parse error on JVNDB-2021-001894

[bacoboy-doordash]

Seems there is something in this data that the cvedb.sh script doesn't like:

INFO[07-14|16:49:46] Already up to date
INFO[07-14|16:49:46] Fetching... https://jvndb.jvn.jp/ja/feed/checksum.txt
INFO[07-14|16:49:46] Fetched... https://jvndb.jvn.jp/ja/feed/checksum.txt
INFO[07-14|16:49:46] Newly     : https://jvndb.jvn.jp/ja/rss/years/jvndb_2021.rdf
INFO[07-14|16:49:46] Up to date: https://jvndb.jvn.jp/ja/rss/jvndb.rdf
INFO[07-14|16:49:46] Up to date: https://jvndb.jvn.jp/ja/rss/jvndb_new.rdf
INFO[07-14|16:49:46] Fetcling CVE information from JVN.
INFO[07-14|16:49:46] Fetching... https://jvndb.jvn.jp/ja/rss/years/jvndb_2021.rdf
INFO[07-14|16:49:53] Fetched... https://jvndb.jvn.jp/ja/rss/years/jvndb_2021.rdf
EROR[07-14|16:49:53] Failed to fetch JVN: Failed to convert to model. JVN: JVNDB-2021-001894, err: Failed to validate a value: component cannot contain whitespace:: nano 10gx: Parse error

While I'm sure it is a bad data issue, the script should probably just note the problem and continue with the rest

[kotakanbe]

It's fixed in the latest version of go-cve-dictionary. Update it.

INFO[07-14|21:00:28] Fetching... https://jvndb.jvn.jp/ja/feed/checksum.txt
INFO[07-14|21:00:28] Fetched... https://jvndb.jvn.jp/ja/feed/checksum.txt
INFO[07-14|21:00:28] Newly     : https://jvndb.jvn.jp/ja/rss/years/jvndb_2021.rdf
INFO[07-14|21:00:28] Up to date: https://jvndb.jvn.jp/ja/rss/jvndb.rdf
INFO[07-14|21:00:28] Up to date: https://jvndb.jvn.jp/ja/rss/jvndb_new.rdf
INFO[07-14|21:00:28] Fetching CVE information from JVN.
INFO[07-14|21:00:28] Fetching... https://jvndb.jvn.jp/ja/rss/years/jvndb_2021.rdf
INFO[07-14|21:00:29] Fetched... https://jvndb.jvn.jp/ja/rss/years/jvndb_2021.rdf
INFO[07-14|21:00:31] Failed to parse CPE URI: cpe:/o:jtekt:nano 10gx, Failed to validate a value: component cannot contain whitespace:: nano 10gx: Parse error
INFO[07-14|21:00:31] Failed to parse CPE URI: cpe:/o:jtekt:nano 2et, Failed to validate a value: component cannot contain whitespace:: nano 2et: Parse error
INFO[07-14|21:00:31] Failed to parse CPE URI: cpe:/o:jtekt:nano cpu, Failed to validate a value: component cannot contain whitespace:: nano cpu: Parse error
INFO[07-14|21:00:31] Failed to parse CPE URI: cpe:/o:jtekt:plus 2p-efr, Failed to validate a value: component cannot contain whitespace:: plus 2p\-efr: Parse error
INFO[07-14|21:00:31] Failed to parse CPE URI: cpe:/o:jtekt:plus bus-ex, Failed to validate a value: component cannot contain whitespace:: plus bus\-ex: Parse error
INFO[07-14|21:00:31] Failed to parse CPE URI: cpe:/o:jtekt:plus cpu, Failed to validate a value: component cannot contain whitespace:: plus cpu: Parse error
INFO[07-14|21:00:31] Failed to parse CPE URI: cpe:/o:jtekt:plus efr, Failed to validate a value: component cannot contain whitespace:: plus efr: Parse error
INFO[07-14|21:00:31] Failed to parse CPE URI: cpe:/o:jtekt:plus efr2, Failed to validate a value: component cannot contain whitespace:: plus efr2: Parse error
INFO[07-14|21:00:31] Failed to parse CPE URI: cpe:/o:jtekt:plus ex, Failed to validate a value: component cannot contain whitespace:: plus ex: Parse error
INFO[07-14|21:00:31] Failed to parse CPE URI: cpe:/o:jtekt:plus ex2, Failed to validate a value: component cannot contain whitespace:: plus ex2: Parse error
INFO[07-14|21:00:31] Fetched 1254 CVEs
INFO[07-14|21:00:31] Inserting JVN into DB (sqlite3).
INFO[07-14|21:00:31] Inserting fetched CVEs...
1254 / 1254 [------------------------------------------------------------------------] 100.00% 178 p/s
INFO[07-14|21:00:38] Refreshed 1252 Jvns.

https://github.com/vulsio/vulsctl/tree/master/docker If you use the docker version of vulsctl it will docker pull every time you run the script. So go-cve-dictionary, etc will be updated automatically every time. It's easy to use.

You can find instructions on this page. https://vuls.io/docs/en/install-with-vulsctl.html