Press CTR-C to copy XML [help]

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

### How to read the report | Suppressing false positives | Getting Help: github issues

## Project: project ':standalone'

#### pdfc:standalone:26.4

Scan Information (show all):

- dependency-check version: 12.2.1
- Report Generated On: Fri, 7 Aug 2026 20:13:14 +0200
- Dependencies Scanned: 130 (130 unique)
- Vulnerable Dependencies: 0
- Vulnerabilities Found: 0
- Vulnerabilities Suppressed: 6 (show)
- ...
- NVD API Last Checked: 2026-08-07T18:10:19Z
- NVD API Last Modified: 2026-08-06T22:18:33Z
- NVD Cache Last Checked: 2026-08-07T18:10:19Z
- NVD Cache Last Modified: 2026-08-06T22:18:33Z

## Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency | Vulnerability IDs | Package | Highest Severity | CVE Count | Confidence | Evidence Count
--- | --- | --- | --- | --- | --- | ---
Merlia-0.jar |  | pkg:maven/lib/Merlia@0 |  | 0 |  | 12
analysis.language.zip: analysis.language.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 33
analysis.language.zip: guava.jar | cpe:2.3:a:google:guava:33.5.0:*:*:*:*:*:*:* | pkg:maven/com.google.guava/guava@33.5.0-jre |  | 0 | Highest | 24
analysis.language.zip: jsonic.jar |  |  |  | 0 |  | 7
analysis.language.zip: language-detector.jar |  | pkg:maven/com.optimaize.languagedetector/language-detector@0.6 |  | 0 |  | 26
annotations-3.0.1.jar (shaded: com.google.code.findbugs:jsr305:3.0.1) |  | pkg:maven/com.google.code.findbugs/jsr305@3.0.1 |  | 0 |  | 9
annotations-3.0.1.jar |  | pkg:maven/com.google.code.findbugs/annotations@3.0.1 |  | 0 |  | 42
command.jsonexport.zip: command.jsonexport.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 32
comparison.api.zip: comparison.api.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 30
comparison.rpc.zip: comparison.rpc.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 32
comparison.webgui.zip: comparison.webgui.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 22
comparison.webgui.zip: comparison.webgui.jar: app.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: compare.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: contextmenuextension.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: contingent.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: controller.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: descriptionarea.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: dropzone.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: export.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: factory.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: model.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: multipasswordpanel.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: mycomparisons.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: passwordpanel.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: pdfcconfig.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: profil.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: profileentry.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: publishdialog.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: publishprofiledialog.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: report.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: scroller.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: searchcomponent.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: userlist.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: visibilitysettings.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: zoomer.js |  |  |  | 0 |  | 0
filter.area.zip: filter.area.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.baselinetable.zip: filter.baselinetable.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.cmappatch.zip: filter.cmappatch.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.headerfooter.zip: filter.headerfooter.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.hiderotation.zip: filter.hiderotation.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.invisibleelements.zip: filter.invisibleelements.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.multicolumn.zip: filter.multicolumn.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.ocr.zip: filter.ocr.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.pagerange.zip: filter.pagerange.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 32
filter.regex.zip: filter.regex.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.regex.zip: filter.regex.jar: filterrenderer.js |  |  |  | 0 |  | 0
filter.texttransform.zip: filter.texttransform.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.urllookup.zip: filter.urllookup.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 33
hamcrest-3.0.jar |  | pkg:maven/org.hamcrest/hamcrest@3.0 |  | 0 |  | 39
inetcore-26.4-tools.jar |  | pkg:maven/shared/inetcore@26.4 |  | 0 |  | 9
inetcore-26.4.jar (shaded: com.inet.shared:inetcore:null) |  |  |  | 0 |  | 27
inetcore-26.4.jar |  | pkg:maven/shared/inetcore@26.4 |  | 0 |  | 35
java-25-jre-x64-linux.tar.gz: java-25-jre-x64-linux.tar: jrt-fs.jar | cpe:2.3:a:eclipse:platform:25.0.4:*:*:*:*:*:*:* |  |  | 0 | Medium | 12
jcip-annotations-1.0.jar |  | pkg:maven/net.jcip/jcip-annotations@1.0 |  | 0 |  | 21
jlessc-1.15.jar |  | pkg:maven/de.inetsoftware/jlessc@1.15 |  | 0 |  | 40
jsr305-3.0.2.jar |  | pkg:maven/com.google.code.findbugs/jsr305@3.0.2 |  | 0 |  | 20
junit-4.13.2.jar | cpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:* | pkg:maven/junit/junit@4.13.2 |  | 0 | Low | 55
junit-jupiter-5.14.0.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0 |  | 0 |  | 74
junit-jupiter-api-5.14.0.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-api@5.14.0 |  | 0 |  | 84
junit-jupiter-engine-5.14.0.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0 |  | 0 |  | 86
junit-jupiter-params-5.14.0.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-params@5.14.0 |  | 0 |  | 85
junit-platform-commons-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-commons@1.14.0 |  | 0 | Low | 87
junit-platform-engine-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-engine@1.14.0 |  | 0 | Low | 85
junit-platform-launcher-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-launcher@1.14.0 |  | 0 | Low | 86
junit-platform-suite-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-suite@1.14.0 |  | 0 | Low | 74
junit-platform-suite-api-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-suite-api@1.14.0 |  | 0 | Low | 87
junit-platform-suite-commons-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-suite-commons@1.14.0 |  | 0 | Low | 87
junit-platform-suite-engine-1.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.platform/junit-platform-suite-engine@1.14.0 |  | 0 | Low | 87
junit-vintage-engine-5.14.0.jar | cpe:2.3:a:fan_platform_project:fan_platform:5.14.0:*:*:*:*:*:*:* | pkg:maven/org.junit.vintage/junit-vintage-engine@5.14.0 |  | 0 | Low | 86
maintenance.pdfc.zip: maintenance.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 22
maintenance.pdfc.zip: maintenance.pdfc.jar: app.js |  |  |  | 0 |  | 0
maintenance.pdfc.zip: maintenance.pdfc.jar: comparisons.js |  |  |  | 0 |  | 0
ocr.tesseract.zip: commons-logging.jar |  | pkg:maven/commons-logging/commons-logging@1.3.4 |  | 0 |  | 127
ocr.tesseract.zip: fontbox.jar |  | pkg:maven/org.apache.pdfbox/fontbox@3.0.7 |  | 0 |  | 32
ocr.tesseract.zip: jai-imageio-core.jar |  | pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0 |  | 0 |  | 40
ocr.tesseract.zip: jbig2-imageio.jar |  | pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4 |  | 0 |  | 128
ocr.tesseract.zip: jboss-vfs.jar |  | pkg:maven/org.jboss/jboss-vfs@3.3.2.Final |  | 0 |  | 33
ocr.tesseract.zip: jna.jar | cpe:2.3:a:oracle:java_se:5.18.1:*:*:*:*:*:*:* |  |  | 0 | Low | 36
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: lept4j.jar |  | pkg:maven/net.sourceforge.lept4j/lept4j@1.19.1 |  | 0 |  | 25
ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: ocr.tesseract.jar | cpe:2.3:a:tesseract_ocr_project:tesseract_ocr:26.4.321:*:*:*:*:*:*:* cpe:2.3:a:tesseract_project:tesseract:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 33
ocr.tesseract.zip: pdfbox-debugger.jar |  | pkg:maven/org.apache.pdfbox/pdfbox-debugger@3.0.7 |  | 0 |  | 28
ocr.tesseract.zip: pdfbox.jar |  | pkg:maven/org.apache.pdfbox/pdfbox@3.0.7 |  | 0 |  | 30
ocr.tesseract.zip: tess4j.jar | cpe:2.3:a:tesseract_project:tesseract:5.12.0:*:*:*:*:*:*:* | pkg:maven/net.sourceforge.tess4j/tess4j@5.12.0 |  | 0 | Low | 42
ocr.tesseract.zip: tess4j.jar: libtesseract541.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: tess4j.jar: libtesseract541.dll |  |  |  | 0 |  | 4
opentest4j-1.3.0.jar |  | pkg:maven/org.opentest4j/opentest4j@1.3.0 |  | 0 |  | 64
parser.image.zip: parser.image.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 31
parser.pdf.config.zip: parser.pdf.config.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 31
parser.text.zip: parser.text.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfc.standalone.zip: pdfc.standalone.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfc.standalone.zip: pdfc.standalone.jar: bridge.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: bridgeConfig.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: bridgePDFC.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: extraMenu.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: removeHeader.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: removePDFCElements.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: theme.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: translation.js |  |  |  | 0 |  | 0
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:collate:78.2) |  | pkg:maven/com.ibm.icu/collate@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:core:78.2) |  | pkg:maven/com.ibm.icu/core@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:currdata:78.2) |  | pkg:maven/com.ibm.icu/currdata@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:langdata:78.2) |  | pkg:maven/com.ibm.icu/langdata@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:regiondata:78.2) |  | pkg:maven/com.ibm.icu/regiondata@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:tools_taglets:78.2) |  | pkg:maven/com.ibm.icu/tools_taglets@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:translit:78.2) |  | pkg:maven/com.ibm.icu/translit@78.2 |  | 0 |  | 7
pdfc.zip: icu4j.jar | cpe:2.3:a:icu-project:international_components_for_unicode:78.2:*:*:*:*:*:*:* cpe:2.3:a:unicode:international_components_for_unicode:78.2:*:*:*:*:*:*:* | pkg:maven/com.ibm.icu/icu4j@78.2 |  | 0 | Low | 49
pdfc.zip: pdfc-javadoc.jar |  |  |  | 0 |  | 2
pdfc.zip: pdfc-javadoc.jar: jquery-3.7.1.min.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: member-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: module-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: package-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: script.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: search-page.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: search.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: tag-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: type-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 30
pdfcserver.zip: pdfcserver.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfcserver.zip: pdfcserver.jar: compareconfigrenderer.js |  |  |  | 0 |  | 0
pdfcsetupwizard.zip: pdfcsetupwizard.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 21
pdfcsetupwizard.zip: pdfcsetupwizard.jar: controller.js |  |  |  | 0 |  | 0
processbridge.pdfc.zip: processbridge.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 22
slf4j-api-2.0.17.jar |  | pkg:maven/org.slf4j/slf4j-api@2.0.17 |  | 0 |  | 32
taskplanner.pdfc.zip: taskplanner.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* |  |  | 0 | Low | 21

## Dependencies (vulnerable)

### Merlia-0.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/lib/Merlia/0/ec818ab987afcd2d905984971f76a053ca107217/Merlia-0.jar
MD5: b151d3363029f809f49618ce97b8fc11
SHA1: ec818ab987afcd2d905984971f76a053ca107217
SHA256:cfe766dc3f0467f181c389a0a21323a408a674a54360fc6e3d46fdbb542ca453
Referenced In Project/Scope: standalone:inetPlugin
Merlia-0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | Merlia-0 | High
Vendor | gradle | artifactid | Merlia | Highest
Vendor | gradle | groupid | lib | Highest
Vendor | jar | package name | inet | Low
Vendor | jar | package name | tds | Low
Product | file | name | Merlia-0 | High
Product | gradle | artifactid | Merlia | Highest
Product | jar | package name | tds | Low
Version | file | name | Merlia-0 | Medium
Version | file | version | 0 | Medium
Version | gradle | version | 0 | Highest
Version | Manifest | driver-version | 8.14 | Medium

#### Identifiers

- pkg:maven/lib/Merlia@0 (Confidence:Highest)

### analysis.language.zip: analysis.language.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/analysis.language.jar
MD5: 31cadd65018b95410cdb18d02f341006
SHA1: 953dfcfd320351d96c1f4388635c8e013f700769
SHA256:5683e7de6ba9f611556ba770d8f025c667b78d9a2159fcf5c71ee8da5d62b4c3
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | analysis.language | High
Vendor | jar | package name | analysis | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:45 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | analysis.language | High
Product | jar | package name | analysis | Highest
Product | jar | package name | analysis | Low
Product | jar | package name | language | Highest
Product | jar | package name | language | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:45 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | analysis.language | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | analysis.language | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### analysis.language.zip: guava.jar

Description:

        Guava is a suite of core and expanded libraries that include
        utility classes, Google's collections, I/O classes, and
        much more.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/guava.jar
MD5: d9fbf39a41a5bab891348f07668e18c5
SHA1: 8699de25f2f979108d6c1b804a7ba38cda1116bc
SHA256:1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | guava | High
Vendor | jar | package name | google | Highest
Vendor | Manifest | build-jdk-spec | 11 | Low
Vendor | Manifest | bundle-docurl | https://github.com/google/guava/ | Low
Vendor | Manifest | bundle-symbolicname | com.google.guava | Medium
Vendor | Manifest | multi-release | true | Low
Vendor | pom | artifactid | guava | Low
Vendor | pom | groupid | com.google.guava | Highest
Vendor | pom | name | Guava: Google Core Libraries for Java | High
Vendor | pom | parent-artifactid | guava-parent | Low
Vendor | pom | url | google/guava | Highest
Product | file | name | guava | High
Product | jar | package name | google | Highest
Product | Manifest | build-jdk-spec | 11 | Low
Product | Manifest | bundle-docurl | https://github.com/google/guava/ | Low
Product | Manifest | Bundle-Name | Guava: Google Core Libraries for Java | Medium
Product | Manifest | bundle-symbolicname | com.google.guava | Medium
Product | Manifest | multi-release | true | Low
Product | pom | artifactid | guava | Highest
Product | pom | groupid | com.google.guava | Highest
Product | pom | name | Guava: Google Core Libraries for Java | High
Product | pom | parent-artifactid | guava-parent | Medium
Product | pom | url | google/guava | High
Version | pom | version | 33.5.0-jre | Highest

#### Identifiers

- pkg:maven/com.google.guava/guava@33.5.0-jre (Confidence:High)
- cpe:2.3:a:google:guava:33.5.0:*:*:*:*:*:*:* (Confidence:Highest)

### analysis.language.zip: jsonic.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/jsonic.jar
MD5: 504496d0069da0121c059c219147e90c
SHA1: 98e8a1f25aa40ed92ff2ecca4d1301d48b552452
SHA256:150e3ac24b103cb0cd50595018dbe3c8ba4b3dee81a76eb4b987607f96e9602b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jsonic | High
Vendor | jar | package name | arnx | Low
Vendor | jar | package name | jsonic | Low
Vendor | jar | package name | net | Low
Product | file | name | jsonic | High
Product | jar | package name | arnx | Low
Product | jar | package name | jsonic | Low

#### Identifiers

- None

### analysis.language.zip: language-detector.jar

Description:

            Language Detection Library for Java.

License:

    Apache 2: http://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/language-detector.jar
MD5: e5475d5cabd54e5ddf6428d63864888f
SHA1: 52fee1eaa101f8d3e30b7095e1b6e0054d514dde
SHA256:f53ecc3d71da9ebc82edd10fb35638d32e8b9d849273dd717a021eca02f2278d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | language-detector | High
Vendor | jar | package name | langdetect | Low
Vendor | jar | package name | languagedetector | Highest
Vendor | jar | package name | optimaize | Highest
Vendor | jar | package name | optimaize | Low
Vendor | pom | artifactid | language-detector | Low
Vendor | pom | developer name | Fabian Kessler | Medium
Vendor | pom | developer name | François ROLAND | Medium
Vendor | pom | developer name | Nakatani Shuyo | Medium
Vendor | pom | developer name | Robert Theis | Medium
Vendor | pom | groupid | com.optimaize.languagedetector | Highest
Vendor | pom | name | language-detector | High
Vendor | pom | url | optimaize/language-detector | Highest
Product | file | name | language-detector | High
Product | jar | package name | langdetect | Low
Product | jar | package name | languagedetector | Highest
Product | jar | package name | optimaize | Highest
Product | pom | artifactid | language-detector | Highest
Product | pom | developer name | Fabian Kessler | Low
Product | pom | developer name | François ROLAND | Low
Product | pom | developer name | Nakatani Shuyo | Low
Product | pom | developer name | Robert Theis | Low
Product | pom | groupid | com.optimaize.languagedetector | Highest
Product | pom | name | language-detector | High
Product | pom | url | optimaize/language-detector | High
Version | pom | version | 0.6 | Highest

#### Identifiers

- pkg:maven/com.optimaize.languagedetector/language-detector@0.6 (Confidence:High)

### annotations-3.0.1.jar (shaded: com.google.code.findbugs:jsr305:3.0.1)

Description:

    JSR305 Annotations for Findbugs

License:

    The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/annotations/3.0.1/fc019a2216218990d64dfe756e7aa20f0069dea2/annotations-3.0.1.jar/META-INF/maven/com.google.code.findbugs/jsr305/pom.xml
MD5: d08567d16867a0b79bc8149683918452
SHA1: d04690f71f3393e23f30998d9534365274fa5f9f
SHA256:4170a761dc5bfd3981a8e6f7aab9e2acdce82d34fd5aa9bb11e3c090d25314ce
Referenced In Project/Scope: standalone:inetPlugin

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | jsr305 | Low
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-jsr305 | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | pom | artifactid | jsr305 | Highest
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-jsr305 | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | pom | version | 3.0.1 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/jsr305@3.0.1 (Confidence:High)

### annotations-3.0.1.jar

Description:

    Annotation the FindBugs tool supports

License:

    GNU Lesser Public License: http://www.gnu.org/licenses/lgpl.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/annotations/3.0.1/fc019a2216218990d64dfe756e7aa20f0069dea2/annotations-3.0.1.jar
MD5: fc4f102f22ba4f1df3f1d7cc6b202152
SHA1: fc019a2216218990d64dfe756e7aa20f0069dea2
SHA256:6b47ff0a6de0ce17cbedc3abb0828ca5bce3009d53ea47b3723ff023c4742f79
Referenced In Project/Scope: standalone:inetPlugin
annotations-3.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.15

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | annotations | High
Vendor | gradle | artifactid | annotations | Highest
Vendor | gradle | groupid | com.google.code.findbugs | Highest
Vendor | jar | package name | annotation | Highest
Vendor | jar | package name | annotations | Highest
Vendor | jar | package name | findbugs | Highest
Vendor | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low
Vendor | Manifest | bundle-symbolicname | findbugsAnnotations | Medium
Vendor | pom | artifactid | annotations | Low
Vendor | pom | developer email | Loskutov@gmx.de | Low
Vendor | pom | developer email | pugh at cs.umd.edu | Low
Vendor | pom | developer id | al | Medium
Vendor | pom | developer id | bp | Medium
Vendor | pom | developer name | Andrey Loskutov | Medium
Vendor | pom | developer name | Bill Pugh | Medium
Vendor | pom | developer name | Keith Lea | Medium
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-Annotations | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | file | name | annotations | High
Product | gradle | artifactid | annotations | Highest
Product | jar | package name | annotation | Highest
Product | jar | package name | annotations | Highest
Product | jar | package name | findbugs | Highest
Product | Manifest | Bundle-Name | FindBugs-Annotations | Medium
Product | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low
Product | Manifest | bundle-symbolicname | findbugsAnnotations | Medium
Product | pom | artifactid | annotations | Highest
Product | pom | developer email | Loskutov@gmx.de | Low
Product | pom | developer email | pugh at cs.umd.edu | Low
Product | pom | developer id | al | Low
Product | pom | developer id | bp | Low
Product | pom | developer name | Andrey Loskutov | Low
Product | pom | developer name | Bill Pugh | Low
Product | pom | developer name | Keith Lea | Low
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-Annotations | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | file | version | 3.0.1 | High
Version | gradle | version | 3.0.1 | Highest
Version | Manifest | Bundle-Version | 3.0.1 | High
Version | pom | version | 3.0.1 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/annotations@3.0.1 (Confidence:High)

### command.jsonexport.zip: command.jsonexport.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/command.jsonexport.zip/command.jsonexport.jar
MD5: 7aa59aac2ae1aae09cf1fe517deca533
SHA1: 5313d7e4ccc88816a02e7d348c37cd18e066c2d8
SHA256:e248d5edb85720fab0d640ed5f036a93c2405a3578e2787281ae5bab2bdbb603
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | command.jsonexport | High
Vendor | jar | package name | command | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:37 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | command.jsonexport | High
Product | jar | package name | command | Highest
Product | jar | package name | command | Low
Product | jar | package name | json | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:37 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | command.jsonexport | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | command.jsonexport | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### comparison.api.zip: comparison.api.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.api.zip/comparison.api.jar
MD5: d4623156694cc3b49b687d5bed1c0778
SHA1: 824c7ca58e037d6bbd4a957c3fbbe67ecd6fe412
SHA256:f3dd107b2a732726f90fa348904dbf8fa742d7662c7c0140b7a9e90425f2cfab
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.api | High
Vendor | jar | package name | comparisonapi | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:38 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.api | High
Product | jar | package name | comparisonapi | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:38 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.api | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | comparison.api | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### comparison.rpc.zip: comparison.rpc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.rpc.zip/comparison.rpc.jar
MD5: 2a36738d2371ccbd89e85856d0e33aab
SHA1: 9394b9ade155ab22cd431814177b516569722cee
SHA256:291de8567dce2dd038bf66de9ae94fa7b06bfd04d75386c75067557f8bd96012
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.rpc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | rpc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:37 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.rpc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | rpc | Highest
Product | jar | package name | rpc | Low
Product | jar | package name | websocket | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:37 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.rpc | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | comparison.rpc | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### comparison.webgui.zip: comparison.webgui.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar
MD5: 03a18b36e46335cfd0f697f3fffd3b8b
SHA1: bce296ceff2235570451e966e09824b1bf7c5d91
SHA256:0d796f0045c19abf9ec0d08a2015f9686d066d7ec097c73f6829a9d26efb4f33
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.webgui | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | webgui | Low
Vendor | Manifest | built-date | 2026-08-07 19:38 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.webgui | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | server | Low
Product | jar | package name | webgui | Highest
Product | jar | package name | webgui | Low
Product | Manifest | built-date | 2026-08-07 19:38 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.webgui | High
Product | Manifest | specification-title | comparison.webgui | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### comparison.webgui.zip: comparison.webgui.jar: app.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/app.js
MD5: 2e4ad8b6a0f9a76284c281df29d4ae4d
SHA1: c715d01b3797ea1cc4e3615d97412a8d2cf8a067
SHA256:c1ace93a6f794644bab65004932e9335d040e375a3d93c6ca4f7029bc5e06e59
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: compare.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/compare.js
MD5: e3dffad8fdc79ad24cb1d3d4e849ae40
SHA1: fd4bda43516116ef3be6e283e731eba934510679
SHA256:bad23e9e5e75459abc74c728746c9ff536a2e9b079f243f1385925c7aadd0aa0
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: contextmenuextension.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/drive/contextmenuextension.js
MD5: b5f087715014cac13f4ccbc40c947f1c
SHA1: bf853c9b9c629eb66ce96fd12a24e973aa2cb1c6
SHA256:3096c6232dfe34a586f3d3bf0175b12bbd3b20a25d2f499da0aaa390a122d97b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: contingent.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/contingent.js
MD5: 10782a90b423f2db0450adaa8944f25a
SHA1: 8d7242260155b1bc6cbca8cd0fa034c3be0c021b
SHA256:c54c35e7c00b764c4e9b7511916a30510158e88b8c8e5ee4d61c7302a7d87295
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: controller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/controller.js
MD5: 6c2f36433c707b2d4b817425bdcc95a0
SHA1: 663c582b388026549b3dd1eb1f24ccf6c00a580e
SHA256:b8d538486e005d66d19db1cb1f23874106e5b41670a0528c66122fde3e2a2979
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: descriptionarea.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/descriptionarea.js
MD5: 76d646663feded014e091b897a1f96c8
SHA1: 29d78c632bcd13874400fd21bd156c0daf29bfcc
SHA256:1cc3fbd001cc25e18a6e3ae1f1377b0d41e37416fbcbfe2c42c4f4e03a7be691
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: dropzone.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/dropzone.js
MD5: 7f465ad15714efa6b96053a3f78982e9
SHA1: 870d6ccc2d1beb1d787da7f5ab64967b995e45b7
SHA256:6aa6d9ae16dcd5c5cb9809136f81a2121d16be3e6c9232e188d8ecf8f672bec6
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: export.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/export.js
MD5: e1a2cc48050ef9b378b8a53a081d082a
SHA1: 5cd7fe1140bd00b2f6db400724b659ae7abbadd9
SHA256:17fe08df83d82b913f8d1416e4ce5c2530ee55f4a35348f6c9dad90fde158ec7
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: factory.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/factory.js
MD5: ffb555a44f63e3ff7bbaa665f92d592d
SHA1: b23289286bc340c92aca1e2b6b0ac2ab09cc7030
SHA256:8801ad7a664838e40905b9d5d0fd6a75ee8839d62fd2bd19edafaaf4a5bf2069
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: model.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/model.js
MD5: dd3c915523172ddd31fb80dcdfbedca1
SHA1: 51336c83a03669c98d3b80ef27e00e899b9b033f
SHA256:7ab18426a5d5da1ae923171ba3120c4cf53d5250280d20dc6b611f02ffdecb92
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: multipasswordpanel.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/multipasswordpanel.js
MD5: 34d4d5fd0cf1fa77d569e928af1a00aa
SHA1: 230e35fe5f8f5a48ccd930cee3c79f16df858b97
SHA256:28be5c583ef3c82dca061d79f33a43f3672421b6a1b42e460a444f296d49a79a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: mycomparisons.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/mycomparisons.js
MD5: 65ecc6d948cb7189567f2b69ddcb036b
SHA1: f5abb2d2ab6527b7449c02383e497078b7af77c6
SHA256:88cf1150d8fa5c54d71fc181b4a0c6e07ae57dd1d03a8c009b3e5c17b5abac86
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: passwordpanel.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/passwordpanel.js
MD5: 4e69b1954226ce194fd836df7ad77e35
SHA1: 6e79c7f2354f08c8effe8adfd66c6dcaff4bdb8c
SHA256:6078c754f425f4087a05cf8e6aca77ab5b6c9df996e5143d730f32bd8f46ca21
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: pdfcconfig.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/pdfcconfig.js
MD5: 676338e9e274fd0d9ab59db49e3ea86f
SHA1: 5c8a910bd5453a9e9ff6163db9f760533e9db5b6
SHA256:3cbb5959eb832a0c7880d2a0c58a4f82cc6e66b177b4aeeef49a87540265b96f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: profil.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/profil.js
MD5: a80e7a67200f9bebc58cc1b1f648ba81
SHA1: 67a71dca22d20ed3e4cacd59e7b013052bba6059
SHA256:1eb1aed349f9e8d0781de9f352733a58b6a4fcac9e89d259888005099b5216d8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: profileentry.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/profileentry.js
MD5: 70fba9a0806250f9fc3f559012ebdfc5
SHA1: 911155de0ffa9aff766b028eff7d2a74557da44c
SHA256:7dc35ebc9b13805fc2160bd904bea53c880ab49854079e55e4f141984b6ab075
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: publishdialog.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/publishdialog.js
MD5: 3c6b3557cb70409b766dcadc7593ef40
SHA1: 15ab54e19f4ed112a10fc9bb380d5613f4c9e10f
SHA256:bc6ff09abcaa54afd0b07b558cec428824f5e1b157a5459e3eb2308802eca100
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: publishprofiledialog.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/publishprofiledialog.js
MD5: 15cb57cdb21d62986b893e35495ac8d0
SHA1: 060e44459b5a3e7b684be7a9faaefd5683a22ea9
SHA256:c1ce1c1ef7c98cb682a6844bec27307b2e7aee3403b607ce6743394984d5f481
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: report.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/report.js
MD5: cafb8b7fee4fcb9192f84e74eacc84bc
SHA1: 9c1f8db9c4c82df2c4bb46eb16aa9dc94a002368
SHA256:8ec83f80699f3aab21614b57bd57b94cfe7092ca4586dcf5c5f45ed56cc69687
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: scroller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/scroller.js
MD5: 258842a58c95114e959f659bfa15d9a7
SHA1: f947fcba0b63cc56cacedf1d9f3f812b3330586b
SHA256:4d7e9feb475bec916fc11571fbf16ac1f9113abf4db43bdd18bd4f3ae0560666
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: searchcomponent.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/searchcomponent.js
MD5: bdc3caac35d953edd2e6f68c0d4bfd74
SHA1: ef70a291cb7226084945b2648356f3a389b7fa58
SHA256:36620c84f1984fc0d8f98256fb345a0329ab25c834dcfa8c916d552ff370799e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: userlist.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/userlist.js
MD5: f0280a91fc83e571ef486c22a7f93ef7
SHA1: 68abf77cf988cad21dd9dad06a89175f906b1d9e
SHA256:1b0b6bc3b19aa7a697b17a94c617ad8e1807b10ac7de9d9292bfdc3f929c41cb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: visibilitysettings.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/visibilitysettings.js
MD5: 1f6d120c92d4c7e6c41cc4368b09ebac
SHA1: 9cdf600708312b16e2d9eadd26aea32da1ffc7d2
SHA256:50fe2d4678259193d90aae7c481487d02566b4c92ba3ca4d7c2cf13c9e345250
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: zoomer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/zoomer.js
MD5: 9292c505ec54cc329a2c2f0dc6612a43
SHA1: 724665a18dfc42d5fb8ba99a8010022de75bfccd
SHA256:d9d4db5a4a662a0887793825308e350047a54dc41810200c7ffb732c57a61f1c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### filter.area.zip: filter.area.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.area.zip/filter.area.jar
MD5: ebc582247f702e121da0ba95ffb3c13e
SHA1: b2155dc5c8da547d3b33ff0d3e49b56515747fa0
SHA256:ecee234981f46a4a7adbddd1cebf4b3e46da4ec3248036e29f0b47ff312554b7
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.area | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:43 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.area | High
Product | jar | package name | area | Highest
Product | jar | package name | area | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:43 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.area | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.area | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### filter.baselinetable.zip: filter.baselinetable.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.baselinetable.zip/filter.baselinetable.jar
MD5: a4802e46d815c09b1ce0d71fb6d762f9
SHA1: 6e54beb619b33336d79d7b1530d560e3a7942c25
SHA256:6b05bc81d14e43f86e010208ccd9a6c6d6d732f41f8ea40f8ee99cb8fc33ac2f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.baselinetable | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:43 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.baselinetable | High
Product | jar | package name | baselinetable | Highest
Product | jar | package name | baselinetable | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:43 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.baselinetable | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.baselinetable | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### filter.cmappatch.zip: filter.cmappatch.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.cmappatch.zip/filter.cmappatch.jar
MD5: 8314c150c568335b67c6e00538f4fd08
SHA1: 55af10ae629995d67089480e86f0202bcfe7d011
SHA256:83df34bc28af5e43962e2b6f278649093af91e8d32340b1958b3591853ab0f6b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.cmappatch | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:38 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.cmappatch | High
Product | jar | package name | cmappatch | Highest
Product | jar | package name | cmappatch | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:38 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.cmappatch | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.cmappatch | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### filter.headerfooter.zip: filter.headerfooter.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.headerfooter.zip/filter.headerfooter.jar
MD5: 3cd09443ab48667dfb27719de78885b9
SHA1: 6e2c100e6e5c6692e52a942cd34e8347b7ea67ed
SHA256:5c412515855f49ca0d72fff63ddab348cc64cbdcac8c62b281398a2d7122622f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.headerfooter | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:41 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.headerfooter | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | headerfooter | Highest
Product | jar | package name | headerfooter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:41 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.headerfooter | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.headerfooter | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### filter.hiderotation.zip: filter.hiderotation.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.hiderotation.zip/filter.hiderotation.jar
MD5: 434dc7554a9c4fdea7456877e1de3cfd
SHA1: 02684f627d134b7c0af2af04839e0f31b6890a52
SHA256:e1071a2032835171915f592e9104059697c63140e3b843fc3ea0fbe3533e4ca8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.hiderotation | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:38 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.hiderotation | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | hiderotation | Highest
Product | jar | package name | hiderotation | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:38 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.hiderotation | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.hiderotation | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### filter.invisibleelements.zip: filter.invisibleelements.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.invisibleelements.zip/filter.invisibleelements.jar
MD5: dbbd6451c07563081af5cff583500abd
SHA1: 8d55ecd3a0f35442637caedf51f06bd56fb1acb5
SHA256:200dd15b6b57ba3383943a972cab2aef13b332d5f4fa22c9da5522c0481594d3
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.invisibleelements | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:38 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.invisibleelements | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | invisibleelements | Highest
Product | jar | package name | invisibleelements | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:38 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.invisibleelements | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.invisibleelements | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### filter.multicolumn.zip: filter.multicolumn.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.multicolumn.zip/filter.multicolumn.jar
MD5: 000c7d0acfdd5e97f62e04b3c72f58bb
SHA1: 8432993ba9c9a6fa0d53d71c4ea50aece9928fd4
SHA256:55d0cad039522f52d36586327737148b45fe06f130fe31cb347b143f7f71a649
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.multicolumn | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:41 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.multicolumn | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | multicolumn | Highest
Product | jar | package name | multicolumn | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:41 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.multicolumn | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.multicolumn | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### filter.ocr.zip: filter.ocr.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.ocr.zip/filter.ocr.jar
MD5: 5db0f2b35f9c279ac4fde6e05be167ca
SHA1: 2810d72d4a07cf42e0a6f1e7e8955a6cadbac1ec
SHA256:48f991d60d7734e6bb8f935a334ece46c48bd65aab208a3c1d9ed719e29b2b3c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.ocr | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:38 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.ocr | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | ocr | Highest
Product | jar | package name | ocr | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:38 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.ocr | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.ocr | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### filter.pagerange.zip: filter.pagerange.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.pagerange.zip/filter.pagerange.jar
MD5: 3c6ae0d0844ddea6b1e54473c03126bb
SHA1: 97a86e30fbc30cfce719b5530f9f78ca14155577
SHA256:2e0dff8ec952f128632510a7c5cc787797832c26a80bce2c1988e603e1846697
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.pagerange | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:42 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.pagerange | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | page | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:42 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.pagerange | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.pagerange | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### filter.regex.zip: filter.regex.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.regex.zip/filter.regex.jar
MD5: 0053569538c5ce767cb29a3f3ba04353
SHA1: 8e98d8d188e5455164448493a0f47a093fe1a950
SHA256:34942a337ba615dc4ee419d978cbc78933d50bca49da673d340a740932e56364
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.regex | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:41 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.regex | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | regex | Highest
Product | jar | package name | regex | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:41 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.regex | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.regex | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### filter.regex.zip: filter.regex.jar: filterrenderer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.regex.zip/filter.regex.jar/com/inet/pdfc/filter/regex/structure/filterrenderer.js
MD5: fed6198a818efccd3e71fac743e61c3f
SHA1: dc6d579196c5b147daac7e14e034e2b004ca36f2
SHA256:87b3e46faf43504c51e1ad9407e3d6c17a3bcd8170c14ea7df3b1f4282275442
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### filter.texttransform.zip: filter.texttransform.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.texttransform.zip/filter.texttransform.jar
MD5: 6eb5838a3c5f91ee3b200ff5aef3ef2f
SHA1: 1a5fb175503b8c20428b4010f1510040b861201b
SHA256:8df72397ad7c6589302cf275be51fe1cb4938febfb3ac89d84293784b16fe31b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.texttransform | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:41 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.texttransform | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | texttransform | Highest
Product | jar | package name | texttransform | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:41 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.texttransform | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.texttransform | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### filter.urllookup.zip: filter.urllookup.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.urllookup.zip/filter.urllookup.jar
MD5: aa11c7bd23a0084a41cd576e11dfdded
SHA1: 5062fe9e0a820636bcdc2b42be88463888d4aab7
SHA256:ad15b9c2f03ee3dacc18d88de6b7f1e5844509f91ef20ca6d7d7cbe4f9c6b85a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.urllookup | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:44 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.urllookup | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | urllookup | Highest
Product | jar | package name | urllookup | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:44 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.urllookup | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.urllookup | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### hamcrest-3.0.jar

Description:

    Core API and libraries of hamcrest matcher framework.

License:

    BSD-3-Clause: https://raw.githubusercontent.com/hamcrest/JavaHamcrest/master/LICENSE

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.hamcrest/hamcrest/3.0/8fd9b78a8e6a6510a078a9e30e9e86a6035cfaf7/hamcrest-3.0.jar
MD5: 781023c38b054e9cf1c818c77895e1eb
SHA1: 8fd9b78a8e6a6510a078a9e30e9e86a6035cfaf7
SHA256:5d66b6a4a680755cb6ed7cb104fa7835ef644667586ff0737adeb977c39ecdbc
Referenced In Project/Scope: standalone:inetPlugin
hamcrest-3.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | hamcrest | High
Vendor | gradle | artifactid | hamcrest | Highest
Vendor | gradle | groupid | org.hamcrest | Highest
Vendor | jar | package name | hamcrest | Highest
Vendor | jar | package name | hamcrest | Low
Vendor | Manifest | automatic-module-name | org.hamcrest | Medium
Vendor | Manifest | bundle-symbolicname | org.hamcrest | Medium
Vendor | Manifest | Implementation-Vendor | hamcrest.org | High
Vendor | pom | artifactid | hamcrest | Low
Vendor | pom | developer id | joewalnes | Medium
Vendor | pom | developer id | npryce | Medium
Vendor | pom | developer id | sf105 | Medium
Vendor | pom | developer name | Joe Walnes | Medium
Vendor | pom | developer name | Nat Pryce | Medium
Vendor | pom | developer name | Steve Freeman | Medium
Vendor | pom | groupid | org.hamcrest | Highest
Vendor | pom | name | Hamcrest | High
Vendor | pom | url | http://hamcrest.org/JavaHamcrest/ | Highest
Product | file | name | hamcrest | High
Product | gradle | artifactid | hamcrest | Highest
Product | jar | package name | hamcrest | Highest
Product | Manifest | automatic-module-name | org.hamcrest | Medium
Product | Manifest | Bundle-Name | org.hamcrest | Medium
Product | Manifest | bundle-symbolicname | org.hamcrest | Medium
Product | Manifest | Implementation-Title | hamcrest | High
Product | pom | artifactid | hamcrest | Highest
Product | pom | developer id | joewalnes | Low
Product | pom | developer id | npryce | Low
Product | pom | developer id | sf105 | Low
Product | pom | developer name | Joe Walnes | Low
Product | pom | developer name | Nat Pryce | Low
Product | pom | developer name | Steve Freeman | Low
Product | pom | groupid | org.hamcrest | Highest
Product | pom | name | Hamcrest | High
Product | pom | url | http://hamcrest.org/JavaHamcrest/ | Medium
Version | file | version | 3.0 | High
Version | gradle | version | 3.0 | Highest
Version | Manifest | Implementation-Version | 3.0 | High
Version | pom | version | 3.0 | Highest

#### Identifiers

- pkg:maven/org.hamcrest/hamcrest@3.0 (Confidence:High)

### inetcore-26.4-tools.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/26.4/dea2eb442f742be1e7af05fa91e8285dd611751d/inetcore-26.4-tools.jar
MD5: 627d1f5f57d991403a97ab98b6a89fc6
SHA1: dea2eb442f742be1e7af05fa91e8285dd611751d
SHA256:d321eb497a89274c6acc4e13e47e7a969da3d8e6b1c2dcb28f5e6ba9accfc46d
Referenced In Project/Scope: standalone:inetPlugin
inetcore-26.4-tools.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | inetcore | High
Vendor | gradle | artifactid | inetcore | Highest
Vendor | gradle | groupid | shared | Highest
Vendor | jar | package name | test | Low
Product | file | name | inetcore | High
Product | gradle | artifactid | inetcore | Highest
Version | file | name | inetcore | Medium
Version | file | version | 26.4 | High
Version | gradle | version | 26.4 | Highest

#### Identifiers

- pkg:maven/shared/inetcore@26.4 (Confidence:Highest)

### inetcore-26.4.jar (shaded: com.inet.shared:inetcore:null)

Description:

    A blend composite defines the rule according to which a drawing primitive (known as the source) is mixed with existing graphics (know as the destination.)

    ColorUtilities contains a set of tools to perform common color operations easily.

License:

    LGPL: http://www.gnu.org/licenses/lgpl.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/26.4/f1021598c3f6809342f9aeddfd4ab88a1f5dc9df/inetcore-26.4.jar/META-INF/com/inet/shared/utils/BlendComposite/pom.xml
MD5: 15e3963148212192804e2b1a2b73ad1c
SHA1: 1095ba4522949a04590ab9c98b7f684e92579ef9
SHA256:e5556987ad0b1ede84a994741147dadf6de0cb7d80b845f530e2a96505b79151
Referenced In Project/Scope: standalone:inetPlugin

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | inetcore | Low
Vendor | pom | developer email | contact@inetsoftware.de | Low
Vendor | pom | developer email | morgand@apache.org | Low
Vendor | pom | developer id | inetsoftware | Medium
Vendor | pom | developer id | romainguy | Medium
Vendor | pom | developer id | sun | Medium
Vendor | pom | developer name | i-net /// software | Medium
Vendor | pom | developer name | Romain Guy | Medium
Vendor | pom | developer name | Sun | Medium
Vendor | pom | developer org | Sun | Medium
Vendor | pom | groupid | com.inet.shared | Highest
Vendor | pom | name | BlendComposite and ColorUtilities | High
Vendor | pom (hint) | developer id | oracle | Medium
Vendor | pom (hint) | developer name | oracle | Medium
Vendor | pom (hint) | developer org | oracle | Medium
Product | pom | artifactid | inetcore | Highest
Product | pom | developer email | contact@inetsoftware.de | Low
Product | pom | developer email | morgand@apache.org | Low
Product | pom | developer id | inetsoftware | Low
Product | pom | developer id | romainguy | Low
Product | pom | developer id | sun | Low
Product | pom | developer name | i-net /// software | Low
Product | pom | developer name | Romain Guy | Low
Product | pom | developer name | Sun | Low
Product | pom | developer org | Sun | Low
Product | pom | groupid | com.inet.shared | Highest
Product | pom | name | BlendComposite and ColorUtilities | High

#### Identifiers

- None

### inetcore-26.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/26.4/f1021598c3f6809342f9aeddfd4ab88a1f5dc9df/inetcore-26.4.jar
MD5: 06b8cd6fca501e1001840dc5676d266a
SHA1: f1021598c3f6809342f9aeddfd4ab88a1f5dc9df
SHA256:b6b03ebab5b00c9ce993aa7e99cd9cb29a3e06e4109de3d8481d9081eec43c2e
Referenced In Project/Scope: standalone:inetPlugin
inetcore-26.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | inetcore | High
Vendor | gradle | artifactid | inetcore | Highest
Vendor | gradle | groupid | shared | Highest
Vendor | jar | package name | i | Highest
Vendor | jar | package name | inet | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 16:05 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | shared | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | inetcore | High
Product | gradle | artifactid | inetcore | Highest
Product | jar | package name | permissions | Highest
Product | jar | package name | shared | Highest
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 16:05 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | shared | Low
Product | Manifest | Implementation-Title | inetcore | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | inetcore | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | file | name | inetcore | Medium
Version | file | version | 26.4 | High
Version | gradle | version | 26.4 | Highest
Version | jar | package name | permissions | Highest
Version | jar | package name | shared | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- pkg:maven/shared/inetcore@26.4 (Confidence:Highest)

### java-25-jre-x64-linux.tar.gz: java-25-jre-x64-linux.tar: jrt-fs.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/java-25-jre-x64-linux.tar.gz/java-25-jre-x64-linux.tar/jre-11/lib/jrt-fs.jar
MD5: 790d688cfe7f5ac37258fbf8083eb266
SHA1: 5d0b6d8366c9396dc1f759a3470c156d1608ef94
SHA256:2bd8b0fb53c9d0e240128953e6145e0bbe230168a3444c89fff81002beb60c14
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jrt-fs | High
Vendor | jar | package name | internal | Low
Vendor | jar | package name | jdk | Low
Vendor | jar | package name | jimage | Low
Vendor | Manifest | Implementation-Vendor | Eclipse Adoptium | High
Vendor | Manifest | specification-vendor | Oracle Corporation | Low
Product | file | name | jrt-fs | High
Product | jar | package name | internal | Low
Product | jar | package name | jimage | Low
Product | Manifest | Implementation-Title | Java Runtime Environment | High
Product | Manifest | specification-title | Java Platform API Specification | Medium
Version | Manifest | Implementation-Version | 25.0.4 | High

#### Identifiers

- cpe:2.3:a:eclipse:platform:25.0.4:*:*:*:*:*:*:* (Confidence:Medium)

### jcip-annotations-1.0.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/net.jcip/jcip-annotations/1.0/afba4942caaeaf46aab0b976afd57cc7c181467e/jcip-annotations-1.0.jar
MD5: 9d5272954896c5a5d234f66b7372b17a
SHA1: afba4942caaeaf46aab0b976afd57cc7c181467e
SHA256:be5805392060c71474bf6c9a67a099471274d30b83eef84bfc4e0889a4f1dcc0
Referenced In Project/Scope: standalone:inetPlugin
jcip-annotations-1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.15

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jcip-annotations | High
Vendor | gradle | artifactid | jcip-annotations | Highest
Vendor | gradle | groupid | net.jcip | Highest
Vendor | jar | package name | annotations | Low
Vendor | jar | package name | jcip | Low
Vendor | jar | package name | net | Low
Vendor | pom | artifactid | jcip-annotations | Low
Vendor | pom | groupid | net.jcip | Highest
Vendor | pom | name | "Java Concurrency in Practice" book annotations | High
Vendor | pom | url | http://jcip.net/ | Highest
Product | file | name | jcip-annotations | High
Product | gradle | artifactid | jcip-annotations | Highest
Product | jar | package name | annotations | Low
Product | jar | package name | jcip | Low
Product | pom | artifactid | jcip-annotations | Highest
Product | pom | groupid | net.jcip | Highest
Product | pom | name | "Java Concurrency in Practice" book annotations | High
Product | pom | url | http://jcip.net/ | Medium
Version | file | version | 1.0 | High
Version | gradle | version | 1.0 | Highest
Version | pom | version | 1.0 | Highest

#### Identifiers

- pkg:maven/net.jcip/jcip-annotations@1.0 (Confidence:High)

### jlessc-1.15.jar

Description:

    A Less CSS compiler written completely in Java (pure Java).

License:

    MIT License: http://www.opensource.org/licenses/mit-license.php

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/de.inetsoftware/jlessc/1.15/2dbc9ed0ff94187412e6376823393b4ce90ccf0b/jlessc-1.15.jar
MD5: 3f8f1bb4e60ce8b65f287d36560d1313
SHA1: 2dbc9ed0ff94187412e6376823393b4ce90ccf0b
SHA256:c745dc12ca4e1252c8a082f8c1b9237e4758c6d7ecb82247c3ecc3fe7cd99bdc
Referenced In Project/Scope: standalone:inetPlugin
jlessc-1.15.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jlessc | High
Vendor | gradle | artifactid | jlessc | Highest
Vendor | gradle | groupid | de.inetsoftware | Highest
Vendor | jar | package name | inet | Low
Vendor | jar | package name | less | Low
Vendor | jar | package name | lib | Low
Vendor | Manifest | automatic-module-name | de.inetsoftware.jlessc | Medium
Vendor | Manifest | bundle-symbolicname | de.inetsoftware.jlessc | Medium
Vendor | Manifest | Implementation-Vendor | i-net software GmbH, Berlin, Germany | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | pom | artifactid | jlessc | Low
Vendor | pom | developer email | vberlin@inetsoftware.de | Low
Vendor | pom | developer id | vberlin | Medium
Vendor | pom | developer name | Volker Berlin | Medium
Vendor | pom | developer org | i-net software | Medium
Vendor | pom | developer org URL | https://www.inetsoftware.de/ | Medium
Vendor | pom | groupid | de.inetsoftware | Highest
Vendor | pom | name | JLessC | High
Vendor | pom | url | i-net-software/jlessc | Highest
Product | file | name | jlessc | High
Product | gradle | artifactid | jlessc | Highest
Product | jar | package name | less | Low
Product | jar | package name | lib | Low
Product | Manifest | automatic-module-name | de.inetsoftware.jlessc | Medium
Product | Manifest | bundle-symbolicname | de.inetsoftware.jlessc | Medium
Product | Manifest | Implementation-Title | JLessC, a Less CSS compiler | High
Product | pom | artifactid | jlessc | Highest
Product | pom | developer email | vberlin@inetsoftware.de | Low
Product | pom | developer id | vberlin | Low
Product | pom | developer name | Volker Berlin | Low
Product | pom | developer org | i-net software | Low
Product | pom | developer org URL | https://www.inetsoftware.de/ | Low
Product | pom | groupid | de.inetsoftware | Highest
Product | pom | name | JLessC | High
Product | pom | url | i-net-software/jlessc | High
Version | file | version | 1.15 | High
Version | gradle | version | 1.15 | Highest
Version | Manifest | Bundle-Version | 1.15 | High
Version | Manifest | Implementation-Version | 1.15 | High
Version | pom | version | 1.15 | Highest

#### Identifiers

- pkg:maven/de.inetsoftware/jlessc@1.15 (Confidence:High)

### jsr305-3.0.2.jar

Description:

    JSR305 Annotations for Findbugs

License:

    The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/jsr305/3.0.2/25ea2e8b0c338a877313bd4672d3fe056ea78f0d/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: standalone:inetPlugin
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.15

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jsr305 | High
Vendor | gradle | artifactid | jsr305 | Highest
Vendor | gradle | groupid | com.google.code.findbugs | Highest
Vendor | Manifest | bundle-symbolicname | org.jsr-305 | Medium
Vendor | pom | artifactid | jsr305 | Low
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-jsr305 | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | file | name | jsr305 | High
Product | gradle | artifactid | jsr305 | Highest
Product | Manifest | Bundle-Name | FindBugs-jsr305 | Medium
Product | Manifest | bundle-symbolicname | org.jsr-305 | Medium
Product | pom | artifactid | jsr305 | Highest
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-jsr305 | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | file | version | 3.0.2 | High
Version | gradle | version | 3.0.2 | Highest
Version | Manifest | Bundle-Version | 3.0.2 | High
Version | pom | version | 3.0.2 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

### junit-4.13.2.jar

Description:

    JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.

License:

    Eclipse Public License 1.0: http://www.eclipse.org/legal/epl-v10.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/junit/junit/4.13.2/8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12/junit-4.13.2.jar
MD5: d98a9a02a99a9acd22d7653cbcc1f31f
SHA1: 8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12
SHA256:8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3
Referenced In Project/Scope: standalone:inetPlugin
junit-4.13.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit | High
Vendor | gradle | artifactid | junit | Highest
Vendor | gradle | groupid | junit | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | Manifest | automatic-module-name | junit | Medium
Vendor | Manifest | implementation-url | http://junit.org | Low
Vendor | Manifest | Implementation-Vendor | JUnit | High
Vendor | Manifest | Implementation-Vendor-Id | junit | Medium
Vendor | pom | artifactid | junit | Low
Vendor | pom | developer email | david@saff.net | Low
Vendor | pom | developer email | kcooney@google.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | mail@stefan-birkner.de | Low
Vendor | pom | developer id | dsaff | Medium
Vendor | pom | developer id | kcooney | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | stefanbirkner | Medium
Vendor | pom | developer name | David Saff | Medium
Vendor | pom | developer name | Kevin Cooney | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Stefan Birkner | Medium
Vendor | pom | groupid | junit | Highest
Vendor | pom | name | JUnit | High
Vendor | pom | organization name | JUnit | High
Vendor | pom | organization url | http://www.junit.org | Medium
Vendor | pom | url | http://junit.org | Highest
Product | file | name | junit | High
Product | gradle | artifactid | junit | Highest
Product | jar | package name | junit | Highest
Product | Manifest | automatic-module-name | junit | Medium
Product | Manifest | Implementation-Title | JUnit | High
Product | Manifest | implementation-url | http://junit.org | Low
Product | pom | artifactid | junit | Highest
Product | pom | developer email | david@saff.net | Low
Product | pom | developer email | kcooney@google.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | mail@stefan-birkner.de | Low
Product | pom | developer id | dsaff | Low
Product | pom | developer id | kcooney | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | stefanbirkner | Low
Product | pom | developer name | David Saff | Low
Product | pom | developer name | Kevin Cooney | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Stefan Birkner | Low
Product | pom | groupid | junit | Highest
Product | pom | name | JUnit | High
Product | pom | organization name | JUnit | Low
Product | pom | organization url | http://www.junit.org | Low
Product | pom | url | http://junit.org | Medium
Version | file | version | 4.13.2 | High
Version | gradle | version | 4.13.2 | Highest
Version | Manifest | Implementation-Version | 4.13.2 | High
Version | pom | version | 4.13.2 | Highest

#### Identifiers

- pkg:maven/junit/junit@4.13.2 (Confidence:High)
- cpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:* (Confidence:Low)

### junit-jupiter-5.14.0.jar

Description:

    Module "junit-jupiter" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter/5.14.0/df30c385c7c8ea0e74e3b63d8c6c0fc2b0ecb55/junit-jupiter-5.14.0.jar
MD5: 7ddc03716bc709deb839426691440409
SHA1: 0df30c385c7c8ea0e74e3b63d8c6c0fc2b0ecb55
SHA256:a89501c76e91abfdc08201acdaaae681d5c8d59b62f375d5929b6681a0118f43
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-5.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/pdfc/standalone@26.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter | High
Vendor | gradle | artifactid | junit-jupiter | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | module-info | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-jupiter | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.jupiter | Highest
Vendor | pom | name | JUnit Jupiter (Aggregator) | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-jupiter | High
Product | gradle | artifactid | junit-jupiter | Highest
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter (Aggregator) | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter | Medium
Product | Manifest | Implementation-Title | junit-jupiter | High
Product | Manifest | specification-title | junit-jupiter | Medium
Product | pom | artifactid | junit-jupiter | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.jupiter | Highest
Product | pom | name | JUnit Jupiter (Aggregator) | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 5.14.0 | High
Version | gradle | version | 5.14.0 | Highest
Version | Manifest | Bundle-Version | 5.14.0 | High
Version | Manifest | Implementation-Version | 5.14.0 | High
Version | pom | version | 5.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0 (Confidence:High)

### junit-jupiter-api-5.14.0.jar

Description:

    Module "junit-jupiter-api" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-api/5.14.0/4cc3acff995a4ce56ebf735a485800ddede31cb0/junit-jupiter-api-5.14.0.jar
MD5: ed392a0bd93155f0fd0674022a8ad32c
SHA1: 4cc3acff995a4ce56ebf735a485800ddede31cb0
SHA256:d3431a004b83823bcdd95b6738130087ec32b2fb28a5a5deb4fbc16357bab8f9
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-api-5.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-api | High
Vendor | gradle | artifactid | junit-jupiter-api | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | api | Highest
Vendor | jar | package name | api | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-api | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-jupiter-api | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.jupiter | Highest
Vendor | pom | name | JUnit Jupiter API | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-jupiter-api | High
Product | gradle | artifactid | junit-jupiter-api | Highest
Product | jar | package name | api | Highest
Product | jar | package name | api | Low
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter API | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-api | Medium
Product | Manifest | Implementation-Title | junit-jupiter-api | High
Product | Manifest | specification-title | junit-jupiter-api | Medium
Product | pom | artifactid | junit-jupiter-api | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.jupiter | Highest
Product | pom | name | JUnit Jupiter API | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 5.14.0 | High
Version | gradle | version | 5.14.0 | Highest
Version | Manifest | Bundle-Version | 5.14.0 | High
Version | Manifest | Implementation-Version | 5.14.0 | High
Version | pom | version | 5.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-api@5.14.0 (Confidence:High)

### junit-jupiter-engine-5.14.0.jar

Description:

    Module "junit-jupiter-engine" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-engine/5.14.0/9da8a108759444556e759f30e663a416a80f402c/junit-jupiter-engine-5.14.0.jar
MD5: 5a1f1a143fb48a49ceb29526b3951d5b
SHA1: 9da8a108759444556e759f30e663a416a80f402c
SHA256:203b7a240b15716f8b881e2dfab0c580f1da5b274a196ff360f8cada2d1752ea
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-engine-5.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/pdfc/standalone@26.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-engine | High
Vendor | gradle | artifactid | junit-jupiter-engine | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.14.0" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-jupiter-engine | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.jupiter | Highest
Vendor | pom | name | JUnit Jupiter Engine | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-jupiter-engine | High
Product | gradle | artifactid | junit-jupiter-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter Engine | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-engine | Medium
Product | Manifest | Implementation-Title | junit-jupiter-engine | High
Product | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.14.0" | Low
Product | Manifest | specification-title | junit-jupiter-engine | Medium
Product | pom | artifactid | junit-jupiter-engine | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.jupiter | Highest
Product | pom | name | JUnit Jupiter Engine | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 5.14.0 | High
Version | gradle | version | 5.14.0 | Highest
Version | Manifest | Bundle-Version | 5.14.0 | High
Version | Manifest | Implementation-Version | 5.14.0 | High
Version | pom | version | 5.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0 (Confidence:High)

### junit-jupiter-params-5.14.0.jar

Description:

    Module "junit-jupiter-params" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-params/5.14.0/3027dc3529237b2285b261640134daa217068c96/junit-jupiter-params-5.14.0.jar
MD5: dd4c6213ae046597f04d386cc5038338
SHA1: 3027dc3529237b2285b261640134daa217068c96
SHA256:7fbb51837921c329604ba119dc1af0573d36230ea80f786aa3d4fd8c1dbb8a1b
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-params-5.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-params | High
Vendor | gradle | artifactid | junit-jupiter-params | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | jar | package name | params | Highest
Vendor | jar | package name | params | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-params | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-jupiter-params | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.jupiter | Highest
Vendor | pom | name | JUnit Jupiter Params | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-jupiter-params | High
Product | gradle | artifactid | junit-jupiter-params | Highest
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | jar | package name | params | Highest
Product | jar | package name | params | Low
Product | jar | package name | shadow | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter Params | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-params | Medium
Product | Manifest | Implementation-Title | junit-jupiter-params | High
Product | Manifest | specification-title | junit-jupiter-params | Medium
Product | pom | artifactid | junit-jupiter-params | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.jupiter | Highest
Product | pom | name | JUnit Jupiter Params | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 5.14.0 | High
Version | gradle | version | 5.14.0 | Highest
Version | Manifest | Bundle-Version | 5.14.0 | High
Version | Manifest | Implementation-Version | 5.14.0 | High
Version | pom | version | 5.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-params@5.14.0 (Confidence:High)

### junit-platform-commons-1.14.0.jar

Description:

    Module "junit-platform-commons" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-commons/1.14.0/e7e1bbf2044652efc5a2a21f6b8c21173a9b91a1/junit-platform-commons-1.14.0.jar
MD5: 7f72f4b9a2ee123155ac4e9a011e0d8f
SHA1: e7e1bbf2044652efc5a2a21f6b8c21173a9b91a1
SHA256:e543a3a8422f1dfe6047f535305b70c777e0db431f1ef3f55ef5c86ac0bbcb9b
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-commons-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-commons | High
Vendor | gradle | artifactid | junit-platform-commons | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | commons | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | org | Highest
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-commons | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | multi-release | true | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-commons | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Commons | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-commons | High
Product | gradle | artifactid | junit-platform-commons | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | commons | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Commons | Medium
Product | Manifest | bundle-symbolicname | junit-platform-commons | Medium
Product | Manifest | Implementation-Title | junit-platform-commons | High
Product | Manifest | multi-release | true | Low
Product | Manifest | specification-title | junit-platform-commons | Medium
Product | pom | artifactid | junit-platform-commons | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Commons | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-commons@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-platform-engine-1.14.0.jar

Description:

    Module "junit-platform-engine" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-engine/1.14.0/77386b812c0e3ba96cdd7c018d2a2f61940ccd8f/junit-platform-engine-1.14.0.jar
MD5: 80623f8b044fc4fde498e82659a5e9d7
SHA1: 77386b812c0e3ba96cdd7c018d2a2f61940ccd8f
SHA256:57cd29de834469aee656e5debda1f09f7c59630fd57b90cc0cbaa31726fc4d4a
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-engine-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-engine | High
Vendor | gradle | artifactid | junit-platform-engine | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-engine | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Engine API | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-engine | High
Product | gradle | artifactid | junit-platform-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | support | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Engine API | Medium
Product | Manifest | bundle-symbolicname | junit-platform-engine | Medium
Product | Manifest | Implementation-Title | junit-platform-engine | High
Product | Manifest | specification-title | junit-platform-engine | Medium
Product | pom | artifactid | junit-platform-engine | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Engine API | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-engine@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-platform-launcher-1.14.0.jar

Description:

    Module "junit-platform-launcher" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-launcher/1.14.0/b61418170bd0b204429b9ae77af681a1ac74579d/junit-platform-launcher-1.14.0.jar
MD5: cbd4803d13742dba0ab00bd74d40aa3d
SHA1: b61418170bd0b204429b9ae77af681a1ac74579d
SHA256:1000b278797510dcec40d90f77f0d84dcc13e5982da563c18b6b5665aae4b81c
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-launcher-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-launcher | High
Vendor | gradle | artifactid | junit-platform-launcher | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | launcher | Highest
Vendor | jar | package name | launcher | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-launcher | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.14.0" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-launcher | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Launcher | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-launcher | High
Product | gradle | artifactid | junit-platform-launcher | Highest
Product | jar | package name | junit | Highest
Product | jar | package name | launcher | Highest
Product | jar | package name | launcher | Low
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Launcher | Medium
Product | Manifest | bundle-symbolicname | junit-platform-launcher | Medium
Product | Manifest | Implementation-Title | junit-platform-launcher | High
Product | Manifest | provide-capability | org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.14.0" | Low
Product | Manifest | specification-title | junit-platform-launcher | Medium
Product | pom | artifactid | junit-platform-launcher | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Launcher | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-launcher@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-platform-suite-1.14.0.jar

Description:

    Module "junit-platform-suite" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite/1.14.0/28f2ccbb1d9707b233879e82f7f660c673ad053d/junit-platform-suite-1.14.0.jar
MD5: 5fa9ec3bbe194ae860e5e0a34099bd87
SHA1: 28f2ccbb1d9707b233879e82f7f660c673ad053d
SHA256:52472503bdf9168853f6aa7dcb87a6563ebcc7748fdd91d9440df1928da82c13
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/pdfc/standalone@26.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite | High
Vendor | gradle | artifactid | junit-platform-suite | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | module-info | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-suite | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Suite (Aggregator) | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-suite | High
Product | gradle | artifactid | junit-platform-suite | Highest
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite (Aggregator) | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite | Medium
Product | Manifest | Implementation-Title | junit-platform-suite | High
Product | Manifest | specification-title | junit-platform-suite | Medium
Product | pom | artifactid | junit-platform-suite | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Suite (Aggregator) | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-platform-suite-api-1.14.0.jar

Description:

    Module "junit-platform-suite-api" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-api/1.14.0/32db2f3c4405b2cad90e3756be83815414c80897/junit-platform-suite-api-1.14.0.jar
MD5: 286cd58bb6f5564c4e9f8b79dd319cf9
SHA1: 32db2f3c4405b2cad90e3756be83815414c80897
SHA256:4399e19ace24e524d5957f7b3a9eaf954124241f3313ea659e01fd149f110c6a
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-api-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-api | High
Vendor | gradle | artifactid | junit-platform-suite-api | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | api | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-api | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-suite-api | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Suite API | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-suite-api | High
Product | gradle | artifactid | junit-platform-suite-api | Highest
Product | jar | package name | api | Highest
Product | jar | package name | api | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite API | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-api | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-api | High
Product | Manifest | specification-title | junit-platform-suite-api | Medium
Product | pom | artifactid | junit-platform-suite-api | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Suite API | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-api@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-platform-suite-commons-1.14.0.jar

Description:

    Module "junit-platform-suite-commons" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-commons/1.14.0/d351237988ef097514fc7a35bcfa3de73a08a0a/junit-platform-suite-commons-1.14.0.jar
MD5: 235c8d26c6a49946d7826e862e0a181d
SHA1: 0d351237988ef097514fc7a35bcfa3de73a08a0a
SHA256:b868237f8cb2e193775e3f712b9405cb3d4ffaa180579cc83a7fe1f6db9c5cc1
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-commons-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-commons | High
Vendor | gradle | artifactid | junit-platform-suite-commons | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-commons | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-suite-commons | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Suite Commons | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-suite-commons | High
Product | gradle | artifactid | junit-platform-suite-commons | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | commons | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite Commons | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-commons | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-commons | High
Product | Manifest | specification-title | junit-platform-suite-commons | Medium
Product | pom | artifactid | junit-platform-suite-commons | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Suite Commons | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-commons@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-platform-suite-engine-1.14.0.jar

Description:

    Module "junit-platform-suite-engine" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-engine/1.14.0/f87f86ae21fb6bfa7749cca62ec55e302ecd3e88/junit-platform-suite-engine-1.14.0.jar
MD5: 9306e0421eb55b833e9f37eecaeabdd4
SHA1: f87f86ae21fb6bfa7749cca62ec55e302ecd3e88
SHA256:f545be730d41d6a760e8422e687b8223d632026ae2049250c80c797007789ac0
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-engine-1.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-engine | High
Vendor | gradle | artifactid | junit-platform-suite-engine | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-platform-suite-engine | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.platform | Highest
Vendor | pom | name | JUnit Platform Suite Engine | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-platform-suite-engine | High
Product | gradle | artifactid | junit-platform-suite-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite Engine | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-engine | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-engine | High
Product | Manifest | specification-title | junit-platform-suite-engine | Medium
Product | pom | artifactid | junit-platform-suite-engine | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.platform | Highest
Product | pom | name | JUnit Platform Suite Engine | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 1.14.0 | High
Version | gradle | version | 1.14.0 | Highest
Version | Manifest | Bundle-Version | 1.14.0 | High
Version | Manifest | Implementation-Version | 1.14.0 | High
Version | pom | version | 1.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-engine@1.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:1.14.0:*:*:*:*:*:*:* (Confidence:Low)

### junit-vintage-engine-5.14.0.jar

Description:

    Module "junit-vintage-engine" of JUnit 5.

License:

    Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.vintage/junit-vintage-engine/5.14.0/ac6667e31d2774c9281bbcbe00706d54c47db40e/junit-vintage-engine-5.14.0.jar
MD5: 372fe55fae45603c029e6379e728c764
SHA1: ac6667e31d2774c9281bbcbe00706d54c47db40e
SHA256:10b9cea16ce573d906719326795bb2b6a5aecbdcc64ab30825f05af9226cb595
Referenced In Project/Scope: standalone:inetPlugin
junit-vintage-engine-5.14.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/pdfc/standalone@26.4
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-vintage-engine | High
Vendor | gradle | artifactid | junit-vintage-engine | Highest
Vendor | gradle | groupid | org.junit.vintage | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | vintage | Highest
Vendor | jar | package name | vintage | Low
Vendor | Manifest | build-date | 2025-09-30 | Low
Vendor | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Vendor | Manifest | build-time | 09:14:43.001+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-vintage-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.14.0" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Vendor | pom | artifactid | junit-vintage-engine | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | derancourt.juliette@gmail.com | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | sormuras@gmail.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | juliette-derancourt | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer id | sormuras | Medium
Vendor | pom | developer name | Christian Stein | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Juliette de Rancourt | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.junit.vintage | Highest
Vendor | pom | name | JUnit Vintage Engine | High
Vendor | pom | url | https://junit.org/ | Highest
Product | file | name | junit-vintage-engine | High
Product | gradle | artifactid | junit-vintage-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | vintage | Highest
Product | jar | package name | vintage | Low
Product | Manifest | build-date | 2025-09-30 | Low
Product | Manifest | build-revision | 8545c93a9d86ef7f9c848c0eca4ec792f4e82a37 | Low
Product | Manifest | build-time | 09:14:43.001+0200 | Low
Product | Manifest | Bundle-Name | JUnit Vintage Engine | Medium
Product | Manifest | bundle-symbolicname | junit-vintage-engine | Medium
Product | Manifest | Implementation-Title | junit-vintage-engine | High
Product | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.14.0" | Low
Product | Manifest | specification-title | junit-vintage-engine | Medium
Product | pom | artifactid | junit-vintage-engine | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | derancourt.juliette@gmail.com | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | sormuras@gmail.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | juliette-derancourt | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer id | sormuras | Low
Product | pom | developer name | Christian Stein | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Juliette de Rancourt | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.junit.vintage | Highest
Product | pom | name | JUnit Vintage Engine | High
Product | pom | url | https://junit.org/ | Medium
Version | file | version | 5.14.0 | High
Version | gradle | version | 5.14.0 | Highest
Version | Manifest | Bundle-Version | 5.14.0 | High
Version | Manifest | Implementation-Version | 5.14.0 | High
Version | pom | version | 5.14.0 | Highest

#### Identifiers

- pkg:maven/org.junit.vintage/junit-vintage-engine@5.14.0 (Confidence:High)
- cpe:2.3:a:fan_platform_project:fan_platform:5.14.0:*:*:*:*:*:*:* (Confidence:Low)

### maintenance.pdfc.zip: maintenance.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar
MD5: 68ba082b43ff6a5d2826bfbec0f0a248
SHA1: 51dd6283011e1a3faa8ab12bcdcef4086d9ca213
SHA256:cca3f53fcc846eff7433b4be2b37384b74981873e31da98d3f1f3ec6ccb43a08
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | maintenance.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugins | Low
Vendor | Manifest | built-date | 2026-08-07 19:38 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | maintenance.pdfc | High
Product | jar | package name | maintenance | Highest
Product | jar | package name | maintenance | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugins | Low
Product | Manifest | built-date | 2026-08-07 19:38 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | maintenance.pdfc | High
Product | Manifest | specification-title | maintenance.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### maintenance.pdfc.zip: maintenance.pdfc.jar: app.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar/com/inet/pdfc/plugins/maintenance/server/comparisons/js/app.js
MD5: 5e534fcce6f689d176c6f3b40fc4454f
SHA1: e5f82942adf62444636d28e904add7c61a18ea32
SHA256:d08c1c9da221cbd9c38a26e0235b0da7c3bed4ab30f504aa741d4085a42f7294
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### maintenance.pdfc.zip: maintenance.pdfc.jar: comparisons.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar/com/inet/pdfc/plugins/maintenance/server/comparisons/js/comparisons.js
MD5: dc34a947f1122f6f845deb82b822f15c
SHA1: 7a1528b00bb5229be98689b8c465b37c39bfa0ff
SHA256:27b0ebba3a0c757e921cb562be691ee971fa06d1247423ff2c16f71d87d51bee
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### ocr.tesseract.zip: commons-logging.jar

Description:

    Apache Commons Logging is a thin adapter allowing configurable bridging to other,
        well-known logging systems.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/commons-logging.jar
MD5: e7a1e7cb6a89241ed9bfec4c25b6c645
SHA1: b9fc14968d63a8b8a8a2c1885fe3e90564239708
SHA256:bc2dfe32f1ef06509e6a065144c1adf7b420eabf11a87f30bd127f8faa332016
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | commons-logging | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | logging | Highest
Vendor | Manifest | automatic-module-name | org.apache.commons.logging | Medium
Vendor | Manifest | build-jdk-spec | 17 | Low
Vendor | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-logging/ | Low
Vendor | Manifest | bundle-symbolicname | org.apache.commons.commons-logging | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | multi-release | true | Low
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | commons-logging | Low
Vendor | pom | developer email | baliuka@apache.org | Low
Vendor | pom | developer email | costin@apache.org | Low
Vendor | pom | developer email | craigmcc@apache.org | Low
Vendor | pom | developer email | dennisl@apache.org | Low
Vendor | pom | developer email | donaldp@apache.org | Low
Vendor | pom | developer email | ggregory at apache.org | Low
Vendor | pom | developer email | morgand@apache.org | Low
Vendor | pom | developer email | rdonkin@apache.org | Low
Vendor | pom | developer email | rsitze@apache.org | Low
Vendor | pom | developer email | rwaldhoff@apache.org | Low
Vendor | pom | developer email | sanders@apache.org | Low
Vendor | pom | developer email | skitching@apache.org | Low
Vendor | pom | developer email | tn@apache.org | Low
Vendor | pom | developer id | baliuka | Medium
Vendor | pom | developer id | bstansberry | Medium
Vendor | pom | developer id | costin | Medium
Vendor | pom | developer id | craigmcc | Medium
Vendor | pom | developer id | dennisl | Medium
Vendor | pom | developer id | donaldp | Medium
Vendor | pom | developer id | ggregory | Medium
Vendor | pom | developer id | morgand | Medium
Vendor | pom | developer id | rdonkin | Medium
Vendor | pom | developer id | rsitze | Medium
Vendor | pom | developer id | rwaldhoff | Medium
Vendor | pom | developer id | sanders | Medium
Vendor | pom | developer id | skitching | Medium
Vendor | pom | developer id | tn | Medium
Vendor | pom | developer name | Brian Stansberry | Medium
Vendor | pom | developer name | Costin Manolache | Medium
Vendor | pom | developer name | Craig McClanahan | Medium
Vendor | pom | developer name | Dennis Lundberg | Medium
Vendor | pom | developer name | Gary Gregory | Medium
Vendor | pom | developer name | Juozas Baliuka | Medium
Vendor | pom | developer name | Morgan Delagrange | Medium
Vendor | pom | developer name | Peter Donald | Medium
Vendor | pom | developer name | Richard Sitze | Medium
Vendor | pom | developer name | Robert Burrell Donkin | Medium
Vendor | pom | developer name | Rodney Waldhoff | Medium
Vendor | pom | developer name | Scott Sanders | Medium
Vendor | pom | developer name | Simon Kitching | Medium
Vendor | pom | developer name | Thomas Neidhart | Medium
Vendor | pom | developer org | Apache | Medium
Vendor | pom | developer org | The Apache Software Foundation | Medium
Vendor | pom | developer org URL | https://www.apache.org/ | Medium
Vendor | pom | groupid | commons-logging | Highest
Vendor | pom | name | Apache Commons Logging | High
Vendor | pom | parent-artifactid | commons-parent | Low
Vendor | pom | parent-groupid | org.apache.commons | Medium
Vendor | pom | url | https://commons.apache.org/proper/commons-logging/ | Highest
Product | file | name | commons-logging | High
Product | jar | package name | apache | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | logging | Highest
Product | Manifest | automatic-module-name | org.apache.commons.logging | Medium
Product | Manifest | build-jdk-spec | 17 | Low
Product | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-logging/ | Low
Product | Manifest | Bundle-Name | Apache Commons Logging | Medium
Product | Manifest | bundle-symbolicname | org.apache.commons.commons-logging | Medium
Product | Manifest | Implementation-Title | Apache Commons Logging | High
Product | Manifest | multi-release | true | Low
Product | Manifest | specification-title | Apache Commons Logging | Medium
Product | pom | artifactid | commons-logging | Highest
Product | pom | developer email | baliuka@apache.org | Low
Product | pom | developer email | costin@apache.org | Low
Product | pom | developer email | craigmcc@apache.org | Low
Product | pom | developer email | dennisl@apache.org | Low
Product | pom | developer email | donaldp@apache.org | Low
Product | pom | developer email | ggregory at apache.org | Low
Product | pom | developer email | morgand@apache.org | Low
Product | pom | developer email | rdonkin@apache.org | Low
Product | pom | developer email | rsitze@apache.org | Low
Product | pom | developer email | rwaldhoff@apache.org | Low
Product | pom | developer email | sanders@apache.org | Low
Product | pom | developer email | skitching@apache.org | Low
Product | pom | developer email | tn@apache.org | Low
Product | pom | developer id | baliuka | Low
Product | pom | developer id | bstansberry | Low
Product | pom | developer id | costin | Low
Product | pom | developer id | craigmcc | Low
Product | pom | developer id | dennisl | Low
Product | pom | developer id | donaldp | Low
Product | pom | developer id | ggregory | Low
Product | pom | developer id | morgand | Low
Product | pom | developer id | rdonkin | Low
Product | pom | developer id | rsitze | Low
Product | pom | developer id | rwaldhoff | Low
Product | pom | developer id | sanders | Low
Product | pom | developer id | skitching | Low
Product | pom | developer id | tn | Low
Product | pom | developer name | Brian Stansberry | Low
Product | pom | developer name | Costin Manolache | Low
Product | pom | developer name | Craig McClanahan | Low
Product | pom | developer name | Dennis Lundberg | Low
Product | pom | developer name | Gary Gregory | Low
Product | pom | developer name | Juozas Baliuka | Low
Product | pom | developer name | Morgan Delagrange | Low
Product | pom | developer name | Peter Donald | Low
Product | pom | developer name | Richard Sitze | Low
Product | pom | developer name | Robert Burrell Donkin | Low
Product | pom | developer name | Rodney Waldhoff | Low
Product | pom | developer name | Scott Sanders | Low
Product | pom | developer name | Simon Kitching | Low
Product | pom | developer name | Thomas Neidhart | Low
Product | pom | developer org | Apache | Low
Product | pom | developer org | The Apache Software Foundation | Low
Product | pom | developer org URL | https://www.apache.org/ | Low
Product | pom | groupid | commons-logging | Highest
Product | pom | name | Apache Commons Logging | High
Product | pom | parent-artifactid | commons-parent | Medium
Product | pom | parent-groupid | org.apache.commons | Medium
Product | pom | url | https://commons.apache.org/proper/commons-logging/ | Medium
Version | Manifest | Bundle-Version | 1.3.4 | High
Version | Manifest | Implementation-Version | 1.3.4 | High
Version | pom | parent-version | 1.3.4 | Low
Version | pom | version | 1.3.4 | Highest

#### Identifiers

- pkg:maven/commons-logging/commons-logging@1.3.4 (Confidence:High)

### ocr.tesseract.zip: fontbox.jar

Description:

        The Apache FontBox library is an open source Java tool to obtain low level information
        from font files. FontBox is a subproject of Apache PDFBox.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/fontbox.jar
MD5: fd7e63f326b2e92ced87c15c854bf820
SHA1: 48c70ca4297548041b7e05493a2db4780a037cf1
SHA256:8149d9897ab504f7a3f3797d552cd8925ef58149b4de3fb470eb46d747e68f86
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | fontbox | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | fontbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.fontbox | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Vendor | Manifest | bundle-symbolicname | org.apache.pdfbox.fontbox | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | fontbox | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache FontBox | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Vendor | pom | url | http://pdfbox.apache.org/ | Highest
Product | file | name | fontbox | High
Product | jar | package name | apache | Highest
Product | jar | package name | fontbox | Highest
Product | Manifest | automatic-module-name | org.apache.fontbox | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Product | Manifest | Bundle-Name | Apache FontBox | Medium
Product | Manifest | bundle-symbolicname | org.apache.pdfbox.fontbox | Medium
Product | Manifest | Implementation-Title | Apache FontBox | High
Product | Manifest | specification-title | Apache FontBox | Medium
Product | pom | artifactid | fontbox | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache FontBox | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Product | pom | url | http://pdfbox.apache.org/ | Medium
Version | Manifest | Bundle-Version | 3.0.7 | High
Version | Manifest | Implementation-Version | 3.0.7 | High
Version | pom | version | 3.0.7 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/fontbox@3.0.7 (Confidence:High)

### ocr.tesseract.zip: jai-imageio-core.jar

Description:

        Java Advanced Imaging Image I/O Tools API core, but without the classes
        involved with javax.media.jai dependencies, JPEG2000 or
        codecLibJIIO, meaning that this library can be distributed under the
        modified BSD license and should be GPL compatible.

License:

    BSD 3-clause License w/nuclear disclaimer: LICENSE.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jai-imageio-core.jar
MD5: 6978d733bfb55c0a82639f724fe5f3bb
SHA1: fb6d79b929556362a241b2f65a04e538062f0077
SHA256:8ad3c68e9efffb10ac87ff8bc589adf64b04a729c5194c079efd0643607fd72a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jai-imageio-core | High
Vendor | jar | package name | github | Highest
Vendor | Manifest | bundle-docurl | https://github.com/jai-imageio/ | Low
Vendor | Manifest | bundle-symbolicname | jai-imageio-core | Medium
Vendor | Manifest | extension-name | com.github.jai-imageio-jai-imageio-core | Medium
Vendor | Manifest | Implementation-Vendor | https://github.com/jai-imageio/ jai-imageio GitHub group | High
Vendor | Manifest | specification-vendor | Sun Microsystems, Inc. | Low
Vendor | Manifest | url | https://github.com/jai-imageio/jai-imageio-core | Low
Vendor | pom | artifactid | jai-imageio-core | Low
Vendor | pom | developer email | stian@s11.no | Low
Vendor | pom | developer name | Stian Soiland-Reyes | Medium
Vendor | pom | developer org | s11 | Medium
Vendor | pom | developer org URL | http://s11.no/ | Medium
Vendor | pom | groupid | com.github.jai-imageio | Highest
Vendor | pom | name | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Vendor | pom | organization name | jai-imageio GitHub group | High
Vendor | pom | organization url | jai-imageio/ | Medium
Vendor | pom | url | jai-imageio/jai-imageio-core | Highest
Product | file | name | jai-imageio-core | High
Product | jar | package name | github | Highest
Product | Manifest | bundle-docurl | https://github.com/jai-imageio/ | Low
Product | Manifest | Bundle-Name | Java Advanced Imaging Image I/O Tools API core (standalone) | Medium
Product | Manifest | bundle-symbolicname | jai-imageio-core | Medium
Product | Manifest | extension-name | com.github.jai-imageio-jai-imageio-core | Medium
Product | Manifest | Implementation-Title | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Product | Manifest | specification-title | Java Advanced Imaging | Medium
Product | Manifest | url | https://github.com/jai-imageio/jai-imageio-core | Low
Product | pom | artifactid | jai-imageio-core | Highest
Product | pom | developer email | stian@s11.no | Low
Product | pom | developer name | Stian Soiland-Reyes | Low
Product | pom | developer org | s11 | Low
Product | pom | developer org URL | http://s11.no/ | Low
Product | pom | groupid | com.github.jai-imageio | Highest
Product | pom | name | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Product | pom | organization name | jai-imageio GitHub group | Low
Product | pom | url | jai-imageio/ | High
Product | pom | url | jai-imageio/jai-imageio-core | High
Version | Manifest | Bundle-Version | 1.4.0 | High
Version | Manifest | Implementation-Version | 1.4.0 | High
Version | pom | version | 1.4.0 | Highest

#### Identifiers

- pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0 (Confidence:High)

### ocr.tesseract.zip: jbig2-imageio.jar

Description:

    	Java Image I/O plugin for reading JBIG2-compressed image data.
    	Formerly known as the levigo JBig2 ImageIO plugin (com.levigo.jbig2:levigo-jbig2-imageio).

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jbig2-imageio.jar
MD5: c51f45dc3d29bbf716774f9ff9e95ad6
SHA1: ad09a9bb94ea791ea81fb6c5bc2b13dd77872598
SHA256:29cb2951622f10acf61fd0656c4e6fa5562194a9095f7a1d26aa426e2f6b17eb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jbig2-imageio | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | image | Highest
Vendor | jar | package name | jbig2 | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Vendor | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | Implementation-Vendor-Id | org.apache.pdfbox | Medium
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | jbig2-imageio | Low
Vendor | pom | developer id | adam | Medium
Vendor | pom | developer id | blitchfield | Medium
Vendor | pom | developer id | carrier | Medium
Vendor | pom | developer id | danielwilson | Medium
Vendor | pom | developer id | gbailleul | Medium
Vendor | pom | developer id | hennejg | Medium
Vendor | pom | developer id | holdersn | Medium
Vendor | pom | developer id | jahewson | Medium
Vendor | pom | developer id | jeremias | Medium
Vendor | pom | developer id | jukka | Medium
Vendor | pom | developer id | kjackson | Medium
Vendor | pom | developer id | koch | Medium
Vendor | pom | developer id | koehlecn | Medium
Vendor | pom | developer id | lehmi | Medium
Vendor | pom | developer id | leleueri | Medium
Vendor | pom | developer id | mmayer | Medium
Vendor | pom | developer id | msayhoun | Medium
Vendor | pom | developer id | pkoch | Medium
Vendor | pom | developer id | tallison | Medium
Vendor | pom | developer id | tboehme | Medium
Vendor | pom | developer id | tchojecki | Medium
Vendor | pom | developer id | tilman | Medium
Vendor | pom | developer id | vfed | Medium
Vendor | pom | developer name | Adam Nichols | Medium
Vendor | pom | developer name | Andreas Lehmkühler | Medium
Vendor | pom | developer name | Ben Litchfield | Medium
Vendor | pom | developer name | Brian Carrier | Medium
Vendor | pom | developer name | Carolin Köhler | Medium
Vendor | pom | developer name | Daniel Wilson | Medium
Vendor | pom | developer name | Eric Leleu | Medium
Vendor | pom | developer name | Guillaume Bailleul | Medium
Vendor | pom | developer name | Jeremias Maerki | Medium
Vendor | pom | developer name | Johannes Koch | Medium
Vendor | pom | developer name | John Hewson | Medium
Vendor | pom | developer name | Jukka Zitting | Medium
Vendor | pom | developer name | Jörg Henne | Medium
Vendor | pom | developer name | Kevin Jackson | Medium
Vendor | pom | developer name | Maruan Sayhoun | Medium
Vendor | pom | developer name | Matthäus Mayer | Medium
Vendor | pom | developer name | Phillipp Koch | Medium
Vendor | pom | developer name | Sebastian Holder | Medium
Vendor | pom | developer name | Thomas Chojecki | Medium
Vendor | pom | developer name | Tilman Hausherr | Medium
Vendor | pom | developer name | Tim Allison | Medium
Vendor | pom | developer name | Timo Boehme | Medium
Vendor | pom | developer name | Villu Ruusmann | Medium
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | PDFBox JBIG2 ImageIO plugin | High
Vendor | pom | organization name | The Apache Software Foundation | High
Vendor | pom | organization url | http://pdfbox.apache.org | Medium
Vendor | pom | parent-artifactid | apache | Low
Vendor | pom | parent-groupid | org.apache | Medium
Product | file | name | jbig2-imageio | High
Product | jar | package name | apache | Highest
Product | jar | package name | image | Highest
Product | jar | package name | jbig2 | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Product | Manifest | Implementation-Title | PDFBox JBIG2 ImageIO plugin | High
Product | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Product | Manifest | specification-title | PDFBox JBIG2 ImageIO plugin | Medium
Product | pom | artifactid | jbig2-imageio | Highest
Product | pom | developer id | adam | Low
Product | pom | developer id | blitchfield | Low
Product | pom | developer id | carrier | Low
Product | pom | developer id | danielwilson | Low
Product | pom | developer id | gbailleul | Low
Product | pom | developer id | hennejg | Low
Product | pom | developer id | holdersn | Low
Product | pom | developer id | jahewson | Low
Product | pom | developer id | jeremias | Low
Product | pom | developer id | jukka | Low
Product | pom | developer id | kjackson | Low
Product | pom | developer id | koch | Low
Product | pom | developer id | koehlecn | Low
Product | pom | developer id | lehmi | Low
Product | pom | developer id | leleueri | Low
Product | pom | developer id | mmayer | Low
Product | pom | developer id | msayhoun | Low
Product | pom | developer id | pkoch | Low
Product | pom | developer id | tallison | Low
Product | pom | developer id | tboehme | Low
Product | pom | developer id | tchojecki | Low
Product | pom | developer id | tilman | Low
Product | pom | developer id | vfed | Low
Product | pom | developer name | Adam Nichols | Low
Product | pom | developer name | Andreas Lehmkühler | Low
Product | pom | developer name | Ben Litchfield | Low
Product | pom | developer name | Brian Carrier | Low
Product | pom | developer name | Carolin Köhler | Low
Product | pom | developer name | Daniel Wilson | Low
Product | pom | developer name | Eric Leleu | Low
Product | pom | developer name | Guillaume Bailleul | Low
Product | pom | developer name | Jeremias Maerki | Low
Product | pom | developer name | Johannes Koch | Low
Product | pom | developer name | John Hewson | Low
Product | pom | developer name | Jukka Zitting | Low
Product | pom | developer name | Jörg Henne | Low
Product | pom | developer name | Kevin Jackson | Low
Product | pom | developer name | Maruan Sayhoun | Low
Product | pom | developer name | Matthäus Mayer | Low
Product | pom | developer name | Phillipp Koch | Low
Product | pom | developer name | Sebastian Holder | Low
Product | pom | developer name | Thomas Chojecki | Low
Product | pom | developer name | Tilman Hausherr | Low
Product | pom | developer name | Tim Allison | Low
Product | pom | developer name | Timo Boehme | Low
Product | pom | developer name | Villu Ruusmann | Low
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | PDFBox JBIG2 ImageIO plugin | High
Product | pom | organization name | The Apache Software Foundation | Low
Product | pom | organization url | http://pdfbox.apache.org | Low
Product | pom | parent-artifactid | apache | Medium
Product | pom | parent-groupid | org.apache | Medium
Version | Manifest | Implementation-Version | 3.0.4 | High
Version | pom | parent-version | 3.0.4 | Low
Version | pom | version | 3.0.4 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4 (Confidence:High)

### ocr.tesseract.zip: jboss-vfs.jar

Description:

    A VFS library

License:

    Apache License 2.0: http://repository.jboss.org/licenses/apache-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jboss-vfs.jar
MD5: ecf3234794d1b7d03dc1eb5380328e04
SHA1: 748b9f156f35bf63ead9887f040cfc48af18f7f0
SHA256:33a84eac3f1027551146247e3ef4057dc8840cfc8cd436cb2f925b6f5d2126e9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jboss-vfs | High
Vendor | jar | package name | jboss | Highest
Vendor | jar | package name | vfs | Highest
Vendor | Manifest | automatic-module-name | org.jboss.vfs | Medium
Vendor | Manifest | build-jdk-spec | 11 | Low
Vendor | Manifest | implementation-url | http://www.jboss.org | Low
Vendor | Manifest | Implementation-Vendor | JBoss, A division of Red Hat, Inc | High
Vendor | Manifest | specification-vendor | JBoss, A division of Red Hat, Inc | Low
Vendor | pom | artifactid | jboss-vfs | Low
Vendor | pom | groupid | org.jboss | Highest
Vendor | pom | name | JBoss VFS | High
Vendor | pom | organization name | JBoss, A division of Red Hat, Inc | High
Vendor | pom | organization url | http://www.jboss.org | Medium
Vendor | pom | parent-artifactid | jboss-parent | Low
Vendor | pom | url | http://www.jboss.org | Highest
Product | file | name | jboss-vfs | High
Product | jar | package name | jboss | Highest
Product | jar | package name | vfs | Highest
Product | Manifest | automatic-module-name | org.jboss.vfs | Medium
Product | Manifest | build-jdk-spec | 11 | Low
Product | Manifest | Implementation-Title | JBoss VFS | High
Product | Manifest | implementation-url | http://www.jboss.org | Low
Product | Manifest | specification-title | JBoss VFS | Medium
Product | pom | artifactid | jboss-vfs | Highest
Product | pom | groupid | org.jboss | Highest
Product | pom | name | JBoss VFS | High
Product | pom | organization name | JBoss, A division of Red Hat, Inc | Low
Product | pom | organization url | http://www.jboss.org | Low
Product | pom | parent-artifactid | jboss-parent | Medium
Product | pom | url | http://www.jboss.org | Medium
Version | Manifest | Implementation-Version | 3.3.2.Final | High
Version | pom | parent-version | 3.3.2.Final | Low
Version | pom | version | 3.3.2.Final | Highest

#### Identifiers

- pkg:maven/org.jboss/jboss-vfs@3.3.2.Final (Confidence:High)

### ocr.tesseract.zip: jna.jar

Description:

    JNA Library

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar
MD5: 97fcb12698f8c1e4eed897e5c490e098
SHA1: 50c5b36af5dfd16cab07a1616046a50ec52d1e32
SHA256:9e5cdb5ff4ad07bf116cb2b37b2b84987041d79a8991766a08b79b085c6bb6c2
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jna | High
Vendor | jar | package name | jna | Highest
Vendor | jar | package name | jna | Low
Vendor | jar | package name | sun | Highest
Vendor | jar | package name | sun | Low
Vendor | jar (hint) | package name | oracle | Highest
Vendor | jar (hint) | package name | oracle | Low
Vendor | Manifest | automatic-module-name | com.sun.jna | Medium
Vendor | Manifest | bundle-activationpolicy | lazy | Low
Vendor | Manifest | bundle-category | jni | Low
Vendor | Manifest | bundle-nativecode | com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 | Low
Vendor | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.6 | Low
Vendor | Manifest | bundle-symbolicname | com.sun.jna | Medium
Vendor | Manifest | Implementation-Vendor | JNA Development Team | High
Vendor | Manifest | specification-vendor | JNA Development Team | Low
Product | file | name | jna | High
Product | jar | package name | jna | Highest
Product | jar | package name | jna | Low
Product | jar | package name | library | Highest
Product | jar | package name | native | Highest
Product | jar | package name | sun | Highest
Product | jar | package name | win32 | Highest
Product | Manifest | automatic-module-name | com.sun.jna | Medium
Product | Manifest | bundle-activationpolicy | lazy | Low
Product | Manifest | bundle-category | jni | Low
Product | Manifest | Bundle-Name | jna | Medium
Product | Manifest | bundle-nativecode | com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 | Low
Product | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.6 | Low
Product | Manifest | bundle-symbolicname | com.sun.jna | Medium
Product | Manifest | Implementation-Title | com.sun.jna | High
Product | Manifest | specification-title | Java Native Access (JNA) | Medium
Version | jar | package name | jna | Highest
Version | jar | package name | sun | Highest
Version | jar | package name | win32 | Highest
Version | Manifest | Bundle-Version | 5.18.1 | High
Version | Manifest | Implementation-Version | 5.18.1 (b0) | High

#### Identifiers

- cpe:2.3:a:oracle:java_se:5.18.1:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: 302945a811fd8e21bcdd5226c73b6f74
SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607c
SHA256:b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 2d2475f1f026dd54e9f3e787ae4f81da
SHA1: 27ff882ac271db547aee520b38e3ba9aa91e136c
SHA256:5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: 0caa1ef75a807f9dde05084fa2219a5c
SHA1: 2f5e1cd82cde192905c7510ce99037b67d980640
SHA256:752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: lept4j.jar

Description:

            # Lept4J

            ## Description:

            A Java JNA wrapper for Leptonica Image Processing library.

            Lept4J is released and distributed under the Apache License, v2.0.

License:

    Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar
MD5: 70889e28b7569dd54e7da9ced01dabdf
SHA1: ec69d554f05e030b5e06295a4d39057634759549
SHA256:5feb69a8fc9550809b23cb980270cdf99368dea330ba7d98789e2dc93f8bef6f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | lept4j | High
Vendor | jar | package name | lept4j | Highest
Vendor | jar | package name | leptonica | Highest
Vendor | jar | package name | net | Highest
Vendor | jar | package name | sourceforge | Highest
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | pom | artifactid | lept4j | Low
Vendor | pom | developer email | nguyenq@users.sf.net | Low
Vendor | pom | developer name | Quan Nguyen | Medium
Vendor | pom | groupid | net.sourceforge.lept4j | Highest
Vendor | pom | name | Lept4J - Leptonica for Java | High
Vendor | pom | url | nguyenq/lept4j | Highest
Product | file | name | lept4j | High
Product | jar | package name | lept4j | Highest
Product | jar | package name | leptonica | Highest
Product | jar | package name | net | Highest
Product | jar | package name | sourceforge | Highest
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | pom | artifactid | lept4j | Highest
Product | pom | developer email | nguyenq@users.sf.net | Low
Product | pom | developer name | Quan Nguyen | Low
Product | pom | groupid | net.sourceforge.lept4j | Highest
Product | pom | name | Lept4J - Leptonica for Java | High
Product | pom | url | nguyenq/lept4j | High
Version | pom | version | 1.19.1 | Highest

#### Identifiers

- pkg:maven/net.sourceforge.lept4j/lept4j@1.19.1 (Confidence:High)

### ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar/win32-x86-64/libleptonica1841.dll
MD5: 981b8e38e33018fff693c8e3ec0f2254
SHA1: 91a9cd0a874d614bc8a8946d2e0a8573e8b96ac1
SHA256:0b2cb584baeb38b90033344b4d70830b33ba01396fb9142b9b733e83c8a73fb8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libleptonica1841 | High
Product | file | name | libleptonica1841 | High
Version | file | name | libleptonica1841 | Medium
Version | file | version | 1841 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar/win32-x86/libleptonica1841.dll
MD5: 64f0634192bcf75ade5ea06f8119512d
SHA1: b387acaa5209f796fb3065395548d2adcbad620e
SHA256:405e5263b72cb7d63c723fd85a124201cd66aa9a983b3a1c1e4c82003c91bcaa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libleptonica1841 | High
Product | file | name | libleptonica1841 | High
Version | file | name | libleptonica1841 | Medium
Version | file | version | 1841 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: ocr.tesseract.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/ocr.tesseract.jar
MD5: c59267d9c81529ddd1c828ef5d877d0f
SHA1: d2770bd014797822f795399054aeaed7b983e4bc
SHA256:226500032e4e5d65086a78024dd679b9af0b182107dc359b8573a6e249f46b51
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | ocr.tesseract | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | ocr | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:37 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | ocr.tesseract | High
Product | jar | package name | ocr | Highest
Product | jar | package name | ocr | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | tesseract | Highest
Product | jar | package name | tesseract | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:37 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | ocr.tesseract | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | ocr.tesseract | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:tesseract_ocr_project:tesseract_ocr:26.4.321:*:*:*:*:*:*:* (Confidence:Low)
- cpe:2.3:a:tesseract_project:tesseract:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: pdfbox-debugger.jar

Description:

        The Apache PDFBox library is an open source Java tool for working with PDF documents.
        This artefact contains the PDFDebugger.

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox-debugger.jar
MD5: 85573afca8351375b49718b379abc76c
SHA1: 2c48091b1dd9be69d09e1aea657fc1e4065b08e7
SHA256:79320b36483f001661b01e9409d9b62066e07a3a4e2f9e6568d777b04896d130
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfbox-debugger | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | debugger | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | jar | package name | pdfdebugger | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox.debugger | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | pdfbox-debugger | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache PDFBox Debugger | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Product | file | name | pdfbox-debugger | High
Product | jar | package name | apache | Highest
Product | jar | package name | debugger | Highest
Product | jar | package name | pdfbox | Highest
Product | jar | package name | pdfdebugger | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox.debugger | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | Implementation-Title | Apache PDFBox Debugger | High
Product | Manifest | specification-title | Apache PDFBox Debugger | Medium
Product | pom | artifactid | pdfbox-debugger | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache PDFBox Debugger | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Version | Manifest | Implementation-Version | 3.0.7 | High
Version | pom | version | 3.0.7 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/pdfbox-debugger@3.0.7 (Confidence:High)

### ocr.tesseract.zip: pdfbox.jar

Description:

            The Apache PDFBox library is an open source Java tool for working with PDF documents.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox.jar
MD5: adeb0637e9451d49e610ee3bc16781cd
SHA1: ecfc1bbfa656d3e330b8cc9e6996a18cde1c9bd0
SHA256:7cefa717622330951b4343abf1e5d36bccb11f4ba245d78aaa73251d08fec623
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfbox | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Vendor | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | pdfbox | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache PDFBox | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Product | file | name | pdfbox | High
Product | jar | package name | apache | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Product | Manifest | Bundle-Name | Apache PDFBox | Medium
Product | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Product | Manifest | Implementation-Title | Apache PDFBox | High
Product | Manifest | specification-title | Apache PDFBox | Medium
Product | pom | artifactid | pdfbox | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache PDFBox | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Version | Manifest | Bundle-Version | 3.0.7 | High
Version | Manifest | Implementation-Version | 3.0.7 | High
Version | pom | version | 3.0.7 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/pdfbox@3.0.7 (Confidence:High)

### ocr.tesseract.zip: tess4j.jar

Description:

            # Tess4J

            ## Description:

            A Java JNA wrapper for Tesseract OCR API.

            Tess4J is released and distributed under the Apache License, v2.0.

            ## Features:

            The library provides optical character recognition (OCR) support for:

            TIFF, JPEG, GIF, PNG, and BMP image formats
            Multi-page TIFF images
            PDF document format

License:

    Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar
MD5: f6a0f08fbc08771303e5cb8dffbc949a
SHA1: 851d6f93d97a155d8831736ad1031a539946014e
SHA256:e65bcc6328ab575684038d45e1891fa48e0d8255097a628baee0d8cfeb5ea816
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | tess4j | High
Vendor | jar | package name | net | Highest
Vendor | jar | package name | recognition | Highest
Vendor | jar | package name | sourceforge | Highest
Vendor | jar | package name | tess4j | Highest
Vendor | jar | package name | tesseract | Highest
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | implementation-url | http://tess4j.sourceforge.net | Low
Vendor | Manifest | Implementation-Vendor | Tess4J | High
Vendor | Manifest | specification-vendor | Tess4J | Low
Vendor | pom | artifactid | tess4j | Low
Vendor | pom | developer email | nguyenq@users.sf.net | Low
Vendor | pom | developer email | osoriojaques@gmail.com | Low
Vendor | pom | developer name | O.J. Sousa Rodrigues | Medium
Vendor | pom | developer name | Quan Nguyen | Medium
Vendor | pom | groupid | net.sourceforge.tess4j | Highest
Vendor | pom | name | Tess4J - Tesseract for Java | High
Vendor | pom | organization name | Tess4J | High
Vendor | pom | organization url | http://tess4j.sourceforge.net | Medium
Vendor | pom | url | http://tess4j.sourceforge.net | Highest
Product | file | name | tess4j | High
Product | jar | package name | net | Highest
Product | jar | package name | recognition | Highest
Product | jar | package name | sourceforge | Highest
Product | jar | package name | tess4j | Highest
Product | jar | package name | tesseract | Highest
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | Implementation-Title | Tess4J - Tesseract for Java | High
Product | Manifest | implementation-url | http://tess4j.sourceforge.net | Low
Product | Manifest | specification-title | Tess4J - Tesseract for Java | Medium
Product | pom | artifactid | tess4j | Highest
Product | pom | developer email | nguyenq@users.sf.net | Low
Product | pom | developer email | osoriojaques@gmail.com | Low
Product | pom | developer name | O.J. Sousa Rodrigues | Low
Product | pom | developer name | Quan Nguyen | Low
Product | pom | groupid | net.sourceforge.tess4j | Highest
Product | pom | name | Tess4J - Tesseract for Java | High
Product | pom | organization name | Tess4J | Low
Product | pom | organization url | http://tess4j.sourceforge.net | Low
Product | pom | url | http://tess4j.sourceforge.net | Medium
Version | Manifest | Implementation-Version | 5.12.0 | High
Version | pom | version | 5.12.0 | Highest

#### Identifiers

- pkg:maven/net.sourceforge.tess4j/tess4j@5.12.0 (Confidence:High)
- cpe:2.3:a:tesseract_project:tesseract:5.12.0:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: tess4j.jar: libtesseract541.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar/win32-x86-64/libtesseract541.dll
MD5: 1246c1e50200dc43722e926e28fc7c03
SHA1: d8a78040e9c7c71ccaeb627b73c41c66a18b5157
SHA256:8180efb176e09b7218144fe69d84c0cf6b6187e20d8529f1138bd77396d6f4fa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libtesseract541 | High
Product | file | name | libtesseract541 | High
Version | file | name | libtesseract541 | Medium
Version | file | version | 541 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: tess4j.jar: libtesseract541.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar/win32-x86/libtesseract541.dll
MD5: cbf57c8eb12e95512e67638f344ae537
SHA1: 5531d539121fd0aa57d11febd2e8b2a5c13fca05
SHA256:d4d1843d9efeeec1ca53c4ebe6d39e22e5bf17f5bee8b9eedb3bcef7c3c8c84d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libtesseract541 | High
Product | file | name | libtesseract541 | High
Version | file | name | libtesseract541 | Medium
Version | file | version | 541 | Medium

#### Identifiers

- None

### opentest4j-1.3.0.jar

Description:

    Open Test Alliance for the JVM

License:

    The Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.opentest4j/opentest4j/1.3.0/152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e/opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256:48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Project/Scope: standalone:inetPlugin
opentest4j-1.3.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.14.0
- pkg:maven/org.junit.jupiter/junit-jupiter@5.14.0
- pkg:maven/org.junit.platform/junit-platform-suite@1.14.0

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | opentest4j | High
Vendor | gradle | artifactid | opentest4j | Highest
Vendor | gradle | groupid | org.opentest4j | Highest
Vendor | jar | package name | opentest4j | Highest
Vendor | jar | package name | opentest4j | Low
Vendor | Manifest | build-date | 2023-07-06 | Low
Vendor | Manifest | build-revision | 214973bfa4e7e9be7d04e623202cc4147c7036d2 | Low
Vendor | Manifest | build-time | 14:25:06.116+0200 | Low
Vendor | Manifest | bundle-symbolicname | org.opentest4j | Medium
Vendor | Manifest | Implementation-Vendor | opentest4j.org | High
Vendor | Manifest | specification-vendor | opentest4j.org | Low
Vendor | pom | artifactid | opentest4j | Low
Vendor | pom | developer email | business@johanneslink.net | Low
Vendor | pom | developer email | mail@marcphilipp.de | Low
Vendor | pom | developer email | matthias.merdes@heidelpay.com | Low
Vendor | pom | developer email | sam@sambrannen.com | Low
Vendor | pom | developer email | stefan.bechtold@me.com | Low
Vendor | pom | developer id | bechte | Medium
Vendor | pom | developer id | jlink | Medium
Vendor | pom | developer id | marcphilipp | Medium
Vendor | pom | developer id | mmerdes | Medium
Vendor | pom | developer id | sbrannen | Medium
Vendor | pom | developer name | Johannes Link | Medium
Vendor | pom | developer name | Marc Philipp | Medium
Vendor | pom | developer name | Matthias Merdes | Medium
Vendor | pom | developer name | Sam Brannen | Medium
Vendor | pom | developer name | Stefan Bechtold | Medium
Vendor | pom | groupid | org.opentest4j | Highest
Vendor | pom | name | org.opentest4j:opentest4j | High
Vendor | pom | url | ota4j-team/opentest4j | Highest
Product | file | name | opentest4j | High
Product | gradle | artifactid | opentest4j | Highest
Product | jar | package name | opentest4j | Highest
Product | Manifest | build-date | 2023-07-06 | Low
Product | Manifest | build-revision | 214973bfa4e7e9be7d04e623202cc4147c7036d2 | Low
Product | Manifest | build-time | 14:25:06.116+0200 | Low
Product | Manifest | Bundle-Name | opentest4j | Medium
Product | Manifest | bundle-symbolicname | org.opentest4j | Medium
Product | Manifest | Implementation-Title | opentest4j | High
Product | Manifest | specification-title | opentest4j | Medium
Product | pom | artifactid | opentest4j | Highest
Product | pom | developer email | business@johanneslink.net | Low
Product | pom | developer email | mail@marcphilipp.de | Low
Product | pom | developer email | matthias.merdes@heidelpay.com | Low
Product | pom | developer email | sam@sambrannen.com | Low
Product | pom | developer email | stefan.bechtold@me.com | Low
Product | pom | developer id | bechte | Low
Product | pom | developer id | jlink | Low
Product | pom | developer id | marcphilipp | Low
Product | pom | developer id | mmerdes | Low
Product | pom | developer id | sbrannen | Low
Product | pom | developer name | Johannes Link | Low
Product | pom | developer name | Marc Philipp | Low
Product | pom | developer name | Matthias Merdes | Low
Product | pom | developer name | Sam Brannen | Low
Product | pom | developer name | Stefan Bechtold | Low
Product | pom | groupid | org.opentest4j | Highest
Product | pom | name | org.opentest4j:opentest4j | High
Product | pom | url | ota4j-team/opentest4j | High
Version | file | version | 1.3.0 | High
Version | gradle | version | 1.3.0 | Highest
Version | Manifest | Bundle-Version | 1.3.0 | High
Version | Manifest | Implementation-Version | 1.3.0 | High
Version | pom | version | 1.3.0 | Highest

#### Identifiers

- pkg:maven/org.opentest4j/opentest4j@1.3.0 (Confidence:High)

### parser.image.zip: parser.image.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.image.zip/parser.image.jar
MD5: 32ac9f598a64970b2fd7d578b9ea8dfa
SHA1: ec3f6dc3a93960dcf0fe0ab44c9993f572b4de3d
SHA256:45738f0d51241c92238bb06ba03826f60c4f2f0d66f7c79c9e6a627c8ea3b3f3
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.image | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:37 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.image | High
Product | jar | package name | imageparser | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugin | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:37 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.image | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.image | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### parser.pdf.config.zip: parser.pdf.config.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.pdf.config.zip/parser.pdf.config.jar
MD5: cb2094ab631437adb7e0aa9b5816cd08
SHA1: f2ab6d892ea1555a2a6b7165e9115e22ac2412cd
SHA256:3c1e23b0efbee0852ae397a6e1026ef151377a1dbf1363de90a2e85ceed1dec8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.pdf.config | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:37 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.pdf.config | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | pdfparserconfig | Low
Product | jar | package name | plugin | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:37 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.pdf.config | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.pdf.config | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### parser.text.zip: parser.text.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.text.zip/parser.text.jar
MD5: 2a38f7c490805e32bcb7824cca8f1d5d
SHA1: aadf448826e02c47619ef2d418235a90c30ab5d4
SHA256:339225319478c550bc457238e8a3c9c6bea50dd7071b640936a8c252c878ca2f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.text | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:38 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.text | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugin | Low
Product | jar | package name | textparser | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:38 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.text | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.text | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.standalone.zip: pdfc.standalone.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar
MD5: 2c90bccc3c0e327ef91018e667cb30c0
SHA1: 76a5d3359b9ba7d5e24ae3c4c634e1582636f211
SHA256:cfc2425fa9f8319a33c0d856219217aeb49040f5d7497d394a132df72b0d9d51
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc.standalone | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | standalone | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:45 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfc.standalone | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | standalone | Highest
Product | jar | package name | standalone | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:45 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfc.standalone | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfc.standalone | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.standalone.zip: pdfc.standalone.jar: bridge.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridge.js
MD5: 93a24df267249dca305f5af83c047f48
SHA1: 2690836189ad0dd3715568d15b8bba5a3a9fbc93
SHA256:b17c61dcfca7e59009ebe3e57ec254ad68c2dc080d9a194d867a185902e6a433
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: bridgeConfig.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridgeConfig.js
MD5: 50c7b33549870b71c25e22443829ba78
SHA1: 0a50eb333055885b58537a1463009c6d321ca110
SHA256:7ba9c85404a965c72b736350b26b97bef813b9e523081ed2bf1f9b7303ba0ce4
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: bridgePDFC.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridgePDFC.js
MD5: 918410e4e9590ab87b5ca1ea983ebdf1
SHA1: 422e9fa020147687e2c79fa87f8d7ac23d964df1
SHA256:3d95bb11030e08751e23f02d299b19e2c8db823a14217bdc0cea034a1e23199d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: extraMenu.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/extraMenu.js
MD5: 76f716ef25759cac5242607c7d46afab
SHA1: ffd9728b1116de8148c96cb1aac069abc994692f
SHA256:0f2b1cc0136aacbc57993ce598a490e36849a34cdaccea15f213b1f2410fc002
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: removeHeader.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/removeHeader.js
MD5: 6155f56ea46454fd9b26ec029b07cb4c
SHA1: fdbb377d77e7a33fccd3e56eda617da18a45af3c
SHA256:7f74294ea3dd2d4561aadf5deb9e1436af5cd08d3f53754b8c2e2321ddad3687
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: removePDFCElements.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/removePDFCElements.js
MD5: cf23507d05d2a8f690f9489d131e7de7
SHA1: bff6a66569787ecf08f314c176220be0ef16f86c
SHA256:3d2d7526c75020284374f9298157f8fb7d0c37d38d079cffda17b94f9b73690a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: theme.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/theme.js
MD5: 9ee2557b2355cd5367ad7b7cdf3505e2
SHA1: 6a8e3c4a8964395018faac989bbbd37abf148cd3
SHA256:0acc32f71a37d0f0f7485be6746f688e449df07e6db3b5ad01973ad7fc3aa53a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: translation.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/translation.js
MD5: 087098ce4993357914ab7ee2ca130bc0
SHA1: b77b0d98a5a98b3a5c9317333f29c0c18d36d86e
SHA256:26eb8ace7faad440f3aedd47c1c3f6c1603fe7b150213ad32a4251d1226a3895
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:collate:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/collate/pom.xml
MD5: 8a5e69099a365660c81e3f1b515012de
SHA1: e04309ffaf86f3d740d5eaa8b605c9e5a55a7db5
SHA256:ffde34d7e990dfa25396f8095e7c6680db6abf4e536a62e8da24dfe4faef5ec0
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | collate | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | collate | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/collate@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:core:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/core/pom.xml
MD5: 7c54dfd4dcbb4cc426efc3a02c44e7b7
SHA1: 8249f7edd365676632db5f30c3974ba539b5fb45
SHA256:eb330e7f299f27267cdf5dac63ce4e248431db5364e5fe5d2c52a05e9a3339f8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | core | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | core | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/core@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:currdata:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/currdata/pom.xml
MD5: fef4cb909d7b27b6ed7e8e2a63a74385
SHA1: f1c19ca31a31a8fedbfcfb1926e81b5f73bab191
SHA256:e5b381f33e2eac3b53bcb9a8c37431be4b0115ae98e7364cf07289d6510618bf
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | currdata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | currdata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/currdata@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:langdata:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/langdata/pom.xml
MD5: 8a25895e73898cb1f2cf7e06f5815d61
SHA1: 01b90c95a6ba094cf50856dc56773de4589ee6b4
SHA256:16353d688a9a10c1d6d0033666390677d27d052ad50235958ea4fa233df21a75
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | langdata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | langdata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/langdata@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:regiondata:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/regiondata/pom.xml
MD5: 3a4e2bd7c7c6a6d634c5e8daec4cc986
SHA1: b195315e8f8d2168a2a477c9dfde5d140184dd96
SHA256:22c0732f107b18bc77faed127bafa209e50a4be8e35c22fac0723c0efaebc4de
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | regiondata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | regiondata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/regiondata@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:tools_taglets:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/tools_taglets/pom.xml
MD5: a9a857c184540a60fd84ba9924665b35
SHA1: 25def12ca718c1a57ce365cba497a2c509b65ceb
SHA256:8dbd68f4b2100a898faf01baa2206d90d0e3c5dbc4a81f9aaa86210540f16d01
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | tools_taglets | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | tools_taglets | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/tools_taglets@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:translit:78.2)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/translit/pom.xml
MD5: 62aada535264891418d1ff71dff22536
SHA1: 056c25cc61d31788d585b5aa47bc3c93c17623e1
SHA256:e2b4c57b167d754332a04c048c7a2e2c0e31f6bd16b5a53e1352fe3fb7aa6ad3
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | translit | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | translit | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/translit@78.2 (Confidence:High)

### pdfc.zip: icu4j.jar

Description:

    International Components for Unicode for Java (ICU4J) is a mature, widely used Java library
        providing Unicode and Globalization support

License:

    Unicode-3.0: https://raw.githubusercontent.com/unicode-org/icu/maint/maint-78/LICENSE

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar
MD5: 75bcc3702dded8ec60351f6ad2beaa61
SHA1: 31b9d9a35d283432d0ce1a8b6e2631dcfd046ab8
SHA256:70627c3ff4b9077f6c3dc2156fb480821f9c1a041b645373f2a0391aae3552a1
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | icu4j | High
Vendor | file (hint) | name | icu-project | High
Vendor | file (hint) | name | unicode | High
Vendor | jar | package name | ibm | Highest
Vendor | jar | package name | icu | Highest
Vendor | Manifest | automatic-module-name | com.ibm.icu | Medium
Vendor | Manifest | build-jdk-spec | 11 | Low
Vendor | Manifest | bundle-copyright | © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html | Low
Vendor | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low
Vendor | Manifest | bundle-symbolicname | com.ibm.icu | Medium
Vendor | Manifest | Implementation-Vendor | Unicode, Inc. | High
Vendor | Manifest | Implementation-Vendor-Id | org.unicode | Medium
Vendor | pom | artifactid | icu4j | Low
Vendor | pom | developer id | markusicu | Medium
Vendor | pom | developer id | richgillam | Medium
Vendor | pom | developer name | Markus Scherer | Medium
Vendor | pom | developer name | Richard Gillam | Medium
Vendor | pom | developer org | Google | Medium
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | name | ICU4J | High
Vendor | pom | url | https://icu.unicode.org/ | Highest
Vendor | pom (hint) | artifactid | icu-project | Low
Vendor | pom (hint) | artifactid | unicode | Low
Vendor | pom (hint) | name | icu-project | High
Vendor | pom (hint) | name | unicode | High
Product | file | name | icu4j | High
Product | hint analyzer | product | international_components_for_unicode | Highest
Product | jar | package name | ibm | Highest
Product | jar | package name | icu | Highest
Product | Manifest | automatic-module-name | com.ibm.icu | Medium
Product | Manifest | build-jdk-spec | 11 | Low
Product | Manifest | bundle-copyright | © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html | Low
Product | Manifest | Bundle-Name | ICU4J | Medium
Product | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low
Product | Manifest | bundle-symbolicname | com.ibm.icu | Medium
Product | Manifest | Implementation-Title | International Components for Unicode for Java | High
Product | Manifest | specification-title | International Components for Unicode for Java | Medium
Product | pom | artifactid | icu4j | Highest
Product | pom | developer id | markusicu | Low
Product | pom | developer id | richgillam | Low
Product | pom | developer name | Markus Scherer | Low
Product | pom | developer name | Richard Gillam | Low
Product | pom | developer org | Google | Low
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | name | ICU4J | High
Product | pom | url | https://icu.unicode.org/ | Medium
Version | Manifest | Bundle-Version | 78.2 | High
Version | Manifest | Implementation-Version | 78.2 | High
Version | pom | version | 78.2 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/icu4j@78.2 (Confidence:High)
- cpe:2.3:a:icu-project:international_components_for_unicode:78.2:*:*:*:*:*:*:* (Confidence:Low)
- cpe:2.3:a:unicode:international_components_for_unicode:78.2:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.zip: pdfc-javadoc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar
MD5: 8d46a3d51d3f899f4ae92330932a0d36
SHA1: 178c6b7ba9bfdac84a839ce261eef93b9d525fcb
SHA256:01a6eacb620d96a170aff1a55ed1e5760695e866d6995165a0c5133e4ff8fa94
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc-javadoc | High
Product | file | name | pdfc-javadoc | High

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: jquery-3.7.1.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/jquery-3.7.1.min.js
MD5: 2c872dbe60f4ba70fb85356113d8b35e
SHA1: ee48592d1fff952fcf06ce0b666ed4785493afdc
SHA256:fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/jquery-ui.min.js
MD5: ab481ee8cd3ebac4edfcbd2cae5b0dde
SHA1: a3df331b23b1dc7d01d219cf426ff3148da3ac33
SHA256:4c0b2b6513452adf188402da32faea446b326e0a3362eda6fa8603e73594a567
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: member-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/member-search-index.js
MD5: b01d05f296d74afcf71737673490e323
SHA1: 0403094ace9c654113749dbd2ccaacd518328439
SHA256:72eca8318f6c503a8e7f6d467b44b866bbadd0fc1b3ddfb41f7cc9209f1aa5ac
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: module-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/module-search-index.js
MD5: a33da0f469acbd03f77bf407bac505f5
SHA1: 1e996ce630c6e1ada3ea86d7b71dabca0180f8e8
SHA256:814a05983e3267d591c7e62b314eb8eb0504eee844c8a70d494f6edbaa0f4f18
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: package-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/package-search-index.js
MD5: e8d43516ba9ee9dcd2899b83aedb3825
SHA1: a7e2eda4e97a4e984bea608b0d27475c7b0e3741
SHA256:3c19f50455b2b5de577fdf3463d89a66966957b54cebf78aa9a9ebe487c06f63
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: script.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/script.js
MD5: 14f041a73b41a06e14ae5119bf58a412
SHA1: 3bde180527bb365eea5f582d8fa6c08270c9b745
SHA256:795ddba417f4a106bbfae3c84cb2c61363e0ce9b29163eaefdc9c334db1f9b2d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: search-page.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/search-page.js
MD5: 91487edb9c0528bb329ed378cd74987f
SHA1: 001ab7444e3ba1252d4daf7f870d51bb287cd4e7
SHA256:3bd59d168258fa81f6ffe473feec32bae0e0a5d571ecc89a1eb4fc04defed1b7
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: search.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-files/search.js
MD5: e1bbc8e050e9e3033a72b1e719fc3957
SHA1: 01e8b1cc5816ddc972f7e6e4dc28bf14a1dcc21c
SHA256:fb8492aa12ea5e8c74045f0f909c7f9afc12cb44ce165e1b18a4d0cd1c49908c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: tag-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/tag-search-index.js
MD5: d15c346e935323a56c21555879f3d43f
SHA1: a5a163ac6438235738dd8b58195f76425f01b8fd
SHA256:2c68a7d29a049af9aca94ce6d94e50402908947084df988d3e2b783338eaf480
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: type-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/type-search-index.js
MD5: ecd8cad7c6630d199c0aae05c5f2f261
SHA1: 7a9e897d8b081754a3b89168ac340ffaad2f509d
SHA256:8926c9b4a72ca5bd361c58ddc6bdb452441e2ce161125cb1af00665a7c7aa192
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc.jar
MD5: bd5b05f30665f9e573d9d6b72bba7b64
SHA1: dd9c396667dfed76972ec7467c54bfe7358adfb4
SHA256:f5a9e3abbe701294fa1f5caad2193001a0b74e268db35c0014aa4f64b1a609cd
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:27 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | permissions | Highest
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:27 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfc | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfc | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | jar | package name | permissions | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### pdfcserver.zip: pdfcserver.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcserver.zip/pdfcserver.jar
MD5: 6160cc3a2f3461fa15ca778119d104fe
SHA1: 8f50c1ebbb9e944a1d79401eeb091cc595d74015
SHA256:ee8dd9843a8be84c702f043c2a016be2da569dbe631aaec207a086fe57deaccc
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfcserver | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | server | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2026-08-07 19:26 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfcserver | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | persistence | Low
Product | jar | package name | server | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2026-08-07 19:26 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfcserver | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfcserver | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### pdfcserver.zip: pdfcserver.jar: compareconfigrenderer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcserver.zip/pdfcserver.jar/com/inet/pdfc/server/structure/compareconfigrenderer.js
MD5: ca54201f240ce7fea03db4f46ecd818a
SHA1: 420f31523aa51830c134d193dae0a692eff5b4da
SHA256:0aa678824bea93ed82b1747fc75512915488e2d65b5f11c9c22d4214bb129cec
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfcsetupwizard.zip: pdfcsetupwizard.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcsetupwizard.zip/pdfcsetupwizard.jar
MD5: f0cd556aec27d6dc1f80dd79738d0e34
SHA1: 854149ee83be5d6dca256e639d8482d25e0067b1
SHA256:9537401568b2414dc990994ba7d5baf2d59658c4392ddbe9befcb6f0f042c695
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfcsetupwizard | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | setupwizard | Low
Vendor | Manifest | built-date | 2026-08-07 19:38 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfcsetupwizard | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | setupwizard | Low
Product | jar | package name | steps | Low
Product | Manifest | built-date | 2026-08-07 19:38 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfcsetupwizard | High
Product | Manifest | specification-title | pdfcsetupwizard | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### pdfcsetupwizard.zip: pdfcsetupwizard.jar: controller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcsetupwizard.zip/pdfcsetupwizard.jar/com/inet/pdfc/setupwizard/steps/license/controller.js
MD5: b21c2ee13289577d98bbb1687726af34
SHA1: 9032230fff5222847734d3cb4723103733f88e92
SHA256:6c1d316ea3da704c21cc9e3fa2426863fa173c3d44a212506fc4bc1e187991e9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### processbridge.pdfc.zip: processbridge.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/processbridge.pdfc.zip/processbridge.pdfc.jar
MD5: 54f892c49d1a61d24bf003726a489a8a
SHA1: 3f5f368d31b17fe6867f527cc04b834fb01894b6
SHA256:89da20cc89cf1ca84cc0a88a7e8a4a3aaa84c224084a994d934cb75bef5f4d91
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | processbridge.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | processbridge | Low
Vendor | Manifest | built-date | 2026-08-07 19:41 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | processbridge.pdfc | High
Product | jar | package name | api | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | processbridge | Highest
Product | jar | package name | processbridge | Low
Product | Manifest | built-date | 2026-08-07 19:41 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | processbridge.pdfc | High
Product | Manifest | specification-title | processbridge.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

### slf4j-api-2.0.17.jar

Description:

    The slf4j API

License:

    https://opensource.org/license/mit

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.slf4j/slf4j-api/2.0.17/d9e58ac9c7779ba3bf8142aff6c830617a7fe60f/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Project/Scope: standalone:inetPlugin
slf4j-api-2.0.17.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@26.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | slf4j-api | High
Vendor | gradle | artifactid | slf4j-api | Highest
Vendor | gradle | groupid | org.slf4j | Highest
Vendor | jar | package name | slf4j | Highest
Vendor | Manifest | build-jdk-spec | 21 | Low
Vendor | Manifest | bundle-docurl | http://www.slf4j.org | Low
Vendor | Manifest | bundle-symbolicname | slf4j.api | Medium
Vendor | Manifest | multi-release | true | Low
Vendor | pom | artifactid | slf4j-api | Low
Vendor | pom | groupid | org.slf4j | Highest
Vendor | pom | name | SLF4J API Module | High
Vendor | pom | parent-artifactid | slf4j-parent | Low
Vendor | pom | url | http://www.slf4j.org | Highest
Product | file | name | slf4j-api | High
Product | gradle | artifactid | slf4j-api | Highest
Product | jar | package name | slf4j | Highest
Product | Manifest | build-jdk-spec | 21 | Low
Product | Manifest | bundle-docurl | http://www.slf4j.org | Low
Product | Manifest | Bundle-Name | SLF4J API Module | Medium
Product | Manifest | bundle-symbolicname | slf4j.api | Medium
Product | Manifest | Implementation-Title | slf4j-api | High
Product | Manifest | multi-release | true | Low
Product | pom | artifactid | slf4j-api | Highest
Product | pom | groupid | org.slf4j | Highest
Product | pom | name | SLF4J API Module | High
Product | pom | parent-artifactid | slf4j-parent | Medium
Product | pom | url | http://www.slf4j.org | Medium
Version | file | version | 2.0.17 | High
Version | gradle | version | 2.0.17 | Highest
Version | Manifest | Bundle-Version | 2.0.17 | High
Version | Manifest | Implementation-Version | 2.0.17 | High
Version | pom | version | 2.0.17 | Highest

#### Identifiers

- pkg:maven/org.slf4j/slf4j-api@2.0.17 (Confidence:High)

### taskplanner.pdfc.zip: taskplanner.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/taskplanner.pdfc.zip/taskplanner.pdfc.jar
MD5: 7568ad2ec2fbe1f2b0f3a4ea2f5823b0
SHA1: 1d4130d1a82690e19ef9890f557e34e2c72d29ae
SHA256:16eaf29f6f02c1cfbe7cbd32751f47a7d9536ae74af799fd6fa572fba3662d7e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | taskplanner.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | taskplanner | Low
Vendor | Manifest | built-date | 2026-08-07 19:42 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | taskplanner.pdfc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | taskplanner | Highest
Product | jar | package name | taskplanner | Low
Product | Manifest | built-date | 2026-08-07 19:42 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | taskplanner.pdfc | High
Product | Manifest | specification-title | taskplanner.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 26.4.321 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:26.4.321:*:*:*:*:*:*:* (Confidence:Low)

## Suppressed Vulnerabilities

### ocr.tesseract.zip: jbig2-imageio.jar

Description:

    	Java Image I/O plugin for reading JBIG2-compressed image data.
    	Formerly known as the levigo JBig2 ImageIO plugin (com.levigo.jbig2:levigo-jbig2-imageio).

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jbig2-imageio.jar
MD5: c51f45dc3d29bbf716774f9ff9e95ad6
SHA1: ad09a9bb94ea791ea81fb6c5bc2b13dd77872598
SHA256: 29cb2951622f10acf61fd0656c4e6fa5562194a9095f7a1d26aa426e2f6b17eb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jbig2-imageio | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | image | Highest
Vendor | jar | package name | jbig2 | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Vendor | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | Implementation-Vendor-Id | org.apache.pdfbox | Medium
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | jbig2-imageio | Low
Vendor | pom | developer id | adam | Medium
Vendor | pom | developer id | blitchfield | Medium
Vendor | pom | developer id | carrier | Medium
Vendor | pom | developer id | danielwilson | Medium
Vendor | pom | developer id | gbailleul | Medium
Vendor | pom | developer id | hennejg | Medium
Vendor | pom | developer id | holdersn | Medium
Vendor | pom | developer id | jahewson | Medium
Vendor | pom | developer id | jeremias | Medium
Vendor | pom | developer id | jukka | Medium
Vendor | pom | developer id | kjackson | Medium
Vendor | pom | developer id | koch | Medium
Vendor | pom | developer id | koehlecn | Medium
Vendor | pom | developer id | lehmi | Medium
Vendor | pom | developer id | leleueri | Medium
Vendor | pom | developer id | mmayer | Medium
Vendor | pom | developer id | msayhoun | Medium
Vendor | pom | developer id | pkoch | Medium
Vendor | pom | developer id | tallison | Medium
Vendor | pom | developer id | tboehme | Medium
Vendor | pom | developer id | tchojecki | Medium
Vendor | pom | developer id | tilman | Medium
Vendor | pom | developer id | vfed | Medium
Vendor | pom | developer name | Adam Nichols | Medium
Vendor | pom | developer name | Andreas Lehmkühler | Medium
Vendor | pom | developer name | Ben Litchfield | Medium
Vendor | pom | developer name | Brian Carrier | Medium
Vendor | pom | developer name | Carolin Köhler | Medium
Vendor | pom | developer name | Daniel Wilson | Medium
Vendor | pom | developer name | Eric Leleu | Medium
Vendor | pom | developer name | Guillaume Bailleul | Medium
Vendor | pom | developer name | Jeremias Maerki | Medium
Vendor | pom | developer name | Johannes Koch | Medium
Vendor | pom | developer name | John Hewson | Medium
Vendor | pom | developer name | Jukka Zitting | Medium
Vendor | pom | developer name | Jörg Henne | Medium
Vendor | pom | developer name | Kevin Jackson | Medium
Vendor | pom | developer name | Maruan Sayhoun | Medium
Vendor | pom | developer name | Matthäus Mayer | Medium
Vendor | pom | developer name | Phillipp Koch | Medium
Vendor | pom | developer name | Sebastian Holder | Medium
Vendor | pom | developer name | Thomas Chojecki | Medium
Vendor | pom | developer name | Tilman Hausherr | Medium
Vendor | pom | developer name | Tim Allison | Medium
Vendor | pom | developer name | Timo Boehme | Medium
Vendor | pom | developer name | Villu Ruusmann | Medium
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | PDFBox JBIG2 ImageIO plugin | High
Vendor | pom | organization name | The Apache Software Foundation | High
Vendor | pom | organization url | http://pdfbox.apache.org | Medium
Vendor | pom | parent-artifactid | apache | Low
Vendor | pom | parent-groupid | org.apache | Medium
Product | file | name | jbig2-imageio | High
Product | jar | package name | apache | Highest
Product | jar | package name | image | Highest
Product | jar | package name | jbig2 | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Product | Manifest | Implementation-Title | PDFBox JBIG2 ImageIO plugin | High
Product | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Product | Manifest | specification-title | PDFBox JBIG2 ImageIO plugin | Medium
Product | pom | artifactid | jbig2-imageio | Highest
Product | pom | developer id | adam | Low
Product | pom | developer id | blitchfield | Low
Product | pom | developer id | carrier | Low
Product | pom | developer id | danielwilson | Low
Product | pom | developer id | gbailleul | Low
Product | pom | developer id | hennejg | Low
Product | pom | developer id | holdersn | Low
Product | pom | developer id | jahewson | Low
Product | pom | developer id | jeremias | Low
Product | pom | developer id | jukka | Low
Product | pom | developer id | kjackson | Low
Product | pom | developer id | koch | Low
Product | pom | developer id | koehlecn | Low
Product | pom | developer id | lehmi | Low
Product | pom | developer id | leleueri | Low
Product | pom | developer id | mmayer | Low
Product | pom | developer id | msayhoun | Low
Product | pom | developer id | pkoch | Low
Product | pom | developer id | tallison | Low
Product | pom | developer id | tboehme | Low
Product | pom | developer id | tchojecki | Low
Product | pom | developer id | tilman | Low
Product | pom | developer id | vfed | Low
Product | pom | developer name | Adam Nichols | Low
Product | pom | developer name | Andreas Lehmkühler | Low
Product | pom | developer name | Ben Litchfield | Low
Product | pom | developer name | Brian Carrier | Low
Product | pom | developer name | Carolin Köhler | Low
Product | pom | developer name | Daniel Wilson | Low
Product | pom | developer name | Eric Leleu | Low
Product | pom | developer name | Guillaume Bailleul | Low
Product | pom | developer name | Jeremias Maerki | Low
Product | pom | developer name | Johannes Koch | Low
Product | pom | developer name | John Hewson | Low
Product | pom | developer name | Jukka Zitting | Low
Product | pom | developer name | Jörg Henne | Low
Product | pom | developer name | Kevin Jackson | Low
Product | pom | developer name | Maruan Sayhoun | Low
Product | pom | developer name | Matthäus Mayer | Low
Product | pom | developer name | Phillipp Koch | Low
Product | pom | developer name | Sebastian Holder | Low
Product | pom | developer name | Thomas Chojecki | Low
Product | pom | developer name | Tilman Hausherr | Low
Product | pom | developer name | Tim Allison | Low
Product | pom | developer name | Timo Boehme | Low
Product | pom | developer name | Villu Ruusmann | Low
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | PDFBox JBIG2 ImageIO plugin | High
Product | pom | organization name | The Apache Software Foundation | Low
Product | pom | organization url | http://pdfbox.apache.org | Low
Product | pom | parent-artifactid | apache | Medium
Product | pom | parent-groupid | org.apache | Medium
Version | Manifest | Implementation-Version | 3.0.4 | High
Version | pom | parent-version | 3.0.4 | Low
Version | pom | version | 3.0.4 | Highest

#### Suppressed Identifiers

- cpe:2.3:a:apache:pdfbox:3.0.4:*:*:*:*:*:*:* suppressed (Confidence:Highest)
  - Notes: Excluded due to not having a newer version available. This will be checked soon to mitigate. PDFBox is a tesseract dependency and not actively used in the product file name: ocr.tesseract.zip: jbig2-imageio.jar

#### Suppressed Vulnerabilities

CVE-2026-23907 suppressed

    This issue affects the
    ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.

    The ExtractEmbeddedFiles example contains a path traversal vulnerability (CWE-22) because
    the filename that is obtained from
    PDComplexFileSpecification.getFilename() is appended to the extraction path.

    Users who have copied this example into their production code should
    review it to ensure that the extraction path is acceptable. The example
    has been changed accordingly, now the initial path and the extraction
    paths are converted into canonical paths and it is verified that
    extraction path contains the initial path. The documentation has also
    been adjusted.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:

- MEDIUM (5.3)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RC:R/MAV:A

References:

- af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
- security@apache.org - MAILING_LIST,VENDOR_ADVISORY
- security@apache.org - NOT_APPLICABLE

Vulnerable Software & Versions: (show all)

- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.0.7
- ...
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 2.0.24; versions up to (including) 2.0.35
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.0.7

CVE-2026-33929 suppressed

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.

    This issue affects the
    ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7.

    Users are recommended to update to version 2.0.37 or 3.0.8 once
    available. Until then, they should apply the fix provided in GitHub PR
    427.

    The ExtractEmbeddedFiles example contained a path traversal vulnerability (CWE-22) mentioned in CVE-2026-23907. However the change in the releases 2.0.36 and 3.0.7 is flawed because it doesn't consider the file path separator. Because of that, a user having writing rights on /home/ABC could be victim to a malicious PDF resulting in a write attempt to any path starting with /home/ABC, e.g. "/home/ABCDEF".

    Users who have copied this example into their production code should apply the mentioned change. The example
    has been changed accordingly and is available in the project repository.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:

- MEDIUM (4.3)
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RC:R/MAV:A

References:

- security@apache.org - MAILING_LIST
- security@apache.org - MAILING_LIST,VENDOR_ADVISORY
- security@apache.org - PATCH

Vulnerable Software & Versions: (show all)

- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (excluding) 3.0.8
- ...
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 2.0.24; versions up to (excluding) 2.0.37
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (excluding) 3.0.8

### ocr.tesseract.zip: pdfbox-debugger.jar

Description:

        The Apache PDFBox library is an open source Java tool for working with PDF documents.
        This artefact contains the PDFDebugger.

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox-debugger.jar
MD5: 85573afca8351375b49718b379abc76c
SHA1: 2c48091b1dd9be69d09e1aea657fc1e4065b08e7
SHA256: 79320b36483f001661b01e9409d9b62066e07a3a4e2f9e6568d777b04896d130
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfbox-debugger | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | debugger | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | jar | package name | pdfdebugger | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox.debugger | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | pdfbox-debugger | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache PDFBox Debugger | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Product | file | name | pdfbox-debugger | High
Product | jar | package name | apache | Highest
Product | jar | package name | debugger | Highest
Product | jar | package name | pdfbox | Highest
Product | jar | package name | pdfdebugger | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox.debugger | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | Implementation-Title | Apache PDFBox Debugger | High
Product | Manifest | specification-title | Apache PDFBox Debugger | Medium
Product | pom | artifactid | pdfbox-debugger | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache PDFBox Debugger | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Version | Manifest | Implementation-Version | 3.0.7 | High
Version | pom | version | 3.0.7 | Highest

#### Suppressed Identifiers

- cpe:2.3:a:apache:pdfbox:3.0.7:*:*:*:*:*:*:* suppressed (Confidence:Highest)
  - Notes: Excluded due to not having a newer version available. This will be checked soon to mitigate. PDFBox is a tesseract dependency and not actively used in the product file name: ocr.tesseract.zip: pdfbox-debugger.jar

#### Suppressed Vulnerabilities

CVE-2026-23907 suppressed

    This issue affects the
    ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.

    The ExtractEmbeddedFiles example contains a path traversal vulnerability (CWE-22) because
    the filename that is obtained from
    PDComplexFileSpecification.getFilename() is appended to the extraction path.

    Users who have copied this example into their production code should
    review it to ensure that the extraction path is acceptable. The example
    has been changed accordingly, now the initial path and the extraction
    paths are converted into canonical paths and it is verified that
    extraction path contains the initial path. The documentation has also
    been adjusted.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:

- MEDIUM (5.3)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RC:R/MAV:A

References:

- af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
- security@apache.org - MAILING_LIST,VENDOR_ADVISORY
- security@apache.org - NOT_APPLICABLE

Vulnerable Software & Versions: (show all)

- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.0.7
- ...
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 2.0.24; versions up to (including) 2.0.35
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.0.7

CVE-2026-33929 suppressed

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.

    This issue affects the
    ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7.

    Users are recommended to update to version 2.0.37 or 3.0.8 once
    available. Until then, they should apply the fix provided in GitHub PR
    427.

    The ExtractEmbeddedFiles example contained a path traversal vulnerability (CWE-22) mentioned in CVE-2026-23907. However the change in the releases 2.0.36 and 3.0.7 is flawed because it doesn't consider the file path separator. Because of that, a user having writing rights on /home/ABC could be victim to a malicious PDF resulting in a write attempt to any path starting with /home/ABC, e.g. "/home/ABCDEF".

    Users who have copied this example into their production code should apply the mentioned change. The example
    has been changed accordingly and is available in the project repository.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:

- MEDIUM (4.3)
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RC:R/MAV:A

References:

- security@apache.org - MAILING_LIST
- security@apache.org - MAILING_LIST,VENDOR_ADVISORY
- security@apache.org - PATCH

Vulnerable Software & Versions: (show all)

- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (excluding) 3.0.8
- ...
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 2.0.24; versions up to (excluding) 2.0.37
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (excluding) 3.0.8

### ocr.tesseract.zip: pdfbox.jar

Description:

            The Apache PDFBox library is an open source Java tool for working with PDF documents.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox.jar
MD5: adeb0637e9451d49e610ee3bc16781cd
SHA1: ecfc1bbfa656d3e330b8cc9e6996a18cde1c9bd0
SHA256: 7cefa717622330951b4343abf1e5d36bccb11f4ba245d78aaa73251d08fec623
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfbox | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Vendor | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | pdfbox | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache PDFBox | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Product | file | name | pdfbox | High
Product | jar | package name | apache | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Product | Manifest | Bundle-Name | Apache PDFBox | Medium
Product | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Product | Manifest | Implementation-Title | Apache PDFBox | High
Product | Manifest | specification-title | Apache PDFBox | Medium
Product | pom | artifactid | pdfbox | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache PDFBox | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Version | Manifest | Bundle-Version | 3.0.7 | High
Version | Manifest | Implementation-Version | 3.0.7 | High
Version | pom | version | 3.0.7 | Highest

#### Suppressed Identifiers

- cpe:2.3:a:apache:pdfbox:3.0.7:*:*:*:*:*:*:* suppressed (Confidence:Highest)
  - Notes: Excluded due to not having a newer version available. This will be checked soon to mitigate. PDFBox is a tesseract dependency and not actively used in the product file name: ocr.tesseract.zip: pdfbox.jar

#### Suppressed Vulnerabilities

CVE-2026-23907 suppressed

    This issue affects the
    ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6.

    The ExtractEmbeddedFiles example contains a path traversal vulnerability (CWE-22) because
    the filename that is obtained from
    PDComplexFileSpecification.getFilename() is appended to the extraction path.

    Users who have copied this example into their production code should
    review it to ensure that the extraction path is acceptable. The example
    has been changed accordingly, now the initial path and the extraction
    paths are converted into canonical paths and it is verified that
    extraction path contains the initial path. The documentation has also
    been adjusted.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:

- MEDIUM (5.3)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RC:R/MAV:A

References:

- af854a3a-2127-422b-91ae-364da2661108 - MAILING_LIST,THIRD_PARTY_ADVISORY
- security@apache.org - MAILING_LIST,VENDOR_ADVISORY
- security@apache.org - NOT_APPLICABLE

Vulnerable Software & Versions: (show all)

- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.0.7
- ...
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 2.0.24; versions up to (including) 2.0.35
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.0.7

CVE-2026-33929 suppressed

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.

    This issue affects the
    ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7.

    Users are recommended to update to version 2.0.37 or 3.0.8 once
    available. Until then, they should apply the fix provided in GitHub PR
    427.

    The ExtractEmbeddedFiles example contained a path traversal vulnerability (CWE-22) mentioned in CVE-2026-23907. However the change in the releases 2.0.36 and 3.0.7 is flawed because it doesn't consider the file path separator. Because of that, a user having writing rights on /home/ABC could be victim to a malicious PDF resulting in a write attempt to any path starting with /home/ABC, e.g. "/home/ABCDEF".

    Users who have copied this example into their production code should apply the mentioned change. The example
    has been changed accordingly and is available in the project repository.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv3:

- MEDIUM (4.3)
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RC:R/MAV:A

References:

- security@apache.org - MAILING_LIST
- security@apache.org - MAILING_LIST,VENDOR_ADVISORY
- security@apache.org - PATCH

Vulnerable Software & Versions: (show all)

- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (excluding) 3.0.8
- ...
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 2.0.24; versions up to (excluding) 2.0.37
- cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (excluding) 3.0.8

This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.