Repository navigation
Matched advisory candidates (shard 14) - #1636
Open
BrewTestBot wants to merge 1 commit into
Open
BrewTestBot wants to merge 1 commit into
BrewTestBot wants to merge 1 commit into
Conversation
📝 Summary
Priority: Merge Risk:
 |
| Check name | Status | Explanation |
|---|---|---|
| Title check |  |
The title clearly identifies the main change: matched advisory candidates for shard 14. |
| Description check | |
The description explains the automated candidate-generation process, sharding method, partial run status, possible overlap, and review checklist. It relates directly to the changeset. |
| Linked Issues check | |
Check skipped because no linked issues were found for this pull request. |
| Out of Scope Changes check | |
Check skipped because no linked issues were found for this pull request. |
- Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.
Comment @coderabbitai help to get the list of available commands.
BrewTestBot
force-pushed
the
matched-advisories-14
branch
2 times, most recently
from
October 27, 2026 11:18
0c82b36 to
a2d5280
Compare
BrewTestBot
force-pushed
the
matched-advisories-14
branch
from
October 27, 2026 21:37
a2d5280 to
991bfe4
Compare
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
-
-
- Source mode: Auto
- Repository: Homebrew/advisory-database
- Branch: matched-advisories-14
- File: .coderabbit.config.ts
- Commit: 991bfe4
- Layers: Repository TS config (base), Organization UI (inherited)
- Review profile: CHILL
- Plan: Advanced
- Run ID:
11fc9dd2-10b1-4d51-8dfd-7f88ede21392
-
advisories/BREW-dstack-CVE-2021-32677.jsonadvisories/BREW-dstack-CVE-2023-29159.jsonadvisories/BREW-dstack-CVE-2023-30798.jsonadvisories/BREW-dstack-CVE-2023-48795.jsonadvisories/BREW-dstack-CVE-2024-24762.jsonadvisories/BREW-dstack-CVE-2024-40647.jsonadvisories/BREW-dstack-CVE-2024-47874.jsonadvisories/BREW-dstack-CVE-2025-43859.jsonadvisories/BREW-dstack-CVE-2025-54121.jsonadvisories/BREW-dstack-CVE-2025-62727.jsonadvisories/BREW-dstack-CVE-2025-68146.jsonadvisories/BREW-dstack-CVE-2026-110855.jsonadvisories/BREW-dstack-CVE-2026-110856.jsonadvisories/BREW-dstack-CVE-2026-110857.jsonadvisories/BREW-dstack-CVE-2026-110858.jsonadvisories/BREW-dstack-CVE-2026-110859.jsonadvisories/BREW-dstack-CVE-2026-110860.jsonadvisories/BREW-dstack-CVE-2026-112906.jsonadvisories/BREW-dstack-CVE-2026-112914.jsonadvisories/BREW-dstack-CVE-2026-112937.jsonadvisories/BREW-dstack-CVE-2026-112940.jsonadvisories/BREW-dstack-CVE-2026-22701.jsonadvisories/BREW-dstack-CVE-2026-44405.jsonadvisories/BREW-dstack-CVE-2026-48710.jsonadvisories/BREW-dstack-CVE-2026-48817.jsonadvisories/BREW-dstack-CVE-2026-48818.jsonadvisories/BREW-dstack-CVE-2026-49272.jsonadvisories/BREW-dstack-CVE-2026-54282.jsonadvisories/BREW-dstack-CVE-2026-54283.jsonadvisories/BREW-pygitup-CVE-2026-110855.jsonadvisories/BREW-pygitup-CVE-2026-110856.jsonadvisories/BREW-pygitup-CVE-2026-110857.jsonadvisories/BREW-pygitup-CVE-2026-110858.jsonadvisories/BREW-pygitup-CVE-2026-110859.jsonadvisories/BREW-pygitup-CVE-2026-110860.json
-
- advisories/BREW-dstack-CVE-2026-48817.json
- advisories/BREW-dstack-CVE-2026-48818.json
- advisories/BREW-dstack-CVE-2026-54282.json
- advisories/BREW-dstack-CVE-2023-48795.json
- advisories/BREW-dstack-CVE-2023-29159.json
- advisories/BREW-dstack-CVE-2026-22701.json
- advisories/BREW-dstack-CVE-2025-68146.json
- advisories/BREW-dstack-CVE-2026-44405.json
- advisories/BREW-dstack-CVE-2026-48710.json
- advisories/BREW-dstack-CVE-2025-62727.json
- advisories/BREW-dstack-CVE-2026-54283.json
- advisories/BREW-dstack-CVE-2025-54121.json
- advisories/BREW-dstack-CVE-2021-32677.json
- advisories/BREW-dstack-CVE-2024-40647.json
- advisories/BREW-dstack-CVE-2024-24762.json
- advisories/BREW-dstack-CVE-2023-30798.json
Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.
-
Comment on lines
+84
to
+86
| { | ||
| "type": "WEB", | ||
| "url": "https://pypi.org/project/h11" |
There was a problem hiding this comment.
Mark the PyPI project page as a PACKAGE reference.
https://pypi.org/project/h11 is the package home page. Set type to PACKAGE, not WEB. The OSV specification defines PACKAGE for a package home page, and the upstream PYSEC record uses that type for the same URL. (ossf.github.io)
Proposed correction
-
- "type": "WEB", + "type": "PACKAGE", "url": "https://pypi.org/project/h11"
Committable suggestion
-
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.Suggested change{ "type": "WEB", "url": "https://pypi.org/project/h11" { "type": "PACKAGE", "url": "https://pypi.org/project/h11"
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated candidates via
brew advisory-match --formula-list (planned workers) --new-history, sharded by formula (SHA-256 bucket14). See CONTRIBUTING.md for the review checklist.Partial daily run: successful buckets only; the older standing PR may overlap.
Run and review artifacts: https://github.com/Homebrew/advisory-database/actions/runs/40562423753