fix(partial): Issue #5144 Avoid NPE on non-Include packageReference (#…

…5293)
jeremylong · Jan 13, 2023 · 6abed02 · 6abed02
2 parents bbb86c2 + 174f6e2
commit 6abed02
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/core/src/main/java/org/owasp/dependencycheck/data/nuget/XPathMSBuildProjectParser.java b/core/src/main/java/org/owasp/dependencycheck/data/nuget/XPathMSBuildProjectParser.java
@@ -69,6 +69,10 @@ public List<NugetPackageReference> parse(InputStream stream) throws MSBuildProje
                 final NamedNodeMap attrs = node.getAttributes();
 
                 final String include = attrs.getNamedItem("Include").getNodeValue();
+                if (include == null) {
+                    // Issue 5144 work-around for NPE on packageReferences other than includes
+                    continue;
+                }
                 String version = null;
 
                 if (attrs.getNamedItem("Version") != null) {