Hopefully it's ok to raise the issue here (it does not seem to be a problem in ASD code).
ERROR org.zaproxy.zap.ZAP$UncaughtExceptionLogger - Exception in thread "AWT-EventQueue-1"
java.lang.NullPointerException
at java.io.File.<init>(File.java:277)
at com.denimgroup.threadfix.framework.impl.jsp.JSPEndpointGenerator.applyLineNumbers(JSPEndpointGenerator.java:299)
at com.denimgroup.threadfix.framework.impl.jsp.JSPEndpointGenerator.<init>(JSPEndpointGenerator.java:175)
at com.denimgroup.threadfix.framework.engine.full.EndpointDatabaseFactory.getDatabase(EndpointDatabaseFactory.java:176)
at com.denimgroup.threadfix.framework.engine.full.EndpointDatabaseFactory.getDatabase(EndpointDatabaseFactory.java:150)
at com.denimgroup.threadfix.framework.engine.full.EndpointDatabaseFactory.getDatabase(EndpointDatabaseFactory.java:143)
at com.denimgroup.threadfix.framework.engine.full.EndpointDatabaseFactory.getDatabase(EndpointDatabaseFactory.java:110)
at com.denimgroup.threadfix.framework.engine.full.EndpointDatabaseFactory.getDatabase(EndpointDatabaseFactory.java:89)
at org.zaproxy.zap.extension.attacksurfacedetector.AttackSurfaceDetectorPanel.getEndpoints(AttackSurfaceDetectorPanel.java:372)
at org.zaproxy.zap.extension.attacksurfacedetector.AttackSurfaceDetectorPanel.access$200(AttackSurfaceDetectorPanel.java:76)
at org.zaproxy.zap.extension.attacksurfacedetector.AttackSurfaceDetectorPanel$1.actionPerformed(AttackSurfaceDetectorPanel.java:157)
[...]