tree 4ca7fbb2c31124eafbd167847d4cc48cac7a8c40
parent abe7a418aeab38d4023c4a54a07b59a6c4ecbaac
author Zvonimir Pavlinovic <zpavlinovic@google.com> 1616029076 -0700
committer Filippo Valsorda <valsorda@google.com> 1618323514 +0200

report: fixes a nil dereference when accessing vuln cve metadata.

Some vulnerabilities, such as GO-2020-0002.toml, do not have CVE
metadata. Accessing CVEMetadata.ID without checking if CVEMetadata is
nil can lead to a nil dereference.

Change-Id: I06a24a7d80a0e8be768af198a1b6254f15de98d3
Reviewed-on: https://team-review.git.corp.google.com/c/golang/vulndb/+/1026682
Reviewed-by: Roland Shoemaker <bracewell@google.com>