Handle zero scores from npm

Signed-off-by: Prabhu Subramanian <[email protected]>
AppThreat · Feb 25, 2024 · 5d9b5d4 · 5d9b5d4
1 parent 9486ed9
commit 5d9b5d4
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/vdb/lib/npm.py b/vdb/lib/npm.py
@@ -198,8 +198,10 @@ def to_vuln(self, v, ret_data):
             )
             cvss = v.get("cvss")
             if cvss:
-                score = cvss.get("score")
-                vector_string = cvss.get("vectorString")
+                if cvss.get("score"):
+                    score = cvss.get("score")
+                if cvss.get("vectorString"):
+                    vector_string = cvss.get("vectorString")
             exploitability_score = score
             metadata = v.get("metadata", {})
             if isinstance(metadata, dict) and metadata.get("exploitability"):