DependencyTrack / DependencyTrack/frontend

Dependency Graph for Individual Dependency Can Lead to Infinite Recursion

Open
#1,481 5 comments 1 reaction 0 assignees View on GitHub
defect help wanted p2 size/M
Dominant language
Vue
Stars
171
Forks
250
Avg merge
10h 56m
Merged PRs (30d)
84

Description

### Current Behavior

An SBOM that contains 370 components and has 12400 lines (700 kb) is succesfully being imported to Dependency-Track v4.12.3 but then has problems with displaying the graph:

- Opening the graph via the dependency graph tab and then expanding it bit by bit seems to have no problems.
- Opening many "filtered graphs" (eg click on graph icon on components tab gives no problems for many components.
- SOME components give a perpetual "loading" message and DT is now unresponsive in that browser tab... it it necessary to close the tab.

The problem SBOM has been provided "out of channel" and the defect has been reproduced. There seems to be an infinite recursion.

### Steps to Reproduce

1. Create a new project
2. Upload SBOM
3. Navigate to Components tab and click on the tree icon for an individual component.
4. Clicking on link for some components results in "loading message" that does not go away... the graph never loads.
5. As an aide-memoire, the SBOM that was supplied has problems with viewing the graphs for `logback-classic` and `snakeyaml` (amongst others).

The SBOM was generated using `cyclonedx-gradle-plugin` v2.0.0

### Expected Behavior

The filtered graphs (graphs for specific components) should succesfully load

### Dependency-Track Version

4.13.2

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

14.17

### Browser

Google Chrome

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.