diff --git a/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java b/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java index b4e179abd..67e371f62 100644 --- a/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java +++ b/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java @@ -325,8 +325,10 @@ public class JarAnalyzer extends AbstractFileTypeAnalyzer { } else { pom = PomUtils.readPom(externalPom); } - pom.processProperties(pomProperties); - foundSomething |= setPomEvidence(dependency, pom, classes); + if (pom != null) { + pom.processProperties(pomProperties); + foundSomething |= setPomEvidence(dependency, pom, classes); + } } } catch (AnalysisException ex) { LOGGER.warn("An error occurred while analyzing '{}'.", dependency.getActualFilePath());