[github-actions]

📦 Vulnerable Dependencies

Severity	ID	Contextual Analysis	Dependency Path
Critical	CVE-2026-111497	Not Applicable	1 Direct github.com/andybalholm/brotli:1.2.1 1 Transitive github.com/andybalholm/brotli:1.2.1

🔖 Details

Vulnerability Details

Contextual Analysis:	Not Applicable
CVSS V3:	-
Dependency Path:	github.com/andybalholm/brotli: 1.2.1 (Transitive) Fix Version: 1.2.7

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.

Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

---

🐸 JFrog Frogbot

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI; Enforced overrides: Organization, Workspace
• Review profile: CHILL
• Plan: Advanced
• Run ID: 7109c9d4-e555-46f4-89b6-b113bbc5ff00

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}