Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-25670

Cannot invoke "java.util.List.stream()" NPE warning related to Security Vulnerabilities app after starting an XWiki instance

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • None
    • 18.4.8
    • Extension - Security
    • None
    • Windows 11 Pro, Firefox 159, using an instance of XWiki 18.4.8 on MySQL 9.7, Tomcat 11
    • Unknown

    Description

      Steps to reproduce

      This is how I've reproduced the issue on my side:

      1. Install Security Vulnerabilities application (I've used v. 18.4.8)
      2. Install PlantUML Macro 2.4.1
      3. After the XWiki instance is scanned, observe the logs

      Expected results

      No warnings/ errors are displayed.

      Actual results

      After some time and after an instance restart, the following stacktrace is displayed in XWiki console:

      2026-11-05 14:48:16,268 [pool-17-thread-9] WARN  o.x.e.s.i.ExtensionSecurityJob - Unexpected error [NullPointerException: Cannot invoke "java.util.List.stream()" because the return value of "org.xwiki.extension.security.internal.analyzer.osv.model.response.AffectObject.getRanges()" is null]

      Attachments

        Activity

          People

            Unassigned Unassigned
            iandriuta Ilie Andriuta
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: