This issue has been created
 
 
XWiki Platform / cid:jira-generated-image-avatar-25f09c83-3732-4b30-9046-28f22992ef5b XWIKI-25670 Open

Cannot invoke "java.util.List.stream()" NPE warning related to Security Vulnerabilities app after starting an XWiki instance

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-cb441ea7-e414-4f50-a605-82781fc08cb1 Ilie Andriuta created this issue on 05/Nov/26 14:06
 
Summary: Cannot invoke "java.util.List.stream()" NPE warning related to Security Vulnerabilities app after starting an XWiki instance
Issue Type: cid:jira-generated-image-avatar-25f09c83-3732-4b30-9046-28f22992ef5b Bug
Affects Versions: 18.4.8
Assignee: Unassigned
Components: Extension - Security
Created: 05/Nov/26 14:06
Environment: Windows 11 Pro, Firefox 159, using an instance of XWiki 18.4.8 on MySQL 9.7, Tomcat 11
Priority: cid:jira-generated-image-static-major-f484b262-d3f8-4a29-a69b-f88f9f705023 Major
Reporter: Ilie Andriuta
Description:

Steps to reproduce

This is how I've reproduced the issue on my side:

  1. Install Security Vulnerabilities application (I've used v. 18.4.8)
  2. Install PlantUML Macro 2.4.1
  3. After the XWiki instance is scanned, observe the logs

Expected results

No warnings/ errors are displayed.

Actual results

After some time and after an instance restart, the following stacktrace is displayed in XWiki console:

2026-11-05 14:48:16,268 [pool-17-thread-9] WARN  o.x.e.s.i.ExtensionSecurityJob - Unexpected error [NullPointerException: Cannot invoke "java.util.List.stream()" because the return value of "org.xwiki.extension.security.internal.analyzer.osv.model.response.AffectObject.getRanges()" is null]