fix: remove virtual match string on NVD API Request (#6177)

jeremylong · Dec 1, 2023 · bb932af · bb932af
1 parent 9c604f3
commit bb932af
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/core/src/main/java/org/owasp/dependencycheck/data/update/NvdApiDataSource.java b/core/src/main/java/org/owasp/dependencycheck/data/update/NvdApiDataSource.java
@@ -290,10 +290,12 @@ private boolean processApi() throws UpdateException {
             builder.withDelay(8000);
         }
         builder.withResultsPerPage(RESULTS_PER_PAGE);
-        final String virtualMatch = settings.getString(Settings.KEYS.CVE_CPE_STARTS_WITH_FILTER);
-        if (virtualMatch != null) {
-            builder.withVirtualMatchString(virtualMatch);
-        }
+        //removed due to the virtualMatch filter causing overhead with the NVD API
+        //final String virtualMatch = settings.getString(Settings.KEYS.CVE_CPE_STARTS_WITH_FILTER);
+        //if (virtualMatch != null) {
+        //    builder.withVirtualMatchString(virtualMatch);
+        //}
+
         final int retryCount = settings.getInt(Settings.KEYS.NVD_API_MAX_RETRY_COUNT, 10);
         builder.withMaxRetryCount(retryCount);
         long delay = 0;