diff --git a/ee/app/graphql/types/vulnerability_type.rb b/ee/app/graphql/types/vulnerability_type.rb
index 6d48d3d91f487fc1d852f6a3c3a054edbafee81b..2127f406a26ed9dae0264ba36318cba4d708ce81 100644
--- a/ee/app/graphql/types/vulnerability_type.rb
+++ b/ee/app/graphql/types/vulnerability_type.rb
@@ -116,8 +116,7 @@ def vulnerability_path
 
     def location
       object_location = object.finding&.location
-      object_location.merge!(blob_path: object.blob_path).compact!
-      object_location.merge(report_type: object.report_type)
+      object_location&.merge(blob_path: object.blob_path, report_type: object.report_type)&.compact
     end
 
     def scanner