maven - Why would Sonatype IQ scan report Guava vulnerability when 'mvn dependency:tree' does not show Guava at all? - Stack Overflow

Why would Sonatype IQ scan report show (in IntelliJ-IDEA) a Guava vulnerability when mvn dependency:tree does not show Guava at all? Here is my Sonatype scan result, with a Level-7 Critical vulnera

I am getting errors in IntelliJ when adding MVN dependency- Selenium Java » 3.141.59. Any suggestions? - Stack Overflow

IQ Server vulnerability information contains the Root Cause – Sonatype Support

Maven surefire plugin not running tests after migrating from Spock 1.2 to 2.0-M2 - Stack Overflow

Solved SOFTWARE SECURITY QUESTION (JAVA, ECLIPSE) Next

How to identify vulnerable dependencies in a Maven project

June 2018 - devel - Fedora Mailing-Lists

Maybe (RxJava Javadoc 2.2.0-SNAPSHOT)

June 2018 - devel - Fedora Mailing-Lists

java - The POM for is missing, no dependency information available even though it exists in Maven Repository - Stack Overflow

Selenium Java (maven project): TestNG results differs from ReportNG - Stack Overflow

Policy Evaluation in Source Control Management

September 2010 - devel - Fedora Mailing-Lists