Press CTR-C to copy XML [help]

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

### How to read the report | Suppressing false positives | Getting Help: github issues

## Project: project ':standalone'

#### pdfc:standalone:26.4

Scan Information (show all):

- dependency-check version: 12.2.1
- Report Generated On: Tue, 16 Jun 2026 20:11:47 +0200
- Dependencies Scanned: 130 (130 unique)
- Vulnerable Dependencies: 0
- Vulnerabilities Found: 0
- Vulnerabilities Suppressed: 6 (show)
- ...
- NVD API Last Checked: 2026-06-16T18:09:06Z
- NVD API Last Modified: 2026-06-15T22:16:18Z
- NVD Cache Last Checked: 2026-06-16T18:09:06Z
- NVD Cache Last Modified: 2026-06-15T22:16:18Z

## Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency | Vulnerability IDs | Package | Highest Severity | CVE Count | Confidence | Evidence Count
--- | --- | --- | --- | --- | --- | ---
Merlia-0.jar |  | pkg:maven/lib/Merlia@0 |  | 0 |  | 12
analysis.language.zip: analysis.language.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 33
analysis.language.zip: guava.jar | cpe:2.3:a:google:guava:33.5.0:*:*:*:*:*:*:* | pkg:maven/com.google.guava/guava@33.5.0-jre |  | 0 | Highest | 24
analysis.language.zip: jsonic.jar |  |  |  | 0 |  | 7
analysis.language.zip: language-detector.jar |  | pkg:maven/com.optimaize.languagedetector/language-detector@0.6 |  | 0 |  | 26
annotations-3.0.1.jar (shaded: com.google.code.findbugs:jsr305:3.0.1) |  | pkg:maven/com.google.code.findbugs/jsr305@3.0.1 |  | 0 |  | 9
annotations-3.0.1.jar |  | pkg:maven/com.google.code.findbugs/annotations@3.0.1 |  | 0 |  | 42
command.jsonexport.zip: command.jsonexport.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 32
comparison.api.zip: comparison.api.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 30
comparison.rpc.zip: comparison.rpc.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 32
comparison.webgui.zip: comparison.webgui.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 22
comparison.webgui.zip: comparison.webgui.jar: app.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: compare.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: contextmenuextension.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: contingent.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: controller.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: descriptionarea.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: dropzone.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: export.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: factory.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: model.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: multipasswordpanel.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: mycomparisons.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: passwordpanel.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: pdfcconfig.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: profil.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: profileentry.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: publishdialog.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: publishprofiledialog.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: report.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: scroller.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: searchcomponent.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: userlist.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: visibilitysettings.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: zoomer.js |  |  |  | 0 |  | 0
filter.area.zip: filter.area.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.baselinetable.zip: filter.baselinetable.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.cmappatch.zip: filter.cmappatch.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.headerfooter.zip: filter.headerfooter.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.hiderotation.zip: filter.hiderotation.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.invisibleelements.zip: filter.invisibleelements.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.multicolumn.zip: filter.multicolumn.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.ocr.zip: filter.ocr.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.pagerange.zip: filter.pagerange.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 32
filter.regex.zip: filter.regex.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.regex.zip: filter.regex.jar: filterrenderer.js |  |  |  | 0 |  | 0
filter.texttransform.zip: filter.texttransform.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.urllookup.zip: filter.urllookup.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 33
hamcrest-3.0.jar |  | pkg:maven/org.hamcrest/hamcrest@3.0 |  | 0 |  | 39
inetcore-26.4-tools.jar |  | pkg:maven/shared/inetcore@26.4 |  | 0 |  | 9
inetcore-26.4.jar (shaded: com.inet.shared:inetcore:null) |  |  |  | 0 |  | 27
inetcore-26.4.jar |  | pkg:maven/shared/inetcore@26.4 |  | 0 |  | 35
java-25-jre-x64-linux.tar.gz: java-25-jre-x64-linux.tar: jrt-fs.jar | cpe:2.3:a:eclipse:platform:25.0.3:*:*:*:*:*:*:* |  |  | 0 | Medium | 12
jcip-annotations-1.0.jar |  | pkg:maven/net.jcip/jcip-annotations@1.0 |  | 0 |  | 21
jlessc-1.15.jar |  | pkg:maven/de.inetsoftware/jlessc@1.15 |  | 0 |  | 40
jsr305-3.0.2.jar |  | pkg:maven/com.google.code.findbugs/jsr305@3.0.2 |  | 0 |  | 20
junit-4.13.2.jar | cpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:* | pkg:maven/junit/junit@4.13.2 |  | 0 | Low | 55
junit-jupiter-5.14.0.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0 |  | 0 |  | 74
junit-jupiter-api-5.14.0.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-api@5.14.0 |  | 0 |  | 84
junit-jupiter-engine-5.14.0.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0 |  | 0 |  | 86
junit-jupiter-params-5.14.0.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-params@5.14.0 |  | 0 |  | 85
junit-platform-commons-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-commons@1.14.0 |  | 0 | Low | 87
junit-platform-engine-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-engine@1.14.0 |  | 0 | Low | 85
junit-platform-launcher-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-launcher@1.14.0 |  | 0 | Low | 86
junit-platform-suite-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-suite@1.14.0 |  | 0 | Low | 74
junit-platform-suite-api-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-suite-api@1.14.0 |  | 0 | Low | 87
junit-platform-suite-commons-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-suite-commons@1.14.0 |  | 0 | Low | 87
junit-platform-suite-engine-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-suite-engine@1.14.0 |  | 0 | Low | 87
junit-vintage-engine-5.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:5.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.vintage/junit-vintage-engine@5.14.0 |  | 0 | Low | 86
maintenance.pdfc.zip: maintenance.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 22
maintenance.pdfc.zip: maintenance.pdfc.jar: app.js |  |  |  | 0 |  | 0
maintenance.pdfc.zip: maintenance.pdfc.jar: comparisons.js |  |  |  | 0 |  | 0
ocr.tesseract.zip: commons-logging.jar |  | pkg:maven/commons-logging/commons-logging@1.3.4 |  | 0 |  | 127
ocr.tesseract.zip: fontbox.jar |  | pkg:maven/org.apache.pdfbox/fontbox@3.0.7 |  | 0 |  | 32
ocr.tesseract.zip: jai-imageio-core.jar |  | pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0 |  | 0 |  | 40
ocr.tesseract.zip: jbig2-imageio.jar |  | pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4 |  | 0 |  | 128
ocr.tesseract.zip: jboss-vfs.jar |  | pkg:maven/org.jboss/jboss-vfs@3.3.2.Final |  | 0 |  | 33
ocr.tesseract.zip: jna.jar | cpe:2.3:a:oracle:java_se:5.18.1:*:*:*:*:*:*:* |  |  | 0 | Low | 36
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: lept4j.jar |  | pkg:maven/net.sourceforge.lept4j/lept4j@1.19.1 |  | 0 |  | 25
ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: ocr.tesseract.jar | cpe:2.3:a:tesseract_ocr_project:tesseract_ocr:26.4.269:*:*:*:*:*:*:* cpe:2.3:a:tesseract_project:tesseract:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 33
ocr.tesseract.zip: pdfbox-debugger.jar |  | pkg:maven/org.apache.pdfbox/pdfbox-debugger@3.0.7 |  | 0 |  | 28
ocr.tesseract.zip: pdfbox.jar |  | pkg:maven/org.apache.pdfbox/pdfbox@3.0.7 |  | 0 |  | 30
ocr.tesseract.zip: tess4j.jar | cpe:2.3:a:tesseract_project:tesseract:5.12.0:*:*:*:*:*:*:* | pkg:maven/net.sourceforge.tess4j/tess4j@5.12.0 |  | 0 | Low | 42
ocr.tesseract.zip: tess4j.jar: libtesseract541.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: tess4j.jar: libtesseract541.dll |  |  |  | 0 |  | 4
opentest4j-1.3.0.jar |  | pkg:maven/org.opentest4j/opentest4j@1.3.0 |  | 0 |  | 64
parser.image.zip: parser.image.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 31
parser.pdf.config.zip: parser.pdf.config.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 31
parser.text.zip: parser.text.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfc.standalone.zip: pdfc.standalone.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfc.standalone.zip: pdfc.standalone.jar: bridge.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: bridgeConfig.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: bridgePDFC.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: extraMenu.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: removeHeader.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: removePDFCElements.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: theme.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: translation.js |  |  |  | 0 |  | 0
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:collate:78.2) |  | pkg:maven/com.ibm.icu/collate@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:core:78.2) |  | pkg:maven/com.ibm.icu/core@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:currdata:78.2) |  | pkg:maven/com.ibm.icu/currdata@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:langdata:78.2) |  | pkg:maven/com.ibm.icu/langdata@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:regiondata:78.2) |  | pkg:maven/com.ibm.icu/regiondata@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:tools_taglets:78.2) |  | pkg:maven/com.ibm.icu/tools_taglets@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:translit:78.2) |  | pkg:maven/com.ibm.icu/translit@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar | cpe:2.3:a:icu-project:international_components_for_unicode:78.2:*:*:*:*:*:*:* cpe:2.3:a:unicode:international_components_for_unicode:78.2:*:*:*:*:*:*:* | pkg:maven/com.ibm.icu/icu4j@78.2 |  | 0 | Low | 49
pdfc.zip: pdfc-javadoc.jar |  |  |  | 0 |  | 2
pdfc.zip: pdfc-javadoc.jar: jquery-3.7.1.min.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: member-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: module-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: package-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: script.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: search-page.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: search.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: tag-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: type-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 30
pdfcserver.zip: pdfcserver.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfcserver.zip: pdfcserver.jar: compareconfigrenderer.js |  |  |  | 0 |  | 0
pdfcsetupwizard.zip: pdfcsetupwizard.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 21
pdfcsetupwizard.zip: pdfcsetupwizard.jar: controller.js |  |  |  | 0 |  | 0
processbridge.pdfc.zip: processbridge.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 22
slf4j-api-2.0.17.jar |  | pkg:maven/org.slf4j/slf4j-api@2.0.17 |  | 0 |  | 32
taskplanner.pdfc.zip: taskplanner.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* |  |  | 0 | Low | 21

## Dependencies (vulnerable)

### Merlia-0.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/lib/Merlia/0/ec818ab987afcd2d905984971f76a053ca107217/Merlia-0.jar
MD5: b151d3363029f809f49618ce97b8fc11
SHA1: ec818ab987afcd2d905984971f76a053ca107217
SHA256:cfe766dc3f0467f181c389a0a21323a408a674a54360fc6e3d46fdbb542ca453
Referenced In Project/Scope: standalone:inetPlugin
Merlia-0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | Merlia-0 | High
Vendor | gradle | artifactid | Merlia | Highest
Vendor | gradle | groupid | lib | Highest
Vendor | jar | package name | inet | Low
Vendor | jar | package name | tds | Low
Product | file | name | Merlia-0 | High
Product | gradle | artifactid | Merlia | Highest
Product | jar | package name | tds | Low
Version | file | name | Merlia-0 | Medium
Version | file | version | 0 | Medium
Version | gradle | version | 0 | Highest
Version | Manifest | driver-version | 8.14 | Medium

#### Identifiers

- pkg:maven/lib/Merlia@0 (Confidence:Highest)

### analysis.language.zip: analysis.language.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/analysis.language.jar
MD5: 1289d82c833bbb464306b2340e0f7424
SHA1: 97856f38ebcc671d5ccc68033cd4c36fcdd91b97
SHA256:307107b6125628ec522e536bf2e038cefa7040e9294d0a215082eefaa0480191
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | analysis.language | High
Vendor | jar | package name | analysis | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:48 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | analysis.language | High
Product | jar | package name | analysis | Highest
Product | jar | package name | analysis | Low
Product | jar | package name | language | Highest
Product | jar | package name | language | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:48 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | analysis.language | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | analysis.language | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### analysis.language.zip: guava.jar

Description:

        Guava is a suite of core and expanded libraries that include
        utility classes, Google's collections, I/O classes, and
        much more.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/guava.jar
MD5: d9fbf39a41a5bab891348f07668e18c5
SHA1: 8699de25f2f979108d6c1b804a7ba38cda1116bc
SHA256:1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | guava | High
Vendor | jar | package name | google | Highest
Vendor | Manifest | build-jdk-spec | 11 | Low
Vendor | Manifest | bundle-docurl | https://github.com/google/guava/ | Low
Vendor | Manifest | bundle-symbolicname | com.google.guava | Medium
Vendor | Manifest | multi-release | true | Low
Vendor | pom | artifactid | guava | Low
Vendor | pom | groupid | com.google.guava | Highest
Vendor | pom | name | Guava: Google Core Libraries for Java | High
Vendor | pom | parent-artifactid | guava-parent | Low
Vendor | pom | url | google/guava | Highest
Product | file | name | guava | High
Product | jar | package name | google | Highest
Product | Manifest | build-jdk-spec | 11 | Low
Product | Manifest | bundle-docurl | https://github.com/google/guava/ | Low
Product | Manifest | Bundle-Name | Guava: Google Core Libraries for Java | Medium
Product | Manifest | bundle-symbolicname | com.google.guava | Medium
Product | Manifest | multi-release | true | Low
Product | pom | artifactid | guava | Highest
Product | pom | groupid | com.google.guava | Highest
Product | pom | name | Guava: Google Core Libraries for Java | High
Product | pom | parent-artifactid | guava-parent | Medium
Product | pom | url | google/guava | High
Version | pom | version | 33.5.0-jre | Highest

#### Identifiers

- pkg:maven/com.google.guava/guava@33.5.0-jre (Confidence:High)
- cpe:2.3:a:google:guava:33.5.0:*:*:*:*:*:*:* (Confidence:Highest)

### analysis.language.zip: jsonic.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/jsonic.jar
MD5: 504496d0069da0121c059c219147e90c
SHA1: 98e8a1f25aa40ed92ff2ecca4d1301d48b552452
SHA256:150e3ac24b103cb0cd50595018dbe3c8ba4b3dee81a76eb4b987607f96e9602b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jsonic | High
Vendor | jar | package name | arnx | Low
Vendor | jar | package name | jsonic | Low
Vendor | jar | package name | net | Low
Product | file | name | jsonic | High
Product | jar | package name | arnx | Low
Product | jar | package name | jsonic | Low

#### Identifiers

- None

### analysis.language.zip: language-detector.jar

Description:

            Language Detection Library for Java.

License:

    Apache 2: http://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/language-detector.jar
MD5: e5475d5cabd54e5ddf6428d63864888f
SHA1: 52fee1eaa101f8d3e30b7095e1b6e0054d514dde
SHA256:f53ecc3d71da9ebc82edd10fb35638d32e8b9d849273dd717a021eca02f2278d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | language-detector | High
Vendor | jar | package name | langdetect | Low
Vendor | jar | package name | languagedetector | Highest
Vendor | jar | package name | optimaize | Highest
Vendor | jar | package name | optimaize | Low
Vendor | pom | artifactid | language-detector | Low
Vendor | pom | developer name | Fabian Kessler | Medium
Vendor | pom | developer name | François ROLAND | Medium
Vendor | pom | developer name | Nakatani Shuyo | Medium
Vendor | pom | developer name | Robert Theis | Medium
Vendor | pom | groupid | com.optimaize.languagedetector | Highest
Vendor | pom | name | language-detector | High
Vendor | pom | url | optimaize/language-detector | Highest
Product | file | name | language-detector | High
Product | jar | package name | langdetect | Low
Product | jar | package name | languagedetector | Highest
Product | jar | package name | optimaize | Highest
Product | pom | artifactid | language-detector | Highest
Product | pom | developer name | Fabian Kessler | Low
Product | pom | developer name | François ROLAND | Low
Product | pom | developer name | Nakatani Shuyo | Low
Product | pom | developer name | Robert Theis | Low
Product | pom | groupid | com.optimaize.languagedetector | Highest
Product | pom | name | language-detector | High
Product | pom | url | optimaize/language-detector | High
Version | pom | version | 0.6 | Highest

#### Identifiers

- pkg:maven/com.optimaize.languagedetector/language-detector@0.6 (Confidence:High)

### annotations-3.0.1.jar (shaded: com.google.code.findbugs:jsr305:3.0.1)

Description:

    JSR305 Annotations for Findbugs

License:

    The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/annotations/3.0.1/fc019a2216218990d64dfe756e7aa20f0069dea2/annotations-3.0.1.jar/META-INF/maven/com.google.code.findbugs/jsr305/pom.xml
MD5: d08567d16867a0b79bc8149683918452
SHA1: d04690f71f3393e23f30998d9534365274fa5f9f
SHA256:4170a761dc5bfd3981a8e6f7aab9e2acdce82d34fd5aa9bb11e3c090d25314ce
Referenced In Project/Scope: standalone:inetPlugin

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | jsr305 | Low
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-jsr305 | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | pom | artifactid | jsr305 | Highest
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-jsr305 | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | pom | version | 3.0.1 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/jsr305@3.0.1 (Confidence:High)

### annotations-3.0.1.jar

Description:

    Annotation the FindBugs tool supports

License:

    GNU Lesser Public License: http://www.gnu.org/licenses/lgpl.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/annotations/3.0.1/fc019a2216218990d64dfe756e7aa20f0069dea2/annotations-3.0.1.jar
MD5: fc4f102f22ba4f1df3f1d7cc6b202152
SHA1: fc019a2216218990d64dfe756e7aa20f0069dea2
SHA256:6b47ff0a6de0ce17cbedc3abb0828ca5bce3009d53ea47b3723ff023c4742f79
Referenced In Project/Scope: standalone:inetPlugin
annotations-3.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.15

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | annotations | High
Vendor | gradle | artifactid | annotations | Highest
Vendor | gradle | groupid | com.google.code.findbugs | Highest
Vendor | jar | package name | annotation | Highest
Vendor | jar | package name | annotations | Highest
Vendor | jar | package name | findbugs | Highest
Vendor | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low
Vendor | Manifest | bundle-symbolicname | findbugsAnnotations | Medium
Vendor | pom | artifactid | annotations | Low
Vendor | pom | developer email | Loskutov@gmx.de | Low
Vendor | pom | developer email | pugh at cs.umd.edu | Low
Vendor | pom | developer id | al | Medium
Vendor | pom | developer id | bp | Medium
Vendor | pom | developer name | Andrey Loskutov | Medium
Vendor | pom | developer name | Bill Pugh | Medium
Vendor | pom | developer name | Keith Lea | Medium
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-Annotations | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | file | name | annotations | High
Product | gradle | artifactid | annotations | Highest
Product | jar | package name | annotation | Highest
Product | jar | package name | annotations | Highest
Product | jar | package name | findbugs | Highest
Product | Manifest | Bundle-Name | FindBugs-Annotations | Medium
Product | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low
Product | Manifest | bundle-symbolicname | findbugsAnnotations | Medium
Product | pom | artifactid | annotations | Highest
Product | pom | developer email | Loskutov@gmx.de | Low
Product | pom | developer email | pugh at cs.umd.edu | Low
Product | pom | developer id | al | Low
Product | pom | developer id | bp | Low
Product | pom | developer name | Andrey Loskutov | Low
Product | pom | developer name | Bill Pugh | Low
Product | pom | developer name | Keith Lea | Low
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-Annotations | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | file | version | 3.0.1 | High
Version | gradle | version | 3.0.1 | Highest
Version | Manifest | Bundle-Version | 3.0.1 | High
Version | pom | version | 3.0.1 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/annotations@3.0.1 (Confidence:High)

### command.jsonexport.zip: command.jsonexport.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/command.jsonexport.zip/command.jsonexport.jar
MD5: 398fd1168c232ce1c0bef3e4ac79ab3e
SHA1: 59e573edf1dd02a29d5b651f46e25a29319c3a10
SHA256:2871ae0042de8f7d6948c575d6c69fb318692546dd9df08056885f8c451d0aa8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | command.jsonexport | High
Vendor | jar | package name | command | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:48 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | command.jsonexport | High
Product | jar | package name | command | Highest
Product | jar | package name | command | Low
Product | jar | package name | json | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:48 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | command.jsonexport | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | command.jsonexport | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### comparison.api.zip: comparison.api.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.api.zip/comparison.api.jar
MD5: 4233792d148a57833507ad7b2f5571e2
SHA1: 9abfee905cee693aac402c2ccea4b50dd02cff93
SHA256:a95693e4ab84ac8dc65cc4bfb1bcba6782fa178abad7e7a74bce9bfecb75ff07
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.api | High
Vendor | jar | package name | comparisonapi | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:41 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.api | High
Product | jar | package name | comparisonapi | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:41 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.api | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | comparison.api | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### comparison.rpc.zip: comparison.rpc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.rpc.zip/comparison.rpc.jar
MD5: a116d185bca1c800a96b5f83436aec30
SHA1: cfd9d953c2c3c0d7b9cae2891b046c339cca4342
SHA256:6559ec5a32bff03500e19bbc994b4933a28c303c56caebfe3a46c162f7d2f32e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.rpc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | rpc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:40 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.rpc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | rpc | Highest
Product | jar | package name | rpc | Low
Product | jar | package name | websocket | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:40 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.rpc | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | comparison.rpc | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### comparison.webgui.zip: comparison.webgui.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar
MD5: e781b344ca81e32a1f4312c4fbba87e8
SHA1: 57b3173bcd0e82bb19fc2c764a588601232a5c3d
SHA256:40cd0e2244e3c6ec73420edf840c51d2b0d435ccb5c24b4ac96c6ef6fb5e3548
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.webgui | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | webgui | Low
Vendor | Manifest | built-date | 2026-06-16 19:41 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.webgui | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | server | Low
Product | jar | package name | webgui | Highest
Product | jar | package name | webgui | Low
Product | Manifest | built-date | 2026-06-16 19:41 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.webgui | High
Product | Manifest | specification-title | comparison.webgui | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### comparison.webgui.zip: comparison.webgui.jar: app.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/app.js
MD5: 2e4ad8b6a0f9a76284c281df29d4ae4d
SHA1: c715d01b3797ea1cc4e3615d97412a8d2cf8a067
SHA256:c1ace93a6f794644bab65004932e9335d040e375a3d93c6ca4f7029bc5e06e59
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: compare.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/compare.js
MD5: e3dffad8fdc79ad24cb1d3d4e849ae40
SHA1: fd4bda43516116ef3be6e283e731eba934510679
SHA256:bad23e9e5e75459abc74c728746c9ff536a2e9b079f243f1385925c7aadd0aa0
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: contextmenuextension.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/drive/contextmenuextension.js
MD5: b5f087715014cac13f4ccbc40c947f1c
SHA1: bf853c9b9c629eb66ce96fd12a24e973aa2cb1c6
SHA256:3096c6232dfe34a586f3d3bf0175b12bbd3b20a25d2f499da0aaa390a122d97b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: contingent.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/contingent.js
MD5: 10782a90b423f2db0450adaa8944f25a
SHA1: 8d7242260155b1bc6cbca8cd0fa034c3be0c021b
SHA256:c54c35e7c00b764c4e9b7511916a30510158e88b8c8e5ee4d61c7302a7d87295
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: controller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/controller.js
MD5: 6c2f36433c707b2d4b817425bdcc95a0
SHA1: 663c582b388026549b3dd1eb1f24ccf6c00a580e
SHA256:b8d538486e005d66d19db1cb1f23874106e5b41670a0528c66122fde3e2a2979
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: descriptionarea.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/descriptionarea.js
MD5: 76d646663feded014e091b897a1f96c8
SHA1: 29d78c632bcd13874400fd21bd156c0daf29bfcc
SHA256:1cc3fbd001cc25e18a6e3ae1f1377b0d41e37416fbcbfe2c42c4f4e03a7be691
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: dropzone.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/dropzone.js
MD5: 7f465ad15714efa6b96053a3f78982e9
SHA1: 870d6ccc2d1beb1d787da7f5ab64967b995e45b7
SHA256:6aa6d9ae16dcd5c5cb9809136f81a2121d16be3e6c9232e188d8ecf8f672bec6
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: export.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/export.js
MD5: e1a2cc48050ef9b378b8a53a081d082a
SHA1: 5cd7fe1140bd00b2f6db400724b659ae7abbadd9
SHA256:17fe08df83d82b913f8d1416e4ce5c2530ee55f4a35348f6c9dad90fde158ec7
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: factory.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/factory.js
MD5: ffb555a44f63e3ff7bbaa665f92d592d
SHA1: b23289286bc340c92aca1e2b6b0ac2ab09cc7030
SHA256:8801ad7a664838e40905b9d5d0fd6a75ee8839d62fd2bd19edafaaf4a5bf2069
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: model.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/model.js
MD5: dd3c915523172ddd31fb80dcdfbedca1
SHA1: 51336c83a03669c98d3b80ef27e00e899b9b033f
SHA256:7ab18426a5d5da1ae923171ba3120c4cf53d5250280d20dc6b611f02ffdecb92
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: multipasswordpanel.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/multipasswordpanel.js
MD5: 34d4d5fd0cf1fa77d569e928af1a00aa
SHA1: 230e35fe5f8f5a48ccd930cee3c79f16df858b97
SHA256:28be5c583ef3c82dca061d79f33a43f3672421b6a1b42e460a444f296d49a79a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: mycomparisons.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/mycomparisons.js
MD5: 65ecc6d948cb7189567f2b69ddcb036b
SHA1: f5abb2d2ab6527b7449c02383e497078b7af77c6
SHA256:88cf1150d8fa5c54d71fc181b4a0c6e07ae57dd1d03a8c009b3e5c17b5abac86
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: passwordpanel.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/passwordpanel.js
MD5: 4e69b1954226ce194fd836df7ad77e35
SHA1: 6e79c7f2354f08c8effe8adfd66c6dcaff4bdb8c
SHA256:6078c754f425f4087a05cf8e6aca77ab5b6c9df996e5143d730f32bd8f46ca21
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: pdfcconfig.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/pdfcconfig.js
MD5: 676338e9e274fd0d9ab59db49e3ea86f
SHA1: 5c8a910bd5453a9e9ff6163db9f760533e9db5b6
SHA256:3cbb5959eb832a0c7880d2a0c58a4f82cc6e66b177b4aeeef49a87540265b96f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: profil.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/profil.js
MD5: a80e7a67200f9bebc58cc1b1f648ba81
SHA1: 67a71dca22d20ed3e4cacd59e7b013052bba6059
SHA256:1eb1aed349f9e8d0781de9f352733a58b6a4fcac9e89d259888005099b5216d8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: profileentry.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/profileentry.js
MD5: 70fba9a0806250f9fc3f559012ebdfc5
SHA1: 911155de0ffa9aff766b028eff7d2a74557da44c
SHA256:7dc35ebc9b13805fc2160bd904bea53c880ab49854079e55e4f141984b6ab075
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: publishdialog.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/publishdialog.js
MD5: 3c6b3557cb70409b766dcadc7593ef40
SHA1: 15ab54e19f4ed112a10fc9bb380d5613f4c9e10f
SHA256:bc6ff09abcaa54afd0b07b558cec428824f5e1b157a5459e3eb2308802eca100
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: publishprofiledialog.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/publishprofiledialog.js
MD5: 15cb57cdb21d62986b893e35495ac8d0
SHA1: 060e44459b5a3e7b684be7a9faaefd5683a22ea9
SHA256:c1ce1c1ef7c98cb682a6844bec27307b2e7aee3403b607ce6743394984d5f481
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: report.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/report.js
MD5: cafb8b7fee4fcb9192f84e74eacc84bc
SHA1: 9c1f8db9c4c82df2c4bb46eb16aa9dc94a002368
SHA256:8ec83f80699f3aab21614b57bd57b94cfe7092ca4586dcf5c5f45ed56cc69687
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: scroller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/scroller.js
MD5: 258842a58c95114e959f659bfa15d9a7
SHA1: f947fcba0b63cc56cacedf1d9f3f812b3330586b
SHA256:4d7e9feb475bec916fc11571fbf16ac1f9113abf4db43bdd18bd4f3ae0560666
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: searchcomponent.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/searchcomponent.js
MD5: bdc3caac35d953edd2e6f68c0d4bfd74
SHA1: ef70a291cb7226084945b2648356f3a389b7fa58
SHA256:36620c84f1984fc0d8f98256fb345a0329ab25c834dcfa8c916d552ff370799e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: userlist.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/userlist.js
MD5: f0280a91fc83e571ef486c22a7f93ef7
SHA1: 68abf77cf988cad21dd9dad06a89175f906b1d9e
SHA256:1b0b6bc3b19aa7a697b17a94c617ad8e1807b10ac7de9d9292bfdc3f929c41cb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: visibilitysettings.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/visibilitysettings.js
MD5: 1f6d120c92d4c7e6c41cc4368b09ebac
SHA1: 9cdf600708312b16e2d9eadd26aea32da1ffc7d2
SHA256:50fe2d4678259193d90aae7c481487d02566b4c92ba3ca4d7c2cf13c9e345250
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: zoomer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/zoomer.js
MD5: 9292c505ec54cc329a2c2f0dc6612a43
SHA1: 724665a18dfc42d5fb8ba99a8010022de75bfccd
SHA256:d9d4db5a4a662a0887793825308e350047a54dc41810200c7ffb732c57a61f1c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### filter.area.zip: filter.area.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.area.zip/filter.area.jar
MD5: 0044cad7d546a027ebb019c9b5050b95
SHA1: 707eddc44813a05922d3c752de21de3df908f9e0
SHA256:c0f9f91c5625764bf5da55c2e62df96e3ba8343698712383f80ed5fad3a2f5ce
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.area | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:46 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.area | High
Product | jar | package name | area | Highest
Product | jar | package name | area | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:46 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.area | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.area | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### filter.baselinetable.zip: filter.baselinetable.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.baselinetable.zip/filter.baselinetable.jar
MD5: bb344da4aca9a89cf9babe754dc8e382
SHA1: 4e229a3947c437ab1d0f6c371e36e94d9308b6d8
SHA256:a01beedd4a6467dcf2ee3d5a526186673363cd3464710e3e8e5c4d106bcd64a2
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.baselinetable | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:45 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.baselinetable | High
Product | jar | package name | baselinetable | Highest
Product | jar | package name | baselinetable | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:45 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.baselinetable | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.baselinetable | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### filter.cmappatch.zip: filter.cmappatch.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.cmappatch.zip/filter.cmappatch.jar
MD5: 5d388797fe1a55a8403957f9e7350731
SHA1: 6cef99d1dab606ed719a6b05f57bffac49e92586
SHA256:ef0e26c6f7ccdf49490111fc8598c0e1b49685a6e539453f42b1a9283b8a5d11
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.cmappatch | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:41 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.cmappatch | High
Product | jar | package name | cmappatch | Highest
Product | jar | package name | cmappatch | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:41 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.cmappatch | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.cmappatch | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### filter.headerfooter.zip: filter.headerfooter.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.headerfooter.zip/filter.headerfooter.jar
MD5: 0107759e965684cae83572052ec0819c
SHA1: 95c266782f55135d830a683acab3972130b19d42
SHA256:d2a0eaf08d720070784a83f4536e99778a5898da0621a683f6b7feb98d738efe
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.headerfooter | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:44 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.headerfooter | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | headerfooter | Highest
Product | jar | package name | headerfooter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:44 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.headerfooter | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.headerfooter | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### filter.hiderotation.zip: filter.hiderotation.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.hiderotation.zip/filter.hiderotation.jar
MD5: 3f64c9865c27c814e221d5b47309dc04
SHA1: 300fa386fc7a04c5273d11e92a205a027f7738cf
SHA256:88184b74224276d926a330f1ee1b58dbce854698440be92a9ab600e5d0798111
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.hiderotation | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:40 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.hiderotation | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | hiderotation | Highest
Product | jar | package name | hiderotation | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:40 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.hiderotation | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.hiderotation | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### filter.invisibleelements.zip: filter.invisibleelements.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.invisibleelements.zip/filter.invisibleelements.jar
MD5: 7a72c0e412f2fd7eda8632bb4cb4ab2f
SHA1: 01f58933b0854a103614695ec233dd5b44b90cf2
SHA256:3afa7e8d7f06794810ea7b6e55c2fdb1bb1781c746640050b82eab587f04ebcc
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.invisibleelements | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:40 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.invisibleelements | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | invisibleelements | Highest
Product | jar | package name | invisibleelements | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:40 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.invisibleelements | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.invisibleelements | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### filter.multicolumn.zip: filter.multicolumn.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.multicolumn.zip/filter.multicolumn.jar
MD5: 4894d39ba897368d8dac60b0a1a25d53
SHA1: 035f6403b3e92c257d0fbce2f5748c9cc16a812d
SHA256:4b18e85b67d05a531131241e1cf1e20673e196772a9c6a12d8b093ac7fad0772
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.multicolumn | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:40 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.multicolumn | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | multicolumn | Highest
Product | jar | package name | multicolumn | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:40 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.multicolumn | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.multicolumn | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### filter.ocr.zip: filter.ocr.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.ocr.zip/filter.ocr.jar
MD5: a6abe794cdf522ca5c86c6ddc3e07784
SHA1: 5764a89d29f0f4904ed97a528d91c1940e24faf6
SHA256:5caad1b2c49244f73ba1494d4d91fa6c5b66165cfd48970c625f26809ff878ee
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.ocr | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:41 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.ocr | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | ocr | Highest
Product | jar | package name | ocr | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:41 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.ocr | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.ocr | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### filter.pagerange.zip: filter.pagerange.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.pagerange.zip/filter.pagerange.jar
MD5: 0a99a5866986e7d8c42669e0b9f70cbe
SHA1: efe113d1fa077541ee46f3bcde4ec2eeb65d8dd1
SHA256:906d73459a19a316a029b47c4e9b97bd7f5e59abb9ee06a394a65b0d204b3b50
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.pagerange | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:45 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.pagerange | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | page | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:45 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.pagerange | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.pagerange | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### filter.regex.zip: filter.regex.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.regex.zip/filter.regex.jar
MD5: a3bfaa10197354d857591ce095e65df5
SHA1: dbf13c690ddc6e0e9cc58700fcd8889664374ebd
SHA256:b6b8607d069214fd1b2fe21cd5bf8f6890706672e69dd4cf89b173c137b051a0
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.regex | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:45 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.regex | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | regex | Highest
Product | jar | package name | regex | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:45 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.regex | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.regex | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### filter.regex.zip: filter.regex.jar: filterrenderer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.regex.zip/filter.regex.jar/com/inet/pdfc/filter/regex/structure/filterrenderer.js
MD5: fed6198a818efccd3e71fac743e61c3f
SHA1: dc6d579196c5b147daac7e14e034e2b004ca36f2
SHA256:87b3e46faf43504c51e1ad9407e3d6c17a3bcd8170c14ea7df3b1f4282275442
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### filter.texttransform.zip: filter.texttransform.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.texttransform.zip/filter.texttransform.jar
MD5: 6326f7379a68b2ec8bb29e65bb14d6cf
SHA1: 2e36fc63f3f6ee148f80e305ea88aa277efec231
SHA256:6bacb7c6017ff2c2400703e9781548b0e7ce94fe9605b3a6c6d146167038110b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.texttransform | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:45 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.texttransform | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | texttransform | Highest
Product | jar | package name | texttransform | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:45 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.texttransform | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.texttransform | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### filter.urllookup.zip: filter.urllookup.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.urllookup.zip/filter.urllookup.jar
MD5: 8a09b1a86a6d129a98e02558956aaa59
SHA1: 45acc42de99fff9658bcbbe3c6ff1befde118cc9
SHA256:44a9fd37ae6740b2cf615755b7c9c5ad43d1afcc3b8c7381898a7dc0f02ca199
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.urllookup | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:47 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.urllookup | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | urllookup | Highest
Product | jar | package name | urllookup | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:47 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.urllookup | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.urllookup | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### hamcrest-3.0.jar

Description:

    Core API and libraries of hamcrest matcher framework.

License:

    BSD-3-Clause: https://raw.githubusercontent.com/hamcrest/JavaHamcrest/master/LICENSE

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.hamcrest/hamcrest/3.0/8fd9b78a8e6a6510a078a9e30e9e86a6035cfaf7/hamcrest-3.0.jar
MD5: 781023c38b054e9cf1c818c77895e1eb
SHA1: 8fd9b78a8e6a6510a078a9e30e9e86a6035cfaf7
SHA256:5d66b6a4a680755cb6ed7cb104fa7835ef644667586ff0737adeb977c39ecdbc
Referenced In Project/Scope: standalone:inetPlugin
hamcrest-3.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | hamcrest | High
Vendor | gradle | artifactid | hamcrest | Highest
Vendor | gradle | groupid | org.hamcrest | Highest
Vendor | jar | package name | hamcrest | Highest
Vendor | jar | package name | hamcrest | Low
Vendor | Manifest | automatic-module-name | org.hamcrest | Medium
Vendor | Manifest | bundle-symbolicname | org.hamcrest | Medium
Vendor | Manifest | Implementation-Vendor | hamcrest.org | High
Vendor | pom | artifactid | hamcrest | Low
Vendor | pom | developer id | joewalnes | Medium
Vendor | pom | developer id | npryce | Medium
Vendor | pom | developer id | sf105 | Medium
Vendor | pom | developer name | Joe Walnes | Medium
Vendor | pom | developer name | Nat Pryce | Medium
Vendor | pom | developer name | Steve Freeman | Medium
Vendor | pom | groupid | org.hamcrest | Highest
Vendor | pom | name | Hamcrest | High
Vendor | pom | url | http://hamcrest.org/JavaHamcrest/ | Highest
Product | file | name | hamcrest | High
Product | gradle | artifactid | hamcrest | Highest
Product | jar | package name | hamcrest | Highest
Product | Manifest | automatic-module-name | org.hamcrest | Medium
Product | Manifest | Bundle-Name | org.hamcrest | Medium
Product | Manifest | bundle-symbolicname | org.hamcrest | Medium
Product | Manifest | Implementation-Title | hamcrest | High
Product | pom | artifactid | hamcrest | Highest
Product | pom | developer id | joewalnes | Low
Product | pom | developer id | npryce | Low
Product | pom | developer id | sf105 | Low
Product | pom | developer name | Joe Walnes | Low
Product | pom | developer name | Nat Pryce | Low
Product | pom | developer name | Steve Freeman | Low
Product | pom | groupid | org.hamcrest | Highest
Product | pom | name | Hamcrest | High
Product | pom | url | http://hamcrest.org/JavaHamcrest/ | Medium
Version | file | version | 3.0 | High
Version | gradle | version | 3.0 | Highest
Version | Manifest | Implementation-Version | 3.0 | High
Version | pom | version | 3.0 | Highest

#### Identifiers

- pkg:maven/org.hamcrest/hamcrest@3.0 (Confidence:High)

### inetcore-26.4-tools.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/26.4/d682a92d9e71439f4f449a4ebc8ebfdb28affc55/inetcore-26.4-tools.jar
MD5: 64decdd5172a8a01fc09c2eb4ddd8aba
SHA1: d682a92d9e71439f4f449a4ebc8ebfdb28affc55
SHA256:f863d683b02f3e1e472b4d842c3728f8ba9e04441c9df12712bd53f430b45bde
Referenced In Project/Scope: standalone:inetPlugin
inetcore-26.4-tools.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | inetcore | High
Vendor | gradle | artifactid | inetcore | Highest
Vendor | gradle | groupid | shared | Highest
Vendor | jar | package name | test | Low
Product | file | name | inetcore | High
Product | gradle | artifactid | inetcore | Highest
Version | file | name | inetcore | Medium
Version | file | version | 26.4 | High
Version | gradle | version | 26.4 | Highest

#### Identifiers

- pkg:maven/shared/inetcore@26.4 (Confidence:Highest)

### inetcore-26.4.jar (shaded: com.inet.shared:inetcore:null)

Description:

    A blend composite defines the rule according to which a drawing primitive (known as the source) is mixed with existing graphics (know as the destination.)

    ColorUtilities contains a set of tools to perform common color operations easily.

License:

    LGPL: http://www.gnu.org/licenses/lgpl.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/26.4/3e525cffe023a5703af6d1b74026394acef9682c/inetcore-26.4.jar/META-INF/com/inet/shared/utils/BlendComposite/pom.xml
MD5: 15e3963148212192804e2b1a2b73ad1c
SHA1: 1095ba4522949a04590ab9c98b7f684e92579ef9
SHA256:e5556987ad0b1ede84a994741147dadf6de0cb7d80b845f530e2a96505b79151
Referenced In Project/Scope: standalone:inetPlugin

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | inetcore | Low
Vendor | pom | developer email | contact@inetsoftware.de | Low
Vendor | pom | developer email | morgand@apache.org | Low
Vendor | pom | developer id | inetsoftware | Medium
Vendor | pom | developer id | romainguy | Medium
Vendor | pom | developer id | sun | Medium
Vendor | pom | developer name | i-net /// software | Medium
Vendor | pom | developer name | Romain Guy | Medium
Vendor | pom | developer name | Sun | Medium
Vendor | pom | developer org | Sun | Medium
Vendor | pom | groupid | com.inet.shared | Highest
Vendor | pom | name | BlendComposite and ColorUtilities | High
Vendor | pom (hint) | developer id | oracle | Medium
Vendor | pom (hint) | developer name | oracle | Medium
Vendor | pom (hint) | developer org | oracle | Medium
Product | pom | artifactid | inetcore | Highest
Product | pom | developer email | contact@inetsoftware.de | Low
Product | pom | developer email | morgand@apache.org | Low
Product | pom | developer id | inetsoftware | Low
Product | pom | developer id | romainguy | Low
Product | pom | developer id | sun | Low
Product | pom | developer name | i-net /// software | Low
Product | pom | developer name | Romain Guy | Low
Product | pom | developer name | Sun | Low
Product | pom | developer org | Sun | Low
Product | pom | groupid | com.inet.shared | Highest
Product | pom | name | BlendComposite and ColorUtilities | High

#### Identifiers

- None

### inetcore-26.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/26.4/3e525cffe023a5703af6d1b74026394acef9682c/inetcore-26.4.jar
MD5: 2d475810d520d00143f8ac1a0ff5fe77
SHA1: 3e525cffe023a5703af6d1b74026394acef9682c
SHA256:ec1f0a320e9841148097a98868c3c47a2b842484afc310b4741efeafd830e5a0
Referenced In Project/Scope: standalone:inetPlugin
inetcore-26.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | inetcore | High
Vendor | gradle | artifactid | inetcore | Highest
Vendor | gradle | groupid | shared | Highest
Vendor | jar | package name | i | Highest
Vendor | jar | package name | inet | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 16:03 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | shared | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | inetcore | High
Product | gradle | artifactid | inetcore | Highest
Product | jar | package name | permissions | Highest
Product | jar | package name | shared | Highest
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 16:03 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | shared | Low
Product | Manifest | Implementation-Title | inetcore | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | inetcore | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | file | name | inetcore | Medium
Version | file | version | 26.4 | High
Version | gradle | version | 26.4 | Highest
Version | jar | package name | permissions | Highest
Version | jar | package name | shared | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- pkg:maven/shared/inetcore@26.4 (Confidence:Highest)

### java-25-jre-x64-linux.tar.gz: java-25-jre-x64-linux.tar: jrt-fs.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/java-25-jre-x64-linux.tar.gz/java-25-jre-x64-linux.tar/jre-11/lib/jrt-fs.jar
MD5: 7c9286f8350fcc9685be294052abe065
SHA1: a65b097270a5d51f163082c0021a0ec56b55eaff
SHA256:9296f978b74a24295f6261c692fff0f85b71503ab4cd29c2e0b4b7f4d726e185
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jrt-fs | High
Vendor | jar | package name | internal | Low
Vendor | jar | package name | jdk | Low
Vendor | jar | package name | jimage | Low
Vendor | Manifest | Implementation-Vendor | Eclipse Adoptium | High
Vendor | Manifest | specification-vendor | Oracle Corporation | Low
Product | file | name | jrt-fs | High
Product | jar | package name | internal | Low
Product | jar | package name | jimage | Low
Product | Manifest | Implementation-Title | Java Runtime Environment | High
Product | Manifest | specification-title | Java Platform API Specification | Medium
Version | Manifest | Implementation-Version | 25.0.3 | High

#### Identifiers

- cpe:2.3:a:eclipse:platform:25.0.3:*:*:*:*:*:*:* (Confidence:Medium)

### jcip-annotations-1.0.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/net.jcip/jcip-annotations/1.0/afba4942caaeaf46aab0b976afd57cc7c181467e/jcip-annotations-1.0.jar
MD5: 9d5272954896c5a5d234f66b7372b17a
SHA1: afba4942caaeaf46aab0b976afd57cc7c181467e
SHA256:be5805392060c71474bf6c9a67a099471274d30b83eef84bfc4e0889a4f1dcc0
Referenced In Project/Scope: standalone:inetPlugin
jcip-annotations-1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.15

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jcip-annotations | High
Vendor | gradle | artifactid | jcip-annotations | Highest
Vendor | gradle | groupid | net.jcip | Highest
Vendor | jar | package name | annotations | Low
Vendor | jar | package name | jcip | Low
Vendor | jar | package name | net | Low
Vendor | pom | artifactid | jcip-annotations | Low
Vendor | pom | groupid | net.jcip | Highest
Vendor | pom | name | "Java Concurrency in Practice" book annotations | High
Vendor | pom | url | http://jcip.net/ | Highest
Product | file | name | jcip-annotations | High
Product | gradle | artifactid | jcip-annotations | Highest
Product | jar | package name | annotations | Low
Product | jar | package name | jcip | Low
Product | pom | artifactid | jcip-annotations | Highest
Product | pom | groupid | net.jcip | Highest
Product | pom | name | "Java Concurrency in Practice" book annotations | High
Product | pom | url | http://jcip.net/ | Medium
Version | file | version | 1.0 | High
Version | gradle | version | 1.0 | Highest
Version | pom | version | 1.0 | Highest

#### Identifiers

- pkg:maven/net.jcip/jcip-annotations@1.0 (Confidence:High)

### jlessc-1.15.jar

Description:

    A Less CSS compiler written completely in Java (pure Java).

License:

    MIT License: http://www.opensource.org/licenses/mit-license.php

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/de.inetsoftware/jlessc/1.15/2dbc9ed0ff94187412e6376823393b4ce90ccf0b/jlessc-1.15.jar
MD5: 3f8f1bb4e60ce8b65f287d36560d1313
SHA1: 2dbc9ed0ff94187412e6376823393b4ce90ccf0b
SHA256:c745dc12ca4e1252c8a082f8c1b9237e4758c6d7ecb82247c3ecc3fe7cd99bdc
Referenced In Project/Scope: standalone:inetPlugin
jlessc-1.15.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jlessc | High
Vendor | gradle | artifactid | jlessc | Highest
Vendor | gradle | groupid | de.inetsoftware | Highest
Vendor | jar | package name | inet | Low
Vendor | jar | package name | less | Low
Vendor | jar | package name | lib | Low
Vendor | Manifest | automatic-module-name | de.inetsoftware.jlessc | Medium
Vendor | Manifest | bundle-symbolicname | de.inetsoftware.jlessc | Medium
Vendor | Manifest | Implementation-Vendor | i-net software GmbH, Berlin, Germany | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | pom | artifactid | jlessc | Low
Vendor | pom | developer email | vberlin@inetsoftware.de | Low
Vendor | pom | developer id | vberlin | Medium
Vendor | pom | developer name | Volker Berlin | Medium
Vendor | pom | developer org | i-net software | Medium
Vendor | pom | developer org URL | https://www.inetsoftware.de/ | Medium
Vendor | pom | groupid | de.inetsoftware | Highest
Vendor | pom | name | JLessC | High
Vendor | pom | url | i-net-software/jlessc | Highest
Product | file | name | jlessc | High
Product | gradle | artifactid | jlessc | Highest
Product | jar | package name | less | Low
Product | jar | package name | lib | Low
Product | Manifest | automatic-module-name | de.inetsoftware.jlessc | Medium
Product | Manifest | bundle-symbolicname | de.inetsoftware.jlessc | Medium
Product | Manifest | Implementation-Title | JLessC, a Less CSS compiler | High
Product | pom | artifactid | jlessc | Highest
Product | pom | developer email | vberlin@inetsoftware.de | Low
Product | pom | developer id | vberlin | Low
Product | pom | developer name | Volker Berlin | Low
Product | pom | developer org | i-net software | Low
Product | pom | developer org URL | https://www.inetsoftware.de/ | Low
Product | pom | groupid | de.inetsoftware | Highest
Product | pom | name | JLessC | High
Product | pom | url | i-net-software/jlessc | High
Version | file | version | 1.15 | High
Version | gradle | version | 1.15 | Highest
Version | Manifest | Bundle-Version | 1.15 | High
Version | Manifest | Implementation-Version | 1.15 | High
Version | pom | version | 1.15 | Highest

#### Identifiers

- pkg:maven/de.inetsoftware/jlessc@1.15 (Confidence:High)

### jsr305-3.0.2.jar

Description:

    JSR305 Annotations for Findbugs

License:

    The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/jsr305/3.0.2/25ea2e8b0c338a877313bd4672d3fe056ea78f0d/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: standalone:inetPlugin
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.15

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jsr305 | High
Vendor | gradle | artifactid | jsr305 | Highest
Vendor | gradle | groupid | com.google.code.findbugs | Highest
Vendor | Manifest | bundle-symbolicname | org.jsr-305 | Medium
Vendor | pom | artifactid | jsr305 | Low
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-jsr305 | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | file | name | jsr305 | High
Product | gradle | artifactid | jsr305 | Highest
Product | Manifest | Bundle-Name | FindBugs-jsr305 | Medium
Product | Manifest | bundle-symbolicname | org.jsr-305 | Medium
Product | pom | artifactid | jsr305 | Highest
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-jsr305 | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | file | version | 3.0.2 | High
Version | gradle | version | 3.0.2 | Highest
Version | Manifest | Bundle-Version | 3.0.2 | High
Version | pom | version | 3.0.2 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

### junit-4.13.2.jar

Description:

    JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.

License:

    Eclipse Public License 1.0: http://www.eclipse.org/legal/epl-v10.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/junit/junit/4.13.2/8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12/junit-4.13.2.jar
MD5: d98a9a02a99a9acd22d7653cbcc1f31f
SHA1: 8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12
SHA256:8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3
Referenced In Project/Scope: standalone:inetPlugin
junit-4.13.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit | High
Vendor | gradle | artifactid | junit | Highest
Vendor | gradle | groupid | junit | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | Manifest | automatic-module-name | junit | Medium
Vendor | Manifest | implementation-url | http://junit.org | Low
Vendor | Manifest | Implementation-Vendor | JUnit | High
Vendor | Manifest | Implementation-Vendor-Id | junit | Medium
Vendor | pom | artifactid | junit | Low
Vendor | pom | developer email | david@saff.net | Low
Vendor | pom | developer email | kcooney@google.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | mail@stefan-birkner.de | Low
Vendor | pom | developer id | dsaff | Medium
Vendor | pom | developer id | kcooney | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | stefanbirkner | Medium
Vendor | pom | developer name | David Saff | Medium
Vendor | pom | developer name | Kevin Cooney | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Stefan Birkner | Medium
Vendor | pom | groupid | junit | Highest
Vendor | pom | name | JUnit | High
Vendor | pom | organization name | JUnit | High
Vendor | pom | organization url | http://www.junit.org | Medium
Vendor | pom | url | http://junit.org | Highest
Product | file | name | junit | High
Product | gradle | artifactid | junit | Highest
Product | jar | package name | junit | Highest
Product | Manifest | automatic-module-name | junit | Medium
Product | Manifest | Implementation-Title | JUnit | High
Product | Manifest | implementation-url | http://junit.org | Low
Product | pom | artifactid | junit | Highest
Product | pom | developer email | david@saff.net | Low
Product | pom | developer email | kcooney@google.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | mail@stefan-birkner.de | Low
Product | pom | developer id | dsaff | Low
Product | pom | developer id | kcooney | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | stefanbirkner | Low
Product | pom | developer name | David Saff | Low
Product | pom | developer name | Kevin Cooney | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Stefan Birkner | Low
Product | pom | groupid | junit | Highest
Product | pom | name | JUnit | High
Product | pom | organization name | JUnit | Low
Product | pom | organization url | http://www.junit.org | Low
Product | pom | url | http://junit.org | Medium
Version | file | version | 4.13.2 | High
Version | gradle | version | 4.13.2 | Highest
Version | Manifest | Implementation-Version | 4.13.2 | High
Version | pom | version | 4.13.2 | Highest

#### Identifiers

- pkg:maven/junit/junit@4.13.2 (Confidence:High)
- cpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:* (Confidence:Low)

### junit-jupiter-5.14.0.jar

Description:

    Module "junit-jupiter" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter/5.14.0/df30c385c7c8ea0e74e3b63d8c6c0fc2b0ecb55/junit-jupiter-5.14.0.jar
MD5: 7ddc03716bc709deb839426691440409
SHA1: 0df30c385c7c8ea0e74e3b63d8c6c0fc2b0ecb55
SHA256:a89501c76e91abfdc08201acdaaae681d5c8d59b62f375d5929b6681a0118f43
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-5.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/pdfc/standalone@26.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter | High
Vendor | gradle | artifactid | junit-jupiter | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | module-info | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-jupiter | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.jupiter | Highest
Vendor | pom | name | JUnit Jupiter (Aggregator) | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-jupiter | High
Product | gradle | artifactid | junit-jupiter | Highest
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter (Aggregator) | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter | Medium
Product | Manifest | Implementation-Title | junit-jupiter | High
Product | Manifest | specification-title | junit-jupiter | Medium
Product | pom | artifactid | junit-jupiter | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.jupiter | Highest
Product | pom | name | JUnit Jupiter (Aggregator) | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 5.14.0 | High
Version | gradle | version | 5.14.0 | Highest
Version | Manifest | Bundle-Version | 5.14.0 | High
Version | Manifest | Implementation-Version | 5.14.0 | High
Version | pom | version | 5.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0 (Confidence:High)

### junit-jupiter-api-5.14.0.jar

Description:

    Module "junit-jupiter-api" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-api/5.14.0/4cc3acff995a4ce56ebf735a485800ddede31cb0/junit-jupiter-api-5.14.0.jar
MD5: ed392a0bd93155f0fd0674022a8ad32c
SHA1: 4cc3acff995a4ce56ebf735a485800ddede31cb0
SHA256:d3431a004b83823bcdd95b6738130087ec32b2fb28a5a5deb4fbc16357bab8f9
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-api-5.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-api | High
Vendor | gradle | artifactid | junit-jupiter-api | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | api | Highest
Vendor | jar | package name | api | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-api | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-jupiter-api | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.jupiter | Highest
Vendor | pom | name | JUnit Jupiter API | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-jupiter-api | High
Product | gradle | artifactid | junit-jupiter-api | Highest
Product | jar | package name | api | Highest
Product | jar | package name | api | Low
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter API | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-api | Medium
Product | Manifest | Implementation-Title | junit-jupiter-api | High
Product | Manifest | specification-title | junit-jupiter-api | Medium
Product | pom | artifactid | junit-jupiter-api | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.jupiter | Highest
Product | pom | name | JUnit Jupiter API | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 5.14.0 | High
Version | gradle | version | 5.14.0 | Highest
Version | Manifest | Bundle-Version | 5.14.0 | High
Version | Manifest | Implementation-Version | 5.14.0 | High
Version | pom | version | 5.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-api@5.14.0 (Confidence:High)

### junit-jupiter-engine-5.14.0.jar

Description:

    Module "junit-jupiter-engine" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-engine/5.14.0/9da8a108759444556e759f30e663a416a80f402c/junit-jupiter-engine-5.14.0.jar
MD5: 5a1f1a143fb48a49ceb29526b3951d5b
SHA1: 9da8a108759444556e759f30e663a416a80f402c
SHA256:203b7a240b15716f8b881e2dfab0c580f1da5b274a196ff360f8cada2d1752ea
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-engine-5.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/pdfc/standalone@26.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-engine | High
Vendor | gradle | artifactid | junit-jupiter-engine | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.14.0" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-jupiter-engine | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.jupiter | Highest
Vendor | pom | name | JUnit Jupiter Engine | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-jupiter-engine | High
Product | gradle | artifactid | junit-jupiter-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter Engine | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-engine | Medium
Product | Manifest | Implementation-Title | junit-jupiter-engine | High
Product | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.14.0" | Low
Product | Manifest | specification-title | junit-jupiter-engine | Medium
Product | pom | artifactid | junit-jupiter-engine | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.jupiter | Highest
Product | pom | name | JUnit Jupiter Engine | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 5.14.0 | High
Version | gradle | version | 5.14.0 | Highest
Version | Manifest | Bundle-Version | 5.14.0 | High
Version | Manifest | Implementation-Version | 5.14.0 | High
Version | pom | version | 5.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0 (Confidence:High)

### junit-jupiter-params-5.14.0.jar

Description:

    Module "junit-jupiter-params" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-params/5.14.0/3027dc3529237b2285b261640134daa217068c96/junit-jupiter-params-5.14.0.jar
MD5: dd4c6213ae046597f04d386cc5038338
SHA1: 3027dc3529237b2285b261640134daa217068c96
SHA256:7fbb51837921c329604ba119dc1af0573d36230ea80f786aa3d4fd8c1dbb8a1b
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-params-5.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-params | High
Vendor | gradle | artifactid | junit-jupiter-params | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | jar | package name | params | Highest
Vendor | jar | package name | params | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-params | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-jupiter-params | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.jupiter | Highest
Vendor | pom | name | JUnit Jupiter Params | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-jupiter-params | High
Product | gradle | artifactid | junit-jupiter-params | Highest
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | jar | package name | params | Highest
Product | jar | package name | params | Low
Product | jar | package name | shadow | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter Params | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-params | Medium
Product | Manifest | Implementation-Title | junit-jupiter-params | High
Product | Manifest | specification-title | junit-jupiter-params | Medium
Product | pom | artifactid | junit-jupiter-params | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.jupiter | Highest
Product | pom | name | JUnit Jupiter Params | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 5.14.0 | High
Version | gradle | version | 5.14.0 | Highest
Version | Manifest | Bundle-Version | 5.14.0 | High
Version | Manifest | Implementation-Version | 5.14.0 | High
Version | pom | version | 5.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-params@5.14.0 (Confidence:High)

### junit-platform-commons-1.14.0.jar

Description:

    Module "junit-platform-commons" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-commons/1.14.0/e7e1bbf2044652efc5a2a21f6b8c21173a9b91a1/junit-platform-commons-1.14.0.jar
MD5: 7f72f4b9a2ee123155ac4e9a011e0d8f
SHA1: e7e1bbf2044652efc5a2a21f6b8c21173a9b91a1
SHA256:e543a3a8422f1dfe6047f535305b70c777e0db431f1ef3f55ef5c86ac0bbcb9b
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-commons-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-commons | High
Vendor | gradle | artifactid | junit-platform-commons | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | commons | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | org | Highest
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-commons | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | multi-release | true | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-commons | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Commons | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-commons | High
Product | gradle | artifactid | junit-platform-commons | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | commons | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Commons | Medium
Product | Manifest | bundle-symbolicname | junit-platform-commons | Medium
Product | Manifest | Implementation-Title | junit-platform-commons | High
Product | Manifest | multi-release | true | Low
Product | Manifest | specification-title | junit-platform-commons | Medium
Product | pom | artifactid | junit-platform-commons | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Commons | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-commons@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-platform-engine-1.14.0.jar

Description:

    Module "junit-platform-engine" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-engine/1.14.0/77386b812c0e3ba96cdd7c018d2a2f61940ccd8f/junit-platform-engine-1.14.0.jar
MD5: 80623f8b044fc4fde498e82659a5e9d7
SHA1: 77386b812c0e3ba96cdd7c018d2a2f61940ccd8f
SHA256:57cd29de834469aee656e5debda1f09f7c59630fd57b90cc0cbaa31726fc4d4a
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-engine-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-engine | High
Vendor | gradle | artifactid | junit-platform-engine | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-engine | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Engine API | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-engine | High
Product | gradle | artifactid | junit-platform-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | support | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Engine API | Medium
Product | Manifest | bundle-symbolicname | junit-platform-engine | Medium
Product | Manifest | Implementation-Title | junit-platform-engine | High
Product | Manifest | specification-title | junit-platform-engine | Medium
Product | pom | artifactid | junit-platform-engine | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Engine API | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-engine@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-platform-launcher-1.14.0.jar

Description:

    Module "junit-platform-launcher" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-launcher/1.14.0/b61418170bd0b204429b9ae77af681a1ac74579d/junit-platform-launcher-1.14.0.jar
MD5: cbd4803d13742dba0ab00bd74d40aa3d
SHA1: b61418170bd0b204429b9ae77af681a1ac74579d
SHA256:1000b278797510dcec40d90f77f0d84dcc13e5982da563c18b6b5665aae4b81c
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-launcher-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-launcher | High
Vendor | gradle | artifactid | junit-platform-launcher | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | launcher | Highest
Vendor | jar | package name | launcher | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-launcher | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.14.0" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-launcher | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Launcher | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-launcher | High
Product | gradle | artifactid | junit-platform-launcher | Highest
Product | jar | package name | junit | Highest
Product | jar | package name | launcher | Highest
Product | jar | package name | launcher | Low
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Launcher | Medium
Product | Manifest | bundle-symbolicname | junit-platform-launcher | Medium
Product | Manifest | Implementation-Title | junit-platform-launcher | High
Product | Manifest | provide-capability | org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.14.0" | Low
Product | Manifest | specification-title | junit-platform-launcher | Medium
Product | pom | artifactid | junit-platform-launcher | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Launcher | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-launcher@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-platform-suite-1.14.0.jar

Description:

    Module "junit-platform-suite" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite/1.14.0/28f2ccbb1d9707b233879e82f7f660c673ad053d/junit-platform-suite-1.14.0.jar
MD5: 5fa9ec3bbe194ae860e5e0a34099bd87
SHA1: 28f2ccbb1d9707b233879e82f7f660c673ad053d
SHA256:52472503bdf9168853f6aa7dcb87a6563ebcc7748fdd91d9440df1928da82c13
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/pdfc/standalone@26.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite | High
Vendor | gradle | artifactid | junit-platform-suite | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | module-info | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-suite | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Suite (Aggregator) | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-suite | High
Product | gradle | artifactid | junit-platform-suite | Highest
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite (Aggregator) | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite | Medium
Product | Manifest | Implementation-Title | junit-platform-suite | High
Product | Manifest | specification-title | junit-platform-suite | Medium
Product | pom | artifactid | junit-platform-suite | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Suite (Aggregator) | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-platform-suite-api-1.14.0.jar

Description:

    Module "junit-platform-suite-api" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-api/1.14.0/32db2f3c4405b2cad90e3756be83815414c80897/junit-platform-suite-api-1.14.0.jar
MD5: 286cd58bb6f5564c4e9f8b79dd319cf9
SHA1: 32db2f3c4405b2cad90e3756be83815414c80897
SHA256:4399e19ace24e524d5957f7b3a9eaf954124241f3313ea659e01fd149f110c6a
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-api-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-api | High
Vendor | gradle | artifactid | junit-platform-suite-api | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | api | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-api | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-suite-api | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Suite API | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-suite-api | High
Product | gradle | artifactid | junit-platform-suite-api | Highest
Product | jar | package name | api | Highest
Product | jar | package name | api | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite API | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-api | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-api | High
Product | Manifest | specification-title | junit-platform-suite-api | Medium
Product | pom | artifactid | junit-platform-suite-api | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Suite API | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-api@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-platform-suite-commons-1.14.0.jar

Description:

    Module "junit-platform-suite-commons" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-commons/1.14.0/d351237988ef097514fc7a35bcfa3de73a08a0a/junit-platform-suite-commons-1.14.0.jar
MD5: 235c8d26c6a49946d7826e862e0a181d
SHA1: 0d351237988ef097514fc7a35bcfa3de73a08a0a
SHA256:b868237f8cb2e193775e3f712b9405cb3d4ffaa180579cc83a7fe1f6db9c5cc1
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-commons-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-commons | High
Vendor | gradle | artifactid | junit-platform-suite-commons | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-commons | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-suite-commons | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Suite Commons | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-suite-commons | High
Product | gradle | artifactid | junit-platform-suite-commons | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | commons | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite Commons | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-commons | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-commons | High
Product | Manifest | specification-title | junit-platform-suite-commons | Medium
Product | pom | artifactid | junit-platform-suite-commons | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Suite Commons | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-commons@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-platform-suite-engine-1.14.0.jar

Description:

    Module "junit-platform-suite-engine" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-engine/1.14.0/f87f86ae21fb6bfa7749cca62ec55e302ecd3e88/junit-platform-suite-engine-1.14.0.jar
MD5: 9306e0421eb55b833e9f37eecaeabdd4
SHA1: f87f86ae21fb6bfa7749cca62ec55e302ecd3e88
SHA256:f545be730d41d6a760e8422e687b8223d632026ae2049250c80c797007789ac0
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-engine-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-engine | High
Vendor | gradle | artifactid | junit-platform-suite-engine | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-suite-engine | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Suite Engine | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-suite-engine | High
Product | gradle | artifactid | junit-platform-suite-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite Engine | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-engine | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-engine | High
Product | Manifest | specification-title | junit-platform-suite-engine | Medium
Product | pom | artifactid | junit-platform-suite-engine | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Suite Engine | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-engine@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-vintage-engine-5.14.0.jar

Description:

    Module "junit-vintage-engine" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.vintage/junit-vintage-engine/5.14.0/ac6667e31d2774c9281bbcbe00706d54c47db40e/junit-vintage-engine-5.14.0.jar
MD5: 372fe55fae45603c029e6379e728c764
SHA1: ac6667e31d2774c9281bbcbe00706d54c47db40e
SHA256:10b9cea16ce573d906719326795bb2b6a5aecbdcc64ab30825f05af9226cb595
Referenced In Project/Scope: standalone:inetPlugin
junit-vintage-engine-5.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/pdfc/standalone@26.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-vintage-engine | High
Vendor | gradle | artifactid | junit-vintage-engine | Highest
Vendor | gradle | groupid | org.junit.vintage | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | vintage | Highest
Vendor | jar | package name | vintage | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-vintage-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.14.0" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-vintage-engine | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.vintage | Highest
Vendor | pom | name | JUnit Vintage Engine | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-vintage-engine | High
Product | gradle | artifactid | junit-vintage-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | vintage | Highest
Product | jar | package name | vintage | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Vintage Engine | Medium
Product | Manifest | bundle-symbolicname | junit-vintage-engine | Medium
Product | Manifest | Implementation-Title | junit-vintage-engine | High
Product | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.14.0" | Low
Product | Manifest | specification-title | junit-vintage-engine | Medium
Product | pom | artifactid | junit-vintage-engine | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.vintage | Highest
Product | pom | name | JUnit Vintage Engine | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 5.14.0 | High
Version | gradle | version | 5.14.0 | Highest
Version | Manifest | Bundle-Version | 5.14.0 | High
Version | Manifest | Implementation-Version | 5.14.0 | High
Version | pom | version | 5.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.vintage/junit-vintage-engine@5.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:5.14.0:*:*:*:*:*:*:* (Confidence:Low)

### maintenance.pdfc.zip: maintenance.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar
MD5: f63b9d69d5c792ce7380ecece48c0e06
SHA1: 915c2077d815c3b237fd395b9b512fefc1e8400c
SHA256:2e7439fae7ed66fac54514a3ab6a972e974955bb24a764f3ef67afc69dd8a8e5
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | maintenance.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugins | Low
Vendor | Manifest | built-date | 2026-06-16 19:41 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | maintenance.pdfc | High
Product | jar | package name | maintenance | Highest
Product | jar | package name | maintenance | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugins | Low
Product | Manifest | built-date | 2026-06-16 19:41 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | maintenance.pdfc | High
Product | Manifest | specification-title | maintenance.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### maintenance.pdfc.zip: maintenance.pdfc.jar: app.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar/com/inet/pdfc/plugins/maintenance/server/comparisons/js/app.js
MD5: 5e534fcce6f689d176c6f3b40fc4454f
SHA1: e5f82942adf62444636d28e904add7c61a18ea32
SHA256:d08c1c9da221cbd9c38a26e0235b0da7c3bed4ab30f504aa741d4085a42f7294
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### maintenance.pdfc.zip: maintenance.pdfc.jar: comparisons.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar/com/inet/pdfc/plugins/maintenance/server/comparisons/js/comparisons.js
MD5: dc34a947f1122f6f845deb82b822f15c
SHA1: 7a1528b00bb5229be98689b8c465b37c39bfa0ff
SHA256:27b0ebba3a0c757e921cb562be691ee971fa06d1247423ff2c16f71d87d51bee
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### ocr.tesseract.zip: commons-logging.jar

Description:

    Apache Commons Logging is a thin adapter allowing configurable bridging to other,
        well-known logging systems.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/commons-logging.jar
MD5: e7a1e7cb6a89241ed9bfec4c25b6c645
SHA1: b9fc14968d63a8b8a8a2c1885fe3e90564239708
SHA256:bc2dfe32f1ef06509e6a065144c1adf7b420eabf11a87f30bd127f8faa332016
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | commons-logging | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | logging | Highest
Vendor | Manifest | automatic-module-name | org.apache.commons.logging | Medium
Vendor | Manifest | build-jdk-spec | 17 | Low
Vendor | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-logging/ | Low
Vendor | Manifest | bundle-symbolicname | org.apache.commons.commons-logging | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | multi-release | true | Low
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | commons-logging | Low
Vendor | pom | developer email | baliuka@apache.org | Low
Vendor | pom | developer email | costin@apache.org | Low
Vendor | pom | developer email | craigmcc@apache.org | Low
Vendor | pom | developer email | dennisl@apache.org | Low
Vendor | pom | developer email | donaldp@apache.org | Low
Vendor | pom | developer email | ggregory at apache.org | Low
Vendor | pom | developer email | morgand@apache.org | Low
Vendor | pom | developer email | rdonkin@apache.org | Low
Vendor | pom | developer email | rsitze@apache.org | Low
Vendor | pom | developer email | rwaldhoff@apache.org | Low
Vendor | pom | developer email | sanders@apache.org | Low
Vendor | pom | developer email | skitching@apache.org | Low
Vendor | pom | developer email | tn@apache.org | Low
Vendor | pom | developer id | baliuka | Medium
Vendor | pom | developer id | bstansberry | Medium
Vendor | pom | developer id | costin | Medium
Vendor | pom | developer id | craigmcc | Medium
Vendor | pom | developer id | dennisl | Medium
Vendor | pom | developer id | donaldp | Medium
Vendor | pom | developer id | ggregory | Medium
Vendor | pom | developer id | morgand | Medium
Vendor | pom | developer id | rdonkin | Medium
Vendor | pom | developer id | rsitze | Medium
Vendor | pom | developer id | rwaldhoff | Medium
Vendor | pom | developer id | sanders | Medium
Vendor | pom | developer id | skitching | Medium
Vendor | pom | developer id | tn | Medium
Vendor | pom | developer name | Brian Stansberry | Medium
Vendor | pom | developer name | Costin Manolache | Medium
Vendor | pom | developer name | Craig McClanahan | Medium
Vendor | pom | developer name | Dennis Lundberg | Medium
Vendor | pom | developer name | Gary Gregory | Medium
Vendor | pom | developer name | Juozas Baliuka | Medium
Vendor | pom | developer name | Morgan Delagrange | Medium
Vendor | pom | developer name | Peter Donald | Medium
Vendor | pom | developer name | Richard Sitze | Medium
Vendor | pom | developer name | Robert Burrell Donkin | Medium
Vendor | pom | developer name | Rodney Waldhoff | Medium
Vendor | pom | developer name | Scott Sanders | Medium
Vendor | pom | developer name | Simon Kitching | Medium
Vendor | pom | developer name | Thomas Neidhart | Medium
Vendor | pom | developer org | Apache | Medium
Vendor | pom | developer org | The Apache Software Foundation | Medium
Vendor | pom | developer org URL | https://www.apache.org/ | Medium
Vendor | pom | groupid | commons-logging | Highest
Vendor | pom | name | Apache Commons Logging | High
Vendor | pom | parent-artifactid | commons-parent | Low
Vendor | pom | parent-groupid | org.apache.commons | Medium
Vendor | pom | url | https://commons.apache.org/proper/commons-logging/ | Highest
Product | file | name | commons-logging | High
Product | jar | package name | apache | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | logging | Highest
Product | Manifest | automatic-module-name | org.apache.commons.logging | Medium
Product | Manifest | build-jdk-spec | 17 | Low
Product | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-logging/ | Low
Product | Manifest | Bundle-Name | Apache Commons Logging | Medium
Product | Manifest | bundle-symbolicname | org.apache.commons.commons-logging | Medium
Product | Manifest | Implementation-Title | Apache Commons Logging | High
Product | Manifest | multi-release | true | Low
Product | Manifest | specification-title | Apache Commons Logging | Medium
Product | pom | artifactid | commons-logging | Highest
Product | pom | developer email | baliuka@apache.org | Low
Product | pom | developer email | costin@apache.org | Low
Product | pom | developer email | craigmcc@apache.org | Low
Product | pom | developer email | dennisl@apache.org | Low
Product | pom | developer email | donaldp@apache.org | Low
Product | pom | developer email | ggregory at apache.org | Low
Product | pom | developer email | morgand@apache.org | Low
Product | pom | developer email | rdonkin@apache.org | Low
Product | pom | developer email | rsitze@apache.org | Low
Product | pom | developer email | rwaldhoff@apache.org | Low
Product | pom | developer email | sanders@apache.org | Low
Product | pom | developer email | skitching@apache.org | Low
Product | pom | developer email | tn@apache.org | Low
Product | pom | developer id | baliuka | Low
Product | pom | developer id | bstansberry | Low
Product | pom | developer id | costin | Low
Product | pom | developer id | craigmcc | Low
Product | pom | developer id | dennisl | Low
Product | pom | developer id | donaldp | Low
Product | pom | developer id | ggregory | Low
Product | pom | developer id | morgand | Low
Product | pom | developer id | rdonkin | Low
Product | pom | developer id | rsitze | Low
Product | pom | developer id | rwaldhoff | Low
Product | pom | developer id | sanders | Low
Product | pom | developer id | skitching | Low
Product | pom | developer id | tn | Low
Product | pom | developer name | Brian Stansberry | Low
Product | pom | developer name | Costin Manolache | Low
Product | pom | developer name | Craig McClanahan | Low
Product | pom | developer name | Dennis Lundberg | Low
Product | pom | developer name | Gary Gregory | Low
Product | pom | developer name | Juozas Baliuka | Low
Product | pom | developer name | Morgan Delagrange | Low
Product | pom | developer name | Peter Donald | Low
Product | pom | developer name | Richard Sitze | Low
Product | pom | developer name | Robert Burrell Donkin | Low
Product | pom | developer name | Rodney Waldhoff | Low
Product | pom | developer name | Scott Sanders | Low
Product | pom | developer name | Simon Kitching | Low
Product | pom | developer name | Thomas Neidhart | Low
Product | pom | developer org | Apache | Low
Product | pom | developer org | The Apache Software Foundation | Low
Product | pom | developer org URL | https://www.apache.org/ | Low
Product | pom | groupid | commons-logging | Highest
Product | pom | name | Apache Commons Logging | High
Product | pom | parent-artifactid | commons-parent | Medium
Product | pom | parent-groupid | org.apache.commons | Medium
Product | pom | url | https://commons.apache.org/proper/commons-logging/ | Medium
Version | Manifest | Bundle-Version | 1.3.4 | High
Version | Manifest | Implementation-Version | 1.3.4 | High
Version | pom | parent-version | 1.3.4 | Low
Version | pom | version | 1.3.4 | Highest

#### Identifiers

- pkg:maven/commons-logging/commons-logging@1.3.4 (Confidence:High)

### ocr.tesseract.zip: fontbox.jar

Description:

        The Apache FontBox library is an open source Java tool to obtain low level information
        from font files. FontBox is a subproject of Apache PDFBox.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/fontbox.jar
MD5: fd7e63f326b2e92ced87c15c854bf820
SHA1: 48c70ca4297548041b7e05493a2db4780a037cf1
SHA256:8149d9897ab504f7a3f3797d552cd8925ef58149b4de3fb470eb46d747e68f86
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | fontbox | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | fontbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.fontbox | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Vendor | Manifest | bundle-symbolicname | org.apache.pdfbox.fontbox | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | fontbox | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache FontBox | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Vendor | pom | url | http://pdfbox.apache.org/ | Highest
Product | file | name | fontbox | High
Product | jar | package name | apache | Highest
Product | jar | package name | fontbox | Highest
Product | Manifest | automatic-module-name | org.apache.fontbox | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Product | Manifest | Bundle-Name | Apache FontBox | Medium
Product | Manifest | bundle-symbolicname | org.apache.pdfbox.fontbox | Medium
Product | Manifest | Implementation-Title | Apache FontBox | High
Product | Manifest | specification-title | Apache FontBox | Medium
Product | pom | artifactid | fontbox | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache FontBox | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Product | pom | url | http://pdfbox.apache.org/ | Medium
Version | Manifest | Bundle-Version | 3.0.7 | High
Version | Manifest | Implementation-Version | 3.0.7 | High
Version | pom | version | 3.0.7 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/fontbox@3.0.7 (Confidence:High)

### ocr.tesseract.zip: jai-imageio-core.jar

Description:

        Java Advanced Imaging Image I/O Tools API core, but without the classes
        involved with javax.media.jai dependencies, JPEG2000 or
        codecLibJIIO, meaning that this library can be distributed under the
        modified BSD license and should be GPL compatible.

License:

    BSD 3-clause License w/nuclear disclaimer: LICENSE.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jai-imageio-core.jar
MD5: 6978d733bfb55c0a82639f724fe5f3bb
SHA1: fb6d79b929556362a241b2f65a04e538062f0077
SHA256:8ad3c68e9efffb10ac87ff8bc589adf64b04a729c5194c079efd0643607fd72a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jai-imageio-core | High
Vendor | jar | package name | github | Highest
Vendor | Manifest | bundle-docurl | https://github.com/jai-imageio/ | Low
Vendor | Manifest | bundle-symbolicname | jai-imageio-core | Medium
Vendor | Manifest | extension-name | com.github.jai-imageio-jai-imageio-core | Medium
Vendor | Manifest | Implementation-Vendor | https://github.com/jai-imageio/ jai-imageio GitHub group | High
Vendor | Manifest | specification-vendor | Sun Microsystems, Inc. | Low
Vendor | Manifest | url | https://github.com/jai-imageio/jai-imageio-core | Low
Vendor | pom | artifactid | jai-imageio-core | Low
Vendor | pom | developer email | stian@s11.no | Low
Vendor | pom | developer name | Stian Soiland-Reyes | Medium
Vendor | pom | developer org | s11 | Medium
Vendor | pom | developer org URL | http://s11.no/ | Medium
Vendor | pom | groupid | com.github.jai-imageio | Highest
Vendor | pom | name | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Vendor | pom | organization name | jai-imageio GitHub group | High
Vendor | pom | organization url | jai-imageio/ | Medium
Vendor | pom | url | jai-imageio/jai-imageio-core | Highest
Product | file | name | jai-imageio-core | High
Product | jar | package name | github | Highest
Product | Manifest | bundle-docurl | https://github.com/jai-imageio/ | Low
Product | Manifest | Bundle-Name | Java Advanced Imaging Image I/O Tools API core (standalone) | Medium
Product | Manifest | bundle-symbolicname | jai-imageio-core | Medium
Product | Manifest | extension-name | com.github.jai-imageio-jai-imageio-core | Medium
Product | Manifest | Implementation-Title | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Product | Manifest | specification-title | Java Advanced Imaging | Medium
Product | Manifest | url | https://github.com/jai-imageio/jai-imageio-core | Low
Product | pom | artifactid | jai-imageio-core | Highest
Product | pom | developer email | stian@s11.no | Low
Product | pom | developer name | Stian Soiland-Reyes | Low
Product | pom | developer org | s11 | Low
Product | pom | developer org URL | http://s11.no/ | Low
Product | pom | groupid | com.github.jai-imageio | Highest
Product | pom | name | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Product | pom | organization name | jai-imageio GitHub group | Low
Product | pom | url | jai-imageio/ | High
Product | pom | url | jai-imageio/jai-imageio-core | High
Version | Manifest | Bundle-Version | 1.4.0 | High
Version | Manifest | Implementation-Version | 1.4.0 | High
Version | pom | version | 1.4.0 | Highest

#### Identifiers

- pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0 (Confidence:High)

### ocr.tesseract.zip: jbig2-imageio.jar

Description:

    	Java Image I/O plugin for reading JBIG2-compressed image data.
    	Formerly known as the levigo JBig2 ImageIO plugin (com.levigo.jbig2:levigo-jbig2-imageio).

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jbig2-imageio.jar
MD5: c51f45dc3d29bbf716774f9ff9e95ad6
SHA1: ad09a9bb94ea791ea81fb6c5bc2b13dd77872598
SHA256:29cb2951622f10acf61fd0656c4e6fa5562194a9095f7a1d26aa426e2f6b17eb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jbig2-imageio | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | image | Highest
Vendor | jar | package name | jbig2 | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Vendor | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | Implementation-Vendor-Id | org.apache.pdfbox | Medium
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | jbig2-imageio | Low
Vendor | pom | developer id | adam | Medium
Vendor | pom | developer id | blitchfield | Medium
Vendor | pom | developer id | carrier | Medium
Vendor | pom | developer id | danielwilson | Medium
Vendor | pom | developer id | gbailleul | Medium
Vendor | pom | developer id | hennejg | Medium
Vendor | pom | developer id | holdersn | Medium
Vendor | pom | developer id | jahewson | Medium
Vendor | pom | developer id | jeremias | Medium
Vendor | pom | developer id | jukka | Medium
Vendor | pom | developer id | kjackson | Medium
Vendor | pom | developer id | koch | Medium
Vendor | pom | developer id | koehlecn | Medium
Vendor | pom | developer id | lehmi | Medium
Vendor | pom | developer id | leleueri | Medium
Vendor | pom | developer id | mmayer | Medium
Vendor | pom | developer id | msayhoun | Medium
Vendor | pom | developer id | pkoch | Medium
Vendor | pom | developer id | tallison | Medium
Vendor | pom | developer id | tboehme | Medium
Vendor | pom | developer id | tchojecki | Medium
Vendor | pom | developer id | tilman | Medium
Vendor | pom | developer id | vfed | Medium
Vendor | pom | developer name | Adam Nichols | Medium
Vendor | pom | developer name | Andreas Lehmkühler | Medium
Vendor | pom | developer name | Ben Litchfield | Medium
Vendor | pom | developer name | Brian Carrier | Medium
Vendor | pom | developer name | Carolin Köhler | Medium
Vendor | pom | developer name | Daniel Wilson | Medium
Vendor | pom | developer name | Eric Leleu | Medium
Vendor | pom | developer name | Guillaume Bailleul | Medium
Vendor | pom | developer name | Jeremias Maerki | Medium
Vendor | pom | developer name | Johannes Koch | Medium
Vendor | pom | developer name | John Hewson | Medium
Vendor | pom | developer name | Jukka Zitting | Medium
Vendor | pom | developer name | Jörg Henne | Medium
Vendor | pom | developer name | Kevin Jackson | Medium
Vendor | pom | developer name | Maruan Sayhoun | Medium
Vendor | pom | developer name | Matthäus Mayer | Medium
Vendor | pom | developer name | Phillipp Koch | Medium
Vendor | pom | developer name | Sebastian Holder | Medium
Vendor | pom | developer name | Thomas Chojecki | Medium
Vendor | pom | developer name | Tilman Hausherr | Medium
Vendor | pom | developer name | Tim Allison | Medium
Vendor | pom | developer name | Timo Boehme | Medium
Vendor | pom | developer name | Villu Ruusmann | Medium
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | PDFBox JBIG2 ImageIO plugin | High
Vendor | pom | organization name | The Apache Software Foundation | High
Vendor | pom | organization url | http://pdfbox.apache.org | Medium
Vendor | pom | parent-artifactid | apache | Low
Vendor | pom | parent-groupid | org.apache | Medium
Product | file | name | jbig2-imageio | High
Product | jar | package name | apache | Highest
Product | jar | package name | image | Highest
Product | jar | package name | jbig2 | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Product | Manifest | Implementation-Title | PDFBox JBIG2 ImageIO plugin | High
Product | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Product | Manifest | specification-title | PDFBox JBIG2 ImageIO plugin | Medium
Product | pom | artifactid | jbig2-imageio | Highest
Product | pom | developer id | adam | Low
Product | pom | developer id | blitchfield | Low
Product | pom | developer id | carrier | Low
Product | pom | developer id | danielwilson | Low
Product | pom | developer id | gbailleul | Low
Product | pom | developer id | hennejg | Low
Product | pom | developer id | holdersn | Low
Product | pom | developer id | jahewson | Low
Product | pom | developer id | jeremias | Low
Product | pom | developer id | jukka | Low
Product | pom | developer id | kjackson | Low
Product | pom | developer id | koch | Low
Product | pom | developer id | koehlecn | Low
Product | pom | developer id | lehmi | Low
Product | pom | developer id | leleueri | Low
Product | pom | developer id | mmayer | Low
Product | pom | developer id | msayhoun | Low
Product | pom | developer id | pkoch | Low
Product | pom | developer id | tallison | Low
Product | pom | developer id | tboehme | Low
Product | pom | developer id | tchojecki | Low
Product | pom | developer id | tilman | Low
Product | pom | developer id | vfed | Low
Product | pom | developer name | Adam Nichols | Low
Product | pom | developer name | Andreas Lehmkühler | Low
Product | pom | developer name | Ben Litchfield | Low
Product | pom | developer name | Brian Carrier | Low
Product | pom | developer name | Carolin Köhler | Low
Product | pom | developer name | Daniel Wilson | Low
Product | pom | developer name | Eric Leleu | Low
Product | pom | developer name | Guillaume Bailleul | Low
Product | pom | developer name | Jeremias Maerki | Low
Product | pom | developer name | Johannes Koch | Low
Product | pom | developer name | John Hewson | Low
Product | pom | developer name | Jukka Zitting | Low
Product | pom | developer name | Jörg Henne | Low
Product | pom | developer name | Kevin Jackson | Low
Product | pom | developer name | Maruan Sayhoun | Low
Product | pom | developer name | Matthäus Mayer | Low
Product | pom | developer name | Phillipp Koch | Low
Product | pom | developer name | Sebastian Holder | Low
Product | pom | developer name | Thomas Chojecki | Low
Product | pom | developer name | Tilman Hausherr | Low
Product | pom | developer name | Tim Allison | Low
Product | pom | developer name | Timo Boehme | Low
Product | pom | developer name | Villu Ruusmann | Low
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | PDFBox JBIG2 ImageIO plugin | High
Product | pom | organization name | The Apache Software Foundation | Low
Product | pom | organization url | http://pdfbox.apache.org | Low
Product | pom | parent-artifactid | apache | Medium
Product | pom | parent-groupid | org.apache | Medium
Version | Manifest | Implementation-Version | 3.0.4 | High
Version | pom | parent-version | 3.0.4 | Low
Version | pom | version | 3.0.4 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4 (Confidence:High)

### ocr.tesseract.zip: jboss-vfs.jar

Description:

    A VFS library

License:

    Apache License 2.0: http://repository.jboss.org/licenses/apache-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jboss-vfs.jar
MD5: ecf3234794d1b7d03dc1eb5380328e04
SHA1: 748b9f156f35bf63ead9887f040cfc48af18f7f0
SHA256:33a84eac3f1027551146247e3ef4057dc8840cfc8cd436cb2f925b6f5d2126e9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jboss-vfs | High
Vendor | jar | package name | jboss | Highest
Vendor | jar | package name | vfs | Highest
Vendor | Manifest | automatic-module-name | org.jboss.vfs | Medium
Vendor | Manifest | build-jdk-spec | 11 | Low
Vendor | Manifest | implementation-url | http://www.jboss.org | Low
Vendor | Manifest | Implementation-Vendor | JBoss, A division of Red Hat, Inc | High
Vendor | Manifest | specification-vendor | JBoss, A division of Red Hat, Inc | Low
Vendor | pom | artifactid | jboss-vfs | Low
Vendor | pom | groupid | org.jboss | Highest
Vendor | pom | name | JBoss VFS | High
Vendor | pom | organization name | JBoss, A division of Red Hat, Inc | High
Vendor | pom | organization url | http://www.jboss.org | Medium
Vendor | pom | parent-artifactid | jboss-parent | Low
Vendor | pom | url | http://www.jboss.org | Highest
Product | file | name | jboss-vfs | High
Product | jar | package name | jboss | Highest
Product | jar | package name | vfs | Highest
Product | Manifest | automatic-module-name | org.jboss.vfs | Medium
Product | Manifest | build-jdk-spec | 11 | Low
Product | Manifest | Implementation-Title | JBoss VFS | High
Product | Manifest | implementation-url | http://www.jboss.org | Low
Product | Manifest | specification-title | JBoss VFS | Medium
Product | pom | artifactid | jboss-vfs | Highest
Product | pom | groupid | org.jboss | Highest
Product | pom | name | JBoss VFS | High
Product | pom | organization name | JBoss, A division of Red Hat, Inc | Low
Product | pom | organization url | http://www.jboss.org | Low
Product | pom | parent-artifactid | jboss-parent | Medium
Product | pom | url | http://www.jboss.org | Medium
Version | Manifest | Implementation-Version | 3.3.2.Final | High
Version | pom | parent-version | 3.3.2.Final | Low
Version | pom | version | 3.3.2.Final | Highest

#### Identifiers

- pkg:maven/org.jboss/jboss-vfs@3.3.2.Final (Confidence:High)

### ocr.tesseract.zip: jna.jar

Description:

    JNA Library

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar
MD5: 97fcb12698f8c1e4eed897e5c490e098
SHA1: 50c5b36af5dfd16cab07a1616046a50ec52d1e32
SHA256:9e5cdb5ff4ad07bf116cb2b37b2b84987041d79a8991766a08b79b085c6bb6c2
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jna | High
Vendor | jar | package name | jna | Highest
Vendor | jar | package name | jna | Low
Vendor | jar | package name | sun | Highest
Vendor | jar | package name | sun | Low
Vendor | jar (hint) | package name | oracle | Highest
Vendor | jar (hint) | package name | oracle | Low
Vendor | Manifest | automatic-module-name | com.sun.jna | Medium
Vendor | Manifest | bundle-activationpolicy | lazy | Low
Vendor | Manifest | bundle-category | jni | Low
Vendor | Manifest | bundle-nativecode | com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 | Low
Vendor | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.6 | Low
Vendor | Manifest | bundle-symbolicname | com.sun.jna | Medium
Vendor | Manifest | Implementation-Vendor | JNA Development Team | High
Vendor | Manifest | specification-vendor | JNA Development Team | Low
Product | file | name | jna | High
Product | jar | package name | jna | Highest
Product | jar | package name | jna | Low
Product | jar | package name | library | Highest
Product | jar | package name | native | Highest
Product | jar | package name | sun | Highest
Product | jar | package name | win32 | Highest
Product | Manifest | automatic-module-name | com.sun.jna | Medium
Product | Manifest | bundle-activationpolicy | lazy | Low
Product | Manifest | bundle-category | jni | Low
Product | Manifest | Bundle-Name | jna | Medium
Product | Manifest | bundle-nativecode | com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 | Low
Product | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.6 | Low
Product | Manifest | bundle-symbolicname | com.sun.jna | Medium
Product | Manifest | Implementation-Title | com.sun.jna | High
Product | Manifest | specification-title | Java Native Access (JNA) | Medium
Version | jar | package name | jna | Highest
Version | jar | package name | sun | Highest
Version | jar | package name | win32 | Highest
Version | Manifest | Bundle-Version | 5.18.1 | High
Version | Manifest | Implementation-Version | 5.18.1 (b0) | High

#### Identifiers

- cpe:2.3:a:oracle:java_se:5.18.1:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: 302945a811fd8e21bcdd5226c73b6f74
SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607c
SHA256:b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 2d2475f1f026dd54e9f3e787ae4f81da
SHA1: 27ff882ac271db547aee520b38e3ba9aa91e136c
SHA256:5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: 0caa1ef75a807f9dde05084fa2219a5c
SHA1: 2f5e1cd82cde192905c7510ce99037b67d980640
SHA256:752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: lept4j.jar

Description:

            # Lept4J

            ## Description:

            A Java JNA wrapper for Leptonica Image Processing library.

            Lept4J is released and distributed under the Apache License, v2.0.

License:

    Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar
MD5: 70889e28b7569dd54e7da9ced01dabdf
SHA1: ec69d554f05e030b5e06295a4d39057634759549
SHA256:5feb69a8fc9550809b23cb980270cdf99368dea330ba7d98789e2dc93f8bef6f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | lept4j | High
Vendor | jar | package name | lept4j | Highest
Vendor | jar | package name | leptonica | Highest
Vendor | jar | package name | net | Highest
Vendor | jar | package name | sourceforge | Highest
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | pom | artifactid | lept4j | Low
Vendor | pom | developer email | nguyenq@users.sf.net | Low
Vendor | pom | developer name | Quan Nguyen | Medium
Vendor | pom | groupid | net.sourceforge.lept4j | Highest
Vendor | pom | name | Lept4J - Leptonica for Java | High
Vendor | pom | url | nguyenq/lept4j | Highest
Product | file | name | lept4j | High
Product | jar | package name | lept4j | Highest
Product | jar | package name | leptonica | Highest
Product | jar | package name | net | Highest
Product | jar | package name | sourceforge | Highest
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | pom | artifactid | lept4j | Highest
Product | pom | developer email | nguyenq@users.sf.net | Low
Product | pom | developer name | Quan Nguyen | Low
Product | pom | groupid | net.sourceforge.lept4j | Highest
Product | pom | name | Lept4J - Leptonica for Java | High
Product | pom | url | nguyenq/lept4j | High
Version | pom | version | 1.19.1 | Highest

#### Identifiers

- pkg:maven/net.sourceforge.lept4j/lept4j@1.19.1 (Confidence:High)

### ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar/win32-x86-64/libleptonica1841.dll
MD5: 981b8e38e33018fff693c8e3ec0f2254
SHA1: 91a9cd0a874d614bc8a8946d2e0a8573e8b96ac1
SHA256:0b2cb584baeb38b90033344b4d70830b33ba01396fb9142b9b733e83c8a73fb8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libleptonica1841 | High
Product | file | name | libleptonica1841 | High
Version | file | name | libleptonica1841 | Medium
Version | file | version | 1841 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar/win32-x86/libleptonica1841.dll
MD5: 64f0634192bcf75ade5ea06f8119512d
SHA1: b387acaa5209f796fb3065395548d2adcbad620e
SHA256:405e5263b72cb7d63c723fd85a124201cd66aa9a983b3a1c1e4c82003c91bcaa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libleptonica1841 | High
Product | file | name | libleptonica1841 | High
Version | file | name | libleptonica1841 | Medium
Version | file | version | 1841 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: ocr.tesseract.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/ocr.tesseract.jar
MD5: a7b20ab92b50b8adf88b9d51ee778e57
SHA1: 81ae38985a763cf41f9853f9ef812fa449f8e31c
SHA256:47c018b7c448436bc1b99102748cadc464cc12b462f51b679d3a178b83998eb9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | ocr.tesseract | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | ocr | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:41 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | ocr.tesseract | High
Product | jar | package name | ocr | Highest
Product | jar | package name | ocr | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | tesseract | Highest
Product | jar | package name | tesseract | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:41 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | ocr.tesseract | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | ocr.tesseract | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:tesseract_ocr_project:tesseract_ocr:26.4.269:*:*:*:*:*:*:* (Confidence:Low)
- cpe:2.3:a:tesseract_project:tesseract:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: pdfbox-debugger.jar

Description:

        The Apache PDFBox library is an open source Java tool for working with PDF documents.
        This artefact contains the PDFDebugger.

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox-debugger.jar
MD5: 85573afca8351375b49718b379abc76c
SHA1: 2c48091b1dd9be69d09e1aea657fc1e4065b08e7
SHA256:79320b36483f001661b01e9409d9b62066e07a3a4e2f9e6568d777b04896d130
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfbox-debugger | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | debugger | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | jar | package name | pdfdebugger | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox.debugger | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | pdfbox-debugger | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache PDFBox Debugger | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Product | file | name | pdfbox-debugger | High
Product | jar | package name | apache | Highest
Product | jar | package name | debugger | Highest
Product | jar | package name | pdfbox | Highest
Product | jar | package name | pdfdebugger | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox.debugger | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | Implementation-Title | Apache PDFBox Debugger | High
Product | Manifest | specification-title | Apache PDFBox Debugger | Medium
Product | pom | artifactid | pdfbox-debugger | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache PDFBox Debugger | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Version | Manifest | Implementation-Version | 3.0.7 | High
Version | pom | version | 3.0.7 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/pdfbox-debugger@3.0.7 (Confidence:High)

### ocr.tesseract.zip: pdfbox.jar

Description:

            The Apache PDFBox library is an open source Java tool for working with PDF documents.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox.jar
MD5: adeb0637e9451d49e610ee3bc16781cd
SHA1: ecfc1bbfa656d3e330b8cc9e6996a18cde1c9bd0
SHA256:7cefa717622330951b4343abf1e5d36bccb11f4ba245d78aaa73251d08fec623
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfbox | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Vendor | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | pdfbox | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache PDFBox | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Product | file | name | pdfbox | High
Product | jar | package name | apache | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Product | Manifest | Bundle-Name | Apache PDFBox | Medium
Product | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Product | Manifest | Implementation-Title | Apache PDFBox | High
Product | Manifest | specification-title | Apache PDFBox | Medium
Product | pom | artifactid | pdfbox | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache PDFBox | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Version | Manifest | Bundle-Version | 3.0.7 | High
Version | Manifest | Implementation-Version | 3.0.7 | High
Version | pom | version | 3.0.7 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/pdfbox@3.0.7 (Confidence:High)

### ocr.tesseract.zip: tess4j.jar

Description:

            # Tess4J

            ## Description:

            A Java JNA wrapper for Tesseract OCR API.

            Tess4J is released and distributed under the Apache License, v2.0.

            ## Features:

            The library provides optical character recognition (OCR) support for:

            TIFF, JPEG, GIF, PNG, and BMP image formats
            Multi-page TIFF images
            PDF document format

License:

    Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar
MD5: f6a0f08fbc08771303e5cb8dffbc949a
SHA1: 851d6f93d97a155d8831736ad1031a539946014e
SHA256:e65bcc6328ab575684038d45e1891fa48e0d8255097a628baee0d8cfeb5ea816
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | tess4j | High
Vendor | jar | package name | net | Highest
Vendor | jar | package name | recognition | Highest
Vendor | jar | package name | sourceforge | Highest
Vendor | jar | package name | tess4j | Highest
Vendor | jar | package name | tesseract | Highest
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | implementation-url | http://tess4j.sourceforge.net | Low
Vendor | Manifest | Implementation-Vendor | Tess4J | High
Vendor | Manifest | specification-vendor | Tess4J | Low
Vendor | pom | artifactid | tess4j | Low
Vendor | pom | developer email | nguyenq@users.sf.net | Low
Vendor | pom | developer email | osoriojaques@gmail.com | Low
Vendor | pom | developer name | O.J. Sousa Rodrigues | Medium
Vendor | pom | developer name | Quan Nguyen | Medium
Vendor | pom | groupid | net.sourceforge.tess4j | Highest
Vendor | pom | name | Tess4J - Tesseract for Java | High
Vendor | pom | organization name | Tess4J | High
Vendor | pom | organization url | http://tess4j.sourceforge.net | Medium
Vendor | pom | url | http://tess4j.sourceforge.net | Highest
Product | file | name | tess4j | High
Product | jar | package name | net | Highest
Product | jar | package name | recognition | Highest
Product | jar | package name | sourceforge | Highest
Product | jar | package name | tess4j | Highest
Product | jar | package name | tesseract | Highest
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | Implementation-Title | Tess4J - Tesseract for Java | High
Product | Manifest | implementation-url | http://tess4j.sourceforge.net | Low
Product | Manifest | specification-title | Tess4J - Tesseract for Java | Medium
Product | pom | artifactid | tess4j | Highest
Product | pom | developer email | nguyenq@users.sf.net | Low
Product | pom | developer email | osoriojaques@gmail.com | Low
Product | pom | developer name | O.J. Sousa Rodrigues | Low
Product | pom | developer name | Quan Nguyen | Low
Product | pom | groupid | net.sourceforge.tess4j | Highest
Product | pom | name | Tess4J - Tesseract for Java | High
Product | pom | organization name | Tess4J | Low
Product | pom | organization url | http://tess4j.sourceforge.net | Low
Product | pom | url | http://tess4j.sourceforge.net | Medium
Version | Manifest | Implementation-Version | 5.12.0 | High
Version | pom | version | 5.12.0 | Highest

#### Identifiers

- pkg:maven/net.sourceforge.tess4j/tess4j@5.12.0 (Confidence:High)
- cpe:2.3:a:tesseract_project:tesseract:5.12.0:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: tess4j.jar: libtesseract541.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar/win32-x86-64/libtesseract541.dll
MD5: 1246c1e50200dc43722e926e28fc7c03
SHA1: d8a78040e9c7c71ccaeb627b73c41c66a18b5157
SHA256:8180efb176e09b7218144fe69d84c0cf6b6187e20d8529f1138bd77396d6f4fa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libtesseract541 | High
Product | file | name | libtesseract541 | High
Version | file | name | libtesseract541 | Medium
Version | file | version | 541 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: tess4j.jar: libtesseract541.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar/win32-x86/libtesseract541.dll
MD5: cbf57c8eb12e95512e67638f344ae537
SHA1: 5531d539121fd0aa57d11febd2e8b2a5c13fca05
SHA256:d4d1843d9efeeec1ca53c4ebe6d39e22e5bf17f5bee8b9eedb3bcef7c3c8c84d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libtesseract541 | High
Product | file | name | libtesseract541 | High
Version | file | name | libtesseract541 | Medium
Version | file | version | 541 | Medium

#### Identifiers

- None

### opentest4j-1.3.0.jar

Description:

    Open Test Alliance for the JVM

License:

    The Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.opentest4j/opentest4j/1.3.0/152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e/opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256:48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Project/Scope: standalone:inetPlugin
opentest4j-1.3.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | opentest4j | High
Vendor | gradle | artifactid | opentest4j | Highest
Vendor | gradle | groupid | org.opentest4j | Highest
Vendor | jar | package name | opentest4j | Highest
Vendor | jar | package name | opentest4j | Low
Vendor | Manifest | build-date | 2023-07-06 | Low
Vendor | Manifest | build-revision | 214973bfa4e7e9be7d04e623202cc4147c7036d2 | Low
Vendor | Manifest | build-time | 14:25:06.116+0200 | Low
Vendor | Manifest | bundle-symbolicname | org.opentest4j | Medium
Vendor | Manifest | Implementation-Vendor | opentest4j.org | High
Vendor | Manifest | specification-vendor | opentest4j.org | Low
Vendor | pom | artifactid | opentest4j | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.opentest4j | Highest
Vendor | pom | name | org.opentest4j:opentest4j | High
Vendor | pom | url | ota4j-team/opentest4j | Highest
Product | file | name | opentest4j | High
Product | gradle | artifactid | opentest4j | Highest
Product | jar | package name | opentest4j | Highest
Product | Manifest | build-date | 2023-07-06 | Low
Product | Manifest | build-revision | 214973bfa4e7e9be7d04e623202cc4147c7036d2 | Low
Product | Manifest | build-time | 14:25:06.116+0200 | Low
Product | Manifest | Bundle-Name | opentest4j | Medium
Product | Manifest | bundle-symbolicname | org.opentest4j | Medium
Product | Manifest | Implementation-Title | opentest4j | High
Product | Manifest | specification-title | opentest4j | Medium
Product | pom | artifactid | opentest4j | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.opentest4j | Highest
Product | pom | name | org.opentest4j:opentest4j | High
Product | pom | url | ota4j-team/opentest4j | High
Version | file | version | 1.3.0 | High
Version | gradle | version | 1.3.0 | Highest
Version | Manifest | Bundle-Version | 1.3.0 | High
Version | Manifest | Implementation-Version | 1.3.0 | High
Version | pom | version | 1.3.0 | Highest

#### Identifiers

- pkg:maven/org.opentest4j/opentest4j@1.3.0 (Confidence:High)

### parser.image.zip: parser.image.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.image.zip/parser.image.jar
MD5: b52eef64347e0d59cc308f31399ac638
SHA1: d5bd2bb1ba31df137a5ff061eb5c2d1cbcd13809
SHA256:df548c6b64e39cd68003c8eb56d990eb67188b6c0a51cd6b66283ec8b5d0041a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.image | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:40 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.image | High
Product | jar | package name | imageparser | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugin | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:40 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.image | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.image | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### parser.pdf.config.zip: parser.pdf.config.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.pdf.config.zip/parser.pdf.config.jar
MD5: 92bcf52b9684e0dd25e357fadb67dbdc
SHA1: f19b245339b682e824535cc38eba8d861d044c12
SHA256:69512066c4a90062e42337411c92074958fb76eab4010ea0725c2605c6af0490
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.pdf.config | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:40 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.pdf.config | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | pdfparserconfig | Low
Product | jar | package name | plugin | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:40 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.pdf.config | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.pdf.config | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### parser.text.zip: parser.text.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.text.zip/parser.text.jar
MD5: 94dad5ae4a80f3a75777cb7582189423
SHA1: bd20ee326532d48bb28979a15b390c48cde7ef51
SHA256:90d8bee001610a7306fba0e3b308355199b2f1958fa1e05c74cd02cb9cba4a6c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.text | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:40 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.text | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugin | Low
Product | jar | package name | textparser | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:40 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.text | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.text | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.standalone.zip: pdfc.standalone.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar
MD5: 5a3f015af3f0b7e7c902a8f50725b171
SHA1: 3ec0513c80fe5c592bfd2bd6f5bb8d23f1c90569
SHA256:f4d39828d79460d6335522e224da1f667ee9b163bd788c94f3df9bd620f3073e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc.standalone | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | standalone | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:48 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfc.standalone | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | standalone | Highest
Product | jar | package name | standalone | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:48 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfc.standalone | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfc.standalone | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.standalone.zip: pdfc.standalone.jar: bridge.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridge.js
MD5: 93a24df267249dca305f5af83c047f48
SHA1: 2690836189ad0dd3715568d15b8bba5a3a9fbc93
SHA256:b17c61dcfca7e59009ebe3e57ec254ad68c2dc080d9a194d867a185902e6a433
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: bridgeConfig.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridgeConfig.js
MD5: 50c7b33549870b71c25e22443829ba78
SHA1: 0a50eb333055885b58537a1463009c6d321ca110
SHA256:7ba9c85404a965c72b736350b26b97bef813b9e523081ed2bf1f9b7303ba0ce4
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: bridgePDFC.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridgePDFC.js
MD5: 918410e4e9590ab87b5ca1ea983ebdf1
SHA1: 422e9fa020147687e2c79fa87f8d7ac23d964df1
SHA256:3d95bb11030e08751e23f02d299b19e2c8db823a14217bdc0cea034a1e23199d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: extraMenu.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/extraMenu.js
MD5: 76f716ef25759cac5242607c7d46afab
SHA1: ffd9728b1116de8148c96cb1aac069abc994692f
SHA256:0f2b1cc0136aacbc57993ce598a490e36849a34cdaccea15f213b1f2410fc002
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: removeHeader.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/removeHeader.js
MD5: 6155f56ea46454fd9b26ec029b07cb4c
SHA1: fdbb377d77e7a33fccd3e56eda617da18a45af3c
SHA256:7f74294ea3dd2d4561aadf5deb9e1436af5cd08d3f53754b8c2e2321ddad3687
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: removePDFCElements.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/removePDFCElements.js
MD5: cf23507d05d2a8f690f9489d131e7de7
SHA1: bff6a66569787ecf08f314c176220be0ef16f86c
SHA256:3d2d7526c75020284374f9298157f8fb7d0c37d38d079cffda17b94f9b73690a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: theme.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/theme.js
MD5: 9ee2557b2355cd5367ad7b7cdf3505e2
SHA1: 6a8e3c4a8964395018faac989bbbd37abf148cd3
SHA256:0acc32f71a37d0f0f7485be6746f688e449df07e6db3b5ad01973ad7fc3aa53a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: translation.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/translation.js
MD5: 087098ce4993357914ab7ee2ca130bc0
SHA1: b77b0d98a5a98b3a5c9317333f29c0c18d36d86e
SHA256:26eb8ace7faad440f3aedd47c1c3f6c1603fe7b150213ad32a4251d1226a3895
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:collate:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/collate/pom.xml
MD5: 8a5e69099a365660c81e3f1b515012de
SHA1: e04309ffaf86f3d740d5eaa8b605c9e5a55a7db5
SHA256:ffde34d7e990dfa25396f8095e7c6680db6abf4e536a62e8da24dfe4faef5ec0
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | collate | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | collate | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/collate@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:core:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/core/pom.xml
MD5: 7c54dfd4dcbb4cc426efc3a02c44e7b7
SHA1: 8249f7edd365676632db5f30c3974ba539b5fb45
SHA256:eb330e7f299f27267cdf5dac63ce4e248431db5364e5fe5d2c52a05e9a3339f8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | core | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | core | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/core@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:currdata:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/currdata/pom.xml
MD5: fef4cb909d7b27b6ed7e8e2a63a74385
SHA1: f1c19ca31a31a8fedbfcfb1926e81b5f73bab191
SHA256:e5b381f33e2eac3b53bcb9a8c37431be4b0115ae98e7364cf07289d6510618bf
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | currdata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | currdata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/currdata@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:langdata:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/langdata/pom.xml
MD5: 8a25895e73898cb1f2cf7e06f5815d61
SHA1: 01b90c95a6ba094cf50856dc56773de4589ee6b4
SHA256:16353d688a9a10c1d6d0033666390677d27d052ad50235958ea4fa233df21a75
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | langdata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | langdata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/langdata@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:regiondata:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/regiondata/pom.xml
MD5: 3a4e2bd7c7c6a6d634c5e8daec4cc986
SHA1: b195315e8f8d2168a2a477c9dfde5d140184dd96
SHA256:22c0732f107b18bc77faed127bafa209e50a4be8e35c22fac0723c0efaebc4de
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | regiondata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | regiondata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/regiondata@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:tools_taglets:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/tools_taglets/pom.xml
MD5: a9a857c184540a60fd84ba9924665b35
SHA1: 25def12ca718c1a57ce365cba497a2c509b65ceb
SHA256:8dbd68f4b2100a898faf01baa2206d90d0e3c5dbc4a81f9aaa86210540f16d01
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | tools_taglets | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | tools_taglets | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/tools_taglets@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:translit:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/translit/pom.xml
MD5: 62aada535264891418d1ff71dff22536
SHA1: 056c25cc61d31788d585b5aa47bc3c93c17623e1
SHA256:e2b4c57b167d754332a04c048c7a2e2c0e31f6bd16b5a53e1352fe3fb7aa6ad3
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | translit | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | translit | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/translit@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar

Description:

    International Components for Unicode for Java (ICU4J) is a mature, widely used Java library
        providing Unicode and Globalization support

License:

    Unicode-3.0: https://raw.githubusercontent.com/unicode-org/icu/maint/maint-78/LICENSE

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar
MD5: 75bcc3702dded8ec60351f6ad2beaa61
SHA1: 31b9d9a35d283432d0ce1a8b6e2631dcfd046ab8
SHA256:70627c3ff4b9077f6c3dc2156fb480821f9c1a041b645373f2a0391aae3552a1
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | icu4j | High
Vendor | file (hint) | name | icu-project | High
Vendor | file (hint) | name | unicode | High
Vendor | jar | package name | ibm | Highest
Vendor | jar | package name | icu | Highest
Vendor | Manifest | automatic-module-name | com.ibm.icu | Medium
Vendor | Manifest | build-jdk-spec | 11 | Low
Vendor | Manifest | bundle-copyright | © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html | Low
Vendor | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low
Vendor | Manifest | bundle-symbolicname | com.ibm.icu | Medium
Vendor | Manifest | Implementation-Vendor | Unicode, Inc. | High
Vendor | Manifest | Implementation-Vendor-Id | org.unicode | Medium
Vendor | pom | artifactid | icu4j | Low
Vendor | pom | developer id | markusicu | Medium
Vendor | pom | developer id | richgillam | Medium
Vendor | pom | developer name | Markus Scherer | Medium
Vendor | pom | developer name | Richard Gillam | Medium
Vendor | pom | developer org | Google | Medium
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | name | ICU4J | High
Vendor | pom | url | https://icu.unicode.org/ | Highest
Vendor | pom (hint) | artifactid | icu-project | Low
Vendor | pom (hint) | artifactid | unicode | Low
Vendor | pom (hint) | name | icu-project | High
Vendor | pom (hint) | name | unicode | High
Product | file | name | icu4j | High
Product | hint analyzer | product | international_components_for_unicode | Highest
Product | jar | package name | ibm | Highest
Product | jar | package name | icu | Highest
Product | Manifest | automatic-module-name | com.ibm.icu | Medium
Product | Manifest | build-jdk-spec | 11 | Low
Product | Manifest | bundle-copyright | © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html | Low
Product | Manifest | Bundle-Name | ICU4J | Medium
Product | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low
Product | Manifest | bundle-symbolicname | com.ibm.icu | Medium
Product | Manifest | Implementation-Title | International Components for Unicode for Java | High
Product | Manifest | specification-title | International Components for Unicode for Java | Medium
Product | pom | artifactid | icu4j | Highest
Product | pom | developer id | markusicu | Low
Product | pom | developer id | richgillam | Low
Product | pom | developer name | Markus Scherer | Low
Product | pom | developer name | Richard Gillam | Low
Product | pom | developer org | Google | Low
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | name | ICU4J | High
Product | pom | url | https://icu.unicode.org/ | Medium
Version | Manifest | Bundle-Version | 78.2 | High
Version | Manifest | Implementation-Version | 78.2 | High
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/icu4j@78.2 (Confidence:High)
- cpe:2.3:a:icu-project:international_components_for_unicode:78.2:*:*:*:*:*:*:* (Confidence:Low)
- cpe:2.3:a:unicode:international_components_for_unicode:78.2:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.zip: pdfc-javadoc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar
MD5: 100ffb442a233da816160e1747732707
SHA1: e2899487ec73179c693c82c0ba2e7967b8d782fe
SHA256:c2966458ca21b2aaeaa10f4ea221b8eff76c809b3f2193c8f9b898be45fcbc1c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc-javadoc | High
Product | file | name | pdfc-javadoc | High

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: jquery-3.7.1.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/jquery-3.7.1.min.js
MD5: 2c872dbe60f4ba70fb85356113d8b35e
SHA1: ee48592d1fff952fcf06ce0b666ed4785493afdc
SHA256:fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/jquery-ui.min.js
MD5: ab481ee8cd3ebac4edfcbd2cae5b0dde
SHA1: a3df331b23b1dc7d01d219cf426ff3148da3ac33
SHA256:4c0b2b6513452adf188402da32faea446b326e0a3362eda6fa8603e73594a567
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: member-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/member-search-index.js
MD5: b01d05f296d74afcf71737673490e323
SHA1: 0403094ace9c654113749dbd2ccaacd518328439
SHA256:72eca8318f6c503a8e7f6d467b44b866bbadd0fc1b3ddfb41f7cc9209f1aa5ac
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: module-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/module-search-index.js
MD5: a33da0f469acbd03f77bf407bac505f5
SHA1: 1e996ce630c6e1ada3ea86d7b71dabca0180f8e8
SHA256:814a05983e3267d591c7e62b314eb8eb0504eee844c8a70d494f6edbaa0f4f18
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: package-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/package-search-index.js
MD5: e8d43516ba9ee9dcd2899b83aedb3825
SHA1: a7e2eda4e97a4e984bea608b0d27475c7b0e3741
SHA256:3c19f50455b2b5de577fdf3463d89a66966957b54cebf78aa9a9ebe487c06f63
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: script.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/script.js
MD5: 14f041a73b41a06e14ae5119bf58a412
SHA1: 3bde180527bb365eea5f582d8fa6c08270c9b745
SHA256:795ddba417f4a106bbfae3c84cb2c61363e0ce9b29163eaefdc9c334db1f9b2d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: search-page.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/search-page.js
MD5: 91487edb9c0528bb329ed378cd74987f
SHA1: 001ab7444e3ba1252d4daf7f870d51bb287cd4e7
SHA256:3bd59d168258fa81f6ffe473feec32bae0e0a5d571ecc89a1eb4fc04defed1b7
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: search.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/search.js
MD5: e1bbc8e050e9e3033a72b1e719fc3957
SHA1: 01e8b1cc5816ddc972f7e6e4dc28bf14a1dcc21c
SHA256:fb8492aa12ea5e8c74045f0f909c7f9afc12cb44ce165e1b18a4d0cd1c49908c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: tag-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/tag-search-index.js
MD5: d15c346e935323a56c21555879f3d43f
SHA1: a5a163ac6438235738dd8b58195f76425f01b8fd
SHA256:2c68a7d29a049af9aca94ce6d94e50402908947084df988d3e2b783338eaf480
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: type-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/type-search-index.js
MD5: ecd8cad7c6630d199c0aae05c5f2f261
SHA1: 7a9e897d8b081754a3b89168ac340ffaad2f509d
SHA256:8926c9b4a72ca5bd361c58ddc6bdb452441e2ce161125cb1af00665a7c7aa192
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc.jar
MD5: cdbddd77dbb1a5aebe8f02570721e2bc
SHA1: 3305b1d879cdd86cf68f8f46393cc58590f90f83
SHA256:4e7f6bc10d889ce30c66ff769e9981cc5a761ea7c1675c9db6063c2d56e7474b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:29 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | permissions | Highest
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:29 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfc | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfc | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | jar | package name | permissions | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### pdfcserver.zip: pdfcserver.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcserver.zip/pdfcserver.jar
MD5: 68d03e7f6e071a7bdd811450637f21ce
SHA1: 02c807c6a4244658dbe205e9ff8f0d19d090f78d
SHA256:b08ab03447f9ce49c9d91a5e5b611cfb730f0e343f114d8234c64d8132dda519
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfcserver | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | server | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-06-16 19:29 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfcserver | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | persistence | Low
Product | jar | package name | server | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-06-16 19:29 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfcserver | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfcserver | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### pdfcserver.zip: pdfcserver.jar: compareconfigrenderer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcserver.zip/pdfcserver.jar/com/inet/pdfc/server/structure/compareconfigrenderer.js
MD5: ca54201f240ce7fea03db4f46ecd818a
SHA1: 420f31523aa51830c134d193dae0a692eff5b4da
SHA256:0aa678824bea93ed82b1747fc75512915488e2d65b5f11c9c22d4214bb129cec
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfcsetupwizard.zip: pdfcsetupwizard.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcsetupwizard.zip/pdfcsetupwizard.jar
MD5: de45104812adb94304fcffc9e4d00826
SHA1: 79273d72174afde74a4a0d67fa352040ebbfd6df
SHA256:1906f9a0c66af80528476fa9286c0f429cca252872de8e719d46d024354471d6
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfcsetupwizard | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | setupwizard | Low
Vendor | Manifest | built-date | 2026-06-16 19:41 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfcsetupwizard | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | setupwizard | Low
Product | jar | package name | steps | Low
Product | Manifest | built-date | 2026-06-16 19:41 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfcsetupwizard | High
Product | Manifest | specification-title | pdfcsetupwizard | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### pdfcsetupwizard.zip: pdfcsetupwizard.jar: controller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcsetupwizard.zip/pdfcsetupwizard.jar/com/inet/pdfc/setupwizard/steps/license/controller.js
MD5: b21c2ee13289577d98bbb1687726af34
SHA1: 9032230fff5222847734d3cb4723103733f88e92
SHA256:6c1d316ea3da704c21cc9e3fa2426863fa173c3d44a212506fc4bc1e187991e9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### processbridge.pdfc.zip: processbridge.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/processbridge.pdfc.zip/processbridge.pdfc.jar
MD5: b3f3e703f2a89a54f066746c537e07da
SHA1: a4266c68510fae30c44366ae62261de79a18165e
SHA256:15712ecb3e85348b8c8abc7acf8e98d451b7c14e25af7393f0547d90d581d3d9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | processbridge.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | processbridge | Low
Vendor | Manifest | built-date | 2026-06-16 19:44 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | processbridge.pdfc | High
Product | jar | package name | api | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | processbridge | Highest
Product | jar | package name | processbridge | Low
Product | Manifest | built-date | 2026-06-16 19:44 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | processbridge.pdfc | High
Product | Manifest | specification-title | processbridge.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

### slf4j-api-2.0.17.jar

Description:

    The slf4j API

License:

    https://opensource.org/license/mit

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.slf4j/slf4j-api/2.0.17/d9e58ac9c7779ba3bf8142aff6c830617a7fe60f/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Project/Scope: standalone:inetPlugin
slf4j-api-2.0.17.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | slf4j-api | High
Vendor | gradle | artifactid | slf4j-api | Highest
Vendor | gradle | groupid | org.slf4j | Highest
Vendor | jar | package name | slf4j | Highest
Vendor | Manifest | build-jdk-spec | 21 | Low
Vendor | Manifest | bundle-docurl | http://www.slf4j.org | Low
Vendor | Manifest | bundle-symbolicname | slf4j.api | Medium
Vendor | Manifest | multi-release | true | Low
Vendor | pom | artifactid | slf4j-api | Low
Vendor | pom | groupid | org.slf4j | Highest
Vendor | pom | name | SLF4J API Module | High
Vendor | pom | parent-artifactid | slf4j-parent | Low
Vendor | pom | url | http://www.slf4j.org | Highest
Product | file | name | slf4j-api | High
Product | gradle | artifactid | slf4j-api | Highest
Product | jar | package name | slf4j | Highest
Product | Manifest | build-jdk-spec | 21 | Low
Product | Manifest | bundle-docurl | http://www.slf4j.org | Low
Product | Manifest | Bundle-Name | SLF4J API Module | Medium
Product | Manifest | bundle-symbolicname | slf4j.api | Medium
Product | Manifest | Implementation-Title | slf4j-api | High
Product | Manifest | multi-release | true | Low
Product | pom | artifactid | slf4j-api | Highest
Product | pom | groupid | org.slf4j | Highest
Product | pom | name | SLF4J API Module | High
Product | pom | parent-artifactid | slf4j-parent | Medium
Product | pom | url | http://www.slf4j.org | Medium
Version | file | version | 2.0.17 | High
Version | gradle | version | 2.0.17 | Highest
Version | Manifest | Bundle-Version | 2.0.17 | High
Version | Manifest | Implementation-Version | 2.0.17 | High
Version | pom | version | 2.0.17 | Highest

#### Identifiers

- pkg:maven/org.slf4j/slf4j-api@2.0.17 (Confidence:High)

### taskplanner.pdfc.zip: taskplanner.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/taskplanner.pdfc.zip/taskplanner.pdfc.jar
MD5: d2993a19b19653371134f2f7951b4822
SHA1: e6089995eccf3f429499e0911ce42f905cc37755
SHA256:0ee56146009d8892beaa1d326f017328c81b697d2302da5f3930e7afaebaa66f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | taskplanner.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | taskplanner | Low
Vendor | Manifest | built-date | 2026-06-16 19:45 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | taskplanner.pdfc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | taskplanner | Highest
Product | jar | package name | taskplanner | Low
Product | Manifest | built-date | 2026-06-16 19:45 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | taskplanner.pdfc | High
Product | Manifest | specification-title | taskplanner.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.269 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.269:*:*:*:*:*:*:* (Confidence:Low)

## Suppressed Vulnerabilities

### ocr.tesseract.zip: jbig2-imageio.jar

Description:

    	Java Image I/O plugin for reading JBIG2-compressed image data.
    	Formerly known as the levigo JBig2 ImageIO plugin (com.levigo.jbig2:levigo-jbig2-imageio).

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jbig2-imageio.jar
MD5: c51f45dc3d29bbf716774f9ff9e95ad6
SHA1: ad09a9bb94ea791ea81fb6c5bc2b13dd77872598
SHA256: 29cb2951622f10acf61fd0656c4e6fa5562194a9095f7a1d26aa426e2f6b17eb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jbig2-imageio | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | image | Highest
Vendor | jar | package name | jbig2 | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Vendor | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | Implementation-Vendor-Id | org.apache.pdfbox | Medium
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | jbig2-imageio | Low
Vendor | pom | developer id | adam | Medium
Vendor | pom | developer id | blitchfield | Medium
Vendor | pom | developer id | carrier | Medium
Vendor | pom | developer id | danielwilson | Medium
Vendor | pom | developer id | gbailleul | Medium
Vendor | pom | developer id | hennejg | Medium
Vendor | pom | developer id | holdersn | Medium
Vendor | pom | developer id | jahewson | Medium
Vendor | pom | developer id | jeremias | Medium
Vendor | pom | developer id | jukka | Medium
Vendor | pom | developer id | kjackson | Medium
Vendor | pom | developer id | koch | Medium
Vendor | pom | developer id | koehlecn | Medium
Vendor | pom | developer id | lehmi | Medium
Vendor | pom | developer id | leleueri | Medium
Vendor | pom | developer id | mmayer | Medium
Vendor | pom | developer id | msayhoun | Medium
Vendor | pom | developer id | pkoch | Medium
Vendor | pom | developer id | tallison | Medium
Vendor | pom | developer id | tboehme | Medium
Vendor | pom | developer id | tchojecki | Medium
Vendor | pom | developer id | tilman | Medium
Vendor | pom | developer id | vfed | Medium
Vendor | pom | developer name | Adam Nichols | Medium
Vendor | pom | developer name | Andreas Lehmkühler | Medium
Vendor | pom | developer name | Ben Litchfield | Medium
Vendor | pom | developer name | Brian Carrier | Medium
Vendor | pom | developer name | Carolin Köhler | Medium
Vendor | pom | developer name | Daniel Wilson | Medium
Vendor | pom | developer name | Eric Leleu | Medium
Vendor | pom | developer name | Guillaume Bailleul | Medium
Vendor | pom | developer name | Jeremias Maerki | Medium
Vendor | pom | developer name | Johannes Koch | Medium
Vendor | pom | developer name | John Hewson | Medium
Vendor | pom | developer name | Jukka Zitting | Medium
Vendor | pom | developer name | Jörg Henne | Medium
Vendor | pom | developer name | Kevin Jackson | Medium
Vendor | pom | developer name | Maruan Sayhoun | Medium
Vendor | pom | developer name | Matthäus Mayer | Medium
Vendor | pom | developer name | Phillipp Koch | Medium
Vendor | pom | developer name | Sebastian Holder | Medium
Vendor | pom | developer name | Thomas Chojecki | Medium
Vendor | pom | developer name | Tilman Hausherr | Medium
Vendor | pom | developer name | Tim Allison | Medium
Vendor | pom | developer name | Timo Boehme | Medium
Vendor | pom | developer name | Villu Ruusmann | Medium
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | PDFBox JBIG2 ImageIO plugin | High
Vendor | pom | organization name | The Apache Software Foundation | High
Vendor | pom | organization url | http://pdfbox.apache.org | Medium
Vendor | pom | parent-artifactid | apache | Low
Vendor | pom | parent-groupid | org.apache | Medium
Product | file | name | jbig2-imageio | High
Product | jar | package name | apache | Highest
Product | jar | package name | image | Highest
Product | jar | package name | jbig2 | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Product | Manifest | Implementation-Title | PDFBox JBIG2 ImageIO plugin | High
Product | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Product | Manifest | specification-title | PDFBox JBIG2 ImageIO plugin | Medium
Product | pom | artifactid | jbig2-imageio | Highest
Product | pom | developer id | adam | Low
Product | pom | developer id | blitchfield | Low
Product | pom | developer id | carrier | Low
Product | pom | developer id | danielwilson | Low
Product | pom | developer id | gbailleul | Low
Product | pom | developer id | hennejg | Low
Product | pom | developer id | holdersn | Low
Product | pom | developer id | jahewson | Low
Product | pom | developer id | jeremias | Low
Product | pom | developer id | jukka | Low
Product | pom | developer id | kjackson | Low
Product | pom | developer id | koch | Low
Product | pom | developer id | koehlecn | Low
Product | pom | developer id | lehmi | Low
Product | pom | developer id | leleueri | Low
Product | pom | developer id | mmayer | Low
Product | pom | developer id | msayhoun | Low
Product | pom | developer id | pkoch | Low
Product | pom | developer id | tallison | Low
Product | pom | developer id | tboehme | Low
Product | pom | developer id | tchojecki | Low
Product | pom | developer id | tilman | Low
Product | pom | developer id | vfed | Low
Product | pom | developer name | Adam Nichols | Low
Product | pom | developer name | Andreas Lehmkühler | Low
Product | pom | developer name | Ben Litchfield | Low
Product | pom | developer name | Brian Carrier | Low
Product | pom | developer name | Carolin Köhler | Low
Product | pom | developer name | Daniel Wilson | Low
Product | pom | developer name | Eric Leleu | Low
Product | pom | developer name | Guillaume Bailleul | Low
Product | pom | developer name | Jeremias Maerki | Low
Product | pom | developer name | Johannes Koch | Low
Product | pom | developer name | John Hewson | Low
Product | pom | developer name | Jukka Zitting | Low
Product | pom | developer name | Jörg Henne | Low
Product | pom | developer name | Kevin Jackson | Low
Product | pom | developer name | Maruan Sayhoun | Low
Product | pom | developer name | Matthäus Mayer | Low
Product | pom | developer name | Phillipp Koch | Low
Product | pom | developer name | Sebastian Holder | Low
Product | pom | developer name | Thomas Chojecki | Low
Product | pom | developer name | Tilman Hausherr | Low
Product | pom | developer name | Tim Allison | Low
Product | pom | developer name | Timo Boehme | Low
Product | pom | developer name | Villu Ruusmann | Low
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | PDFBox JBIG2 ImageIO plugin | High
Product | pom | organization name | The Apache Software Foundation | Low
Product | pom | organization url | http://pdfbox.apache.org | Low
Product | pom | parent-artifactid | apache | Medium
Product | pom | parent-groupid | org.apache | Medium
Version | Manifest | Implementation-Version | 3.0.4 | High
Version | pom | parent-version | 3.0.4 | Low
Version | pom | version | 3.0.4 | Highest

#### Suppressed Identifiers

- cpe:2.3:a:apache:pdfbox:3.0.4:*:*:*:*:*:*:* suppressed (Confidence:Highest)
  - Notes: Excluded due to not having a newer version available. This will be checked soon to mitigate. PDFBox is a tesseract dependency and not actively used in the product file name: ocr.tesseract.zip: jbig2-imageio.jar

#### Suppressed Vulnerabilities

CVE-2026-23907 suppressed

    This issue affects the
    ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.

    The ExtractEmbeddedFiles example contains a path traversal vulnerability (CWE-22) because
    the filename that is obtained from
    PDComplexFileSpecification.getFilename() is appended to the extraction path.

    Users who have copied this example into their production code should
    review it to ensure that the extraction path is acceptable. The example
    has been changed accordingly, now the initial path and the extraction
    paths are converted into canonical paths and it is verified that
    extraction path contains the initial path. The documentation has also
    been adjusted.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:

- MEDIUM (5.3)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RC:R/MAV:A

References:

- af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
- security@apache.org - MAILING_LIST,VENDOR_ADVISORY
- security@apache.org - NOT_APPLICABLE

Vulnerable Software & Versions: (show all)

- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.0.7
- ...
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 2.0.24; versions up to (including) 2.0.35
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.0.7

CVE-2026-33929 suppressed

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.

    This issue affects the
    ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7.

    Users are recommended to update to version 2.0.37 or 3.0.8 once
    available. Until then, they should apply the fix provided in GitHub PR
    427.

    The ExtractEmbeddedFiles example contained a path traversal vulnerability (CWE-22) mentioned in CVE-2026-23907. However the change in the releases 2.0.36 and 3.0.7 is flawed because it doesn't consider the file path separator. Because of that, a user having writing rights on /home/ABC could be victim to a malicious PDF resulting in a write attempt to any path starting with /home/ABC, e.g. "/home/ABCDEF".

    Users who have copied this example into their production code should apply the mentioned change. The example
    has been changed accordingly and is available in the project repository.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:

- MEDIUM (4.3)
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RC:R/MAV:A

References:

- security@apache.org - MAILING_LIST
- security@apache.org - MAILING_LIST,VENDOR_ADVISORY
- security@apache.org - PATCH

Vulnerable Software & Versions: (show all)

- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (excluding) 3.0.8
- ...
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 2.0.24; versions up to (excluding) 2.0.37
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (excluding) 3.0.8

### ocr.tesseract.zip: pdfbox-debugger.jar

Description:

        The Apache PDFBox library is an open source Java tool for working with PDF documents.
        This artefact contains the PDFDebugger.

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox-debugger.jar
MD5: 85573afca8351375b49718b379abc76c
SHA1: 2c48091b1dd9be69d09e1aea657fc1e4065b08e7
SHA256: 79320b36483f001661b01e9409d9b62066e07a3a4e2f9e6568d777b04896d130
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfbox-debugger | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | debugger | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | jar | package name | pdfdebugger | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox.debugger | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | pdfbox-debugger | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache PDFBox Debugger | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Product | file | name | pdfbox-debugger | High
Product | jar | package name | apache | Highest
Product | jar | package name | debugger | Highest
Product | jar | package name | pdfbox | Highest
Product | jar | package name | pdfdebugger | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox.debugger | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | Implementation-Title | Apache PDFBox Debugger | High
Product | Manifest | specification-title | Apache PDFBox Debugger | Medium
Product | pom | artifactid | pdfbox-debugger | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache PDFBox Debugger | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Version | Manifest | Implementation-Version | 3.0.7 | High
Version | pom | version | 3.0.7 | Highest

#### Suppressed Identifiers

- cpe:2.3:a:apache:pdfbox:3.0.7:*:*:*:*:*:*:* suppressed (Confidence:Highest)
  - Notes: Excluded due to not having a newer version available. This will be checked soon to mitigate. PDFBox is a tesseract dependency and not actively used in the product file name: ocr.tesseract.zip: pdfbox-debugger.jar

#### Suppressed Vulnerabilities

CVE-2026-23907 suppressed

    This issue affects the
    ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.

    The ExtractEmbeddedFiles example contains a path traversal vulnerability (CWE-22) because
    the filename that is obtained from
    PDComplexFileSpecification.getFilename() is appended to the extraction path.

    Users who have copied this example into their production code should
    review it to ensure that the extraction path is acceptable. The example
    has been changed accordingly, now the initial path and the extraction
    paths are converted into canonical paths and it is verified that
    extraction path contains the initial path. The documentation has also
    been adjusted.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:

- MEDIUM (5.3)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RC:R/MAV:A

References:

- af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
- security@apache.org - MAILING_LIST,VENDOR_ADVISORY
- security@apache.org - NOT_APPLICABLE

Vulnerable Software & Versions: (show all)

- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.0.7
- ...
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 2.0.24; versions up to (including) 2.0.35
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.0.7

CVE-2026-33929 suppressed

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.

    This issue affects the
    ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7.

    Users are recommended to update to version 2.0.37 or 3.0.8 once
    available. Until then, they should apply the fix provided in GitHub PR
    427.

    The ExtractEmbeddedFiles example contained a path traversal vulnerability (CWE-22) mentioned in CVE-2026-23907. However the change in the releases 2.0.36 and 3.0.7 is flawed because it doesn't consider the file path separator. Because of that, a user having writing rights on /home/ABC could be victim to a malicious PDF resulting in a write attempt to any path starting with /home/ABC, e.g. "/home/ABCDEF".

    Users who have copied this example into their production code should apply the mentioned change. The example
    has been changed accordingly and is available in the project repository.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:

- MEDIUM (4.3)
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RC:R/MAV:A

References:

- security@apache.org - MAILING_LIST
- security@apache.org - MAILING_LIST,VENDOR_ADVISORY
- security@apache.org - PATCH

Vulnerable Software & Versions: (show all)

- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (excluding) 3.0.8
- ...
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 2.0.24; versions up to (excluding) 2.0.37
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (excluding) 3.0.8

### ocr.tesseract.zip: pdfbox.jar

Description:

            The Apache PDFBox library is an open source Java tool for working with PDF documents.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox.jar
MD5: adeb0637e9451d49e610ee3bc16781cd
SHA1: ecfc1bbfa656d3e330b8cc9e6996a18cde1c9bd0
SHA256: 7cefa717622330951b4343abf1e5d36bccb11f4ba245d78aaa73251d08fec623
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfbox | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Vendor | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | pdfbox | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache PDFBox | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Product | file | name | pdfbox | High
Product | jar | package name | apache | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Product | Manifest | Bundle-Name | Apache PDFBox | Medium
Product | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Product | Manifest | Implementation-Title | Apache PDFBox | High
Product | Manifest | specification-title | Apache PDFBox | Medium
Product | pom | artifactid | pdfbox | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache PDFBox | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Version | Manifest | Bundle-Version | 3.0.7 | High
Version | Manifest | Implementation-Version | 3.0.7 | High
Version | pom | version | 3.0.7 | Highest

#### Suppressed Identifiers

- cpe:2.3:a:apache:pdfbox:3.0.7:*:*:*:*:*:*:* suppressed (Confidence:Highest)
  - Notes: Excluded due to not having a newer version available. This will be checked soon to mitigate. PDFBox is a tesseract dependency and not actively used in the product file name: ocr.tesseract.zip: pdfbox.jar

#### Suppressed Vulnerabilities

CVE-2026-23907 suppressed

    This issue affects the
    ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.

    The ExtractEmbeddedFiles example contains a path traversal vulnerability (CWE-22) because
    the filename that is obtained from
    PDComplexFileSpecification.getFilename() is appended to the extraction path.

    Users who have copied this example into their production code should
    review it to ensure that the extraction path is acceptable. The example
    has been changed accordingly, now the initial path and the extraction
    paths are converted into canonical paths and it is verified that
    extraction path contains the initial path. The documentation has also
    been adjusted.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:

- MEDIUM (5.3)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RC:R/MAV:A

References:

- af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
- security@apache.org - MAILING_LIST,VENDOR_ADVISORY
- security@apache.org - NOT_APPLICABLE

Vulnerable Software & Versions: (show all)

- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.0.7
- ...
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 2.0.24; versions up to (including) 2.0.35
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.0.7

CVE-2026-33929 suppressed

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.

    This issue affects the
    ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7.

    Users are recommended to update to version 2.0.37 or 3.0.8 once
    available. Until then, they should apply the fix provided in GitHub PR
    427.

    The ExtractEmbeddedFiles example contained a path traversal vulnerability (CWE-22) mentioned in CVE-2026-23907. However the change in the releases 2.0.36 and 3.0.7 is flawed because it doesn't consider the file path separator. Because of that, a user having writing rights on /home/ABC could be victim to a malicious PDF resulting in a write attempt to any path starting with /home/ABC, e.g. "/home/ABCDEF".

    Users who have copied this example into their production code should apply the mentioned change. The example
    has been changed accordingly and is available in the project repository.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:

- MEDIUM (4.3)
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RC:R/MAV:A

References:

- security@apache.org - MAILING_LIST
- security@apache.org - MAILING_LIST,VENDOR_ADVISORY
- security@apache.org - PATCH

Vulnerable Software & Versions: (show all)

- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (excluding) 3.0.8
- ...
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 2.0.24; versions up to (excluding) 2.0.37
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (excluding) 3.0.8

This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.