Maven 4 (rc5) fails with NPE in DefaultModelBuilder

[waterlx]

Affected version

4.0.0 RC5

Bug description

I found this NPE when trying to build Spark with Maven 4 and mvnup reports no plugin upgrades needed.
Maven 3.9.14 reports no such error.

• Maven: 4.0.0-rc-5
• cyclonedx-maven-plugin: 2.9.1, its latest version, but there was no new release in the last one and half year.

The stack trace:

Caused by: java.lang.NullPointerException: Cannot invoke "java.nio.file.Path.getParent()" because the return value of "org.apache.maven.api.model.Model.getPomFile()" is null
    at org.apache.maven.impl.model.DefaultModelBuilder$ModelBuilderSessionState.readEffectiveModel(DefaultModelBuilder.java:1365)
    at org.apache.maven.impl.model.DefaultModelBuilder$ModelBuilderSessionState.buildEffectiveModel(DefaultModelBuilder.java:931)
    at org.apache.maven.impl.model.DefaultModelBuilder$ModelBuilderSessionImpl.build(DefaultModelBuilder.java:245)
    at org.apache.maven.project.DefaultProjectBuilder$BuildSession.build(DefaultProjectBuilder.java:405)
    at org.apache.maven.project.DefaultProjectBuilder$BuildSession.build(DefaultProjectBuilder.java:485)
    at org.apache.maven.project.DefaultProjectBuilder.build(DefaultProjectBuilder.java:186)
    at org.apache.maven.project.DefaultProjectBuilder.build(DefaultProjectBuilder.java:179)
    at org.cyclonedx.maven.DefaultModelConverter.getEffectiveMavenProject(DefaultModelConverter.java:283)
    at org.cyclonedx.maven.DefaultModelConverter.convertMavenDependency(DefaultModelConverter.java:182)
    at org.cyclonedx.maven.BaseCycloneDxMojo.convertMavenDependency(BaseCycloneDxMojo.java:290)
    at org.cyclonedx.maven.CycloneDxMojo.extractComponentsAndDependencies(CycloneDxMojo.java:126)
    at org.cyclonedx.maven.BaseCycloneDxMojo.execute(BaseCycloneDxMojo.java:336)
    at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo(DefaultBuildPluginManager.java:153)
    at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2(MojoExecutor.java:339)
    at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute(MojoExecutor.java:310)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:214)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:179)
    at org.apache.maven.lifecycle.internal.MojoExecutor$1.run(MojoExecutor.java:168)
    at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute(DefaultMojosExecutionStrategy.java:39)
    at org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:165)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:110)
    at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:76)
    at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build(SingleThreadedBuilder.java:61)
    at org.apache.maven.lifecycle.internal.DefaultLifecycleStarter.execute(DefaultLifecycleStarter.java:123)
    at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:310)
    at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:225)
    at org.apache.maven.DefaultMaven.execute(DefaultMaven.java:149)
    at org.apache.maven.cling.invoker.mvn.MavenInvoker.doExecute(MavenInvoker.java:452)
    at org.apache.maven.cling.invoker.mvn.MavenInvoker.execute(MavenInvoker.java:97)
    at org.apache.maven.cling.invoker.mvn.MavenInvoker.execute(MavenInvoker.java:81)
    at org.apache.maven.cling.invoker.LookupInvoker.doInvoke(LookupInvoker.java:165)
    at org.apache.maven.cling.invoker.LookupInvoker.invoke(LookupInvoker.java:134)
    at org.apache.maven.cling.ClingSupport.run(ClingSupport.java:76)
    at org.apache.maven.cling.MavenCling.main(MavenCling.java:51)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
    at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:569)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced(Launcher.java:255)
    at org.codehaus.plexus.classworlds.launcher.Launcher.launch(Launcher.java:201)
    at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode(Launcher.java:361)
    at org.codehaus.plexus.classworlds.launcher.Launcher.main(Launcher.java:314)

[waterlx]

The code in Maven is here, while in CycloneDX it is here

[waterlx]

Please correct me if it is a known issue (I read the open issues by filtering some keywords, but could miss it). And let me know if it needs to be taken care of by CycloneDX.