| License | Apache 2.0 |
|---|---|
| Tags | securitycloudsap |
| Date | Apr 21, 2022 |
| Files | pom (5 KB) jar (84 KB) View All |
| Repositories | Central |
| Ranking | #47572 in MvnRepository (See Top Artifacts) |
| Used By | 10 artifacts |
| Vulnerabilities | Direct vulnerabilities: CVE-2023-50422 Vulnerabilities from dependencies: CVE-2024-47554 CVE-2023-50422 CVE-2022-22970 View 1 more ... |
Compile Dependencies (5)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
| Defect Detection LGPL 2.1 |  | com.github.spotbugs » spotbugs-annotations (optional) | 4.6.0 | 4.9.8 |
Apache 2.0 |  | com.sap.cloud.security » java-api | 2.11.16 | 3.6.5 |
Apache 2.0 | | com.sap.cloud.security » env | 2.11.16 | 3.6.5 |
Apache 2.0 | | com.sap.cloud.security.xsuaa » token-client | 2.11.16 | 3.6.5 |
| I/O Apache 2.0 |  | commons-io » commons-io1 vulnerability | 2.11.0 | 2.21.0 |
Provided Dependencies (5)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Apache 2.0 | | com.sap.cloud.security.xsuaa » api | 2.11.16 | 3.0.0 |
| Java Spec EPL 2.0GPL |  | javax.servlet » javax.servlet-api | 4.0.1 | 6.1.0 |
| HTTP Clients Apache 2.0 |  | org.apache.httpcomponents » httpclient | 4.5.13 | 5.5.1 |
| Dep Injection Apache 2.0 |  | org.springframework » spring-beans1 vulnerability | 5.3.19 | 7.0.0 |
| OAuth Lib Apache 2.0 |  | org.springframework.security.oauth » spring-security-oauth21 vulnerability | 2.5.1.RELEASE | 6.5.6 |
Test Dependencies (12)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
CPAL 1.0CPL 1.0 |  | com.github.stefanbirkner » system-rules | 1.19.0 | ✔ |
MIT | | com.github.stefanbirkner » system-lambda | 1.2.1 | ✔ |
Apache 2.0 | | com.sap.cloud.security.xsuaa » spring-xsuaa1 vulnerability | 2.11.16 | 3.6.5 |
| Testing EPL 2.0 |  | junit » junit | 4.13.2 | 6.0.1 |
| Assertion Apache 2.0 |  | org.assertj » assertj-core | 3.22.0 | 3.27.6 |
| Testing EPL 2.0 | | org.junit.jupiter » junit-jupiter-engine | ||
| Testing EPL 2.0 | | org.junit.jupiter » junit-jupiter-params | ||
| Testing EPL 2.0 | | org.junit.vintage » junit-vintage-engine | ||
| Mocking MIT |  | org.mockito » mockito-core | 3.12.4 | 5.20.0 |
| Logging MIT |  | org.slf4j » slf4j-simple | 1.7.36 | 2.0.17 |
Apache 2.0 | | org.springframework.security » spring-security-oauth2-jose | 5.6.3 | 6.5.6 |
Apache 2.0 | | org.springframework.security » spring-security-oauth2-resource-server | 5.6.3 | 6.5.6 |
Licenses
| License | URL |
|---|---|
| The Apache Software License, Version 2.0 | http://www.apache.org/licenses/LICENSE-2.0.txt |
Developers
| Name | Dev Id | Roles | Organization | |
|---|---|---|---|---|
| Identity Service Development | xsuaa-development<at>sap.com | SAP SE |
Related Books
 | Penetration Testing with Java: A step-by-step pen testing handbook for Java applications (English Edition) (2025) by Snoke, Nancy |
 | Mastering Secure Java Applications: Navigating security in cloud and microservices for Java (English Edition) (2024) by Chawdhury, Tarun Kumar, Banerjee, Joyanta, Gupta, Vipul, Poddar, Debopam |
 | The Definitive Guide to Security in Jakarta EE: Securing Java-based Enterprise Applications with Jakarta Security, Authorization, Authentication and More (2022) by Tijms, Arjan, Bais, Teo, Keil, Werner |
 | Java Security (2nd Edition) (2001) by Oaks, Scott |