DependencyCheck
DependencyCheck copied to clipboard
InvalidFormatException: Cannot deserialize value of type java.util.Date
trafficstars
The Maven dependency check plugin is KO in our CI/CD pipeline due to the file https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json which has a malformed attribute "dateReleased": "2023-12-05T16:19:27..559Z"
Can also reproduce. Think the tool possibly needs to be updated to ignore invalid dates if at all possible to avoid this breaking builds immediately, although the database also needs fixing regardless.
@ascopes indeed.
The issue is fixed from the json file provider, but the plugin should be updated to bypass this parsing error if it will be once again reproduced.