maven - Why would Sonatype IQ scan report Guava vulnerability when 'mvn dependency:tree' does not show Guava at all? - Stack Overflow

Why would Sonatype IQ scan report show (in IntelliJ-IDEA) a Guava vulnerability when mvn dependency:tree does not show Guava at all? Here is my Sonatype scan result, with a Level-7 Critical vulnera

Unnecessary-looking dependencies · Issue #2824 · google/guava · GitHub

September 2010 - devel - Fedora Mailing-Lists

I am getting errors in IntelliJ when adding MVN dependency- Selenium Java » 3.141.59. Any suggestions? - Stack Overflow

IQ Server Release - 132 - Sonatype Lifecycle & Repository Firewall - Sonatype Community

SCM Features Technical Overview

New developer tools for open source dependency management

Maven dependencies not resolved correctly during filesystem scan - properties · Issue #2145 · aquasecurity/trivy · GitHub

Maven dependencies not resolved correctly during filesystem scan - properties · Issue #2145 · aquasecurity/trivy · GitHub

June 2018 - devel - Fedora Mailing-Lists

Guava (Google Collection Library) dependency missing from maven build file · Issue #174 · zeromq/jeromq · GitHub