Skip to content

Matched advisory candidates (shard 31) - #1651

Open
BrewTestBot wants to merge 1 commit into
mainfrom
matched-advisories-31
Open

BrewTestBot wants to merge 1 commit into
mainfrom
matched-advisories-31

Conversation

@BrewTestBot

@BrewTestBot BrewTestBot commented Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

Automated candidates via brew advisory-match --formula-list (planned workers) --new-history, sharded by formula (SHA-256 bucket 31). See CONTRIBUTING.md for the review checklist.

Partial daily run: successful buckets only; the older standing PR may overlap.

Run and review artifacts: https://github.com/Homebrew/advisory-database/actions/runs/40657111712

@coderabbitai

coderabbitai Bot commented Oct 27, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review.

Recent review info
Run configuration
Commits

Reviewing files that changed from the base of the PR and between cdbbedb and ad24412.

Files selected for processing: 5
  • advisories/BREW-parsedmarc-CVE-2026-111063.json
  • advisories/BREW-parsedmarc-CVE-2026-114605.json
  • advisories/BREW-parsedmarc-CVE-2026-49272.json
  • advisories/BREW-robot-framework-robocop-CVE-2026-114613.json
  • advisories/BREW-vite-CVE-2026-53571.json
Files skipped from review as they are similar to previous changes: 2

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📝 Summary

Summary by CodeRabbit

  • Updates
    • Updated the CVE-2026-111063 advisory with a CVSS v4 severity rating, an additional National Vulnerability Database reference and a refreshed modification date.
    • Added security advisories for vulnerabilities affecting parsedmarc and robot-framework-robocop, with affected and fixed version information, severity ratings and references.
    • Updated the Vite advisory’s severity information with a revised CVSS v4 score.
    • Added an advisory for an OAuthLib vulnerability affecting parsedmarc, including affected and fixed versions and related references.

The pull request adds three Homebrew security advisories and updates two existing advisory records. The records contain affected and fixed versions, vulnerability details, severity scores and references.

Changes: Homebrew security advisories

Layer / File(s) Summary
parsedmarc advisory records
advisories/BREW-parsedmarc-CVE-2026-111063.json, advisories/BREW-parsedmarc-CVE-2026-114605.json, advisories/BREW-parsedmarc-CVE-2026-49272.json
Two parsedmarc advisories are added with affected versions, upstream fixes, vulnerability details, severity and references. The existing CVE-2026-111063 advisory gains a CVSS v4 severity entry and an NVD reference. Its modified timestamp changes to 2026-10-28T09:30:47Z.
robot-framework-robocop advisory
advisories/BREW-robot-framework-robocop-CVE-2026-114613.json
The advisory records affected and fixed versions, msgpack fix evidence, vulnerability details, severity and references.
vite advisory update
advisories/BREW-vite-CVE-2026-53571.json
The modified timestamp changes to 2026-10-28T09:48:35Z. The CVSS v3 entry is removed, and the CVSS v4 vector changes.

Priority: Normal

Merge Risk: Minimal · up to ad244

No identified issue currently blocks these advisory updates; routine advisory validation can proceed before merge.

Pre-merge checks: Passed 4
Check name Status Explanation
Description check Passed The description clearly explains that the pull request contains automated advisory candidates for formula shard 31 and provides review context.
Title check Passed The title clearly identifies the pull request as matched advisory candidates for shard 31. It is concise and related to the main changes.
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@BrewTestBot
BrewTestBot force-pushed the matched-advisories-31 branch from a87e840 to cdbbedb Compare October 27, 2026 21:38
@BrewTestBot
BrewTestBot force-pushed the matched-advisories-31 branch from cdbbedb to ad24412 Compare October 28, 2026 11:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant