aboutcode-org / aboutcode-org/vulnerablecode

Error while collecting Maven advisories from GitLab

未关闭
#1,578 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
9-next data-quality
主要语言
Python
星标
702
派生
328
平均合并
3 天 8 小时
30 天内合并 PR
3

描述

Incorrect `Ranges overlap` and `identical boundaries` error while collecting Maven advisories.

```shell
ERROR 2024-09-02 09:53:33.477 parse_yaml_file: affected_range is not parsable: '[3.0.0,3.1.1),(,2.3.4)' for: pkg:maven/org.apache.hive/hive-exec error: VersionRangeParseError('Ranges overlap: [3.0.0,3.1.1),(,2.3.4)')
Traceback (most recent call last):
File "../vulnerablecode/vulnerabilities/pipelines/gitlab_importer.py", line 249, in parse_gitlab_advisory
affected_version_range = vrc.from_native(affected_range)
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 784, in from_native
restrictions = maven.VersionRange(string).restrictions
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 226, in __init__
raise VersionRangeParseError("Ranges overlap: %s" % spec)
univers.maven.VersionRangeParseError: Ranges overlap: [3.0.0,3.1.1),(,2.3.4)
```

```shell
ERROR 2024-09-02 09:53:34.309 parse_yaml_file: affected_range is not parsable: '[16.0,17.0),[16.0,16.0]' for: pkg:maven/org.opencms/opencms-core error: RestrictionParseError('Range cannot have identical boundaries: [16.0,16.0]')
Traceback (most recent call last):
File "../vulnerablecode/vulnerabilities/pipelines/gitlab_importer.py", line 249, in parse_gitlab_advisory
affected_version_range = vrc.from_native(affected_range)
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 784, in from_native
restrictions = maven.VersionRange(string).restrictions
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 219, in __init__
restriction = Restriction(_spec[0 : close + 1])
File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 81, in __init__
raise RestrictionParseError("Range cannot have identical boundaries: %s" % spec)
univers.maven.RestrictionParseError: Range cannot have identical boundaries: [16.0,16.0]
```

- This is a bug in the universe, see https://github.com/aboutcode-org/univers/issues/142

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。