Skip to content

chore: fix CVE-2026-90711 - #4015

Merged
mkurapov merged 1 commit into
max/fix-body-parser-cvefrom
max/fix-proxy-addr-vuln
Oct 28, 2026
Merged

mkurapov merged 1 commit into
max/fix-body-parser-cvefrom
max/fix-proxy-addr-vuln

Conversation

@mkurapov

Copy link
Copy Markdown
Collaborator

Changes proposed in this pull request

Context

Checklist

  • Related issues linked using fixes #number
  • Tests added/updated
  • Make sure that all checks pass
  • Bruno collection updated (if necessary)
  • Documentation issue created with user-docs label (if necessary)
  • OpenAPI specs updated (if necessary)

@mkurapov
mkurapov added this pull request to stack #4016 October 28, 2026 07:47
@netlify

netlify Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for brilliant-pasca-3e80ec canceled.

Name Link
🔨 Latest commit 9279981
🔍 Latest deploy log https://app.netlify.com/projects/brilliant-pasca-3e80ec/deploys/6ae1c1bef269ab300fcd3cca

@github-actions

github-actions Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

🚀 Performance Test Results

Test Configuration:

  • VUs: 4
  • Duration: 1m0s

Test Metrics:

  • Requests/s: 86.22
  • Iterations/s: 28.76
  • Failed Requests: 0.00% (0 of 5187)
📜 Logs

> performance@1.0.0 run-tests:testenv /home/runner/work/rafiki/rafiki/test/performance
> ./scripts/run-tests.sh -e test -k -q --vus 4 --duration 1m

Cloud Nine GraphQL API is up: http://localhost:3101/graphql
Cloud Nine Wallet Address is up: http://localhost:3100/
Happy Life Bank Address is up: http://localhost:4100/
cloud-nine-wallet-test-backend already set
cloud-nine-wallet-test-auth already set
happy-life-bank-test-backend already set
happy-life-bank-test-auth already set
     data_received..................: 1.9 MB 31 kB/s
     data_sent......................: 4.0 MB 66 kB/s
     http_req_blocked...............: avg=5.54µs   min=961ns   med=4.17µs   max=1.05ms   p(90)=5.86µs   p(95)=6.5µs   
     http_req_connecting............: avg=262ns    min=0s      med=0s       max=829.45µs p(90)=0s       p(95)=0s      
     http_req_duration..............: avg=45.91ms  min=5.4ms   med=35.2ms   max=244.95ms p(90)=82.74ms  p(95)=92ms    
       { expected_response:true }...: avg=45.91ms  min=5.4ms   med=35.2ms   max=244.95ms p(90)=82.74ms  p(95)=92ms    
     http_req_failed................: 0.00%  ✓ 0         ✗ 5187
     http_req_receiving.............: avg=75.78µs  min=13.84µs med=65.21µs  max=2.22ms   p(90)=100.37µs p(95)=129.36µs
     http_req_sending...............: avg=30.25µs  min=4.59µs  med=20.83µs  max=2.84ms   p(90)=30.94µs  p(95)=48.9µs  
     http_req_tls_handshaking.......: avg=0s       min=0s      med=0s       max=0s       p(90)=0s       p(95)=0s      
     http_req_waiting...............: avg=45.81ms  min=5.31ms  med=35.1ms   max=244.88ms p(90)=82.64ms  p(95)=91.91ms 
     http_reqs......................: 5187   86.221768/s
     iteration_duration.............: avg=138.99ms min=84.45ms med=131.88ms max=523.78ms p(90)=175.47ms p(95)=190.59ms
     iterations.....................: 1730   28.757212/s
     vus............................: 4      min=4       max=4 
     vus_max........................: 4      min=4       max=4 

@mkurapov
mkurapov force-pushed the max/fix-proxy-addr-vuln branch 4 times, most recently from d577446 to 81f87b8 Compare October 28, 2026 09:26
@mkurapov
mkurapov force-pushed the max/fix-proxy-addr-vuln branch from 81f87b8 to 9279981 Compare October 28, 2026 09:34
@mkurapov
mkurapov merged commit dec1444 into main Oct 28, 2026
40 of 58 checks passed
@mkurapov
mkurapov deleted the max/fix-proxy-addr-vuln branch October 28, 2026 11:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants