maven - Why would Sonatype IQ scan report Guava vulnerability when 'mvn dependency:tree' does not show Guava at all? - Stack Overflow

Why would Sonatype IQ scan report show (in IntelliJ-IDEA) a Guava vulnerability when mvn dependency:tree does not show Guava at all? Here is my Sonatype scan result, with a Level-7 Critical vulnera

FYP_similartags/RerunKeming/allTags_test.txt at master · lint0011/FYP_similartags · GitHub

java - Debug into Maven Dependency Source w/IntelliJ - Stack Overflow

Maven: dependency appears in effective pom but not in dependency tree

Displaying the dependency tree for a Maven project

Continuous Integration with Jenkins Hands-On Solutions - TECH UPDATE

Maven dependencies not resolved correctly during filesystem scan - properties · Issue #2145 · aquasecurity/trivy · GitHub

Getting Started with Sonatype Vulnerability Analysis

History

java - How to find a dependency in maven, dependency:tree doesn't work - Stack Overflow

FYP_similartags/RerunKeming/allTags_test.txt at master · lint0011/FYP_similartags · GitHub

June 2018 - devel - Fedora Mailing-Lists

Some Maven dependencies are absent · Issue #95 · jfrog/jfrog-vscode-extension · GitHub