maven - Why would Sonatype IQ scan report Guava vulnerability when 'mvn dependency:tree' does not show Guava at all? - Stack Overflow

Why would Sonatype IQ scan report show (in IntelliJ-IDEA) a Guava vulnerability when mvn dependency:tree does not show Guava at all? Here is my Sonatype scan result, with a Level-7 Critical vulnera

Easy SCM Onboarding - Nexus IQ Server

Maven: dependency appears in effective pom but not in dependency tree

June 2018 - devel - Fedora Mailing-Lists

History

java - Why is the Guava library included with Vaadin 14 not appearing on my project's classpath? - Stack Overflow

CS544_Project/tag_count.txt at master · weichenzhao/CS544_Project · GitHub

CSE-190-Assignment-2/Model2_0.02.ipynb at master · Atlrrific/CSE-190-Assignment-2 · GitHub

June 2018 - devel - Fedora Mailing-Lists

Environment confusion - Atlassian Developer Tools - The Atlassian Developer Community

September 2010 - devel - Fedora Mailing-Lists

jar - java.lang.NoClassDefFoundError: com/fasterxml/jackson/core/JsonFactory - Stack Overflow