diff --git a/backend/routes/ivantiTodoQueue.js b/backend/routes/ivantiTodoQueue.js
index b48beee..0eca663 100644
--- a/backend/routes/ivantiTodoQueue.js
+++ b/backend/routes/ivantiTodoQueue.js
@@ -46,10 +46,13 @@ function createIvantiTodoQueueRouter() {
                  ORDER BY q.vendor ASC, q.created_at ASC`,
                 [req.user.id]
             );
-            const parsed = rows.map((r) => ({
-                ...r,
-                cves: r.cves_json ? JSON.parse(r.cves_json) : [],
-            }));
+            const parsed = rows.map((r) => {
+                let cves = [];
+                if (r.cves_json) {
+                    try { cves = JSON.parse(r.cves_json); } catch (e) { cves = []; }
+                }
+                return { ...r, cves };
+            });
             res.json(parsed);
         } catch (err) {
             console.error('Error fetching todo queue:', err);