See
<https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/145/display/redirect>
Changes:
------------------------------------------
[...truncated 1.03 MB...]
at org.owasp.dependencycheck.analyzer.RetireJsAnalyzer.analyzeDependency
(RetireJsAnalyzer.java:286)
at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.analyze
(AbstractAnalyzer.java:131)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:88)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:37)
at java.util.concurrent.FutureTask.run (FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker
(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run
(ThreadPoolExecutor.java:624)
at java.lang.Thread.run (Thread.java:748)
[WARNING] An unexpected error occurred during analysis of
'<https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/ws/core/src/main/resources/org/apache/struts2/static/inputtransferselect.js'>
(RetireJS Analyzer): Unclosed character class near index 79
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
^
[WARNING] An unexpected error occurred during analysis of
'<https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/ws/core/src/main/resources/template/xhtml/validation.js'>
(RetireJS Analyzer): Unclosed character class near index 79
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
^
[ERROR]
java.util.regex.PatternSyntaxException: Unclosed character class near index 79
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
^
at java.util.regex.Pattern.error (Pattern.java:1969)
at java.util.regex.Pattern.clazz (Pattern.java:2562)
at java.util.regex.Pattern.sequence (Pattern.java:2077)
at java.util.regex.Pattern.expr (Pattern.java:2010)
at java.util.regex.Pattern.compile (Pattern.java:1702)
at java.util.regex.Pattern.<init> (Pattern.java:1352)
at java.util.regex.Pattern.compile (Pattern.java:1028)
at com.h3xstream.retirejs.repo.VulnerabilitiesRepository.findByFileContent
(VulnerabilitiesRepository.java:117)
at com.h3xstream.retirejs.repo.ScannerFacade.scanScript
(ScannerFacade.java:125)
at org.owasp.dependencycheck.analyzer.RetireJsAnalyzer.analyzeDependency
(RetireJsAnalyzer.java:286)
at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.analyze
(AbstractAnalyzer.java:131)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:88)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:37)
at java.util.concurrent.FutureTask.run (FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker
(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run
(ThreadPoolExecutor.java:624)
at java.lang.Thread.run (Thread.java:748)
[WARNING] An unexpected error occurred during analysis of
'<https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/ws/core/src/main/resources/org/apache/struts2/static/optiontransferselect.js'>
(RetireJS Analyzer): Unclosed character class near index 79
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
^
[ERROR]
java.util.regex.PatternSyntaxException: Unclosed character class near index 79
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
^
at java.util.regex.Pattern.error (Pattern.java:1969)
at java.util.regex.Pattern.clazz (Pattern.java:2562)
at java.util.regex.Pattern.sequence (Pattern.java:2077)
at java.util.regex.Pattern.expr (Pattern.java:2010)
at java.util.regex.Pattern.compile (Pattern.java:1702)
at java.util.regex.Pattern.<init> (Pattern.java:1352)
at java.util.regex.Pattern.compile (Pattern.java:1028)
at com.h3xstream.retirejs.repo.VulnerabilitiesRepository.findByFileContent
(VulnerabilitiesRepository.java:117)
at com.h3xstream.retirejs.repo.ScannerFacade.scanScript
(ScannerFacade.java:125)
at org.owasp.dependencycheck.analyzer.RetireJsAnalyzer.analyzeDependency
(RetireJsAnalyzer.java:286)
at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.analyze
(AbstractAnalyzer.java:131)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:88)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:37)
at java.util.concurrent.FutureTask.run (FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker
(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run
(ThreadPoolExecutor.java:624)
at java.lang.Thread.run (Thread.java:748)
[ERROR]
java.util.regex.PatternSyntaxException: Unclosed character class near index 79
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
^
at java.util.regex.Pattern.error (Pattern.java:1969)
at java.util.regex.Pattern.clazz (Pattern.java:2562)
at java.util.regex.Pattern.sequence (Pattern.java:2077)
at java.util.regex.Pattern.expr (Pattern.java:2010)
at java.util.regex.Pattern.compile (Pattern.java:1702)
at java.util.regex.Pattern.<init> (Pattern.java:1352)
at java.util.regex.Pattern.compile (Pattern.java:1028)
at com.h3xstream.retirejs.repo.VulnerabilitiesRepository.findByFileContent
(VulnerabilitiesRepository.java:117)
at com.h3xstream.retirejs.repo.ScannerFacade.scanScript
(ScannerFacade.java:125)
at org.owasp.dependencycheck.analyzer.RetireJsAnalyzer.analyzeDependency
(RetireJsAnalyzer.java:286)
at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.analyze
(AbstractAnalyzer.java:131)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:88)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:37)
at java.util.concurrent.FutureTask.run (FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker
(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run
(ThreadPoolExecutor.java:624)
at java.lang.Thread.run (Thread.java:748)
[ERROR]
java.util.regex.PatternSyntaxException: Unclosed character class near index 79
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
^
at java.util.regex.Pattern.error (Pattern.java:1969)
at java.util.regex.Pattern.clazz (Pattern.java:2562)
at java.util.regex.Pattern.sequence (Pattern.java:2077)
at java.util.regex.Pattern.expr (Pattern.java:2010)
at java.util.regex.Pattern.compile (Pattern.java:1702)
at java.util.regex.Pattern.<init> (Pattern.java:1352)
at java.util.regex.Pattern.compile (Pattern.java:1028)
at com.h3xstream.retirejs.repo.VulnerabilitiesRepository.findByFileContent
(VulnerabilitiesRepository.java:117)
at com.h3xstream.retirejs.repo.ScannerFacade.scanScript
(ScannerFacade.java:125)
at org.owasp.dependencycheck.analyzer.RetireJsAnalyzer.analyzeDependency
(RetireJsAnalyzer.java:286)
at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.analyze
(AbstractAnalyzer.java:131)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:88)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:37)
at java.util.concurrent.FutureTask.run (FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker
(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run
(ThreadPoolExecutor.java:624)
at java.lang.Thread.run (Thread.java:748)
[ERROR]
java.util.regex.PatternSyntaxException: Unclosed character class near index 79
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
^
at java.util.regex.Pattern.error (Pattern.java:1969)
at java.util.regex.Pattern.clazz (Pattern.java:2562)
at java.util.regex.Pattern.sequence (Pattern.java:2077)
at java.util.regex.Pattern.expr (Pattern.java:2010)
at java.util.regex.Pattern.compile (Pattern.java:1702)
at java.util.regex.Pattern.<init> (Pattern.java:1352)
at java.util.regex.Pattern.compile (Pattern.java:1028)
at com.h3xstream.retirejs.repo.VulnerabilitiesRepository.findByFileContent
(VulnerabilitiesRepository.java:117)
at com.h3xstream.retirejs.repo.ScannerFacade.scanScript
(ScannerFacade.java:125)
at org.owasp.dependencycheck.analyzer.RetireJsAnalyzer.analyzeDependency
(RetireJsAnalyzer.java:286)
at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.analyze
(AbstractAnalyzer.java:131)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:88)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:37)
at java.util.concurrent.FutureTask.run (FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker
(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run
(ThreadPoolExecutor.java:624)
at java.lang.Thread.run (Thread.java:748)
[WARNING] An unexpected error occurred during analysis of
'<https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/ws/core/src/main/resources/org/apache/struts2/static/domTT.js'>
(RetireJS Analyzer): Unclosed character class near index 79
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
^
[ERROR]
java.util.regex.PatternSyntaxException: Unclosed character class near index 79
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
^
at java.util.regex.Pattern.error (Pattern.java:1969)
at java.util.regex.Pattern.clazz (Pattern.java:2562)
at java.util.regex.Pattern.sequence (Pattern.java:2077)
at java.util.regex.Pattern.expr (Pattern.java:2010)
at java.util.regex.Pattern.compile (Pattern.java:1702)
at java.util.regex.Pattern.<init> (Pattern.java:1352)
at java.util.regex.Pattern.compile (Pattern.java:1028)
at com.h3xstream.retirejs.repo.VulnerabilitiesRepository.findByFileContent
(VulnerabilitiesRepository.java:117)
at com.h3xstream.retirejs.repo.ScannerFacade.scanScript
(ScannerFacade.java:125)
at org.owasp.dependencycheck.analyzer.RetireJsAnalyzer.analyzeDependency
(RetireJsAnalyzer.java:286)
at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.analyze
(AbstractAnalyzer.java:131)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:88)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:37)
at java.util.concurrent.FutureTask.run (FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker
(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run
(ThreadPoolExecutor.java:624)
at java.lang.Thread.run (Thread.java:748)
[INFO] Finished RetireJS Analyzer (0 seconds)
[INFO] Finished Sonatype OSS Index Analyzer (1 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (4 seconds)
[INFO] Writing report to:
<https://ci-builds.apache.org/job/Struts/job/Struts-master-JDK8-dependency-check/ws/core/target/dependency-check-report.html>
[WARNING]
One or more dependencies were identified with known vulnerabilities in Struts 2
Core:
guava-19.0.jar (pkg:maven/com.google.guava/guava@19.0,
cpe:2.3:a:google:guava:19.0:*:*:*:*:*:*:*) : CVE-2020-8908
See the dependency-check report for more details.
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 6.1.0-SNAPSHOT:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [ 1.924 s]
[INFO] Struts 2 ........................................... SUCCESS [ 8.267 s]
[INFO] Struts 2 Core ...................................... FAILURE [01:53 min]
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Velocity Plugin ........................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin, since 6.0.0 SKIPPED
[INFO] DEPRECATED: Struts 2 GXP Plugin - since 6.0.0 ...... SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] DEPRECATED: Struts 2 Portlet Mocks Plugin - since 6.0.0 SKIPPED
[INFO] DEPRECATED: Struts 2 Portlet Plugin - since 6.0.0 .. SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] DEPRECATED: Struts 2 OSGi Plugin - since 6.0.0 ..... SKIPPED
[INFO] DEPRECATED: Struts 2 OVal Plugin, since 6.0.0 ...... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] DEPRECATED: Struts 2 Plexus Plugin - since 6.0.0 ... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] DEPRECATED: Struts 2 Portlet Tiles Plugin - since 6.0.0 SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitemesh Plugin - since 6.0.0 . SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] DEPRECATED: Struts 2 OSGi Bundles - since 6.0.0 .... SKIPPED
[INFO] DEPRECATED: Struts 2 OSGi Admin Bundle - since 6.0.0 SKIPPED
[INFO] DEPRECATED: Struts 2 OSGi Demo Bundle - since 6.0.0 SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 02:04 min
[INFO] Finished at: 2022-07-24T06:03:21Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:7.0.1:check
(default) on project struts2-core: One or more exceptions occurred during
dependency-check analysis: One or more exceptions occurred during analysis:
[ERROR] PatternSyntaxException: Unclosed character class near index 79
[ERROR]
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
[ERROR]
^
[ERROR] PatternSyntaxException: Unclosed character class near index 79
[ERROR]
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
[ERROR]
^
[ERROR] PatternSyntaxException: Unclosed character class near index 79
[ERROR]
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
[ERROR]
^
[ERROR] PatternSyntaxException: Unclosed character class near index 79
[ERROR]
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
[ERROR]
^
[ERROR] PatternSyntaxException: Unclosed character class near index 79
[ERROR]
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
[ERROR]
^
[ERROR] PatternSyntaxException: Unclosed character class near index 79
[ERROR]
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
[ERROR]
^
[ERROR] PatternSyntaxException: Unclosed character class near index 79
[ERROR]
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
[ERROR]
^
[ERROR] PatternSyntaxException: Unclosed character class near index 79
[ERROR]
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
[ERROR]
^
[ERROR] PatternSyntaxException: Unclosed character class near index 79
[ERROR]
u.version="([0-9][0-9.a-z_\\\\-]+)";u.settings=[];u.models=\{\};u.models.oSearch
[ERROR]
^
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e
switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please
read the following articles:
[ERROR] [Help 1]
http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR] mvn <args> -rf :struts2-core
Build step 'Execute shell' marked build as failure
ERROR: No tool found matching MAVEN_3_LATEST__HOME
Setting MAVEN_3_LATEST_HOME=/home/jenkins/tools/maven/latest3/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
