Error while collecting Maven advisories from GitLab

[keshav-space]

Incorrect Ranges overlap and identical boundaries error while collecting Maven advisories.

ERROR 2024-09-02 09:53:33.477 parse_yaml_file: affected_range is not parsable: '[3.0.0,3.1.1),(,2.3.4)' for: pkg:maven/org.apache.hive/hive-exec error: VersionRangeParseError('Ranges overlap: [3.0.0,3.1.1),(,2.3.4)')
 Traceback (most recent call last):
  File "../vulnerablecode/vulnerabilities/pipelines/gitlab_importer.py", line 249, in parse_gitlab_advisory
    affected_version_range = vrc.from_native(affected_range)
  File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 784, in from_native
    restrictions = maven.VersionRange(string).restrictions
  File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 226, in __init__
    raise VersionRangeParseError("Ranges overlap: %s" % spec)
univers.maven.VersionRangeParseError: Ranges overlap: [3.0.0,3.1.1),(,2.3.4)

ERROR 2024-09-02 09:53:34.309 parse_yaml_file: affected_range is not parsable: '[16.0,17.0),[16.0,16.0]' for: pkg:maven/org.opencms/opencms-core error: RestrictionParseError('Range cannot have identical boundaries: [16.0,16.0]')
 Traceback (most recent call last):
  File "../vulnerablecode/vulnerabilities/pipelines/gitlab_importer.py", line 249, in parse_gitlab_advisory
    affected_version_range = vrc.from_native(affected_range)
  File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/version_range.py", line 784, in from_native
    restrictions = maven.VersionRange(string).restrictions
  File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 219, in __init__
    restriction = Restriction(_spec[0 : close + 1])
  File "../vulnerablecode/venv/lib/python3.10/site-packages/univers/maven.py", line 81, in __init__
    raise RestrictionParseError("Range cannot have identical boundaries: %s" % spec)
univers.maven.RestrictionParseError: Range cannot have identical boundaries: [16.0,16.0]

• This is a bug in the universe, see Incorrect Ranges overlap and identical boundaries error while parsing maven version range univers#142