Niklas

For everyone arriving here, please read this comment: https://github.com/DependencyTrack/dependency-track/discussions/4851#discussioncomment-12868941 It doesn't look like anything changed since then. The EUVD as it stands right now can not replace the NVD or...

I just saw this too during local testing, however I am unable to reproduce it again. I tried multiple times, but it does not reoccur. I suspect this is a...

Found the issue and proposed a fix to the ORM project (https://github.com/datanucleus/datanucleus-rdbms/issues/491). This is blocked until the fix is accepted and a new version is released.

Fix was accepted, now waiting for a new DataNucleus release.

Fix was released with DataNucleus 6.0.8.

This is somewhat on purpose, because the screen real estate of the popups is very small, but validation failure messages are long. Also, large BOMs with many i valid entries...

> @mr-zepol Note: This update includes some breaking changes. However, given the nature of the changes, they are unlikely to impact current usage, as no related issues have been reported...

@mr-zepol Good suggestion!

[`openssl rand 32`](https://docs.openssl.org/1.1.1/man1/rand/#synopsis) generates a secure random of 32 bytes, which is 256 bits, which in turn should satisfy the library's check. Can you double-check if your key is indeed...

I cannot reproduce this with a key generated by `openssl rand 32`: ```shell openssl rand 32 > secret.key docker run \ -v "$(pwd)/secret.key:/var/run/secrets/secret.key:ro" \ -e 'ALPINE_SECRET_KEY_PATH=/var/run/secrets/secret.key' \ -p '127.0.0.1:8080:8080' dependencytrack/bundled:4.12.0...