{"action":"created","issue":{"url":"https://api.github.com/repos/DependencyTrack/dependency-track/issues/503","repository_url":"https://api.github.com/repos/DependencyTrack/dependency-track","labels_url":"https://api.github.com/repos/DependencyTrack/dependency-track/issues/503/labels{/name}","comments_url":"https://api.github.com/repos/DependencyTrack/dependency-track/issues/503/comments","events_url":"https://api.github.com/repos/DependencyTrack/dependency-track/issues/503/events","html_url":"https://github.com/DependencyTrack/dependency-track/issues/503","id":519373502,"node_id":"MDU6SXNzdWU1MTkzNzM1MDI=","number":503,"title":"CpeParsingException: Invalid product component: CPE Strings may not contain unquoted question marks (...) ","user":{"login":"mattimac","id":35137615,"node_id":"MDQ6VXNlcjM1MTM3NjE1","avatar_url":"https://avatars3.githubusercontent.com/u/35137615?v=4","gravatar_id":"","url":"https://api.github.com/users/mattimac","html_url":"https://github.com/mattimac","followers_url":"https://api.github.com/users/mattimac/followers","following_url":"https://api.github.com/users/mattimac/following{/other_user}","gists_url":"https://api.github.com/users/mattimac/gists{/gist_id}","starred_url":"https://api.github.com/users/mattimac/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mattimac/subscriptions","organizations_url":"https://api.github.com/users/mattimac/orgs","repos_url":"https://api.github.com/users/mattimac/repos","events_url":"https://api.github.com/users/mattimac/events{/privacy}","received_events_url":"https://api.github.com/users/mattimac/received_events","type":"User","site_admin":false},"labels":[{"id":48104494,"node_id":"MDU6TGFiZWw0ODEwNDQ5NA==","url":"https://api.github.com/repos/DependencyTrack/dependency-track/labels/duplicate","name":"duplicate","color":"cccccc","default":true,"description":null}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2019-11-07T16:26:01Z","updated_at":"2019-12-07T16:55:14Z","closed_at":"2019-11-07T16:30:43Z","author_association":"NONE","body":"```\r\n16:04:22.995 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2014.json.gz\r\n16:04:24.458 INFO [NistMirrorTask] Downloading...\r\n16:11:10.912 INFO [NistMirrorTask] Uncompressing nvdcve-1.0-2014.json.gz\r\n16:11:11.423 INFO [NvdParser] Parsing nvdcve-1.0-2014.json\r\n16:12:20.638 ERROR [NvdParser] An error occurred while parsing: cpe:2.3:a:disney:where\\'s_my_perry?_free:1.5.1:*:*:*:*:android:*:*\r\nus.springett.parsers.cpe.exceptions.CpeParsingException: Invalid product component: CPE Strings may not contain unquoted question marks except at the beginning or end of the string\r\n\tat us.springett.parsers.cpe.CpeParser.parse23(CpeParser.java:230)\r\n\tat us.springett.parsers.cpe.CpeParser.parse23(CpeParser.java:191)\r\n\tat us.springett.parsers.cpe.CpeParser.parse(CpeParser.java:55)\r\n\tat org.dependencytrack.parser.nvd.ModelConverter.convertCpe23Uri(ModelConverter.java:34)\r\n\tat org.dependencytrack.parser.nvd.ModelConverter.convertCpe23UriToVulnerableSoftware(ModelConverter.java:58)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.generateVulnerableSoftware(NvdParser.java:275)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.parseCpes(NvdParser.java:252)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.lambda$parse$0(NvdParser.java:167)\r\n\tat java.util.stream.ForEachOps$ForEachOp$OfRef.accept(ForEachOps.java:183)\r\n\tat java.util.Spliterators$ArraySpliterator.forEachRemaining(Spliterators.java:948)\r\n\tat java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:482)\r\n\tat java.util.stream.ForEachOps$ForEachTask.compute(ForEachOps.java:290)\r\n\tat java.util.concurrent.CountedCompleter.exec(CountedCompleter.java:731)\r\n\tat java.util.concurrent.ForkJoinTask.doExec(ForkJoinTask.java:289)\r\n\tat java.util.concurrent.ForkJoinPool$WorkQueue.pollAndExecCC(ForkJoinPool.java:1190)\r\n\tat java.util.concurrent.ForkJoinPool.helpComplete(ForkJoinPool.java:1879)\r\n\tat java.util.concurrent.ForkJoinPool.externalHelpComplete(ForkJoinPool.java:2467)\r\n\tat java.util.concurrent.ForkJoinTask.externalAwaitDone(ForkJoinTask.java:324)\r\n\tat java.util.concurrent.ForkJoinTask.doInvoke(ForkJoinTask.java:405)\r\n\tat java.util.concurrent.ForkJoinTask.invoke(ForkJoinTask.java:734)\r\n\tat java.util.stream.ForEachOps$ForEachOp.evaluateParallel(ForEachOps.java:159)\r\n\tat java.util.stream.ForEachOps$ForEachOp$OfRef.evaluateParallel(ForEachOps.java:173)\r\n\tat java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:233)\r\n\tat java.util.stream.ReferencePipeline.forEach(ReferencePipeline.java:485)\r\n\tat java.util.stream.ReferencePipeline$Head.forEach(ReferencePipeline.java:650)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.parse(NvdParser.java:71)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.uncompress(NistMirrorTask.java:264)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.doDownload(NistMirrorTask.java:203)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.getAllFiles(NistMirrorTask.java:117)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.inform(NistMirrorTask.java:96)\r\n\tat alpine.event.framework.BaseEventService.lambda$publish$0(BaseEventService.java:97)\r\n\tat java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)\r\n\tat java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\r\n\tat java.lang.Thread.run(Thread.java:748)\r\n16:12:20.648 ERROR [NvdParser] An error occurred while parsing: cpe:2.3:a:disney:where\\'s_my_water?_free:1.9.1:*:*:*:*:android:*:*\r\nus.springett.parsers.cpe.exceptions.CpeParsingException: Invalid product component: CPE Strings may not contain unquoted question marks except at the beginning or end of the string\r\n\tat us.springett.parsers.cpe.CpeParser.parse23(CpeParser.java:230)\r\n\tat us.springett.parsers.cpe.CpeParser.parse23(CpeParser.java:191)\r\n\tat us.springett.parsers.cpe.CpeParser.parse(CpeParser.java:55)\r\n\tat org.dependencytrack.parser.nvd.ModelConverter.convertCpe23Uri(ModelConverter.java:34)\r\n\tat org.dependencytrack.parser.nvd.ModelConverter.convertCpe23UriToVulnerableSoftware(ModelConverter.java:58)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.generateVulnerableSoftware(NvdParser.java:275)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.parseCpes(NvdParser.java:252)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.lambda$parse$0(NvdParser.java:167)\r\n\tat java.util.stream.ForEachOps$ForEachOp$OfRef.accept(ForEachOps.java:183)\r\n\tat java.util.Spliterators$ArraySpliterator.forEachRemaining(Spliterators.java:948)\r\n\tat java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:482)\r\n\tat java.util.stream.ForEachOps$ForEachTask.compute(ForEachOps.java:290)\r\n\tat java.util.concurrent.CountedCompleter.exec(CountedCompleter.java:731)\r\n\tat java.util.concurrent.ForkJoinTask.doExec(ForkJoinTask.java:289)\r\n\tat java.util.concurrent.ForkJoinPool$WorkQueue.pollAndExecCC(ForkJoinPool.java:1190)\r\n\tat java.util.concurrent.ForkJoinPool.helpComplete(ForkJoinPool.java:1879)\r\n\tat java.util.concurrent.ForkJoinPool.externalHelpComplete(ForkJoinPool.java:2467)\r\n\tat java.util.concurrent.ForkJoinTask.externalAwaitDone(ForkJoinTask.java:324)\r\n\tat java.util.concurrent.ForkJoinTask.doInvoke(ForkJoinTask.java:405)\r\n\tat java.util.concurrent.ForkJoinTask.invoke(ForkJoinTask.java:734)\r\n\tat java.util.stream.ForEachOps$ForEachOp.evaluateParallel(ForEachOps.java:159)\r\n\tat java.util.stream.ForEachOps$ForEachOp$OfRef.evaluateParallel(ForEachOps.java:173)\r\n\tat java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:233)\r\n\tat java.util.stream.ReferencePipeline.forEach(ReferencePipeline.java:485)\r\n\tat java.util.stream.ReferencePipeline$Head.forEach(ReferencePipeline.java:650)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.parse(NvdParser.java:71)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.uncompress(NistMirrorTask.java:264)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.doDownload(NistMirrorTask.java:203)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.getAllFiles(NistMirrorTask.java:117)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.inform(NistMirrorTask.java:96)\r\n\tat alpine.event.framework.BaseEventService.lambda$publish$0(BaseEventService.java:97)\r\n\tat java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)\r\n\tat java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\r\n\tat java.lang.Thread.run(Thread.java:748)\r\n16:12:25.289 ERROR [NvdParser] An error occurred while parsing: cpe:2.3:a:gratta_\\&_vinci?_project:gratta_\\&_vinci?:0.21.13167.93474:*:*:*:*:android:*:*\r\nus.springett.parsers.cpe.exceptions.CpeParsingException: Invalid vendor component: CPE Strings may not contain unquoted question marks except at the beginning or end of the string\r\n\tat us.springett.parsers.cpe.CpeParser.parse23(CpeParser.java:230)\r\n\tat us.springett.parsers.cpe.CpeParser.parse23(CpeParser.java:191)\r\n\tat us.springett.parsers.cpe.CpeParser.parse(CpeParser.java:55)\r\n\tat org.dependencytrack.parser.nvd.ModelConverter.convertCpe23Uri(ModelConverter.java:34)\r\n\tat org.dependencytrack.parser.nvd.ModelConverter.convertCpe23UriToVulnerableSoftware(ModelConverter.java:58)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.generateVulnerableSoftware(NvdParser.java:275)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.parseCpes(NvdParser.java:252)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.lambda$parse$0(NvdParser.java:167)\r\n\tat java.util.stream.ForEachOps$ForEachOp$OfRef.accept(ForEachOps.java:183)\r\n\tat java.util.Spliterators$ArraySpliterator.forEachRemaining(Spliterators.java:948)\r\n\tat java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:482)\r\n\tat java.util.stream.ForEachOps$ForEachTask.compute(ForEachOps.java:290)\r\n\tat java.util.concurrent.CountedCompleter.exec(CountedCompleter.java:731)\r\n\tat java.util.concurrent.ForkJoinTask.doExec(ForkJoinTask.java:289)\r\n\tat java.util.concurrent.ForkJoinPool$WorkQueue.pollAndExecCC(ForkJoinPool.java:1190)\r\n\tat java.util.concurrent.ForkJoinPool.helpComplete(ForkJoinPool.java:1879)\r\n\tat java.util.concurrent.ForkJoinPool.externalHelpComplete(ForkJoinPool.java:2467)\r\n\tat java.util.concurrent.ForkJoinTask.externalAwaitDone(ForkJoinTask.java:324)\r\n\tat java.util.concurrent.ForkJoinTask.doInvoke(ForkJoinTask.java:405)\r\n\tat java.util.concurrent.ForkJoinTask.invoke(ForkJoinTask.java:734)\r\n\tat java.util.stream.ForEachOps$ForEachOp.evaluateParallel(ForEachOps.java:159)\r\n\tat java.util.stream.ForEachOps$ForEachOp$OfRef.evaluateParallel(ForEachOps.java:173)\r\n\tat java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:233)\r\n\tat java.util.stream.ReferencePipeline.forEach(ReferencePipeline.java:485)\r\n\tat java.util.stream.ReferencePipeline$Head.forEach(ReferencePipeline.java:650)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.parse(NvdParser.java:71)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.uncompress(NistMirrorTask.java:264)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.doDownload(NistMirrorTask.java:203)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.getAllFiles(NistMirrorTask.java:117)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.inform(NistMirrorTask.java:96)\r\n\tat alpine.event.framework.BaseEventService.lambda$publish$0(BaseEventService.java:97)\r\n\tat java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)\r\n\tat java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\r\n\tat java.lang.Thread.run(Thread.java:748)\r\n16:12:38.373 ERROR [NvdParser] An error occurred while parsing: cpe:2.3:a:whoisit:who-is-it?_lite_name_caller_time_limited_free:1:*:*:*:*:android:*:*\r\nus.springett.parsers.cpe.exceptions.CpeParsingException: Invalid product component: CPE Strings may not contain unquoted question marks except at the beginning or end of the string\r\n\tat us.springett.parsers.cpe.CpeParser.parse23(CpeParser.java:230)\r\n\tat us.springett.parsers.cpe.CpeParser.parse23(CpeParser.java:191)\r\n\tat us.springett.parsers.cpe.CpeParser.parse(CpeParser.java:55)\r\n\tat org.dependencytrack.parser.nvd.ModelConverter.convertCpe23Uri(ModelConverter.java:34)\r\n\tat org.dependencytrack.parser.nvd.ModelConverter.convertCpe23UriToVulnerableSoftware(ModelConverter.java:58)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.generateVulnerableSoftware(NvdParser.java:275)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.parseCpes(NvdParser.java:252)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.lambda$parse$0(NvdParser.java:167)\r\n\tat java.util.stream.ForEachOps$ForEachOp$OfRef.accept(ForEachOps.java:183)\r\n\tat java.util.Spliterators$ArraySpliterator.forEachRemaining(Spliterators.java:948)\r\n\tat java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:482)\r\n\tat java.util.stream.ForEachOps$ForEachTask.compute(ForEachOps.java:290)\r\n\tat java.util.concurrent.CountedCompleter.exec(CountedCompleter.java:731)\r\n\tat java.util.concurrent.ForkJoinTask.doExec(ForkJoinTask.java:289)\r\n\tat java.util.concurrent.ForkJoinPool$WorkQueue.pollAndExecCC(ForkJoinPool.java:1190)\r\n\tat java.util.concurrent.ForkJoinPool.helpComplete(ForkJoinPool.java:1879)\r\n\tat java.util.concurrent.ForkJoinPool.externalHelpComplete(ForkJoinPool.java:2467)\r\n\tat java.util.concurrent.ForkJoinTask.externalAwaitDone(ForkJoinTask.java:324)\r\n\tat java.util.concurrent.ForkJoinTask.doInvoke(ForkJoinTask.java:405)\r\n\tat java.util.concurrent.ForkJoinTask.invoke(ForkJoinTask.java:734)\r\n\tat java.util.stream.ForEachOps$ForEachOp.evaluateParallel(ForEachOps.java:159)\r\n\tat java.util.stream.ForEachOps$ForEachOp$OfRef.evaluateParallel(ForEachOps.java:173)\r\n\tat java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:233)\r\n\tat java.util.stream.ReferencePipeline.forEach(ReferencePipeline.java:485)\r\n\tat java.util.stream.ReferencePipeline$Head.forEach(ReferencePipeline.java:650)\r\n\tat org.dependencytrack.parser.nvd.NvdParser.parse(NvdParser.java:71)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.uncompress(NistMirrorTask.java:264)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.doDownload(NistMirrorTask.java:203)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.getAllFiles(NistMirrorTask.java:117)\r\n\tat org.dependencytrack.tasks.NistMirrorTask.inform(NistMirrorTask.java:96)\r\n\tat alpine.event.framework.BaseEventService.lambda$publish$0(BaseEventService.java:97)\r\n\tat java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)\r\n\tat java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\r\n\tat java.lang.Thread.run(Thread.java:748)\r\n\r\n\r\n```"},"comment":{"url":"https://api.github.com/repos/DependencyTrack/dependency-track/issues/comments/562867711","html_url":"https://github.com/DependencyTrack/dependency-track/issues/503#issuecomment-562867711","issue_url":"https://api.github.com/repos/DependencyTrack/dependency-track/issues/503","id":562867711,"node_id":"MDEyOklzc3VlQ29tbWVudDU2Mjg2NzcxMQ==","user":{"login":"lock[bot]","id":33595554,"node_id":"MDM6Qm90MzM1OTU1NTQ=","avatar_url":"https://avatars1.githubusercontent.com/in/6672?v=4","gravatar_id":"","url":"https://api.github.com/users/lock%5Bbot%5D","html_url":"https://github.com/apps/lock","followers_url":"https://api.github.com/users/lock%5Bbot%5D/followers","following_url":"https://api.github.com/users/lock%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/lock%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/lock%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lock%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/lock%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/lock%5Bbot%5D/repos","events_url":"https://api.github.com/users/lock%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/lock%5Bbot%5D/received_events","type":"Bot","site_admin":false},"created_at":"2019-12-07T16:55:14Z","updated_at":"2019-12-07T16:55:14Z","author_association":"NONE","body":"This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs."}}
{"actor":{"display_login":"lock"}}