.jar
MD5: f97f608b83006e686da347d976560ef4
SHA1: c91e5fe1dfb83f0a712c9e0a3685972aef7c2c64
SHA256:65bf54c94f2dad9ed90bfcd11a5068c63969a3ee9392f55af424ef30bce74fdd
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	filter.hiderotation	High
Vendor	jar	package name	filter	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:18	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	filter.hiderotation	High
Product	jar	package name	filter	Highest
Product	jar	package name	filter	Low
Product	jar	package name	hiderotation	Highest
Product	jar	package name	hiderotation	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:18	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	filter.hiderotation	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	filter.hiderotation	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

filter.invisibleelements.zip: filter.invisibleelements.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.invisibleelements.zip/filter.invisibleelements.jar
MD5: 82a9c48001e71628872f5a1b3ddfbcf5
SHA1: 26c0f7881893dcb4e4a92553ff567fdf286a9cdb
SHA256:6be17f64445f012e65fae98abff1a93b4a8c997e0f83c3259121ea76331a501b
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	filter.invisibleelements	High
Vendor	jar	package name	filter	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:18	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	filter.invisibleelements	High
Product	jar	package name	filter	Highest
Product	jar	package name	filter	Low
Product	jar	package name	invisibleelements	Highest
Product	jar	package name	invisibleelements	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:18	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	filter.invisibleelements	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	filter.invisibleelements	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

filter.multicolumn.zip: filter.multicolumn.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.multicolumn.zip/filter.multicolumn.jar
MD5: 838d3204515ad2a43e9f445ee822694f
SHA1: 7733642e5937c36069c81ee6b49f7ff37c01f279
SHA256:b4144bb04e44ce277e032317678d9bfdc64e4b480f562da3a5b70545fc116117
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	filter.multicolumn	High
Vendor	jar	package name	filter	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:21	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	filter.multicolumn	High
Product	jar	package name	filter	Highest
Product	jar	package name	filter	Low
Product	jar	package name	multicolumn	Highest
Product	jar	package name	multicolumn	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:21	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	filter.multicolumn	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	filter.multicolumn	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

filter.ocr.zip: filter.ocr.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.ocr.zip/filter.ocr.jar
MD5: 24702239184a7355b162900b2c864920
SHA1: 3f7ec9b7cbb49f5ec3186b00ee04aff08cd81210
SHA256:cd810d6488b872e7a6589482b60d1b631c4209cba660798c969921e1a227aa41
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	filter.ocr	High
Vendor	jar	package name	filter	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:18	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	filter.ocr	High
Product	jar	package name	filter	Highest
Product	jar	package name	filter	Low
Product	jar	package name	ocr	Highest
Product	jar	package name	ocr	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:18	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	filter.ocr	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	filter.ocr	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

filter.pagerange.zip: filter.pagerange.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.pagerange.zip/filter.pagerange.jar
MD5: 9ac9742abbe58b62a4037b389f5dcf3b
SHA1: 5b97478fc939447b627e5e0f0ef19aaa50259b6f
SHA256:13286a2829495c001d72f0855291c06c1e50e49403c7de371e9f79046059c6aa
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	filter.pagerange	High
Vendor	jar	package name	filter	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:22	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	filter.pagerange	High
Product	jar	package name	filter	Highest
Product	jar	package name	filter	Low
Product	jar	package name	page	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:22	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	filter.pagerange	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	filter.pagerange	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

filter.regex.zip: filter.regex.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.regex.zip/filter.regex.jar
MD5: 2db5382aa0f33ae4721e43234af0199f
SHA1: cb0e7be933ba89ff25611ef568cd692d0e82dab0
SHA256:020fefbb9eec3a4408b2259e1d5065f0f0e29a7f1fb6e61f1745a0e60ac8877b
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	filter.regex	High
Vendor	jar	package name	filter	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:22	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	filter.regex	High
Product	jar	package name	filter	Highest
Product	jar	package name	filter	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	regex	Highest
Product	jar	package name	regex	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:22	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	filter.regex	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	filter.regex	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

filter.regex.zip: filter.regex.jar: filterrenderer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.regex.zip/filter.regex.jar/com/inet/pdfc/filter/regex/structure/filterrenderer.js
MD5: fed6198a818efccd3e71fac743e61c3f
SHA1: dc6d579196c5b147daac7e14e034e2b004ca36f2
SHA256:87b3e46faf43504c51e1ad9407e3d6c17a3bcd8170c14ea7df3b1f4282275442
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

filter.texttransform.zip: filter.texttransform.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.texttransform.zip/filter.texttransform.jar
MD5: 2b351596ee37aee7458fdc81d5b5d1a0
SHA1: 19330fa378a9ef12cc4ae74c1946732d4639e44f
SHA256:47253ea9b22aecada461f52d5adb61637a6308fe666056f53cdfd834a5c16d54
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	filter.texttransform	High
Vendor	jar	package name	filter	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:23	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	filter.texttransform	High
Product	jar	package name	filter	Highest
Product	jar	package name	filter	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	texttransform	Highest
Product	jar	package name	texttransform	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:23	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	filter.texttransform	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	filter.texttransform	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

filter.urllookup.zip: filter.urllookup.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.urllookup.zip/filter.urllookup.jar
MD5: 9678a03ab4f64de9a833f856bc230302
SHA1: ce4c66948a32da642cde59988feb98c4b537532c
SHA256:be9d6d15737096ccdb4d1c07bf60b01da58bcf3887797919703374cbdca0cce4
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	filter.urllookup	High
Vendor	jar	package name	filter	Low
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:24	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	filter.urllookup	High
Product	jar	package name	filter	Highest
Product	jar	package name	filter	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	urllookup	Highest
Product	jar	package name	urllookup	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:24	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	filter.urllookup	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	filter.urllookup	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

hamcrest-3.0.jar

Description:

Core API and libraries of hamcrest matcher framework.

License:

BSD-3-Clause: https://raw.githubusercontent.com/hamcrest/JavaHamcrest/master/LICENSE

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.hamcrest/hamcrest/3.0/8fd9b78a8e6a6510a078a9e30e9e86a6035cfaf7/hamcrest-3.0.jar
MD5: 781023c38b054e9cf1c818c77895e1eb
SHA1: 8fd9b78a8e6a6510a078a9e30e9e86a6035cfaf7
SHA256:5d66b6a4a680755cb6ed7cb104fa7835ef644667586ff0737adeb977c39ecdbc
Referenced In Project/Scope: standalone:inetPlugin
pkg:maven/pdfc/standalone@26.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	hamcrest	High
Vendor	gradle	artifactid	hamcrest	Highest
Vendor	gradle	groupid	org.hamcrest	Highest
Vendor	jar	package name	hamcrest	Highest
Vendor	jar	package name	hamcrest	Low
Vendor	Manifest	automatic-module-name	org.hamcrest	Medium
Vendor	Manifest	bundle-symbolicname	org.hamcrest	Medium
Vendor	Manifest	Implementation-Vendor	hamcrest.org	High
Vendor	pom	artifactid	hamcrest	Low
Vendor	pom	developer id	joewalnes	Medium
Vendor	pom	developer id	npryce	Medium
Vendor	pom	developer id	sf105	Medium
Vendor	pom	developer name	Joe Walnes	Medium
Vendor	pom	developer name	Nat Pryce	Medium
Vendor	pom	developer name	Steve Freeman	Medium
Vendor	pom	groupid	org.hamcrest	Highest
Vendor	pom	name	Hamcrest	High
Vendor	pom	url	http://hamcrest.org/JavaHamcrest/	Highest
Product	file	name	hamcrest	High
Product	gradle	artifactid	hamcrest	Highest
Product	jar	package name	hamcrest	Highest
Product	Manifest	automatic-module-name	org.hamcrest	Medium
Product	Manifest	Bundle-Name	org.hamcrest	Medium
Product	Manifest	bundle-symbolicname	org.hamcrest	Medium
Product	Manifest	Implementation-Title	hamcrest	High
Product	pom	artifactid	hamcrest	Highest
Product	pom	developer id	joewalnes	Low
Product	pom	developer id	npryce	Low
Product	pom	developer id	sf105	Low
Product	pom	developer name	Joe Walnes	Low
Product	pom	developer name	Nat Pryce	Low
Product	pom	developer name	Steve Freeman	Low
Product	pom	groupid	org.hamcrest	Highest
Product	pom	name	Hamcrest	High
Product	pom	url	http://hamcrest.org/JavaHamcrest/	Medium
Version	file	version	3.0	High
Version	gradle	version	3.0	Highest
Version	Manifest	Implementation-Version	3.0	High
Version	pom	version	3.0	Highest

Identifiers

pkg:maven/org.hamcrest/hamcrest@3.0 (Confidence:High)

inetcore-26.4-tools.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/26.4/af1349c42b890b193fec19679941605fc83d7427/inetcore-26.4-tools.jar
MD5: 2ffdf28c46b4b748a733b2a1ae1566f5
SHA1: af1349c42b890b193fec19679941605fc83d7427
SHA256:c7ecfa3a0cb507f56eb8e44bffa3dc755a3d4ab9d251c660387d12420f822ce0
Referenced In Project/Scope: standalone:inetPlugin
inetcore-26.4-tools.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	inetcore	High
Vendor	gradle	artifactid	inetcore	Highest
Vendor	gradle	groupid	shared	Highest
Vendor	jar	package name	test	Low
Product	file	name	inetcore	High
Product	gradle	artifactid	inetcore	Highest
Version	file	name	inetcore	Medium
Version	file	version	26.4	High
Version	gradle	version	26.4	Highest

Identifiers

pkg:maven/shared/inetcore@26.4 (Confidence:Highest)

inetcore-26.4.jar (shaded: com.inet.shared:inetcore:null)

Description:

A blend composite defines the rule according to which a drawing primitive (known as the source) is mixed with existing graphics (know as the destination.)

ColorUtilities contains a set of tools to perform common color operations easily.

License:

LGPL: http://www.gnu.org/licenses/lgpl.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/26.4/7f7399b473441e8cf01ba4b77bcfa498e2b23985/inetcore-26.4.jar/META-INF/com/inet/shared/utils/BlendComposite/pom.xml
MD5: 15e3963148212192804e2b1a2b73ad1c
SHA1: 1095ba4522949a04590ab9c98b7f684e92579ef9
SHA256:e5556987ad0b1ede84a994741147dadf6de0cb7d80b845f530e2a96505b79151
Referenced In Project/Scope: standalone:inetPlugin

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	inetcore	Low
Vendor	pom	developer email	contact@inetsoftware.de	Low
Vendor	pom	developer email	morgand@apache.org	Low
Vendor	pom	developer id	inetsoftware	Medium
Vendor	pom	developer id	romainguy	Medium
Vendor	pom	developer id	sun	Medium
Vendor	pom	developer name	i-net /// software	Medium
Vendor	pom	developer name	Romain Guy	Medium
Vendor	pom	developer name	Sun	Medium
Vendor	pom	developer org	Sun	Medium
Vendor	pom	groupid	com.inet.shared	Highest
Vendor	pom	name	BlendComposite and ColorUtilities	High
Vendor	pom (hint)	developer id	oracle	Medium
Vendor	pom (hint)	developer name	oracle	Medium
Vendor	pom (hint)	developer org	oracle	Medium
Product	pom	artifactid	inetcore	Highest
Product	pom	developer email	contact@inetsoftware.de	Low
Product	pom	developer email	morgand@apache.org	Low
Product	pom	developer id	inetsoftware	Low
Product	pom	developer id	romainguy	Low
Product	pom	developer id	sun	Low
Product	pom	developer name	i-net /// software	Low
Product	pom	developer name	Romain Guy	Low
Product	pom	developer name	Sun	Low
Product	pom	developer org	Sun	Low
Product	pom	groupid	com.inet.shared	Highest
Product	pom	name	BlendComposite and ColorUtilities	High

Identifiers

None

inetcore-26.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/26.4/7f7399b473441e8cf01ba4b77bcfa498e2b23985/inetcore-26.4.jar
MD5: 111269d4a04ecfe0b45c553b70937b6c
SHA1: 7f7399b473441e8cf01ba4b77bcfa498e2b23985
SHA256:49bd3111c1970cabbba1bbdddb18530e039016150459fc5f8375731160382de1
Referenced In Project/Scope: standalone:inetPlugin
inetcore-26.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	inetcore	High
Vendor	gradle	artifactid	inetcore	Highest
Vendor	gradle	groupid	shared	Highest
Vendor	jar	package name	i	Highest
Vendor	jar	package name	inet	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 10:46	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	shared	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	inetcore	High
Product	gradle	artifactid	inetcore	Highest
Product	jar	package name	permissions	Highest
Product	jar	package name	shared	Highest
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 10:46	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	shared	Low
Product	Manifest	Implementation-Title	inetcore	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	inetcore	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	file	name	inetcore	Medium
Version	file	version	26.4	High
Version	gradle	version	26.4	Highest
Version	jar	package name	permissions	Highest
Version	jar	package name	shared	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

pkg:maven/shared/inetcore@26.4 (Confidence:Highest)

java-25-jre-x64-linux.tar.gz: java-25-jre-x64-linux.tar: jrt-fs.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/java-25-jre-x64-linux.tar.gz/java-25-jre-x64-linux.tar/jre-11/lib/jrt-fs.jar
MD5: 1df70173936075e29bb713826df33780
SHA1: 98754a0b01445893a562aa708ce2fb761ce64523
SHA256:b3f4b21edd86053d7b9d653d75f4ae319e41fe45d1bf7df1fe556f9cf3094692
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jrt-fs	High
Vendor	jar	package name	internal	Low
Vendor	jar	package name	jdk	Low
Vendor	jar	package name	jimage	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Adoptium	High
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Product	file	name	jrt-fs	High
Product	jar	package name	internal	Low
Product	jar	package name	jimage	Low
Product	Manifest	Implementation-Title	Java Runtime Environment	High
Product	Manifest	specification-title	Java Platform API Specification	Medium
Version	Manifest	Implementation-Version	25.0.2	High

Identifiers

cpe:2.3:a:eclipse:platform:25.0.2:*:*:*:*:*:*:* (Confidence:Medium)

jcip-annotations-1.0.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/net.jcip/jcip-annotations/1.0/afba4942caaeaf46aab0b976afd57cc7c181467e/jcip-annotations-1.0.jar
MD5: 9d5272954896c5a5d234f66b7372b17a
SHA1: afba4942caaeaf46aab0b976afd57cc7c181467e
SHA256:be5805392060c71474bf6c9a67a099471274d30b83eef84bfc4e0889a4f1dcc0
Referenced In Project/Scope: standalone:inetPlugin
jcip-annotations-1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.15

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jcip-annotations	High
Vendor	gradle	artifactid	jcip-annotations	Highest
Vendor	gradle	groupid	net.jcip	Highest
Vendor	jar	package name	annotations	Low
Vendor	jar	package name	jcip	Low
Vendor	jar	package name	net	Low
Vendor	pom	artifactid	jcip-annotations	Low
Vendor	pom	groupid	net.jcip	Highest
Vendor	pom	name	"Java Concurrency in Practice" book annotations	High
Vendor	pom	url	http://jcip.net/	Highest
Product	file	name	jcip-annotations	High
Product	gradle	artifactid	jcip-annotations	Highest
Product	jar	package name	annotations	Low
Product	jar	package name	jcip	Low
Product	pom	artifactid	jcip-annotations	Highest
Product	pom	groupid	net.jcip	Highest
Product	pom	name	"Java Concurrency in Practice" book annotations	High
Product	pom	url	http://jcip.net/	Medium
Version	file	version	1.0	High
Version	gradle	version	1.0	Highest
Version	pom	version	1.0	Highest

Identifiers

pkg:maven/net.jcip/jcip-annotations@1.0 (Confidence:High)

jlessc-1.15.jar

Description:

A Less CSS compiler written completely in Java (pure Java).

License:

MIT License: http://www.opensource.org/licenses/mit-license.php

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/de.inetsoftware/jlessc/1.15/2dbc9ed0ff94187412e6376823393b4ce90ccf0b/jlessc-1.15.jar
MD5: 3f8f1bb4e60ce8b65f287d36560d1313
SHA1: 2dbc9ed0ff94187412e6376823393b4ce90ccf0b
SHA256:c745dc12ca4e1252c8a082f8c1b9237e4758c6d7ecb82247c3ecc3fe7cd99bdc
Referenced In Project/Scope: standalone:inetPlugin
pkg:maven/pdfc/standalone@26.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jlessc	High
Vendor	gradle	artifactid	jlessc	Highest
Vendor	gradle	groupid	de.inetsoftware	Highest
Vendor	jar	package name	inet	Low
Vendor	jar	package name	less	Low
Vendor	jar	package name	lib	Low
Vendor	Manifest	automatic-module-name	de.inetsoftware.jlessc	Medium
Vendor	Manifest	bundle-symbolicname	de.inetsoftware.jlessc	Medium
Vendor	Manifest	Implementation-Vendor	i-net software GmbH, Berlin, Germany	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	pom	artifactid	jlessc	Low
Vendor	pom	developer email	vberlin@inetsoftware.de	Low
Vendor	pom	developer id	vberlin	Medium
Vendor	pom	developer name	Volker Berlin	Medium
Vendor	pom	developer org	i-net software	Medium
Vendor	pom	developer org URL	https://www.inetsoftware.de/	Medium
Vendor	pom	groupid	de.inetsoftware	Highest
Vendor	pom	name	JLessC	High
Vendor	pom	url	i-net-software/jlessc	Highest
Product	file	name	jlessc	High
Product	gradle	artifactid	jlessc	Highest
Product	jar	package name	less	Low
Product	jar	package name	lib	Low
Product	Manifest	automatic-module-name	de.inetsoftware.jlessc	Medium
Product	Manifest	bundle-symbolicname	de.inetsoftware.jlessc	Medium
Product	Manifest	Implementation-Title	JLessC, a Less CSS compiler	High
Product	pom	artifactid	jlessc	Highest
Product	pom	developer email	vberlin@inetsoftware.de	Low
Product	pom	developer id	vberlin	Low
Product	pom	developer name	Volker Berlin	Low
Product	pom	developer org	i-net software	Low
Product	pom	developer org URL	https://www.inetsoftware.de/	Low
Product	pom	groupid	de.inetsoftware	Highest
Product	pom	name	JLessC	High
Product	pom	url	i-net-software/jlessc	High
Version	file	version	1.15	High
Version	gradle	version	1.15	Highest
Version	Manifest	Bundle-Version	1.15	High
Version	Manifest	Implementation-Version	1.15	High
Version	pom	version	1.15	Highest

Identifiers

pkg:maven/de.inetsoftware/jlessc@1.15 (Confidence:High)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/jsr305/3.0.2/25ea2e8b0c338a877313bd4672d3fe056ea78f0d/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: standalone:inetPlugin
pkg:maven/de.inetsoftware/jlessc@1.15

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	gradle	artifactid	jsr305	Highest
Vendor	gradle	groupid	com.google.code.findbugs	Highest
Vendor	Manifest	bundle-symbolicname	org.jsr-305	Medium
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	file	name	jsr305	High
Product	gradle	artifactid	jsr305	Highest
Product	Manifest	Bundle-Name	FindBugs-jsr305	Medium
Product	Manifest	bundle-symbolicname	org.jsr-305	Medium
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-jsr305	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.2	High
Version	gradle	version	3.0.2	Highest
Version	Manifest	Bundle-Version	3.0.2	High
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

junit-4.13.2.jar

Description:

JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.

License:

Eclipse Public License 1.0: http://www.eclipse.org/legal/epl-v10.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/junit/junit/4.13.2/8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12/junit-4.13.2.jar
MD5: d98a9a02a99a9acd22d7653cbcc1f31f
SHA1: 8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12
SHA256:8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3
Referenced In Project/Scope: standalone:inetPlugin
pkg:maven/pdfc/standalone@26.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit	High
Vendor	gradle	artifactid	junit	Highest
Vendor	gradle	groupid	junit	Highest
Vendor	jar	package name	junit	Highest
Vendor	jar	package name	junit	Low
Vendor	Manifest	automatic-module-name	junit	Medium
Vendor	Manifest	implementation-url	http://junit.org	Low
Vendor	Manifest	Implementation-Vendor	JUnit	High
Vendor	Manifest	Implementation-Vendor-Id	junit	Medium
Vendor	pom	artifactid	junit	Low
Vendor	pom	developer email	david@saff.net	Low
Vendor	pom	developer email	kcooney@google.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	mail@stefan-birkner.de	Low
Vendor	pom	developer id	dsaff	Medium
Vendor	pom	developer id	kcooney	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	stefanbirkner	Medium
Vendor	pom	developer name	David Saff	Medium
Vendor	pom	developer name	Kevin Cooney	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Stefan Birkner	Medium
Vendor	pom	groupid	junit	Highest
Vendor	pom	name	JUnit	High
Vendor	pom	organization name	JUnit	High
Vendor	pom	organization url	http://www.junit.org	Medium
Vendor	pom	url	http://junit.org	Highest
Product	file	name	junit	High
Product	gradle	artifactid	junit	Highest
Product	jar	package name	junit	Highest
Product	Manifest	automatic-module-name	junit	Medium
Product	Manifest	Implementation-Title	JUnit	High
Product	Manifest	implementation-url	http://junit.org	Low
Product	pom	artifactid	junit	Highest
Product	pom	developer email	david@saff.net	Low
Product	pom	developer email	kcooney@google.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	mail@stefan-birkner.de	Low
Product	pom	developer id	dsaff	Low
Product	pom	developer id	kcooney	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	stefanbirkner	Low
Product	pom	developer name	David Saff	Low
Product	pom	developer name	Kevin Cooney	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Stefan Birkner	Low
Product	pom	groupid	junit	Highest
Product	pom	name	JUnit	High
Product	pom	organization name	JUnit	Low
Product	pom	organization url	http://www.junit.org	Low
Product	pom	url	http://junit.org	Medium
Version	file	version	4.13.2	High
Version	gradle	version	4.13.2	Highest
Version	Manifest	Implementation-Version	4.13.2	High
Version	pom	version	4.13.2	Highest

Identifiers

pkg:maven/junit/junit@4.13.2 (Confidence:High)
cpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:* (Confidence:Low)

junit-jupiter-5.14.0.jar

Description:

Module "junit-jupiter" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter/5.14.0/df30c385c7c8ea0e74e3b63d8c6c0fc2b0ecb55/junit-jupiter-5.14.0.jar
MD5: 7ddc03716bc709deb839426691440409
SHA1: 0df30c385c7c8ea0e74e3b63d8c6c0fc2b0ecb55
SHA256:a89501c76e91abfdc08201acdaaae681d5c8d59b62f375d5929b6681a0118f43
Referenced In Project/Scope: standalone:inetPlugin

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
pkg:maven/pdfc/standalone@26.4
pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-jupiter	High
Vendor	gradle	artifactid	junit-jupiter	Highest
Vendor	gradle	groupid	org.junit.jupiter	Highest
Vendor	jar	package name	module-info	Low
Vendor	Manifest	build-date	2025-09-30	Low
Vendor	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Vendor	Manifest	build-time	09:14:43.001+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-jupiter	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-jupiter	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.jupiter	Highest
Vendor	pom	name	JUnit Jupiter (Aggregator)	High
Vendor	pom	url	https://junit.org/	Highest
Product	file	name	junit-jupiter	High
Product	gradle	artifactid	junit-jupiter	Highest
Product	Manifest	build-date	2025-09-30	Low
Product	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Product	Manifest	build-time	09:14:43.001+0200	Low
Product	Manifest	Bundle-Name	JUnit Jupiter (Aggregator)	Medium
Product	Manifest	bundle-symbolicname	junit-jupiter	Medium
Product	Manifest	Implementation-Title	junit-jupiter	High
Product	Manifest	specification-title	junit-jupiter	Medium
Product	pom	artifactid	junit-jupiter	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.jupiter	Highest
Product	pom	name	JUnit Jupiter (Aggregator)	High
Product	pom	url	https://junit.org/	Medium
Version	file	version	5.14.0	High
Version	gradle	version	5.14.0	Highest
Version	Manifest	Bundle-Version	5.14.0	High
Version	Manifest	Implementation-Version	5.14.0	High
Version	pom	version	5.14.0	Highest

Identifiers

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0 (Confidence:High)

junit-jupiter-api-5.14.0.jar

Description:

Module "junit-jupiter-api" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-api/5.14.0/4cc3acff995a4ce56ebf735a485800ddede31cb0/junit-jupiter-api-5.14.0.jar
MD5: ed392a0bd93155f0fd0674022a8ad32c
SHA1: 4cc3acff995a4ce56ebf735a485800ddede31cb0
SHA256:d3431a004b83823bcdd95b6738130087ec32b2fb28a5a5deb4fbc16357bab8f9
Referenced In Project/Scope: standalone:inetPlugin

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-jupiter-api	High
Vendor	gradle	artifactid	junit-jupiter-api	Highest
Vendor	gradle	groupid	org.junit.jupiter	Highest
Vendor	jar	package name	api	Highest
Vendor	jar	package name	api	Low
Vendor	jar	package name	junit	Highest
Vendor	jar	package name	junit	Low
Vendor	jar	package name	jupiter	Highest
Vendor	jar	package name	jupiter	Low
Vendor	Manifest	build-date	2025-09-30	Low
Vendor	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Vendor	Manifest	build-time	09:14:43.001+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-jupiter-api	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-jupiter-api	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.jupiter	Highest
Vendor	pom	name	JUnit Jupiter API	High
Vendor	pom	url	https://junit.org/	Highest
Product	file	name	junit-jupiter-api	High
Product	gradle	artifactid	junit-jupiter-api	Highest
Product	jar	package name	api	Highest
Product	jar	package name	api	Low
Product	jar	package name	junit	Highest
Product	jar	package name	jupiter	Highest
Product	jar	package name	jupiter	Low
Product	Manifest	build-date	2025-09-30	Low
Product	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Product	Manifest	build-time	09:14:43.001+0200	Low
Product	Manifest	Bundle-Name	JUnit Jupiter API	Medium
Product	Manifest	bundle-symbolicname	junit-jupiter-api	Medium
Product	Manifest	Implementation-Title	junit-jupiter-api	High
Product	Manifest	specification-title	junit-jupiter-api	Medium
Product	pom	artifactid	junit-jupiter-api	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.jupiter	Highest
Product	pom	name	JUnit Jupiter API	High
Product	pom	url	https://junit.org/	Medium
Version	file	version	5.14.0	High
Version	gradle	version	5.14.0	Highest
Version	Manifest	Bundle-Version	5.14.0	High
Version	Manifest	Implementation-Version	5.14.0	High
Version	pom	version	5.14.0	Highest

Identifiers

pkg:maven/org.junit.jupiter/junit-jupiter-api@5.14.0 (Confidence:High)

junit-jupiter-engine-5.14.0.jar

Description:

Module "junit-jupiter-engine" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-engine/5.14.0/9da8a108759444556e759f30e663a416a80f402c/junit-jupiter-engine-5.14.0.jar
MD5: 5a1f1a143fb48a49ceb29526b3951d5b
SHA1: 9da8a108759444556e759f30e663a416a80f402c
SHA256:203b7a240b15716f8b881e2dfab0c580f1da5b274a196ff360f8cada2d1752ea
Referenced In Project/Scope: standalone:inetPlugin

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
pkg:maven/pdfc/standalone@26.4
pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-jupiter-engine	High
Vendor	gradle	artifactid	junit-jupiter-engine	Highest
Vendor	gradle	groupid	org.junit.jupiter	Highest
Vendor	jar	package name	engine	Highest
Vendor	jar	package name	engine	Low
Vendor	jar	package name	junit	Highest
Vendor	jar	package name	junit	Low
Vendor	jar	package name	jupiter	Highest
Vendor	jar	package name	jupiter	Low
Vendor	Manifest	build-date	2025-09-30	Low
Vendor	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Vendor	Manifest	build-time	09:14:43.001+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-jupiter-engine	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	provide-capability	org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.14.0"	Low
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-jupiter-engine	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.jupiter	Highest
Vendor	pom	name	JUnit Jupiter Engine	High
Vendor	pom	url	https://junit.org/	Highest
Product	file	name	junit-jupiter-engine	High
Product	gradle	artifactid	junit-jupiter-engine	Highest
Product	jar	package name	engine	Highest
Product	jar	package name	engine	Low
Product	jar	package name	junit	Highest
Product	jar	package name	jupiter	Highest
Product	jar	package name	jupiter	Low
Product	Manifest	build-date	2025-09-30	Low
Product	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Product	Manifest	build-time	09:14:43.001+0200	Low
Product	Manifest	Bundle-Name	JUnit Jupiter Engine	Medium
Product	Manifest	bundle-symbolicname	junit-jupiter-engine	Medium
Product	Manifest	Implementation-Title	junit-jupiter-engine	High
Product	Manifest	provide-capability	org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.14.0"	Low
Product	Manifest	specification-title	junit-jupiter-engine	Medium
Product	pom	artifactid	junit-jupiter-engine	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.jupiter	Highest
Product	pom	name	JUnit Jupiter Engine	High
Product	pom	url	https://junit.org/	Medium
Version	file	version	5.14.0	High
Version	gradle	version	5.14.0	Highest
Version	Manifest	Bundle-Version	5.14.0	High
Version	Manifest	Implementation-Version	5.14.0	High
Version	pom	version	5.14.0	Highest

Identifiers

pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0 (Confidence:High)

junit-jupiter-params-5.14.0.jar

Description:

Module "junit-jupiter-params" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-params/5.14.0/3027dc3529237b2285b261640134daa217068c96/junit-jupiter-params-5.14.0.jar
MD5: dd4c6213ae046597f04d386cc5038338
SHA1: 3027dc3529237b2285b261640134daa217068c96
SHA256:7fbb51837921c329604ba119dc1af0573d36230ea80f786aa3d4fd8c1dbb8a1b
Referenced In Project/Scope: standalone:inetPlugin

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-jupiter-params	High
Vendor	gradle	artifactid	junit-jupiter-params	Highest
Vendor	gradle	groupid	org.junit.jupiter	Highest
Vendor	jar	package name	junit	Highest
Vendor	jar	package name	junit	Low
Vendor	jar	package name	jupiter	Highest
Vendor	jar	package name	jupiter	Low
Vendor	jar	package name	params	Highest
Vendor	jar	package name	params	Low
Vendor	Manifest	build-date	2025-09-30	Low
Vendor	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Vendor	Manifest	build-time	09:14:43.001+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-jupiter-params	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-jupiter-params	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.jupiter	Highest
Vendor	pom	name	JUnit Jupiter Params	High
Vendor	pom	url	https://junit.org/	Highest
Product	file	name	junit-jupiter-params	High
Product	gradle	artifactid	junit-jupiter-params	Highest
Product	jar	package name	junit	Highest
Product	jar	package name	jupiter	Highest
Product	jar	package name	jupiter	Low
Product	jar	package name	params	Highest
Product	jar	package name	params	Low
Product	jar	package name	shadow	Low
Product	Manifest	build-date	2025-09-30	Low
Product	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Product	Manifest	build-time	09:14:43.001+0200	Low
Product	Manifest	Bundle-Name	JUnit Jupiter Params	Medium
Product	Manifest	bundle-symbolicname	junit-jupiter-params	Medium
Product	Manifest	Implementation-Title	junit-jupiter-params	High
Product	Manifest	specification-title	junit-jupiter-params	Medium
Product	pom	artifactid	junit-jupiter-params	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.jupiter	Highest
Product	pom	name	JUnit Jupiter Params	High
Product	pom	url	https://junit.org/	Medium
Version	file	version	5.14.0	High
Version	gradle	version	5.14.0	Highest
Version	Manifest	Bundle-Version	5.14.0	High
Version	Manifest	Implementation-Version	5.14.0	High
Version	pom	version	5.14.0	Highest

Identifiers

pkg:maven/org.junit.jupiter/junit-jupiter-params@5.14.0 (Confidence:High)

junit-platform-commons-1.14.0.jar

Description:

Module "junit-platform-commons" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-commons/1.14.0/e7e1bbf2044652efc5a2a21f6b8c21173a9b91a1/junit-platform-commons-1.14.0.jar
MD5: 7f72f4b9a2ee123155ac4e9a011e0d8f
SHA1: e7e1bbf2044652efc5a2a21f6b8c21173a9b91a1
SHA256:e543a3a8422f1dfe6047f535305b70c777e0db431f1ef3f55ef5c86ac0bbcb9b
Referenced In Project/Scope: standalone:inetPlugin

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-platform-commons	High
Vendor	gradle	artifactid	junit-platform-commons	Highest
Vendor	gradle	groupid	org.junit.platform	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	commons	Low
Vendor	jar	package name	junit	Highest
Vendor	jar	package name	junit	Low
Vendor	jar	package name	org	Highest
Vendor	jar	package name	platform	Highest
Vendor	jar	package name	platform	Low
Vendor	Manifest	build-date	2025-09-30	Low
Vendor	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Vendor	Manifest	build-time	09:14:43.001+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-platform-commons	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-platform-commons	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.platform	Highest
Vendor	pom	name	JUnit Platform Commons	High
Vendor	pom	url	https://junit.org/	Highest
Product	file	name	junit-platform-commons	High
Product	gradle	artifactid	junit-platform-commons	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	commons	Low
Product	jar	package name	junit	Highest
Product	jar	package name	platform	Highest
Product	jar	package name	platform	Low
Product	Manifest	build-date	2025-09-30	Low
Product	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Product	Manifest	build-time	09:14:43.001+0200	Low
Product	Manifest	Bundle-Name	JUnit Platform Commons	Medium
Product	Manifest	bundle-symbolicname	junit-platform-commons	Medium
Product	Manifest	Implementation-Title	junit-platform-commons	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	junit-platform-commons	Medium
Product	pom	artifactid	junit-platform-commons	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.platform	Highest
Product	pom	name	JUnit Platform Commons	High
Product	pom	url	https://junit.org/	Medium
Version	file	version	1.14.0	High
Version	gradle	version	1.14.0	Highest
Version	Manifest	Bundle-Version	1.14.0	High
Version	Manifest	Implementation-Version	1.14.0	High
Version	pom	version	1.14.0	Highest

Identifiers

pkg:maven/org.junit.platform/junit-platform-commons@1.14.0 (Confidence:High)
cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

junit-platform-engine-1.14.0.jar

Description:

Module "junit-platform-engine" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-engine/1.14.0/77386b812c0e3ba96cdd7c018d2a2f61940ccd8f/junit-platform-engine-1.14.0.jar
MD5: 80623f8b044fc4fde498e82659a5e9d7
SHA1: 77386b812c0e3ba96cdd7c018d2a2f61940ccd8f
SHA256:57cd29de834469aee656e5debda1f09f7c59630fd57b90cc0cbaa31726fc4d4a
Referenced In Project/Scope: standalone:inetPlugin

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-platform-engine	High
Vendor	gradle	artifactid	junit-platform-engine	Highest
Vendor	gradle	groupid	org.junit.platform	Highest
Vendor	jar	package name	engine	Highest
Vendor	jar	package name	engine	Low
Vendor	jar	package name	junit	Highest
Vendor	jar	package name	junit	Low
Vendor	jar	package name	platform	Highest
Vendor	jar	package name	platform	Low
Vendor	Manifest	build-date	2025-09-30	Low
Vendor	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Vendor	Manifest	build-time	09:14:43.001+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-platform-engine	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-platform-engine	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.platform	Highest
Vendor	pom	name	JUnit Platform Engine API	High
Vendor	pom	url	https://junit.org/	Highest
Product	file	name	junit-platform-engine	High
Product	gradle	artifactid	junit-platform-engine	Highest
Product	jar	package name	engine	Highest
Product	jar	package name	engine	Low
Product	jar	package name	junit	Highest
Product	jar	package name	platform	Highest
Product	jar	package name	platform	Low
Product	jar	package name	support	Low
Product	Manifest	build-date	2025-09-30	Low
Product	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Product	Manifest	build-time	09:14:43.001+0200	Low
Product	Manifest	Bundle-Name	JUnit Platform Engine API	Medium
Product	Manifest	bundle-symbolicname	junit-platform-engine	Medium
Product	Manifest	Implementation-Title	junit-platform-engine	High
Product	Manifest	specification-title	junit-platform-engine	Medium
Product	pom	artifactid	junit-platform-engine	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.platform	Highest
Product	pom	name	JUnit Platform Engine API	High
Product	pom	url	https://junit.org/	Medium
Version	file	version	1.14.0	High
Version	gradle	version	1.14.0	Highest
Version	Manifest	Bundle-Version	1.14.0	High
Version	Manifest	Implementation-Version	1.14.0	High
Version	pom	version	1.14.0	Highest

Identifiers

pkg:maven/org.junit.platform/junit-platform-engine@1.14.0 (Confidence:High)
cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

junit-platform-launcher-1.14.0.jar

Description:

Module "junit-platform-launcher" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-launcher/1.14.0/b61418170bd0b204429b9ae77af681a1ac74579d/junit-platform-launcher-1.14.0.jar
MD5: cbd4803d13742dba0ab00bd74d40aa3d
SHA1: b61418170bd0b204429b9ae77af681a1ac74579d
SHA256:1000b278797510dcec40d90f77f0d84dcc13e5982da563c18b6b5665aae4b81c
Referenced In Project/Scope: standalone:inetPlugin

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-platform-launcher	High
Vendor	gradle	artifactid	junit-platform-launcher	Highest
Vendor	gradle	groupid	org.junit.platform	Highest
Vendor	jar	package name	junit	Highest
Vendor	jar	package name	junit	Low
Vendor	jar	package name	launcher	Highest
Vendor	jar	package name	launcher	Low
Vendor	jar	package name	platform	Highest
Vendor	jar	package name	platform	Low
Vendor	Manifest	build-date	2025-09-30	Low
Vendor	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Vendor	Manifest	build-time	09:14:43.001+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-platform-launcher	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	provide-capability	org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.14.0"	Low
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-platform-launcher	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.platform	Highest
Vendor	pom	name	JUnit Platform Launcher	High
Vendor	pom	url	https://junit.org/	Highest
Product	file	name	junit-platform-launcher	High
Product	gradle	artifactid	junit-platform-launcher	Highest
Product	jar	package name	junit	Highest
Product	jar	package name	launcher	Highest
Product	jar	package name	launcher	Low
Product	jar	package name	platform	Highest
Product	jar	package name	platform	Low
Product	Manifest	build-date	2025-09-30	Low
Product	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Product	Manifest	build-time	09:14:43.001+0200	Low
Product	Manifest	Bundle-Name	JUnit Platform Launcher	Medium
Product	Manifest	bundle-symbolicname	junit-platform-launcher	Medium
Product	Manifest	Implementation-Title	junit-platform-launcher	High
Product	Manifest	provide-capability	org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.14.0"	Low
Product	Manifest	specification-title	junit-platform-launcher	Medium
Product	pom	artifactid	junit-platform-launcher	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.platform	Highest
Product	pom	name	JUnit Platform Launcher	High
Product	pom	url	https://junit.org/	Medium
Version	file	version	1.14.0	High
Version	gradle	version	1.14.0	Highest
Version	Manifest	Bundle-Version	1.14.0	High
Version	Manifest	Implementation-Version	1.14.0	High
Version	pom	version	1.14.0	Highest

Identifiers

pkg:maven/org.junit.platform/junit-platform-launcher@1.14.0 (Confidence:High)
cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

junit-platform-suite-1.14.0.jar

Description:

Module "junit-platform-suite" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite/1.14.0/28f2ccbb1d9707b233879e82f7f660c673ad053d/junit-platform-suite-1.14.0.jar
MD5: 5fa9ec3bbe194ae860e5e0a34099bd87
SHA1: 28f2ccbb1d9707b233879e82f7f660c673ad053d
SHA256:52472503bdf9168853f6aa7dcb87a6563ebcc7748fdd91d9440df1928da82c13
Referenced In Project/Scope: standalone:inetPlugin

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
pkg:maven/pdfc/standalone@26.4
pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-platform-suite	High
Vendor	gradle	artifactid	junit-platform-suite	Highest
Vendor	gradle	groupid	org.junit.platform	Highest
Vendor	jar	package name	module-info	Low
Vendor	Manifest	build-date	2025-09-30	Low
Vendor	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Vendor	Manifest	build-time	09:14:43.001+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-platform-suite	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-platform-suite	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.platform	Highest
Vendor	pom	name	JUnit Platform Suite (Aggregator)	High
Vendor	pom	url	https://junit.org/	Highest
Product	file	name	junit-platform-suite	High
Product	gradle	artifactid	junit-platform-suite	Highest
Product	Manifest	build-date	2025-09-30	Low
Product	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Product	Manifest	build-time	09:14:43.001+0200	Low
Product	Manifest	Bundle-Name	JUnit Platform Suite (Aggregator)	Medium
Product	Manifest	bundle-symbolicname	junit-platform-suite	Medium
Product	Manifest	Implementation-Title	junit-platform-suite	High
Product	Manifest	specification-title	junit-platform-suite	Medium
Product	pom	artifactid	junit-platform-suite	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.platform	Highest
Product	pom	name	JUnit Platform Suite (Aggregator)	High
Product	pom	url	https://junit.org/	Medium
Version	file	version	1.14.0	High
Version	gradle	version	1.14.0	Highest
Version	Manifest	Bundle-Version	1.14.0	High
Version	Manifest	Implementation-Version	1.14.0	High
Version	pom	version	1.14.0	Highest

Identifiers

pkg:maven/org.junit.platform/junit-platform-suite@1.14.0 (Confidence:High)
cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

junit-platform-suite-api-1.14.0.jar

Description:

Module "junit-platform-suite-api" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-api/1.14.0/32db2f3c4405b2cad90e3756be83815414c80897/junit-platform-suite-api-1.14.0.jar
MD5: 286cd58bb6f5564c4e9f8b79dd319cf9
SHA1: 32db2f3c4405b2cad90e3756be83815414c80897
SHA256:4399e19ace24e524d5957f7b3a9eaf954124241f3313ea659e01fd149f110c6a
Referenced In Project/Scope: standalone:inetPlugin

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-platform-suite-api	High
Vendor	gradle	artifactid	junit-platform-suite-api	Highest
Vendor	gradle	groupid	org.junit.platform	Highest
Vendor	jar	package name	api	Highest
Vendor	jar	package name	junit	Highest
Vendor	jar	package name	junit	Low
Vendor	jar	package name	platform	Highest
Vendor	jar	package name	platform	Low
Vendor	jar	package name	suite	Highest
Vendor	jar	package name	suite	Low
Vendor	Manifest	build-date	2025-09-30	Low
Vendor	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Vendor	Manifest	build-time	09:14:43.001+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-platform-suite-api	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-platform-suite-api	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.platform	Highest
Vendor	pom	name	JUnit Platform Suite API	High
Vendor	pom	url	https://junit.org/	Highest
Product	file	name	junit-platform-suite-api	High
Product	gradle	artifactid	junit-platform-suite-api	Highest
Product	jar	package name	api	Highest
Product	jar	package name	api	Low
Product	jar	package name	junit	Highest
Product	jar	package name	platform	Highest
Product	jar	package name	platform	Low
Product	jar	package name	suite	Highest
Product	jar	package name	suite	Low
Product	Manifest	build-date	2025-09-30	Low
Product	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Product	Manifest	build-time	09:14:43.001+0200	Low
Product	Manifest	Bundle-Name	JUnit Platform Suite API	Medium
Product	Manifest	bundle-symbolicname	junit-platform-suite-api	Medium
Product	Manifest	Implementation-Title	junit-platform-suite-api	High
Product	Manifest	specification-title	junit-platform-suite-api	Medium
Product	pom	artifactid	junit-platform-suite-api	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.platform	Highest
Product	pom	name	JUnit Platform Suite API	High
Product	pom	url	https://junit.org/	Medium
Version	file	version	1.14.0	High
Version	gradle	version	1.14.0	Highest
Version	Manifest	Bundle-Version	1.14.0	High
Version	Manifest	Implementation-Version	1.14.0	High
Version	pom	version	1.14.0	Highest

Identifiers

pkg:maven/org.junit.platform/junit-platform-suite-api@1.14.0 (Confidence:High)
cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

junit-platform-suite-commons-1.14.0.jar

Description:

Module "junit-platform-suite-commons" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-commons/1.14.0/d351237988ef097514fc7a35bcfa3de73a08a0a/junit-platform-suite-commons-1.14.0.jar
MD5: 235c8d26c6a49946d7826e862e0a181d
SHA1: 0d351237988ef097514fc7a35bcfa3de73a08a0a
SHA256:b868237f8cb2e193775e3f712b9405cb3d4ffaa180579cc83a7fe1f6db9c5cc1
Referenced In Project/Scope: standalone:inetPlugin

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-platform-suite-commons	High
Vendor	gradle	artifactid	junit-platform-suite-commons	Highest
Vendor	gradle	groupid	org.junit.platform	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	junit	Highest
Vendor	jar	package name	junit	Low
Vendor	jar	package name	platform	Highest
Vendor	jar	package name	platform	Low
Vendor	jar	package name	suite	Highest
Vendor	jar	package name	suite	Low
Vendor	Manifest	build-date	2025-09-30	Low
Vendor	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Vendor	Manifest	build-time	09:14:43.001+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-platform-suite-commons	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-platform-suite-commons	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.platform	Highest
Vendor	pom	name	JUnit Platform Suite Commons	High
Vendor	pom	url	https://junit.org/	Highest
Product	file	name	junit-platform-suite-commons	High
Product	gradle	artifactid	junit-platform-suite-commons	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	commons	Low
Product	jar	package name	junit	Highest
Product	jar	package name	platform	Highest
Product	jar	package name	platform	Low
Product	jar	package name	suite	Highest
Product	jar	package name	suite	Low
Product	Manifest	build-date	2025-09-30	Low
Product	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Product	Manifest	build-time	09:14:43.001+0200	Low
Product	Manifest	Bundle-Name	JUnit Platform Suite Commons	Medium
Product	Manifest	bundle-symbolicname	junit-platform-suite-commons	Medium
Product	Manifest	Implementation-Title	junit-platform-suite-commons	High
Product	Manifest	specification-title	junit-platform-suite-commons	Medium
Product	pom	artifactid	junit-platform-suite-commons	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.platform	Highest
Product	pom	name	JUnit Platform Suite Commons	High
Product	pom	url	https://junit.org/	Medium
Version	file	version	1.14.0	High
Version	gradle	version	1.14.0	Highest
Version	Manifest	Bundle-Version	1.14.0	High
Version	Manifest	Implementation-Version	1.14.0	High
Version	pom	version	1.14.0	Highest

Identifiers

pkg:maven/org.junit.platform/junit-platform-suite-commons@1.14.0 (Confidence:High)
cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

junit-platform-suite-engine-1.14.0.jar

Description:

Module "junit-platform-suite-engine" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-engine/1.14.0/f87f86ae21fb6bfa7749cca62ec55e302ecd3e88/junit-platform-suite-engine-1.14.0.jar
MD5: 9306e0421eb55b833e9f37eecaeabdd4
SHA1: f87f86ae21fb6bfa7749cca62ec55e302ecd3e88
SHA256:f545be730d41d6a760e8422e687b8223d632026ae2049250c80c797007789ac0
Referenced In Project/Scope: standalone:inetPlugin

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-platform-suite-engine	High
Vendor	gradle	artifactid	junit-platform-suite-engine	Highest
Vendor	gradle	groupid	org.junit.platform	Highest
Vendor	jar	package name	engine	Highest
Vendor	jar	package name	junit	Highest
Vendor	jar	package name	junit	Low
Vendor	jar	package name	platform	Highest
Vendor	jar	package name	platform	Low
Vendor	jar	package name	suite	Highest
Vendor	jar	package name	suite	Low
Vendor	Manifest	build-date	2025-09-30	Low
Vendor	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Vendor	Manifest	build-time	09:14:43.001+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-platform-suite-engine	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-platform-suite-engine	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.platform	Highest
Vendor	pom	name	JUnit Platform Suite Engine	High
Vendor	pom	url	https://junit.org/	Highest
Product	file	name	junit-platform-suite-engine	High
Product	gradle	artifactid	junit-platform-suite-engine	Highest
Product	jar	package name	engine	Highest
Product	jar	package name	engine	Low
Product	jar	package name	junit	Highest
Product	jar	package name	platform	Highest
Product	jar	package name	platform	Low
Product	jar	package name	suite	Highest
Product	jar	package name	suite	Low
Product	Manifest	build-date	2025-09-30	Low
Product	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Product	Manifest	build-time	09:14:43.001+0200	Low
Product	Manifest	Bundle-Name	JUnit Platform Suite Engine	Medium
Product	Manifest	bundle-symbolicname	junit-platform-suite-engine	Medium
Product	Manifest	Implementation-Title	junit-platform-suite-engine	High
Product	Manifest	specification-title	junit-platform-suite-engine	Medium
Product	pom	artifactid	junit-platform-suite-engine	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.platform	Highest
Product	pom	name	JUnit Platform Suite Engine	High
Product	pom	url	https://junit.org/	Medium
Version	file	version	1.14.0	High
Version	gradle	version	1.14.0	Highest
Version	Manifest	Bundle-Version	1.14.0	High
Version	Manifest	Implementation-Version	1.14.0	High
Version	pom	version	1.14.0	Highest

Identifiers

pkg:maven/org.junit.platform/junit-platform-suite-engine@1.14.0 (Confidence:High)
cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

junit-vintage-engine-5.14.0.jar

Description:

Module "junit-vintage-engine" of JUnit 5.

License:

Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.vintage/junit-vintage-engine/5.14.0/ac6667e31d2774c9281bbcbe00706d54c47db40e/junit-vintage-engine-5.14.0.jar
MD5: 372fe55fae45603c029e6379e728c764
SHA1: ac6667e31d2774c9281bbcbe00706d54c47db40e
SHA256:10b9cea16ce573d906719326795bb2b6a5aecbdcc64ab30825f05af9226cb595
Referenced In Project/Scope: standalone:inetPlugin

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
pkg:maven/pdfc/standalone@26.4
pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	junit-vintage-engine	High
Vendor	gradle	artifactid	junit-vintage-engine	Highest
Vendor	gradle	groupid	org.junit.vintage	Highest
Vendor	jar	package name	engine	Highest
Vendor	jar	package name	engine	Low
Vendor	jar	package name	junit	Highest
Vendor	jar	package name	junit	Low
Vendor	jar	package name	vintage	Highest
Vendor	jar	package name	vintage	Low
Vendor	Manifest	build-date	2025-09-30	Low
Vendor	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Vendor	Manifest	build-time	09:14:43.001+0200	Low
Vendor	Manifest	bundle-symbolicname	junit-vintage-engine	Medium
Vendor	Manifest	Implementation-Vendor	junit.org	High
Vendor	Manifest	provide-capability	org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.14.0"	Low
Vendor	Manifest	specification-vendor	junit.org	Low
Vendor	pom	artifactid	junit-vintage-engine	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	derancourt.juliette@gmail.com	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	sormuras@gmail.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	juliette-derancourt	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer id	sormuras	Medium
Vendor	pom	developer name	Christian Stein	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Juliette de Rancourt	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.junit.vintage	Highest
Vendor	pom	name	JUnit Vintage Engine	High
Vendor	pom	url	https://junit.org/	Highest
Product	file	name	junit-vintage-engine	High
Product	gradle	artifactid	junit-vintage-engine	Highest
Product	jar	package name	engine	Highest
Product	jar	package name	engine	Low
Product	jar	package name	junit	Highest
Product	jar	package name	vintage	Highest
Product	jar	package name	vintage	Low
Product	Manifest	build-date	2025-09-30	Low
Product	Manifest	build-revision	8545c93a9d86ef7f9c848c0eca4ec792f4e82a37	Low
Product	Manifest	build-time	09:14:43.001+0200	Low
Product	Manifest	Bundle-Name	JUnit Vintage Engine	Medium
Product	Manifest	bundle-symbolicname	junit-vintage-engine	Medium
Product	Manifest	Implementation-Title	junit-vintage-engine	High
Product	Manifest	provide-capability	org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.14.0"	Low
Product	Manifest	specification-title	junit-vintage-engine	Medium
Product	pom	artifactid	junit-vintage-engine	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	derancourt.juliette@gmail.com	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	sormuras@gmail.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	juliette-derancourt	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer id	sormuras	Low
Product	pom	developer name	Christian Stein	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Juliette de Rancourt	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.junit.vintage	Highest
Product	pom	name	JUnit Vintage Engine	High
Product	pom	url	https://junit.org/	Medium
Version	file	version	5.14.0	High
Version	gradle	version	5.14.0	Highest
Version	Manifest	Bundle-Version	5.14.0	High
Version	Manifest	Implementation-Version	5.14.0	High
Version	pom	version	5.14.0	Highest

Identifiers

pkg:maven/org.junit.vintage/junit-vintage-engine@5.14.0 (Confidence:High)
cpe:2.3:a:fan_platform_project:fan_platform:5.14.0:*:*:*:*:*:*:* (Confidence:Low)

maintenance.pdfc.zip: maintenance.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar
MD5: 2e2a9e48d882b56ab5479f106878860b
SHA1: ee2ad1f9c715427bdd3e18d83dfd54a4f8e8a638
SHA256:1a3a40bdb9e972e80f6c3df0589300c6c458978d13db237912103ee24fdda13e
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	maintenance.pdfc	High
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	jar	package name	plugins	Low
Vendor	Manifest	built-date	2026-04-24 14:18	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	maintenance.pdfc	High
Product	jar	package name	maintenance	Highest
Product	jar	package name	maintenance	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	plugins	Low
Product	Manifest	built-date	2026-04-24 14:18	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	maintenance.pdfc	High
Product	Manifest	specification-title	maintenance.pdfc	Medium
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

maintenance.pdfc.zip: maintenance.pdfc.jar: app.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar/com/inet/pdfc/plugins/maintenance/server/comparisons/js/app.js
MD5: 5e534fcce6f689d176c6f3b40fc4454f
SHA1: e5f82942adf62444636d28e904add7c61a18ea32
SHA256:d08c1c9da221cbd9c38a26e0235b0da7c3bed4ab30f504aa741d4085a42f7294
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

maintenance.pdfc.zip: maintenance.pdfc.jar: comparisons.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar/com/inet/pdfc/plugins/maintenance/server/comparisons/js/comparisons.js
MD5: dc34a947f1122f6f845deb82b822f15c
SHA1: 7a1528b00bb5229be98689b8c465b37c39bfa0ff
SHA256:27b0ebba3a0c757e921cb562be691ee971fa06d1247423ff2c16f71d87d51bee
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

ocr.tesseract.zip: commons-logging.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well-known logging systems.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/commons-logging.jar
MD5: e7a1e7cb6a89241ed9bfec4c25b6c645
SHA1: b9fc14968d63a8b8a8a2c1885fe3e90564239708
SHA256:bc2dfe32f1ef06509e6a065144c1adf7b420eabf11a87f30bd127f8faa332016
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-logging	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	logging	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.logging	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-logging/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-logging	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-logging	Low
Vendor	pom	developer email	baliuka@apache.org	Low
Vendor	pom	developer email	costin@apache.org	Low
Vendor	pom	developer email	craigmcc@apache.org	Low
Vendor	pom	developer email	dennisl@apache.org	Low
Vendor	pom	developer email	donaldp@apache.org	Low
Vendor	pom	developer email	ggregory at apache.org	Low
Vendor	pom	developer email	morgand@apache.org	Low
Vendor	pom	developer email	rdonkin@apache.org	Low
Vendor	pom	developer email	rsitze@apache.org	Low
Vendor	pom	developer email	rwaldhoff@apache.org	Low
Vendor	pom	developer email	sanders@apache.org	Low
Vendor	pom	developer email	skitching@apache.org	Low
Vendor	pom	developer email	tn@apache.org	Low
Vendor	pom	developer id	baliuka	Medium
Vendor	pom	developer id	bstansberry	Medium
Vendor	pom	developer id	costin	Medium
Vendor	pom	developer id	craigmcc	Medium
Vendor	pom	developer id	dennisl	Medium
Vendor	pom	developer id	donaldp	Medium
Vendor	pom	developer id	ggregory	Medium
Vendor	pom	developer id	morgand	Medium
Vendor	pom	developer id	rdonkin	Medium
Vendor	pom	developer id	rsitze	Medium
Vendor	pom	developer id	rwaldhoff	Medium
Vendor	pom	developer id	sanders	Medium
Vendor	pom	developer id	skitching	Medium
Vendor	pom	developer id	tn	Medium
Vendor	pom	developer name	Brian Stansberry	Medium
Vendor	pom	developer name	Costin Manolache	Medium
Vendor	pom	developer name	Craig McClanahan	Medium
Vendor	pom	developer name	Dennis Lundberg	Medium
Vendor	pom	developer name	Gary Gregory	Medium
Vendor	pom	developer name	Juozas Baliuka	Medium
Vendor	pom	developer name	Morgan Delagrange	Medium
Vendor	pom	developer name	Peter Donald	Medium
Vendor	pom	developer name	Richard Sitze	Medium
Vendor	pom	developer name	Robert Burrell Donkin	Medium
Vendor	pom	developer name	Rodney Waldhoff	Medium
Vendor	pom	developer name	Scott Sanders	Medium
Vendor	pom	developer name	Simon Kitching	Medium
Vendor	pom	developer name	Thomas Neidhart	Medium
Vendor	pom	developer org	Apache	Medium
Vendor	pom	developer org	The Apache Software Foundation	Medium
Vendor	pom	developer org URL	https://www.apache.org/	Medium
Vendor	pom	groupid	commons-logging	Highest
Vendor	pom	name	Apache Commons Logging	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	url	https://commons.apache.org/proper/commons-logging/	Highest
Product	file	name	commons-logging	High
Product	jar	package name	apache	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	logging	Highest
Product	Manifest	automatic-module-name	org.apache.commons.logging	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-logging/	Low
Product	Manifest	Bundle-Name	Apache Commons Logging	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-logging	Medium
Product	Manifest	Implementation-Title	Apache Commons Logging	High
Product	Manifest	multi-release	true	Low
Product	Manifest	specification-title	Apache Commons Logging	Medium
Product	pom	artifactid	commons-logging	Highest
Product	pom	developer email	baliuka@apache.org	Low
Product	pom	developer email	costin@apache.org	Low
Product	pom	developer email	craigmcc@apache.org	Low
Product	pom	developer email	dennisl@apache.org	Low
Product	pom	developer email	donaldp@apache.org	Low
Product	pom	developer email	ggregory at apache.org	Low
Product	pom	developer email	morgand@apache.org	Low
Product	pom	developer email	rdonkin@apache.org	Low
Product	pom	developer email	rsitze@apache.org	Low
Product	pom	developer email	rwaldhoff@apache.org	Low
Product	pom	developer email	sanders@apache.org	Low
Product	pom	developer email	skitching@apache.org	Low
Product	pom	developer email	tn@apache.org	Low
Product	pom	developer id	baliuka	Low
Product	pom	developer id	bstansberry	Low
Product	pom	developer id	costin	Low
Product	pom	developer id	craigmcc	Low
Product	pom	developer id	dennisl	Low
Product	pom	developer id	donaldp	Low
Product	pom	developer id	ggregory	Low
Product	pom	developer id	morgand	Low
Product	pom	developer id	rdonkin	Low
Product	pom	developer id	rsitze	Low
Product	pom	developer id	rwaldhoff	Low
Product	pom	developer id	sanders	Low
Product	pom	developer id	skitching	Low
Product	pom	developer id	tn	Low
Product	pom	developer name	Brian Stansberry	Low
Product	pom	developer name	Costin Manolache	Low
Product	pom	developer name	Craig McClanahan	Low
Product	pom	developer name	Dennis Lundberg	Low
Product	pom	developer name	Gary Gregory	Low
Product	pom	developer name	Juozas Baliuka	Low
Product	pom	developer name	Morgan Delagrange	Low
Product	pom	developer name	Peter Donald	Low
Product	pom	developer name	Richard Sitze	Low
Product	pom	developer name	Robert Burrell Donkin	Low
Product	pom	developer name	Rodney Waldhoff	Low
Product	pom	developer name	Scott Sanders	Low
Product	pom	developer name	Simon Kitching	Low
Product	pom	developer name	Thomas Neidhart	Low
Product	pom	developer org	Apache	Low
Product	pom	developer org	The Apache Software Foundation	Low
Product	pom	developer org URL	https://www.apache.org/	Low
Product	pom	groupid	commons-logging	Highest
Product	pom	name	Apache Commons Logging	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	url	https://commons.apache.org/proper/commons-logging/	Medium
Version	Manifest	Bundle-Version	1.3.4	High
Version	Manifest	Implementation-Version	1.3.4	High
Version	pom	parent-version	1.3.4	Low
Version	pom	version	1.3.4	Highest

Identifiers

pkg:maven/commons-logging/commons-logging@1.3.4 (Confidence:High)

ocr.tesseract.zip: fontbox.jar

Description:

    The Apache FontBox library is an open source Java tool to obtain low level information
    from font files. FontBox is a subproject of Apache PDFBox.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/fontbox.jar
MD5: fd7e63f326b2e92ced87c15c854bf820
SHA1: 48c70ca4297548041b7e05493a2db4780a037cf1
SHA256:8149d9897ab504f7a3f3797d552cd8925ef58149b4de3fb470eb46d747e68f86
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	fontbox	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	fontbox	Highest
Vendor	Manifest	automatic-module-name	org.apache.fontbox	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://pdfbox.apache.org	Low
Vendor	Manifest	bundle-symbolicname	org.apache.pdfbox.fontbox	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	fontbox	Low
Vendor	pom	groupid	org.apache.pdfbox	Highest
Vendor	pom	name	Apache FontBox	High
Vendor	pom	parent-artifactid	pdfbox-parent	Low
Vendor	pom	url	http://pdfbox.apache.org/	Highest
Product	file	name	fontbox	High
Product	jar	package name	apache	Highest
Product	jar	package name	fontbox	Highest
Product	Manifest	automatic-module-name	org.apache.fontbox	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://pdfbox.apache.org	Low
Product	Manifest	Bundle-Name	Apache FontBox	Medium
Product	Manifest	bundle-symbolicname	org.apache.pdfbox.fontbox	Medium
Product	Manifest	Implementation-Title	Apache FontBox	High
Product	Manifest	specification-title	Apache FontBox	Medium
Product	pom	artifactid	fontbox	Highest
Product	pom	groupid	org.apache.pdfbox	Highest
Product	pom	name	Apache FontBox	High
Product	pom	parent-artifactid	pdfbox-parent	Medium
Product	pom	url	http://pdfbox.apache.org/	Medium
Version	Manifest	Bundle-Version	3.0.7	High
Version	Manifest	Implementation-Version	3.0.7	High
Version	pom	version	3.0.7	Highest

Identifiers

pkg:maven/org.apache.pdfbox/fontbox@3.0.7 (Confidence:High)

ocr.tesseract.zip: jai-imageio-core.jar

Description:

    Java Advanced Imaging Image I/O Tools API core, but without the classes 
    involved with javax.media.jai dependencies, JPEG2000 or 
    codecLibJIIO, meaning that this library can be distributed under the 
    modified BSD license and should be GPL compatible.

License:

BSD 3-clause License w/nuclear disclaimer: LICENSE.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jai-imageio-core.jar
MD5: 6978d733bfb55c0a82639f724fe5f3bb
SHA1: fb6d79b929556362a241b2f65a04e538062f0077
SHA256:8ad3c68e9efffb10ac87ff8bc589adf64b04a729c5194c079efd0643607fd72a
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jai-imageio-core	High
Vendor	jar	package name	github	Highest
Vendor	Manifest	bundle-docurl	https://github.com/jai-imageio/	Low
Vendor	Manifest	bundle-symbolicname	jai-imageio-core	Medium
Vendor	Manifest	extension-name	com.github.jai-imageio-jai-imageio-core	Medium
Vendor	Manifest	Implementation-Vendor	https://github.com/jai-imageio/ jai-imageio GitHub group	High
Vendor	Manifest	specification-vendor	Sun Microsystems, Inc.	Low
Vendor	Manifest	url	https://github.com/jai-imageio/jai-imageio-core	Low
Vendor	pom	artifactid	jai-imageio-core	Low
Vendor	pom	developer email	stian@s11.no	Low
Vendor	pom	developer name	Stian Soiland-Reyes	Medium
Vendor	pom	developer org	s11	Medium
Vendor	pom	developer org URL	http://s11.no/	Medium
Vendor	pom	groupid	com.github.jai-imageio	Highest
Vendor	pom	name	Java Advanced Imaging Image I/O Tools API core (standalone)	High
Vendor	pom	organization name	jai-imageio GitHub group	High
Vendor	pom	organization url	jai-imageio/	Medium
Vendor	pom	url	jai-imageio/jai-imageio-core	Highest
Product	file	name	jai-imageio-core	High
Product	jar	package name	github	Highest
Product	Manifest	bundle-docurl	https://github.com/jai-imageio/	Low
Product	Manifest	Bundle-Name	Java Advanced Imaging Image I/O Tools API core (standalone)	Medium
Product	Manifest	bundle-symbolicname	jai-imageio-core	Medium
Product	Manifest	extension-name	com.github.jai-imageio-jai-imageio-core	Medium
Product	Manifest	Implementation-Title	Java Advanced Imaging Image I/O Tools API core (standalone)	High
Product	Manifest	specification-title	Java Advanced Imaging	Medium
Product	Manifest	url	https://github.com/jai-imageio/jai-imageio-core	Low
Product	pom	artifactid	jai-imageio-core	Highest
Product	pom	developer email	stian@s11.no	Low
Product	pom	developer name	Stian Soiland-Reyes	Low
Product	pom	developer org	s11	Low
Product	pom	developer org URL	http://s11.no/	Low
Product	pom	groupid	com.github.jai-imageio	Highest
Product	pom	name	Java Advanced Imaging Image I/O Tools API core (standalone)	High
Product	pom	organization name	jai-imageio GitHub group	Low
Product	pom	url	jai-imageio/	High
Product	pom	url	jai-imageio/jai-imageio-core	High
Version	Manifest	Bundle-Version	1.4.0	High
Version	Manifest	Implementation-Version	1.4.0	High
Version	pom	version	1.4.0	Highest

Identifiers

pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0 (Confidence:High)

ocr.tesseract.zip: jbig2-imageio.jar

Description:

	Java Image I/O plugin for reading JBIG2-compressed image data. 
	Formerly known as the levigo JBig2 ImageIO plugin (com.levigo.jbig2:levigo-jbig2-imageio).

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jbig2-imageio.jar
MD5: c51f45dc3d29bbf716774f9ff9e95ad6
SHA1: ad09a9bb94ea791ea81fb6c5bc2b13dd77872598
SHA256:29cb2951622f10acf61fd0656c4e6fa5562194a9095f7a1d26aa426e2f6b17eb
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jbig2-imageio	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	image	Highest
Vendor	jar	package name	jbig2	Highest
Vendor	jar	package name	pdfbox	Highest
Vendor	Manifest	automatic-module-name	org.apache.pdfbox.jbig2	Medium
Vendor	Manifest	implementation-url	https://www.apache.org/jbig2-imageio/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.pdfbox	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	jbig2-imageio	Low
Vendor	pom	developer id	adam	Medium
Vendor	pom	developer id	blitchfield	Medium
Vendor	pom	developer id	carrier	Medium
Vendor	pom	developer id	danielwilson	Medium
Vendor	pom	developer id	gbailleul	Medium
Vendor	pom	developer id	hennejg	Medium
Vendor	pom	developer id	holdersn	Medium
Vendor	pom	developer id	jahewson	Medium
Vendor	pom	developer id	jeremias	Medium
Vendor	pom	developer id	jukka	Medium
Vendor	pom	developer id	kjackson	Medium
Vendor	pom	developer id	koch	Medium
Vendor	pom	developer id	koehlecn	Medium
Vendor	pom	developer id	lehmi	Medium
Vendor	pom	developer id	leleueri	Medium
Vendor	pom	developer id	mmayer	Medium
Vendor	pom	developer id	msayhoun	Medium
Vendor	pom	developer id	pkoch	Medium
Vendor	pom	developer id	tallison	Medium
Vendor	pom	developer id	tboehme	Medium
Vendor	pom	developer id	tchojecki	Medium
Vendor	pom	developer id	tilman	Medium
Vendor	pom	developer id	vfed	Medium
Vendor	pom	developer name	Adam Nichols	Medium
Vendor	pom	developer name	Andreas Lehmkühler	Medium
Vendor	pom	developer name	Ben Litchfield	Medium
Vendor	pom	developer name	Brian Carrier	Medium
Vendor	pom	developer name	Carolin Köhler	Medium
Vendor	pom	developer name	Daniel Wilson	Medium
Vendor	pom	developer name	Eric Leleu	Medium
Vendor	pom	developer name	Guillaume Bailleul	Medium
Vendor	pom	developer name	Jeremias Maerki	Medium
Vendor	pom	developer name	Johannes Koch	Medium
Vendor	pom	developer name	John Hewson	Medium
Vendor	pom	developer name	Jukka Zitting	Medium
Vendor	pom	developer name	Jörg Henne	Medium
Vendor	pom	developer name	Kevin Jackson	Medium
Vendor	pom	developer name	Maruan Sayhoun	Medium
Vendor	pom	developer name	Matthäus Mayer	Medium
Vendor	pom	developer name	Phillipp Koch	Medium
Vendor	pom	developer name	Sebastian Holder	Medium
Vendor	pom	developer name	Thomas Chojecki	Medium
Vendor	pom	developer name	Tilman Hausherr	Medium
Vendor	pom	developer name	Tim Allison	Medium
Vendor	pom	developer name	Timo Boehme	Medium
Vendor	pom	developer name	Villu Ruusmann	Medium
Vendor	pom	groupid	org.apache.pdfbox	Highest
Vendor	pom	name	PDFBox JBIG2 ImageIO plugin	High
Vendor	pom	organization name	The Apache Software Foundation	High
Vendor	pom	organization url	http://pdfbox.apache.org	Medium
Vendor	pom	parent-artifactid	apache	Low
Vendor	pom	parent-groupid	org.apache	Medium
Product	file	name	jbig2-imageio	High
Product	jar	package name	apache	Highest
Product	jar	package name	image	Highest
Product	jar	package name	jbig2	Highest
Product	jar	package name	pdfbox	Highest
Product	Manifest	automatic-module-name	org.apache.pdfbox.jbig2	Medium
Product	Manifest	Implementation-Title	PDFBox JBIG2 ImageIO plugin	High
Product	Manifest	implementation-url	https://www.apache.org/jbig2-imageio/	Low
Product	Manifest	specification-title	PDFBox JBIG2 ImageIO plugin	Medium
Product	pom	artifactid	jbig2-imageio	Highest
Product	pom	developer id	adam	Low
Product	pom	developer id	blitchfield	Low
Product	pom	developer id	carrier	Low
Product	pom	developer id	danielwilson	Low
Product	pom	developer id	gbailleul	Low
Product	pom	developer id	hennejg	Low
Product	pom	developer id	holdersn	Low
Product	pom	developer id	jahewson	Low
Product	pom	developer id	jeremias	Low
Product	pom	developer id	jukka	Low
Product	pom	developer id	kjackson	Low
Product	pom	developer id	koch	Low
Product	pom	developer id	koehlecn	Low
Product	pom	developer id	lehmi	Low
Product	pom	developer id	leleueri	Low
Product	pom	developer id	mmayer	Low
Product	pom	developer id	msayhoun	Low
Product	pom	developer id	pkoch	Low
Product	pom	developer id	tallison	Low
Product	pom	developer id	tboehme	Low
Product	pom	developer id	tchojecki	Low
Product	pom	developer id	tilman	Low
Product	pom	developer id	vfed	Low
Product	pom	developer name	Adam Nichols	Low
Product	pom	developer name	Andreas Lehmkühler	Low
Product	pom	developer name	Ben Litchfield	Low
Product	pom	developer name	Brian Carrier	Low
Product	pom	developer name	Carolin Köhler	Low
Product	pom	developer name	Daniel Wilson	Low
Product	pom	developer name	Eric Leleu	Low
Product	pom	developer name	Guillaume Bailleul	Low
Product	pom	developer name	Jeremias Maerki	Low
Product	pom	developer name	Johannes Koch	Low
Product	pom	developer name	John Hewson	Low
Product	pom	developer name	Jukka Zitting	Low
Product	pom	developer name	Jörg Henne	Low
Product	pom	developer name	Kevin Jackson	Low
Product	pom	developer name	Maruan Sayhoun	Low
Product	pom	developer name	Matthäus Mayer	Low
Product	pom	developer name	Phillipp Koch	Low
Product	pom	developer name	Sebastian Holder	Low
Product	pom	developer name	Thomas Chojecki	Low
Product	pom	developer name	Tilman Hausherr	Low
Product	pom	developer name	Tim Allison	Low
Product	pom	developer name	Timo Boehme	Low
Product	pom	developer name	Villu Ruusmann	Low
Product	pom	groupid	org.apache.pdfbox	Highest
Product	pom	name	PDFBox JBIG2 ImageIO plugin	High
Product	pom	organization name	The Apache Software Foundation	Low
Product	pom	organization url	http://pdfbox.apache.org	Low
Product	pom	parent-artifactid	apache	Medium
Product	pom	parent-groupid	org.apache	Medium
Version	Manifest	Implementation-Version	3.0.4	High
Version	pom	parent-version	3.0.4	Low
Version	pom	version	3.0.4	Highest

Identifiers

pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4 (Confidence:High)

ocr.tesseract.zip: jboss-vfs.jar

Description:

A VFS library

License:

Apache License 2.0: http://repository.jboss.org/licenses/apache-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jboss-vfs.jar
MD5: ecf3234794d1b7d03dc1eb5380328e04
SHA1: 748b9f156f35bf63ead9887f040cfc48af18f7f0
SHA256:33a84eac3f1027551146247e3ef4057dc8840cfc8cd436cb2f925b6f5d2126e9
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jboss-vfs	High
Vendor	jar	package name	jboss	Highest
Vendor	jar	package name	vfs	Highest
Vendor	Manifest	automatic-module-name	org.jboss.vfs	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	implementation-url	http://www.jboss.org	Low
Vendor	Manifest	Implementation-Vendor	JBoss, A division of Red Hat, Inc	High
Vendor	Manifest	specification-vendor	JBoss, A division of Red Hat, Inc	Low
Vendor	pom	artifactid	jboss-vfs	Low
Vendor	pom	groupid	org.jboss	Highest
Vendor	pom	name	JBoss VFS	High
Vendor	pom	organization name	JBoss, A division of Red Hat, Inc	High
Vendor	pom	organization url	http://www.jboss.org	Medium
Vendor	pom	parent-artifactid	jboss-parent	Low
Vendor	pom	url	http://www.jboss.org	Highest
Product	file	name	jboss-vfs	High
Product	jar	package name	jboss	Highest
Product	jar	package name	vfs	Highest
Product	Manifest	automatic-module-name	org.jboss.vfs	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	Implementation-Title	JBoss VFS	High
Product	Manifest	implementation-url	http://www.jboss.org	Low
Product	Manifest	specification-title	JBoss VFS	Medium
Product	pom	artifactid	jboss-vfs	Highest
Product	pom	groupid	org.jboss	Highest
Product	pom	name	JBoss VFS	High
Product	pom	organization name	JBoss, A division of Red Hat, Inc	Low
Product	pom	organization url	http://www.jboss.org	Low
Product	pom	parent-artifactid	jboss-parent	Medium
Product	pom	url	http://www.jboss.org	Medium
Version	Manifest	Implementation-Version	3.3.2.Final	High
Version	pom	parent-version	3.3.2.Final	Low
Version	pom	version	3.3.2.Final	Highest

Identifiers

pkg:maven/org.jboss/jboss-vfs@3.3.2.Final (Confidence:High)

ocr.tesseract.zip: jna.jar

Description:

JNA Library

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar
MD5: 97fcb12698f8c1e4eed897e5c490e098
SHA1: 50c5b36af5dfd16cab07a1616046a50ec52d1e32
SHA256:9e5cdb5ff4ad07bf116cb2b37b2b84987041d79a8991766a08b79b085c6bb6c2
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jna	High
Vendor	jar	package name	jna	Highest
Vendor	jar	package name	jna	Low
Vendor	jar	package name	sun	Highest
Vendor	jar	package name	sun	Low
Vendor	jar (hint)	package name	oracle	Highest
Vendor	jar (hint)	package name	oracle	Low
Vendor	Manifest	automatic-module-name	com.sun.jna	Medium
Vendor	Manifest	bundle-activationpolicy	lazy	Low
Vendor	Manifest	bundle-category	jni	Low
Vendor	Manifest	bundle-nativecode	com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Vendor	Manifest	bundle-symbolicname	com.sun.jna	Medium
Vendor	Manifest	Implementation-Vendor	JNA Development Team	High
Vendor	Manifest	specification-vendor	JNA Development Team	Low
Product	file	name	jna	High
Product	jar	package name	jna	Highest
Product	jar	package name	jna	Low
Product	jar	package name	library	Highest
Product	jar	package name	native	Highest
Product	jar	package name	sun	Highest
Product	jar	package name	win32	Highest
Product	Manifest	automatic-module-name	com.sun.jna	Medium
Product	Manifest	bundle-activationpolicy	lazy	Low
Product	Manifest	bundle-category	jni	Low
Product	Manifest	Bundle-Name	jna	Medium
Product	Manifest	bundle-nativecode	com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64	Low
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Product	Manifest	bundle-symbolicname	com.sun.jna	Medium
Product	Manifest	Implementation-Title	com.sun.jna	High
Product	Manifest	specification-title	Java Native Access (JNA)	Medium
Version	jar	package name	jna	Highest
Version	jar	package name	sun	Highest
Version	jar	package name	win32	Highest
Version	Manifest	Bundle-Version	5.18.1	High
Version	Manifest	Implementation-Version	5.18.1 (b0)	High

Identifiers

cpe:2.3:a:oracle:java_se:5.18.1:*:*:*:*:*:*:* (Confidence:Low)

ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: 302945a811fd8e21bcdd5226c73b6f74
SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607c
SHA256:b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699d
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jnidispatch	High
Product	file	name	jnidispatch	High

Identifiers

None

ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 2d2475f1f026dd54e9f3e787ae4f81da
SHA1: 27ff882ac271db547aee520b38e3ba9aa91e136c
SHA256:5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jnidispatch	High
Product	file	name	jnidispatch	High

Identifiers

None

ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: 0caa1ef75a807f9dde05084fa2219a5c
SHA1: 2f5e1cd82cde192905c7510ce99037b67d980640
SHA256:752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jnidispatch	High
Product	file	name	jnidispatch	High

Identifiers

None

ocr.tesseract.zip: lept4j.jar

Description:

        # Lept4J 

        ## Description:

        A Java JNA wrapper for Leptonica Image Processing library. 

        Lept4J is released and distributed under the Apache License, v2.0.

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar
MD5: 70889e28b7569dd54e7da9ced01dabdf
SHA1: ec69d554f05e030b5e06295a4d39057634759549
SHA256:5feb69a8fc9550809b23cb980270cdf99368dea330ba7d98789e2dc93f8bef6f
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	lept4j	High
Vendor	jar	package name	lept4j	Highest
Vendor	jar	package name	leptonica	Highest
Vendor	jar	package name	net	Highest
Vendor	jar	package name	sourceforge	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	artifactid	lept4j	Low
Vendor	pom	developer email	nguyenq@users.sf.net	Low
Vendor	pom	developer name	Quan Nguyen	Medium
Vendor	pom	groupid	net.sourceforge.lept4j	Highest
Vendor	pom	name	Lept4J - Leptonica for Java	High
Vendor	pom	url	nguyenq/lept4j	Highest
Product	file	name	lept4j	High
Product	jar	package name	lept4j	Highest
Product	jar	package name	leptonica	Highest
Product	jar	package name	net	Highest
Product	jar	package name	sourceforge	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	artifactid	lept4j	Highest
Product	pom	developer email	nguyenq@users.sf.net	Low
Product	pom	developer name	Quan Nguyen	Low
Product	pom	groupid	net.sourceforge.lept4j	Highest
Product	pom	name	Lept4J - Leptonica for Java	High
Product	pom	url	nguyenq/lept4j	High
Version	pom	version	1.19.1	Highest

Identifiers

pkg:maven/net.sourceforge.lept4j/lept4j@1.19.1 (Confidence:High)

ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar/win32-x86-64/libleptonica1841.dll
MD5: 981b8e38e33018fff693c8e3ec0f2254
SHA1: 91a9cd0a874d614bc8a8946d2e0a8573e8b96ac1
SHA256:0b2cb584baeb38b90033344b4d70830b33ba01396fb9142b9b733e83c8a73fb8
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	libleptonica1841	High
Product	file	name	libleptonica1841	High
Version	file	name	libleptonica1841	Medium
Version	file	version	1841	Medium

Identifiers

None

ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar/win32-x86/libleptonica1841.dll
MD5: 64f0634192bcf75ade5ea06f8119512d
SHA1: b387acaa5209f796fb3065395548d2adcbad620e
SHA256:405e5263b72cb7d63c723fd85a124201cd66aa9a983b3a1c1e4c82003c91bcaa
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	libleptonica1841	High
Product	file	name	libleptonica1841	High
Version	file	name	libleptonica1841	Medium
Version	file	version	1841	Medium

Identifiers

None

ocr.tesseract.zip: ocr.tesseract.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/ocr.tesseract.jar
MD5: ed08db3691c91452a2671ba294e954c1
SHA1: 8cee1ab4f322b35162bd90bfa693af2a02a77386
SHA256:efc7b3ac4b6a41cfcb48d72436c97d3a509666f10e5e780817d040369a6ab16b
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	ocr.tesseract	High
Vendor	jar	package name	inet	Low
Vendor	jar	package name	ocr	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:19	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	ocr.tesseract	High
Product	jar	package name	ocr	Highest
Product	jar	package name	ocr	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	tesseract	Highest
Product	jar	package name	tesseract	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:19	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	ocr.tesseract	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	ocr.tesseract	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:tesseract_ocr_project:tesseract_ocr:26.4.216:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:tesseract_project:tesseract:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

ocr.tesseract.zip: pdfbox-debugger.jar

Description:

    The Apache PDFBox library is an open source Java tool for working with PDF documents. 
    This artefact contains the PDFDebugger.

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox-debugger.jar
MD5: 85573afca8351375b49718b379abc76c
SHA1: 2c48091b1dd9be69d09e1aea657fc1e4065b08e7
SHA256:79320b36483f001661b01e9409d9b62066e07a3a4e2f9e6568d777b04896d130
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	pdfbox-debugger	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	debugger	Highest
Vendor	jar	package name	pdfbox	Highest
Vendor	jar	package name	pdfdebugger	Highest
Vendor	Manifest	automatic-module-name	org.apache.pdfbox.debugger	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	pdfbox-debugger	Low
Vendor	pom	groupid	org.apache.pdfbox	Highest
Vendor	pom	name	Apache PDFBox Debugger	High
Vendor	pom	parent-artifactid	pdfbox-parent	Low
Product	file	name	pdfbox-debugger	High
Product	jar	package name	apache	Highest
Product	jar	package name	debugger	Highest
Product	jar	package name	pdfbox	Highest
Product	jar	package name	pdfdebugger	Highest
Product	Manifest	automatic-module-name	org.apache.pdfbox.debugger	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Apache PDFBox Debugger	High
Product	Manifest	specification-title	Apache PDFBox Debugger	Medium
Product	pom	artifactid	pdfbox-debugger	Highest
Product	pom	groupid	org.apache.pdfbox	Highest
Product	pom	name	Apache PDFBox Debugger	High
Product	pom	parent-artifactid	pdfbox-parent	Medium
Version	Manifest	Implementation-Version	3.0.7	High
Version	pom	version	3.0.7	Highest

Identifiers

pkg:maven/org.apache.pdfbox/pdfbox-debugger@3.0.7 (Confidence:High)

ocr.tesseract.zip: pdfbox.jar

Description:

        The Apache PDFBox library is an open source Java tool for working with PDF documents.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox.jar
MD5: adeb0637e9451d49e610ee3bc16781cd
SHA1: ecfc1bbfa656d3e330b8cc9e6996a18cde1c9bd0
SHA256:7cefa717622330951b4343abf1e5d36bccb11f4ba245d78aaa73251d08fec623
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	pdfbox	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	pdfbox	Highest
Vendor	Manifest	automatic-module-name	org.apache.pdfbox	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://pdfbox.apache.org	Low
Vendor	Manifest	bundle-symbolicname	org.apache.pdfbox	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	pdfbox	Low
Vendor	pom	groupid	org.apache.pdfbox	Highest
Vendor	pom	name	Apache PDFBox	High
Vendor	pom	parent-artifactid	pdfbox-parent	Low
Product	file	name	pdfbox	High
Product	jar	package name	apache	Highest
Product	jar	package name	pdfbox	Highest
Product	Manifest	automatic-module-name	org.apache.pdfbox	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://pdfbox.apache.org	Low
Product	Manifest	Bundle-Name	Apache PDFBox	Medium
Product	Manifest	bundle-symbolicname	org.apache.pdfbox	Medium
Product	Manifest	Implementation-Title	Apache PDFBox	High
Product	Manifest	specification-title	Apache PDFBox	Medium
Product	pom	artifactid	pdfbox	Highest
Product	pom	groupid	org.apache.pdfbox	Highest
Product	pom	name	Apache PDFBox	High
Product	pom	parent-artifactid	pdfbox-parent	Medium
Version	Manifest	Bundle-Version	3.0.7	High
Version	Manifest	Implementation-Version	3.0.7	High
Version	pom	version	3.0.7	Highest

Identifiers

pkg:maven/org.apache.pdfbox/pdfbox@3.0.7 (Confidence:High)

ocr.tesseract.zip: tess4j.jar

Description:

        # Tess4J

        ## Description:

        A Java JNA wrapper for Tesseract OCR API.

        Tess4J is released and distributed under the Apache License, v2.0.

        ## Features:

        The library provides optical character recognition (OCR) support for:

        TIFF, JPEG, GIF, PNG, and BMP image formats
        Multi-page TIFF images
        PDF document format

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar
MD5: f6a0f08fbc08771303e5cb8dffbc949a
SHA1: 851d6f93d97a155d8831736ad1031a539946014e
SHA256:e65bcc6328ab575684038d45e1891fa48e0d8255097a628baee0d8cfeb5ea816
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	tess4j	High
Vendor	jar	package name	net	Highest
Vendor	jar	package name	recognition	Highest
Vendor	jar	package name	sourceforge	Highest
Vendor	jar	package name	tess4j	Highest
Vendor	jar	package name	tesseract	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	implementation-url	http://tess4j.sourceforge.net	Low
Vendor	Manifest	Implementation-Vendor	Tess4J	High
Vendor	Manifest	specification-vendor	Tess4J	Low
Vendor	pom	artifactid	tess4j	Low
Vendor	pom	developer email	nguyenq@users.sf.net	Low
Vendor	pom	developer email	osoriojaques@gmail.com	Low
Vendor	pom	developer name	O.J. Sousa Rodrigues	Medium
Vendor	pom	developer name	Quan Nguyen	Medium
Vendor	pom	groupid	net.sourceforge.tess4j	Highest
Vendor	pom	name	Tess4J - Tesseract for Java	High
Vendor	pom	organization name	Tess4J	High
Vendor	pom	organization url	http://tess4j.sourceforge.net	Medium
Vendor	pom	url	http://tess4j.sourceforge.net	Highest
Product	file	name	tess4j	High
Product	jar	package name	net	Highest
Product	jar	package name	recognition	Highest
Product	jar	package name	sourceforge	Highest
Product	jar	package name	tess4j	Highest
Product	jar	package name	tesseract	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Tess4J - Tesseract for Java	High
Product	Manifest	implementation-url	http://tess4j.sourceforge.net	Low
Product	Manifest	specification-title	Tess4J - Tesseract for Java	Medium
Product	pom	artifactid	tess4j	Highest
Product	pom	developer email	nguyenq@users.sf.net	Low
Product	pom	developer email	osoriojaques@gmail.com	Low
Product	pom	developer name	O.J. Sousa Rodrigues	Low
Product	pom	developer name	Quan Nguyen	Low
Product	pom	groupid	net.sourceforge.tess4j	Highest
Product	pom	name	Tess4J - Tesseract for Java	High
Product	pom	organization name	Tess4J	Low
Product	pom	organization url	http://tess4j.sourceforge.net	Low
Product	pom	url	http://tess4j.sourceforge.net	Medium
Version	Manifest	Implementation-Version	5.12.0	High
Version	pom	version	5.12.0	Highest

Identifiers

pkg:maven/net.sourceforge.tess4j/tess4j@5.12.0 (Confidence:High)
cpe:2.3:a:tesseract_project:tesseract:5.12.0:*:*:*:*:*:*:* (Confidence:Low)

ocr.tesseract.zip: tess4j.jar: libtesseract541.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar/win32-x86-64/libtesseract541.dll
MD5: 1246c1e50200dc43722e926e28fc7c03
SHA1: d8a78040e9c7c71ccaeb627b73c41c66a18b5157
SHA256:8180efb176e09b7218144fe69d84c0cf6b6187e20d8529f1138bd77396d6f4fa
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	libtesseract541	High
Product	file	name	libtesseract541	High
Version	file	name	libtesseract541	Medium
Version	file	version	541	Medium

Identifiers

None

ocr.tesseract.zip: tess4j.jar: libtesseract541.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar/win32-x86/libtesseract541.dll
MD5: cbf57c8eb12e95512e67638f344ae537
SHA1: 5531d539121fd0aa57d11febd2e8b2a5c13fca05
SHA256:d4d1843d9efeeec1ca53c4ebe6d39e22e5bf17f5bee8b9eedb3bcef7c3c8c84d
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	libtesseract541	High
Product	file	name	libtesseract541	High
Version	file	name	libtesseract541	Medium
Version	file	version	541	Medium

Identifiers

None

opentest4j-1.3.0.jar

Description:

Open Test Alliance for the JVM

License:

The Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.opentest4j/opentest4j/1.3.0/152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e/opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256:48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Project/Scope: standalone:inetPlugin

pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	opentest4j	High
Vendor	gradle	artifactid	opentest4j	Highest
Vendor	gradle	groupid	org.opentest4j	Highest
Vendor	jar	package name	opentest4j	Highest
Vendor	jar	package name	opentest4j	Low
Vendor	Manifest	build-date	2023-07-06	Low
Vendor	Manifest	build-revision	214973bfa4e7e9be7d04e623202cc4147c7036d2	Low
Vendor	Manifest	build-time	14:25:06.116+0200	Low
Vendor	Manifest	bundle-symbolicname	org.opentest4j	Medium
Vendor	Manifest	Implementation-Vendor	opentest4j.org	High
Vendor	Manifest	specification-vendor	opentest4j.org	Low
Vendor	pom	artifactid	opentest4j	Low
Vendor	pom	developer email	business@johanneslink.net	Low
Vendor	pom	developer email	mail@marcphilipp.de	Low
Vendor	pom	developer email	matthias.merdes@heidelpay.com	Low
Vendor	pom	developer email	sam@sambrannen.com	Low
Vendor	pom	developer email	stefan.bechtold@me.com	Low
Vendor	pom	developer id	bechte	Medium
Vendor	pom	developer id	jlink	Medium
Vendor	pom	developer id	marcphilipp	Medium
Vendor	pom	developer id	mmerdes	Medium
Vendor	pom	developer id	sbrannen	Medium
Vendor	pom	developer name	Johannes Link	Medium
Vendor	pom	developer name	Marc Philipp	Medium
Vendor	pom	developer name	Matthias Merdes	Medium
Vendor	pom	developer name	Sam Brannen	Medium
Vendor	pom	developer name	Stefan Bechtold	Medium
Vendor	pom	groupid	org.opentest4j	Highest
Vendor	pom	name	org.opentest4j:opentest4j	High
Vendor	pom	url	ota4j-team/opentest4j	Highest
Product	file	name	opentest4j	High
Product	gradle	artifactid	opentest4j	Highest
Product	jar	package name	opentest4j	Highest
Product	Manifest	build-date	2023-07-06	Low
Product	Manifest	build-revision	214973bfa4e7e9be7d04e623202cc4147c7036d2	Low
Product	Manifest	build-time	14:25:06.116+0200	Low
Product	Manifest	Bundle-Name	opentest4j	Medium
Product	Manifest	bundle-symbolicname	org.opentest4j	Medium
Product	Manifest	Implementation-Title	opentest4j	High
Product	Manifest	specification-title	opentest4j	Medium
Product	pom	artifactid	opentest4j	Highest
Product	pom	developer email	business@johanneslink.net	Low
Product	pom	developer email	mail@marcphilipp.de	Low
Product	pom	developer email	matthias.merdes@heidelpay.com	Low
Product	pom	developer email	sam@sambrannen.com	Low
Product	pom	developer email	stefan.bechtold@me.com	Low
Product	pom	developer id	bechte	Low
Product	pom	developer id	jlink	Low
Product	pom	developer id	marcphilipp	Low
Product	pom	developer id	mmerdes	Low
Product	pom	developer id	sbrannen	Low
Product	pom	developer name	Johannes Link	Low
Product	pom	developer name	Marc Philipp	Low
Product	pom	developer name	Matthias Merdes	Low
Product	pom	developer name	Sam Brannen	Low
Product	pom	developer name	Stefan Bechtold	Low
Product	pom	groupid	org.opentest4j	Highest
Product	pom	name	org.opentest4j:opentest4j	High
Product	pom	url	ota4j-team/opentest4j	High
Version	file	version	1.3.0	High
Version	gradle	version	1.3.0	Highest
Version	Manifest	Bundle-Version	1.3.0	High
Version	Manifest	Implementation-Version	1.3.0	High
Version	pom	version	1.3.0	Highest

Identifiers

pkg:maven/org.opentest4j/opentest4j@1.3.0 (Confidence:High)

parser.image.zip: parser.image.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.image.zip/parser.image.jar
MD5: eb11fa46d40929afdc286c32b0c724ea
SHA1: abdb80b6ab7ca27ee7446f86e03ae03b404a7fd6
SHA256:e7cdd9cf855bc8f396bb3fe4ec3a2faedf62a244c79a9fe8271788fc793b256d
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	parser.image	High
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	jar	package name	plugin	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:18	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	parser.image	High
Product	jar	package name	imageparser	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	plugin	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:18	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	parser.image	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	parser.image	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

parser.pdf.config.zip: parser.pdf.config.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.pdf.config.zip/parser.pdf.config.jar
MD5: 8679565d7f35e47c98f960b468091340
SHA1: 4c03f730172991ad46004b412587ae5137ac03de
SHA256:48ff01b904f04590f0079e84e0933375d1698aea8169de575f94a16b2dae3b2f
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	parser.pdf.config	High
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	jar	package name	plugin	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:18	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	parser.pdf.config	High
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	pdfparserconfig	Low
Product	jar	package name	plugin	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:18	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	parser.pdf.config	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	parser.pdf.config	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

parser.text.zip: parser.text.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.text.zip/parser.text.jar
MD5: 9a7a8ef2cbb53c551e52a7e0dd189c47
SHA1: 8702507b33e5081b56cd25e6b9a1e3f4fbe58033
SHA256:00caaaaa221696cb4a8cbd5a84e5b1f8f3ffa91654bd38e9f6e2432677612fb2
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	parser.text	High
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	jar	package name	plugin	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:17	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	parser.text	High
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	plugin	Low
Product	jar	package name	textparser	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:17	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	parser.text	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	parser.text	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

pdfc.standalone.zip: pdfc.standalone.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar
MD5: 11ac962c028831da6abcf5aab57dcafa
SHA1: eb77eb6b88b7a3fb9faa78552f2ea83bc23c75d6
SHA256:56f014068371b45d285257a411a0afc0f6250f133aa789b9fc9dbd2128188467
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	pdfc.standalone	High
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	jar	package name	standalone	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:25	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	pdfc.standalone	High
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	standalone	Highest
Product	jar	package name	standalone	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:25	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	pdfc.standalone	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	pdfc.standalone	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

pdfc.standalone.zip: pdfc.standalone.jar: bridge.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridge.js
MD5: 93a24df267249dca305f5af83c047f48
SHA1: 2690836189ad0dd3715568d15b8bba5a3a9fbc93
SHA256:b17c61dcfca7e59009ebe3e57ec254ad68c2dc080d9a194d867a185902e6a433
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.standalone.zip: pdfc.standalone.jar: bridgeConfig.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridgeConfig.js
MD5: 50c7b33549870b71c25e22443829ba78
SHA1: 0a50eb333055885b58537a1463009c6d321ca110
SHA256:7ba9c85404a965c72b736350b26b97bef813b9e523081ed2bf1f9b7303ba0ce4
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.standalone.zip: pdfc.standalone.jar: bridgePDFC.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridgePDFC.js
MD5: 918410e4e9590ab87b5ca1ea983ebdf1
SHA1: 422e9fa020147687e2c79fa87f8d7ac23d964df1
SHA256:3d95bb11030e08751e23f02d299b19e2c8db823a14217bdc0cea034a1e23199d
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.standalone.zip: pdfc.standalone.jar: extraMenu.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/extraMenu.js
MD5: 76f716ef25759cac5242607c7d46afab
SHA1: ffd9728b1116de8148c96cb1aac069abc994692f
SHA256:0f2b1cc0136aacbc57993ce598a490e36849a34cdaccea15f213b1f2410fc002
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.standalone.zip: pdfc.standalone.jar: removeHeader.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/removeHeader.js
MD5: 6155f56ea46454fd9b26ec029b07cb4c
SHA1: fdbb377d77e7a33fccd3e56eda617da18a45af3c
SHA256:7f74294ea3dd2d4561aadf5deb9e1436af5cd08d3f53754b8c2e2321ddad3687
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.standalone.zip: pdfc.standalone.jar: removePDFCElements.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/removePDFCElements.js
MD5: cf23507d05d2a8f690f9489d131e7de7
SHA1: bff6a66569787ecf08f314c176220be0ef16f86c
SHA256:3d2d7526c75020284374f9298157f8fb7d0c37d38d079cffda17b94f9b73690a
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.standalone.zip: pdfc.standalone.jar: theme.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/theme.js
MD5: 9ee2557b2355cd5367ad7b7cdf3505e2
SHA1: 6a8e3c4a8964395018faac989bbbd37abf148cd3
SHA256:0acc32f71a37d0f0f7485be6746f688e449df07e6db3b5ad01973ad7fc3aa53a
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.standalone.zip: pdfc.standalone.jar: translation.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/translation.js
MD5: 087098ce4993357914ab7ee2ca130bc0
SHA1: b77b0d98a5a98b3a5c9317333f29c0c18d36d86e
SHA256:26eb8ace7faad440f3aedd47c1c3f6c1603fe7b150213ad32a4251d1226a3895
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.zip: icu4j.jar (shaded: com.ibm.icu:collate:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/collate/pom.xml
MD5: 8a5e69099a365660c81e3f1b515012de
SHA1: e04309ffaf86f3d740d5eaa8b605c9e5a55a7db5
SHA256:ffde34d7e990dfa25396f8095e7c6680db6abf4e536a62e8da24dfe4faef5ec0
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	collate	Low
Vendor	pom	groupid	com.ibm.icu	Highest
Vendor	pom	parent-artifactid	icu4j-root	Low
Product	pom	artifactid	collate	Highest
Product	pom	groupid	com.ibm.icu	Highest
Product	pom	parent-artifactid	icu4j-root	Medium
Version	pom	version	78.2	Highest

Identifiers

pkg:maven/com.ibm.icu/collate@78.2 (Confidence:High)

pdfc.zip: icu4j.jar (shaded: com.ibm.icu:core:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/core/pom.xml
MD5: 7c54dfd4dcbb4cc426efc3a02c44e7b7
SHA1: 8249f7edd365676632db5f30c3974ba539b5fb45
SHA256:eb330e7f299f27267cdf5dac63ce4e248431db5364e5fe5d2c52a05e9a3339f8
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	core	Low
Vendor	pom	groupid	com.ibm.icu	Highest
Vendor	pom	parent-artifactid	icu4j-root	Low
Product	pom	artifactid	core	Highest
Product	pom	groupid	com.ibm.icu	Highest
Product	pom	parent-artifactid	icu4j-root	Medium
Version	pom	version	78.2	Highest

Identifiers

pkg:maven/com.ibm.icu/core@78.2 (Confidence:High)

pdfc.zip: icu4j.jar (shaded: com.ibm.icu:currdata:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/currdata/pom.xml
MD5: fef4cb909d7b27b6ed7e8e2a63a74385
SHA1: f1c19ca31a31a8fedbfcfb1926e81b5f73bab191
SHA256:e5b381f33e2eac3b53bcb9a8c37431be4b0115ae98e7364cf07289d6510618bf
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	currdata	Low
Vendor	pom	groupid	com.ibm.icu	Highest
Vendor	pom	parent-artifactid	icu4j-root	Low
Product	pom	artifactid	currdata	Highest
Product	pom	groupid	com.ibm.icu	Highest
Product	pom	parent-artifactid	icu4j-root	Medium
Version	pom	version	78.2	Highest

Identifiers

pkg:maven/com.ibm.icu/currdata@78.2 (Confidence:High)

pdfc.zip: icu4j.jar (shaded: com.ibm.icu:langdata:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/langdata/pom.xml
MD5: 8a25895e73898cb1f2cf7e06f5815d61
SHA1: 01b90c95a6ba094cf50856dc56773de4589ee6b4
SHA256:16353d688a9a10c1d6d0033666390677d27d052ad50235958ea4fa233df21a75
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	langdata	Low
Vendor	pom	groupid	com.ibm.icu	Highest
Vendor	pom	parent-artifactid	icu4j-root	Low
Product	pom	artifactid	langdata	Highest
Product	pom	groupid	com.ibm.icu	Highest
Product	pom	parent-artifactid	icu4j-root	Medium
Version	pom	version	78.2	Highest

Identifiers

pkg:maven/com.ibm.icu/langdata@78.2 (Confidence:High)

pdfc.zip: icu4j.jar (shaded: com.ibm.icu:regiondata:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/regiondata/pom.xml
MD5: 3a4e2bd7c7c6a6d634c5e8daec4cc986
SHA1: b195315e8f8d2168a2a477c9dfde5d140184dd96
SHA256:22c0732f107b18bc77faed127bafa209e50a4be8e35c22fac0723c0efaebc4de
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	regiondata	Low
Vendor	pom	groupid	com.ibm.icu	Highest
Vendor	pom	parent-artifactid	icu4j-root	Low
Product	pom	artifactid	regiondata	Highest
Product	pom	groupid	com.ibm.icu	Highest
Product	pom	parent-artifactid	icu4j-root	Medium
Version	pom	version	78.2	Highest

Identifiers

pkg:maven/com.ibm.icu/regiondata@78.2 (Confidence:High)

pdfc.zip: icu4j.jar (shaded: com.ibm.icu:tools_taglets:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/tools_taglets/pom.xml
MD5: a9a857c184540a60fd84ba9924665b35
SHA1: 25def12ca718c1a57ce365cba497a2c509b65ceb
SHA256:8dbd68f4b2100a898faf01baa2206d90d0e3c5dbc4a81f9aaa86210540f16d01
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	tools_taglets	Low
Vendor	pom	groupid	com.ibm.icu	Highest
Vendor	pom	parent-artifactid	icu4j-root	Low
Product	pom	artifactid	tools_taglets	Highest
Product	pom	groupid	com.ibm.icu	Highest
Product	pom	parent-artifactid	icu4j-root	Medium
Version	pom	version	78.2	Highest

Identifiers

pkg:maven/com.ibm.icu/tools_taglets@78.2 (Confidence:High)

pdfc.zip: icu4j.jar (shaded: com.ibm.icu:translit:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/translit/pom.xml
MD5: 62aada535264891418d1ff71dff22536
SHA1: 056c25cc61d31788d585b5aa47bc3c93c17623e1
SHA256:e2b4c57b167d754332a04c048c7a2e2c0e31f6bd16b5a53e1352fe3fb7aa6ad3
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	translit	Low
Vendor	pom	groupid	com.ibm.icu	Highest
Vendor	pom	parent-artifactid	icu4j-root	Low
Product	pom	artifactid	translit	Highest
Product	pom	groupid	com.ibm.icu	Highest
Product	pom	parent-artifactid	icu4j-root	Medium
Version	pom	version	78.2	Highest

Identifiers

pkg:maven/com.ibm.icu/translit@78.2 (Confidence:High)

pdfc.zip: icu4j.jar

Description:

International Components for Unicode for Java (ICU4J) is a mature, widely used Java library
    providing Unicode and Globalization support

License:

Unicode-3.0: https://raw.githubusercontent.com/unicode-org/icu/maint/maint-78/LICENSE

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar
MD5: 75bcc3702dded8ec60351f6ad2beaa61
SHA1: 31b9d9a35d283432d0ce1a8b6e2631dcfd046ab8
SHA256:70627c3ff4b9077f6c3dc2156fb480821f9c1a041b645373f2a0391aae3552a1
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	icu4j	High
Vendor	file (hint)	name	icu-project	High
Vendor	file (hint)	name	unicode	High
Vendor	jar	package name	ibm	Highest
Vendor	jar	package name	icu	Highest
Vendor	Manifest	automatic-module-name	com.ibm.icu	Medium
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-copyright	© 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Vendor	Manifest	bundle-symbolicname	com.ibm.icu	Medium
Vendor	Manifest	Implementation-Vendor	Unicode, Inc.	High
Vendor	Manifest	Implementation-Vendor-Id	org.unicode	Medium
Vendor	pom	artifactid	icu4j	Low
Vendor	pom	developer id	markusicu	Medium
Vendor	pom	developer id	richgillam	Medium
Vendor	pom	developer name	Markus Scherer	Medium
Vendor	pom	developer name	Richard Gillam	Medium
Vendor	pom	developer org	Google	Medium
Vendor	pom	groupid	com.ibm.icu	Highest
Vendor	pom	name	ICU4J	High
Vendor	pom	url	https://icu.unicode.org/	Highest
Vendor	pom (hint)	artifactid	icu-project	Low
Vendor	pom (hint)	artifactid	unicode	Low
Vendor	pom (hint)	name	icu-project	High
Vendor	pom (hint)	name	unicode	High
Product	file	name	icu4j	High
Product	hint analyzer	product	international_components_for_unicode	Highest
Product	jar	package name	ibm	Highest
Product	jar	package name	icu	Highest
Product	Manifest	automatic-module-name	com.ibm.icu	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-copyright	© 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html	Low
Product	Manifest	Bundle-Name	ICU4J	Medium
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8	Low
Product	Manifest	bundle-symbolicname	com.ibm.icu	Medium
Product	Manifest	Implementation-Title	International Components for Unicode for Java	High
Product	Manifest	specification-title	International Components for Unicode for Java	Medium
Product	pom	artifactid	icu4j	Highest
Product	pom	developer id	markusicu	Low
Product	pom	developer id	richgillam	Low
Product	pom	developer name	Markus Scherer	Low
Product	pom	developer name	Richard Gillam	Low
Product	pom	developer org	Google	Low
Product	pom	groupid	com.ibm.icu	Highest
Product	pom	name	ICU4J	High
Product	pom	url	https://icu.unicode.org/	Medium
Version	Manifest	Bundle-Version	78.2	High
Version	Manifest	Implementation-Version	78.2	High
Version	pom	version	78.2	Highest

Identifiers

pkg:maven/com.ibm.icu/icu4j@78.2 (Confidence:High)
cpe:2.3:a:icu-project:international_components_for_unicode:78.2:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:unicode:international_components_for_unicode:78.2:*:*:*:*:*:*:* (Confidence:Low)

pdfc.zip: pdfc-javadoc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar
MD5: 54d020c01f273e8aa2032bda2acac12c
SHA1: 3f5b70463fb3da8c293f4c091abf74f697dd42f8
SHA256:780ffb27f497b8698e4c9f201f25f355717ced98a5989724cae8b95dc721b80e
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	pdfc-javadoc	High
Product	file	name	pdfc-javadoc	High

Identifiers

None

pdfc.zip: pdfc-javadoc.jar: jquery-3.7.1.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/jquery-3.7.1.min.js
MD5: 2c872dbe60f4ba70fb85356113d8b35e
SHA1: ee48592d1fff952fcf06ce0b666ed4785493afdc
SHA256:fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/jquery-ui.min.js
MD5: ab481ee8cd3ebac4edfcbd2cae5b0dde
SHA1: a3df331b23b1dc7d01d219cf426ff3148da3ac33
SHA256:4c0b2b6513452adf188402da32faea446b326e0a3362eda6fa8603e73594a567
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.zip: pdfc-javadoc.jar: member-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/member-search-index.js
MD5: b01d05f296d74afcf71737673490e323
SHA1: 0403094ace9c654113749dbd2ccaacd518328439
SHA256:72eca8318f6c503a8e7f6d467b44b866bbadd0fc1b3ddfb41f7cc9209f1aa5ac
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.zip: pdfc-javadoc.jar: module-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/module-search-index.js
MD5: a33da0f469acbd03f77bf407bac505f5
SHA1: 1e996ce630c6e1ada3ea86d7b71dabca0180f8e8
SHA256:814a05983e3267d591c7e62b314eb8eb0504eee844c8a70d494f6edbaa0f4f18
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.zip: pdfc-javadoc.jar: package-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/package-search-index.js
MD5: e8d43516ba9ee9dcd2899b83aedb3825
SHA1: a7e2eda4e97a4e984bea608b0d27475c7b0e3741
SHA256:3c19f50455b2b5de577fdf3463d89a66966957b54cebf78aa9a9ebe487c06f63
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.zip: pdfc-javadoc.jar: script.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/script.js
MD5: 14f041a73b41a06e14ae5119bf58a412
SHA1: 3bde180527bb365eea5f582d8fa6c08270c9b745
SHA256:795ddba417f4a106bbfae3c84cb2c61363e0ce9b29163eaefdc9c334db1f9b2d
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.zip: pdfc-javadoc.jar: search-page.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/search-page.js
MD5: 91487edb9c0528bb329ed378cd74987f
SHA1: 001ab7444e3ba1252d4daf7f870d51bb287cd4e7
SHA256:3bd59d168258fa81f6ffe473feec32bae0e0a5d571ecc89a1eb4fc04defed1b7
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.zip: pdfc-javadoc.jar: search.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/search.js
MD5: e1bbc8e050e9e3033a72b1e719fc3957
SHA1: 01e8b1cc5816ddc972f7e6e4dc28bf14a1dcc21c
SHA256:fb8492aa12ea5e8c74045f0f909c7f9afc12cb44ce165e1b18a4d0cd1c49908c
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.zip: pdfc-javadoc.jar: tag-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/tag-search-index.js
MD5: d15c346e935323a56c21555879f3d43f
SHA1: a5a163ac6438235738dd8b58195f76425f01b8fd
SHA256:2c68a7d29a049af9aca94ce6d94e50402908947084df988d3e2b783338eaf480
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.zip: pdfc-javadoc.jar: type-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/type-search-index.js
MD5: ecd8cad7c6630d199c0aae05c5f2f261
SHA1: 7a9e897d8b081754a3b89168ac340ffaad2f509d
SHA256:8926c9b4a72ca5bd361c58ddc6bdb452441e2ce161125cb1af00665a7c7aa192
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfc.zip: pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc.jar
MD5: 3f73bcfca131588e9f37426143173bda
SHA1: 3cf14805703af5c5ebdcd4ca7000582029c137aa
SHA256:ab25d2dd5be0a221db3ecd645caf35bb2e7d93e9249e396535ea1dcf74610b46
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	pdfc	High
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:07	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	pdfc	High
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	permissions	Highest
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:07	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	pdfc	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	pdfc	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	jar	package name	permissions	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

pdfcserver.zip: pdfcserver.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcserver.zip/pdfcserver.jar
MD5: 03a378f1da4f66563082bf5706ea5eab
SHA1: 30e07eb56ea65c058b43f7e85c6a1863859ef3dc
SHA256:cf404a5c3eadfb39277e0bce5ef20cfc2574ab582302b43d06e394994c3acf05
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	pdfcserver	High
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	jar	package name	server	Low
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	built-date	2026-04-24 14:07	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	permissions	all-permissions	Low
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	trusted-library	false	Low
Vendor	Manifest	trusted-only	false	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	pdfcserver	High
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	persistence	Low
Product	jar	package name	server	Low
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	built-date	2026-04-24 14:07	Low
Product	Manifest	codebase	*	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	pdfcserver	High
Product	Manifest	permissions	all-permissions	Low
Product	Manifest	specification-title	pdfcserver	Medium
Product	Manifest	trusted-library	false	Low
Product	Manifest	trusted-only	false	Low
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

pdfcserver.zip: pdfcserver.jar: compareconfigrenderer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcserver.zip/pdfcserver.jar/com/inet/pdfc/server/structure/compareconfigrenderer.js
MD5: ca54201f240ce7fea03db4f46ecd818a
SHA1: 420f31523aa51830c134d193dae0a692eff5b4da
SHA256:0aa678824bea93ed82b1747fc75512915488e2d65b5f11c9c22d4214bb129cec
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

pdfcsetupwizard.zip: pdfcsetupwizard.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcsetupwizard.zip/pdfcsetupwizard.jar
MD5: f136694fa1aa7eb6ab4ff034f53439d8
SHA1: 2f63cb6ea62fbee883e6afce5c6c9cf0555555e6
SHA256:9cc42e29a08810bb66b7bb6f0de262b3916fe9ce5ceea6fbe2f100b5d9679e2a
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	pdfcsetupwizard	High
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	jar	package name	setupwizard	Low
Vendor	Manifest	built-date	2026-04-24 14:17	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	pdfcsetupwizard	High
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	setupwizard	Low
Product	jar	package name	steps	Low
Product	Manifest	built-date	2026-04-24 14:17	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	pdfcsetupwizard	High
Product	Manifest	specification-title	pdfcsetupwizard	Medium
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

pdfcsetupwizard.zip: pdfcsetupwizard.jar: controller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcsetupwizard.zip/pdfcsetupwizard.jar/com/inet/pdfc/setupwizard/steps/license/controller.js
MD5: b21c2ee13289577d98bbb1687726af34
SHA1: 9032230fff5222847734d3cb4723103733f88e92
SHA256:6c1d316ea3da704c21cc9e3fa2426863fa173c3d44a212506fc4bc1e187991e9
Referenced In Project/Scope: standalone

Evidence

Identifiers

None

processbridge.pdfc.zip: processbridge.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/processbridge.pdfc.zip/processbridge.pdfc.jar
MD5: 2d0a7f83759ca69c1eb01fdffdc18748
SHA1: c55d30bf5cdb82fdec112cb1a4b99213b812ed82
SHA256:098f58c8cd84577fc8bfcf4076ca0399287e969dc02c835533fbec89c81d3f60
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	processbridge.pdfc	High
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	jar	package name	processbridge	Low
Vendor	Manifest	built-date	2026-04-24 14:22	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	processbridge.pdfc	High
Product	jar	package name	api	Low
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	processbridge	Highest
Product	jar	package name	processbridge	Low
Product	Manifest	built-date	2026-04-24 14:22	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	processbridge.pdfc	High
Product	Manifest	specification-title	processbridge.pdfc	Medium
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

slf4j-api-2.0.17.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.slf4j/slf4j-api/2.0.17/d9e58ac9c7779ba3bf8142aff6c830617a7fe60f/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Project/Scope: standalone:inetPlugin
pkg:maven/pdfc/standalone@26.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	gradle	artifactid	slf4j-api	Highest
Vendor	gradle	groupid	org.slf4j	Highest
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	gradle	artifactid	slf4j-api	Highest
Product	jar	package name	slf4j	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	SLF4J API Module	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.17	High
Version	gradle	version	2.0.17	Highest
Version	Manifest	Bundle-Version	2.0.17	High
Version	Manifest	Implementation-Version	2.0.17	High
Version	pom	version	2.0.17	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@2.0.17 (Confidence:High)

taskplanner.pdfc.zip: taskplanner.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/taskplanner.pdfc.zip/taskplanner.pdfc.jar
MD5: 243f16b88736009d919c8b4bb66cd310
SHA1: 242f5130d2f9f5b4ba74e94be44baa741092872c
SHA256:bd9ecaf835d2ac4bf84944051204c7f1f40a6efd4f45df6cc908ce6a9f434dc3
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	taskplanner.pdfc	High
Vendor	jar	package name	inet	Low
Vendor	jar	package name	pdfc	Low
Vendor	jar	package name	taskplanner	Low
Vendor	Manifest	built-date	2026-04-24 14:24	Low
Vendor	Manifest	implementation-group	pdfc	Low
Vendor	Manifest	Implementation-Vendor	i-net software	High
Vendor	Manifest	Implementation-Vendor-Id	de.inetsoftware	Medium
Vendor	Manifest	specification-vendor	i-net software	Low
Vendor	Manifest	vendor	i-net software GmbH, Berlin, Germany	Medium
Product	file	name	taskplanner.pdfc	High
Product	jar	package name	pdfc	Highest
Product	jar	package name	pdfc	Low
Product	jar	package name	taskplanner	Highest
Product	jar	package name	taskplanner	Low
Product	Manifest	built-date	2026-04-24 14:24	Low
Product	Manifest	implementation-group	pdfc	Low
Product	Manifest	Implementation-Title	taskplanner.pdfc	High
Product	Manifest	specification-title	taskplanner.pdfc	Medium
Version	jar	package name	pdfc	Highest
Version	Manifest	Implementation-Version	26.4.216	High

Identifiers

cpe:2.3:a:inetsoftware:pdfc:26.4.216:*:*:*:*:*:*:* (Confidence:Low)

Suppressed Vulnerabilities

ocr.tesseract.zip: jbig2-imageio.jar

Description:

	Java Image I/O plugin for reading JBIG2-compressed image data. 
	Formerly known as the levigo JBig2 ImageIO plugin (com.levigo.jbig2:levigo-jbig2-imageio).

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jbig2-imageio.jar
MD5: c51f45dc3d29bbf716774f9ff9e95ad6
SHA1: ad09a9bb94ea791ea81fb6c5bc2b13dd77872598
SHA256: 29cb2951622f10acf61fd0656c4e6fa5562194a9095f7a1d26aa426e2f6b17eb
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jbig2-imageio	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	image	Highest
Vendor	jar	package name	jbig2	Highest
Vendor	jar	package name	pdfbox	Highest
Vendor	Manifest	automatic-module-name	org.apache.pdfbox.jbig2	Medium
Vendor	Manifest	implementation-url	https://www.apache.org/jbig2-imageio/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.pdfbox	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	jbig2-imageio	Low
Vendor	pom	developer id	adam	Medium
Vendor	pom	developer id	blitchfield	Medium
Vendor	pom	developer id	carrier	Medium
Vendor	pom	developer id	danielwilson	Medium
Vendor	pom	developer id	gbailleul	Medium
Vendor	pom	developer id	hennejg	Medium
Vendor	pom	developer id	holdersn	Medium
Vendor	pom	developer id	jahewson	Medium
Vendor	pom	developer id	jeremias	Medium
Vendor	pom	developer id	jukka	Medium
Vendor	pom	developer id	kjackson	Medium
Vendor	pom	developer id	koch	Medium
Vendor	pom	developer id	koehlecn	Medium
Vendor	pom	developer id	lehmi	Medium
Vendor	pom	developer id	leleueri	Medium
Vendor	pom	developer id	mmayer	Medium
Vendor	pom	developer id	msayhoun	Medium
Vendor	pom	developer id	pkoch	Medium
Vendor	pom	developer id	tallison	Medium
Vendor	pom	developer id	tboehme	Medium
Vendor	pom	developer id	tchojecki	Medium
Vendor	pom	developer id	tilman	Medium
Vendor	pom	developer id	vfed	Medium
Vendor	pom	developer name	Adam Nichols	Medium
Vendor	pom	developer name	Andreas Lehmkühler	Medium
Vendor	pom	developer name	Ben Litchfield	Medium
Vendor	pom	developer name	Brian Carrier	Medium
Vendor	pom	developer name	Carolin Köhler	Medium
Vendor	pom	developer name	Daniel Wilson	Medium
Vendor	pom	developer name	Eric Leleu	Medium
Vendor	pom	developer name	Guillaume Bailleul	Medium
Vendor	pom	developer name	Jeremias Maerki	Medium
Vendor	pom	developer name	Johannes Koch	Medium
Vendor	pom	developer name	John Hewson	Medium
Vendor	pom	developer name	Jukka Zitting	Medium
Vendor	pom	developer name	Jörg Henne	Medium
Vendor	pom	developer name	Kevin Jackson	Medium
Vendor	pom	developer name	Maruan Sayhoun	Medium
Vendor	pom	developer name	Matthäus Mayer	Medium
Vendor	pom	developer name	Phillipp Koch	Medium
Vendor	pom	developer name	Sebastian Holder	Medium
Vendor	pom	developer name	Thomas Chojecki	Medium
Vendor	pom	developer name	Tilman Hausherr	Medium
Vendor	pom	developer name	Tim Allison	Medium
Vendor	pom	developer name	Timo Boehme	Medium
Vendor	pom	developer name	Villu Ruusmann	Medium
Vendor	pom	groupid	org.apache.pdfbox	Highest
Vendor	pom	name	PDFBox JBIG2 ImageIO plugin	High
Vendor	pom	organization name	The Apache Software Foundation	High
Vendor	pom	organization url	http://pdfbox.apache.org	Medium
Vendor	pom	parent-artifactid	apache	Low
Vendor	pom	parent-groupid	org.apache	Medium
Product	file	name	jbig2-imageio	High
Product	jar	package name	apache	Highest
Product	jar	package name	image	Highest
Product	jar	package name	jbig2	Highest
Product	jar	package name	pdfbox	Highest
Product	Manifest	automatic-module-name	org.apache.pdfbox.jbig2	Medium
Product	Manifest	Implementation-Title	PDFBox JBIG2 ImageIO plugin	High
Product	Manifest	implementation-url	https://www.apache.org/jbig2-imageio/	Low
Product	Manifest	specification-title	PDFBox JBIG2 ImageIO plugin	Medium
Product	pom	artifactid	jbig2-imageio	Highest
Product	pom	developer id	adam	Low
Product	pom	developer id	blitchfield	Low
Product	pom	developer id	carrier	Low
Product	pom	developer id	danielwilson	Low
Product	pom	developer id	gbailleul	Low
Product	pom	developer id	hennejg	Low
Product	pom	developer id	holdersn	Low
Product	pom	developer id	jahewson	Low
Product	pom	developer id	jeremias	Low
Product	pom	developer id	jukka	Low
Product	pom	developer id	kjackson	Low
Product	pom	developer id	koch	Low
Product	pom	developer id	koehlecn	Low
Product	pom	developer id	lehmi	Low
Product	pom	developer id	leleueri	Low
Product	pom	developer id	mmayer	Low
Product	pom	developer id	msayhoun	Low
Product	pom	developer id	pkoch	Low
Product	pom	developer id	tallison	Low
Product	pom	developer id	tboehme	Low
Product	pom	developer id	tchojecki	Low
Product	pom	developer id	tilman	Low
Product	pom	developer id	vfed	Low
Product	pom	developer name	Adam Nichols	Low
Product	pom	developer name	Andreas Lehmkühler	Low
Product	pom	developer name	Ben Litchfield	Low
Product	pom	developer name	Brian Carrier	Low
Product	pom	developer name	Carolin Köhler	Low
Product	pom	developer name	Daniel Wilson	Low
Product	pom	developer name	Eric Leleu	Low
Product	pom	developer name	Guillaume Bailleul	Low
Product	pom	developer name	Jeremias Maerki	Low
Product	pom	developer name	Johannes Koch	Low
Product	pom	developer name	John Hewson	Low
Product	pom	developer name	Jukka Zitting	Low
Product	pom	developer name	Jörg Henne	Low
Product	pom	developer name	Kevin Jackson	Low
Product	pom	developer name	Maruan Sayhoun	Low
Product	pom	developer name	Matthäus Mayer	Low
Product	pom	developer name	Phillipp Koch	Low
Product	pom	developer name	Sebastian Holder	Low
Product	pom	developer name	Thomas Chojecki	Low
Product	pom	developer name	Tilman Hausherr	Low
Product	pom	developer name	Tim Allison	Low
Product	pom	developer name	Timo Boehme	Low
Product	pom	developer name	Villu Ruusmann	Low
Product	pom	groupid	org.apache.pdfbox	Highest
Product	pom	name	PDFBox JBIG2 ImageIO plugin	High
Product	pom	organization name	The Apache Software Foundation	Low
Product	pom	organization url	http://pdfbox.apache.org	Low
Product	pom	parent-artifactid	apache	Medium
Product	pom	parent-groupid	org.apache	Medium
Version	Manifest	Implementation-Version	3.0.4	High
Version	pom	parent-version	3.0.4	Low
Version	pom	version	3.0.4	Highest

Suppressed Identifiers

cpe:2.3:a:apache:pdfbox:3.0.4:*:*:*:*:*:*:* suppressed (Confidence:Highest)
- Notes: Excluded due to not having a newer version available. This will be checked soon to mitigate. PDFBox is a tesseract dependency and not actively used in the product file name: ocr.tesseract.zip: jbig2-imageio.jar

Suppressed Vulnerabilities

CVE-2026-23907 suppressed

This issue affects the 
ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.


The ExtractEmbeddedFiles example contains a path traversal vulnerability (CWE-22) because 
the filename that is obtained from 
PDComplexFileSpecification.getFilename() is appended to the extraction path.

Users who have copied this example into their production code should 
review it to ensure that the extraction path is acceptable. The example 
has been changed accordingly, now the initial path and the extraction 
paths are converted into canonical paths and it is verified that 
extraction path contains the initial path. The documentation has also 
been adjusted.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv3:

MEDIUM (5.3)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RC:R/MAV:A

References:

af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
security@apache.org - MAILING_LIST,VENDOR_ADVISORY
security@apache.org - NOT_APPLICABLE

Vulnerable Software & Versions: (show all)

CVE-2026-33929 suppressed

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.

This issue affects the 
ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7.


Users are recommended to update to version 2.0.37 or 3.0.8 once 
available. Until then, they should apply the fix provided in GitHub PR 
427.

The ExtractEmbeddedFiles example contained a path traversal vulnerability (CWE-22) mentioned in CVE-2026-23907. However the change in the releases 2.0.36 and 3.0.7 is flawed because it doesn't consider the file path separator. Because of that, a user having writing rights on /home/ABC could be victim to a malicious PDF resulting in a write attempt to any path starting with /home/ABC, e.g. "/home/ABCDEF".

Users who have copied this example into their production code should apply the mentioned change. The example 
has been changed accordingly and is available in the project repository.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv3:

MEDIUM (4.3)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RC:R/MAV:A

References:

security@apache.org - MAILING_LIST
security@apache.org - MAILING_LIST,VENDOR_ADVISORY
security@apache.org - PATCH

Vulnerable Software & Versions: (show all)

ocr.tesseract.zip: pdfbox-debugger.jar

Description:

    The Apache PDFBox library is an open source Java tool for working with PDF documents. 
    This artefact contains the PDFDebugger.

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox-debugger.jar
MD5: 85573afca8351375b49718b379abc76c
SHA1: 2c48091b1dd9be69d09e1aea657fc1e4065b08e7
SHA256: 79320b36483f001661b01e9409d9b62066e07a3a4e2f9e6568d777b04896d130
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	pdfbox-debugger	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	debugger	Highest
Vendor	jar	package name	pdfbox	Highest
Vendor	jar	package name	pdfdebugger	Highest
Vendor	Manifest	automatic-module-name	org.apache.pdfbox.debugger	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	pdfbox-debugger	Low
Vendor	pom	groupid	org.apache.pdfbox	Highest
Vendor	pom	name	Apache PDFBox Debugger	High
Vendor	pom	parent-artifactid	pdfbox-parent	Low
Product	file	name	pdfbox-debugger	High
Product	jar	package name	apache	Highest
Product	jar	package name	debugger	Highest
Product	jar	package name	pdfbox	Highest
Product	jar	package name	pdfdebugger	Highest
Product	Manifest	automatic-module-name	org.apache.pdfbox.debugger	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Apache PDFBox Debugger	High
Product	Manifest	specification-title	Apache PDFBox Debugger	Medium
Product	pom	artifactid	pdfbox-debugger	Highest
Product	pom	groupid	org.apache.pdfbox	Highest
Product	pom	name	Apache PDFBox Debugger	High
Product	pom	parent-artifactid	pdfbox-parent	Medium
Version	Manifest	Implementation-Version	3.0.7	High
Version	pom	version	3.0.7	Highest

Suppressed Identifiers

cpe:2.3:a:apache:pdfbox:3.0.7:*:*:*:*:*:*:* suppressed (Confidence:Highest)
- Notes: Excluded due to not having a newer version available. This will be checked soon to mitigate. PDFBox is a tesseract dependency and not actively used in the product file name: ocr.tesseract.zip: pdfbox-debugger.jar

Suppressed Vulnerabilities

CVE-2026-23907 suppressed

This issue affects the 
ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.


The ExtractEmbeddedFiles example contains a path traversal vulnerability (CWE-22) because 
the filename that is obtained from 
PDComplexFileSpecification.getFilename() is appended to the extraction path.

Users who have copied this example into their production code should 
review it to ensure that the extraction path is acceptable. The example 
has been changed accordingly, now the initial path and the extraction 
paths are converted into canonical paths and it is verified that 
extraction path contains the initial path. The documentation has also 
been adjusted.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv3:

MEDIUM (5.3)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RC:R/MAV:A

References:

af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
security@apache.org - MAILING_LIST,VENDOR_ADVISORY
security@apache.org - NOT_APPLICABLE

Vulnerable Software & Versions: (show all)

CVE-2026-33929 suppressed

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.

This issue affects the 
ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7.


Users are recommended to update to version 2.0.37 or 3.0.8 once 
available. Until then, they should apply the fix provided in GitHub PR 
427.

The ExtractEmbeddedFiles example contained a path traversal vulnerability (CWE-22) mentioned in CVE-2026-23907. However the change in the releases 2.0.36 and 3.0.7 is flawed because it doesn't consider the file path separator. Because of that, a user having writing rights on /home/ABC could be victim to a malicious PDF resulting in a write attempt to any path starting with /home/ABC, e.g. "/home/ABCDEF".

Users who have copied this example into their production code should apply the mentioned change. The example 
has been changed accordingly and is available in the project repository.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv3:

MEDIUM (4.3)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RC:R/MAV:A

References:

security@apache.org - MAILING_LIST
security@apache.org - MAILING_LIST,VENDOR_ADVISORY
security@apache.org - PATCH

Vulnerable Software & Versions: (show all)

ocr.tesseract.zip: pdfbox.jar

Description:

        The Apache PDFBox library is an open source Java tool for working with PDF documents.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox.jar
MD5: adeb0637e9451d49e610ee3bc16781cd
SHA1: ecfc1bbfa656d3e330b8cc9e6996a18cde1c9bd0
SHA256: 7cefa717622330951b4343abf1e5d36bccb11f4ba245d78aaa73251d08fec623
Referenced In Project/Scope: standalone

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	pdfbox	High
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	pdfbox	Highest
Vendor	Manifest	automatic-module-name	org.apache.pdfbox	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://pdfbox.apache.org	Low
Vendor	Manifest	bundle-symbolicname	org.apache.pdfbox	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	pdfbox	Low
Vendor	pom	groupid	org.apache.pdfbox	Highest
Vendor	pom	name	Apache PDFBox	High
Vendor	pom	parent-artifactid	pdfbox-parent	Low
Product	file	name	pdfbox	High
Product	jar	package name	apache	Highest
Product	jar	package name	pdfbox	Highest
Product	Manifest	automatic-module-name	org.apache.pdfbox	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-docurl	https://pdfbox.apache.org	Low
Product	Manifest	Bundle-Name	Apache PDFBox	Medium
Product	Manifest	bundle-symbolicname	org.apache.pdfbox	Medium
Product	Manifest	Implementation-Title	Apache PDFBox	High
Product	Manifest	specification-title	Apache PDFBox	Medium
Product	pom	artifactid	pdfbox	Highest
Product	pom	groupid	org.apache.pdfbox	Highest
Product	pom	name	Apache PDFBox	High
Product	pom	parent-artifactid	pdfbox-parent	Medium
Version	Manifest	Bundle-Version	3.0.7	High
Version	Manifest	Implementation-Version	3.0.7	High
Version	pom	version	3.0.7	Highest

Suppressed Identifiers

cpe:2.3:a:apache:pdfbox:3.0.7:*:*:*:*:*:*:* suppressed (Confidence:Highest)
- Notes: Excluded due to not having a newer version available. This will be checked soon to mitigate. PDFBox is a tesseract dependency and not actively used in the product file name: ocr.tesseract.zip: pdfbox.jar

Suppressed Vulnerabilities

CVE-2026-23907 suppressed

This issue affects the 
ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.


The ExtractEmbeddedFiles example contains a path traversal vulnerability (CWE-22) because 
the filename that is obtained from 
PDComplexFileSpecification.getFilename() is appended to the extraction path.

Users who have copied this example into their production code should 
review it to ensure that the extraction path is acceptable. The example 
has been changed accordingly, now the initial path and the extraction 
paths are converted into canonical paths and it is verified that 
extraction path contains the initial path. The documentation has also 
been adjusted.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv3:

MEDIUM (5.3)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RC:R/MAV:A

References:

af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
security@apache.org - MAILING_LIST,VENDOR_ADVISORY
security@apache.org - NOT_APPLICABLE

Vulnerable Software & Versions: (show all)

CVE-2026-33929 suppressed

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.

This issue affects the 
ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7.


Users are recommended to update to version 2.0.37 or 3.0.8 once 
available. Until then, they should apply the fix provided in GitHub PR 
427.

The ExtractEmbeddedFiles example contained a path traversal vulnerability (CWE-22) mentioned in CVE-2026-23907. However the change in the releases 2.0.36 and 3.0.7 is flawed because it doesn't consider the file path separator. Because of that, a user having writing rights on /home/ABC could be victim to a malicious PDF resulting in a write attempt to any path starting with /home/ABC, e.g. "/home/ABCDEF".

Users who have copied this example into their production code should apply the mentioned change. The example 
has been changed accordingly and is available in the project repository.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv3:

MEDIUM (4.3)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RC:R/MAV:A

References:

security@apache.org - MAILING_LIST
security@apache.org - MAILING_LIST,VENDOR_ADVISORY
security@apache.org - PATCH

Vulnerable Software & Versions: (show all)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: project ':standalone'

pdfc:standalone:26.4

Summary

Dependencies (vulnerable)

Merlia-0.jar

Evidence

Identifiers

analysis.language.zip: analysis.language.jar

Evidence

Identifiers

analysis.language.zip: guava.jar

Evidence

Identifiers

analysis.language.zip: jsonic.jar

Evidence

Identifiers

analysis.language.zip: language-detector.jar

Evidence

Identifiers

annotations-3.0.1.jar (shaded: com.google.code.findbugs:jsr305:3.0.1)

Evidence

Identifiers

annotations-3.0.1.jar

Evidence

Identifiers

command.jsonexport.zip: command.jsonexport.jar

Evidence

Identifiers

comparison.api.zip: comparison.api.jar

Evidence

Identifiers

comparison.rpc.zip: comparison.rpc.jar

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: app.js

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: compare.js

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: contextmenuextension.js

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: contingent.js

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: controller.js

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: descriptionarea.js

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: dropzone.js

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: export.js

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: factory.js

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: model.js

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: multipasswordpanel.js

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: mycomparisons.js

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: passwordpanel.js

Evidence

Identifiers

comparison.webgui.zip: comparison.webgui.jar: pdfcconfig.js

Evidence

Identifiers