diff --git a/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/CPEAnalyzer.java b/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/CPEAnalyzer.java index ba7ad0582..33f233fa1 100644 --- a/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/CPEAnalyzer.java +++ b/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/CPEAnalyzer.java @@ -444,6 +444,9 @@ public class CPEAnalyzer implements Analyzer { // //TODO - likely need to change the split... not sure if this will work for CPE with special chars + if (text == null) { + return false; + } final String[] words = text.split("[\\s_-]"); final List list = new ArrayList(); String tempWord = null;