maven - Why would Sonatype IQ scan report Guava vulnerability when 'mvn dependency:tree' does not show Guava at all? - Stack Overflow

Why would Sonatype IQ scan report show (in IntelliJ-IDEA) a Guava vulnerability when mvn dependency:tree does not show Guava at all? Here is my Sonatype scan result, with a Level-7 Critical vulnera

Provides transitive vulnerable dependency maven:com.google.guava:guava :27.0.1-android-CSDN博客

FYP_similartags/RerunKeming/allTags_test.txt at master · lint0011/FYP_similartags · GitHub

Solved SOFTWARE SECURITY QUESTION (JAVA, ECLIPSE) Next

java - Debug into Maven Dependency Source w/IntelliJ - Stack Overflow

CS544_Project/tag_count.txt at master · weichenzhao/CS544_Project · GitHub

Damn Vulnerable Web App (DVWA): Lesson 7: Automate SQL Injection with SqlMap

spring boot - Guava version 16.0 being used during runtime even though 18.0 is used during compile time - Stack Overflow

java - Failed to read artifact descriptor for com.google.guava (nexus) - Stack Overflow

September 2010 - devel - Fedora Mailing-Lists

FYP_similartags/RerunKeming/allTags_test.txt at master · lint0011/FYP_similartags · GitHub

Selenium Java (maven project): TestNG results differs from ReportNG - Stack Overflow

Easy SCM Onboarding - Nexus IQ Server

June 2018 - devel - Fedora Mailing-Lists

spring - NexusIQ scan report - Stack Overflow

jar - java.lang.NoClassDefFoundError: com/fasterxml/jackson/core/JsonFactory - Stack Overflow