-
Bug
-
Resolution: Unresolved
-
Blocker
-
None
Hello,
Since my last update of the dependency-check cli, i can't update the NVD database.
09:43:46,611 |-INFO in ch.qos.logback.classic.LoggerContext[dependency-check] - Could NOT find resource [logback-test.xml] 09:43:46,612 |-INFO in ch.qos.logback.classic.LoggerContext[dependency-check] - Found resource [logback.xml] at [jar:file:/var/lib/jenkins/tools/org.jenkinsci.plugins.DependencyCheck.tools.DependencyCheckInstallation/OWASP_Dependency_Check/lib/dependency-check-cli-11.1.0.jar!/logback.xml] 09:43:46,612 |-WARN in ch.qos.logback.classic.LoggerContext[dependency-check] - Resource [logback.xml] occurs multiple times on the classpath. 09:43:46,612 |-WARN in ch.qos.logback.classic.LoggerContext[dependency-check] - Resource [logback.xml] occurs at [jar:file:/var/lib/jenkins/tools/org.jenkinsci.plugins.DependencyCheck.tools.DependencyCheckInstallation/OWASP_Dependency_Check/lib/dependency-check-cli-11.1.1.jar!/logback.xml] 09:43:46,612 |-WARN in ch.qos.logback.classic.LoggerContext[dependency-check] - Resource [logback.xml] occurs at [jar:file:/var/lib/jenkins/tools/org.jenkinsci.plugins.DependencyCheck.tools.DependencyCheckInstallation/OWASP_Dependency_Check/lib/dependency-check-cli-11.1.0.jar!/logback.xml] 09:43:46,621 |-INFO in ch.qos.logback.core.joran.spi.ConfigurationWatchList@49fc609f - URL [jar:file:/var/lib/jenkins/tools/org.jenkinsci.plugins.DependencyCheck.tools.DependencyCheckInstallation/OWASP_Dependency_Check/lib/dependency-check-cli-11.1.0.jar!/logback.xml] is not of type file 09:43:46,667 |-INFO in ch.qos.logback.classic.joran.action.ConfigurationAction - debug attribute not set 09:43:46,670 |-INFO in ch.qos.logback.classic.joran.action.ContextNameAction - Setting logger context name as [dependency-check] 09:43:46,670 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - About to instantiate appender of type [ch.qos.logback.core.ConsoleAppender] 09:43:46,672 |-INFO in ch.qos.logback.core.joran.action.AppenderAction - Naming appender as [console] 09:43:46,681 |-INFO in ch.qos.logback.core.joran.action.NestedComplexPropertyIA - Assuming default type [ch.qos.logback.classic.encoder.PatternLayoutEncoder] for [encoder] property 09:43:46,694 |-INFO in ch.qos.logback.classic.joran.action.LoggerAction - Setting level of logger [org.apache.commons.jcs] to ERROR 09:43:46,694 |-INFO in ch.qos.logback.classic.joran.action.LoggerAction - Setting level of logger [org.apache.hc] to ERROR 09:43:46,694 |-INFO in ch.qos.logback.classic.joran.action.RootLoggerAction - Setting level of ROOT logger to INFO 09:43:46,694 |-INFO in ch.qos.logback.core.joran.action.AppenderRefAction - Attaching appender named [console] to Logger[ROOT] 09:43:46,695 |-INFO in ch.qos.logback.classic.joran.action.ConfigurationAction - End of configuration. 09:43:46,695 |-INFO in ch.qos.logback.classic.joran.JoranConfigurator@cd2dae5 - Registering current configuration as safe fallback point [WARN] Explicitly loaded driver org.h2.Driver from classpath; if JDBCv4 service loading is supported by the driver you should remove the dbDriver configuration [INFO] Checking for updates [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 2 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 3 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 4 time [WARN] NVD API request failures are occurring; retrying request for the 5 time [WARN] NVD API request failures are occurring; retrying request for the 6 time [WARN] NVD API request failures are occurring; retrying request for the 7 time [WARN] NVD API request failures are occurring; retrying request for the 8 time [WARN] NVD API request failures are occurring; retrying request for the 9 time [WARN] NVD API request failures are occurring; retrying request for the 10 time [WARN] NVD API request failures are occurring; retrying request for the 11 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 2 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 3 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 4 time [WARN] NVD API request failures are occurring; retrying request for the 5 time [WARN] NVD API request failures are occurring; retrying request for the 6 time [WARN] NVD API request failures are occurring; retrying request for the 7 time [WARN] NVD API request failures are occurring; retrying request for the 8 time [WARN] NVD API request failures are occurring; retrying request for the 9 time [WARN] NVD API request failures are occurring; retrying request for the 10 time [WARN] NVD API request failures are occurring; retrying request for the 11 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 2 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 3 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 4 time [WARN] NVD API request failures are occurring; retrying request for the 5 time [WARN] NVD API request failures are occurring; retrying request for the 6 time [WARN] NVD API request failures are occurring; retrying request for the 7 time [WARN] NVD API request failures are occurring; retrying request for the 8 time [WARN] NVD API request failures are occurring; retrying request for the 9 time [WARN] NVD API request failures are occurring; retrying request for the 10 time [WARN] NVD API request failures are occurring; retrying request for the 11 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 2 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 3 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 4 time [WARN] NVD API request failures are occurring; retrying request for the 5 time [WARN] NVD API request failures are occurring; retrying request for the 6 time [WARN] NVD API request failures are occurring; retrying request for the 7 time [WARN] NVD API request failures are occurring; retrying request for the 8 time [WARN] NVD API request failures are occurring; retrying request for the 9 time [WARN] NVD API request failures are occurring; retrying request for the 10 time [WARN] NVD API request failures are occurring; retrying request for the 11 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 2 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 3 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 4 time [WARN] NVD API request failures are occurring; retrying request for the 5 time [WARN] NVD API request failures are occurring; retrying request for the 6 time [WARN] NVD API request failures are occurring; retrying request for the 7 time [WARN] NVD API request failures are occurring; retrying request for the 8 time [WARN] NVD API request failures are occurring; retrying request for the 9 time [WARN] NVD API request failures are occurring; retrying request for the 10 time [WARN] NVD API request failures are occurring; retrying request for the 11 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 2 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 3 time [WARN] Retrying request /rest/json/cves/2.0?lastModStartDate=2025-01-05T23%3A15%3A07Z&lastModEndDate=2025-05-05T23%3A15%3A07Z&resultsPerPage=2000&startIndex=0 : 4 time [WARN] NVD API request failures are occurring; retrying request for the 5 time [WARN] NVD API request failures are occurring; retrying request for the 6 time [WARN] NVD API request failures are occurring; retrying request for the 7 time [WARN] NVD API request failures are occurring; retrying request for the 8 time [WARN] NVD API request failures are occurring; retrying request for the 9 time [WARN] NVD API request failures are occurring; retrying request for the 10 time [WARN] NVD API request failures are occurring; retrying request for the 11 time [ERROR] Error updating the NVD Data org.owasp.dependencycheck.data.update.exception.UpdateException: Error updating the NVD Data at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi(NvdApiDataSource.java:397) at org.owasp.dependencycheck.data.update.NvdApiDataSource.update(NvdApiDataSource.java:117) at org.owasp.dependencycheck.Engine.doUpdates(Engine.java:906) at org.owasp.dependencycheck.Engine.initializeAndUpdateDatabase(Engine.java:711) at org.owasp.dependencycheck.Engine.analyzeDependencies(Engine.java:637) at org.owasp.dependencycheck.App.runScan(App.java:266) at org.owasp.dependencycheck.App.run(App.java:198) at org.owasp.dependencycheck.App.main(App.java:90) Caused by: io.github.jeremylong.openvulnerability.client.nvd.NvdApiRetryExceededException: NVD Update Failed: attempted to retrieve data from the NVD unsuccessfully five times. at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:336) at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:423) at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:423) at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:423) at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:423) at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:423) at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient._next(NvdCveClient.java:423) at io.github.jeremylong.openvulnerability.client.nvd.NvdCveClient.next(NvdCveClient.java:331) at org.owasp.dependencycheck.data.update.NvdApiDataSource.processApi(NvdApiDataSource.java:353) ... 7 common frames omitted
I think, it is due to proxy configuration changes and the necessary
export JAVA_TOOL_OPTIONS="-Dhttps.proxyHost=my-proxy.internal -Dhttps.proxyPort=8083"
Could you check ?
Thanks