Home Original page

Fix: Populate vulnerability_id field in BlackDuck Binary Analysis parser by valentijnscholten · Pull Request #13973 · DefectDojo/django-DefectDojo

added 2 commits

December 23, 2025 08:42
- Add exception handling around CPE parsing in TenableCSVParser
- Log unsupported CPE versions at DEBUG level instead of crashing
- Allows import to continue when encountering unsupported CPE formats
- Fixes issue DefectDojo#11243
- Add unsaved_vulnerability_ids assignment when CVE is present
- This ensures the vulnerability_id field is populated for de-duplication
- Fixes DefectDojo#12442

@valentijnscholten 

…nalysis parser tests

- Verify unsaved_vulnerability_ids is populated with CVE value
- Add specific assertion for single vuln test case
- Add general assertion for multiple vulns test case
- Related to DefectDojo#12442

mtesauro

Maffooch

blakeaowens

Maffooch pushed a commit to valentijnscholten/django-DefectDojo that referenced this pull request

Feb 16, 2026 
…ser (DefectDojo#13973)

* Fix Tenable CSV import fails with 'Version of CPE not implemented'

- Add exception handling around CPE parsing in TenableCSVParser
- Log unsupported CPE versions at DEBUG level instead of crashing
- Allows import to continue when encountering unsupported CPE formats
- Fixes issue DefectDojo#11243

* Fix: Populate vulnerability_id field in BlackDuck Binary Analysis parser

- Add unsaved_vulnerability_ids assignment when CVE is present
- This ensures the vulnerability_id field is populated for de-duplication
- Fixes DefectDojo#12442

* Test: Add assertions for vulnerability_id field in BlackDuck Binary Analysis parser tests

- Verify unsaved_vulnerability_ids is populated with CVE value
- Add specific assertion for single vuln test case
- Add general assertion for multiple vulns test case
- Related to DefectDojo#12442