Skip to content

Remove Root endpoint - #792

Merged
polacektomas merged 1 commit into
project-ncl:masterfrom
rnc:BR1
Oct 8, 2026
Merged

Remove Root endpoint#792
polacektomas merged 1 commit into
project-ncl:masterfrom
rnc:BR1

Conversation

@rnc

@rnc rnc commented Oct 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This endpoint duplicates the existing version and overall application deployment HTML page. Its informational only returning e.g.

Dependency analysis service REST API

    DA Version: 3.0.1-SNAPSHOT
        Commit Hash: 69a972506237c2831e18708063fc473ac8a9cf95
        BC REST API Version: 1
        Reports REST API Version: 1

The version endpoint already supplies this and the deployment provides links to swagger/health/etc.

This is affects #791

@rnc
rnc marked this pull request as ready for review October 7, 2026 14:16
@github-actions

github-actions Bot commented Oct 7, 2026

Copy link
Copy Markdown
Contributor

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output 



Identified 384 dependencies

Detected 13 vulnerabilities (0 Critical, 4 High, 8 Medium, 1 Low)

+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |              LIBRARY               |       ID       |                                               TOP FIX                                                |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.22.2.jar            | CVE-2026-89407 | Upgrade to version  https://github.com/FasterXML/jackson-core.git - jackson-core-3.2.2,              |
|          |                                    |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.7,                                 |
|          |                                    |                | https://github.com/FasterXML/jackson-core.git - jackson-core-3.1.7,                                  |
|          |                                    |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.18.11,                                |
|          |                                    |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.22.3,                                 |
|          |                                    |                | tools.jackson.core:jackson-core:3.2.2,tools.jackson.core:jackson-core:3.1.7,                         |
|          |                                    |                | com.fasterxml.jackson.core:jackson-core:2.22.3,com.fasterxml.jackson.core:jackson-core:2.21.7,       |
|          |                                    |                | com.fasterxml.jackson.core:jackson-core:2.18.11                                                      |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.22.2.jar            | CVE-2026-89425 | Upgrade to version  https://github.com/FasterXML/jackson-core.git - jackson-core-2.18.11,            |
|          |                                    |                | https://github.com/FasterXML/jackson-core.git - jackson-core-3.1.7,                                  |
|          |                                    |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.7,                                 |
|          |                                    |                | https://github.com/FasterXML/jackson-core.git - jackson-core-3.2.3,                                  |
|          |                                    |                | tools.jackson.core:jackson-core:3.2.3,tools.jackson.core:jackson-core:3.1.7,                         |
|          |                                    |                | com.fasterxml.jackson.core:jackson-core:2.22.3,com.fasterxml.jackson.core:jackson-core:2.21.7,       |
|          |                                    |                | com.fasterxml.jackson.core:jackson-core:2.18.11, https://github.com/FasterXML/jackson-core.git -     |
|          |                                    |                | jackson-core-2.22.3                                                                                  |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.22.2.jar        | CVE-2026-91776 | Upgrade to version  https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.3,      |
|          |                                    |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.7,                          |
|          |                                    |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.7,                         |
|          |                                    |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.3,                         |
|          |                                    |                | tools.jackson.core:jackson-databind:3.2.3,tools.jackson.core:jackson-databind:3.1.7,                 |
|          |                                    |                | com.fasterxml.jackson.core:jackson-databind:2.22.3,                                                  |
|          |                                    |                | com.fasterxml.jackson.core:jackson-databind:2.21.7,                                                  |
|          |                                    |                | com.fasterxml.jackson.core:jackson-databind:2.18.11,                                                 |
|          |                                    |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.11                         |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.22.2.jar        | CVE-2026-91777 | Upgrade to version tools.jackson.core:jackson-databind:3.1.7,                                        |
|          |                                    |                | tools.jackson.core:jackson-databind:3.2.3, https://github.com/FasterXML/jackson-databind.git -       |
|          |                                    |                | jackson-databind-2.21.7, https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.3, |
|          |                                    |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.3,                         |
|          |                                    |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.11,                        |
|          |                                    |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.7,                          |
|          |                                    |                | com.fasterxml.jackson.core:jackson-databind:2.22.3,                                                  |
|          |                                    |                | com.fasterxml.jackson.core:jackson-databind:2.21.7,                                                  |
|          |                                    |                | com.fasterxml.jackson.core:jackson-databind:2.18.11                                                  |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.86.jar            | CVE-2026-97873 | N/A                                                                                                  |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-coreutils-2.0.jar          | CVE-2026-86321 | N/A                                                                                                  |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-coreutils-2.0.jar          | CVE-2026-86511 | N/A                                                                                                  |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-coreutils-2.0.jar          | CVE-2026-86513 | N/A                                                                                                  |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | json-patch-1.13.jar                | CVE-2026-86318 | N/A                                                                                                  |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | json-patch-1.13.jar                | CVE-2026-86319 | N/A                                                                                                  |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | json-patch-1.13.jar                | CVE-2026-86512 | N/A                                                                                                  |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | wildfly-elytron-asn1-2.9.2.SP1.jar | CVE-2026-10832 | Upgrade to version  https://github.com/wildfly-security/wildfly-elytron.git - 2.8.6.Final,           |
|          |                                    |                | https://github.com/wildfly-security/wildfly-elytron.git - 2.9.3.Final,                               |
|          |                                    |                | org.wildfly.security:wildfly-elytron-asn1:2.6.11.Final,                                              |
|          |                                    |                | org.wildfly.security:wildfly-elytron-asn1:2.8.6.Final,                                               |
|          |                                    |                | org.wildfly.security:wildfly-elytron-asn1:2.9.3.Final,                                               |
|          |                                    |                | org.wildfly.security:wildfly-elytron:2.6.11.Final,org.wildfly.security:wildfly-elytron:2.8.6.Final,  |
|          |                                    |                | org.wildfly.security:wildfly-elytron:2.9.3.Final,                                                    |
|          |                                    |                | https://github.com/wildfly-security/wildfly-elytron.git - 2.6.11.Final                               |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| LOW      | LatencyUtils-2.0.3.jar             | CVE-2026-82596 | N/A                                                                                                  |
+----------+------------------------------------+----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

application-3.0.1-SNAPSHOT.jar
|-- quarkus-elytron-security-ldap-3.39.5.jar
	|-- quarkus-elytron-security-3.39.5.jar
		|-- wildfly-elytron-realm-2.9.2.SP1.jar
			|-- wildfly-elytron-x500-cert-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
				|-- wildfly-elytron-x500-cert-util-2.9.2.SP1.jar
					|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
	|-- wildfly-elytron-realm-ldap-2.9.2.SP1.jar
		|-- wildfly-elytron-auth-server-2.9.2.SP1.jar
			|-- wildfly-elytron-x500-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
		|-- wildfly-elytron-client-2.9.2.SP1.jar
			|-- wildfly-elytron-credential-store-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
			|-- wildfly-elytron-mechanism-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
		|-- wildfly-elytron-credential-2.9.2.SP1.jar
			|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
			|-- wildfly-elytron-keystore-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
		|-- wildfly-elytron-util-2.9.2.SP1.jar
			|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
|-- quarkus-jdbc-postgresql-3.39.5.jar
	|-- quarkus-agroal-3.39.5.jar
		|-- quarkus-narayana-jta-3.39.5.jar
			|-- narayana-jta-7.3.4.Final.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
|-- quarkus-micrometer-opentelemetry-3.39.5.jar
	|-- quarkus-micrometer-3.39.5.jar
		|-- resteasy-reactive-client-3.39.5.jar
			|-- vertx-web-client-4.5.34.jar
				|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- quarkus-rest-3.39.5.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- vertx-codegen-4.5.34.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- LatencyUtils-2.0.3.jar [1 LOW]
	|-- quarkus-opentelemetry-3.39.5.jar
		|-- quarkus-tls-registry-3.39.5.jar
			|-- smallrye-private-key-pem-parser-0.9.4.jar
				|-- bcpkix-jdk18on-1.86.jar
					|-- bcutil-jdk18on-1.86.jar
						|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
				|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
|-- quarkus-oidc-3.39.5.jar
	|-- quarkus-oidc-common-3.39.5.jar
		|-- smallrye-mutiny-vertx-web-client-3.23.1.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- quarkus-vertx-3.39.5.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- smallrye-mutiny-vertx-core-3.23.1.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- quarkus-rest-client-jackson-3.39.5.jar
	|-- resteasy-reactive-jackson-3.39.5.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- quarkus-rest-jackson-common-3.39.5.jar
		|-- quarkus-jackson-3.39.5.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- quarkus-smallrye-health-3.39.5.jar
	|-- quarkus-vertx-http-3.39.5.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- vertx-web-4.5.34.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- quarkus-smallrye-openapi-3.39.5.jar
	|-- smallrye-open-api-core-4.3.5.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-dataformat-yaml-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- reports-rest-3.0.1-SNAPSHOT.jar
	|-- jackson-datatype-jsr310-2.22.2.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- reports-backend-3.0.1-SNAPSHOT.jar
		|-- communication-3.0.1-SNAPSHOT.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- galley-maven-1.23-jakarta.jar
				|-- atlas-relationships-api-1.2.3.jar
					|-- jackson-core-2.22.2.jar [2 HIGH]
					|-- jackson-databind-2.22.2.jar [2 HIGH]
					|-- atlas-bindings-jackson-identities-1.2.3.jar
						|-- jackson-core-2.22.2.jar [2 HIGH]
						|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- galley-transport-httpclient-1.23-jakarta.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
				|-- jhttpc-1.18.jar
					|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
|-- rest-client-jakarta-3.6.0-SNAPSHOT.jar
	|-- jackson-jakarta-rs-json-provider-2.22.2.jar
		|-- jackson-jakarta-rs-base-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-module-jakarta-xmlbind-annotations-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- common-3.6.0-SNAPSHOT-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-datatype-jdk8-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- dto-3.6.0-SNAPSHOT-patch-builders-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- pnc-common-3.5.4-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-module-parameter-names-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- pom-manipulation-common-lite-5.5.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- rest-client-3.6.0-SNAPSHOT-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-coreutils-2.0.jar [3 MEDIUM]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- vertx-core-4.5.34.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
common-3.0.1-SNAPSHOT.jar
|-- reports-model-3.0.1-SNAPSHOT.jar
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-core-2.22.2.jar [2 HIGH]
communication-3.0.1-SNAPSHOT.jar
|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- jackson-core-2.22.2.jar [2 HIGH]
|-- quarkus-undertow-3.39.5.jar
	|-- quarkus-vertx-http-3.39.5.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- quarkus-tls-registry-3.39.5.jar
			|-- smallrye-private-key-pem-parser-0.9.4.jar
				|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
		|-- quarkus-vertx-3.39.5.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- smallrye-mutiny-vertx-core-3.23.1.jar
				|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- vertx-web-4.5.34.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- galley-maven-1.23-jakarta.jar
	|-- atlas-relationships-api-1.2.3.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- atlas-bindings-jackson-identities-1.2.3.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- galley-transport-httpclient-1.23-jakarta.jar
	|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- jhttpc-1.18.jar
		|-- bcpkix-jdk18on-1.86.jar
			|-- bcutil-jdk18on-1.86.jar
				|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
		|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
|-- reports-model-3.0.1-SNAPSHOT.jar
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- common-3.6.0-SNAPSHOT-jakarta.jar
	|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- jackson-datatype-jdk8-2.22.2.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- pnc-common-3.5.4-jakarta.jar
	|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- pom-manipulation-common-lite-5.5.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- rest-client-jakarta-3.6.0-SNAPSHOT.jar
	|-- jackson-jakarta-rs-json-provider-2.22.2.jar
		|-- jackson-jakarta-rs-base-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-module-jakarta-xmlbind-annotations-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- dto-3.6.0-SNAPSHOT-patch-builders-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
|-- rest-client-3.6.0-SNAPSHOT-jakarta.jar
	|-- jackson-datatype-jsr310-2.22.2.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- json-patch-1.13.jar [3 MEDIUM]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-coreutils-2.0.jar [3 MEDIUM]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- vertx-core-4.5.34.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
reports-backend-3.0.1-SNAPSHOT.jar
|-- quarkus-hibernate-orm-3.39.5.jar
	|-- quarkus-narayana-jta-3.39.5.jar
		|-- narayana-jta-7.3.4.Final.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
|-- quarkus-hibernate-validator-3.39.5.jar
	|-- quarkus-vertx-http-3.39.5.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- quarkus-tls-registry-3.39.5.jar
			|-- smallrye-private-key-pem-parser-0.9.4.jar
				|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
		|-- quarkus-vertx-3.39.5.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- smallrye-mutiny-vertx-core-3.23.1.jar
				|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- vertx-web-4.5.34.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- communication-3.0.1-SNAPSHOT.jar
	|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- galley-maven-1.23-jakarta.jar
		|-- atlas-relationships-api-1.2.3.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- atlas-bindings-jackson-identities-1.2.3.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- galley-transport-httpclient-1.23-jakarta.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jhttpc-1.18.jar
			|-- bcpkix-jdk18on-1.86.jar
				|-- bcutil-jdk18on-1.86.jar
					|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
			|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
	|-- common-3.6.0-SNAPSHOT-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- pnc-common-3.5.4-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- pom-manipulation-common-lite-5.5.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- rest-client-3.6.0-SNAPSHOT-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
		|-- vertx-core-4.5.34.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- reports-model-3.0.1-SNAPSHOT.jar
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- rest-client-jakarta-3.6.0-SNAPSHOT.jar
	|-- jackson-jakarta-rs-json-provider-2.22.2.jar
		|-- jackson-jakarta-rs-base-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-module-jakarta-xmlbind-annotations-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- dto-3.6.0-SNAPSHOT-patch-builders-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-coreutils-2.0.jar [3 MEDIUM]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- rest-api-3.6.0-SNAPSHOT-java-client-jakarta.jar
		|-- jackson-datatype-jdk8-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-datatype-jsr310-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
reports-model-3.0.1-SNAPSHOT.jar
|-- pnc-api-3.5.2-jakarta.jar
	|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
reports-rest-3.0.1-SNAPSHOT.jar
|-- jackson-datatype-jsr310-2.22.2.jar
	|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
|-- quarkus-rest-jackson-3.39.5.jar
	|-- quarkus-rest-jackson-common-3.39.5.jar
		|-- resteasy-reactive-jackson-3.39.5.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- quarkus-jackson-3.39.5.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- quarkus-rest-3.39.5.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- resteasy-reactive-vertx-3.39.5.jar
			|-- smallrye-mutiny-vertx-core-3.23.1.jar
				|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- quarkus-websockets-3.39.5.jar
	|-- quarkus-vertx-http-3.39.5.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- quarkus-tls-registry-3.39.5.jar
			|-- smallrye-private-key-pem-parser-0.9.4.jar
				|-- bcpkix-jdk18on-1.86.jar
					|-- bcutil-jdk18on-1.86.jar
						|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
				|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
		|-- vertx-web-4.5.34.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- quarkus-websockets-client-3.39.5.jar
		|-- quarkus-vertx-3.39.5.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- reports-backend-3.0.1-SNAPSHOT.jar
	|-- quarkus-hibernate-orm-3.39.5.jar
		|-- quarkus-narayana-jta-3.39.5.jar
			|-- narayana-jta-7.3.4.Final.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- communication-3.0.1-SNAPSHOT.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- galley-maven-1.23-jakarta.jar
			|-- atlas-relationships-api-1.2.3.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
				|-- atlas-bindings-jackson-identities-1.2.3.jar
					|-- jackson-core-2.22.2.jar [2 HIGH]
					|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- galley-transport-httpclient-1.23-jakarta.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jhttpc-1.18.jar
				|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
|-- rest-client-jakarta-3.6.0-SNAPSHOT.jar
	|-- jackson-jakarta-rs-json-provider-2.22.2.jar
		|-- jackson-jakarta-rs-base-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-module-jakarta-xmlbind-annotations-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- common-3.6.0-SNAPSHOT-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- dto-3.6.0-SNAPSHOT-patch-builders-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- pnc-common-3.5.4-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-module-parameter-names-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- pom-manipulation-common-lite-5.5.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- rest-client-3.6.0-SNAPSHOT-jakarta.jar
		|-- jackson-datatype-jdk8-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- json-patch-1.13.jar [3 MEDIUM]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-coreutils-2.0.jar [3 MEDIUM]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- vertx-core-4.5.34.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
source-code-manager-3.0.1-SNAPSHOT.jar
|-- quarkus-quartz-3.39.5.jar
	|-- quarkus-scheduler-3.39.5.jar
		|-- quarkus-virtual-threads-3.39.5.jar
			|-- vertx-core-4.5.34.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
|-- pnc-common-3.5.4-jakarta.jar
	|-- pom-manipulation-common-lite-5.5.jar
		|-- jackson-core-2.22.2.jar [2 HIGH]
testsuite-3.0.1-SNAPSHOT.jar
|-- application-3.0.1-SNAPSHOT.jar
	|-- quarkus-elytron-security-ldap-3.39.5.jar
		|-- quarkus-elytron-security-3.39.5.jar
			|-- wildfly-elytron-realm-2.9.2.SP1.jar
				|-- wildfly-elytron-x500-2.9.2.SP1.jar
					|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
		|-- wildfly-elytron-realm-ldap-2.9.2.SP1.jar
			|-- wildfly-elytron-client-2.9.2.SP1.jar
				|-- wildfly-elytron-credential-store-2.9.2.SP1.jar
					|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
				|-- wildfly-elytron-keystore-2.9.2.SP1.jar
					|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
				|-- wildfly-elytron-mechanism-2.9.2.SP1.jar
					|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
			|-- wildfly-elytron-credential-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
				|-- wildfly-elytron-x500-cert-2.9.2.SP1.jar
					|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
					|-- wildfly-elytron-x500-cert-util-2.9.2.SP1.jar
						|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
			|-- wildfly-elytron-util-2.9.2.SP1.jar
				|-- wildfly-elytron-asn1-2.9.2.SP1.jar [1 MEDIUM]
	|-- quarkus-jdbc-postgresql-3.39.5.jar
		|-- quarkus-agroal-3.39.5.jar
			|-- quarkus-narayana-jta-3.39.5.jar
				|-- narayana-jta-7.3.4.Final.jar
					|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- quarkus-micrometer-opentelemetry-3.39.5.jar
		|-- quarkus-micrometer-3.39.5.jar
			|-- resteasy-reactive-client-3.39.5.jar
				|-- vertx-web-client-4.5.34.jar
					|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- LatencyUtils-2.0.3.jar [1 LOW]
	|-- quarkus-oidc-3.39.5.jar
		|-- quarkus-oidc-common-3.39.5.jar
			|-- quarkus-tls-registry-3.39.5.jar
				|-- smallrye-private-key-pem-parser-0.9.4.jar
					|-- bcpkix-jdk18on-1.86.jar
						|-- bcutil-jdk18on-1.86.jar
							|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
					|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
			|-- smallrye-mutiny-vertx-web-client-3.23.1.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- quarkus-vertx-3.39.5.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- smallrye-mutiny-vertx-core-3.23.1.jar
				|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- quarkus-rest-client-jackson-3.39.5.jar
		|-- resteasy-reactive-jackson-3.39.5.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- quarkus-rest-jackson-common-3.39.5.jar
			|-- quarkus-jackson-3.39.5.jar
				|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- quarkus-smallrye-health-3.39.5.jar
		|-- quarkus-vertx-http-3.39.5.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- vertx-web-4.5.34.jar
				|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- quarkus-smallrye-openapi-3.39.5.jar
		|-- smallrye-open-api-core-4.3.5.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-dataformat-yaml-2.22.2.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- reports-rest-3.0.1-SNAPSHOT.jar
		|-- quarkus-rest-jackson-3.39.5.jar
			|-- quarkus-rest-3.39.5.jar
				|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- reports-backend-3.0.1-SNAPSHOT.jar
			|-- communication-3.0.1-SNAPSHOT.jar
				|-- jackson-databind-2.22.2.jar [2 HIGH]
				|-- galley-maven-1.23-jakarta.jar
					|-- atlas-relationships-api-1.2.3.jar
						|-- jackson-core-2.22.2.jar [2 HIGH]
						|-- jackson-databind-2.22.2.jar [2 HIGH]
						|-- atlas-bindings-jackson-identities-1.2.3.jar
							|-- jackson-core-2.22.2.jar [2 HIGH]
							|-- jackson-databind-2.22.2.jar [2 HIGH]
				|-- galley-transport-httpclient-1.23-jakarta.jar
					|-- jackson-core-2.22.2.jar [2 HIGH]
					|-- jackson-databind-2.22.2.jar [2 HIGH]
					|-- jhttpc-1.18.jar
						|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
|-- rest-client-jakarta-3.6.0-SNAPSHOT.jar
	|-- jackson-jakarta-rs-json-provider-2.22.2.jar
		|-- jackson-jakarta-rs-base-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-module-jakarta-xmlbind-annotations-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- common-3.6.0-SNAPSHOT-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-datatype-jdk8-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- dto-3.6.0-SNAPSHOT-patch-builders-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- pnc-common-3.5.4-jakarta.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-module-parameter-names-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- pom-manipulation-common-lite-5.5.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- rest-api-3.6.0-SNAPSHOT-java-client-jakarta.jar
		|-- jackson-datatype-jsr310-2.22.2.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- rest-client-3.6.0-SNAPSHOT-jakarta.jar
		|-- json-patch-1.13.jar [3 MEDIUM]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-coreutils-2.0.jar [3 MEDIUM]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- vertx-core-4.5.34.jar
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- vertx-codegen-4.5.34.jar
				|-- jackson-core-2.22.2.jar [2 HIGH]


No Policy violations were detected

Project 'dependency-analysis-pr' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=4c9fbc37-091e-46e9-b875-c0aefb00d5ec
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=bb6fda22a3f04173960765f5e68200ea76dafe65e1a8494aaa5ac6ce27a54843

Mend AI scan succeeded.

Support Token: 21266b40679a34725807fb9453b68f9031791382933115
SAST scan output 
*no findings*

Full logs and artifacts

@rnc
rnc requested a review from polacektomas October 8, 2026 08:20
@polacektomas
polacektomas merged commit 983655b into project-ncl:master Oct 8, 2026
4 checks passed
@rnc
rnc deleted the BR1 branch October 8, 2026 10:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@polacektomas polacektomas polacektomas approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@rnc @polacektomas