search

aboutcode-org / vulnerablecode

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
https://public.vulnerablecode.io
Apache License 2.0
521 stars 190 forks source link

Error log in improve run need to be investigated #682

Open pombredanne opened 2 years ago

pombredanne commented 2 years ago 
Error while fetching https://proxy.golang.org/helm.sh/helm/v3/@v/v3.0.0-beta.1.info: 410
NoneType: None
error while fetching version info for helm.sh/helm/v3/v3.0.0-beta.1 from goproxy
Error while fetching https://proxy.golang.org/helm.sh/helm/v3/@v/v3.0.0-beta.2.info: 410
NoneType: None
error while fetching version info for helm.sh/helm/v3/v3.0.0-beta.2 from goproxy
Error while fetching https://proxy.golang.org/helm.sh/helm/v3/@v/v3.0.0-alpha.2.info: 410
NoneType: None
error while fetching version info for helm.sh/helm/v3/v3.0.0-alpha.2 from goproxy
Error while fetching https://proxy.golang.org/helm.sh/helm/v3/@v/v3.0.0-beta.3.info: 410
NoneType: None
error while fetching version info for helm.sh/helm/v3/v3.0.0-beta.3 from goproxy
Error while fetching https://proxy.golang.org/helm.sh/helm/v3/@v/v3.0.0-alpha.1.info: 410
NoneType: None
error while fetching version info for helm.sh/helm/v3/v3.0.0-alpha.1 from goproxy
pombredanne commented 2 years ago 
Inconsistent summary for <Vulnerability: VULCOID-8567e659-5e4b-451f-9471-c20ad183f318>. Existing: None, provided: Cross-site Scripting i
n Django
Traceback (most recent call last):
  File "/usr/local/lib/python3.9/site-packages/urllib3/connection.py", line 174, in _new_conn
    conn = connection.create_connection(
  File "/usr/local/lib/python3.9/site-packages/urllib3/util/connection.py", line 95, in create_connection
    raise err
  File "/usr/local/lib/python3.9/site-packages/urllib3/util/connection.py", line 85, in create_connection
    sock.connect(sa)
ConnectionRefusedError: [Errno 111] Connection refused   

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/local/lib/python3.9/site-packages/urllib3/connectionpool.py", line 703, in urlopen
    httplib_response = self._make_request(
  File "/usr/local/lib/python3.9/site-packages/urllib3/connectionpool.py", line 386, in _make_request
    self._validate_conn(conn)
  File "/usr/local/lib/python3.9/site-packages/urllib3/connectionpool.py", line 1040, in _validate_conn
    conn.connect()
  File "/usr/local/lib/python3.9/site-packages/urllib3/connection.py", line 358, in connect
    self.sock = conn = self._new_conn()
  File "/usr/local/lib/python3.9/site-packages/urllib3/connection.py", line 186, in _new_conn
    raise NewConnectionError(
urllib3.exceptions.NewConnectionError: <urllib3.connection.HTTPSConnection object at 0x7fbe2cf435b0>: Failed to establish a new connection: [Errno 111] Connection refused

During handling of the above exception, another exception occurred:
Traceback (most recent call last):
  File "/usr/local/lib/python3.9/site-packages/requests/adapters.py", line 440, in send
    resp = conn.urlopen(
  File "/usr/local/lib/python3.9/site-packages/urllib3/connectionpool.py", line 785, in urlopen
    retries = retries.increment(
  File "/usr/local/lib/python3.9/site-packages/urllib3/util/retry.py", line 592, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='proxy.golang.org', port=443): Max retries exceeded with url: /golang.org/x/crypto/@v/list (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7fbe2cf435b0>: Failed to establish a new connection: [Errno 111] Connection refused'))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/app/vulnerabilities/package_managers_2.py", line 36, in get_response
    resp = requests.get(url=url)
  File "/usr/local/lib/python3.9/site-packages/requests/api.py", line 75, in get
    return request('get', url, params=params, **kwargs)  
  File "/usr/local/lib/python3.9/site-packages/requests/api.py", line 61, in request
    return session.request(method=method, url=url, **kwargs)
  File "/usr/local/lib/python3.9/site-packages/requests/sessions.py", line 529, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/local/lib/python3.9/site-packages/requests/sessions.py", line 645, in send
    r = adapter.send(request, **kwargs)
  File "/usr/local/lib/python3.9/site-packages/requests/adapters.py", line 519, in send
    raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='proxy.golang.org', port=443): Max retries exceeded with url: /golang.org/x/crypto/@v/list (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7fbe2cf435b0>: Failed to establish a new connection: [Errno 111] Connection refused'))

This may be in part related to https://nvd.nist.gov/vuln/detail/CVE-2022-22818 but I cannot fathom why we call on Go?