diff --git a/nuget/lib/dependabot/nuget/update_checker/version_finder.rb b/nuget/lib/dependabot/nuget/update_checker/version_finder.rb index d2b94ecb23..c41e557502 100644 --- a/nuget/lib/dependabot/nuget/update_checker/version_finder.rb +++ b/nuget/lib/dependabot/nuget/update_checker/version_finder.rb @@ -232,6 +232,9 @@ def fetch_paginated_v2_nuget_listings(url_details, results = {}) if (link_href = fetch_v2_next_link_href(response.body)) url_details = url_details.dup + # Some Nuget repositories, such as JFrog's Artifactory, URL encode the "next" href + # link in the paged results. If the href is not URL decoded, the paging parameters + # are ignored and the first page is always returned. url_details[:versions_url] = CGI.unescape(link_href) fetch_paginated_v2_nuget_listings(url_details, results) end