{ "bomFormat": "CycloneDX", "specVersion": "1.5", "version": 1, "metadata": { "timestamp": "2026-09-10T09:38:22.781541+00:00", "tools": [ { "vendor": "Scrutora", "name": "Scrutora Scanner", "version": "1.0.0" } ], "component": { "type": "application", "name": "fineract", "bom-ref": "scrutora:root:fineract" } }, "components": [ { "type": "library", "name": "gradle-cargo-plugin", "version": "2.9.0", "bom-ref": "pkg:maven/com.bmuschko/gradle-cargo-plugin@2.9.0", "purl": "pkg:maven/com.bmuschko/gradle-cargo-plugin@2.9.0", "group": "com.bmuschko", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "eclipselink", "version": "4.0.9", "bom-ref": "pkg:maven/org.eclipse.persistence/eclipselink@4.0.9", "purl": "pkg:maven/org.eclipse.persistence/eclipselink@4.0.9", "group": "org.eclipse.persistence", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "jakarta.ws.rs-api", "version": "3.1.0", "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0", "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0", "group": "jakarta.ws.rs", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "jib-layer-filter-extension-gradle", "version": "0.3.0", "bom-ref": "pkg:maven/com.google.cloud.tools/jib-layer-filter-extension-gradle@0.3.0", "purl": "pkg:maven/com.google.cloud.tools/jib-layer-filter-extension-gradle@0.3.0", "group": "com.google.cloud.tools", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "commons-lang3", "version": "3.20.0", "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.20.0", "purl": "pkg:maven/org.apache.commons/commons-lang3@3.20.0", "group": "org.apache.commons", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "swagger-jaxrs2-jakarta", "version": "2.2.49", "bom-ref": "pkg:maven/io.swagger.core.v3/swagger-jaxrs2-jakarta@2.2.49", "purl": "pkg:maven/io.swagger.core.v3/swagger-jaxrs2-jakarta@2.2.49", "group": "io.swagger.core.v3", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "jakarta.servlet-api", "version": "6.1.0", "bom-ref": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0", "purl": "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0", "group": "jakarta.servlet", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "logback-classic", "version": "1.5.34", "bom-ref": "pkg:maven/ch.qos.logback/logback-classic@1.5.34", "purl": "pkg:maven/ch.qos.logback/logback-classic@1.5.34", "group": "ch.qos.logback", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "lombok", "version": "1.18.46", "bom-ref": "pkg:maven/org.projectlombok/lombok@1.18.46", "purl": "pkg:maven/org.projectlombok/lombok@1.18.46", "group": "org.projectlombok", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "mapstruct-processor", "version": "", "bom-ref": "pkg:maven/org.mapstruct/mapstruct-processor", "purl": "pkg:maven/org.mapstruct/mapstruct-processor", "group": "org.mapstruct", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "spring-boot-autoconfigure-processor", "version": "3.5.15", "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-autoconfigure-processor@3.5.15", "purl": "pkg:maven/org.springframework.boot/spring-boot-autoconfigure-processor@3.5.15", "group": "org.springframework.boot", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "spring-boot-configuration-processor", "version": "3.5.15", "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-configuration-processor@3.5.15", "purl": "pkg:maven/org.springframework.boot/spring-boot-configuration-processor@3.5.15", "group": "org.springframework.boot", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "spring-boot-starter-test", "version": "3.5.15", "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-starter-test@3.5.15", "purl": "pkg:maven/org.springframework.boot/spring-boot-starter-test@3.5.15", "group": "org.springframework.boot", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "postgresql", "version": "1.20.4", "bom-ref": "pkg:maven/org.testcontainers/postgresql@1.20.4", "purl": "pkg:maven/org.testcontainers/postgresql@1.20.4", "group": "org.testcontainers", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "junit-jupiter", "version": "1.20.4", "bom-ref": "pkg:maven/org.testcontainers/junit-jupiter@1.20.4", "purl": "pkg:maven/org.testcontainers/junit-jupiter@1.20.4", "group": "org.testcontainers", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "junit-jupiter-api", "version": "5.14.4", "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.14.4", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.14.4", "group": "org.junit.jupiter", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "junit-jupiter-params", "version": "5.14.4", "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.14.4", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.14.4", "group": "org.junit.jupiter", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "junit-platform-commons", "version": "1.14.4", "bom-ref": "pkg:maven/org.junit.platform/junit-platform-commons@1.14.4", "purl": "pkg:maven/org.junit.platform/junit-platform-commons@1.14.4", "group": "org.junit.platform", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "junit-platform-engine", "version": "1.14.4", "bom-ref": "pkg:maven/org.junit.platform/junit-platform-engine@1.14.4", "purl": "pkg:maven/org.junit.platform/junit-platform-engine@1.14.4", "group": "org.junit.platform", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "junit-platform-launcher", "version": "1.14.4", "bom-ref": "pkg:maven/org.junit.platform/junit-platform-launcher@1.14.4", "purl": "pkg:maven/org.junit.platform/junit-platform-launcher@1.14.4", "group": "org.junit.platform", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "junit-platform-suite-api", "version": "1.14.4", "bom-ref": "pkg:maven/org.junit.platform/junit-platform-suite-api@1.14.4", "purl": "pkg:maven/org.junit.platform/junit-platform-suite-api@1.14.4", "group": "org.junit.platform", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "junit-platform-suite-commons", "version": "1.14.4", "bom-ref": "pkg:maven/org.junit.platform/junit-platform-suite-commons@1.14.4", "purl": "pkg:maven/org.junit.platform/junit-platform-suite-commons@1.14.4", "group": "org.junit.platform", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "junit-platform-suite-engine", "version": "1.14.4", "bom-ref": "pkg:maven/org.junit.platform/junit-platform-suite-engine@1.14.4", "purl": "pkg:maven/org.junit.platform/junit-platform-suite-engine@1.14.4", "group": "org.junit.platform", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "mockito-core", "version": "5.17.0", "bom-ref": "pkg:maven/org.mockito/mockito-core@5.17.0", "purl": "pkg:maven/org.mockito/mockito-core@5.17.0", "group": "org.mockito", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "mockito-junit-jupiter", "version": "5.17.0", "bom-ref": "pkg:maven/org.mockito/mockito-junit-jupiter@5.17.0", "purl": "pkg:maven/org.mockito/mockito-junit-jupiter@5.17.0", "group": "org.mockito", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "spring-boot-starter-data-jpa", "version": "3.5.15", "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.5.15", "purl": "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.5.15", "group": "org.springframework.boot", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "liquibase-core", "version": "4.31.1", "bom-ref": "pkg:maven/org.liquibase/liquibase-core@4.31.1", "purl": "pkg:maven/org.liquibase/liquibase-core@4.31.1", "group": "org.liquibase", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "postgresql", "version": "42.7.11", "bom-ref": "pkg:maven/org.postgresql/postgresql@42.7.11", "purl": "pkg:maven/org.postgresql/postgresql@42.7.11", "group": "org.postgresql", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "asciidoctor-gradle-jvm", "version": "4.0.5", "bom-ref": "pkg:maven/org.asciidoctor/asciidoctor-gradle-jvm@4.0.5", "purl": "pkg:maven/org.asciidoctor/asciidoctor-gradle-jvm@4.0.5", "group": "org.asciidoctor", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "asciidoctor-gradle-jvm-pdf", "version": "4.0.5", "bom-ref": "pkg:maven/org.asciidoctor/asciidoctor-gradle-jvm-pdf@4.0.5", "purl": "pkg:maven/org.asciidoctor/asciidoctor-gradle-jvm-pdf@4.0.5", "group": "org.asciidoctor", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "snakeyaml", "version": "2.6", "bom-ref": "pkg:maven/org.yaml/snakeyaml@2.6", "purl": "pkg:maven/org.yaml/snakeyaml@2.6", "group": "org.yaml", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "jakarta.activation", "version": "", "bom-ref": "pkg:maven/com.sun.activation/jakarta.activation", "purl": "pkg:maven/com.sun.activation/jakarta.activation", "group": "com.sun.activation", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "jakarta.mail", "version": "", "bom-ref": "pkg:maven/com.sun.mail/jakarta.mail", "purl": "pkg:maven/com.sun.mail/jakarta.mail", "group": "com.sun.mail", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "freemarker", "version": "2.3.34", "bom-ref": "pkg:maven/org.freemarker/freemarker@2.3.34", "purl": "pkg:maven/org.freemarker/freemarker@2.3.34", "group": "org.freemarker", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "svnkit", "version": "", "bom-ref": "pkg:maven/com.tmatesoft.svnkit/svnkit", "purl": "pkg:maven/com.tmatesoft.svnkit/svnkit", "group": "com.tmatesoft.svnkit", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "bcprov-jdk18on", "version": "", "bom-ref": "pkg:maven/org.bouncycastle/bcprov-jdk18on", "purl": "pkg:maven/org.bouncycastle/bcprov-jdk18on", "group": "org.bouncycastle", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "bcutil-jdk18on", "version": "", "bom-ref": "pkg:maven/org.bouncycastle/bcutil-jdk18on", "purl": "pkg:maven/org.bouncycastle/bcutil-jdk18on", "group": "org.bouncycastle", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "bcpg-jdk18on", "version": "", "bom-ref": "pkg:maven/org.bouncycastle/bcpg-jdk18on", "purl": "pkg:maven/org.bouncycastle/bcpg-jdk18on", "group": "org.bouncycastle", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "org.eclipse.jgit", "version": "", "bom-ref": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit", "purl": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit", "group": "org.eclipse.jgit", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "org.eclipse.jgit.gpg.bc", "version": "", "bom-ref": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc", "purl": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc", "group": "org.eclipse.jgit", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "org.eclipse.jgit.ssh.apache", "version": "", "bom-ref": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache", "purl": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache", "group": "org.eclipse.jgit", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "semver4j", "version": "", "bom-ref": "pkg:maven/com.vdurmont/semver4j", "purl": "pkg:maven/com.vdurmont/semver4j", "group": "com.vdurmont", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "text-io", "version": "", "bom-ref": "pkg:maven/org.beryx/text-io", "purl": "pkg:maven/org.beryx/text-io", "group": "org.beryx", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "commons-io", "version": "", "bom-ref": "pkg:maven/commons-io/commons-io", "purl": "pkg:maven/commons-io/commons-io", "group": "commons-io", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "okhttp", "version": "", "bom-ref": "pkg:maven/com.squareup.okhttp3/okhttp", "purl": "pkg:maven/com.squareup.okhttp3/okhttp", "group": "com.squareup.okhttp3", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "logging-interceptor", "version": "", "bom-ref": "pkg:maven/com.squareup.okhttp3/logging-interceptor", "purl": "pkg:maven/com.squareup.okhttp3/logging-interceptor", "group": "com.squareup.okhttp3", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "retrofit", "version": "", "bom-ref": "pkg:maven/com.squareup.retrofit2/retrofit", "purl": "pkg:maven/com.squareup.retrofit2/retrofit", "group": "com.squareup.retrofit2", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "converter-jackson", "version": "", "bom-ref": "pkg:maven/com.squareup.retrofit2/converter-jackson", "purl": "pkg:maven/com.squareup.retrofit2/converter-jackson", "group": "com.squareup.retrofit2", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "jackson-databind", "version": "2.21.4", "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.4", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.4", "group": "com.fasterxml.jackson.core", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "feign-core", "version": "13.12", "bom-ref": "pkg:maven/io.github.openfeign/feign-core@13.12", "purl": "pkg:maven/io.github.openfeign/feign-core@13.12", "group": "io.github.openfeign", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "feign-jackson", "version": "13.12", "bom-ref": "pkg:maven/io.github.openfeign/feign-jackson@13.12", "purl": "pkg:maven/io.github.openfeign/feign-jackson@13.12", "group": "io.github.openfeign", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "json-simple", "version": "1.1.1", "bom-ref": "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1", "purl": "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1", "group": "com.googlecode.json-simple", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "allure-cucumber7-jvm", "version": "2.34.0", "bom-ref": "pkg:maven/io.qameta.allure/allure-cucumber7-jvm@2.34.0", "purl": "pkg:maven/io.qameta.allure/allure-cucumber7-jvm@2.34.0", "group": "io.qameta.allure", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "spring-context", "version": "6.2.19", "bom-ref": "pkg:maven/org.springframework/spring-context@6.2.19", "purl": "pkg:maven/org.springframework/spring-context@6.2.19", "group": "org.springframework", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "spring-test", "version": "6.2.19", "bom-ref": "pkg:maven/org.springframework/spring-test@6.2.19", "purl": "pkg:maven/org.springframework/spring-test@6.2.19", "group": "org.springframework", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "spring-jms", "version": "6.2.19", "bom-ref": "pkg:maven/org.springframework/spring-jms@6.2.19", "purl": "pkg:maven/org.springframework/spring-jms@6.2.19", "group": "org.springframework", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "spotbugs-annotations", "version": "", "bom-ref": "pkg:maven/com.github.spotbugs/spotbugs-annotations", "purl": "pkg:maven/com.github.spotbugs/spotbugs-annotations", "group": "com.github.spotbugs", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "httpclient", "version": "", "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient", "purl": "pkg:maven/org.apache.httpcomponents/httpclient", "group": "org.apache.httpcomponents", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "commons-lang3", "version": "3.17.0", "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.17.0", "purl": "pkg:maven/org.apache.commons/commons-lang3@3.17.0", "group": "org.apache.commons", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "guava", "version": "", "bom-ref": "pkg:maven/com.google.guava/guava", "purl": "pkg:maven/com.google.guava/guava", "group": "com.google.guava", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "gson", "version": "2.13.2", "bom-ref": "pkg:maven/com.google.code.gson/gson@2.13.2", "purl": "pkg:maven/com.google.code.gson/gson@2.13.2", "group": "com.google.code.gson", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "cucumber-java", "version": "", "bom-ref": "pkg:maven/io.cucumber/cucumber-java", "purl": "pkg:maven/io.cucumber/cucumber-java", "group": "io.cucumber", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "cucumber-junit", "version": "", "bom-ref": "pkg:maven/io.cucumber/cucumber-junit", "purl": "pkg:maven/io.cucumber/cucumber-junit", "group": "io.cucumber", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "cucumber-spring", "version": "", "bom-ref": "pkg:maven/io.cucumber/cucumber-spring", "purl": "pkg:maven/io.cucumber/cucumber-spring", "group": "io.cucumber", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "cucumber-junit-platform-engine", "version": "", "bom-ref": "pkg:maven/io.cucumber/cucumber-junit-platform-engine", "purl": "pkg:maven/io.cucumber/cucumber-junit-platform-engine", "group": "io.cucumber", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "assertj-core", "version": "3.27.7", "bom-ref": "pkg:maven/org.assertj/assertj-core@3.27.7", "purl": "pkg:maven/org.assertj/assertj-core@3.27.7", "group": "org.assertj", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "junit-jupiter-api", "version": "5.12.2", "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.12.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.12.2", "group": "org.junit.jupiter", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "junit-jupiter", "version": "5.12.2", "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter@5.12.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter@5.12.2", "group": "org.junit.jupiter", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "logback-core", "version": "1.5.34", "bom-ref": "pkg:maven/ch.qos.logback/logback-core@1.5.34", "purl": "pkg:maven/ch.qos.logback/logback-core@1.5.34", "group": "ch.qos.logback", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "activemq-client", "version": "6.1.8", "bom-ref": "pkg:maven/org.apache.activemq/activemq-client@6.1.8", "purl": "pkg:maven/org.apache.activemq/activemq-client@6.1.8", "group": "org.apache.activemq", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "avro", "version": "", "bom-ref": "pkg:maven/org.apache.avro/avro", "purl": "pkg:maven/org.apache.avro/avro", "group": "org.apache.avro", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "awaitility", "version": "4.2.2", "bom-ref": "pkg:maven/org.awaitility/awaitility@4.2.2", "purl": "pkg:maven/org.awaitility/awaitility@4.2.2", "group": "org.awaitility", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "classgraph", "version": "", "bom-ref": "pkg:maven/io.github.classgraph/classgraph", "purl": "pkg:maven/io.github.classgraph/classgraph", "group": "io.github.classgraph", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "commons-collections4", "version": "", "bom-ref": "pkg:maven/org.apache.commons/commons-collections4", "purl": "pkg:maven/org.apache.commons/commons-collections4", "group": "org.apache.commons", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "spring-jdbc", "version": "6.2.19", "bom-ref": "pkg:maven/org.springframework/spring-jdbc@6.2.19", "purl": "pkg:maven/org.springframework/spring-jdbc@6.2.19", "group": "org.springframework", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "mariadb-java-client", "version": "3.5.8", "bom-ref": "pkg:maven/org.mariadb.jdbc/mariadb-java-client@3.5.8", "purl": "pkg:maven/org.mariadb.jdbc/mariadb-java-client@3.5.8", "group": "org.mariadb.jdbc", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "selenium-java", "version": "4.43.0", "bom-ref": "pkg:maven/org.seleniumhq.selenium/selenium-java@4.43.0", "purl": "pkg:maven/org.seleniumhq.selenium/selenium-java@4.43.0", "group": "org.seleniumhq.selenium", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "webdrivermanager", "version": "6.3.4", "bom-ref": "pkg:maven/io.github.bonigarcia/webdrivermanager@6.3.4", "purl": "pkg:maven/io.github.bonigarcia/webdrivermanager@6.3.4", "group": "io.github.bonigarcia", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] }, { "type": "library", "name": "junit-jupiter", "version": "5.14.4", "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter@5.14.4", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter@5.14.4", "group": "org.junit.jupiter", "properties": [ { "name": "scrutora:dependency-type", "value": "direct" } ] } ], "dependencies": [ { "ref": "scrutora:root:fineract", "dependsOn": [ "pkg:maven/com.bmuschko/gradle-cargo-plugin@2.9.0", "pkg:maven/org.eclipse.persistence/eclipselink@4.0.9", "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0", "pkg:maven/com.google.cloud.tools/jib-layer-filter-extension-gradle@0.3.0", "pkg:maven/org.apache.commons/commons-lang3@3.20.0", "pkg:maven/io.swagger.core.v3/swagger-jaxrs2-jakarta@2.2.49", "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0", "pkg:maven/ch.qos.logback/logback-classic@1.5.34", "pkg:maven/org.projectlombok/lombok@1.18.46", "pkg:maven/org.mapstruct/mapstruct-processor", "pkg:maven/org.springframework.boot/spring-boot-autoconfigure-processor@3.5.15", "pkg:maven/org.springframework.boot/spring-boot-configuration-processor@3.5.15", "pkg:maven/org.springframework.boot/spring-boot-starter-test@3.5.15", "pkg:maven/org.testcontainers/postgresql@1.20.4", "pkg:maven/org.testcontainers/junit-jupiter@1.20.4", "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.14.4", "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.14.4", "pkg:maven/org.junit.platform/junit-platform-commons@1.14.4", "pkg:maven/org.junit.platform/junit-platform-engine@1.14.4", "pkg:maven/org.junit.platform/junit-platform-launcher@1.14.4", "pkg:maven/org.junit.platform/junit-platform-suite-api@1.14.4", "pkg:maven/org.junit.platform/junit-platform-suite-commons@1.14.4", "pkg:maven/org.junit.platform/junit-platform-suite-engine@1.14.4", "pkg:maven/org.mockito/mockito-core@5.17.0", "pkg:maven/org.mockito/mockito-junit-jupiter@5.17.0", "pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@3.5.15", "pkg:maven/org.liquibase/liquibase-core@4.31.1", "pkg:maven/org.postgresql/postgresql@42.7.11", "pkg:maven/org.asciidoctor/asciidoctor-gradle-jvm@4.0.5", "pkg:maven/org.asciidoctor/asciidoctor-gradle-jvm-pdf@4.0.5", "pkg:maven/org.yaml/snakeyaml@2.6", "pkg:maven/com.sun.activation/jakarta.activation", "pkg:maven/com.sun.mail/jakarta.mail", "pkg:maven/org.freemarker/freemarker@2.3.34", "pkg:maven/com.tmatesoft.svnkit/svnkit", "pkg:maven/org.bouncycastle/bcprov-jdk18on", "pkg:maven/org.bouncycastle/bcutil-jdk18on", "pkg:maven/org.bouncycastle/bcpg-jdk18on", "pkg:maven/org.eclipse.jgit/org.eclipse.jgit", "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.gpg.bc", "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache", "pkg:maven/com.vdurmont/semver4j", "pkg:maven/org.beryx/text-io", "pkg:maven/commons-io/commons-io", "pkg:maven/com.squareup.okhttp3/okhttp", "pkg:maven/com.squareup.okhttp3/logging-interceptor", "pkg:maven/com.squareup.retrofit2/retrofit", "pkg:maven/com.squareup.retrofit2/converter-jackson", "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.4", "pkg:maven/io.github.openfeign/feign-core@13.12", "pkg:maven/io.github.openfeign/feign-jackson@13.12", "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1", "pkg:maven/io.qameta.allure/allure-cucumber7-jvm@2.34.0", "pkg:maven/org.springframework/spring-context@6.2.19", "pkg:maven/org.springframework/spring-test@6.2.19", "pkg:maven/org.springframework/spring-jms@6.2.19", "pkg:maven/com.github.spotbugs/spotbugs-annotations", "pkg:maven/org.apache.httpcomponents/httpclient", "pkg:maven/org.apache.commons/commons-lang3@3.17.0", "pkg:maven/com.google.guava/guava", "pkg:maven/com.google.code.gson/gson@2.13.2", "pkg:maven/io.cucumber/cucumber-java", "pkg:maven/io.cucumber/cucumber-junit", "pkg:maven/io.cucumber/cucumber-spring", "pkg:maven/io.cucumber/cucumber-junit-platform-engine", "pkg:maven/org.assertj/assertj-core@3.27.7", "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.12.2", "pkg:maven/org.junit.jupiter/junit-jupiter@5.12.2", "pkg:maven/ch.qos.logback/logback-core@1.5.34", "pkg:maven/org.apache.activemq/activemq-client@6.1.8", "pkg:maven/org.apache.avro/avro", "pkg:maven/org.awaitility/awaitility@4.2.2", "pkg:maven/io.github.classgraph/classgraph", "pkg:maven/org.apache.commons/commons-collections4", "pkg:maven/org.springframework/spring-jdbc@6.2.19", "pkg:maven/org.mariadb.jdbc/mariadb-java-client@3.5.8", "pkg:maven/org.seleniumhq.selenium/selenium-java@4.43.0", "pkg:maven/io.github.bonigarcia/webdrivermanager@6.3.4", "pkg:maven/org.junit.jupiter/junit-jupiter@5.14.4" ] } ], "vulnerabilities": [ { "id": "GHSA-j92g-9f8w-j867", "source": { "name": "OSV", "url": "https://osv.dev" }, "ratings": [ { "severity": "high" } ], "description": "PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms", "recommendation": "Upgrade to 42.7.12 or later.", "advisories": [ { "url": "https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-j92g-9f8w-j867" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54291" }, { "url": "https://github.com/pgjdbc/pgjdbc/commit/77df98e4e66c12936ded3478a0954f6f580bad99" }, { "url": "https://github.com/ongres/scram/releases/tag/3.3" }, { "url": "https://github.com/pgjdbc/pgjdbc" } ], "affects": [ { "ref": "pkg:maven/org.testcontainers/postgresql@1.20.4" }, { "ref": "pkg:maven/org.postgresql/postgresql@42.7.11" } ] }, { "id": "GHSA-5gvw-p9qm-jgwh", "source": { "name": "OSV", "url": "https://osv.dev" }, "ratings": [ { "severity": "medium" } ], "description": "jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization", "recommendation": "Upgrade to 2.21.5, 3.1.5, 2.18.9, 2.22.1, 3.2.1 or later.", "advisories": [ { "url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59889" }, { "url": "https://github.com/FasterXML/jackson-databind/issues/6060" }, { "url": "https://github.com/FasterXML/jackson-databind/pull/6056" }, { "url": "https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b" } ], "affects": [ { "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.4" } ] }, { "id": "GHSA-5jmj-h7xm-6q6v", "source": { "name": "OSV", "url": "https://osv.dev" }, "ratings": [ { "severity": "medium" } ], "description": "jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnoreProperties", "recommendation": "Upgrade to 3.1.4, 3.1.4, 2.18.9, 2.21.5, 2.22.1 or later.", "advisories": [ { "url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54515" }, { "url": "https://github.com/FasterXML/jackson-databind/issues/5962" }, { "url": "https://github.com/FasterXML/jackson-databind/issues/5964" }, { "url": "https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa" } ], "affects": [ { "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.4" } ] }, { "id": "GHSA-mhm7-754m-9p8w", "source": { "name": "OSV", "url": "https://osv.dev" }, "ratings": [ { "severity": "medium" } ], "description": "jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`", "recommendation": "Upgrade to 2.18.9, 2.21.5 or later.", "advisories": [ { "url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-mhm7-754m-9p8w" }, { "url": "https://github.com/FasterXML/jackson-databind/commit/c628b357ed143d8492756d5c1458cfb9fbeb29ed" }, { "url": "https://github.com/FasterXML/jackson-databind/commit/dea7eb466e98cc226c4ac65587581fb49926820c" }, { "url": "https://github.com/FasterXML/jackson-databind" } ], "affects": [ { "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.4" } ] }, { "id": "GHSA-j288-q9x7-2f5v", "source": { "name": "OSV", "url": "https://osv.dev" }, "ratings": [ { "severity": "medium" } ], "description": "Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs", "recommendation": "Upgrade to 3.18.0 or later.", "advisories": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48924" }, { "url": "https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53" }, { "url": "https://github.com/apache/commons-lang" }, { "url": "https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1" }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html" } ], "affects": [ { "ref": "pkg:maven/org.apache.commons/commons-lang3@3.20.0" }, { "ref": "pkg:maven/org.apache.commons/commons-lang3@3.17.0" } ] }, { "id": "GHSA-5568-6qcg-g7fx", "source": { "name": "OSV", "url": "https://osv.dev" }, "ratings": [ { "severity": "high" } ], "description": " Apache ActiveMQ: Denial of Service via Out of Memory vulnerability", "recommendation": "Upgrade to 5.19.4, 6.2.4 or later.", "advisories": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39304" }, { "url": "https://activemq.apache.org/security-advisories.data/CVE-2026-39304-announcement.txt" }, { "url": "https://github.com/apache/activemq" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/09/17" } ], "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-client@6.1.8" } ] }, { "id": "GHSA-h2h4-5m64-m273", "source": { "name": "OSV", "url": "https://osv.dev" }, "ratings": [ { "severity": "medium" } ], "description": "Apache ActiveMQ: Improper validation and restriction of a classpath path name", "recommendation": "Upgrade to 5.19.3, 6.2.2 or later.", "advisories": [ { "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33227" }, { "url": "https://activemq.apache.org/security-advisories.data/CVE-2026-33227-announcement.txt" }, { "url": "https://github.com/apache/activemq" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/06/4" } ], "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-client@6.1.8" } ] } ] }