aboutcode-org / aboutcode-org/vulnerablecode

Error while collecting Maven advisories from GitLab

Aberta
#1,578 0 comentários 0 reações 0 responsáveis Ver no GitHub
9-next data-quality
Linguagem predominante
Python
Estrelas
702
Forks
328
Merge médio
3d 8h
PRs com merge (30d)
3

Descrição

Incorrect `Ranges overlap` and `identical boundaries` error while collecting Maven advisories.

```shell
ERROR 2024-09-02 09:53:33.477 parse_yaml_file: affected_range is not parsable: '[3.0.0,3.1.1),(,2.3.4)' for: pkg:maven/org.apache.hive/hive-exec error: VersionRangeParseError('Ranges overlap: [3.0.0,3.1.1),(,2.3.4)')
Traceback (most recent call last):
File "../vulnerablecode/vulnerabilities/pipelines/gitlab_importer.py", line 249, in parse_gitlab_advisory
affected_version_range = vrc.from_native(affected_range)
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 784, in from_native
restrictions = maven.VersionRange(string).restrictions
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 226, in __init__
raise VersionRangeParseError("Ranges overlap: %s" % spec)
univers.maven.VersionRangeParseError: Ranges overlap: [3.0.0,3.1.1),(,2.3.4)
```

```shell
ERROR 2024-09-02 09:53:34.309 parse_yaml_file: affected_range is not parsable: '[16.0,17.0),[16.0,16.0]' for: pkg:maven/org.opencms/opencms-core error: RestrictionParseError('Range cannot have identical boundaries: [16.0,16.0]')
Traceback (most recent call last):
File "../vulnerablecode/vulnerabilities/pipelines/gitlab_importer.py", line 249, in parse_gitlab_advisory
affected_version_range = vrc.from_native(affected_range)
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 784, in from_native
restrictions = maven.VersionRange(string).restrictions
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 219, in __init__
restriction = Restriction(_spec[0 : close + 1])
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 81, in __init__
raise RestrictionParseError("Range cannot have identical boundaries: %s" % spec)
univers.maven.RestrictionParseError: Range cannot have identical boundaries: [16.0,16.0]
```

- This is a bug in the universe, see https://github.com/aboutcode-org/univers/issues/142

Guia de contribuição

Nenhum guia de contribuição indexado para este repositório

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.