Document toolboxDocument toolbox

Nexus Documentation
CURL vulnerability information (CVE-2023-38545) - Nexus awareness advisory on Microsoft's update KB5014754

Open source components in Hermod

Owned by Ann Base (Deactivated)
Last updated: Oct 18, 2023 by Ylva AnderssonVersion comment
8 min read

This article provides a list of the open source components used in Hermod.

        Open Source Initiative licenses by name
        ------------------------------
        
        * Open Source Initiative    https://opensource.org/licenses/alphabetical
        
        
        Specific licenses
        ------------------------------
        
        * Apache License 1.0        http://www.apache.org/licenses/LICENSE-1.0
        * Apache License 1.1        http://www.apache.org/licenses/LICENSE-1.1
        * Apache License 2.0        http://www.apache.org/licenses/LICENSE-2.0
        * BSD 2-Clause Simplified   https://opensource.org/licenses/BSD-2-Clause
        * BSD 3-Clause New          https://opensource.org/licenses/BSD-3-Clause
        * Bouncy Castle Licence     http://www.bouncycastle.org/licence.html
        * CC0 1.0                   https://creativecommons.org/publicdomain/zero/1.0/
        * CDDL 1.0                  https://opensource.org/licenses/CDDL-1.0
        * CDDL 1.1                  https://javaee.github.io/glassfish/LICENSE
        * Dom4j License             https://github.com/dom4j/dom4j/blob/master/LICENSE
        * EDL 1.0                   http://www.eclipse.org/org/documents/edl-v10.php
        * EPL 1.0                   https://opensource.org/licenses/EPL-1.0
        * EPL 2.0                   https://opensource.org/licenses/EPL-2.0
        * LGPL 2.0                  https://opensource.org/licenses/LGPL-2.0 
        * LGPL 2.1                  https://opensource.org/licenses/LGPL-2.1
        * LGPL 3.0                  https://opensource.org/licenses/LGPL-3.0
        * GPL                       https://opensource.org/licenses/gpl-license  
        * MIT License               https://opensource.org/licenses/MIT
        * MPL 1.1                   https://www.mozilla.org/en-US/MPL/1.1/
        * MPL 2.0                   https://www.mozilla.org/en-US/MPL/2.0/
        * New BSD License           http://www.opensource.org/licenses/bsd-license.php        
        * Public Domain             https://creativecommons.org/licenses/publicdomain/
        * The JSON License          http://json.org/license.html
        * The PostgreSQL License    http://www.postgresql.org/about/licence/
        * XMLPull License           http://www.xmlpull.org/v1/download/unpacked/LICENSE.txt
        

    AL 2.0, GPL v2, MPL 2.0

        * RabbitMQ Java Client (com.rabbitmq:amqp-client:5.17.1)

    Apache-2.0

        * Gson (com.google.code.gson:gson:2.10.1)

    Apache-2.0, LGPL-2.1-or-later

        * Java Native Access (net.java.dev.jna:jna:5.12.1)
        * Java Native Access Platform (net.java.dev.jna:jna-platform:5.12.1)

    Apache License 2.0

        * Apache Commons IO (commons-io:commons-io:2.11.0)
        * Apache Commons Lang (org.apache.commons:commons-lang3:3.12.0)
        * Apache HttpClient (org.apache.httpcomponents.client5:httpclient5:5.2.1)
        * Apache HttpComponents Core HTTP/1.1 (org.apache.httpcomponents.core5:httpcore5:5.2.2)
        * Apache HttpComponents Core HTTP/2 (org.apache.httpcomponents.core5:httpcore5-h2:5.2.2)
        * Apache HttpComponents Core Reactive Extensions (org.apache.httpcomponents.core5:httpcore5-reactive:5.2.2)
        * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.20.0)
        * Apache Log4j to SLF4J Adapter (org.apache.logging.log4j:log4j-to-slf4j:2.20.0)
        * ASM based accessors helper used by json-smart (net.minidev:accessors-smart:2.4.11)
        * AssertJ Core (org.assertj:assertj-core:3.24.2)
        * Bean Validation API (javax.validation:validation-api:2.0.1.Final)
        * Byte Buddy (without dependencies) (net.bytebuddy:byte-buddy:1.14.8)
        * Byte Buddy agent (net.bytebuddy:byte-buddy-agent:1.14.8)
        * Caffeine cache (com.github.ben-manes.caffeine:caffeine:3.1.8)
        * ClassMate (com.fasterxml:classmate:1.5.1)
        * Commons Lang (commons-lang:commons-lang:2.6)
        * Core functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-core:1.1.11)
        * error-prone annotations (com.google.errorprone:error_prone_annotations:2.21.1)
        * FindBugs-jsr305 (com.google.code.findbugs:jsr305:3.0.2)
        * Graphite Integration for Metrics (io.dropwizard.metrics:metrics-graphite:4.2.19)
        * Guava: Google Core Libraries for Java (com.google.guava:guava:32.1.3-jre)
        * Guava InternalFutureFailureAccess and InternalFutures (com.google.guava:failureaccess:1.0.1)
        * Guava ListenableFuture only (com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava)
        * Hibernate Validator Engine (org.hibernate.validator:hibernate-validator:8.0.1.Final)
        * HikariCP (com.zaxxer:HikariCP:5.0.1)
        * HTTP functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-http:1.1.11)
        * J2ObjC Annotations (com.google.j2objc:j2objc-annotations:2.8)
        * Jackson-annotations (com.fasterxml.jackson.core:jackson-annotations:2.15.2)
        * Jackson-core (com.fasterxml.jackson.core:jackson-core:2.15.2)
        * jackson-databind (com.fasterxml.jackson.core:jackson-databind:2.15.2)
        * Jackson-dataformat-YAML (com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.15.2)
        * Jackson datatype: jdk8 (com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.15.2)
        * Jackson datatype: JSR310 (com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.15.2)
        * Jackson-module-parameter-names (com.fasterxml.jackson.module:jackson-module-parameter-names:2.15.2)
        * Jakarta Bean Validation API (jakarta.validation:jakarta.validation-api:3.0.2)
        * Jakarta Dependency Injection (jakarta.inject:jakarta.inject-api:2.0.1)
        * Jandex: Core (io.smallrye:jandex:3.0.5)
        * JBoss Logging 3 (org.jboss.logging:jboss-logging:3.5.3.Final)
        * JCIP Annotations under Apache License (com.github.stephenc.jcip:jcip-annotations:1.0-1)
        * JCL 1.2 implemented over SLF4J (org.slf4j:jcl-over-slf4j:2.0.9)
        * Joda-Time (joda-time:joda-time:2.12.2)
        * JSONassert (org.skyscreamer:jsonassert:1.5.1)
        * JSON library from Android SDK (com.vaadin.external.google:android-json:0.0.20131108.vaadin1)
        * json-path (com.jayway.jsonpath:json-path:2.8.0)
        * jsonschema2pojo-core (org.jsonschema2pojo:jsonschema2pojo-core:1.2.1)
        * JSON Small and Fast Parser (net.minidev:json-smart:2.4.11)
        * Metrics Core (io.dropwizard.metrics:metrics-core:4.2.19)
        * micrometer-commons (io.micrometer:micrometer-commons:1.11.4)
        * micrometer-core (io.micrometer:micrometer-core:1.11.4)
        * micrometer-observation (io.micrometer:micrometer-observation:1.11.4)
        * micrometer-registry-graphite (io.micrometer:micrometer-registry-graphite:1.11.4)
        * micrometer-registry-prometheus (io.micrometer:micrometer-registry-prometheus:1.11.4)
        * Netty/Buffer (io.netty:netty-buffer:4.1.97.Final)
        * Netty/Codec/DNS (io.netty:netty-codec-dns:4.1.97.Final)
        * Netty/Codec/HTTP (io.netty:netty-codec-http:4.1.97.Final)
        * Netty/Codec/HTTP2 (io.netty:netty-codec-http2:4.1.97.Final)
        * Netty/Codec/Socks (io.netty:netty-codec-socks:4.1.97.Final)
        * Netty/Codec (io.netty:netty-codec:4.1.97.Final)
        * Netty/Common (io.netty:netty-common:4.1.97.Final)
        * Netty/Handler/Proxy (io.netty:netty-handler-proxy:4.1.97.Final)
        * Netty/Handler (io.netty:netty-handler:4.1.97.Final)
        * Netty/Resolver/DNS/Classes/MacOS (io.netty:netty-resolver-dns-classes-macos:4.1.97.Final)
        * Netty/Resolver/DNS/Native/MacOS (io.netty:netty-resolver-dns-native-macos:4.1.97.Final)
        * Netty/Resolver/DNS (io.netty:netty-resolver-dns:4.1.97.Final)
        * Netty/Resolver (io.netty:netty-resolver:4.1.97.Final)
        * Netty/Transport/Classes/Epoll (io.netty:netty-transport-classes-epoll:4.1.97.Final)
        * Netty/Transport/Native/Epoll (io.netty:netty-transport-native-epoll:4.1.97.Final)
        * Netty/Transport/Native/Unix/Common (io.netty:netty-transport-native-unix-common:4.1.97.Final)
        * Netty/Transport (io.netty:netty-transport:4.1.97.Final)
        * Nimbus JOSE+JWT (com.nimbusds:nimbus-jose-jwt:9.36)
        * Non-Blocking Reactive Foundation for the JVM (io.projectreactor:reactor-core:3.5.10)
        * Objenesis (org.objenesis:objenesis:3.3)
        * org.xmlunit:xmlunit-core (org.xmlunit:xmlunit-core:2.9.1)
        * Prometheus Java Simpleclient (io.prometheus:simpleclient:0.16.0)
        * Prometheus Java Simpleclient Common (io.prometheus:simpleclient_common:0.16.0)
        * Prometheus Java Span Context Supplier - Common (io.prometheus:simpleclient_tracer_common:0.16.0)
        * Prometheus Java Span Context Supplier - OpenTelemetry (io.prometheus:simpleclient_tracer_otel:0.16.0)
        * Prometheus Java Span Context Supplier - OpenTelemetry Agent (io.prometheus:simpleclient_tracer_otel_agent:0.16.0)
        * SnakeYAML (org.yaml:snakeyaml:1.33)
        * Spring AOP (org.springframework:spring-aop:6.0.12)
        * Spring Aspects (org.springframework:spring-aspects:6.0.12)
        * Spring Beans (org.springframework:spring-beans:6.0.12)
        * spring-boot (org.springframework.boot:spring-boot:3.1.4)
        * spring-boot-actuator (org.springframework.boot:spring-boot-actuator:3.1.4)
        * spring-boot-actuator-autoconfigure (org.springframework.boot:spring-boot-actuator-autoconfigure:3.1.4)
        * spring-boot-autoconfigure (org.springframework.boot:spring-boot-autoconfigure:3.1.4)
        * spring-boot-configuration-processor (org.springframework.boot:spring-boot-configuration-processor:3.1.4)
        * spring-boot-starter (org.springframework.boot:spring-boot-starter:3.1.4)
        * spring-boot-starter-actuator (org.springframework.boot:spring-boot-starter-actuator:3.1.4)
        * spring-boot-starter-aop (org.springframework.boot:spring-boot-starter-aop:3.1.4)
        * spring-boot-starter-data-jpa (org.springframework.boot:spring-boot-starter-data-jpa:3.1.4)
        * spring-boot-starter-jdbc (org.springframework.boot:spring-boot-starter-jdbc:3.1.4)
        * spring-boot-starter-json (org.springframework.boot:spring-boot-starter-json:3.1.4)
        * spring-boot-starter-logging (org.springframework.boot:spring-boot-starter-logging:3.1.4)
        * spring-boot-starter-reactor-netty (org.springframework.boot:spring-boot-starter-reactor-netty:3.1.4)
        * spring-boot-starter-test (org.springframework.boot:spring-boot-starter-test:3.1.4)
        * spring-boot-starter-tomcat (org.springframework.boot:spring-boot-starter-tomcat:3.1.4)
        * spring-boot-starter-validation (org.springframework.boot:spring-boot-starter-validation:3.1.4)
        * spring-boot-starter-web (org.springframework.boot:spring-boot-starter-web:3.1.4)
        * spring-boot-starter-webflux (org.springframework.boot:spring-boot-starter-webflux:3.1.4)
        * spring-boot-test (org.springframework.boot:spring-boot-test:3.1.4)
        * spring-boot-test-autoconfigure (org.springframework.boot:spring-boot-test-autoconfigure:3.1.4)
        * Spring Cloud Commons (org.springframework.cloud:spring-cloud-commons:4.0.4)
        * Spring Cloud Config Client (org.springframework.cloud:spring-cloud-config-client:4.0.4)
        * Spring Cloud Context (org.springframework.cloud:spring-cloud-context:4.0.4)
        * spring-cloud-starter (org.springframework.cloud:spring-cloud-starter:4.0.4)
        * spring-cloud-starter-bootstrap (org.springframework.cloud:spring-cloud-starter-bootstrap:4.0.4)
        * Spring Commons Logging Bridge (org.springframework:spring-jcl:6.0.12)
        * Spring Context (org.springframework:spring-context:6.0.12)
        * Spring Core (org.springframework:spring-core:6.0.12)
        * Spring Data Core (org.springframework.data:spring-data-commons:3.1.4)
        * Spring Data JPA (org.springframework.data:spring-data-jpa:3.1.4)
        * Spring Expression Language (SpEL) (org.springframework:spring-expression:6.0.12)
        * Spring JDBC (org.springframework:spring-jdbc:6.0.12)
        * Spring Object/Relational Mapping (org.springframework:spring-orm:6.0.12)
        * Spring Retry (org.springframework.retry:spring-retry:2.0.3)
        * spring-security-crypto (org.springframework.security:spring-security-crypto:6.1.4)
        * spring-security-rsa (org.springframework.security:spring-security-rsa:1.0.12.RELEASE)
        * Spring TestContext Framework (org.springframework:spring-test:6.0.12)
        * Spring Transaction (org.springframework:spring-tx:6.0.12)
        * Spring Web (org.springframework:spring-web:6.0.12)
        * Spring WebFlux (org.springframework:spring-webflux:6.0.12)
        * Spring Web MVC (org.springframework:spring-webmvc:6.0.12)
        * swagger-annotations (io.swagger:swagger-annotations:1.6.11)
        * swagger-annotations (io.swagger.core.v3:swagger-annotations:2.2.8)
        * swagger-annotations-jakarta (io.swagger.core.v3:swagger-annotations-jakarta:2.2.8)
        * swagger-core-jakarta (io.swagger.core.v3:swagger-core-jakarta:2.2.8)
        * swagger-models-jakarta (io.swagger.core.v3:swagger-models-jakarta:2.2.8)
        * Swagger UI (org.webjars:swagger-ui:4.18.1)
        * tomcat-embed-core (org.apache.tomcat.embed:tomcat-embed-core:10.1.13)
        * tomcat-embed-el (org.apache.tomcat.embed:tomcat-embed-el:10.1.13)
        * tomcat-embed-websocket (org.apache.tomcat.embed:tomcat-embed-websocket:10.1.13)

    Bouncy Castle Licence

        * Bouncy Castle ASN.1 Extension and Utility APIs (org.bouncycastle:bcutil-jdk18on:1.73)
        * Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs (org.bouncycastle:bcpkix-jdk18on:1.73)
        * Bouncy Castle Provider (org.bouncycastle:bcprov-jdk18on:1.73)

    BSD 2-Clause

        * ANTLR 4 Runtime (org.antlr:antlr4-runtime:4.10.1)

    BSD-2-Clause

        * PostgreSQL JDBC Driver (org.postgresql:postgresql:42.6.0)

    BSD-2-Clause, CC0 1.0

        * HdrHistogram (org.hdrhistogram:HdrHistogram:2.1.12)

    BSD-3-Clause

        * asm (org.ow2.asm:asm:9.3)

    BSD License 3

        * Hamcrest (org.hamcrest:hamcrest:2.2)

    CC0 1.0

        * LatencyUtils (org.latencyutils:LatencyUtils:2.0.3)

    CDDL 1.1, GPL2 w/ CPE

        * Codemodel Core (com.sun.codemodel:codemodel:2.6)

    Dual license consisting of the CDDL v1.1 and GPL v2

        * javax.json.bind-api (javax.json.bind:javax.json.bind-api:1.0)

    Eclipse Distribution License v. 1.0, Eclipse Public License v. 2.0

        * Jakarta Persistence API (jakarta.persistence:jakarta.persistence-api:3.1.0)

    Eclipse Distribution License - v 1.0

        * istack common utility code runtime (com.sun.istack:istack-commons-runtime:4.1.2)
        * Jakarta XML Binding API (jakarta.xml.bind:jakarta.xml.bind-api:4.0.1)
        * JAXB Core (org.glassfish.jaxb:jaxb-core:4.0.3)
        * JAXB Runtime (org.glassfish.jaxb:jaxb-runtime:4.0.3)
        * TXW2 Runtime (org.glassfish.jaxb:txw2:4.0.3)

    Eclipse Public License 1.0, LGPL 2.1

        * Logback Classic Module (ch.qos.logback:logback-classic:1.4.11)
        * Logback Core Module (ch.qos.logback:logback-core:1.4.11)

    Eclipse Public License 2.0, GNU General Public License, version 2 with the GNU Classpath Exception

        * JSON-B API (jakarta.json.bind:jakarta.json.bind-api:3.0.0)

    Eclipse Public License v2.0

        * JUnit Jupiter (Aggregator) (org.junit.jupiter:junit-jupiter:5.9.3)
        * JUnit Jupiter API (org.junit.jupiter:junit-jupiter-api:5.9.3)
        * JUnit Jupiter Engine (org.junit.jupiter:junit-jupiter-engine:5.9.3)
        * JUnit Jupiter Params (org.junit.jupiter:junit-jupiter-params:5.9.3)
        * JUnit Platform Commons (org.junit.platform:junit-platform-commons:1.9.3)
        * JUnit Platform Engine API (org.junit.platform:junit-platform-engine:1.9.3)

    Eclipse Public License - v 2.0

        * AspectJ Weaver (org.aspectj:aspectjweaver:1.9.20)

    EDL 1.0

        * Angus Activation Registries (org.eclipse.angus:angus-activation:2.0.1)
        * Jakarta Activation API (jakarta.activation:jakarta.activation-api:2.1.2)

    EPL 1.0, MPL 2.0

        * H2 Database Engine (com.h2database:h2:2.1.214)

    EPL 2.0, GPL2 w/ CPE

        * jakarta.transaction API (jakarta.transaction:jakarta.transaction-api:2.0.1)
        * Jakarta Annotations API (jakarta.annotation:jakarta.annotation-api:2.1.1)

    GNU Library General Public License v2.1 or later

        * Hibernate Commons Annotations (org.hibernate.common:hibernate-commons-annotations:6.0.6.Final)
        * Hibernate ORM - hibernate-core (org.hibernate.orm:hibernate-core:6.2.9.Final)

    LGPL 2.1

        * mariadb-java-client (org.mariadb.jdbc:mariadb-java-client:3.1.4)

    LGPL 3.0

        * FindBugs-Annotations (com.google.code.findbugs:annotations:1.3.9)

    MIT

        * waffle-jna (com.github.waffle:waffle-jna:3.2.0)
        * webjars-locator-core (org.webjars:webjars-locator-core:0.52)

    MIT-0

        * reactive-streams (org.reactivestreams:reactive-streams:1.0.4)

    MIT License

        * Checker Qual (org.checkerframework:checker-qual:3.31.0)
        * JUL to SLF4J bridge (org.slf4j:jul-to-slf4j:2.0.9)
        * Microsoft JDBC Driver for SQL Server (com.microsoft.sqlserver:mssql-jdbc:11.2.3.jre17)
        * mockito-core (org.mockito:mockito-core:5.3.1)
        * mockito-junit-jupiter (org.mockito:mockito-junit-jupiter:5.3.1)
        * Project Lombok (org.projectlombok:lombok:1.18.30)
        * SLF4J API Module (org.slf4j:slf4j-api:2.0.9)

    Oracle Free Use Terms and Conditions (FUTC)

        * ojdbc8 (com.oracle.database.jdbc:ojdbc8:21.9.0.0)

    The Apache License, Version 2.0

        * org.apiguardian:apiguardian-api (org.apiguardian:apiguardian-api:1.1.2)
        * org.opentest4j:opentest4j (org.opentest4j:opentest4j:1.2.0)
        * springdoc-openapi-starter-common (org.springdoc:springdoc-openapi-starter-common:2.0.4)
        * springdoc-openapi-starter-webmvc-api (org.springdoc:springdoc-openapi-starter-webmvc-api:2.0.4)
        * springdoc-openapi-starter-webmvc-ui (org.springdoc:springdoc-openapi-starter-webmvc-ui:2.0.4)

    The MIT License (MIT)

        * ClassGraph (io.github.classgraph:classgraph:4.8.149)

    Unknown license

        * javaparser (com.google.code.javaparser:javaparser:1.0.11)




Copyright 2024 Technology Nexus Secured Business Solutions AB. All rights reserved.
Contact Nexus | https://www.nexusgroup.com | Disclaimer | Terms & Conditions