Merge branch 'main' into add_me

Author: sbs2001

requirements.txt

@@ -9,9 +9,9 @@ contextlib2==0.5.5
 decorator==4.4.2
 dephell-specifier==0.2.1
 dj-database-url==0.4.2
-Django==3.0.7
+Django==3.0.13
 django-filter==2.2.0
-djangorestframework==3.11.0
+djangorestframework==3.11.2
 django-widget-tweaks==1.4.8
 drf-spectacular==0.13.0
 gunicorn==19.7.1
@@ -54,5 +54,5 @@ whitenoise==5.0.1
 zipp==0.6.0
 requests==2.23.0
 toml==0.10.2
-PyYAML==5.3.1
+PyYAML==5.4
 freezegun==1.1.0

vulnerabilities/package_managers.py

@@ -288,9 +288,12 @@ def nuget_url(pkg_name: str) -> str:
     def extract_versions(resp: dict) -> Set[str]:
         all_versions = set()
         try:
-            for entry in resp["items"][0]["items"]:
-                all_versions.add(entry["catalogEntry"]["version"])
-        # json response for YamlDotNet.Signed triggers this exception
+            for entry_group in resp["items"]:
+                for entry in entry_group["items"]:
+                    all_versions.add(entry["catalogEntry"]["version"])
+        # FIXME: json response for YamlDotNet.Signed triggers this exception.
+        # Some packages with many versions give a response of a list of endpoints.
+        # In such cases rather, we should collect data from those endpoints.
         except KeyError:
             pass