Fixed additional edge case for purl with single qualifier that has a key but no value

jdaigneau5 · jdaigneau5 · commit 2917ab89f5a4 · 2025-10-23T13:00:41.000-04:00
diff --git a/src/controller/cve.controller/cve.middleware.js b/src/controller/cve.controller/cve.middleware.js
@@ -225,7 +225,9 @@ function purlValidateHelper (affected) {
       if (Object.keys(purlObj.qualifiers).includes('vers')) {
         throw new Error('PURL versions are currently not supported by the CVE schema: ' + purlStr)
       }
+    }
 
+    if (parsedPurlArray[4] !== undefined) {
       // Check for qualifier with key but no value
       if ((Array.from(parsedPurlArray[4].values()).includes(''))) {
         throw new Error('Qualifier keys must have a value: ' + purlStr)

Original file line number	Diff line number	Diff line change
`@@ -225,7 +225,9 @@ function purlValidateHelper (affected) {`
`225`	`225`	`if (Object.keys(purlObj.qualifiers).includes('vers')) {`
`226`	`226`	`throw new Error('PURL versions are currently not supported by the CVE schema: ' + purlStr)`
`227`	`227`	`}`
	`228`	`+ }`
`228`	`229`
	`230`	`+ if (parsedPurlArray[4] !== undefined) {`
`229`	`231`	`// Check for qualifier with key but no value`
`230`	`232`	`if ((Array.from(parsedPurlArray[4].values()).includes(''))) {`
`231`	`233`	`throw new Error('Qualifier keys must have a value: ' + purlStr)`