[BrewTestBot]

Automated candidates via brew advisory-match --formula-list (planned workers) --new-history, sharded by formula (SHA-256 bucket 09). See CONTRIBUTING.md for the review checklist.

Partial daily run: successful buckets only; the older standing PR may overlap.

Run and review artifacts: https://github.com/Homebrew/advisory-database/actions/runs/40562423753

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Homebrew/advisory-database
• Branch: matched-advisories-09
• File: .coderabbit.config.ts
• Commit: f2b492e
• Layers: Repository TS config (base), Organization UI (inherited)
• Review profile: CHILL
• Plan: Advanced
• Run ID: e0ee63c6-428b-45be-a847-a3ceb157d2ac

Commits

Reviewing files that changed from the base of the PR and between f5f213f and f2b492e.

Files selected for processing: 1

• advisories/BREW-ldeep-CVE-2026-114605.json

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📝 Summary

Summary by CodeRabbit

• Security
  • Added a security advisory for ldeep versions from 1.0.35, covering CVE-2026-114605. Crafted DNS messages may cause excessive CPU use during name decompression.
  • The advisory identifies dnspython 2.9.0 as the upstream fix version and includes severity information and reference links.

Adds a Homebrew advisory for CVE-2026-114605. It identifies ldeep as affected from version 1.0.35 and records dnspython 2.9.0 as the upstream fixed version.

Changes: ldeep vulnerability advisory

Layer / File(s)	Summary
Advisory record advisories/BREW-ldeep-CVE-2026-114605.json	The advisory records the affected version, upstream fixed version, vulnerability details, CVSS 3.1 severity, registry evidence, and references.

Priority: Normal

Merge Risk: Minimal · up to f2b49

This change adds a single advisory record for ldeep and CVE-2026-114605. The range-closing concern was checked against formula history and the repository's guidance and does not apply. No actionable merge-blocking risk remains.

Pre-merge checks: 4

Check name	Status	Explanation
Title check		The title clearly identifies the pull request as a set of matched advisory candidates for shard 09. It is concise and related to the main change.
Description check		The description explains that the pull request contains automated advisory candidates, identifies shard 09, and provides review guidance and run artefacts. It is directly related to the changeset.
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}