This is an automated email from the ASF dual-hosted git repository.

davsclaus pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel.git

commit 0af9ee4b87a589cff3a6f5a25e7459c5846a5985
Author: Claus Ibsen <[email protected]>
AuthorDate: Fri Jul 10 16:34:42 2026 +0200

    TUI: Skip null-version dependencies in OsvClient CVE queries
    
    BOM-managed dependencies without a resolved version were sent to OSV
    with version:null, matching every historical CVE for the artifact.
    Skip them alongside null-groupId entries to prevent false positives.
    
    Co-Authored-By: Claude Opus 4.6 <[email protected]>
    Signed-off-by: Claus Ibsen <[email protected]>
---
 .../java/org/apache/camel/dsl/jbang/core/commands/tui/OsvClient.java    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git 
a/dsl/camel-jbang/camel-jbang-plugin-tui/src/main/java/org/apache/camel/dsl/jbang/core/commands/tui/OsvClient.java
 
b/dsl/camel-jbang/camel-jbang-plugin-tui/src/main/java/org/apache/camel/dsl/jbang/core/commands/tui/OsvClient.java
index 5c9bc0fb1ba5..112e77597412 100644
--- 
a/dsl/camel-jbang/camel-jbang-plugin-tui/src/main/java/org/apache/camel/dsl/jbang/core/commands/tui/OsvClient.java
+++ 
b/dsl/camel-jbang/camel-jbang-plugin-tui/src/main/java/org/apache/camel/dsl/jbang/core/commands/tui/OsvClient.java
@@ -59,7 +59,7 @@ class OsvClient {
         List<DependencyLoader.DepEntry> uncached = new ArrayList<>();
 
         for (DependencyLoader.DepEntry entry : entries) {
-            if (entry.groupId() == null) {
+            if (entry.groupId() == null || entry.version() == null) {
                 continue;
             }
             String gav = entry.display();

Reply via email to