maven - Why would Sonatype IQ scan report Guava vulnerability when 'mvn dependency:tree' does not show Guava at all? - Stack Overflow

Why would Sonatype IQ scan report show (in IntelliJ-IDEA) a Guava vulnerability when mvn dependency:tree does not show Guava at all? Here is my Sonatype scan result, with a Level-7 Critical vulnera

BUG] dependency with circular dependencies causes StackOverflowError · Issue #76 · sonatype-nexus-community/scan-gradle-plugin · GitHub

IQ Server vulnerability information contains the Root Cause – Sonatype Support

June 2018 - devel - Fedora Mailing-Lists

intellij idea - IntelliJ_SBT_guava 28.1-jre version dependencies is not getting resolved with my build.sbt - Stack Overflow

Some Maven dependencies are absent · Issue #95 · jfrog/jfrog-vscode-extension · GitHub

Maven dependencies not resolved correctly during filesystem scan - properties · Issue #2145 · aquasecurity/trivy · GitHub

android - Could not resolve com.google.guava:guava:30.1-jre - Gradle project sync failed. Basic functionality will not work properly - in kotlin project - Stack Overflow

FYP_similartags/RerunKeming/allTags_test.txt at master · lint0011/FYP_similartags · GitHub

How to identify vulnerable dependencies in a Maven project

Displaying the dependency tree for a Maven project

Easy SCM Onboarding - Nexus IQ Server

SCM Features Technical Overview

SCM Features Technical Overview

Chii Sakai - OSCHINA - 中文开源技术交流社区

Older Release Notes