maven - Why would Sonatype IQ scan report Guava vulnerability when 'mvn dependency:tree' does not show Guava at all? - Stack Overflow

Why would Sonatype IQ scan report show (in IntelliJ-IDEA) a Guava vulnerability when mvn dependency:tree does not show Guava at all? Here is my Sonatype scan result, with a Level-7 Critical vulnera

June 2018 - devel - Fedora Mailing-Lists

Maven artifact com.google.guava:guava:14.0.1 has type being bundle when imported by m2e · Issue #1383 · google/guava · GitHub

September 2010 - devel - Fedora Mailing-Lists

Some Maven dependencies are absent · Issue #95 · jfrog/jfrog-vscode-extension · GitHub

Solved] Maven Artifact Not Found: com.google.guava/listenablefuture

September 2010 - devel - Fedora Mailing-Lists

java - Why is the Guava library included with Vaadin 14 not appearing on my project's classpath? - Stack Overflow

Damn Vulnerable Web App (DVWA): Lesson 7: Automate SQL Injection with SqlMap

Solved] Maven Artifact Not Found: com.google.guava/listenablefuture

June 2018 - devel - Fedora Mailing-Lists

Open Source Updates, Get Open Source News + Security Updates

Damn Vulnerable Web App (DVWA): Lesson 7: Automate SQL Injection with SqlMap