vaadin / appsec-kit

Other
1 stars 0 forks source link

AppSecUtils.getVulnDepName fails with ArrayIndexOutOfBoundsException #173

Closed dex-ds closed 4 months ago

dex-ds commented 5 months ago

because there is no validation of depName possible to split Version 3.1.0

image

dex-ds commented 4 months ago

Hey vaadin, your commercial add-on needs love! More Details => your OpenSourceVulnerabilityClient receives Affected json parts like this image Maybe here starts the trouble

tamasmak commented 4 months ago

Hey, thank you for reporting this. We are fixing the issue.

tamasmak commented 4 months ago

@dex-ds This issue has been fixed in the 3.2.1 version.