Critical
High
Medium
Low
Secrets
Misconfig
| Severity | CVE ID | Package | Installed | Fixed In | Description |
|---|---|---|---|---|---|
| ✅ No vulnerabilities found | |||||
| Type | File | Line | Match |
|---|---|---|---|
| ✅ No secrets found | |||
| Severity | ID | Check | File | Message |
|---|---|---|---|---|
| HIGH | DS-0002 | Image user should not be 'root' | Dockerfile | Specify at least 1 USER command in Dockerfile with non-root user as argument |
{
"SchemaVersion": 2,
"Trivy": {
"Version": "0.69.0"
},
"ReportID": "019c7a5c-641e-789c-bf92-b0d657176161",
"CreatedAt": "2026-02-20T09:23:21.246568222Z",
"ArtifactID": "sha256:338179e83a78088f4ee3ec36432aaaa11e43dca3fc82316725289ce837026a76",
"ArtifactName": "/src",
"ArtifactType": "repository",
"Metadata": {
"RepoURL": "https://github.com/eizen-ai/ha-rule-engine",
"Branch": "bugfix/Vulnerabilities-fix1",
"Commit": "cc9f69fd8908ea14ac432336012db3bb967cf622",
"CommitMsg": "update the packages versions for Vulnerabilities fix",
"Author": "Vinay Srikakolapu <vinay.srikakolapu@eizen.ai>",
"Committer": "Vinay Srikakolapu <vinay.srikakolapu@eizen.ai>"
},
"Results": [
{
"Target": "pom.xml",
"Class": "lang-pkgs",
"Type": "pom",
"Packages": [
{
"ID": "com.eizen:Rule-Engine:0.0.1-SNAPSHOT::38dda843",
"Name": "com.eizen:Rule-Engine",
"Identifier": {
"PURL": "pkg:maven/com.eizen/Rule-Engine@0.0.1-SNAPSHOT",
"UID": "f4302059a6d3d9fc"
},
"Version": "0.0.1-SNAPSHOT",
"Licenses": [
"Apache-2.0"
],
"Relationship": "root",
"DependsOn": [
"com.mysql:mysql-connector-j:9.1.0::df0d1251",
"org.apache.groovy:groovy-json:4.0.21::6c31e58a",
"org.codehaus.groovy:groovy:3.0.9::b4bc4f30",
"org.springframework.boot:spring-boot-starter-data-mongodb:3.5.5::ac98781b",
"org.springframework.boot:spring-boot-starter-web:3.5.5::a99ea3f9",
"org.springframework.boot:spring-boot-starter-webflux:3.5.5::35015ee6",
"org.springframework:spring-jdbc:6.2.11::cfb2db6e"
],
"AnalyzedBy": "pom"
},
{
"ID": "com.mysql:mysql-connector-j:9.1.0::df0d1251",
"Name": "com.mysql:mysql-connector-j",
"Identifier": {
"PURL": "pkg:maven/com.mysql/mysql-connector-j@9.1.0",
"UID": "ce8d50adb4f91f34"
},
"Version": "9.1.0",
"Licenses": [
"The GNU General Public License, v2 with Universal FOSS Exception, v1.0"
],
"Relationship": "direct",
"Locations": [
{
"StartLine": 65,
"EndLine": 69
}
],
"AnalyzedBy": "pom"
},
{
"ID": "org.apache.groovy:groovy-json:4.0.21::6c31e58a",
"Name": "org.apache.groovy:groovy-json",
"Identifier": {
"PURL": "pkg:maven/org.apache.groovy/groovy-json@4.0.21",
"UID": "d0b7345adb3e5ff7"
},
"Version": "4.0.21",
"Licenses": [
"Apache-2.0"
],
"Relationship": "direct",
"DependsOn": [
"org.apache.groovy:groovy:4.0.28::3c013bc6"
],
"Locations": [
{
"StartLine": 70,
"EndLine": 74
}
],
"AnalyzedBy": "pom"
},
{
"ID": "org.codehaus.groovy:groovy:3.0.9::b4bc4f30",
"Name": "org.codehaus.groovy:groovy",
"Identifier": {
"PURL": "pkg:maven/org.codehaus.groovy/groovy@3.0.9",
"UID": "9803d6164d803750"
},
"Version": "3.0.9",
"Licenses": [
"Apache-2.0"
],
"Relationship": "direct",
"Locations": [
{
"StartLine": 56,
"EndLine": 60
}
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework.boot:spring-boot-starter-data-mongodb:3.5.5::ac98781b",
"Name": "org.springframework.boot:spring-boot-starter-data-mongodb",
"Identifier": {
"PURL": "pkg:maven/org.springframework.boot/spring-boot-starter-data-mongodb@3.5.5",
"UID": "40098d9d215394a1"
},
"Version": "3.5.5",
"Licenses": [
"Apache-2.0"
],
"Relationship": "direct",
"DependsOn": [
"org.mongodb:mongodb-driver-sync:5.5.1::7199e4db",
"org.springframework.boot:spring-boot-starter:3.5.5::4e62ffd1",
"org.springframework.data:spring-data-mongodb:4.5.3::a9c8507c"
],
"Locations": [
{
"StartLine": 75,
"EndLine": 78
}
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework.boot:spring-boot-starter-web:3.5.5::a99ea3f9",
"Name": "org.springframework.boot:spring-boot-starter-web",
"Identifier": {
"PURL": "pkg:maven/org.springframework.boot/spring-boot-starter-web@3.5.5",
"UID": "be2629fb1b363ba7"
},
"Version": "3.5.5",
"Licenses": [
"Apache-2.0"
],
"Relationship": "direct",
"DependsOn": [
"org.springframework.boot:spring-boot-starter-json:3.5.5::189e6ccb",
"org.springframework.boot:spring-boot-starter-tomcat:3.5.5::75aa177b",
"org.springframework.boot:spring-boot-starter:3.5.5::4e62ffd1",
"org.springframework:spring-web:6.2.11::bd6017da",
"org.springframework:spring-webmvc:6.2.11::fff311ec"
],
"Locations": [
{
"StartLine": 43,
"EndLine": 46
}
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework.boot:spring-boot-starter-webflux:3.5.5::35015ee6",
"Name": "org.springframework.boot:spring-boot-starter-webflux",
"Identifier": {
"PURL": "pkg:maven/org.springframework.boot/spring-boot-starter-webflux@3.5.5",
"UID": "c34d0502913a371b"
},
"Version": "3.5.5",
"Licenses": [
"Apache-2.0"
],
"Relationship": "direct",
"DependsOn": [
"org.springframework.boot:spring-boot-starter-json:3.5.5::189e6ccb",
"org.springframework.boot:spring-boot-starter-reactor-netty:3.5.5::354c9da0",
"org.springframework.boot:spring-boot-starter:3.5.5::4e62ffd1",
"org.springframework:spring-web:6.2.11::bd6017da",
"org.springframework:spring-webflux:6.2.11::d672e689"
],
"Locations": [
{
"StartLine": 47,
"EndLine": 50
}
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework:spring-jdbc:6.2.11::cfb2db6e",
"Name": "org.springframework:spring-jdbc",
"Identifier": {
"PURL": "pkg:maven/org.springframework/spring-jdbc@6.2.11",
"UID": "e1b31ef2eb3e033c"
},
"Version": "6.2.11",
"Licenses": [
"Apache-2.0"
],
"Relationship": "direct",
"DependsOn": [
"org.springframework:spring-beans:6.2.11::c35a1565",
"org.springframework:spring-core:6.2.11::7acbb7d2",
"org.springframework:spring-tx:6.2.11::337271ca"
],
"Locations": [
{
"StartLine": 61,
"EndLine": 64
}
],
"AnalyzedBy": "pom"
},
{
"ID": "ch.qos.logback:logback-classic:1.5.32::42265a31",
"Name": "ch.qos.logback:logback-classic",
"Identifier": {
"PURL": "pkg:maven/ch.qos.logback/logback-classic@1.5.32",
"UID": "bf228d0bf70666fd"
},
"Version": "1.5.32",
"Licenses": [
"EPL-2.0",
"LGPL-2.1-only"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"ch.qos.logback:logback-core:1.5.32::ca911c4a",
"org.slf4j:slf4j-api:2.0.17::b5c66eae"
],
"AnalyzedBy": "pom"
},
{
"ID": "ch.qos.logback:logback-core:1.5.32::ca911c4a",
"Name": "ch.qos.logback:logback-core",
"Identifier": {
"PURL": "pkg:maven/ch.qos.logback/logback-core@1.5.32",
"UID": "100cc5036e792560"
},
"Version": "1.5.32",
"Licenses": [
"EPL-2.0",
"LGPL-2.1-only"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "com.fasterxml.jackson.core:jackson-annotations:2.19.2::90468352",
"Name": "com.fasterxml.jackson.core:jackson-annotations",
"Identifier": {
"PURL": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.2",
"UID": "add029a3f2e84007"
},
"Version": "2.19.2",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "com.fasterxml.jackson.core:jackson-core:2.19.2::671e081c",
"Name": "com.fasterxml.jackson.core:jackson-core",
"Identifier": {
"PURL": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.2",
"UID": "ce5c3ee82960c86c"
},
"Version": "2.19.2",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "com.fasterxml.jackson.core:jackson-databind:2.19.2::b1317fc2",
"Name": "com.fasterxml.jackson.core:jackson-databind",
"Identifier": {
"PURL": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.2",
"UID": "1039440f43e33f4c"
},
"Version": "2.19.2",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"com.fasterxml.jackson.core:jackson-annotations:2.19.2::90468352",
"com.fasterxml.jackson.core:jackson-core:2.19.2::671e081c"
],
"AnalyzedBy": "pom"
},
{
"ID": "com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.19.2::f228ff57",
"Name": "com.fasterxml.jackson.datatype:jackson-datatype-jdk8",
"Identifier": {
"PURL": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.19.2",
"UID": "28dbe33f70f4e5ab"
},
"Version": "2.19.2",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"com.fasterxml.jackson.core:jackson-core:2.19.2::671e081c",
"com.fasterxml.jackson.core:jackson-databind:2.19.2::b1317fc2"
],
"AnalyzedBy": "pom"
},
{
"ID": "com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.19.2::74f4d7bf",
"Name": "com.fasterxml.jackson.datatype:jackson-datatype-jsr310",
"Identifier": {
"PURL": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.19.2",
"UID": "620ea8f9841daa0e"
},
"Version": "2.19.2",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"com.fasterxml.jackson.core:jackson-annotations:2.19.2::90468352",
"com.fasterxml.jackson.core:jackson-core:2.19.2::671e081c",
"com.fasterxml.jackson.core:jackson-databind:2.19.2::b1317fc2"
],
"AnalyzedBy": "pom"
},
{
"ID": "com.fasterxml.jackson.module:jackson-module-parameter-names:2.19.2::23fe213a",
"Name": "com.fasterxml.jackson.module:jackson-module-parameter-names",
"Identifier": {
"PURL": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.19.2",
"UID": "5ed929849b1f4fd1"
},
"Version": "2.19.2",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"com.fasterxml.jackson.core:jackson-core:2.19.2::671e081c",
"com.fasterxml.jackson.core:jackson-databind:2.19.2::b1317fc2"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.micrometer:micrometer-commons:1.15.3::c863770a",
"Name": "io.micrometer:micrometer-commons",
"Identifier": {
"PURL": "pkg:maven/io.micrometer/micrometer-commons@1.15.3",
"UID": "a8da7a32beeec765"
},
"Version": "1.15.3",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "io.micrometer:micrometer-observation:1.15.3::33d5dbcc",
"Name": "io.micrometer:micrometer-observation",
"Identifier": {
"PURL": "pkg:maven/io.micrometer/micrometer-observation@1.15.3",
"UID": "4dfb0944c2bd6ec1"
},
"Version": "1.15.3",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.micrometer:micrometer-commons:1.15.3::c863770a"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-buffer:4.1.129.Final::4da95e83",
"Name": "io.netty:netty-buffer",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-buffer@4.1.129.Final",
"UID": "2d32eb4eab05d74b"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-common:4.1.129.Final::83e02647"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-codec:4.1.129.Final::383ba848",
"Name": "io.netty:netty-codec",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-codec@4.1.129.Final",
"UID": "3bdc5cd85a911074"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-buffer:4.1.129.Final::4da95e83",
"io.netty:netty-common:4.1.129.Final::83e02647",
"io.netty:netty-transport:4.1.129.Final::af491590"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-codec-dns:4.1.129.Final::b918ed2a",
"Name": "io.netty:netty-codec-dns",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-codec-dns@4.1.129.Final",
"UID": "37d03d871d329b8b"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-buffer:4.1.129.Final::4da95e83",
"io.netty:netty-codec:4.1.129.Final::383ba848",
"io.netty:netty-common:4.1.129.Final::83e02647",
"io.netty:netty-transport:4.1.129.Final::af491590"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-codec-http:4.1.129.Final::22bc1012",
"Name": "io.netty:netty-codec-http",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-codec-http@4.1.129.Final",
"UID": "112e9100509bcfda"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-buffer:4.1.129.Final::4da95e83",
"io.netty:netty-codec:4.1.129.Final::383ba848",
"io.netty:netty-common:4.1.129.Final::83e02647",
"io.netty:netty-handler:4.1.129.Final::7307fedf",
"io.netty:netty-transport:4.1.129.Final::af491590"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-codec-http2:4.1.129.Final::693b206c",
"Name": "io.netty:netty-codec-http2",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-codec-http2@4.1.129.Final",
"UID": "ff95227933b99a1e"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-buffer:4.1.129.Final::4da95e83",
"io.netty:netty-codec-http:4.1.129.Final::22bc1012",
"io.netty:netty-codec:4.1.129.Final::383ba848",
"io.netty:netty-common:4.1.129.Final::83e02647",
"io.netty:netty-handler:4.1.129.Final::7307fedf",
"io.netty:netty-transport:4.1.129.Final::af491590"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-codec-socks:4.1.129.Final::99855d80",
"Name": "io.netty:netty-codec-socks",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-codec-socks@4.1.129.Final",
"UID": "3241bb3c40ad33d2"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-buffer:4.1.129.Final::4da95e83",
"io.netty:netty-codec:4.1.129.Final::383ba848",
"io.netty:netty-common:4.1.129.Final::83e02647",
"io.netty:netty-transport:4.1.129.Final::af491590"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-common:4.1.129.Final::83e02647",
"Name": "io.netty:netty-common",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-common@4.1.129.Final",
"UID": "9fef6a01c692c083"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-handler:4.1.129.Final::7307fedf",
"Name": "io.netty:netty-handler",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-handler@4.1.129.Final",
"UID": "d037bfb0c00272f"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-buffer:4.1.129.Final::4da95e83",
"io.netty:netty-codec:4.1.129.Final::383ba848",
"io.netty:netty-common:4.1.129.Final::83e02647",
"io.netty:netty-resolver:4.1.129.Final::cbbe06e2",
"io.netty:netty-transport-native-unix-common:4.1.129.Final::b10d437a",
"io.netty:netty-transport:4.1.129.Final::af491590"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-handler-proxy:4.1.129.Final::58a573e9",
"Name": "io.netty:netty-handler-proxy",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-handler-proxy@4.1.129.Final",
"UID": "8d0b4f9125eea72b"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-buffer:4.1.129.Final::4da95e83",
"io.netty:netty-codec-http:4.1.129.Final::22bc1012",
"io.netty:netty-codec-socks:4.1.129.Final::99855d80",
"io.netty:netty-codec:4.1.129.Final::383ba848",
"io.netty:netty-common:4.1.129.Final::83e02647",
"io.netty:netty-transport:4.1.129.Final::af491590"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-resolver:4.1.129.Final::cbbe06e2",
"Name": "io.netty:netty-resolver",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-resolver@4.1.129.Final",
"UID": "aecb7301d4d06798"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-common:4.1.129.Final::83e02647"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-resolver-dns:4.1.129.Final::10ac9cb5",
"Name": "io.netty:netty-resolver-dns",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-resolver-dns@4.1.129.Final",
"UID": "7f850dc1ce22b38f"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-buffer:4.1.129.Final::4da95e83",
"io.netty:netty-codec-dns:4.1.129.Final::b918ed2a",
"io.netty:netty-codec:4.1.129.Final::383ba848",
"io.netty:netty-common:4.1.129.Final::83e02647",
"io.netty:netty-handler:4.1.129.Final::7307fedf",
"io.netty:netty-resolver:4.1.129.Final::cbbe06e2",
"io.netty:netty-transport:4.1.129.Final::af491590"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-resolver-dns-classes-macos:4.1.129.Final::fc653a07",
"Name": "io.netty:netty-resolver-dns-classes-macos",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-resolver-dns-classes-macos@4.1.129.Final",
"UID": "5a12928ce7fd4f2"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-common:4.1.129.Final::83e02647",
"io.netty:netty-resolver-dns:4.1.129.Final::10ac9cb5",
"io.netty:netty-transport-native-unix-common:4.1.129.Final::b10d437a"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-resolver-dns-native-macos:4.1.129.Final::4ae7aee6",
"Name": "io.netty:netty-resolver-dns-native-macos",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-resolver-dns-native-macos@4.1.129.Final",
"UID": "e47e0b34e2e68dee"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-resolver-dns-classes-macos:4.1.129.Final::fc653a07"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-transport:4.1.129.Final::af491590",
"Name": "io.netty:netty-transport",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-transport@4.1.129.Final",
"UID": "d6c534a52cb40c0f"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-buffer:4.1.129.Final::4da95e83",
"io.netty:netty-common:4.1.129.Final::83e02647",
"io.netty:netty-resolver:4.1.129.Final::cbbe06e2"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-transport-classes-epoll:4.1.129.Final::4dd791a6",
"Name": "io.netty:netty-transport-classes-epoll",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.129.Final",
"UID": "6eb36e33bc6f3644"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-buffer:4.1.129.Final::4da95e83",
"io.netty:netty-common:4.1.129.Final::83e02647",
"io.netty:netty-transport-native-unix-common:4.1.129.Final::b10d437a",
"io.netty:netty-transport:4.1.129.Final::af491590"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-transport-native-epoll:4.1.129.Final::e6fdd9b7",
"Name": "io.netty:netty-transport-native-epoll",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-transport-native-epoll@4.1.129.Final",
"UID": "34bf2cbdb111b415"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-buffer:4.1.129.Final::4da95e83",
"io.netty:netty-common:4.1.129.Final::83e02647",
"io.netty:netty-transport-classes-epoll:4.1.129.Final::4dd791a6",
"io.netty:netty-transport-native-unix-common:4.1.129.Final::b10d437a",
"io.netty:netty-transport:4.1.129.Final::af491590"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.netty:netty-transport-native-unix-common:4.1.129.Final::b10d437a",
"Name": "io.netty:netty-transport-native-unix-common",
"Identifier": {
"PURL": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.129.Final",
"UID": "39337e70fb471c88"
},
"Version": "4.1.129.Final",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-buffer:4.1.129.Final::4da95e83",
"io.netty:netty-common:4.1.129.Final::83e02647",
"io.netty:netty-transport:4.1.129.Final::af491590"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.projectreactor.netty:reactor-netty-core:1.2.9::158214ba",
"Name": "io.projectreactor.netty:reactor-netty-core",
"Identifier": {
"PURL": "pkg:maven/io.projectreactor.netty/reactor-netty-core@1.2.9",
"UID": "8404c07ef46bc999"
},
"Version": "1.2.9",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-handler-proxy:4.1.129.Final::58a573e9",
"io.netty:netty-handler:4.1.129.Final::7307fedf",
"io.netty:netty-resolver-dns-native-macos:4.1.129.Final::4ae7aee6",
"io.netty:netty-resolver-dns:4.1.129.Final::10ac9cb5",
"io.netty:netty-transport-native-epoll:4.1.129.Final::e6fdd9b7",
"io.projectreactor:reactor-core:3.7.9::4c4b4cc5"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.projectreactor.netty:reactor-netty-http:1.2.9::51c4c647",
"Name": "io.projectreactor.netty:reactor-netty-http",
"Identifier": {
"PURL": "pkg:maven/io.projectreactor.netty/reactor-netty-http@1.2.9",
"UID": "6fedd6361a48a0be"
},
"Version": "1.2.9",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.netty:netty-codec-http2:4.1.129.Final::693b206c",
"io.netty:netty-codec-http:4.1.129.Final::22bc1012",
"io.netty:netty-resolver-dns-native-macos:4.1.129.Final::4ae7aee6",
"io.netty:netty-resolver-dns:4.1.129.Final::10ac9cb5",
"io.netty:netty-transport-native-epoll:4.1.129.Final::e6fdd9b7",
"io.projectreactor.netty:reactor-netty-core:1.2.9::158214ba",
"io.projectreactor:reactor-core:3.7.9::4c4b4cc5"
],
"AnalyzedBy": "pom"
},
{
"ID": "io.projectreactor:reactor-core:3.7.9::4c4b4cc5",
"Name": "io.projectreactor:reactor-core",
"Identifier": {
"PURL": "pkg:maven/io.projectreactor/reactor-core@3.7.9",
"UID": "f55a2b43fe49e2fb"
},
"Version": "3.7.9",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.reactivestreams:reactive-streams:1.0.4::895ad079"
],
"AnalyzedBy": "pom"
},
{
"ID": "jakarta.annotation:jakarta.annotation-api:2.1.1::78d77cec",
"Name": "jakarta.annotation:jakarta.annotation-api",
"Identifier": {
"PURL": "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1",
"UID": "57fed4fd90d79cb7"
},
"Version": "2.1.1",
"Licenses": [
"EPL-2.0",
"GPL-2.0-with-classpath-exception"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "org.apache.groovy:groovy:4.0.28::3c013bc6",
"Name": "org.apache.groovy:groovy",
"Identifier": {
"PURL": "pkg:maven/org.apache.groovy/groovy@4.0.28",
"UID": "1789e2b3e96796d3"
},
"Version": "4.0.28",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "org.apache.logging.log4j:log4j-api:2.24.3::9741b808",
"Name": "org.apache.logging.log4j:log4j-api",
"Identifier": {
"PURL": "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3",
"UID": "877d93ae3cebaab5"
},
"Version": "2.24.3",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "org.apache.logging.log4j:log4j-to-slf4j:2.24.3::1db61e78",
"Name": "org.apache.logging.log4j:log4j-to-slf4j",
"Identifier": {
"PURL": "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.24.3",
"UID": "dc372916f9eb7592"
},
"Version": "2.24.3",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.apache.logging.log4j:log4j-api:2.24.3::9741b808",
"org.slf4j:slf4j-api:2.0.17::b5c66eae"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.apache.tomcat.embed:tomcat-embed-core:10.1.50::8e142ee2",
"Name": "org.apache.tomcat.embed:tomcat-embed-core",
"Identifier": {
"PURL": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.50",
"UID": "811ac528b6de8f38"
},
"Version": "10.1.50",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "org.apache.tomcat.embed:tomcat-embed-el:10.1.50::f1eae688",
"Name": "org.apache.tomcat.embed:tomcat-embed-el",
"Identifier": {
"PURL": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@10.1.50",
"UID": "920d63575e37c0bd"
},
"Version": "10.1.50",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "org.apache.tomcat.embed:tomcat-embed-websocket:10.1.50::522e5eda",
"Name": "org.apache.tomcat.embed:tomcat-embed-websocket",
"Identifier": {
"PURL": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.50",
"UID": "5f6a9699984c5928"
},
"Version": "10.1.50",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.apache.tomcat.embed:tomcat-embed-core:10.1.50::8e142ee2"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.mongodb:bson:5.5.1::734d2aa3",
"Name": "org.mongodb:bson",
"Identifier": {
"PURL": "pkg:maven/org.mongodb/bson@5.5.1",
"UID": "ad1c5b7b844ba8c7"
},
"Version": "5.5.1",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "org.mongodb:bson-record-codec:5.5.1::8806c60a",
"Name": "org.mongodb:bson-record-codec",
"Identifier": {
"PURL": "pkg:maven/org.mongodb/bson-record-codec@5.5.1",
"UID": "13a3fa09880125e"
},
"Version": "5.5.1",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.mongodb:bson:5.5.1::734d2aa3"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.mongodb:mongodb-driver-core:5.5.1::3a5e6e91",
"Name": "org.mongodb:mongodb-driver-core",
"Identifier": {
"PURL": "pkg:maven/org.mongodb/mongodb-driver-core@5.5.1",
"UID": "f8548f19bc0ea5bc"
},
"Version": "5.5.1",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.mongodb:bson-record-codec:5.5.1::8806c60a",
"org.mongodb:bson:5.5.1::734d2aa3"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.mongodb:mongodb-driver-sync:5.5.1::7199e4db",
"Name": "org.mongodb:mongodb-driver-sync",
"Identifier": {
"PURL": "pkg:maven/org.mongodb/mongodb-driver-sync@5.5.1",
"UID": "149fa23209e47262"
},
"Version": "5.5.1",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.mongodb:bson:5.5.1::734d2aa3",
"org.mongodb:mongodb-driver-core:5.5.1::3a5e6e91"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.reactivestreams:reactive-streams:1.0.4::895ad079",
"Name": "org.reactivestreams:reactive-streams",
"Identifier": {
"PURL": "pkg:maven/org.reactivestreams/reactive-streams@1.0.4",
"UID": "155528fca27d7b05"
},
"Version": "1.0.4",
"Licenses": [
"MIT-0"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "org.slf4j:jul-to-slf4j:2.0.17::66a480e2",
"Name": "org.slf4j:jul-to-slf4j",
"Identifier": {
"PURL": "pkg:maven/org.slf4j/jul-to-slf4j@2.0.17",
"UID": "fbf1d690149d772c"
},
"Version": "2.0.17",
"Licenses": [
"MIT"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.slf4j:slf4j-api:2.0.17::b5c66eae"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.slf4j:slf4j-api:2.0.17::b5c66eae",
"Name": "org.slf4j:slf4j-api",
"Identifier": {
"PURL": "pkg:maven/org.slf4j/slf4j-api@2.0.17",
"UID": "f8085c3d799116b8"
},
"Version": "2.0.17",
"Licenses": [
"MIT"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework.boot:spring-boot:3.5.5::70681926",
"Name": "org.springframework.boot:spring-boot",
"Identifier": {
"PURL": "pkg:maven/org.springframework.boot/spring-boot@3.5.5",
"UID": "5fd33d6816162b6a"
},
"Version": "3.5.5",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.springframework:spring-context:6.2.11::713e6e5e",
"org.springframework:spring-core:6.2.11::7acbb7d2"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework.boot:spring-boot-autoconfigure:3.5.5::be942e32",
"Name": "org.springframework.boot:spring-boot-autoconfigure",
"Identifier": {
"PURL": "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@3.5.5",
"UID": "22b006594d939f7b"
},
"Version": "3.5.5",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.springframework.boot:spring-boot:3.5.5::70681926"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework.boot:spring-boot-starter:3.5.5::4e62ffd1",
"Name": "org.springframework.boot:spring-boot-starter",
"Identifier": {
"PURL": "pkg:maven/org.springframework.boot/spring-boot-starter@3.5.5",
"UID": "ce3eed514539ee1c"
},
"Version": "3.5.5",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"jakarta.annotation:jakarta.annotation-api:2.1.1::78d77cec",
"org.springframework.boot:spring-boot-autoconfigure:3.5.5::be942e32",
"org.springframework.boot:spring-boot-starter-logging:3.5.5::ca2fb111",
"org.springframework.boot:spring-boot:3.5.5::70681926",
"org.springframework:spring-core:6.2.11::7acbb7d2",
"org.yaml:snakeyaml:2.4::df71c093"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework.boot:spring-boot-starter-json:3.5.5::189e6ccb",
"Name": "org.springframework.boot:spring-boot-starter-json",
"Identifier": {
"PURL": "pkg:maven/org.springframework.boot/spring-boot-starter-json@3.5.5",
"UID": "e38fa9e5afd7ee09"
},
"Version": "3.5.5",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"com.fasterxml.jackson.core:jackson-databind:2.19.2::b1317fc2",
"com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.19.2::f228ff57",
"com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.19.2::74f4d7bf",
"com.fasterxml.jackson.module:jackson-module-parameter-names:2.19.2::23fe213a",
"org.springframework.boot:spring-boot-starter:3.5.5::4e62ffd1",
"org.springframework:spring-web:6.2.11::bd6017da"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework.boot:spring-boot-starter-logging:3.5.5::ca2fb111",
"Name": "org.springframework.boot:spring-boot-starter-logging",
"Identifier": {
"PURL": "pkg:maven/org.springframework.boot/spring-boot-starter-logging@3.5.5",
"UID": "92b5e8f0bc178f11"
},
"Version": "3.5.5",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"ch.qos.logback:logback-classic:1.5.32::42265a31",
"org.apache.logging.log4j:log4j-to-slf4j:2.24.3::1db61e78",
"org.slf4j:jul-to-slf4j:2.0.17::66a480e2"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework.boot:spring-boot-starter-reactor-netty:3.5.5::354c9da0",
"Name": "org.springframework.boot:spring-boot-starter-reactor-netty",
"Identifier": {
"PURL": "pkg:maven/org.springframework.boot/spring-boot-starter-reactor-netty@3.5.5",
"UID": "53a222c6c306c40b"
},
"Version": "3.5.5",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.projectreactor.netty:reactor-netty-http:1.2.9::51c4c647"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework.boot:spring-boot-starter-tomcat:3.5.5::75aa177b",
"Name": "org.springframework.boot:spring-boot-starter-tomcat",
"Identifier": {
"PURL": "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@3.5.5",
"UID": "eb142f1b0e043b5e"
},
"Version": "3.5.5",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"jakarta.annotation:jakarta.annotation-api:2.1.1::78d77cec",
"org.apache.tomcat.embed:tomcat-embed-core:10.1.50::8e142ee2",
"org.apache.tomcat.embed:tomcat-embed-el:10.1.50::f1eae688",
"org.apache.tomcat.embed:tomcat-embed-websocket:10.1.50::522e5eda"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework.data:spring-data-commons:3.5.3::f57ae30e",
"Name": "org.springframework.data:spring-data-commons",
"Identifier": {
"PURL": "pkg:maven/org.springframework.data/spring-data-commons@3.5.3",
"UID": "bf3a5fea01c307c6"
},
"Version": "3.5.3",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.slf4j:slf4j-api:2.0.17::b5c66eae",
"org.springframework:spring-beans:6.2.11::c35a1565",
"org.springframework:spring-core:6.2.11::7acbb7d2"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework.data:spring-data-mongodb:4.5.3::a9c8507c",
"Name": "org.springframework.data:spring-data-mongodb",
"Identifier": {
"PURL": "pkg:maven/org.springframework.data/spring-data-mongodb@4.5.3",
"UID": "9552d484dc47777f"
},
"Version": "4.5.3",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.mongodb:mongodb-driver-core:5.5.1::3a5e6e91",
"org.slf4j:slf4j-api:2.0.17::b5c66eae",
"org.springframework.data:spring-data-commons:3.5.3::f57ae30e",
"org.springframework:spring-beans:6.2.11::c35a1565",
"org.springframework:spring-context:6.2.11::713e6e5e",
"org.springframework:spring-core:6.2.11::7acbb7d2",
"org.springframework:spring-expression:6.2.11::8667d8d6",
"org.springframework:spring-tx:6.2.11::337271ca"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework:spring-aop:6.2.11::22a22bc4",
"Name": "org.springframework:spring-aop",
"Identifier": {
"PURL": "pkg:maven/org.springframework/spring-aop@6.2.11",
"UID": "31d1be0e3d022c84"
},
"Version": "6.2.11",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.springframework:spring-beans:6.2.11::c35a1565",
"org.springframework:spring-core:6.2.11::7acbb7d2"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework:spring-beans:6.2.11::c35a1565",
"Name": "org.springframework:spring-beans",
"Identifier": {
"PURL": "pkg:maven/org.springframework/spring-beans@6.2.11",
"UID": "d1ab012370647e9f"
},
"Version": "6.2.11",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.springframework:spring-core:6.2.11::7acbb7d2"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework:spring-context:6.2.11::713e6e5e",
"Name": "org.springframework:spring-context",
"Identifier": {
"PURL": "pkg:maven/org.springframework/spring-context@6.2.11",
"UID": "ea4bc74e4cb4d701"
},
"Version": "6.2.11",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.micrometer:micrometer-observation:1.15.3::33d5dbcc",
"org.springframework:spring-aop:6.2.11::22a22bc4",
"org.springframework:spring-beans:6.2.11::c35a1565",
"org.springframework:spring-core:6.2.11::7acbb7d2",
"org.springframework:spring-expression:6.2.11::8667d8d6"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework:spring-core:6.2.11::7acbb7d2",
"Name": "org.springframework:spring-core",
"Identifier": {
"PURL": "pkg:maven/org.springframework/spring-core@6.2.11",
"UID": "ecb306fad36a2b45"
},
"Version": "6.2.11",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.springframework:spring-jcl:6.2.11::8f8b50ee"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework:spring-expression:6.2.11::8667d8d6",
"Name": "org.springframework:spring-expression",
"Identifier": {
"PURL": "pkg:maven/org.springframework/spring-expression@6.2.11",
"UID": "5a2362603113c2a6"
},
"Version": "6.2.11",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.springframework:spring-core:6.2.11::7acbb7d2"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework:spring-jcl:6.2.11::8f8b50ee",
"Name": "org.springframework:spring-jcl",
"Identifier": {
"PURL": "pkg:maven/org.springframework/spring-jcl@6.2.11",
"UID": "c5c26e44ac2d85ad"
},
"Version": "6.2.11",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework:spring-tx:6.2.11::337271ca",
"Name": "org.springframework:spring-tx",
"Identifier": {
"PURL": "pkg:maven/org.springframework/spring-tx@6.2.11",
"UID": "d64d69321d5998b"
},
"Version": "6.2.11",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.springframework:spring-beans:6.2.11::c35a1565",
"org.springframework:spring-core:6.2.11::7acbb7d2"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework:spring-web:6.2.11::bd6017da",
"Name": "org.springframework:spring-web",
"Identifier": {
"PURL": "pkg:maven/org.springframework/spring-web@6.2.11",
"UID": "3694fa962c7f3c6e"
},
"Version": "6.2.11",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.micrometer:micrometer-observation:1.15.3::33d5dbcc",
"org.springframework:spring-beans:6.2.11::c35a1565",
"org.springframework:spring-core:6.2.11::7acbb7d2"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework:spring-webflux:6.2.11::d672e689",
"Name": "org.springframework:spring-webflux",
"Identifier": {
"PURL": "pkg:maven/org.springframework/spring-webflux@6.2.11",
"UID": "bce7ac79c59c1a7b"
},
"Version": "6.2.11",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"io.projectreactor:reactor-core:3.7.9::4c4b4cc5",
"org.springframework:spring-beans:6.2.11::c35a1565",
"org.springframework:spring-core:6.2.11::7acbb7d2",
"org.springframework:spring-web:6.2.11::bd6017da"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.springframework:spring-webmvc:6.2.11::fff311ec",
"Name": "org.springframework:spring-webmvc",
"Identifier": {
"PURL": "pkg:maven/org.springframework/spring-webmvc@6.2.11",
"UID": "cb0402e77b0ad82b"
},
"Version": "6.2.11",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"DependsOn": [
"org.springframework:spring-aop:6.2.11::22a22bc4",
"org.springframework:spring-beans:6.2.11::c35a1565",
"org.springframework:spring-context:6.2.11::713e6e5e",
"org.springframework:spring-core:6.2.11::7acbb7d2",
"org.springframework:spring-expression:6.2.11::8667d8d6",
"org.springframework:spring-web:6.2.11::bd6017da"
],
"AnalyzedBy": "pom"
},
{
"ID": "org.yaml:snakeyaml:2.4::df71c093",
"Name": "org.yaml:snakeyaml",
"Identifier": {
"PURL": "pkg:maven/org.yaml/snakeyaml@2.4",
"UID": "9d9e1487646b3985"
},
"Version": "2.4",
"Licenses": [
"Apache-2.0"
],
"Indirect": true,
"Relationship": "indirect",
"AnalyzedBy": "pom"
}
]
},
{
"Target": "Dockerfile",
"Class": "config",
"Type": "dockerfile",
"MisconfSummary": {
"Successes": 23,
"Failures": 1
},
"Misconfigurations": [
{
"Type": "Dockerfile Security Check",
"ID": "DS-0002",
"Title": "Image user should not be 'root'",
"Description": "Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.",
"Message": "Specify at least 1 USER command in Dockerfile with non-root user as argument",
"Namespace": "builtin.dockerfile.DS002",
"Query": "data.builtin.dockerfile.DS002.deny",
"Resolution": "Add 'USER <non root user name>' line to the Dockerfile",
"Severity": "HIGH",
"PrimaryURL": "https://avd.aquasec.com/misconfig/ds-0002",
"References": [
"https://docs.docker.com/develop/develop-images/dockerfile_best-practices/",
"https://avd.aquasec.com/misconfig/ds-0002"
],
"Status": "FAIL",
"CauseMetadata": {
"Provider": "Dockerfile",
"Service": "general"
}
}
]
}
]
}