Compile Dependencies (39)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Code Analyzer
LGPL 2.1
| com.google.code.findbugs
»
jsr305 Annotations the SpotBugs tool supports | 3.0.2 | 4.10.5 | |
Core Utils
Apache 2.0
| com.google.guava
»
guava1 vulnerability Guava is a suite of core and expanded libraries that include | 33.4.0-jre | 33.7.2-jre | |
HTTP Clients
Apache 2.0
| com.google.http-client
»
google-http-client Google HTTP Client Library for Java. Functionality that works on all supported Java platforms, | 1.22.0 | 2.2.0 | |
OAuth Lib
Apache 2.0
| com.nimbusds
»
oauth2-oidc-sdk OAuth 2.0 SDK with OpenID Connect and Federation extensions for | 11.33 | 11.38.2 | |
Encryption Lib
Apache 2.0
| com.nimbusds
»
nimbus-jose-jwt Java library for Javascript Object Signing and Encryption (JOSE) and | 10.8 | 10.10 | |
Apache 2.0
| com.nimbusds
»
lang-tag Java implementation of "Tags for Identifying Languages" (RFC 5646) | 1.7 | ✔ | |
I/O
Apache 2.0
| commons-io
»
commons-io The Apache Commons IO library contains utility classes, stream implementations, file filters, | 2.22.0 | ✔ | |
Core Utils
Apache 2.0
| commons-lang
»
commons-lang1 vulnerability Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are ... | 2.6 | 3.21.0 | |
LGPL 3.0
| ddf.platform
»
platform-configuration Maintains and publishes configuration changes for the DDF platform. | 2.31.2 | 2.32.0 | |
LGPL 3.0
| ddf.platform.util » platform-util | 2.31.2 | 3.0.1 | |
UUID Generator
LGPL 3.0
| ddf.platform.util » util-uuidgenerator-api | 2.31.2 | 3.0.1 | |
LGPL 3.0
| ddf.security.core » security-core-api | 2.31.2 | 2.32.0 | |
LGPL 3.0
| ddf.security.handler » security-handler-api | 2.31.2 | 2.32.0 | |
LGPL 3.0
| ddf.security.handler » security-handler-impl | 2.31.2 | 2.32.0 | |
Java Spec
EPL 2.0 +1
| javax.servlet
»
javax.servlet-api API for Jakarta Servlet, enabling web applications to handle HTTP requests and responses through a standard interface ... | 4.0.1 | 6.1.0 | |
Java Spec
Apache 2.0
| javax.validation
»
validation-api JavaBeans Validation (Bean Validation) is a validation model that can add constraints to the beans with annotations ... | 1.1.0.Final | 3.1.1 | |
JSON Lib
Apache 2.0
| net.minidev
»
json-smart JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It ... | 2.5.2 | 2.6.0 | |
Apache 2.0
| org.apache.cxf
»
cxf-rt-rs-security-sso-saml Apache CXF RS SSO SAML | 3.6.12 | 4.2.4 | |
Apache 2.0
| org.apache.cxf
»
cxf-rt-ws-security Apache CXF Runtime WS Security | 3.6.12 | 4.2.4 | |
Apache 2.0
| org.apache.felix
»
org.apache.felix.fileinstall A utility to automatically install bundles from a directory. | 3.7.4 | ✔ | |
HTTP Clients
Apache 2.0
| org.apache.httpcomponents
»
httpcore Apache HttpComponents HTTP/1.1 core components | 4.4.15 | 5.4.4 | |
HTTP Clients
Apache 2.0
| org.apache.httpcomponents
»
httpclient Apache HttpComponents Client | 4.5.14 | 5.6.5 | |
Apache 2.0
| org.apache.karaf.jaas
»
org.apache.karaf.jaas.boot Provides the JAAS classes loading at boot process. | 4.4.12 | ✔ | |
Security
Apache 2.0
| org.apache.shiro
»
shiro-core Apache Shiro is a powerful and flexible open-source security framework that cleanly handles | 2.2.1 | 3.0.1 | |
Apache 2.0
| org.apache.wss4j » wss4j-ws-security-dom | 2.4.3 | 4.0.2 | |
LGPL 3.0
| org.codice.ddf » alerts | 2.31.2 | 2.32.0 | |
MIT
| org.cryptomator
»
siv-mode RFC 5297 SIV mode: deterministic authenticated encryption | 1.6.1 | ✔ | |
Web Server
Apache 2.0 +1
| org.eclipse.jetty
»
jetty-server1 vulnerability Jetty Server Artifact | 9.4.58.v20250814 | 12.1.14 | |
Hashing
ISC
| org.mindrot
»
jbcrypt OpenBSD-style Blowfish password hashing for Java | 0.4 | ✔ | |
Apache 2.0
| org.opensaml
»
opensaml-core Core | 3.4.6 | 4.0.1 | |
Apache 2.0
| org.opensaml
»
opensaml-xmlsec-api XML Security API | 3.4.6 | 4.0.1 | |
Apache 2.0
| org.opensaml
»
opensaml-soap-impl SOAP Provider Implementations | 3.4.6 | 4.0.1 | |
Apache 2.0
| org.opensaml
»
opensaml-xmlsec-impl XML Security Implementation | 3.4.6 | 4.0.1 | |
OSGi
Apache 2.0
| org.osgi
»
osgi.core OSGi Core Release 8, Interfaces and Classes for use in compiling bundles | ${osgi.version} | 8.0.0 | |
OSGi
Apache 2.0
| org.osgi
»
osgi.cmpn OSGi Compendium Release 7, Interfaces and Classes for use in compiling bundles | 7.0.0 | ✔ | |
Apache 2.0
| org.pac4j » pac4j-oidc | 6.5.3 | 6.6.0 | |
Apache 2.0
| org.pac4j » pac4j-core | 6.5.3 | 6.6.0 | |
Logging
MIT
| org.slf4j
»
slf4j-ext Extensions to the SLF4J API | 1.7.32 | 2.0.20 | |
Core Utils
Apache 2.0
| org.springframework
»
spring-core2 vulnerabilities Basic building block for Spring that in conjunction with Spring Beans provides dependency injection and IoC features. | 6.1.21 | 7.0.10 |
Provided Dependencies (1)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Apache 2.0
| org.ops4j.pax.logging
»
pax-logging-api Pax Logging API Library is a collection of logging APIs from different libraries/facades. | 2.3.5 | ✔ |
Test Dependencies (1)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
LGPL 3.0
| ddf.security.encryption » security-encryption-api | 2.31.2 | 2.32.0 |
Managed Dependencies (3)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
XML Processing
Apache 2.0
| com.fasterxml.woodstox
»
woodstox-core Woodstox is a high-performance XML processor that implements Stax (JSR-173), | 6.5.1 | 7.3.0 | |
Apache 2.0
| org.apache.santuario
»
xmlsec1 vulnerability Apache XML Security for Java supports XML-Signature Syntax and Processing, | 2.3.1 | 4.0.4 | |
Encryption Lib
BouncyCastle
| org.bouncycastle
»
bcprov-jdk18on The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains the JCA/JCE ... | 1.86 | ✔ |