DependencyCheck icon indicating copy to clipboard operation
DependencyCheck copied to clipboard

InvalidFormatException: Cannot deserialize value of type java.util.Date

Open ahmedElmaghr opened this issue 1 year ago • 2 comments
trafficstars

The Maven dependency check plugin is KO in our CI/CD pipeline due to the file https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json which has a malformed attribute "dateReleased": "2023-12-05T16:19:27..559Z" image

ahmedElmaghr avatar Dec 05 '23 16:12 ahmedElmaghr

Can also reproduce. Think the tool possibly needs to be updated to ignore invalid dates if at all possible to avoid this breaking builds immediately, although the database also needs fixing regardless.

ascopes avatar Dec 05 '23 16:12 ascopes

@ascopes indeed. The issue is fixed from the json file provider, but the plugin should be updated to bypass this parsing error if it will be once again reproduced. image

ahmedElmaghr avatar Dec 05 '23 17:12 ahmedElmaghr