DependencyTrack / DependencyTrack/dependency-track

Cannot Remove CPE from Component

Open
#1,904 0 comments 0 reactions 0 assignees View on GitHub
in triage
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior:
When I try to remove the CPE string from a component and click Update, I get an error (HTTP Bad Request [400]).

### Steps to Reproduce:
Add a CPE to a component, Update, and then try to remove it.

### Expected Behavior:
The CPE format validity check should allow empty strings.

### Environment:
- Dependency-Track Version: 3.7
- Distribution: Docker
- BOM Format & Version: N/A
- Database Server: N/A
- Browser: Chrome 104.0.5112.102

### Additional Details:
The CPE that was added to the wrong component has a vulnerability associated with it, so I'm not sure if this creates limitations on how that component can be edited.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.