aboutcode-org / aboutcode-org/vulnerablecode

Error while collecting Maven advisories from GitLab

Offen
#1,578 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
9-next data-quality
Vorherrschende Sprache
Python
Sterne
702
Forks
328
Ø Merge
3 T. 8 Std.
Gemergte PRs (30 T.)
3

Beschreibung

Incorrect `Ranges overlap` and `identical boundaries` error while collecting Maven advisories.

```shell
ERROR 2024-09-02 09:53:33.477 parse_yaml_file: affected_range is not parsable: '[3.0.0,3.1.1),(,2.3.4)' for: pkg:maven/org.apache.hive/hive-exec error: VersionRangeParseError('Ranges overlap: [3.0.0,3.1.1),(,2.3.4)')
Traceback (most recent call last):
File "../vulnerablecode/vulnerabilities/pipelines/gitlab_importer.py", line 249, in parse_gitlab_advisory
affected_version_range = vrc.from_native(affected_range)
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 784, in from_native
restrictions = maven.VersionRange(string).restrictions
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 226, in __init__
raise VersionRangeParseError("Ranges overlap: %s" % spec)
univers.maven.VersionRangeParseError: Ranges overlap: [3.0.0,3.1.1),(,2.3.4)
```

```shell
ERROR 2024-09-02 09:53:34.309 parse_yaml_file: affected_range is not parsable: '[16.0,17.0),[16.0,16.0]' for: pkg:maven/org.opencms/opencms-core error: RestrictionParseError('Range cannot have identical boundaries: [16.0,16.0]')
Traceback (most recent call last):
File "../vulnerablecode/vulnerabilities/pipelines/gitlab_importer.py", line 249, in parse_gitlab_advisory
affected_version_range = vrc.from_native(affected_range)
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 784, in from_native
restrictions = maven.VersionRange(string).restrictions
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 219, in __init__
restriction = Restriction(_spec[0 : close + 1])
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 81, in __init__
raise RestrictionParseError("Range cannot have identical boundaries: %s" % spec)
univers.maven.RestrictionParseError: Range cannot have identical boundaries: [16.0,16.0]
```

- This is a bug in the universe, see https://github.com/aboutcode-org/univers/issues/142

Beitragsleitfaden

Für dieses Repository ist kein Beitragsleitfaden indexiert

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.