Repository navigation
Matched advisory candidates (shard 15) - #1559
Merged
Merged
Conversation
|
No actionable comments were generated in the recent review.
 |
| Layer / File(s) | Summary |
|---|---|
Add vulnerability advisories advisories/BREW-conda-lock-CVE-2026-*.json, advisories/BREW-conda-lock-GHSA-xmj3-9gf7-h52w.json |
New records describe reported vulnerabilities involving filelock, virtualenv, GitPython, setuptools, and msgpack. They include affected versions, upstream evidence, vulnerability details, severity data, and references. |
Refresh existing records advisories/BREW-conda-lock-CVE-*.json, advisories/BREW-conda-lock-GHSA-*.json |
Existing records update resource versions and matching evidence, modification timestamps, or upstream CVE identifiers. |
virtualenv advisories
| Layer / File(s) | Summary |
|---|---|
Add vulnerability advisories advisories/BREW-virtualenv-CVE-2026-1129*.json |
New records describe filelock-related vulnerabilities, affected conditions and impacts, severity, evidence, and references. |
Refresh existing evidence advisories/BREW-virtualenv-CVE-*.json |
Existing records update modification timestamps and package versions or keys in resource and upstream evidence. |
posting advisories
| Layer / File(s) | Summary |
|---|---|
Update and add advisories advisories/BREW-posting-CVE-*.json |
Existing advisories update Brotli package evidence, pydantic-settings evidence, or references. A new record documents a Brotli vulnerability with affected versions, severity, and references. |
pypy3.11 advisories
| Layer / File(s) | Summary |
|---|---|
Update pip and add setuptools advisory advisories/BREW-pypy3.11-*.json |
The pip advisory updates the affected version and matching evidence. A new advisory records a setuptools path issue. |
animdl advisory
| Layer / File(s) | Summary |
|---|---|
Update advisory references advisories/BREW-animdl-CVE-2025-43859.json |
The advisory adds a reference to PYSEC-2026-348, changes the type of its existing h11 GitHub reference, and adds the h11 PyPI project reference. |
gimme-aws-creds advisory
| Layer / File(s) | Summary |
|---|---|
Add PyJWT advisory advisories/BREW-gimme-aws-creds-GHSA-pxh4-856f-4h89.json |
A new record documents affected package versions, the PyJWT vulnerability, severity, and references. |
Priority:
Merge Risk: 
62953
-
The setuptools advisory can leave macOS and Linux users unaware that the reported path escape applies to them. Correct its upstream-sourced description before merging or explicitly accept that limitation.
Pre-merge checks: 
-
Check name Status Explanation Title check The title clearly identifies the submission as matched advisory candidates for shard 15. It accurately summarises the main purpose of the changeset. Linked Issues check Check skipped because no linked issues were found for this pull request. Out of Scope Changes check Check skipped because no linked issues were found for this pull request. Description check The pull request description explains that it contains automated advisory-match candidates and provides review guidance and run artifacts. This relates directly to the advisory additions and updates i… Full details: Description check
-
Explanation
The pull request description explains that it contains automated advisory-match candidates and provides review guidance and run artifacts. This relates directly to the advisory additions and updates in the changeset.
-
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.
Comment @coderabbitai help to get the list of available commands.
BrewTestBot
force-pushed
the
matched-advisories-15
branch
4 times, most recently
from
October 27, 2026 21:37
07d6ba9 to
a7fed59
Compare
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 2
-
-
- Source mode: Auto
- Repository: Homebrew/advisory-database
- Branch: matched-advisories-15
- File: .coderabbit.config.ts
- Commit: a7fed59
- Layers: Repository TS config (base), Organization UI (inherited)
- Review profile: CHILL
- Plan: Advanced
- Run ID:
5ca0a708-9429-4175-a9d9-f0fc5cd2f358
-
advisories/BREW-animdl-CVE-2025-43859.jsonadvisories/BREW-conda-lock-CVE-2023-40267.jsonadvisories/BREW-conda-lock-CVE-2023-40590.jsonadvisories/BREW-conda-lock-CVE-2023-41040.jsonadvisories/BREW-conda-lock-CVE-2024-22190.jsonadvisories/BREW-conda-lock-CVE-2024-6345.jsonadvisories/BREW-conda-lock-CVE-2025-47273.jsonadvisories/BREW-conda-lock-CVE-2026-100689.jsonadvisories/BREW-conda-lock-CVE-2026-110855.jsonadvisories/BREW-conda-lock-CVE-2026-110856.jsonadvisories/BREW-conda-lock-CVE-2026-110857.jsonadvisories/BREW-conda-lock-CVE-2026-110858.jsonadvisories/BREW-conda-lock-CVE-2026-110859.jsonadvisories/BREW-conda-lock-CVE-2026-110860.jsonadvisories/BREW-conda-lock-CVE-2026-112940.jsonadvisories/BREW-conda-lock-CVE-2026-113715.jsonadvisories/BREW-conda-lock-CVE-2026-113716.jsonadvisories/BREW-conda-lock-CVE-2026-113717.jsonadvisories/BREW-conda-lock-CVE-2026-113719.jsonadvisories/BREW-conda-lock-CVE-2026-113720.jsonadvisories/BREW-conda-lock-CVE-2026-113721.jsonadvisories/BREW-conda-lock-CVE-2026-113722.jsonadvisories/BREW-conda-lock-CVE-2026-113723.jsonadvisories/BREW-conda-lock-CVE-2026-113725.jsonadvisories/BREW-conda-lock-CVE-2026-113726.jsonadvisories/BREW-conda-lock-CVE-2026-113732.jsonadvisories/BREW-conda-lock-CVE-2026-113776.jsonadvisories/BREW-conda-lock-CVE-2026-114145.jsonadvisories/BREW-conda-lock-CVE-2026-114613.jsonadvisories/BREW-conda-lock-CVE-2026-42215.jsonadvisories/BREW-conda-lock-CVE-2026-42284.jsonadvisories/BREW-conda-lock-CVE-2026-44243.jsonadvisories/BREW-conda-lock-CVE-2026-44244.jsonadvisories/BREW-conda-lock-CVE-2026-59890.jsonadvisories/BREW-conda-lock-CVE-2026-67322.jsonadvisories/BREW-conda-lock-CVE-2026-67323.jsonadvisories/BREW-conda-lock-CVE-2026-67324.jsonadvisories/BREW-conda-lock-CVE-2026-67325.jsonadvisories/BREW-conda-lock-CVE-2026-67326.jsonadvisories/BREW-conda-lock-CVE-2026-69097.jsonadvisories/BREW-conda-lock-CVE-2026-73619.jsonadvisories/BREW-conda-lock-CVE-2026-73620.jsonadvisories/BREW-conda-lock-CVE-2026-73621.jsonadvisories/BREW-conda-lock-CVE-2026-73622.jsonadvisories/BREW-conda-lock-CVE-2026-73623.jsonadvisories/BREW-conda-lock-CVE-2026-73624.jsonadvisories/BREW-conda-lock-CVE-2026-73625.jsonadvisories/BREW-conda-lock-CVE-2026-76217.jsonadvisories/BREW-conda-lock-CVE-2026-76218.jsonadvisories/BREW-conda-lock-CVE-2026-76219.jsonadvisories/BREW-conda-lock-CVE-2026-76220.jsonadvisories/BREW-conda-lock-CVE-2026-76221.jsonadvisories/BREW-conda-lock-CVE-2026-76222.jsonadvisories/BREW-conda-lock-CVE-2026-78675.jsonadvisories/BREW-conda-lock-CVE-2026-78676.jsonadvisories/BREW-conda-lock-CVE-2026-78677.jsonadvisories/BREW-conda-lock-CVE-2026-78678.jsonadvisories/BREW-conda-lock-CVE-2026-78679.jsonadvisories/BREW-conda-lock-CVE-2026-87817.jsonadvisories/BREW-conda-lock-CVE-2026-87819.jsonadvisories/BREW-conda-lock-GHSA-35mr-4567-66vg.jsonadvisories/BREW-conda-lock-GHSA-5fqc-mrg8-w798.jsonadvisories/BREW-conda-lock-GHSA-8w8g-wq8h-fq33.jsonadvisories/BREW-conda-lock-GHSA-cm62-gvxx-vmxx.jsonadvisories/BREW-conda-lock-GHSA-xmj3-9gf7-h52w.jsonadvisories/BREW-gimme-aws-creds-GHSA-pxh4-856f-4h89.jsonadvisories/BREW-posting-CVE-2025-43859.jsonadvisories/BREW-posting-CVE-2025-6176.jsonadvisories/BREW-posting-CVE-2026-111497.jsonadvisories/BREW-posting-CVE-2026-58203.jsonadvisories/BREW-pypy3.11-CVE-2026-13346.jsonadvisories/BREW-pypy3.11-GHSA-xmj3-9gf7-h52w.jsonadvisories/BREW-virtualenv-CVE-2011-4617.jsonadvisories/BREW-virtualenv-CVE-2024-53899.jsonadvisories/BREW-virtualenv-CVE-2025-68146.jsonadvisories/BREW-virtualenv-CVE-2026-102925.jsonadvisories/BREW-virtualenv-CVE-2026-102930.jsonadvisories/BREW-virtualenv-CVE-2026-102938.jsonadvisories/BREW-virtualenv-CVE-2026-112906.jsonadvisories/BREW-virtualenv-CVE-2026-112914.jsonadvisories/BREW-virtualenv-CVE-2026-112937.jsonadvisories/BREW-virtualenv-CVE-2026-112940.jsonadvisories/BREW-virtualenv-CVE-2026-22701.jsonadvisories/BREW-virtualenv-CVE-2026-22702.json
-
- advisories/BREW-conda-lock-CVE-2026-59890.json
- advisories/BREW-conda-lock-CVE-2026-73625.json
- advisories/BREW-conda-lock-CVE-2026-73621.json
- advisories/BREW-conda-lock-CVE-2026-67325.json
- advisories/BREW-conda-lock-CVE-2024-22190.json
- advisories/BREW-conda-lock-CVE-2026-76219.json
- advisories/BREW-conda-lock-CVE-2023-40590.json
- advisories/BREW-conda-lock-CVE-2026-44244.json
- advisories/BREW-conda-lock-CVE-2026-73623.json
- advisories/BREW-virtualenv-CVE-2011-4617.json
- advisories/BREW-conda-lock-CVE-2026-87819.json
- advisories/BREW-posting-CVE-2025-6176.json
- advisories/BREW-conda-lock-CVE-2026-42284.json
- advisories/BREW-conda-lock-CVE-2026-78679.json
- advisories/BREW-conda-lock-CVE-2026-44243.json
- advisories/BREW-posting-CVE-2026-58203.json
- advisories/BREW-conda-lock-CVE-2023-40267.json
- advisories/BREW-conda-lock-CVE-2026-76222.json
- advisories/BREW-conda-lock-CVE-2026-67326.json
- advisories/BREW-virtualenv-CVE-2025-68146.json
- advisories/BREW-virtualenv-CVE-2026-102925.json
- advisories/BREW-virtualenv-CVE-2026-22702.json
- advisories/BREW-conda-lock-CVE-2026-67323.json
- advisories/BREW-conda-lock-CVE-2026-76217.json
- advisories/BREW-conda-lock-CVE-2026-76221.json
- advisories/BREW-conda-lock-CVE-2023-41040.json
- advisories/BREW-conda-lock-CVE-2026-76218.json
- advisories/BREW-virtualenv-CVE-2026-102930.json
- advisories/BREW-conda-lock-CVE-2026-73624.json
- advisories/BREW-conda-lock-CVE-2024-6345.json
- advisories/BREW-conda-lock-CVE-2026-78677.json
- advisories/BREW-conda-lock-CVE-2026-42215.json
- advisories/BREW-pypy3.11-CVE-2026-13346.json
- advisories/BREW-conda-lock-CVE-2026-73619.json
- advisories/BREW-conda-lock-CVE-2026-87817.json
- advisories/BREW-virtualenv-CVE-2026-102938.json
- advisories/BREW-conda-lock-CVE-2026-67322.json
- advisories/BREW-conda-lock-CVE-2026-78678.json
- advisories/BREW-conda-lock-CVE-2026-73622.json
- advisories/BREW-conda-lock-CVE-2026-78676.json
- advisories/BREW-conda-lock-CVE-2026-73620.json
- advisories/BREW-conda-lock-CVE-2026-76220.json
- advisories/BREW-conda-lock-CVE-2026-69097.json
Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.
-
BrewTestBot
force-pushed
the
matched-advisories-15
branch
2 times, most recently
from
October 29, 2026 12:26
62953f4 to
954995c
Compare
BrewTestBot
force-pushed
the
matched-advisories-15
branch
from
October 30, 2026 01:08
954995c to
acc0ac0
Compare
p-linnane
approved these changes
Oct 30, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated candidates via
brew advisory-match --formula-list (planned workers) --new-history, sharded by formula (SHA-256 bucket15). See CONTRIBUTING.md for the review checklist.Run and review artifacts: https://github.com/Homebrew/advisory-database/actions/runs/40957037294