Bug: depscan.html does not render correctly

[Geertkok1]

Expected Behavior

In depscan.html the table should be filled with the information that is found during the scan

Actual Behavior

Please see the following screenshot for what it looks like:

All the CVE information is visible outside of the table. Also the table that it does create does not look right.
I have also attached the resulting depscan.html file.

depscan.html

Steps to Reproduce

Run depscan on a project that contains a CVE. The resulting depscan.html file produces the result like the screenshot and file mentioned before.

Additional Information

This is an issue since dep-scan 6.0.0

[lucacapacci]

@Geertkok1 thanks for reporting this. Could you please share the SBOM file that leads to this?

[Geertkok1]

@Geertkok1 thanks for reporting this. Could you please share the SBOM file that leads to this?

As requested here is the sbom attached.

sbom-universal.cdx.json

If you need anymore information please do not hestitate to ask.

[vincent067]

Hi there! 👋

I noticed this issue about the HTML report rendering problem and I'd love to help investigate!

I've been using dep-scan in my compliance workflows and the HTML reports are super helpful for stakeholder communication. Let me see if I can reproduce this issue on my end.

My Setup:

• dep-scan version: latest from main branch
• Python: 3.11
• OS: Ubuntu 22.04

Quick questions to help narrow this down:

1. What browser are you using to view the generated depscan.html? I've seen similar rendering issues when certain CSS features aren't supported in older browsers.

2. Could you share a screenshot of what "does not render correctly" looks like? Is it:

   • Layout issues (elements overlapping)?
   • Missing content?
   • Broken styling?
   • JavaScript errors in console?

3. Does this happen with all projects or specific dependency trees? If you could share a minimal requirements.txt or package.json that triggers the issue, that would be super helpful! 🙏

What I can help with:
I'm happy to dig into the reporting templates in packages/reporting-lib/ and see if there's a CSS/JS compatibility issue. The HTML reports are one of my favorite features of dep-scan - they make vulnerability data so much more accessible to non-technical teams!

Let me know and I'll start investigating! 😊

Cheers,
Vincent

[prabhu]

@vincent067 Luca is looking at this bug. Thank you for the offer.