search

fasten-project / vulnerability-producer

Gathers, enriches and publishes vulnerability information to a Kafka topic.
https://www.fasten-project.eu/
Apache License 2.0
6 stars 3 forks source link

Breaking change introduced: cwe_ids is unexpected by Vulnerability Consumer #77

Closed MagielBruntink closed 3 years ago

MagielBruntink commented 3 years ago

https://github.com/fasten-project/vulnerability-producer/blob/80fea250ca4f10ab8ce69b4c140034435fd3655f/src/main/java/eu/fasten/vulnerabilityproducer/utils/Vulnerability.java#L40

Vulnerability Consumer produces errors like:

"err": {
      "msg": "Unrecognized field \"cwe_ids\" (class eu.fasten.analyzer.vulnerabilityconsumer.utils.Vulnerability), not marked as ignorable (19 known properties: \"patch_links\", \"patch_date\", \"cweIds\", \"references\", \"vulnerable_fasten_uris\", \"scoreCVSS2\", \"scoreCVSS3\", \"purls\", \"patches\", \"id\", \"vectorCVSS2\", \"vectorCVSS3\", \"published_date\", \"exploits\", \"first_patched_purls\", \"last_modified_date\", \"severity\", \"description\", \"vulnerable_purls\"])\n at [Source: (String)\"{\"id\":\"CVE-2019-3788\",\"purls\":[\"pkg:maven/org.cloudfoundry.identity/cloudfoundry-identity-server@3.7.3\",\"pkg:maven/org.cloudfoundry.identity/cloudfoundry-identity-server@3.10.0\",\"pkg:maven/org.cloudfoundry.identity/cloudfoundry-identity-server@3.13.0\",\"pkg:maven/org.cloudfoundry.identity/cloudfoundry-identity-server@3.20.0\",\"pkg:maven/org.cloudfoundry.identity/cloudfoundry-identity-server@4.6.1\",\"pkg:maven/org.cloudfoundry.identity/cloudfoundry-identity-server@4.7.1\",\"pkg:maven/org.cloudfoundry.\"[truncated 2583 chars]; line: 1, column: 1459] (through reference chain: eu.fasten.analyzer.vulnerabilityconsumer.utils.Vulnerability[\"cwe_ids\"])",
      "stacktrace": [
         "com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException.from(UnrecognizedPropertyException.java:61)",
         "com.fasterxml.jackson.databind.DeserializationContext.handleUnknownProperty(DeserializationContext.java:989)",
         "com.fasterxml.jackson.databind.deser.std.StdDeserializer.handleUnknownProperty(StdDeserializer.java:1965)",
         "com.fasterxml.jackson.databind.deser.BeanDeserializerBase.handleUnknownProperty(BeanDeserializerBase.java:1686)",
         "com.fasterxml.jackson.databind.deser.BeanDeserializerBase.handleUnknownVanilla(BeanDeserializerBase.java:1664)",
         "com.fasterxml.jackson.databind.deser.BeanDeserializer.vanillaDeserialize(BeanDeserializer.java:330)",
         "com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize(BeanDeserializer.java:187)",
         "com.fasterxml.jackson.databind.deser.DefaultDeserializationContext.readRootValue(DefaultDeserializationContext.java:322)",
         "com.fasterxml.jackson.databind.ObjectMapper._readMapAndClose(ObjectMapper.java:4591)",
         "com.fasterxml.jackson.databind.ObjectMapper.readValue(ObjectMapper.java:3546)",
         "com.fasterxml.jackson.databind.ObjectMapper.readValue(ObjectMapper.java:3514)",
         "eu.fasten.analyzer.vulnerabilityconsumer.VulnerabilityConsumer$VulnerabilityConsumerExtension.consume(VulnerabilityConsumer.java:86)",
         "eu.fasten.server.plugins.kafka.FastenKafkaPlugin.processRecord(FastenKafkaPlugin.java:256)",
         "eu.fasten.server.plugins.kafka.FastenKafkaPlugin.handleConsuming(FastenKafkaPlugin.java:186)",
         "eu.fasten.server.plugins.kafka.FastenKafkaPlugin.run(FastenKafkaPlugin.java:145)",
         "eu.fasten.server.plugins.kafka.FastenKafkaPlugin.start(FastenKafkaPlugin.java:163)",
         "java.base/java.util.ArrayList.forEach(Unknown Source)",
         "eu.fasten.server.FastenServer.run(FastenServer.java:206)",
         "picocli.CommandLine.executeUserObject(CommandLine.java:1919)",
         "picocli.CommandLine.access$1100(CommandLine.java:145)",
         "picocli.CommandLine$RunLast.executeUserObjectOfLastSubcommandWithSameParent(CommandLine.java:2332)",
         "picocli.CommandLine$RunLast.handle(CommandLine.java:2326)",
         "picocli.CommandLine$RunLast.handle(CommandLine.java:2291)",
         "picocli.CommandLine$AbstractParseResultHandler.execute(CommandLine.java:2159)",
         "picocli.CommandLine.execute(CommandLine.java:2058)",
         "eu.fasten.server.FastenServer.main(FastenServer.java:352)"
      ],
      "error": "UnrecognizedPropertyException"
   },