re-use connection for last call to getVulnerability per #3408

jeremylong · Jun 10, 2021 · b5a5c73 · b5a5c73
1 parent 41bbe18
commit b5a5c73
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/core/src/main/java/org/owasp/dependencycheck/data/nvdcve/CveDB.java b/core/src/main/java/org/owasp/dependencycheck/data/nvdcve/CveDB.java
@@ -627,7 +627,7 @@ public List<Vulnerability> getVulnerabilities(Cpe cpe) throws DatabaseException
                 //remember to process the last set of CVE/CPE entries
                 final VulnerableSoftware matchedCPE = getMatchingSoftware(cpe, vulnSoftware);
                 if (matchedCPE != null) {
-                    final Vulnerability v = getVulnerability(currentCVE);
+                    final Vulnerability v = getVulnerability(currentCVE, conn);
                     if (v != null) {
                         v.setMatchedVulnerableSoftware(matchedCPE);
                         v.setSource(Vulnerability.Source.NVD);