Precondition I checked the issues list for existing open or closed reports of the same problem by searching for CVE-2024-32849. Describe the bug when processing the NVD API output, a java.lang.Null ...

I'd wager its the removal of the JSR-305 dependency in 33.4.3. That was a compile-scoped transitive dependency because some tools incorrectly require annotations be fully resolvable at runtime, ...