fix: attempt to fix NPE

hopefully resolves #6742
jeremylong · Jul 3, 2024 · 380675b · 380675b
1 parent 02e0440
commit 380675b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/core/src/main/java/org/owasp/dependencycheck/data/nvd/ecosystem/CveEcosystemMapper.java b/core/src/main/java/org/owasp/dependencycheck/data/nvd/ecosystem/CveEcosystemMapper.java
@@ -86,6 +86,7 @@ private boolean hasMultipleVendorProductConfigurations(DefCveItem cve) {
             final List<CpeMatch> cpeEntries = cve.getCve().getConfigurations().stream()
                     .map(Config::getNodes)
                     .flatMap(List::stream)
+                    .filter(cpe -> cpe.getCpeMatch() != null)
                     .map(Node::getCpeMatch)
                     .flatMap(List::stream)
                     .filter(match -> match.getCriteria() != null)