diff --git a/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/CPEAnalyzer.java b/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/CPEAnalyzer.java index d93181abf..5acbf5206 100644 --- a/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/CPEAnalyzer.java +++ b/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/CPEAnalyzer.java @@ -160,6 +160,10 @@ public class CPEAnalyzer implements Analyzer { } } + public boolean isOpen() { + return cpe != null && cpe.isOpen(); + } + /** * Searches the data store of CPE entries, trying to identify the CPE for the given dependency based on the evidence contained * within. The dependency passed in is updated with any identified CPE values. diff --git a/dependency-check-maven/src/main/java/org/owasp/dependencycheck/maven/Engine.java b/dependency-check-maven/src/main/java/org/owasp/dependencycheck/maven/Engine.java index 01e38f413..9942adc70 100644 --- a/dependency-check-maven/src/main/java/org/owasp/dependencycheck/maven/Engine.java +++ b/dependency-check-maven/src/main/java/org/owasp/dependencycheck/maven/Engine.java @@ -118,7 +118,7 @@ public class Engine extends org.owasp.dependencycheck.Engine { protected Analyzer initializeAnalyzer(Analyzer analyzer) { if ((analyzer instanceof CPEAnalyzer)) { CPEAnalyzer cpe = getPreviouslyLoadedCPEAnalyzer(); - if (cpe != null) { + if (cpe != null && cpe.isOpen()) { return cpe; } cpe = (CPEAnalyzer) super.initializeAnalyzer(analyzer);