Skip to content

Bump jboss-parent to v55 - #803

Merged
rnc merged 1 commit into
project-ncl:masterfrom
patrikk0123:jboss-parent@v55
Oct 22, 2026
Merged

Bump jboss-parent to v55#803
rnc merged 1 commit into
project-ncl:masterfrom
patrikk0123:jboss-parent@v55

Conversation

@patrikk0123

@patrikk0123 patrikk0123 commented Oct 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

No description provided.

@github-actions

github-actions Bot commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output 



Identified 387 dependencies

Detected 24 vulnerabilities (1 Critical, 4 High, 18 Medium, 1 Low)

+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |              LIBRARY               |       ID        |                                               TOP FIX                                                |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | jackson-databind-2.21.7.jar        | CVE-2026-110879 | Upgrade to version  https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.12,    |
|          |                                    |                 | com.fasterxml.jackson.core:jackson-databind:2.22.4,                                                  |
|          |                                    |                 | com.fasterxml.jackson.core:jackson-databind:2.21.8,                                                  |
|          |                                    |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.4,                          |
|          |                                    |                 | tools.jackson.core:jackson-databind:3.1.8,com.fasterxml.jackson.core:jackson-databind:2.18.12,       |
|          |                                    |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.8,                         |
|          |                                    |                 | tools.jackson.core:jackson-databind:3.2.4, https://github.com/FasterXML/jackson-databind.git -       |
|          |                                    |                 | jackson-databind-3.1.8, https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.4  |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | guava-33.6.0-jre.jar               | CVE-2026-102554 | Upgrade to version com.google.guava:guava:33.7.2, https://github.com/google/guava.git - v33.7.2      |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | vertx-core-4.5.34.jar              | CVE-2026-102467 | Upgrade to version io.vertx:vertx-core:5.1.9,io.vertx:vertx-core:4.5.35,io.vertx:vertx-core:5.2.1    |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | vertx-grpc-server-4.5.34.jar       | CVE-2026-102477 | Upgrade to version io.vertx:vertx-grpc-server:4.5.35,io.vertx:vertx-grpc-server:5.1.10               |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | vertx-web-4.5.34.jar               | CVE-2026-102460 | Upgrade to version io.vertx:vertx-web:4.5.35, https://github.com/vert-x3/vertx-web.git - 5.1.9,      |
|          |                                    |                 | https://github.com/vert-x3/vertx-web.git - 4.5.35, https://github.com/vert-x3/vertx-web.git - 5.2.1, |
|          |                                    |                 | io.vertx:vertx-web:5.1.9                                                                             |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-9.10.1.jar                     | CVE-2026-110257 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11               |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-9.10.1.jar                     | CVE-2026-110258 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11               |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-9.10.1.jar                     | CVE-2026-110259 | Upgrade to version org.ow2.asm:asm:9.11                                                              |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-9.10.1.jar                     | CVE-2026-110260 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11               |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-9.10.1.jar                     | CVE-2026-110261 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11               |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-9.10.1.jar                     | CVE-2026-110263 | Upgrade to version  https://gitlab.ow2.org/asm/asm.git - ASM_9_11,org.ow2.asm:asm:9.11               |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-9.10.1.jar                     | CVE-2026-110591 | Upgrade to version org.ow2.asm:asm-analysis:9.11,org.ow2.asm:asm:9.11,                               |
|          |                                    |                 | https://gitlab.ow2.org/asm/asm.git - ASM_9_11                                                        |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.86.jar            | CVE-2026-97873  | N/A                                                                                                  |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-coreutils-2.0.jar          | CVE-2026-86321  | N/A                                                                                                  |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-coreutils-2.0.jar          | CVE-2026-86511  | N/A                                                                                                  |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-coreutils-2.0.jar          | CVE-2026-86513  | N/A                                                                                                  |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | json-patch-1.13.jar                | CVE-2026-86318  | N/A                                                                                                  |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | json-patch-1.13.jar                | CVE-2026-86319  | N/A                                                                                                  |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | json-patch-1.13.jar                | CVE-2026-86512  | N/A                                                                                                  |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | json-smart-2.6.0.jar               | CVE-2026-113602 | N/A                                                                                                  |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | postgresql-42.7.13.jar             | CVE-2026-107314 | Upgrade to version org.postgresql:postgresql:42.7.14, https://github.com/pgjdbc/pgjdbc.git -         |
|          |                                    |                 | REL42.7.14                                                                                           |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | postgresql-42.7.13.jar             | CVE-2026-107315 | Upgrade to version org.postgresql:postgresql:42.7.14, https://github.com/pgjdbc/pgjdbc.git -         |
|          |                                    |                 | REL42.7.14                                                                                           |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | wildfly-elytron-asn1-2.9.2.SP1.jar | CVE-2026-10832  | Upgrade to version org.wildfly.security:wildfly-elytron:2.9.3.Final,                                 |
|          |                                    |                 | org.wildfly.security:wildfly-elytron:2.8.6.Final,org.wildfly.security:wildfly-elytron:2.6.11.Final,  |
|          |                                    |                 | org.wildfly.security:wildfly-elytron-asn1:2.9.3.Final,                                               |
|          |                                    |                 | org.wildfly.security:wildfly-elytron-asn1:2.6.11.Final,                                              |
|          |                                    |                 | https://github.com/wildfly-security/wildfly-elytron.git - 2.9.3.Final,                               |
|          |                                    |                 | https://github.com/wildfly-security/wildfly-elytron.git - 2.8.6.Final,                               |
|          |                                    |                 | https://github.com/wildfly-security/wildfly-elytron.git - 2.6.11.Final,                              |
|          |                                    |                 | org.wildfly.security:wildfly-elytron-asn1:2.8.6.Final                                                |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| LOW      | LatencyUtils-2.0.3.jar             | CVE-2026-82596  | N/A                                                                                                  |
+----------+------------------------------------+-----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

application-4.0.0-SNAPSHOT.jar
|-- quarkus-config-yaml-3.40.1.jar
	|-- smallrye-config-source-yaml-3.17.2.jar
		|-- smallrye-config-core-3.17.2.jar
			|-- asm-9.10.1.jar [7 MEDIUM]
|-- quarkus-elytron-security-ldap-3.40.1.jar
	|-- wildfly-elytron-realm-ldap-2.9.2.SP1.jar
		|-- wildfly-elytron-auth-server-2.9.2.SP1.jar
			|-- wildfly-elytron-x500-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
		|-- wildfly-elytron-client-2.9.2.SP1.jar
			|-- wildfly-elytron-credential-store-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
			|-- wildfly-elytron-mechanism-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
		|-- wildfly-elytron-credential-2.9.2.SP1.jar
			|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
			|-- wildfly-elytron-keystore-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
		|-- wildfly-elytron-realm-2.9.2.SP1.jar
			|-- wildfly-elytron-x500-cert-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
				|-- wildfly-elytron-x500-cert-util-2.9.2.SP1.jar
					|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
		|-- wildfly-elytron-util-2.9.2.SP1.jar
			|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
|-- quarkus-hibernate-validator-3.40.1.jar
	|-- quarkus-vertx-http-3.40.1.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- quarkus-tls-registry-3.40.1.jar
			|-- smallrye-private-key-pem-parser-0.9.4.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- bcpkix-jdk18on-1.86.jar
					|-- bcutil-jdk18on-1.86.jar
						|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
				|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
			|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- smallrye-mutiny-vertx-web-3.23.1.jar
			|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- vertx-web-4.5.34.jar [1 HIGH]
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- vertx-auth-common-4.5.34.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-bridge-common-4.5.34.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-web-common-4.5.34.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
|-- quarkus-jdbc-postgresql-3.40.1.jar
	|-- quarkus-agroal-3.40.1.jar
		|-- quarkus-datasource-3.40.1.jar
			|-- vertx-web-4.5.34.jar [1 HIGH]
	|-- postgresql-42.7.13.jar [2 MEDIUM]
|-- quarkus-micrometer-opentelemetry-3.40.1.jar
	|-- quarkus-micrometer-3.40.1.jar
		|-- micrometer-core-1.17.1.jar
			|-- guava-33.6.0-jre.jar [1 HIGH]
		|-- resteasy-reactive-client-3.40.1.jar
			|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- quarkus-rest-3.40.1.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- resteasy-reactive-vertx-3.40.1.jar
				|-- quarkus-vertx-utils-3.40.1.jar
					|-- vertx-web-4.5.34.jar [1 HIGH]
				|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- quarkus-undertow-3.40.1.jar
			|-- quarkus-http-vertx-backend-5.5.0.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- LatencyUtils-2.0.3.jar [1 LOW]
	|-- quarkus-opentelemetry-3.40.1.jar
		|-- quarkus-grpc-common-3.40.1.jar
			|-- grpc-core-1.81.0.jar
				|-- guava-33.6.0-jre.jar [1 HIGH]
			|-- vertx-grpc-server-4.5.34.jar [1 HIGH]
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-grpc-4.5.34.jar
				|-- guava-33.6.0-jre.jar [1 HIGH]
				|-- grpc-netty-1.81.0.jar
					|-- guava-33.6.0-jre.jar [1 HIGH]
					|-- grpc-util-1.81.0.jar
						|-- guava-33.6.0-jre.jar [1 HIGH]
				|-- grpc-protobuf-1.81.0.jar
					|-- guava-33.6.0-jre.jar [1 HIGH]
					|-- grpc-protobuf-lite-1.81.0.jar
						|-- guava-33.6.0-jre.jar [1 HIGH]
				|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- vertx-grpc-client-4.5.34.jar
			|-- grpc-api-1.81.0.jar
				|-- guava-33.6.0-jre.jar [1 HIGH]
			|-- grpc-stub-1.81.0.jar
				|-- guava-33.6.0-jre.jar [1 HIGH]
			|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-grpc-common-4.5.34.jar
				|-- guava-33.6.0-jre.jar [1 HIGH]
				|-- vertx-core-4.5.34.jar [1 HIGH]
|-- quarkus-oidc-3.40.1.jar
	|-- quarkus-oidc-common-3.40.1.jar
		|-- smallrye-mutiny-vertx-web-client-3.23.1.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-web-client-4.5.34.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-uri-template-4.5.34.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
	|-- quarkus-vertx-3.40.1.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- netty-codec-haproxy-4.1.138.Final.jar
			|-- gson-2.14.0.jar
				|-- guava-33.6.0-jre.jar [1 HIGH]
		|-- quarkus-virtual-threads-3.40.1.jar
			|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- smallrye-common-vertx-context-2.19.0.jar
			|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- smallrye-mutiny-vertx-core-3.23.1.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- smallrye-mutiny-vertx-runtime-3.23.1.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- smallrye-fault-tolerance-vertx-6.11.4.jar
			|-- vertx-core-4.5.34.jar [1 HIGH]
|-- quarkus-rest-client-jackson-3.40.1.jar
	|-- resteasy-reactive-jackson-3.40.1.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- quarkus-rest-jackson-common-3.40.1.jar
		|-- quarkus-jackson-3.40.1.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- vertx-core-4.5.34.jar [1 HIGH]
|-- quarkus-smallrye-openapi-3.40.1.jar
	|-- smallrye-open-api-core-4.3.5.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- jackson-dataformat-yaml-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- jandex-3.6.0.jar
			|-- asm-9.10.1.jar [7 MEDIUM]
|-- reports-rest-4.0.0-SNAPSHOT.jar
	|-- jackson-datatype-jsr310-2.21.7.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- jsonrpc2-base-2.2.1.jar
		|-- json-smart-2.6.0.jar [1 MEDIUM]
			|-- accessors-smart-2.6.0.jar
				|-- asm-9.10.1.jar [7 MEDIUM]
	|-- quarkus-websockets-3.40.1.jar
		|-- quarkus-http-websocket-vertx-5.5.0.jar
			|-- vertx-web-4.5.34.jar [1 HIGH]
	|-- reports-backend-4.0.0-SNAPSHOT.jar
		|-- communication-4.0.0-SNAPSHOT.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- galley-maven-1.23-jakarta.jar
				|-- atlas-relationships-api-1.2.3.jar
					|-- jackson-databind-2.21.7.jar [1 CRITICAL]
					|-- atlas-bindings-jackson-identities-1.2.3.jar
						|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- galley-transport-httpclient-1.23-jakarta.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- jhttpc-1.18.jar
					|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
|-- rest-client-jakarta-3.6.0-SNAPSHOT.jar
	|-- jackson-jakarta-rs-json-provider-2.21.7.jar
		|-- jackson-jakarta-rs-base-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- jackson-module-jakarta-xmlbind-annotations-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- common-3.6.0-SNAPSHOT-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- dto-3.6.0-SNAPSHOT-patch-builders-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- jackson-coreutils-2.0.jar [3 MEDIUM]
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- guava-33.6.0-jre.jar [1 HIGH]
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- pnc-common-3.5.4-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- jackson-module-parameter-names-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- pom-manipulation-common-lite-5.5.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- rest-client-3.6.0-SNAPSHOT-jakarta.jar
		|-- jackson-datatype-jdk8-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- json-patch-1.13.jar [3 MEDIUM]
		|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
common-4.0.0-SNAPSHOT.jar
|-- quarkus-core-3.40.1.jar
	|-- smallrye-config-3.17.2.jar
		|-- smallrye-config-core-3.17.2.jar
			|-- asm-9.10.1.jar [7 MEDIUM]
|-- reports-model-4.0.0-SNAPSHOT.jar
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
communication-4.0.0-SNAPSHOT.jar
|-- jackson-databind-2.21.7.jar [1 CRITICAL]
|-- quarkus-undertow-3.40.1.jar
	|-- quarkus-http-vertx-backend-5.5.0.jar
		|-- vertx-core-4.5.34.jar [1 HIGH]
	|-- quarkus-vertx-http-3.40.1.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- quarkus-tls-registry-3.40.1.jar
			|-- smallrye-private-key-pem-parser-0.9.4.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
			|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- smallrye-common-vertx-context-2.19.0.jar
			|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- smallrye-mutiny-vertx-web-3.23.1.jar
			|-- smallrye-mutiny-vertx-core-3.23.1.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- smallrye-mutiny-vertx-runtime-3.23.1.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- smallrye-mutiny-vertx-uri-template-3.23.1.jar
				|-- vertx-uri-template-4.5.34.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- smallrye-mutiny-vertx-web-client-3.23.1.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-web-client-4.5.34.jar
					|-- jackson-databind-2.21.7.jar [1 CRITICAL]
					|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- vertx-web-4.5.34.jar [1 HIGH]
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- vertx-auth-common-4.5.34.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-bridge-common-4.5.34.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-web-common-4.5.34.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
|-- galley-maven-1.23-jakarta.jar
	|-- atlas-relationships-api-1.2.3.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- atlas-bindings-jackson-identities-1.2.3.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
|-- galley-transport-httpclient-1.23-jakarta.jar
	|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- jhttpc-1.18.jar
		|-- bcpkix-jdk18on-1.86.jar
			|-- bcutil-jdk18on-1.86.jar
				|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
		|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
|-- reports-model-4.0.0-SNAPSHOT.jar
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
|-- common-3.6.0-SNAPSHOT-jakarta.jar
	|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- jackson-datatype-jdk8-2.21.7.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
|-- pnc-common-3.5.4-jakarta.jar
	|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- pom-manipulation-common-lite-5.5.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
|-- quarkus-pnc-client-auth-1.0.0.jar
	|-- quarkus-oidc-client-3.40.1.jar
		|-- quarkus-vertx-3.40.1.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- quarkus-virtual-threads-3.40.1.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- smallrye-fault-tolerance-vertx-6.11.4.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
|-- rest-client-jakarta-3.6.0-SNAPSHOT.jar
	|-- jackson-jakarta-rs-json-provider-2.21.7.jar
		|-- jackson-jakarta-rs-base-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- jackson-module-jakarta-xmlbind-annotations-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- dto-3.6.0-SNAPSHOT-patch-builders-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
|-- rest-client-3.6.0-SNAPSHOT-jakarta.jar
	|-- jackson-datatype-jsr310-2.21.7.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- json-patch-1.13.jar [3 MEDIUM]
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- jackson-coreutils-2.0.jar [3 MEDIUM]
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
reports-backend-4.0.0-SNAPSHOT.jar
|-- quarkus-hibernate-orm-3.40.1.jar
	|-- quarkus-agroal-3.40.1.jar
		|-- quarkus-datasource-3.40.1.jar
			|-- vertx-web-4.5.34.jar [1 HIGH]
|-- quarkus-hibernate-validator-3.40.1.jar
	|-- quarkus-vertx-http-3.40.1.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- quarkus-tls-registry-3.40.1.jar
			|-- smallrye-private-key-pem-parser-0.9.4.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
			|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- quarkus-vertx-3.40.1.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- quarkus-virtual-threads-3.40.1.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- smallrye-mutiny-vertx-core-3.23.1.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- smallrye-mutiny-vertx-runtime-3.23.1.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- smallrye-fault-tolerance-vertx-6.11.4.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- smallrye-common-vertx-context-2.19.0.jar
			|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- smallrye-mutiny-vertx-web-3.23.1.jar
			|-- smallrye-mutiny-vertx-uri-template-3.23.1.jar
				|-- vertx-uri-template-4.5.34.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- smallrye-mutiny-vertx-web-client-3.23.1.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-web-client-4.5.34.jar
					|-- jackson-databind-2.21.7.jar [1 CRITICAL]
					|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- vertx-web-4.5.34.jar [1 HIGH]
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- vertx-auth-common-4.5.34.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-bridge-common-4.5.34.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-web-common-4.5.34.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
|-- communication-4.0.0-SNAPSHOT.jar
	|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- quarkus-undertow-3.40.1.jar
		|-- quarkus-http-vertx-backend-5.5.0.jar
			|-- vertx-core-4.5.34.jar [1 HIGH]
	|-- galley-maven-1.23-jakarta.jar
		|-- atlas-relationships-api-1.2.3.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- atlas-bindings-jackson-identities-1.2.3.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- galley-transport-httpclient-1.23-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- jhttpc-1.18.jar
			|-- bcpkix-jdk18on-1.86.jar
				|-- bcutil-jdk18on-1.86.jar
					|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
			|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
	|-- common-3.6.0-SNAPSHOT-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- jackson-datatype-jdk8-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- pnc-common-3.5.4-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- pom-manipulation-common-lite-5.5.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
|-- rest-client-jakarta-3.6.0-SNAPSHOT.jar
	|-- jackson-jakarta-rs-json-provider-2.21.7.jar
		|-- jackson-jakarta-rs-base-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- jackson-module-jakarta-xmlbind-annotations-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- dto-3.6.0-SNAPSHOT-patch-builders-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- rest-api-3.6.0-SNAPSHOT-java-client-jakarta.jar
		|-- jackson-datatype-jsr310-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- rest-client-3.6.0-SNAPSHOT-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- jackson-coreutils-2.0.jar [3 MEDIUM]
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
reports-model-4.0.0-SNAPSHOT.jar
|-- pnc-api-3.5.2-jakarta.jar
	|-- jackson-databind-2.21.7.jar [1 CRITICAL]
reports-rest-4.0.0-SNAPSHOT.jar
|-- jackson-datatype-jsr310-2.21.7.jar
	|-- jackson-databind-2.21.7.jar [1 CRITICAL]
|-- jsonrpc2-base-2.2.1.jar
	|-- json-smart-2.6.0.jar [1 MEDIUM]
		|-- accessors-smart-2.6.0.jar
			|-- asm-9.10.1.jar [7 MEDIUM]
|-- quarkus-hibernate-validator-3.40.1.jar
	|-- quarkus-vertx-http-3.40.1.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- quarkus-tls-registry-3.40.1.jar
			|-- smallrye-private-key-pem-parser-0.9.4.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- bcpkix-jdk18on-1.86.jar
					|-- bcutil-jdk18on-1.86.jar
						|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
				|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
			|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- quarkus-vertx-3.40.1.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- smallrye-fault-tolerance-vertx-6.11.4.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- smallrye-common-vertx-context-2.19.0.jar
			|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- smallrye-mutiny-vertx-web-3.23.1.jar
			|-- smallrye-mutiny-vertx-web-client-3.23.1.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- vertx-web-4.5.34.jar [1 HIGH]
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- vertx-auth-common-4.5.34.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-bridge-common-4.5.34.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-web-common-4.5.34.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
|-- quarkus-rest-jackson-3.40.1.jar
	|-- quarkus-rest-jackson-common-3.40.1.jar
		|-- resteasy-reactive-jackson-3.40.1.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- quarkus-jackson-3.40.1.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- vertx-core-4.5.34.jar [1 HIGH]
	|-- quarkus-rest-3.40.1.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- resteasy-reactive-vertx-3.40.1.jar
			|-- quarkus-vertx-utils-3.40.1.jar
				|-- vertx-web-4.5.34.jar [1 HIGH]
			|-- smallrye-mutiny-vertx-core-3.23.1.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- smallrye-mutiny-vertx-runtime-3.23.1.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-web-client-4.5.34.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-uri-template-4.5.34.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- quarkus-virtual-threads-3.40.1.jar
			|-- vertx-core-4.5.34.jar [1 HIGH]
|-- quarkus-websockets-3.40.1.jar
	|-- quarkus-http-websocket-vertx-5.5.0.jar
		|-- vertx-web-4.5.34.jar [1 HIGH]
|-- reports-backend-4.0.0-SNAPSHOT.jar
	|-- quarkus-hibernate-orm-3.40.1.jar
		|-- quarkus-agroal-3.40.1.jar
			|-- quarkus-datasource-3.40.1.jar
				|-- vertx-web-4.5.34.jar [1 HIGH]
	|-- communication-4.0.0-SNAPSHOT.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- quarkus-undertow-3.40.1.jar
			|-- quarkus-http-vertx-backend-5.5.0.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- galley-maven-1.23-jakarta.jar
			|-- atlas-relationships-api-1.2.3.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- atlas-bindings-jackson-identities-1.2.3.jar
					|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- galley-transport-httpclient-1.23-jakarta.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- jhttpc-1.18.jar
				|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
|-- rest-client-jakarta-3.6.0-SNAPSHOT.jar
	|-- jackson-jakarta-rs-json-provider-2.21.7.jar
		|-- jackson-jakarta-rs-base-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- jackson-module-jakarta-xmlbind-annotations-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- common-3.6.0-SNAPSHOT-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- dto-3.6.0-SNAPSHOT-patch-builders-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- jackson-coreutils-2.0.jar [3 MEDIUM]
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- pnc-common-3.5.4-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- jackson-module-parameter-names-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- smallrye-config-core-3.17.2.jar
			|-- asm-9.10.1.jar [7 MEDIUM]
		|-- pom-manipulation-common-lite-5.5.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- rest-api-3.6.0-SNAPSHOT-java-client-jakarta.jar
		|-- jackson-datatype-jdk8-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- rest-client-3.6.0-SNAPSHOT-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
		|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
source-code-manager-4.0.0-SNAPSHOT.jar
|-- quarkus-quartz-3.40.1.jar
	|-- quarkus-scheduler-3.40.1.jar
		|-- quarkus-vertx-3.40.1.jar
			|-- smallrye-common-vertx-context-2.19.0.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- smallrye-mutiny-vertx-core-3.23.1.jar
				|-- smallrye-mutiny-vertx-runtime-3.23.1.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- smallrye-fault-tolerance-vertx-6.11.4.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- quarkus-virtual-threads-3.40.1.jar
			|-- vertx-core-4.5.34.jar [1 HIGH]
testsuite-4.0.0-SNAPSHOT.jar
|-- application-4.0.0-SNAPSHOT.jar
	|-- quarkus-elytron-security-ldap-3.40.1.jar
		|-- quarkus-elytron-security-3.40.1.jar
			|-- wildfly-elytron-auth-server-2.9.2.SP1.jar
				|-- wildfly-elytron-x500-2.9.2.SP1.jar
					|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
		|-- wildfly-elytron-realm-ldap-2.9.2.SP1.jar
			|-- wildfly-elytron-client-2.9.2.SP1.jar
				|-- wildfly-elytron-credential-store-2.9.2.SP1.jar
					|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
				|-- wildfly-elytron-keystore-2.9.2.SP1.jar
					|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
				|-- wildfly-elytron-mechanism-2.9.2.SP1.jar
					|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
			|-- wildfly-elytron-credential-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
			|-- wildfly-elytron-realm-2.9.2.SP1.jar
				|-- wildfly-elytron-x500-cert-2.9.2.SP1.jar
					|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
					|-- wildfly-elytron-x500-cert-util-2.9.2.SP1.jar
						|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
			|-- wildfly-elytron-util-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
	|-- quarkus-jdbc-postgresql-3.40.1.jar
		|-- quarkus-agroal-3.40.1.jar
			|-- quarkus-datasource-3.40.1.jar
				|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- postgresql-42.7.13.jar [2 MEDIUM]
	|-- quarkus-micrometer-opentelemetry-3.40.1.jar
		|-- quarkus-micrometer-3.40.1.jar
			|-- micrometer-core-1.17.1.jar
				|-- guava-33.6.0-jre.jar [1 HIGH]
			|-- resteasy-reactive-client-3.40.1.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-web-client-4.5.34.jar
					|-- jackson-databind-2.21.7.jar [1 CRITICAL]
					|-- vertx-core-4.5.34.jar [1 HIGH]
					|-- vertx-uri-template-4.5.34.jar
						|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- quarkus-undertow-3.40.1.jar
				|-- quarkus-http-vertx-backend-5.5.0.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- LatencyUtils-2.0.3.jar [1 LOW]
		|-- quarkus-opentelemetry-3.40.1.jar
			|-- quarkus-grpc-common-3.40.1.jar
				|-- grpc-core-1.81.0.jar
					|-- guava-33.6.0-jre.jar [1 HIGH]
				|-- vertx-grpc-server-4.5.34.jar [1 HIGH]
					|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-grpc-4.5.34.jar
					|-- guava-33.6.0-jre.jar [1 HIGH]
					|-- grpc-netty-1.81.0.jar
						|-- guava-33.6.0-jre.jar [1 HIGH]
						|-- grpc-util-1.81.0.jar
							|-- guava-33.6.0-jre.jar [1 HIGH]
					|-- grpc-protobuf-1.81.0.jar
						|-- guava-33.6.0-jre.jar [1 HIGH]
						|-- grpc-protobuf-lite-1.81.0.jar
							|-- guava-33.6.0-jre.jar [1 HIGH]
					|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- smallrye-common-vertx-context-2.19.0.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- vertx-grpc-client-4.5.34.jar
				|-- grpc-api-1.81.0.jar
					|-- guava-33.6.0-jre.jar [1 HIGH]
				|-- grpc-stub-1.81.0.jar
					|-- guava-33.6.0-jre.jar [1 HIGH]
				|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-grpc-common-4.5.34.jar
					|-- guava-33.6.0-jre.jar [1 HIGH]
					|-- vertx-core-4.5.34.jar [1 HIGH]
	|-- quarkus-oidc-3.40.1.jar
		|-- quarkus-oidc-common-3.40.1.jar
			|-- smallrye-mutiny-vertx-web-client-3.23.1.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- quarkus-vertx-3.40.1.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- quarkus-virtual-threads-3.40.1.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- smallrye-mutiny-vertx-core-3.23.1.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- smallrye-mutiny-vertx-runtime-3.23.1.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-core-4.5.34.jar [1 HIGH]
			|-- smallrye-fault-tolerance-vertx-6.11.4.jar
				|-- vertx-core-4.5.34.jar [1 HIGH]
	|-- quarkus-rest-client-jackson-3.40.1.jar
		|-- resteasy-reactive-jackson-3.40.1.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- quarkus-rest-client-3.40.1.jar
			|-- quarkus-tls-registry-3.40.1.jar
				|-- smallrye-private-key-pem-parser-0.9.4.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
					|-- bcpkix-jdk18on-1.86.jar
						|-- bcutil-jdk18on-1.86.jar
							|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
					|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
				|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- quarkus-rest-jackson-common-3.40.1.jar
			|-- quarkus-jackson-3.40.1.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- vertx-core-4.5.34.jar [1 HIGH]
	|-- quarkus-smallrye-openapi-3.40.1.jar
		|-- quarkus-vertx-http-3.40.1.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- smallrye-mutiny-vertx-web-3.23.1.jar
				|-- vertx-web-4.5.34.jar [1 HIGH]
			|-- vertx-web-4.5.34.jar [1 HIGH]
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- vertx-auth-common-4.5.34.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-bridge-common-4.5.34.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-core-4.5.34.jar [1 HIGH]
				|-- vertx-web-common-4.5.34.jar
					|-- vertx-core-4.5.34.jar [1 HIGH]
		|-- smallrye-open-api-core-4.3.5.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- jackson-dataformat-yaml-2.21.7.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- jandex-3.6.0.jar
				|-- asm-9.10.1.jar [7 MEDIUM]
	|-- reports-rest-4.0.0-SNAPSHOT.jar
		|-- quarkus-rest-jackson-3.40.1.jar
			|-- quarkus-rest-3.40.1.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- resteasy-reactive-vertx-3.40.1.jar
					|-- quarkus-vertx-utils-3.40.1.jar
						|-- vertx-web-4.5.34.jar [1 HIGH]
					|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- quarkus-websockets-3.40.1.jar
			|-- quarkus-http-websocket-vertx-5.5.0.jar
				|-- vertx-web-4.5.34.jar [1 HIGH]
		|-- reports-backend-4.0.0-SNAPSHOT.jar
			|-- communication-4.0.0-SNAPSHOT.jar
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- galley-maven-1.23-jakarta.jar
					|-- atlas-relationships-api-1.2.3.jar
						|-- jackson-databind-2.21.7.jar [1 CRITICAL]
						|-- atlas-bindings-jackson-identities-1.2.3.jar
							|-- jackson-databind-2.21.7.jar [1 CRITICAL]
				|-- galley-transport-httpclient-1.23-jakarta.jar
					|-- jackson-databind-2.21.7.jar [1 CRITICAL]
					|-- jhttpc-1.18.jar
						|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
|-- rest-client-jakarta-3.6.0-SNAPSHOT.jar
	|-- jackson-jakarta-rs-json-provider-2.21.7.jar
		|-- jackson-jakarta-rs-base-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- jackson-module-jakarta-xmlbind-annotations-2.21.7.jar
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- common-3.6.0-SNAPSHOT-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- dto-3.6.0-SNAPSHOT-patch-builders-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
			|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- jackson-coreutils-2.0.jar [3 MEDIUM]
				|-- jackson-databind-2.21.7.jar [1 CRITICAL]
			|-- guava-33.6.0-jre.jar [1 HIGH]
		|-- jsoup-1.23.2.jar
			|-- gson-2.14.0.jar
				|-- guava-33.6.0-jre.jar [1 HIGH]
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
	|-- pnc-common-3.5.4-jakarta.jar
		|-- jackson-databind-2.21.7.jar [1 CRITICAL]
		|-- jackson-module-parameter-names-2.21.7.jar
... *truncated, see full logs below*
SAST scan output 
*no findings*

Full logs and artifacts

@rnc
rnc merged commit f21811e into project-ncl:master Oct 22, 2026
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@patrikk0123 @rnc