DependencyTrack / DependencyTrack/frontend
Dependency Graph for Individual Dependency Can Lead to Infinite Recursion
- Dominant language
- Vue
- Stars
- 171
- Forks
- 250
- Avg merge
- 10h 56m
- Merged PRs (30d)
- 84
Description
### Current Behavior
An SBOM that contains 370 components and has 12400 lines (700 kb) is succesfully being imported to Dependency-Track v4.12.3 but then has problems with displaying the graph:
- Opening the graph via the dependency graph tab and then expanding it bit by bit seems to have no problems.
- Opening many "filtered graphs" (eg click on graph icon on components tab gives no problems for many components.
- SOME components give a perpetual "loading" message and DT is now unresponsive in that browser tab... it it necessary to close the tab.
The problem SBOM has been provided "out of channel" and the defect has been reproduced. There seems to be an infinite recursion.
### Steps to Reproduce
1. Create a new project
2. Upload SBOM
3. Navigate to Components tab and click on the tree icon for an individual component.
4. Clicking on link for some components results in "loading message" that does not go away... the graph never loads.
5. As an aide-memoire, the SBOM that was supplied has problems with viewing the graphs for `logback-classic` and `snakeyaml` (amongst others).
The SBOM was generated using `cyclonedx-gradle-plugin` v2.0.0
### Expected Behavior
The filtered graphs (graphs for specific components) should succesfully load
### Dependency-Track Version
4.13.2
### Dependency-Track Distribution
Container Image
### Database Server
PostgreSQL
### Database Server Version
14.17
### Browser
Google Chrome
### Checklist
- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.