See
<https://ci-builds.apache.org/job/PDFBox/job/PDFBox%20JBig2%20ImageIO%20Plugin/61/display/redirect>
Changes:
------------------------------------------
[...truncated 19.54 KiB...]
at hudson.remoting.Request$2.run (Request.java:391)
at hudson.remoting.InterceptingExecutorService.lambda$wrap$0
(InterceptingExecutorService.java:81)
at java.util.concurrent.FutureTask.run (FutureTask.java:264)
at java.util.concurrent.ThreadPoolExecutor.runWorker
(ThreadPoolExecutor.java:1136)
at java.util.concurrent.ThreadPoolExecutor$Worker.run
(ThreadPoolExecutor.java:635)
at java.lang.Thread.run (Thread.java:840)
Caused by: io.github.jeremylong.openvulnerability.client.nvd.NvdApiException:
Failed to parse NVD data
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next
(NvdCveClient.java:363)
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next
(NvdCveClient.java:331)
at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi
(NvdApiDataSource.java:352)
at org.owasp.dependencycheck.data.update.NvdApiDataSource.update
(NvdApiDataSource.java:116)
at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:906)
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase
(Engine.java:711)
at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:637)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck
(BaseDependencyCheckMojo.java:1967)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute
(BaseDependencyCheckMojo.java:1150)
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo
(DefaultBuildPluginManager.java:126)
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2
(MojoExecutor.java:328)
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute
(MojoExecutor.java:316)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute
(MojoExecutor.java:212)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute
(MojoExecutor.java:174)
at org.apache.maven.lifecycle.internal.MojoExecutor.access$000
(MojoExecutor.java:75)
at org.apache.maven.lifecycle.internal.MojoExecutor$1.run
(MojoExecutor.java:162)
at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute
(DefaultMojosExecutionStrategy.java:39)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute
(MojoExecutor.java:159)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject
(LifecycleModuleBuilder.java:105)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject
(LifecycleModuleBuilder.java:73)
at
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build
(SingleThreadedBuilder.java:53)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute
(LifecycleStarter.java:118)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
at org.jvnet.hudson.maven3.launcher.Maven35Launcher.main
(Maven35Launcher.java:138)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke
(NativeMethodAccessorImpl.java:77)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:569)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced
(Launcher.java:255)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch
(Launcher.java:201)
at jenkins.maven3.agent.Maven35Main.launch (Maven35Main.java:179)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke
(NativeMethodAccessorImpl.java:77)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:569)
at hudson.maven.Maven3Builder.call (Maven3Builder.java:140)
at hudson.maven.Maven3Builder.call (Maven3Builder.java:71)
at hudson.remoting.UserRequest.perform (UserRequest.java:225)
at hudson.remoting.UserRequest.perform (UserRequest.java:50)
at hudson.remoting.Request$2.run (Request.java:391)
at hudson.remoting.InterceptingExecutorService.lambda$wrap$0
(InterceptingExecutorService.java:81)
at java.util.concurrent.FutureTask.run (FutureTask.java:264)
at java.util.concurrent.ThreadPoolExecutor.runWorker
(ThreadPoolExecutor.java:1136)
at java.util.concurrent.ThreadPoolExecutor$Worker.run
(ThreadPoolExecutor.java:635)
at java.lang.Thread.run (Thread.java:840)
Caused by: com.fasterxml.jackson.databind.exc.ValueInstantiationException:
Cannot construct instance of
`io.github.jeremylong.openvulnerability.client.nvd.CvssV4Data$ModifiedCiaType`,
problem: SAFETY
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION`
disabled); line: 1, column: 3827272] (through reference chain:
io.github.jeremylong.openvulnerability.client.nvd.CveApiJson20["vulnerabilities"]->java.util.ArrayList[1471]->io.github.jeremylong.openvulnerability.client.nvd.DefCveItem["cve"]->io.github.jeremylong.openvulnerability.client.nvd.CveItem["metrics"]->io.github.jeremylong.openvulnerability.client.nvd.Metrics["cvssMetricV40"]->java.util.ArrayList[0]->io.github.jeremylong.openvulnerability.client.nvd.CvssV4["cvssData"]->io.github.jeremylong.openvulnerability.client.nvd.CvssV4Data["modifiedSubIntegrityImpact"])
at com.fasterxml.jackson.databind.exc.ValueInstantiationException.from
(ValueInstantiationException.java:47)
at
com.fasterxml.jackson.databind.DeserializationContext.instantiationException
(DeserializationContext.java:2014)
at
com.fasterxml.jackson.databind.DeserializationContext.handleInstantiationProblem
(DeserializationContext.java:1426)
at
com.fasterxml.jackson.databind.deser.std.FactoryBasedEnumDeserializer.deserialize
(FactoryBasedEnumDeserializer.java:205)
at
com.fasterxml.jackson.databind.deser.impl.FieldProperty.deserializeAndSet
(FieldProperty.java:138)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.vanillaDeserialize
(BeanDeserializer.java:310)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
(BeanDeserializer.java:177)
at
com.fasterxml.jackson.databind.deser.impl.FieldProperty.deserializeAndSet
(FieldProperty.java:138)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.vanillaDeserialize
(BeanDeserializer.java:310)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
(BeanDeserializer.java:177)
at
com.fasterxml.jackson.databind.deser.std.CollectionDeserializer._deserializeFromArray
(CollectionDeserializer.java:361)
at
com.fasterxml.jackson.databind.deser.std.CollectionDeserializer.deserialize
(CollectionDeserializer.java:246)
at
com.fasterxml.jackson.databind.deser.std.CollectionDeserializer.deserialize
(CollectionDeserializer.java:30)
at
com.fasterxml.jackson.databind.deser.impl.FieldProperty.deserializeAndSet
(FieldProperty.java:138)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.vanillaDeserialize
(BeanDeserializer.java:310)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
(BeanDeserializer.java:177)
at
com.fasterxml.jackson.databind.deser.impl.FieldProperty.deserializeAndSet
(FieldProperty.java:138)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.vanillaDeserialize
(BeanDeserializer.java:310)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
(BeanDeserializer.java:177)
at
com.fasterxml.jackson.databind.deser.impl.FieldProperty.deserializeAndSet
(FieldProperty.java:138)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.vanillaDeserialize
(BeanDeserializer.java:310)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
(BeanDeserializer.java:177)
at
com.fasterxml.jackson.databind.deser.std.CollectionDeserializer._deserializeFromArray
(CollectionDeserializer.java:361)
at
com.fasterxml.jackson.databind.deser.std.CollectionDeserializer.deserialize
(CollectionDeserializer.java:246)
at
com.fasterxml.jackson.databind.deser.std.CollectionDeserializer.deserialize
(CollectionDeserializer.java:30)
at
com.fasterxml.jackson.databind.deser.impl.FieldProperty.deserializeAndSet
(FieldProperty.java:138)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.vanillaDeserialize
(BeanDeserializer.java:310)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
(BeanDeserializer.java:177)
at
com.fasterxml.jackson.databind.deser.DefaultDeserializationContext.readRootValue
(DefaultDeserializationContext.java:342)
at com.fasterxml.jackson.databind.ObjectMapper._readMapAndClose
(ObjectMapper.java:4905)
at com.fasterxml.jackson.databind.ObjectMapper.readValue
(ObjectMapper.java:3848)
at com.fasterxml.jackson.databind.ObjectMapper.readValue
(ObjectMapper.java:3816)
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next
(NvdCveClient.java:358)
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next
(NvdCveClient.java:331)
at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi
(NvdApiDataSource.java:352)
at org.owasp.dependencycheck.data.update.NvdApiDataSource.update
(NvdApiDataSource.java:116)
at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:906)
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase
(Engine.java:711)
at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:637)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck
(BaseDependencyCheckMojo.java:1967)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute
(BaseDependencyCheckMojo.java:1150)
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo
(DefaultBuildPluginManager.java:126)
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2
(MojoExecutor.java:328)
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute
(MojoExecutor.java:316)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute
(MojoExecutor.java:212)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute
(MojoExecutor.java:174)
at org.apache.maven.lifecycle.internal.MojoExecutor.access$000
(MojoExecutor.java:75)
at org.apache.maven.lifecycle.internal.MojoExecutor$1.run
(MojoExecutor.java:162)
at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute
(DefaultMojosExecutionStrategy.java:39)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute
(MojoExecutor.java:159)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject
(LifecycleModuleBuilder.java:105)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject
(LifecycleModuleBuilder.java:73)
at
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build
(SingleThreadedBuilder.java:53)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute
(LifecycleStarter.java:118)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
at org.jvnet.hudson.maven3.launcher.Maven35Launcher.main
(Maven35Launcher.java:138)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke
(NativeMethodAccessorImpl.java:77)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:569)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced
(Launcher.java:255)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch
(Launcher.java:201)
at jenkins.maven3.agent.Maven35Main.launch (Maven35Main.java:179)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke
(NativeMethodAccessorImpl.java:77)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:569)
at hudson.maven.Maven3Builder.call (Maven3Builder.java:140)
at hudson.maven.Maven3Builder.call (Maven3Builder.java:71)
at hudson.remoting.UserRequest.perform (UserRequest.java:225)
at hudson.remoting.UserRequest.perform (UserRequest.java:50)
at hudson.remoting.Request$2.run (Request.java:391)
at hudson.remoting.InterceptingExecutorService.lambda$wrap$0
(InterceptingExecutorService.java:81)
at java.util.concurrent.FutureTask.run (FutureTask.java:264)
at java.util.concurrent.ThreadPoolExecutor.runWorker
(ThreadPoolExecutor.java:1136)
at java.util.concurrent.ThreadPoolExecutor$Worker.run
(ThreadPoolExecutor.java:635)
at java.lang.Thread.run (Thread.java:840)
Caused by: java.lang.IllegalArgumentException: SAFETY
at
io.github.jeremylong.openvulnerability.client.nvd.CvssV4Data$ModifiedCiaType.fromValue
(CvssV4Data.java:1224)
at jdk.internal.reflect.GeneratedMethodAccessor188.invoke (Unknown Source)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:569)
at com.fasterxml.jackson.databind.introspect.AnnotatedMethod.callOnWith
(AnnotatedMethod.java:118)
at
com.fasterxml.jackson.databind.deser.std.FactoryBasedEnumDeserializer.deserialize
(FactoryBasedEnumDeserializer.java:194)
at
com.fasterxml.jackson.databind.deser.impl.FieldProperty.deserializeAndSet
(FieldProperty.java:138)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.vanillaDeserialize
(BeanDeserializer.java:310)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
(BeanDeserializer.java:177)
at
com.fasterxml.jackson.databind.deser.impl.FieldProperty.deserializeAndSet
(FieldProperty.java:138)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.vanillaDeserialize
(BeanDeserializer.java:310)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
(BeanDeserializer.java:177)
at
com.fasterxml.jackson.databind.deser.std.CollectionDeserializer._deserializeFromArray
(CollectionDeserializer.java:361)
at
com.fasterxml.jackson.databind.deser.std.CollectionDeserializer.deserialize
(CollectionDeserializer.java:246)
at
com.fasterxml.jackson.databind.deser.std.CollectionDeserializer.deserialize
(CollectionDeserializer.java:30)
at
com.fasterxml.jackson.databind.deser.impl.FieldProperty.deserializeAndSet
(FieldProperty.java:138)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.vanillaDeserialize
(BeanDeserializer.java:310)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
(BeanDeserializer.java:177)
at
com.fasterxml.jackson.databind.deser.impl.FieldProperty.deserializeAndSet
(FieldProperty.java:138)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.vanillaDeserialize
(BeanDeserializer.java:310)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
(BeanDeserializer.java:177)
at
com.fasterxml.jackson.databind.deser.impl.FieldProperty.deserializeAndSet
(FieldProperty.java:138)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.vanillaDeserialize
(BeanDeserializer.java:310)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
(BeanDeserializer.java:177)
at
com.fasterxml.jackson.databind.deser.std.CollectionDeserializer._deserializeFromArray
(CollectionDeserializer.java:361)
at
com.fasterxml.jackson.databind.deser.std.CollectionDeserializer.deserialize
(CollectionDeserializer.java:246)
at
com.fasterxml.jackson.databind.deser.std.CollectionDeserializer.deserialize
(CollectionDeserializer.java:30)
at
com.fasterxml.jackson.databind.deser.impl.FieldProperty.deserializeAndSet
(FieldProperty.java:138)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.vanillaDeserialize
(BeanDeserializer.java:310)
at com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize
(BeanDeserializer.java:177)
at
com.fasterxml.jackson.databind.deser.DefaultDeserializationContext.readRootValue
(DefaultDeserializationContext.java:342)
at com.fasterxml.jackson.databind.ObjectMapper._readMapAndClose
(ObjectMapper.java:4905)
at com.fasterxml.jackson.databind.ObjectMapper.readValue
(ObjectMapper.java:3848)
at com.fasterxml.jackson.databind.ObjectMapper.readValue
(ObjectMapper.java:3816)
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next
(NvdCveClient.java:358)
at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next
(NvdCveClient.java:331)
at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi
(NvdApiDataSource.java:352)
at org.owasp.dependencycheck.data.update.NvdApiDataSource.update
(NvdApiDataSource.java:116)
at org.owasp.dependencycheck.Engine.doUpdates (Engine.java:906)
at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase
(Engine.java:711)
at org.owasp.dependencycheck.Engine.analyzeDependencies (Engine.java:637)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.runCheck
(BaseDependencyCheckMojo.java:1967)
at org.owasp.dependencycheck.maven.BaseDependencyCheckMojo.execute
(BaseDependencyCheckMojo.java:1150)
at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo
(DefaultBuildPluginManager.java:126)
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2
(MojoExecutor.java:328)
at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute
(MojoExecutor.java:316)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute
(MojoExecutor.java:212)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute
(MojoExecutor.java:174)
at org.apache.maven.lifecycle.internal.MojoExecutor.access$000
(MojoExecutor.java:75)
at org.apache.maven.lifecycle.internal.MojoExecutor$1.run
(MojoExecutor.java:162)
at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute
(DefaultMojosExecutionStrategy.java:39)
at org.apache.maven.lifecycle.internal.MojoExecutor.execute
(MojoExecutor.java:159)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject
(LifecycleModuleBuilder.java:105)
at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject
(LifecycleModuleBuilder.java:73)
at
org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build
(SingleThreadedBuilder.java:53)
at org.apache.maven.lifecycle.internal.LifecycleStarter.execute
(LifecycleStarter.java:118)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:261)
at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:173)
at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:101)
at org.jvnet.hudson.maven3.launcher.Maven35Launcher.main
(Maven35Launcher.java:138)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke
(NativeMethodAccessorImpl.java:77)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:569)
at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced
(Launcher.java:255)
at org.codehaus.plexus.classworlds.launcher.Launcher.launch
(Launcher.java:201)
at jenkins.maven3.agent.Maven35Main.launch (Maven35Main.java:179)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke
(NativeMethodAccessorImpl.java:77)
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke (Method.java:569)
at hudson.maven.Maven3Builder.call (Maven3Builder.java:140)
at hudson.maven.Maven3Builder.call (Maven3Builder.java:71)
at hudson.remoting.UserRequest.perform (UserRequest.java:225)
at hudson.remoting.UserRequest.perform (UserRequest.java:50)
at hudson.remoting.Request$2.run (Request.java:391)
at hudson.remoting.InterceptingExecutorService.lambda$wrap$0
(InterceptingExecutorService.java:81)
at java.util.concurrent.FutureTask.run (FutureTask.java:264)
at java.util.concurrent.ThreadPoolExecutor.runWorker
(ThreadPoolExecutor.java:1136)
at java.util.concurrent.ThreadPoolExecutor$Worker.run
(ThreadPoolExecutor.java:635)
at java.lang.Thread.run (Thread.java:840)
[INFO] Updating CISA Known Exploited Vulnerability list:
https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
[INFO] Begin database defrag
[INFO] End database defrag (8693 ms)
[WARNING] Unable to update 1 or more Cached Web DataSource, using local data
instead. Results may not include recent vulnerabilities.
[ERROR] Unable to continue dependency-check analysis.
[WARNING] Attempt to (de-)serialize anonymous class
org.jfrog.hudson.maven2.MavenDependenciesRecorder$1; see:
https://jenkins.io/redirect/serialization-of-anonymous-classes/
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 25:12 min
[INFO] Finished at: 2025-05-23T03:29:49Z
[INFO] ------------------------------------------------------------------------
Waiting for Jenkins to finish collecting data
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:10.0.4:check
(default) on project jbig2-imageio: Fatal exception(s) analyzing PDFBox JBIG2
ImageIO plugin: One or more exceptions occurred during analysis:
[ERROR] UpdateException: Error updating the NVD Data
[ERROR] caused by NvdApiException: Failed to parse NVD data
[ERROR] caused by ValueInstantiationException: Cannot construct instance of
`io.github.jeremylong.openvulnerability.client.nvd.CvssV4Data$ModifiedCiaType`,
problem: SAFETY
[ERROR] at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION`
disabled); line: 1, column: 3827272] (through reference chain:
io.github.jeremylong.openvulnerability.client.nvd.CveApiJson20["vulnerabilities"]->java.util.ArrayList[1471]->io.github.jeremylong.openvulnerability.client.nvd.DefCveItem["cve"]->io.github.jeremylong.openvulnerability.client.nvd.CveItem["metrics"]->io.github.jeremylong.openvulnerability.client.nvd.Metrics["cvssMetricV40"]->java.util.ArrayList[0]->io.github.jeremylong.openvulnerability.client.nvd.CvssV4["cvssData"]->io.github.jeremylong.openvulnerability.client.nvd.CvssV4Data["modifiedSubIntegrityImpact"])
[ERROR] caused by IllegalArgumentException: SAFETY
[ERROR] NoDataException: No documents exist
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e
switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please
read the following articles:
[ERROR] [Help 1]
http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[JENKINS] Archiving
<https://ci-builds.apache.org/job/PDFBox/job/PDFBox%20JBig2%20ImageIO%20Plugin/ws/pom.xml>
to
org.apache.pdfbox/jbig2-imageio/3.0.5-SNAPSHOT/jbig2-imageio-3.0.5-SNAPSHOT.pom
[JENKINS] Archiving
<https://ci-builds.apache.org/job/PDFBox/job/PDFBox%20JBig2%20ImageIO%20Plugin/ws/target/jbig2-imageio-3.0.5-SNAPSHOT.jar>
to
org.apache.pdfbox/jbig2-imageio/3.0.5-SNAPSHOT/jbig2-imageio-3.0.5-SNAPSHOT.jar
[JENKINS] Archiving
<https://ci-builds.apache.org/job/PDFBox/job/PDFBox%20JBig2%20ImageIO%20Plugin/ws/target/jbig2-imageio-3.0.5-SNAPSHOT-src.zip>
to
org.apache.pdfbox/jbig2-imageio/3.0.5-SNAPSHOT/jbig2-imageio-3.0.5-SNAPSHOT-src.zip
Sending e-mails to: dev@pdfbox.apache.org
channel stopped
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: dev-h...@pdfbox.apache.org
