updated from_dict to return None if a package has no version range.

Signed-off-by: Jan-Niclas Struewer <j.n.struewer@gmail.com>

Author: janniclas

vulnerabilities/importer.py

@@ -214,9 +214,12 @@ def from_dict(cls, affected_pkg: dict):
             affected_pkg["affected_version_range"]
             and affected_pkg["affected_version_range"] != "None"
         ):
-            affected_version_range = VersionRange.from_string(
-                affected_pkg["affected_version_range"]
-            )
+            try:
+                affected_version_range = VersionRange.from_string(
+                    affected_pkg["affected_version_range"]
+                )
+            except:
+                return None
         fixed_version = affected_pkg["fixed_version"]
         if fixed_version and affected_version_range:
             # TODO: revisit after https://github.com/nexB/univers/issues/10
@@ -270,7 +273,7 @@ def from_dict(cls, advisory_data):
             "aliases": advisory_data["aliases"],
             "summary": advisory_data["summary"],
             "affected_packages": [
-                AffectedPackage.from_dict(pkg) for pkg in advisory_data["affected_packages"]
+                AffectedPackage.from_dict(pkg) for pkg in advisory_data["affected_packages"  if pkg is not None]
             ],
             "references": [Reference.from_dict(ref) for ref in advisory_data["references"]],
             "date_published": datetime.datetime.fromisoformat(date_published)

vulnerabilities/models.py

@@ -826,7 +826,7 @@ def to_advisory_data(self) -> AdvisoryData:
         return AdvisoryData(
             aliases=self.aliases,
             summary=self.summary,
-            affected_packages=[AffectedPackage.from_dict(pkg) for pkg in self.affected_packages],
+            affected_packages=[AffectedPackage.from_dict(pkg) for pkg in self.affected_packages if pkg is not None],
             references=[Reference.from_dict(ref) for ref in self.references],
             date_published=self.date_published,
             weaknesses=self.weaknesses,