Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NVD API REQUEST ISSUE #7193

Closed
HauruShiro opened this issue Nov 26, 2024 · 6 comments
Closed

NVD API REQUEST ISSUE #7193

HauruShiro opened this issue Nov 26, 2024 · 6 comments
Labels

Comments

@HauruShiro
Copy link

Describe the bug
A clear and concise description of what the bug is.

This isn’t the first time I’ve encountered this bug; usually, I would update, and the issue would disappear.
But today, nothing seems to work...

Here’s what I’m getting:

[WARNING] NVD API request failures are occurring; retrying request for the 8th time  
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=68000: 3rd time  
[INFO] Downloaded 50,000/271,508 (18%)  

I’d like to understand the mechanism behind all this. Is it because the URL is no longer accessible?

I’m completely lost.

Version of dependency-check used
The problem occurs using version X.X.X of the ____ (cli, gradle plugin, maven plugin, etc.)

--> 10.0.3

To Reproduce

mvn org.owasp:dependency-check-maven:10.0.3:aggregate -DskipSystemScope=true -DassemblyAnalyzerEnabled=false -DnodeAuditAnalyzerEnabled=true -DnodeAnalyzerEnabled=true -DnugetconfAnalyzerEnabled=false -DnuspecAnalyzerEnabled=false -Dformat=XML -DfailOnError=false -DnvdApiKey=APIKEY

@HauruShiro HauruShiro added the bug label Nov 26, 2024
@h4ckerfr0st
Copy link

I am having the same problem in my side, I generated new keys and did not work

[WARN] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=104000 : 3 time
[WARN] NVD API request failures are occurring; retrying request for the 9 time
[WARN] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=94000 : 3 time
[WARN] NVD API request failures are occurring; retrying request for the 5 time
[WARN] NVD API request failures are occurring; retrying request for the 5 time
[WARN] NVD API request failures are occurring; retrying request for the 5 time
[WARN] NVD API request failures are occurring; retrying request for the 6 time
[WARN] NVD API request failures are occurring; retrying request for the 5 time

@ivopogace
Copy link

Same
Retrying request /rest/json/cves/2.0?lastModStartDate=xxxxxxxx&lastModEndDate=xxxxxxx&resultsPerPage=2000&startIndex=2000 : 3 time
NVD API request failures are occurring; retrying request for the 5 time
NVD API request failures are occurring; retrying request for the 6 time
NVD API request failures are occurring; retrying request for the 5 time

Version: 11.1.0

@h4ckerfr0st
Copy link

h4ckerfr0st commented Nov 26, 2024

Apparently there was similarities in the issue reported above here:
#6758

The only fix was to use local database that you might previously had used --noupdate option in the cli so it uses its local cache

 - dependency-check --disableNodeAudit --disablePnpmAudit  --noupdate  --scan . --disableAssembly --enableExperimental -s . -o build --format XML --project "$PROJECT_ID" --exclude ".git/**" --exclude ".venv/**" --exclude "**/__pycache__/**" --exclude ".tox/**" --nvdApiKey "*******************"

unlike my case where my runners are dynamic no space to run local db

[UPDATE]

https://www.nist.gov/itl/nvd

Screenshot from 2024-11-26 10-56-52

@HauruShiro
Copy link
Author

@h4ckerfr0st

Thanks for your reply! The goal wasn’t to use a local database, but it might be a fix.
I think I’ll use a local database in the future to avoid this kind of issue.

and thx for the UPDATE BTW

@h4ckerfr0st
Copy link

No problem, thanks for letting me know.

@nhumblot
Copy link
Collaborator

Duplicate of #7178, closing.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Dec 27, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

4 participants