Gradle dependencyCheckAggregate task failed

[SG-8]

Started getting this exception during gradle build in last 2-3 days only:

Invocation of method getHighestSeverityText in class org.owasp.dependencycheck.dependency.Vulnerability threw exception java.lang.NullPointerException

[jeremylong]

What version of dependency-check are you using?

[aikebah]

@jeremylong my educated guess for this happening would be a vulnerability that has only CVSSv4 scoring attached to it (or one for which NVD has associated a CPE, but no CVSS score has been associated yet).

https://github.com/jeremylong/DependencyCheck/blob/main/core/src/main/java/org/owasp/dependencycheck/dependency/Vulnerability.java#L537-L545

[jeremylong]

@aikebah good catch - I suppose it is time I put together the PR to actually use the CVSS4v data in the reports... I hate velocity... ;)

[SG-8]

@jeremylong Thank you! In which version can we expect the fix?

[jeremylong]

12.0.0. I'll release 11.2.0 this week and do more testing before we release 12.0.0.