Search code examples
gradlenist

Error retrieving https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-modified.meta; received response code 404

We are getting the following error in our project, when will this URL be back?

> Task :dependencyCheckAnalyze
 Verifying dependencies for project cckm-app
 Checking for updates and analyzing dependencies for vulnerabilities
 Error retrieving https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-modified.meta; received response code 404.
 Unable to continue dependency-check analysis.
 Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
 > Task :dependencyCheckAnalyze FAILED
 FAILURE: Build failed with an exception.
Solution

  • nist have renamed this file to 1.1 in their next update:

    check this changelog

    New file's link is:

    https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.meta

    and This file was being used by Owasp-dependecy-check-gradle in our case, so we updated that to 6.0.1 version: https://jeremylong.github.io/DependencyCheck/dependency-check-gradle/index.html