Affected project name not shown in Jira ticket summary for NEW_VULNERABLE_DEPENDENCY notification type

[lgrguricmileusnic]

Current Behavior

Currently, the name of the project containing the vulnerable dependency is not being shown in the ticket summary (title), when using the default Jira publisher and NEW_VULNERABLE_DEPENDENCY. This is happening because of a mistake in the project name identifier "subject.dependency.project.name" in the default Jira Pebble template, where "dependency" should actually be "component" or "subject.component.project.name" in full.

Steps to Reproduce

1. Enable Jira Integration with DependencyTrack
2. Create a DT project
3. Create alert which uses the default Jira publisher and notification of type NEW_VULNERABLE_DEPENDENCY
4. Limit alert to created project (possibly optional)
5. Add a vulnerable component to the project via BOM upload or manually

Created ticket doesn't contain affected project name in ticket summary (title).

Expected Behavior

Ticket summary should contain project name as intended by the current version of the template.

Dependency-Track Version

4.11.0

Dependency-Track Distribution

Container Image

Database Server

PostgreSQL

Database Server Version

No response

Browser

N/A

Checklist

• I have read and understand the contributing guidelines
• I have checked the existing issues for whether this defect was already reported

[github-actions]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.