[BrewTestBot]

Automated candidates via brew advisory-match --formula-list (planned workers) --new-history, sharded by formula (SHA-256 bucket 26). See CONTRIBUTING.md for the review checklist.

Run and review artifacts: https://github.com/Homebrew/advisory-database/actions/runs/40957037294

[coderabbitai]

Important

Review skipped

We couldn't safely recover the incremental review. No full review was started, and the last reviewed checkpoint was preserved. Retry later, or explicitly request a full review by commenting @coderabbitai full review.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

📝 Summary

Summary by CodeRabbit

• Documentation
  • Updated security advisory records with revised affected dependency versions, upstream evidence and references across JupyterLab, MCP Atlassian, Shodan and Sysadmin.
  • Added advisories covering FastMCP authorisation, file-locking issues, and vulnerabilities involving Authlib, dnspython and oauthlib.
  • Recorded updated fixed-version details for affected Homebrew releases, including a newly identified fix for MCP Atlassian.

This pull request updates affected-package versions, matching upstream evidence, and modification timestamps across JupyterLab, mcp-atlassian, and shodan advisories. It also adds new security advisories, updates Homebrew fix status in two records, and adds references to two h11 advisories.

Changes: JupyterLab advisories

Layer / File(s)	Summary
Refresh advisory records advisories/BREW-jupyterlab-*.json	Affected-resource versions, matching upstream evidence, and timestamps are updated across existing records. One record changes its Homebrew range state to fixed. One advisory adds references to the PYSEC advisory and h11 PyPI project.

mcp-atlassian advisories

Layer / File(s)	Summary
Update existing advisory records advisories/BREW-mcp-atlassian-*.json	Existing records update affected-resource versions and matching evidence. One record changes its Homebrew range state to fixed, and two records add references.
Add security advisories advisories/BREW-mcp-atlassian-CVE-2026-*.json, advisories/BREW-mcp-atlassian-GHSA-7xgj-8392-5q4r.json	New records describe vulnerabilities, affected Homebrew ranges, upstream package details, severity data, and references.

shodan advisories

Layer / File(s)	Summary
Update and add filelock advisories advisories/BREW-shodan-CVE-*.json	Two existing advisories update filelock versions and evidence. Four new advisories describe filelock vulnerabilities and record affected ranges, severity data, and references.

sysaidmin advisory

Layer / File(s)	Summary
Add h11 advisory references advisories/BREW-sysaidmin-CVE-2025-43859.json	The advisory adds references to the PYSEC advisory and h11 PyPI project.

Priority: Low

Merge Risk: Low · previous review 0b491

Readers may miss an available Authlib fix. Correct the upstream-derived advice and regenerate the record; the remaining risk is bounded.

Pre-merge checks: 4

Check name	Status	Explanation
Title check		The title clearly identifies the pull request as a batch of matched advisory candidates for shard 26, which matches the stated objectives and changeset.
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.
Description check		The pull request description states that the changes are automated advisory candidates generated by brew advisory-match, which matches the added and updated Homebrew advisory records.

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

---

Review info

Run configuration

• Source mode: Auto
• Repository: Homebrew/advisory-database
• Branch: matched-advisories-26
• File: .coderabbit.config.ts
• Commit: 0b491ff
• Layers: Repository TS config (base), Organization UI (inherited)
• Review profile: CHILL
• Plan: Advanced
• Run ID: 5950714c-57db-47fc-a557-92bbde674205

Commits

Reviewing files that changed from the base of the PR and between 79e45a3 and 0b491ff.

Files selected for processing: 98

• advisories/BREW-jupyterlab-CVE-2021-32862.json
• advisories/BREW-jupyterlab-CVE-2023-28370.json
• advisories/BREW-jupyterlab-CVE-2024-52804.json
• advisories/BREW-jupyterlab-CVE-2025-43859.json
• advisories/BREW-jupyterlab-CVE-2025-47287.json
• advisories/BREW-jupyterlab-CVE-2025-53000.json
• advisories/BREW-jupyterlab-CVE-2025-67724.json
• advisories/BREW-jupyterlab-CVE-2025-67725.json
• advisories/BREW-jupyterlab-CVE-2025-67726.json
• advisories/BREW-jupyterlab-CVE-2026-103261.json
• advisories/BREW-jupyterlab-CVE-2026-103262.json
• advisories/BREW-jupyterlab-CVE-2026-103263.json
• advisories/BREW-jupyterlab-CVE-2026-114140.json
• advisories/BREW-jupyterlab-CVE-2026-31958.json
• advisories/BREW-jupyterlab-CVE-2026-33079.json
• advisories/BREW-jupyterlab-CVE-2026-35536.json
• advisories/BREW-jupyterlab-CVE-2026-39377.json
• advisories/BREW-jupyterlab-CVE-2026-39378.json
• advisories/BREW-jupyterlab-CVE-2026-44708.json
• advisories/BREW-jupyterlab-CVE-2026-44896.json
• advisories/BREW-jupyterlab-CVE-2026-44897.json
• advisories/BREW-jupyterlab-CVE-2026-44898.json
• advisories/BREW-jupyterlab-CVE-2026-44899.json
• advisories/BREW-jupyterlab-CVE-2026-49476.json
• advisories/BREW-jupyterlab-CVE-2026-49477.json
• advisories/BREW-jupyterlab-CVE-2026-49851.json
• advisories/BREW-jupyterlab-CVE-2026-49853.json
• advisories/BREW-jupyterlab-CVE-2026-49854.json
• advisories/BREW-jupyterlab-CVE-2026-49855.json
• advisories/BREW-jupyterlab-CVE-2026-59922.json
• advisories/BREW-jupyterlab-CVE-2026-59923.json
• advisories/BREW-jupyterlab-CVE-2026-59924.json
• advisories/BREW-jupyterlab-CVE-2026-59925.json
• advisories/BREW-jupyterlab-CVE-2026-59926.json
• advisories/BREW-jupyterlab-CVE-2026-59927.json
• advisories/BREW-jupyterlab-CVE-2026-59928.json
• advisories/BREW-jupyterlab-CVE-2026-59929.json
• advisories/BREW-jupyterlab-CVE-2026-59930.json
• advisories/BREW-jupyterlab-CVE-2026-76098.json
• advisories/BREW-jupyterlab-CVE-2026-82397.json
• advisories/BREW-jupyterlab-CVE-2026-85999.json
• advisories/BREW-jupyterlab-CVE-2026-86000.json
• advisories/BREW-jupyterlab-GHSA-753j-mpmx-qq6g.json
• advisories/BREW-jupyterlab-GHSA-8423-8fgw-73vq.json
• advisories/BREW-jupyterlab-GHSA-pw6j-qg29-8w7f.json
• advisories/BREW-jupyterlab-GHSA-qppv-j76h-2rpx.json
• advisories/BREW-jupyterlab-GHSA-w235-7p84-xx57.json
• advisories/BREW-jupyterlab-GHSA-wwv5-g3v4-889x.json
• advisories/BREW-mcp-atlassian-CVE-2025-62727.json
• advisories/BREW-mcp-atlassian-CVE-2025-62800.json
• advisories/BREW-mcp-atlassian-CVE-2025-62801.json
• advisories/BREW-mcp-atlassian-CVE-2025-64340.json
• advisories/BREW-mcp-atlassian-CVE-2025-69196.json
• advisories/BREW-mcp-atlassian-CVE-2026-114603.json
• advisories/BREW-mcp-atlassian-CVE-2026-114605.json
• advisories/BREW-mcp-atlassian-CVE-2026-114614.json
• advisories/BREW-mcp-atlassian-CVE-2026-114615.json
• advisories/BREW-mcp-atlassian-CVE-2026-114616.json
• advisories/BREW-mcp-atlassian-CVE-2026-114617.json
• advisories/BREW-mcp-atlassian-CVE-2026-114618.json
• advisories/BREW-mcp-atlassian-CVE-2026-114619.json
• advisories/BREW-mcp-atlassian-CVE-2026-114620.json
• advisories/BREW-mcp-atlassian-CVE-2026-27124.json
• advisories/BREW-mcp-atlassian-CVE-2026-27962.json
• advisories/BREW-mcp-atlassian-CVE-2026-28490.json
• advisories/BREW-mcp-atlassian-CVE-2026-28498.json
• advisories/BREW-mcp-atlassian-CVE-2026-28802.json
• advisories/BREW-mcp-atlassian-CVE-2026-32871.json
• advisories/BREW-mcp-atlassian-CVE-2026-41425.json
• advisories/BREW-mcp-atlassian-CVE-2026-41479.json
• advisories/BREW-mcp-atlassian-CVE-2026-44681.json
• advisories/BREW-mcp-atlassian-CVE-2026-46338.json
• advisories/BREW-mcp-atlassian-CVE-2026-48710.json
• advisories/BREW-mcp-atlassian-CVE-2026-48817.json
• advisories/BREW-mcp-atlassian-CVE-2026-48818.json
• advisories/BREW-mcp-atlassian-CVE-2026-48990.json
• advisories/BREW-mcp-atlassian-CVE-2026-49272.json
• advisories/BREW-mcp-atlassian-CVE-2026-49476.json
• advisories/BREW-mcp-atlassian-CVE-2026-49477.json
• advisories/BREW-mcp-atlassian-CVE-2026-49852.json
• advisories/BREW-mcp-atlassian-CVE-2026-54282.json
• advisories/BREW-mcp-atlassian-CVE-2026-54283.json
• advisories/BREW-mcp-atlassian-CVE-2026-58203.json
• advisories/BREW-mcp-atlassian-CVE-2026-61632.json
• advisories/BREW-mcp-atlassian-CVE-2026-67422.json
• advisories/BREW-mcp-atlassian-CVE-2026-85999.json
• advisories/BREW-mcp-atlassian-CVE-2026-86000.json
• advisories/BREW-mcp-atlassian-CVE-2026-96760.json
• advisories/BREW-mcp-atlassian-GHSA-7xgj-8392-5q4r.json
• advisories/BREW-mcp-atlassian-GHSA-c2jp-c369-7pvx.json
• advisories/BREW-mcp-atlassian-GHSA-rcfx-77hg-w2wv.json
• advisories/BREW-shodan-CVE-2025-68146.json
• advisories/BREW-shodan-CVE-2026-112906.json
• advisories/BREW-shodan-CVE-2026-112914.json
• advisories/BREW-shodan-CVE-2026-112937.json
• advisories/BREW-shodan-CVE-2026-112940.json
• advisories/BREW-shodan-CVE-2026-22701.json
• advisories/BREW-sysaidmin-CVE-2025-43859.json

Files skipped from review as they are similar to previous changes: 78

• advisories/BREW-jupyterlab-CVE-2025-47287.json
• advisories/BREW-jupyterlab-CVE-2026-49477.json
• advisories/BREW-mcp-atlassian-CVE-2026-86000.json
• advisories/BREW-mcp-atlassian-CVE-2025-62801.json
• advisories/BREW-jupyterlab-CVE-2026-31958.json
• advisories/BREW-jupyterlab-CVE-2026-59928.json
• advisories/BREW-mcp-atlassian-CVE-2026-48817.json
• advisories/BREW-mcp-atlassian-CVE-2026-41479.json
• advisories/BREW-jupyterlab-CVE-2026-35536.json
• advisories/BREW-jupyterlab-CVE-2026-49851.json
• advisories/BREW-mcp-atlassian-CVE-2026-48990.json
• advisories/BREW-jupyterlab-CVE-2026-44898.json
• advisories/BREW-jupyterlab-GHSA-8423-8fgw-73vq.json
• advisories/BREW-jupyterlab-GHSA-wwv5-g3v4-889x.json
• advisories/BREW-jupyterlab-CVE-2026-59922.json
• advisories/BREW-mcp-atlassian-CVE-2025-62800.json
• advisories/BREW-jupyterlab-CVE-2021-32862.json
• advisories/BREW-jupyterlab-CVE-2026-59924.json
• advisories/BREW-jupyterlab-CVE-2026-39377.json
• advisories/BREW-jupyterlab-CVE-2023-28370.json
• advisories/BREW-jupyterlab-CVE-2026-103263.json
• advisories/BREW-jupyterlab-CVE-2025-67726.json
• advisories/BREW-mcp-atlassian-CVE-2026-61632.json
• advisories/BREW-jupyterlab-CVE-2026-103262.json
• advisories/BREW-mcp-atlassian-CVE-2026-114603.json
• advisories/BREW-shodan-CVE-2026-22701.json
• advisories/BREW-mcp-atlassian-GHSA-c2jp-c369-7pvx.json
• advisories/BREW-jupyterlab-CVE-2026-59930.json
• advisories/BREW-jupyterlab-CVE-2024-52804.json
• advisories/BREW-jupyterlab-CVE-2026-59925.json
• advisories/BREW-jupyterlab-CVE-2026-76098.json
• advisories/BREW-mcp-atlassian-CVE-2025-69196.json
• advisories/BREW-jupyterlab-CVE-2026-39378.json
• advisories/BREW-jupyterlab-CVE-2026-85999.json
• advisories/BREW-jupyterlab-CVE-2026-44896.json
• advisories/BREW-mcp-atlassian-CVE-2026-27124.json
• advisories/BREW-jupyterlab-CVE-2026-59929.json
• advisories/BREW-mcp-atlassian-CVE-2026-54283.json
• advisories/BREW-mcp-atlassian-CVE-2026-48818.json
• advisories/BREW-mcp-atlassian-CVE-2025-62727.json
• advisories/BREW-jupyterlab-CVE-2026-44899.json
• advisories/BREW-mcp-atlassian-CVE-2026-28498.json
• advisories/BREW-jupyterlab-CVE-2026-44897.json
• advisories/BREW-jupyterlab-CVE-2026-44708.json
• advisories/BREW-jupyterlab-CVE-2026-59923.json
• advisories/BREW-jupyterlab-CVE-2026-82397.json
• advisories/BREW-mcp-atlassian-CVE-2026-48710.json
• advisories/BREW-jupyterlab-GHSA-pw6j-qg29-8w7f.json
• advisories/BREW-jupyterlab-CVE-2026-33079.json
• advisories/BREW-mcp-atlassian-CVE-2026-46338.json
• advisories/BREW-mcp-atlassian-CVE-2026-67422.json
• advisories/BREW-mcp-atlassian-CVE-2026-44681.json
• advisories/BREW-jupyterlab-GHSA-w235-7p84-xx57.json
• advisories/BREW-mcp-atlassian-CVE-2026-58203.json
• advisories/BREW-jupyterlab-CVE-2026-114140.json
• advisories/BREW-jupyterlab-CVE-2026-49854.json
• advisories/BREW-jupyterlab-CVE-2026-103261.json
• advisories/BREW-mcp-atlassian-CVE-2026-49476.json
• advisories/BREW-mcp-atlassian-CVE-2026-49477.json
• advisories/BREW-jupyterlab-CVE-2026-59927.json
• advisories/BREW-jupyterlab-CVE-2026-49853.json
• advisories/BREW-jupyterlab-CVE-2026-59926.json
• advisories/BREW-jupyterlab-CVE-2026-86000.json
• advisories/BREW-mcp-atlassian-CVE-2026-54282.json
• advisories/BREW-mcp-atlassian-GHSA-rcfx-77hg-w2wv.json
• advisories/BREW-jupyterlab-CVE-2026-49855.json
• advisories/BREW-jupyterlab-GHSA-753j-mpmx-qq6g.json
• advisories/BREW-jupyterlab-CVE-2025-67725.json
• advisories/BREW-mcp-atlassian-CVE-2026-28802.json
• advisories/BREW-mcp-atlassian-CVE-2026-85999.json
• advisories/BREW-mcp-atlassian-CVE-2026-41425.json
• advisories/BREW-mcp-atlassian-CVE-2026-28490.json
• advisories/BREW-mcp-atlassian-CVE-2026-49852.json
• advisories/BREW-shodan-CVE-2025-68146.json
• advisories/BREW-jupyterlab-GHSA-qppv-j76h-2rpx.json
• advisories/BREW-jupyterlab-CVE-2025-53000.json
• advisories/BREW-mcp-atlassian-CVE-2026-27962.json
• advisories/BREW-mcp-atlassian-CVE-2026-32871.json

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.