error import from safetydb: Invalid version

[sify21]

I enabled the safetydb importer locally by uncommenting it. When I run that importer, an error occured:

  File "/home/sify/Source/vulnerablecode/vulnerabilities/importers/safety_db.py", line 101, in updated_advisories
    impacted_purls, resolved_purls = categorize_versions(
  File "/home/sify/Source/vulnerablecode/vulnerabilities/importers/safety_db.py", line 147, in categorize_versions
    vurl_specs.append(VersionSpecifier.from_scheme_version_spec_string("pypi", version_spec))
  File "/home/sify/Source/vulnerablecode/venv/lib64/python3.9/site-packages/univers/version_specifier.py", line 137, in from_scheme_version_spec_string
    rng = VersionRange(version_range, scheme)
  File "/home/sify/Source/vulnerablecode/venv/lib64/python3.9/site-packages/univers/version_range.py", line 42, in __init__
    self.version = version_class(self.version)
  File "/home/sify/Source/vulnerablecode/venv/lib64/python3.9/site-packages/univers/versions.py", line 68, in __init__
    self.validate(version_string)
  File "/home/sify/Source/vulnerablecode/venv/lib64/python3.9/site-packages/univers/versions.py", line 76, in validate
    raise InvalidVersion(f"Invalid version: '{version_string}'")
univers.versions.InvalidVersion: Invalid version: '0.28.3.gfm.12'
Failure to import data from safetydb. Continuing...
CommandError: 1 failed!: safetydb

[sify21]

I tried to solve this by ignore py-gfm on this line: https://github.com/nexB/vulnerablecode/blob/3388f885e220434a4c08476601ebc9853c89967a/vulnerabilities/importers/safety_db.py#L84

Then I just met other invalid versions in superset. Finally I solved it by adding

if len(cve_ids) == 0:
    continue

before https://github.com/nexB/vulnerablecode/blob/3388f885e220434a4c08476601ebc9853c89967a/vulnerabilities/importers/safety_db.py#L101
Also I noticed there are many 'PVE-...' cves in safetydb's json data, I don't know where they come from but I think they are just irrelevant.