Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

Project: oshi-core-java11

com.github.oshi:oshi-core-java11:6.9.2

Scan Information (show all):

Summary

Summary of Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
jLibreHardwareMonitor-1.0.6.jarpkg:maven/io.github.pandalxb/jLibreHardwareMonitor@1.0.6 033
jLibreHardwareMonitor-1.0.6.jar: HidSharp.dllpkg:generic/HidSharp@2.1.0 016
jLibreHardwareMonitor-1.0.6.jar: LibreHardwareMonitorLib.dllpkg:generic/LibreHardwareMonitorLib@0.9.4 013
jLibreHardwareMonitor-1.0.6.jar: OpenHardwareMonitorLib.dllpkg:generic/OpenHardwareMonitorLib@0.9.3 011
jPowerShell-1.0.1.jarpkg:maven/io.github.pandalxb/jPowerShell@1.0.1 031
jna-jpms-5.18.1.jarcpe:2.3:a:oracle:java_se:5.18.1:*:*:*:*:*:*:*pkg:maven/net.java.dev.jna/jna-jpms@5.18.1 0Low48
jna-jpms-5.18.1.jar: jnidispatch.dll 02
jna-jpms-5.18.1.jar: jnidispatch.dll 02
jna-jpms-5.18.1.jar: jnidispatch.dll 02
jna-platform-jpms-5.18.1.jarpkg:maven/net.java.dev.jna/jna-platform-jpms@5.18.1 042
slf4j-api-2.0.17.jarpkg:maven/org.slf4j/slf4j-api@2.0.17 029

Dependencies (vulnerable)

jLibreHardwareMonitor-1.0.6.jar

Description:

Get all system sensors information from Java

License:

Apache License, Version 2.0: http://wcd taww.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/github/pandalxb/jLibreHardwareMonitor/1.0.6/jLibreHardwareMonitor-1.0.6.jar
MD5: 20475699d6b856d9c9a45276890610c0
SHA1: 0f002efe5d31921649d34c960e44bd4f32ab07d4
SHA256:f14c499e68f149c080bd9d41b5f583492872f3f2d913196721a0bcbfe0bedc35
Referenced In Project/Scope: oshi-core-java11:compile
jLibreHardwareMonitor-1.0.6.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-core-java11@6.9.2

Identifiers

  • pkg:maven/io.github.pandalxb/jLibreHardwareMonitor@1.0.6  (Confidence:High)

jLibreHardwareMonitor-1.0.6.jar: HidSharp.dll

Description:

HidSharp

C# HID wrappers

File Path: /home/runner/.m2/repository/io/github/pandalxb/jLibreHardwareMonitor/1.0.6/jLibreHardwareMonitor-1.0.6.jar/lib/HidSharp.dll
MD5: 8d3eb299f8447b633334d1c426a2f0f7
SHA1: 8497ae75f2dd9271d9158a27250288905e8cca28
SHA256:8c58e5fba22acc751032dfe97ce633e4f8a4c96089749bf316d55283b36649c2
Referenced In Project/Scope: oshi-core-java11:compile

Identifiers

  • pkg:generic/HidSharp@2.1.0  (Confidence:Medium)

jLibreHardwareMonitor-1.0.6.jar: LibreHardwareMonitorLib.dll

Description:

LibreHardwareMonitorLib

Monitor the temperature sensors, fan speeds, voltages, load and clock speeds of your computer.

File Path: /home/runner/.m2/repository/io/github/pandalxb/jLibreHardwareMonitor/1.0.6/jLibreHardwareMonitor-1.0.6.jar/lib/LibreHardwareMonitorLib.dll
MD5: ca5f27a875cd921a43e054cee361432a
SHA1: a989ad6f4d9eacdc30b31344059a57735e3c5377
SHA256:a0f2728f1734c236a9d02d9e25a88bc4f8cb7bd1faff1770726beb7af06bf8dc
Referenced In Project/Scope: oshi-core-java11:compile

Identifiers

  • pkg:generic/LibreHardwareMonitorLib@0.9.4  (Confidence:Medium)

jLibreHardwareMonitor-1.0.6.jar: OpenHardwareMonitorLib.dll

Description:

Open Hardware Monitor Library

File Path: /home/runner/.m2/repository/io/github/pandalxb/jLibreHardwareMonitor/1.0.6/jLibreHardwareMonitor-1.0.6.jar/lib/OpenHardwareMonitorLib.dll
MD5: 80c5b3e1dbf82abd74a93586625a2540
SHA1: 07b6413c8b6e9ae996ac6bae04004959c9301b2a
SHA256:e8f9ddede1416c7ae3c82d9c702c64ccc712866d1d98a58d7176a1489ebedaaa
Referenced In Project/Scope: oshi-core-java11:compile

Identifiers

  • pkg:generic/OpenHardwareMonitorLib@0.9.3  (Confidence:Medium)

jPowerShell-1.0.1.jar

Description:

API to use PowerShell from Java

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/io/github/pandalxb/jPowerShell/1.0.1/jPowerShell-1.0.1.jar
MD5: 5f203e404c4699ec8b3f0ade58d5c20b
SHA1: 08eeb13e10293b1fc9cdbb15702f352edc35efbb
SHA256:0fcc50d928996a2b270e419a3bc1b6f003cfa186772b6c5e15c999e2f124690c
Referenced In Project/Scope: oshi-core-java11:compile
jPowerShell-1.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/io.github.pandalxb/jLibreHardwareMonitor@1.0.6

Identifiers

  • pkg:maven/io.github.pandalxb/jPowerShell@1.0.1  (Confidence:High)

jna-jpms-5.18.1.jar

Description:

Java Native Access

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-jpms/5.18.1/jna-jpms-5.18.1.jar
MD5: 85134b440e29dcd2328ca05f90c89c6e
SHA1: 79c71e499983f1beaae1ab62afe08b023f189711
SHA256:44ac6602808232f3de950a7d0ee9b8c6b99e73733b69461e643576607be74db6
Referenced In Project/Scope: oshi-core-java11:compile
jna-jpms-5.18.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-core-java11@6.9.2

Identifiers

  • pkg:maven/net.java.dev.jna/jna-jpms@5.18.1  (Confidence:High)
  • cpe:2.3:a:oracle:java_se:5.18.1:*:*:*:*:*:*:*  (Confidence:Low)  

jna-jpms-5.18.1.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-jpms/5.18.1/jna-jpms-5.18.1.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: 302945a811fd8e21bcdd5226c73b6f74
SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607c
SHA256:b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699d
Referenced In Project/Scope: oshi-core-java11:compile

Identifiers

  • None

jna-jpms-5.18.1.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-jpms/5.18.1/jna-jpms-5.18.1.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 2d2475f1f026dd54e9f3e787ae4f81da
SHA1: 27ff882ac271db547aee520b38e3ba9aa91e136c
SHA256:5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
Referenced In Project/Scope: oshi-core-java11:compile

Identifiers

  • None

jna-jpms-5.18.1.jar: jnidispatch.dll

File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-jpms/5.18.1/jna-jpms-5.18.1.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: 0caa1ef75a807f9dde05084fa2219a5c
SHA1: 2f5e1cd82cde192905c7510ce99037b67d980640
SHA256:752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44
Referenced In Project/Scope: oshi-core-java11:compile

Identifiers

  • None

jna-platform-jpms-5.18.1.jar

Description:

Java Native Access Platform

License:

LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-platform-jpms/5.18.1/jna-platform-jpms-5.18.1.jar
MD5: 6e298eb419c7c18d3ed2498e860e8a72
SHA1: 5aa32680cbb7ebc3ebdd43dd4e6b79ad00a7045f
SHA256:b8237665b43fe039aaded81ce3afab73e93ac6a133faa60d6796bc865d1f3d57
Referenced In Project/Scope: oshi-core-java11:compile
jna-platform-jpms-5.18.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-core-java11@6.9.2

Identifiers

  • pkg:maven/net.java.dev.jna/jna-platform-jpms@5.18.1  (Confidence:High)

slf4j-api-2.0.17.jar

Description:

The slf4j API

License:

https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar
MD5: b6480d114a23683498ac3f746f959d2f
SHA1: d9e58ac9c7779ba3bf8142aff6c830617a7fe60f
SHA256:7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832
Referenced In Project/Scope: oshi-core-java11:compile
slf4j-api-2.0.17.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.oshi/oshi-core-java11@6.9.2

Identifiers

  • pkg:maven/org.slf4j/slf4j-api@2.0.17  (Confidence:High)


This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.