erver Error 500 when uploading BOM file

[adityasomic]

I'm encountering a Server Error(500) when attempting to upload a BOM (Bill of Materials) file to Dependency-Track. Despite the BOM being valid in both JSON and XML formats, and successfully passing validation, the server returns this error when trying to upload the file through the UI.

[nscuro]

Please check the logs for any errors and share them here if possible. Also let us know what version of DT you're using.

[adityasomic]

Shared , Could you please let me know what is wrong?

[adityasomic]

docker logs dc07c2e7200f --tail 100 -f
2025-02-18 07:27:41,041 INFO [Config] Initializing Configuration
2025-02-18 07:27:41,043 INFO [Config] System property alpine.application.properties not specified
2025-02-18 07:27:41,043 INFO [Config] Loading application.properties from classpath
2025-02-18 07:27:41,049 INFO [Config] --------------------------------------------------------------------------------
2025-02-18 07:27:41,049 INFO [Config] Application: Dependency-Track
2025-02-18 07:27:41,050 INFO [Config] Version: 4.12.4
2025-02-18 07:27:41,050 INFO [Config] Built-on: 2025-02-10T16:36:58Z
2025-02-18 07:27:41,050 INFO [Config] --------------------------------------------------------------------------------
2025-02-18 07:27:41,050 INFO [Config] Framework: Alpine
2025-02-18 07:27:41,051 INFO [Config] Version : 3.1.2
2025-02-18 07:27:41,051 INFO [Config] Built-on: 2024-12-03T15:45:44Z
2025-02-18 07:27:41,051 INFO [Config] --------------------------------------------------------------------------------
2025-02-18 07:27:41,099 INFO [RequirementsVerifier] Initializing requirements verifier
2025-02-18 07:27:41,099 INFO [UpgradeInitializer] Initializing upgrade framework
2025-02-18 07:27:42,288 INFO [PersistenceManagerFactory] Initializing persistence framework
2025-02-18 07:27:42,290 INFO [PersistenceManagerFactory] Creating transactional connection pool
2025-02-18 07:27:42,344 INFO [PersistenceManagerFactory] Creating non-transactional connection pool
2025-02-18 07:27:42,459 INFO [HealthCheckInitializer] Registering health checks
2025-02-18 07:27:42,460 INFO [DefaultObjectGenerator] Initializing default object generator
2025-02-18 07:27:42,462 INFO [DefaultObjectGenerator] Synchronizing permissions to datastore
2025-02-18 07:27:42,583 INFO [DefaultObjectGenerator] Adding default users and teams to datastore
2025-02-18 07:27:43,503 INFO [DefaultObjectGenerator] Synchronizing SPDX license definitions to datastore
2025-02-18 07:27:44,737 INFO [DefaultObjectGenerator] Adding default license group definitions to datastore
2025-02-18 07:27:44,933 INFO [DefaultObjectGenerator] Synchronizing default repositories to datastore
2025-02-18 07:27:44,953 INFO [DefaultObjectGenerator] Synchronizing config properties to datastore
2025-02-18 07:27:45,011 INFO [DefaultObjectGenerator] Synchronizing notification publishers to datastore
2025-02-18 07:27:45,061 INFO [EventSubsystemInitializer] Initializing asynchronous event subsystem
2025-02-18 07:27:45,076 INFO [NotificationSubsystemInitializer] Initializing notification service
2025-02-18 07:27:45,077 INFO [IndexSubsystemInitializer] Building lucene indexes if required
2025-02-18 07:27:45,086 INFO [IndexManager] Checking the health of index PROJECT
2025-02-18 07:27:45,086 WARN [IndexManager] The index PROJECT does not exist
2025-02-18 07:27:45,086 INFO [IndexManager] (Re)Building index project
2025-02-18 07:27:45,092 INFO [IndexManager] Checking the health of index COMPONENT
2025-02-18 07:27:45,092 WARN [IndexManager] The index COMPONENT does not exist
2025-02-18 07:27:45,092 INFO [IndexManager] (Re)Building index component
2025-02-18 07:27:45,093 INFO [IndexManager] Checking the health of index SERVICECOMPONENT
2025-02-18 07:27:45,093 WARN [IndexManager] The index SERVICECOMPONENT does not exist
2025-02-18 07:27:45,093 INFO [IndexManager] (Re)Building index servicecomponent
2025-02-18 07:27:45,094 INFO [IndexManager] Checking the health of index VULNERABILITY
2025-02-18 07:27:45,094 WARN [IndexManager] The index VULNERABILITY does not exist
2025-02-18 07:27:45,094 INFO [IndexManager] (Re)Building index vulnerability
2025-02-18 07:27:45,094 INFO [IndexManager] Checking the health of index LICENSE
2025-02-18 07:27:45,095 WARN [IndexManager] The index LICENSE does not exist
2025-02-18 07:27:45,095 INFO [IndexManager] (Re)Building index license
2025-02-18 07:27:45,095 INFO [IndexManager] Checking the health of index VULNERABLESOFTWARE
2025-02-18 07:27:45,095 WARN [IndexManager] The index VULNERABLESOFTWARE does not exist
2025-02-18 07:27:45,096 INFO [IndexManager] (Re)Building index vulnerablesoftware
2025-02-18 07:27:45,099 INFO [ProjectIndexer] Starting reindex task. This may take some time.
2025-02-18 07:27:45,100 INFO [IndexManager] Deleting project index
2025-02-18 07:27:45,109 INFO [AlpineServlet] Starting Dependency-Track
2025-02-18 07:27:45,203 INFO [ProjectIndexer] Reindexing of 0 projects completed in PT0.003656856S
2025-02-18 07:27:45,204 INFO [ComponentIndexer] Starting reindex task. This may take some time.
2025-02-18 07:27:45,205 INFO [IndexManager] Deleting component index
2025-02-18 07:27:45,216 INFO [ComponentIndexer] Reindexing of 0 components completed in PT0.002728511S
2025-02-18 07:27:45,217 INFO [ServiceComponentIndexer] Starting reindex task. This may take some time.
2025-02-18 07:27:45,217 INFO [IndexManager] Deleting servicecomponent index
2025-02-18 07:27:45,226 INFO [ServiceComponentIndexer] Reindexing of 0 services completed in PT0.002076073S
2025-02-18 07:27:45,228 INFO [VulnerabilityIndexer] Starting reindex task. This may take some time.
2025-02-18 07:27:45,228 INFO [IndexManager] Deleting vulnerability index
2025-02-18 07:27:45,239 INFO [VulnerabilityIndexer] Reindexing of 0 vulnerabilities completed in PT0.001936825S
2025-02-18 07:27:45,241 INFO [LicenseIndexer] Starting reindex task. This may take some time.
2025-02-18 07:27:45,241 INFO [IndexManager] Deleting license index
2025-02-18 07:27:45,456 INFO [LicenseIndexer] Reindexing of 738 licenses completed in PT0.208832008S
2025-02-18 07:27:45,457 INFO [VulnerableSoftwareIndexer] Starting reindex task. This may take some time.
2025-02-18 07:27:45,457 INFO [IndexManager] Deleting vulnerablesoftware index
2025-02-18 07:27:45,466 INFO [VulnerableSoftwareIndexer] Reindexing of 0 VulnerableSoftwares completed in PT0.002234784S
2025-02-18 07:27:46,588 INFO [KeyManager] Generating new key pair
2025-02-18 07:27:47,122 INFO [KeyManager] Saving key pair
2025-02-18 07:27:47,151 INFO [AlpineServlet] Dependency-Track is ready
2025-02-18 07:27:47,154 INFO [NvdMirrorServlet] Initializing NVD mirror
2025-02-18 07:27:47,154 INFO [FileSystemResourceServlet] Initializing filesystem resource servlet
2025-02-18 07:27:55,073 INFO [VulnerabilityMetricsUpdateTask] Executing metrics update on vulnerability database
2025-02-18 07:27:55,075 INFO [PortfolioMetricsUpdateTask] Executing portfolio metrics update
2025-02-18 07:27:55,082 INFO [ClearComponentAnalysisCacheTask] Clearing ComponentAnalysisCache
2025-02-18 07:27:55,083 INFO [OsvDownloadTask] Google OSV mirroring is disabled. No ecosystem selected.
2025-02-18 07:27:55,085 INFO [ClearComponentAnalysisCacheTask] Complete
2025-02-18 07:27:55,088 INFO [PortfolioMetricsUpdateTask] Completed portfolio metrics update in 00:00:011
2025-02-18 07:27:55,092 INFO [VulnerabilityMetricsUpdateTask] Completed metrics update on vulnerability database in 00:00:018
2025-02-18 07:28:45,075 INFO [VulnDbSyncTask] Starting VulnDB mirror synchronization task
2025-02-18 07:28:45,075 INFO [VulnDbSyncTask] VulnDB mirror directory does not exist. Skipping.
2025-02-18 07:28:45,075 WARN [NistMirrorTask] The NVD is planning to retire the legacy data feeds used by Dependency-Track (https://nvd.nist.gov/General/News/change-timeline); Consider enabling mirroring via NVD REST API in the settings: https://docs.dependencytrack.org/datasources/nvd/#mirroring-via-nvd-rest-api
2025-02-18 07:28:45,075 INFO [NistMirrorTask] Starting NIST mirroring task
2025-02-18 07:28:45,076 INFO [NistMirrorTask] Mirrored data directory created successfully
2025-02-18 07:28:45,080 INFO [NistMirrorTask] Downloading files at Tue Feb 18 07:28:45 UTC 2025
2025-02-18 07:28:45,081 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2025.json.gz
2025-02-18 07:28:46,023 INFO [NistMirrorTask] Downloading...
2025-02-18 07:28:46,447 INFO [NistMirrorTask] Uncompressing nvdcve-1.1-2025.json.gz
2025-02-18 07:28:46,462 INFO [NvdParser] Parsing nvdcve-1.1-2025.json
2025-02-18 07:28:51,276 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2025.meta
2025-02-18 07:28:51,390 INFO [NistMirrorTask] Downloading...
2025-02-18 07:28:51,392 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2024.json.gz
2025-02-18 07:28:51,610 INFO [NistMirrorTask] Downloading...
2025-02-18 07:28:53,695 INFO [NistMirrorTask] Uncompressing nvdcve-1.1-2024.json.gz
2025-02-18 07:28:53,988 INFO [NvdParser] Parsing nvdcve-1.1-2024.json
2025-02-18 07:29:24,295 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2024.meta
2025-02-18 07:29:24,782 INFO [NistMirrorTask] Downloading...
2025-02-18 07:29:24,783 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2023.json.gz
2025-02-18 07:29:25,106 INFO [NistMirrorTask] Downloading...
2025-02-18 07:29:35,351 INFO [NistMirrorTask] Uncompressing nvdcve-1.1-2023.json.gz
2025-02-18 07:29:35,541 INFO [NvdParser] Parsing nvdcve-1.1-2023.json
2025-02-18 07:30:10,536 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2023.meta
2025-02-18 07:30:11,019 INFO [NistMirrorTask] Downloading...
2025-02-18 07:30:11,021 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2022.json.gz
2025-02-18 07:30:11,241 INFO [NistMirrorTask] Downloading...
2025-02-18 07:30:12,757 INFO [NistMirrorTask] Uncompressing nvdcve-1.1-2022.json.gz
2025-02-18 07:30:12,962 INFO [NvdParser] Parsing nvdcve-1.1-2022.json
2025-02-18 07:30:46,385 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2022.meta
2025-02-18 07:30:46,722 INFO [NistMirrorTask] Downloading...
2025-02-18 07:30:46,723 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2021.json.gz
2025-02-18 07:30:46,973 INFO [NistMirrorTask] Downloading...
2025-02-18 07:31:04,243 INFO [NistMirrorTask] Uncompressing nvdcve-1.1-2021.json.gz
2025-02-18 07:31:04,433 INFO [NvdParser] Parsing nvdcve-1.1-2021.json
2025-02-18 07:31:40,440 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2021.meta
2025-02-18 07:31:40,932 INFO [NistMirrorTask] Downloading...
2025-02-18 07:31:40,933 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-2020.json.gz
2025-02-18 07:31:41,151 INFO [NistMirrorTask] Downloading...
2025-02-18 07:31:42,770 INFO [NistMirrorTask] Uncompressing nvdcve-1.1-2020.json.gz
2025-02-18 07:31:42,942 INFO [NvdParser] Parsing nvdcve-1.1-2020.json