Skip to content

Matched advisory candidates #142

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
BrewTestBot wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

Matched advisory candidates #142

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
10 changes: 5 additions & 5 deletions advisories/BREW-apprise-CVE-2021-39229.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"schema_version": "1.7.3",
"id": "BREW-apprise-CVE-2021-39229",
"published": "2026-08-13T16:35:55Z",
"modified": "2026-08-13T16:35:55Z",
"modified": "2026-08-22T08:39:17Z",
"upstream": [
"GHSA-qhmp-h54x-38qr",
"CVE-2021-39229",
Expand Down Expand Up @@ -44,15 +44,15 @@
"strategy": "registry",
"ecosystem": "PyPI",
"name": "apprise",
"subject_version": "1.12.0",
"key": "pkg:pypi/apprise@1.12.0"
"subject_version": "1.13.0",
"key": "pkg:pypi/apprise@1.13.0"
},
{
"strategy": "registry",
"ecosystem": "PyPI",
"name": "apprise",
"subject_version": "1.12.0",
"key": "pkg:pypi/apprise@1.12.0"
"subject_version": "1.13.0",
"key": "pkg:pypi/apprise@1.13.0"
}
]
},
Expand Down
12 changes: 6 additions & 6 deletions advisories/BREW-apprise-CVE-2024-3651.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"schema_version": "1.7.3",
"id": "BREW-apprise-CVE-2024-3651",
"published": "2026-08-13T16:35:55Z",
"modified": "2026-08-13T16:35:55Z",
"modified": "2026-08-22T08:39:17Z",
"upstream": [
"GHSA-jjg7-2v4v-x38h",
"CVE-2024-3651",
Expand Down Expand Up @@ -33,7 +33,7 @@
"range_state": "fixed",
"upstream_fixed_in": "3.7",
"resource": "idna",
"resource_purl": "pkg:pypi/idna@3.18"
"resource_purl": "pkg:pypi/idna@3.19"
}
}
],
Expand All @@ -46,16 +46,16 @@
"strategy": "registry",
"ecosystem": "PyPI",
"name": "idna",
"subject_version": "3.18",
"key": "pkg:pypi/idna@3.18",
"subject_version": "3.19",
"key": "pkg:pypi/idna@3.19",
"resource": "idna"
},
{
"strategy": "registry",
"ecosystem": "PyPI",
"name": "idna",
"subject_version": "3.18",
"key": "pkg:pypi/idna@3.18",
"subject_version": "3.19",
"key": "pkg:pypi/idna@3.19",
"resource": "idna"
}
]
Expand Down
12 changes: 6 additions & 6 deletions advisories/BREW-apprise-CVE-2025-69534.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"schema_version": "1.7.3",
"id": "BREW-apprise-CVE-2025-69534",
"published": "2026-08-13T16:35:55Z",
"modified": "2026-08-13T16:35:55Z",
"modified": "2026-08-22T08:39:17Z",
"upstream": [
"GHSA-5wmx-573v-2qwq",
"CVE-2025-69534",
Expand Down Expand Up @@ -33,7 +33,7 @@
"range_state": "fixed",
"upstream_fixed_in": "3.8.1",
"resource": "markdown",
"resource_purl": "pkg:pypi/markdown@3.10.2"
"resource_purl": "pkg:pypi/markdown@3.10.3"
}
}
],
Expand All @@ -46,16 +46,16 @@
"strategy": "registry",
"ecosystem": "PyPI",
"name": "markdown",
"subject_version": "3.10.2",
"key": "pkg:pypi/markdown@3.10.2",
"subject_version": "3.10.3",
"key": "pkg:pypi/markdown@3.10.3",
"resource": "markdown"
},
{
"strategy": "registry",
"ecosystem": "PyPI",
"name": "markdown",
"subject_version": "3.10.2",
"key": "pkg:pypi/markdown@3.10.2",
"subject_version": "3.10.3",
"key": "pkg:pypi/markdown@3.10.3",
"resource": "markdown"
}
]
Expand Down
12 changes: 6 additions & 6 deletions advisories/BREW-apprise-CVE-2026-45409.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"schema_version": "1.7.3",
"id": "BREW-apprise-CVE-2026-45409",
"published": "2026-08-13T16:35:55Z",
"modified": "2026-08-13T16:35:55Z",
"modified": "2026-08-22T08:39:17Z",
"upstream": [
"GHSA-65pc-fj4g-8rjx",
"CVE-2026-45409",
Expand Down Expand Up @@ -33,7 +33,7 @@
"range_state": "fixed",
"upstream_fixed_in": "3.15",
"resource": "idna",
"resource_purl": "pkg:pypi/idna@3.18"
"resource_purl": "pkg:pypi/idna@3.19"
}
}
],
Expand All @@ -46,16 +46,16 @@
"strategy": "registry",
"ecosystem": "PyPI",
"name": "idna",
"subject_version": "3.18",
"key": "pkg:pypi/idna@3.18",
"subject_version": "3.19",
"key": "pkg:pypi/idna@3.19",
"resource": "idna"
},
{
"strategy": "registry",
"ecosystem": "PyPI",
"name": "idna",
"subject_version": "3.18",
"key": "pkg:pypi/idna@3.18",
"subject_version": "3.19",
"key": "pkg:pypi/idna@3.19",
"resource": "idna"
}
]
Expand Down
8 changes: 4 additions & 4 deletions advisories/BREW-aws-cdk-CVE-2024-45037.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"schema_version": "1.7.3",
"id": "BREW-aws-cdk-CVE-2024-45037",
"published": "2026-08-13T16:36:30Z",
"modified": "2026-08-19T08:40:15Z",
"modified": "2026-08-22T08:39:46Z",
"upstream": [
"CVE-2024-45037",
"GHSA-qj85-69xf-2vxq"
Expand Down Expand Up @@ -43,15 +43,15 @@
"strategy": "git",
"ecosystem": "GIT",
"name": "https://github.com/aws/aws-cdk",
"subject_version": "2.1137.0",
"subject_version": "2.1138.0",
"key": "https://github.com/aws/aws-cdk"
},
{
"strategy": "registry",
"ecosystem": "npm",
"name": "aws-cdk",
"subject_version": "2.1137.0",
"key": "pkg:npm/aws-cdk@2.1137.0"
"subject_version": "2.1138.0",
"key": "pkg:npm/aws-cdk@2.1138.0"
}
]
},
Expand Down
8 changes: 4 additions & 4 deletions advisories/BREW-aws-cdk-CVE-2025-2598.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"schema_version": "1.7.3",
"id": "BREW-aws-cdk-CVE-2025-2598",
"published": "2026-08-13T16:36:30Z",
"modified": "2026-08-19T08:40:15Z",
"modified": "2026-08-22T08:39:46Z",
"upstream": [
"CVE-2025-2598",
"GHSA-v63m-x9r9-8gqp"
Expand Down Expand Up @@ -43,15 +43,15 @@
"strategy": "git",
"ecosystem": "GIT",
"name": "https://github.com/aws/aws-cdk",
"subject_version": "2.1137.0",
"subject_version": "2.1138.0",
"key": "https://github.com/aws/aws-cdk"
},
{
"strategy": "registry",
"ecosystem": "npm",
"name": "aws-cdk",
"subject_version": "2.1137.0",
"key": "pkg:npm/aws-cdk@2.1137.0"
"subject_version": "2.1138.0",
"key": "pkg:npm/aws-cdk@2.1138.0"
}
]
},
Expand Down
75 changes: 75 additions & 0 deletions advisories/BREW-azure-cli-CVE-2026-13346.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,75 @@
{
"schema_version": "1.7.3",
"id": "BREW-azure-cli-CVE-2026-13346",
"published": "2026-08-22T08:40:17Z",
"modified": "2026-08-22T08:40:17Z",
"upstream": [
"PYSEC-2026-3721",
"CVE-2026-13346"
],
"affected": [
{
"package": {
"ecosystem": "Homebrew",
"name": "azure-cli",
"purl": "pkg:brew/azure-cli"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.89.1"
}
]
}
],
"ecosystem_specific": {
"fix": "bump",
"range_state": "fixed",
"upstream_fixed_in": "26.2",
"resource": "pip",
"resource_purl": "pkg:pypi/pip@26.2.1"
}
}
],
"database_specific": {
"source": "matched",
"strategy": "registry",
"confidence": "high",
"upstream_evidence": [
{
"strategy": "registry",
"ecosystem": "PyPI",
"name": "pip",
"subject_version": "26.2.1",
"key": "pkg:pypi/pip@26.2.1",
"resource": "pip"
}
]
},
"details": "pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.\n\n\n\n\nThis vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone are not able to exploit this vulnerability. Note that this vulnerability only materially impacts users running `pip download` with the `--only-binary` option as installing source distributions from an untrusted index is already an unsafe operation that executes code during install time.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
}
],
"references": [
{
"type": "ADVISORY",
"url": "http://www.openwall.com/lists/oss-security/2026/07/29/7"
},
{
"type": "ADVISORY",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/L2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX/"
},
{
"type": "FIX",
"url": "https://github.com/pypa/pip/pull/14110"
}
]
}
12 changes: 6 additions & 6 deletions advisories/BREW-badkeys-CVE-2026-21439.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"schema_version": "1.7.3",
"id": "BREW-badkeys-CVE-2026-21439",
"published": "2026-08-13T16:37:04Z",
"modified": "2026-08-13T16:37:04Z",
"modified": "2026-08-22T08:40:18Z",
"upstream": [
"CVE-2026-21439",
"GHSA-wjpc-4f29-83h3",
Expand Down Expand Up @@ -44,22 +44,22 @@
"strategy": "git",
"ecosystem": "GIT",
"name": "https://github.com/badkeys/badkeys",
"subject_version": "0.0.19",
"subject_version": "0.0.20",
"key": "https://github.com/badkeys/badkeys"
},
{
"strategy": "registry",
"ecosystem": "PyPI",
"name": "badkeys",
"subject_version": "0.0.19",
"key": "pkg:pypi/badkeys@0.0.19"
"subject_version": "0.0.20",
"key": "pkg:pypi/badkeys@0.0.20"
},
{
"strategy": "registry",
"ecosystem": "PyPI",
"name": "badkeys",
"subject_version": "0.0.19",
"key": "pkg:pypi/badkeys@0.0.19"
"subject_version": "0.0.20",
"key": "pkg:pypi/badkeys@0.0.20"
}
]
},
Expand Down
Loading