fix: osv version parsing

intel · Aug 16, 2023 · 0285616 · 0285616
1 parent bb758c3
commit 0285616
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/cve_bin_tool/data_sources/osv_source.py b/cve_bin_tool/data_sources/osv_source.py
@@ -319,7 +319,7 @@ def format_data(self, all_cve_entries):
                     if ranges["type"] == "SEMVER":
                         events = ranges["events"]
 
-                if events is None:
+                if events is None and "versions" in package:
                     versions = package["versions"]
 
                     if versions == []:
@@ -331,7 +331,7 @@ def format_data(self, all_cve_entries):
                     version_affected["versionEndIncluding"] = versions[-1]
 
                     affected_data.append(version_affected)
-                else:
+                elif events is not None:
                     introduced = None
                     fixed = None