Is org.assertj:assertj-core safe to use?

org.assertj:assertj-core has 1 known vulnerabilities on the latest version (4.0.0-M1). DepScope rates its health at 40/100 (high risk).

What is the latest version of org.assertj:assertj-core?

The latest version of org.assertj:assertj-core is 4.0.0-M1, released 2025-03-09.

Does org.assertj:assertj-core have known vulnerabilities?

Yes. org.assertj:assertj-core has 1 known vulnerabilities. See depscope.dev/pkg/maven/org.assertj:assertj-core for details.

Is org.assertj:assertj-core deprecated?

No, org.assertj:assertj-core is actively maintained. Latest release: 4.0.0-M1 (2025-03-09).

What are alternatives to org.assertj:assertj-core?

DepScope has no curated alternatives for org.assertj:assertj-core at this time.

What license does org.assertj:assertj-core use?

org.assertj:assertj-core is licensed under Apache-2.0.

org.assertj:assertj-core

mavenv4.0.0-M1

Rich and fluent assertions for testing in Java

License Apache-2.0permissive78 versions0 deps

assertj/assertj/assertj-parent/assertj-core

/ 100

Health

update required

org.assertj:[email protected] has vulnerabilities — update to latest

Update to >= 3.27.7 to fix known vulnerabilities

1 high severity vulnerabilities

Health breakdown0 – 100

5/25

maintenance

0/20

popularity

20/25

security

15/15

maturity

0/15

community

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2026-24400	AssertJ has XML External Entity (XXE) vulnerability when parsing untrusted XML via isXmlEqualTo assertion	3.27.7

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/maven/org.assertj:assertj-core

Last updated · 2025-03-09T23:18:11.256000+00:00