← All tasks
javadependency-check/DependencyCheck #8424Not a task: already works

Dependency check fails with Error updating the NVD data due to Cannot deserialize value of type java.time.ZonedDateTime from String error

envgap__dependency-check__DependencyCheck-8424

01 / FAILURE SIGNATURE

As reported upstream

When running the `mvn dependency-check:aggregate` command within any repository, using version 12.2.0 or 12.2.1, I receive the following error:
Not a benchmark task.
  • The project already builds and runs before the fix, so there is nothing to repair.

02 / ENVIRONMENT RECIPE

Base commit
2f2c0ba363d2e64b1110f77d2c90a332ca8f308f
Manifest
pom.xml
Reproduce
Awaiting issue-specific recipe
Run under trace
Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

dependency-check/DependencyCheck #8424 · read the original issue
**Precondition**
- [x] I checked the issues list for existing open or closed reports of the same problem.

**Describe the bug**
When running the `mvn dependency-check:aggregate` command within any repository, using version 12.2.0 or 12.2.1, I receive the following error:

```
org.owasp.dependencycheck.data.update.exception.UpdateException: Error updating the NVD Data
```

**Version of dependency-check used**
The problem occurs using version 12.2.0 and 12.2.1 of the maven plugin.

**Log file**
When reporting errors, 99% of the time log file output is required. Please post the log file as a [gist](https://gist.github.com/) and provide a link in the new issue.
https://gist.github.com/commadelimited/1a4dcd5f0c99463fb69f102344a69544

**To Reproduce**
Steps to reproduce the behavior:
1. Visit a repository containing a pom.xml file which uses wither 12.2.0 or 12.2.1 of the maven dependency check plugin
2. Run `mvn dependency-check:aggregate`
3. Receive error

**Expected behavior**
I expect this aggregate check to complete.

**Additional context**
I was able to run this command just a few hours prior and it finished successfully.
Another coworker on a separate machine, in a different state, is also experiencing the same behavior.
Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched
[]