{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.vulnerable-code/JavaVulnerableLab","documentNamespace":"https://spdx.org/spdxdocs/protobom/edd5efd5-dda4-4097-b157-3e58ffa7e843","creationInfo":{"creators":["Tool: protobom-v0.0.0-20251216165153-1f3f3060931e+dirty","Tool: GitHub.com-Dependency-Graph","Tool: Automatic Dependency Submission"],"created":"2025-12-27T00:36:56Z"},"packages":[{"name":"xml-apis:xml-apis","SPDXID":"SPDXRef-maven-xml-apis-xml-apis-1.0.b2-757612","versionInfo":"1.0.b2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright (c) 1994-2001 World Wide Web Consortium, http://www.w3.org/'\u003e World Wide Web Consortium, Copyright (c) 2001-2002 The Apache Software Foundation, Copyright (c) World Wide Web Consortium, (Massachusetts Institute of Technology, Institut National de Recherche en Informatique et en Automatique, Keio University), Copyright (c) World Wide Web Consortium, Massachusetts Institute of Technology, Institut National de Recherche en Informatique","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/xml-apis/xml-apis@1.0.b2?type=jar"}]},{"name":"org.hibernate.javax.persistence:hibernate-jpa-2.0-api","SPDXID":"SPDXRef-maven-org.hibernate.javax.persistence-hibernate-jpa-2.0-api-1.0.1.Final-ea9c81","versionInfo":"1.0.1.Final","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"EPL-1.0 OR BSD-3-Clause","copyrightText":"Copyright (c) 2007, Eclipse Foundation, Inc., Copyright (c) 2008, 2009 Sun Microsystems, Copyright (c) 2008, 2009 Sun Microsystems, Oracle Corporation","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.hibernate.javax.persistence/hibernate-jpa-2.0-api@1.0.1.Final?type=jar"}]},{"name":"junit:junit","SPDXID":"SPDXRef-maven-junit-junit-3.8.1-a91aef","versionInfo":"3.8.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"CPL-1.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/junit/junit@3.8.1?type=jar"}]},{"name":"org.javassist:javassist","SPDXID":"SPDXRef-maven-org.javassist-javassist-3.15.0-GA-c10493","versionInfo":"3.15.0-GA","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0 AND LGPL-2.1 AND LGPL-2.1-only AND MPL-1.1","copyrightText":"Copyright (c) 1999-2011 Shigeru Chiba, Copyright (c) 1999-2011 Shigeru Chiba.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.javassist/javassist@3.15.0-GA?type=jar"}]},{"name":"javax.servlet:servlet-api","SPDXID":"SPDXRef-maven-javax.servlet-servlet-api-2.3-895ceb","versionInfo":"2.3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-1.1","copyrightText":"Copyright 2000-2001 Sun Microsystems, Inc., Copyright 2000-2001 Sun Microsystems, Inc. 901 San Antonio Road, Palo Alto, CA 94303, U.S.A.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/javax.servlet/servlet-api@2.3?type=jar"}]},{"name":"org.jboss.spec.javax.transaction:jboss-transaction-api_1.1_spec","SPDXID":"SPDXRef-maven-org.jboss.spec.javax.transaction-jboss-transaction-api1.1spec-1.0.0.Final-ca6137","versionInfo":"1.0.0.Final","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.jboss.spec.javax.transaction/jboss-transaction-api_1.1_spec@1.0.0.Final?type=jar"}]},{"name":"org.hibernate:hibernate-core","SPDXID":"SPDXRef-maven-org.hibernate-hibernate-core-4.0.1.Final-c1ad15","versionInfo":"4.0.1.Final","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"LGPL-2.1","copyrightText":"Copyright (c) 2008, Red Hat Middleware LLC","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.hibernate/hibernate-core@4.0.1.Final?type=jar"}]},{"name":"dom4j:dom4j","SPDXID":"SPDXRef-maven-dom4j-dom4j-1.6.1-35b39e","versionInfo":"1.6.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Plexus","copyrightText":"Copyright 2001-2005 (c) MetaStuff, Ltd.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/dom4j/dom4j@1.6.1?type=jar"}]},{"name":"antlr:antlr","SPDXID":"SPDXRef-maven-antlr-antlr-2.7.7-f451a8","versionInfo":"2.7.7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/antlr/antlr@2.7.7?type=jar"}]},{"name":"mysql:mysql-connector-java","SPDXID":"SPDXRef-maven-mysql-mysql-connector-java-5.1.26-bd3f8b","versionInfo":"5.1.26","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"GPL-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/mysql/mysql-connector-java@5.1.26?type=jar"}]},{"name":"commons-collections:commons-collections","SPDXID":"SPDXRef-maven-commons-collections-commons-collections-3.2.1-2e493c","versionInfo":"3.2.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2001-2008 The Apache Software Foundation","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/commons-collections/commons-collections@3.2.1?type=jar"}]},{"name":"org.json:json","SPDXID":"SPDXRef-maven-org.json-json-20090211-0faf3d","versionInfo":"20090211","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"JSON","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.json/json@20090211?type=jar"}]},{"name":"javax.servlet:jstl","SPDXID":"SPDXRef-maven-javax.servlet-jstl-1.2-b3fe01","versionInfo":"1.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"CDDL-1.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/javax.servlet/jstl@1.2?type=jar"}]},{"name":"org.hibernate.common:hibernate-commons-annotations","SPDXID":"SPDXRef-maven-org.hibernate.common-hibernate-commons-annotations-4.0.1.Final-f671dd","versionInfo":"4.0.1.Final","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"LGPL-2.0-or-later AND LGPL-2.1 AND LGPL-2.1-only","copyrightText":"Copyright (c) 2010-2011, Red Hat, Inc. and/or its affiliates","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.hibernate.common/hibernate-commons-annotations@4.0.1.Final?type=jar"}]},{"name":"org.jboss.logging:jboss-logging","SPDXID":"SPDXRef-maven-org.jboss.logging-jboss-logging-3.1.0.CR2-d707e8","versionInfo":"3.1.0.CR2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"LGPL-2.1-or-later","copyrightText":"Copyright (c) 1991, 1999 Free Software Foundation, Inc., Copyright 2010 JBoss, Copyright 2010, Red Hat Middleware LLC, and individual contributors, copyrighted by the Free Software Foundation","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:maven/org.jboss.logging/jboss-logging@3.1.0.CR2?type=jar"}]},{"name":"com.github.vulnerable-code/JavaVulnerableLab","SPDXID":"SPDXRef-github-vulnerable-code-JavaVulnerableLab-master-6fa119","versionInfo":"master","downloadLocation":"git+https://github.com/vulnerable-code/JavaVulnerableLab","filesAnalyzed":false,"licenseDeclared":"GPL-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/vulnerable-code/JavaVulnerableLab@master"}]}],"relationships":[{"spdxElementId":"SPDXRef-maven-org.hibernate-hibernate-core-4.0.1.Final-c1ad15","relatedSpdxElement":"SPDXRef-maven-commons-collections-commons-collections-3.2.1-2e493c","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-maven-org.hibernate-hibernate-core-4.0.1.Final-c1ad15","relatedSpdxElement":"SPDXRef-maven-antlr-antlr-2.7.7-f451a8","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-maven-org.hibernate-hibernate-core-4.0.1.Final-c1ad15","relatedSpdxElement":"SPDXRef-maven-org.jboss.spec.javax.transaction-jboss-transaction-api1.1spec-1.0.0.Final-ca6137","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-maven-org.hibernate-hibernate-core-4.0.1.Final-c1ad15","relatedSpdxElement":"SPDXRef-maven-dom4j-dom4j-1.6.1-35b39e","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-maven-org.hibernate-hibernate-core-4.0.1.Final-c1ad15","relatedSpdxElement":"SPDXRef-maven-org.hibernate.javax.persistence-hibernate-jpa-2.0-api-1.0.1.Final-ea9c81","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-maven-org.hibernate-hibernate-core-4.0.1.Final-c1ad15","relatedSpdxElement":"SPDXRef-maven-org.jboss.logging-jboss-logging-3.1.0.CR2-d707e8","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-maven-org.hibernate-hibernate-core-4.0.1.Final-c1ad15","relatedSpdxElement":"SPDXRef-maven-org.javassist-javassist-3.15.0-GA-c10493","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-maven-org.hibernate-hibernate-core-4.0.1.Final-c1ad15","relatedSpdxElement":"SPDXRef-maven-org.hibernate.common-hibernate-commons-annotations-4.0.1.Final-f671dd","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-maven-dom4j-dom4j-1.6.1-35b39e","relatedSpdxElement":"SPDXRef-maven-xml-apis-xml-apis-1.0.b2-757612","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-vulnerable-code-JavaVulnerableLab-master-6fa119","relatedSpdxElement":"SPDXRef-maven-junit-junit-3.8.1-a91aef","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-vulnerable-code-JavaVulnerableLab-master-6fa119","relatedSpdxElement":"SPDXRef-maven-javax.servlet-servlet-api-2.3-895ceb","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-vulnerable-code-JavaVulnerableLab-master-6fa119","relatedSpdxElement":"SPDXRef-maven-org.hibernate-hibernate-core-4.0.1.Final-c1ad15","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-vulnerable-code-JavaVulnerableLab-master-6fa119","relatedSpdxElement":"SPDXRef-maven-mysql-mysql-connector-java-5.1.26-bd3f8b","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-vulnerable-code-JavaVulnerableLab-master-6fa119","relatedSpdxElement":"SPDXRef-maven-org.json-json-20090211-0faf3d","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-vulnerable-code-JavaVulnerableLab-master-6fa119","relatedSpdxElement":"SPDXRef-maven-javax.servlet-jstl-1.2-b3fe01","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-vulnerable-code-JavaVulnerableLab-master-6fa119","relationshipType":"DESCRIBES"}]}