maven - Why would Sonatype IQ scan report Guava vulnerability when 'mvn dependency:tree' does not show Guava at all? - Stack Overflow

Why would Sonatype IQ scan report show (in IntelliJ-IDEA) a Guava vulnerability when mvn dependency:tree does not show Guava at all? Here is my Sonatype scan result, with a Level-7 Critical vulnera

SCM Features Technical Overview

Why libraries like Guava need more than POMs

maven - Why would Sonatype IQ scan report Guava vulnerability when 'mvn dependency:tree' does not show Guava at all? - Stack Overflow

CS544_Project/tag_count.txt at master · weichenzhao/CS544_Project · GitHub

Maybe (RxJava Javadoc 2.2.0-SNAPSHOT)

Older Release Notes

jar - java.lang.NoClassDefFoundError: com/fasterxml/jackson/core/JsonFactory - Stack Overflow

June 2018 - devel - Fedora Mailing-Lists

Unnecessary-looking dependencies · Issue #2824 · google/guava · GitHub

java - The POM for is missing, no dependency information available even though it exists in Maven Repository - Stack Overflow

BUG] dependency with circular dependencies causes StackOverflowError · Issue #76 · sonatype-nexus-community/scan-gradle-plugin · GitHub

Damn Vulnerable Web App (DVWA): Lesson 7: Automate SQL Injection with SqlMap

June 2018 - devel - Fedora Mailing-Lists