aboutcode-org / aboutcode-org/vulnerablecode

Error while collecting Maven advisories from GitLab

Ouverte
#1,578 0 commentaires 0 réactions 0 personnes assignées Voir sur GitHub
9-next data-quality
Langage dominant
Python
Étoiles
702
Forks
328
Merge moyen
3 j 8 h
PR mergées (30 j)
3

Description

Incorrect `Ranges overlap` and `identical boundaries` error while collecting Maven advisories.

```shell
ERROR 2024-09-02 09:53:33.477 parse_yaml_file: affected_range is not parsable: '[3.0.0,3.1.1),(,2.3.4)' for: pkg:maven/org.apache.hive/hive-exec error: VersionRangeParseError('Ranges overlap: [3.0.0,3.1.1),(,2.3.4)')
Traceback (most recent call last):
File "../vulnerablecode/vulnerabilities/pipelines/gitlab_importer.py", line 249, in parse_gitlab_advisory
affected_version_range = vrc.from_native(affected_range)
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 784, in from_native
restrictions = maven.VersionRange(string).restrictions
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 226, in __init__
raise VersionRangeParseError("Ranges overlap: %s" % spec)
univers.maven.VersionRangeParseError: Ranges overlap: [3.0.0,3.1.1),(,2.3.4)
```

```shell
ERROR 2024-09-02 09:53:34.309 parse_yaml_file: affected_range is not parsable: '[16.0,17.0),[16.0,16.0]' for: pkg:maven/org.opencms/opencms-core error: RestrictionParseError('Range cannot have identical boundaries: [16.0,16.0]')
Traceback (most recent call last):
File "../vulnerablecode/vulnerabilities/pipelines/gitlab_importer.py", line 249, in parse_gitlab_advisory
affected_version_range = vrc.from_native(affected_range)
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 784, in from_native
restrictions = maven.VersionRange(string).restrictions
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 219, in __init__
restriction = Restriction(_spec[0 : close + 1])
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 81, in __init__
raise RestrictionParseError("Range cannot have identical boundaries: %s" % spec)
univers.maven.RestrictionParseError: Range cannot have identical boundaries: [16.0,16.0]
```

- This is a bug in the universe, see https://github.com/aboutcode-org/univers/issues/142

Guide de contribution

Aucun guide de contribution indexé pour ce dépôt

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.