Fork done and did a git clone but then some issues when I opened the project from Cursor as it is not able to find the appropriate kernel.
Turns out I need to do uv self update which took a new version and then do the update sync which creates the .venv and then from there I was able to select the appropriate Python kernel.
[INFO] Downloaded 340,000/361,483 (94%)
[ERROR] Failed to process CVE-2026-6785
org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2026-6785'; Value too long for column "URL CHARACTER VARYING(1000)": "'https://bugzilla.mozilla.org/buglist.cgi?bug_id=1935995%2C1999158%2C2015952%2C2... (1585)"; SQL statement:
INSERT INTO reference (cveid, name, url, source) VALUES (?, ?, ?, ?) [22001-240]
at org.owasp.dependencycheck.data.nvdcve.CveDB.updateVulnerability (CveDB.java:1104)
at org.owasp.dependencycheck.data.update.nvd.api.NvdApiProcessor.updateCveDb (NvdApiProcessor.java:119)
at org.owasp.dependencycheck.data.update.nvd.api.NvdApiProcessor.call (NvdApiProcessor.java:96)
at org.owasp.dependencycheck.data.update.nvd.api.NvdApiProcessor.call (NvdApiProcessor.java:40)
at java.util.concurrent.FutureTask.run (FutureTask.java:264)
at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1136)
at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:635)
at java.lang.Thread.run (Thread.java:842)
[ERROR] Failed to process CVE-2026-6786
org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2026-6786'; Value too long for column "URL CHARACTER VARYING(1000)": "'https://bugzilla.mozilla.org/buglist.cgi?bug_id=2010727%2C2019004%2C2019224%2C2... (1115)"; SQL statement:
INSERT INTO reference (cveid, name, url, source) VALUES (?, ?, ?, ?) [22001-240]
at org.owasp.dependencycheck.data.nvdcve.CveDB.updateVulnerability (CveDB.java:1104)
at org.owasp.dependencycheck.data.update.nvd.api.NvdApiProcessor.updateCveDb (NvdApiProcessor.java:119)
at org.owasp.dependencycheck.data.update.nvd.api.NvdApiProcessor.call (NvdApiProcessor.java:96)
at org.owasp.dependencycheck.data.update.nvd.api.NvdApiProcessor.call (NvdApiProcessor.java:40)
at java.util.concurrent.FutureTask.run (FutureTask.java:264)
at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1136)
at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:635)
at java.lang.Thread.run (Thread.java:842)
Same problem even if I used the recent version of OWASP Dependency Check dependency in Spring Boot.
Waste of time 😒
In my experience working as a software engineer, I've always been using branch-based workflow on pull requests. That means pull requests are for the same branches within the same repo.
Now I realized that the repo used in the AI Engineering course is read only and so I could not submit my exercises unless I fork and do a fork-based workflow pull request.
Doing a fork now.
[INFO] --- dependency-check:12.2.1:check (dependency-check) @ WeatherService ---
[INFO] Checking for updates
[INFO] NVD API has 361,159 records in this update
[INFO] Downloaded 10,000/361,159 (3%)
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=10000 : 2nd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=16000 : 2nd time
[INFO] Downloaded 20,000/361,293 (6%)
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=20000 : 2nd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=20000 : 3rd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=20000 : 4th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=20000 : 5th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=20000 : 6th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=20000 : 7th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=22000 : 2nd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=22000 : 3rd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=22000 : 4th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=22000 : 5th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=22000 : 6th time
[INFO] Downloaded 30,000/361,306 (8%)
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=38000 : 2nd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=38000 : 3rd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=38000 : 4th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=38000 : 5th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=38000 : 6th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=38000 : 7th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=38000 : 8th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=38000 : 9th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=38000 : 10th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=38000 : 11th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=38000 : 12th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=38000 : 13th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=38000 : 14th time
[INFO] Downloaded 40,000/361,323 (11%)
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=40000 : 2nd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=42000 : 2nd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=42000 : 3rd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=42000 : 4th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=44000 : 2nd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=44000 : 3rd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=44000 : 4th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=44000 : 5th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=48000 : 2nd time
[INFO] Downloaded 50,000/361,341 (14%)
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=50000 : 2nd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=50000 : 3rd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=50000 : 4th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=50000 : 5th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=50000 : 6th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=52000 : 2nd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=56000 : 2nd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=56000 : 3rd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=58000 : 2nd time
[INFO] Downloaded 60,000/361,416 (17%)
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=60000 : 2nd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=60000 : 3rd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=60000 : 4th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=62000 : 2nd time
[INFO] Downloaded 70,000/361,416 (19%)
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=72000 : 2nd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=72000 : 3rd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=76000 : 2nd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=76000 : 3rd time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=76000 : 4th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=76000 : 5th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=76000 : 6th time
[WARNING] Retrying request /rest/json/cves/2.0?resultsPerPage=2000&startIndex=76000 : 7th time
😒
Alright so some of the findings of the scan is actually a false positive specific to the group of files under the git repo clone on my local from the AI Engineering course.
The rest came from KMSPico tool used by the seller of this machine to me where Windows 10 Pro is already bundled. Looks like the KMSpico they have is compromised.
Malwarebytes Free has removed the threats.