Seeing "error translating to CPE" for various software items in Fleet server logs during a vulnerability cron

[AndreyKizimenko]

Fleet version: 4.76 & 4.77

Web browser and operating system: N/A

---

💥  Actual behavior

The server throws these errors for every installed extension
source=npm_packages is for a VSCode extension and source=jetbrains_plugins is for all jetbrains IDEs

level=error ts=2025-11-10T17:06:35.453524Z cron=vulnerabilities msg="error translating to CPE, skipping" software=prettier version=3.6.2 source=npm_packages err="getting CPE for: prettier: sql: no rows in result set"
level=error ts=2025-11-10T17:06:35.466884Z cron=vulnerabilities msg="error translating to CPE, skipping" software=Space version=252.27397.28 source=jetbrains_plugins err="getting CPE for: Space: sql: no rows in result set"

🛠️ To fix

downgrade to debug if err = no rows in result set

🧑‍💻  Steps to reproduce

1. Enroll a host into fleet
2. Install VSCode on it, install any JetBrains IDE
3. Run vulnerability cron and monitor server logs

🕯️ More info (optional)

Extensions are still displayed in the software library

[AndreyKizimenko]

Can be easliy reproduced in loadtest: #36492