aboutcode-org / aboutcode-org/vulnerablecode

Error while collecting Maven advisories from GitLab

Abierto
#1,578 0 comentarios 0 reacciones 0 asignados Ver en GitHub
9-next data-quality
Lenguaje dominante
Python
Estrellas
702
Forks
328
Merge medio
3 d 8 h
PR fusionados (30 d)
3

Descripción

Incorrect `Ranges overlap` and `identical boundaries` error while collecting Maven advisories.

```shell
ERROR 2024-09-02 09:53:33.477 parse_yaml_file: affected_range is not parsable: '[3.0.0,3.1.1),(,2.3.4)' for: pkg:maven/org.apache.hive/hive-exec error: VersionRangeParseError('Ranges overlap: [3.0.0,3.1.1),(,2.3.4)')
Traceback (most recent call last):
File "../vulnerablecode/vulnerabilities/pipelines/gitlab_importer.py", line 249, in parse_gitlab_advisory
affected_version_range = vrc.from_native(affected_range)
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 784, in from_native
restrictions = maven.VersionRange(string).restrictions
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 226, in __init__
raise VersionRangeParseError("Ranges overlap: %s" % spec)
univers.maven.VersionRangeParseError: Ranges overlap: [3.0.0,3.1.1),(,2.3.4)
```

```shell
ERROR 2024-09-02 09:53:34.309 parse_yaml_file: affected_range is not parsable: '[16.0,17.0),[16.0,16.0]' for: pkg:maven/org.opencms/opencms-core error: RestrictionParseError('Range cannot have identical boundaries: [16.0,16.0]')
Traceback (most recent call last):
File "../vulnerablecode/vulnerabilities/pipelines/gitlab_importer.py", line 249, in parse_gitlab_advisory
affected_version_range = vrc.from_native(affected_range)
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 784, in from_native
restrictions = maven.VersionRange(string).restrictions
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 219, in __init__
restriction = Restriction(_spec[0 : close + 1])
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 81, in __init__
raise RestrictionParseError("Range cannot have identical boundaries: %s" % spec)
univers.maven.RestrictionParseError: Range cannot have identical boundaries: [16.0,16.0]
```

- This is a bug in the universe, see https://github.com/aboutcode-org/univers/issues/142

Guía de contribución

No hay ninguna guía de contribución indexada para este repositorio

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.