fix: [website] Ensures that the vulnerability id has been specified b…

…y the user.

website/web/api/v1/base.py

@@ -126,9 +126,17 @@ def post(self) -> Tuple[Dict[Any, Any], int]:
                 logger.warning("JSON validation failed.")
                 abort(400, "JSON validation failed.")
 
-        vuln_id = vuln["cveMetadata"]["vulnId"].lower()
+        vuln_id = vuln["cveMetadata"].get("vulnId", "").lower()
         cve_id = vuln["cveMetadata"].get("cveId", "").lower() or None
 
+        if not vuln_id:
+            abort(
+                400,
+                "You must specify a vulnerability id to the format: {}.".format(
+                    local_instance_vulnid_pattern
+                ),
+            )
+
         source = (
             vulnerabilitylookup.get_vulnerability_source(vuln_id) or local_instance_name
         )

website/web/bootstrap.py

@@ -107,7 +107,7 @@ def get_sri(directory: str, filename: str) -> str:
 
 # ##### Jinja custom filters
 
-application.jinja_env.filters['str_to_obj'] = jinja_filters.str_to_obj
+application.jinja_env.filters["str_to_obj"] = jinja_filters.str_to_obj
 application.jinja_env.filters["datetimeformat"] = jinja_filters.datetimeformat
 application.jinja_env.filters["string_to_datetime"] = jinja_filters.string_to_datetime
 application.jinja_env.filters["markdown"] = jinja_filters.to_markdown