Skip to content

Hashes not calculated

I'm running the command as in the example ./cve-hash-harvester -m CVE-2021-22205 -v ">=11.9, <13.8.8" -v ">=13.9, <13.9.6" -v ">=13.10, <13.10.3" and getting the following output almost immediately:

[*] Using MongoDB collection CVE-2021-22205 to store hashes for vulnerable contraints [>=11.9, <13.8.8 >=13.9, <13.9.6 >=13.10, <13.10.3]
[*] Loading all available GitLab tags from Docker Hub
[*] Found a total of 1807 tags for GitLab EE and CE editions, 491 of which match the vulnerable semantic version constraints provided.
[*] Tag  with hash  already stored in  collection. Saving.
[*] Tag  with hash  stored successfully.
[*] Tag  with hash  already stored in  collection. Saving.
[*] Tag  with hash  stored successfully.
[*] Tag  with hash  already stored in  collection. Saving.
[*] Tag  with hash  stored successfully.
[*] Tag  with hash  already stored in  collection. Saving.
...
[*] Tag  with hash  already stored in  collection. Saving.
[*] Tag  with hash  stored successfully.
[*] Vulnerable hashes:

I can see that the 491 documents were created in the CVE-2021-22205 collection. However, each document has name, hash, stdout, and exitError fields unset. I tried running the tool with another set of versions. However, the result is the same only number of created documents is different.

What am I doing wrong?