Bytecode
Apache 2.0 |  | cglib
»
cglib |
3.2.12 | 3.3.0 |
|  | com.atlassian.audit
»
atlassian-audit-core | ${atlassian-audit.version} | 3.1.2 |
| | com.atlassian.audit
»
atlassian-audit-spi | ${atlassian-audit.version} | 3.1.2 |
AtlassianBSD | | com.atlassian.botocss
»
botocss-core | ${botocss.version} | 6.10.2-c326733810 |
|  | com.atlassian.confluence
»
confluence-rest-api |
9.0.0-beta3 | 10.1.0 |
| | com.atlassian.confluence
»
confluence-rest-v2-api |
9.0.0-beta3 | 10.1.0 |
BSD | | com.atlassian.core
»
atlassian-core-thumbnail |
9.0.0 | 10.0.0 |
Atlassian 3.0 | | com.atlassian.crowd
»
crowd-core |
6.0.0 | 1000.113.0 |
| | com.atlassian.crowd
»
crowd-db-config-password-cipher-encryptors |
6.0.0 | 8.0.0-55a0ebe8 |
Atlassian 3.0 | | com.atlassian.crowd
»
embedded-crowd-core |
6.0.0 | 1000.113.0 |
Atlassian 3.0 | | com.atlassian.crowd
»
crowd-persistence |
6.0.0 | 1000.113.0 |
| | com.atlassian.datacenter.filestore
»
filestore-s3-client |
0.8.9 | 0.10.3 |
Apache 2.0 | | com.atlassian.diagnostics
»
atlassian-diagnostics-platform | ${atlassian-diagnostics.v... | 6.2.0 |
FP
Apache 2.0 | | com.atlassian.fugue
»
fugue | ${fugue-old.version} | 6.1.2 |
Apache 2.0 | | com.atlassian.http
»
atlassian-http | ${atlassian-http.version} | 4.1.2-ab4610843b |
IP Address
BSD | | com.atlassian.ip
»
atlassian-ip | ${atlassian-ip.version} | 3.2-7294f19766 |
JWT Lib
Apache 2.0 | | com.atlassian.jwt
»
jwt-api | ${atlassian-jwt.version} | 5.0.5 |
Apache 2.0 | | com.atlassian.logging
»
log4j12-extras |
0.0.2 |
✔
|
AtlassianBSD | | com.atlassian.marshalling
»
atlassian-marshalling-jdk |
1.1.0 |
✔
|
| | com.atlassian.modzdetector
»
modz-detector |
1.1.0 |
✔
|
BSD 3-clause | | com.atlassian.plugins
»
atlassian-plugins-api |
8.0.15 | 9.1.0 |
BSD 3-clause | | com.atlassian.plugins
»
atlassian-plugins-core |
8.0.15 | 9.1.0 |
BSD 3-clause | | com.atlassian.plugins
»
atlassian-plugins-servlet |
8.0.15 | 9.1.0 |
BSD 3-clause | | com.atlassian.plugins
»
atlassian-plugins-webresource | ${wrm.version} | 8.0.1-4954088a2b |
BSD 3-clause | | com.atlassian.plugins
»
atlassian-plugins-spring |
8.0.15 | 9.1.0 |
BSD 3-clause | | com.atlassian.plugins
»
atlassian-plugins-schema |
8.0.15 | 9.1.0 |
| | com.atlassian.plugins
»
atlassian-spring-interceptor-adapter-spi |
1.1 | 2.0.0 |
Profilers
BSD | | com.atlassian.profiling
»
atlassian-profiling | ${atlassian-profiling.ver... | 6.0.1 |
BSD | | com.atlassian.profiling
»
atlassian-profiling-micrometer | ${atlassian-profiling.ver... | 6.0.1 |
BSD | | com.atlassian.profiling
»
micrometer-registry-atlassian-analytics | ${atlassian-profiling.ver... | 6.0.1 |
Atlassian Plugin
BSD 3-clause | | com.atlassian.sal
»
sal-spi |
5.1.3 | 7.0.0 |
BSD 3-clause | | com.atlassian.sal
»
sal-spring |
5.1.3 | 7.0.0 |
BSD 3-clause | | com.atlassian.sal
»
sal-core |
5.1.3 | 7.0.0 |
| | com.atlassian.secrets
»
atlassian-secrets-api |
3.2.4 | 6.0.5 |
| | com.atlassian.secrets
»
atlassian-secrets-store |
3.2.4 | 6.0.5 |
| | com.atlassian.security.objectfilter
»
java11-objectfilter |
1.0.1 | 1.0.2 |
| | com.atlassian.security.serialblocklist
»
serialblocklist |
2.0.2 | 3.0.4 |
Concurrency
Apache 2.0 | | com.atlassian.util.concurrent
»
atlassian-util-concurrent | ${atlassian-util-old.vers... | 4.0.1 |
Apache 2.0 | | com.atlassian.vcache
»
atlassian-vcache-api |
2.0.0 |
✔
|
Apache 2.0 | | com.atlassian.vcache
»
atlassian-vcache-internal-legacy |
2.0.0 |
✔
|
Apache 2.0 | | com.atlassian.xmlrpc
»
xmlrpc-supplementary-character-support |
0.2 |
✔
|
JSON Lib
Apache 2.0 |  | com.fasterxml.jackson.core
»
jackson-databind |
2.17.0 | 3.0.2 |
Apache 2.0 |  | com.github.gquintana.metrics
»
metrics-sql |
3.1.0-atlassian-4 | 3.2.1 |
MIT |  | com.github.oshi
»
oshi-core | ${oshi.version} | 6.9.1 |
Defect Detection
LGPL 2.1 |  | com.google.code.findbugs
»
findbugs-annotations |
3.0.1 | 4.9.8 |
JSON Lib
Apache 2.0 |  | com.google.code.gson
»
gson | ${gson.version} | 2.13.2 |
Core Utils
Apache 2.0 | | com.google.guava
»
guava |
32.1.3-jre | 33.5.0-jre |
Embedded SQL DB
EPL 1.0MPL 2.0 |  | com.h2database
»
h24 vulnerabilities |
1.4.200 | 2.4.240 |
Apache 2.0 |  | com.hazelcast
»
hazelcast |
5.3.6 | 5.6.0 |
RSS/Atom
Apache 2.0 |  | com.rometools
»
rome | 1.0 | 2.1.0 |
|  | com.sun
»
jai_core |
1.1.3 |
✔
|
| | com.sun
»
jai_codec |
1.1.3 |
✔
|
XML Processing
BSD 3-clause |  | com.thoughtworks.xstream
»
xstream1 vulnerability |
1.4.20 | 1.4.21 |
BSD |  | com.twelvemonkeys.imageio
»
imageio-bmp |
3.8.3 | 3.12.0 |
BSD | | com.twelvemonkeys.imageio
»
imageio-icns |
3.8.3 | 3.12.0 |
Config
Apache 2.0 |  | com.typesafe
»
config |
1.4.3 |
✔
|
Reflection
Apache 2.0 |  | commons-beanutils
»
commons-beanutils1 vulnerability |
1.9.4 | 1.11.0 |
Base64
Apache 2.0 |  | commons-codec
»
commons-codec | ${commons-codec.version} | 1.20.0 |
Collections
Apache 2.0 |  | commons-collections
»
commons-collections | ${commons-collections.ver... | 4.5.0 |
Upload Manager
Apache 2.0 |  | commons-fileupload
»
commons-fileupload | ${commons-fileupload.vers... | 2.0.0-M4 |
I/O
Apache 2.0 |  | commons-io
»
commons-io | ${commons-io.version} | 2.21.0 |
|  | commons-jrcs
»
commons-jrcs |
diff-0.1.7 |
✔
|
Core Utils
Apache 2.0 |  | commons-lang
»
commons-lang1 vulnerability |
2.6 | 3.20.0 |
Validation
Apache 2.0 |  | commons-validator
»
commons-validator |
1.5.1 | 1.10.0 |
FP
Apache 2.0 |  | io.atlassian.fugue
»
fugue | ${fugue.version} | 6.1.2 |
Classpath Tool
MIT |  | io.github.classgraph
»
classgraph | ${classgraph.version} | 4.8.184 |
Apache 2.0 |  | io.leopard.thirdparty
»
jcaptcha-api |
2.0.0 |
✔
|
Apache 2.0 | | io.leopard.thirdparty
»
jcaptcha-core |
2.0.0 |
✔
|
Apache 2.0 |  | io.micrometer
»
micrometer-registry-influx | ${micrometer.version} | 1.16.0 |
Dist Tracing
Apache 2.0 |  | io.zipkin.brave
»
brave | | |
Apache 2.0 | | io.zipkin.brave
»
brave-instrumentation-httpclient | | |
Apache 2.0 | | io.zipkin.brave
»
brave-instrumentation-servlet | | |
Apache 2.0 | | io.zipkin.brave
»
brave-spring-beans | | |
Apache 2.0 | | io.zipkin.reporter2
»
zipkin-reporter-spring-beans | | |
Dep Injection
Apache 2.0 |  | jakarta.inject
»
jakarta.inject-api |
1.0.5 | 2.0.1 |
Java Spec
EDL 1.0EPL 2.0 | | jakarta.persistence
»
jakarta.persistence-api |
2.2.3 | 3.2.0 |
Java Spec
EPL 2.0GPL | | jakarta.servlet
»
jakarta.servlet-api |
4.0.4 | 6.1.0 |
Java Spec
| | jakarta.servlet.jsp
»
jakarta.servlet.jsp-api |
2.3.6 | 4.0.0 |
Validation
Apache 2.0 | | jakarta.validation
»
jakarta.validation-api |
2.0.2 | 3.1.1 |
Transactions
EPL 2.0GPL |  | javax.transaction
»
javax.transaction-api |
1.2 | 2.0.1 |
XPath
BSD 2-clause |  | jaxen
»
jaxen |
1.1.6 | 2.0.0 |
Date/Time
Apache 2.0 |  | joda-time
»
joda-time |
2.12.5 | 2.14.0 |
Annotation Lib
Public |  | net.jcip
»
jcip-annotations | ${jcip-annotations.version} | 1.0 |
|  | opensymphony
»
oscore | ${oscore.version} | 2.2.6 |
| | opensymphony
»
propertyset |
1.3-21Nov03 | 1.3 |
Apache 1.1 | | opensymphony
»
sitemesh | ${sitemesh.version} | 2.6.0 |
Build Tool
Apache 2.0 |  | org.apache.ant
»
ant |
1.10.14 | 1.10.15 |
Collections
Apache 2.0 |  | org.apache.commons
»
commons-collections4 |
4.4 | 4.5.0 |
Compression
Apache 2.0 | | org.apache.commons
»
commons-compress |
1.26.1 | 1.28.0 |
Core Utils
Apache 2.0 | | org.apache.commons
»
commons-lang31 vulnerability |
3.14.0 | 3.20.0 |
String Utils
Apache 2.0 | | org.apache.commons
»
commons-text | ${commons-text.version} | 1.14.0 |
OSGi Framework
Apache 2.0 |  | org.apache.felix
»
org.apache.felix.framework | ${felix.version} | 7.0.5 |
HTTP Clients
Apache 2.0 |  | org.apache.httpcomponents
»
httpclient |
4.5.14 | 5.5.1 |
HTTP Clients
Apache 2.0 | | org.apache.httpcomponents.client5
»
httpclient5 |
5.2.1 | 5.5.1 |
HTTP Clients
Apache 2.0 | | org.apache.httpcomponents.core5
»
httpcore5 |
5.2.3 | 5.3.6 |
Logging Bridge
Apache 2.0 |  | org.apache.logging.log4j
»
log4j-1.2-api | | |
Full-Text Indexing
Apache 2.0 |  | org.apache.lucene
»
lucene-core |
4.4.0-atlassian-12 | 10.3.1 |
Apache 2.0 | | org.apache.lucene
»
lucene-analyzers-common |
4.4.0-atlassian-12 | 10.3.1 |
Apache 2.0 | | org.apache.lucene
»
lucene-analyzers-kuromoji |
4.4.0-atlassian-12 | 8.11.4 |
Apache 2.0 | | org.apache.lucene
»
lucene-analyzers-stempel |
4.4.0-atlassian-12 | 8.11.4 |
Apache 2.0 | | org.apache.lucene
»
lucene-misc |
4.4.0-atlassian-12 | 10.3.1 |
Apache 2.0 | | org.apache.lucene
»
lucene-highlighter |
4.4.0-atlassian-12 | 10.3.1 |
Apache 2.0 | | org.apache.lucene
»
lucene-queryparser |
4.4.0-atlassian-12 | 10.3.1 |
Apache 2.0 | | org.apache.xmlgraphics
»
batik-codec |
1.17 | 1.19 |
CSS, LESS, SASS
Apache 2.0 | | org.apache.xmlgraphics
»
batik-css |
1.17 | 1.19 |
Apache 2.0 | | org.apache.xmlgraphics
»
batik-ext |
1.17 | 1.19 |
Apache 2.0 | | org.apache.xmlgraphics
»
batik-transcoder |
1.17 | 1.19 |
AOP
EPL 2.0 |  | org.aspectj
»
aspectjweaver |
1.9.22.1 | 1.9.25 |
JSON Lib
Apache 2.0 |  | org.codehaus.jackson
»
jackson-mapper-asl | | |
XML Processing
BSD 3-clause |  | org.dom4j
»
dom4j | ${dom4j.version} | 2.2.0 |
Apache 2.0EPL 1.0 |  | org.eclipse.gemini.blueprint
»
gemini-blueprint-core | ${gemini.version} | 2.1.0.RELEASE |
EDL 1.0 |  | org.glassfish.jaxb
»
jaxb-runtime |
2.3.3 | 4.0.6 |
O/R Mapping
Apache 2.0 |  | org.hibernate
»
hibernate-core |
5.6.15.Final | 7.1.8.Final |
Apache 2.0 | | org.hibernate
»
hibernate-hikaricp |
5.6.15.Final | 7.1.8.Final |
Embedded SQL DB
|  | org.hsqldb
»
hsqldb |
2.7.2 | 2.7.4 |
JSON Lib
Public |  | org.json
»
json |
20231013 | 20250517 |
Diff/Patch
Apache |  | org.outerj.daisy
»
daisydiff |
1.2.3-atlassian-hosted | 1.3.3-atlassian-hosted |
BSD 3-clause |  | org.owasp.antisamy
»
antisamy2 vulnerabilities |
1.6.8-atlassian-11 | 1.7.8 |
Logging Bridge
MIT |  | org.slf4j
»
jul-to-slf4j |
2.0.12 | 2.0.17 |
O/R Mapping
Apache 2.0 |  | org.springframework
»
spring-orm | ${spring.version} | 7.0.0 |
Core Utils
Apache 2.0 | | org.springframework
»
spring-core | ${spring.version} | 7.0.0 |
Web Framework
Apache 2.0 | | org.springframework
»
spring-web | ${spring.version} | 7.0.0 |
AOP
Apache 2.0 | | org.springframework
»
spring-aop | ${spring.version} | 7.0.0 |
Dep Injection
Apache 2.0 | | org.springframework
»
spring-beans | ${spring.version} | 7.0.0 |
JDBC Extension
Apache 2.0 | | org.springframework
»
spring-jdbc | ${spring.version} | 7.0.0 |
Transactions
Apache 2.0 | | org.springframework
»
spring-tx | ${spring.version} | 7.0.0 |
Config
Apache 2.0 | | org.springframework
»
spring-context-support | ${spring.version} | 7.0.0 |
Apache 2.0 |  | org.springframework.ldap
»
spring-ldap-core | ${spring.ldap.version} | 4.0.0 |
BSD |  | org.tuckey
»
urlrewritefilter | ${urlrewriter.version} | 5.1.3 |
Compression
Apache 2.0 |  | org.xerial.snappy
»
snappy-java |
1.1.10.5 | 1.1.10.8 |
YAML
Apache 2.0 |  | org.yaml
»
snakeyaml |
2.0 | 2.5 |
|  | oscache
»
oscache |
2.2 |
✔
|
Apache 2.0 |  | xml-apis
»
xml-apis-ext |
1.3.04 |
✔
|
Apache 2.0 |  | xmlrpc
»
xmlrpc | 2.0+xmlrpc61.1+sbfix | 3.0 |
