diff --git a/core/src/main/java/org/owasp/dependencycheck/data/nuget/XPathMSBuildProjectParser.java b/core/src/main/java/org/owasp/dependencycheck/data/nuget/XPathMSBuildProjectParser.java index 5e6bdf0518d..ca22f98c721 100644 --- a/core/src/main/java/org/owasp/dependencycheck/data/nuget/XPathMSBuildProjectParser.java +++ b/core/src/main/java/org/owasp/dependencycheck/data/nuget/XPathMSBuildProjectParser.java @@ -69,6 +69,10 @@ public List parse(InputStream stream) throws MSBuildProje final NamedNodeMap attrs = node.getAttributes(); final String include = attrs.getNamedItem("Include").getNodeValue(); + if (include == null) { + // Issue 5144 work-around for NPE on packageReferences other than includes + continue; + } String version = null; if (attrs.getNamedItem("Version") != null) {