Disputed operation failure via null comparator input

Null dereference in JGraphT Core 1.5.2 causes a calling operation to fail when attackers pass null to the double comparator. ToleranceDoubleComparator.compare accepts boxed Double arguments and performs a numeric comparison without first rejecting null, so Java unboxing throws NullPointerException. Reachability depends entirely on a consuming application passing attacker-controlled null values; the CVE is disputed because the published evidence establishes neither a security boundary nor an application-level consequence.