dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/NvdCveAnalyzer.java
/**
     * Analyzes a dependency and attempts to determine if there are any CPE
     * identifiers for this dependency.
     *
     * @param dependency The Dependency to analyze
     * @param engine The analysis engine
     * @throws AnalysisException thrown if there is an issue analyzing the
     * dependency
     */
Analyzes a dependency and attempts to determine if there are any CPE
identifiers for this dependency.

@param dependency The Dependency to analyze
@param engine The analysis engine
@throws AnalysisException thrown if there is an issue analyzing the
dependency
Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency . @param dependency The Dependency to analyze @param engine The analysis engine @throws AnalysisException thrown if there is an issue analyzing the dependency
@Override
    protected void analyzeDependency(Dependency dependency, Engine engine) throws AnalysisException {
        for (Identifier id : dependency.getIdentifiers()) {
            if ("cpe".equals(id.getType())) {
                try {
                    final String value = id.getValue();
                    final List<Vulnerability> vulns = cveDB.getVulnerabilities(value);
                    dependency.getVulnerabilities().addAll(vulns);
                } catch (DatabaseException ex) {
                    throw new AnalysisException(ex);
                }
            }
        }
        for (Identifier id : dependency.getSuppressedIdentifiers()) {
            if ("cpe".equals(id.getType())) {
                try {
                    final String value = id.getValue();
                    final List<Vulnerability> vulns = cveDB.getVulnerabilities(value);
                    dependency.getSuppressedVulnerabilities().addAll(vulns);
                } catch (DatabaseException ex) {
                    throw new AnalysisException(ex);
                }
            }
        }
    }
@ Override protected void analyzeDependency ( Dependency dependency , Engine engine ) throws AnalysisException { for ( Identifier id : dependency . getIdentifiers ( ) ) { if ( "cpe" . equals ( id . getType ( ) ) ) { try { final String value = id . getValue ( ) ; final List < Vulnerability > vulns = cveDB . getVulnerabilities ( value ) ; dependency . getVulnerabilities ( ) . addAll ( vulns ) ; } catch ( DatabaseException ex ) { throw new AnalysisException ( ex ) ; } } } for ( Identifier id : dependency . getSuppressedIdentifiers ( ) ) { if ( "cpe" . equals ( id . getType ( ) ) ) { try { final String value = id . getValue ( ) ; final List < Vulnerability > vulns = cveDB . getVulnerabilities ( value ) ; dependency . getSuppressedVulnerabilities ( ) . addAll ( vulns ) ; } catch ( DatabaseException ex ) { throw new AnalysisException ( ex ) ; } } } }
Analyzes a dependency and attempts to determine if there are any CPE
 identifiers for this dependency.
Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency .