pythonstartreedata/pinot-dbapi #108Not a task: already works

httpx version vulnerability

envgap__startreedata__pinot-dbapi-108

Original GitHub issue ↗Dated source checkout ↗Opened 2025-05-31

01 / FAILURE SIGNATURE

As reported upstream

No identifying execution failure has been captured.

Not a benchmark task.

The project already builds and runs before the fix, so there is nothing to repair.

02 / ENVIRONMENT RECIPE

Base commit: 72adea4b04d9887597d0f6ec35500fc4d3f8f938
Manifest: pyproject.toml
Reproduce: Awaiting issue-specific recipe
Run under trace: Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

startreedata/pinot-dbapi #108 · read the original issue

There is vulnerability in the latest version of pinotdb 5.6.0:

CVE description: https://nvd.nist.gov/vuln/detail/CVE-2025-43859

Affected version: 0.14.0
Fixed version: 0.16.0

This h11 version requires httpx version 0.28.1

Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched

[]