org.owasp.dependencycheck.utils.SeverityUtil.unscoredToSeveritytext(String) is null

[murat_k]

We have Sonarqube Version 8.9.1 and Gradle Version

"org.owasp:dependency-check-gradle:8.4"

I have no access neither for server nor for the Sonarqube but when I deploy my Spring Boot Application via Jenkins, it does not success the dependencyAnalyze step. I get the following error:

* What went wrong:
Execution failed for task ':dependencyCheckAnalyze'.
> Invocation of method 'getHighestSeverityText' in  class org.owasp.dependencycheck.dependency.Vulnerability threw exception java.lang.NullPointerException: Cannot invoke "String.toUpperCase()" because the return value of "org.owasp.dependencycheck.utils.SeverityUtil.unscoredToSeveritytext(String)" is null at templates/htmlReport.vsl[line 830, column 43]

I have a couple of other applications and the pipeline settings are all the same.
Do you have any idea why it doesn’t work?
Thanks.

[Colin]

Hey there.

You’re probably going to want to raise an issue with GitHub - dependency-check/DependencyCheck: OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies..