supabase / realtime / 42618653088
93%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 139
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 93.081% (+0.02%) from 93.061%
42618653088

push

github

web-flow 
fix(deps): Upgrade security relevant dependencies (#2527)

Some new advisories and there were new cowboy/cowlib versions to
boot. Not all of them have fixes yet, so ignoring for now.

Managed to remove some old ones with the newly published fixes.

Output now:

```
Ignored advisories:
  cowboy 2.20.0 - EEF-CVE-2026-115701 (HIGH)
    aka: CVE-2026-115701
    Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion
    https://osv.dev/vulnerability/EEF-CVE-2026-115701

  cowlib 2.21.0 - EEF-CVE-2026-43966 (MEDIUM)
    aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c
    HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2
    https://osv.dev/vulnerability/EEF-CVE-2026-43966

  cowlib 2.21.0 - EEF-CVE-2026-113431 (HIGH)
    aka: CVE-2026-113431
    Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion
    https://osv.dev/vulnerability/EEF-CVE-2026-113431
```

Output of security scanning before this:

```
Advisories:
  cowboy 2.18.0 - EEF-CVE-2026-115701 (HIGH)
    aka: CVE-2026-115701
    Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion
    https://osv.dev/vulnerability/EEF-CVE-2026-115701

  ecto 3.14.2 - EEF-CVE-2026-118391 (HIGH)
    aka: CVE-2026-118391, GHSA-cxjx-vmm2-qr8r
    Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto
    https://osv.dev/vulnerability/EEF-CVE-2026-118391

  cowlib 2.19.0 - EEF-CVE-2026-113431 (HIGH)
    aka: CVE-2026-113431
    Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion
    https://osv.dev/vulnerability/EEF-CVE-2026-113431

Ignored advisories:
  cowlib 2.19.0 - EEF-CVE-2026-43971 (MEDIUM)
    aka: CVE-2026-43971
    Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1
    https://osv.dev/vulnerability/... (continued)

4655 of 5001 relevant lines covered (93.08%)

4915.43 hits per line

Coverage Regressions

Lines Coverage ∆ File
3
88.14
-5.08% lib/realtime/monitoring/gen_rpc_metrics.ex
Jobs
ID Job ID Ran Files Coverage
1 42618653088.1 556
62.51
GitHub Action Run
Source Files on build 42618653088