Skip to content

chore: fix CVE-2026-87776 - #4018

Merged
mkurapov merged 6 commits into
max/fix-proxy-addr-vulnfrom
max/fix-CVE-2026-87776
Oct 28, 2026
Merged

mkurapov merged 6 commits into
max/fix-proxy-addr-vulnfrom
max/fix-CVE-2026-87776

Conversation

@mkurapov

Copy link
Copy Markdown
Collaborator

Changes proposed in this pull request

Context

Checklist

  • Related issues linked using fixes #number
  • Tests added/updated
  • Make sure that all checks pass
  • Bruno collection updated (if necessary)
  • Documentation issue created with user-docs label (if necessary)
  • OpenAPI specs updated (if necessary)

@mkurapov
mkurapov added this pull request to stack #4016 October 28, 2026 08:37
@netlify

netlify Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for brilliant-pasca-3e80ec canceled.

Name Link
🔨 Latest commit abcc528
🔍 Latest deploy log https://app.netlify.com/projects/brilliant-pasca-3e80ec/deploys/6ae1b4463ec2b457ca788bab

@netlify

netlify Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for brilliant-pasca-3e80ec canceled.

Name Link
🔨 Latest commit 373b835
🔍 Latest deploy log https://app.netlify.com/projects/brilliant-pasca-3e80ec/deploys/6ae1d2bbefc78eb9366663ec

@mkurapov
mkurapov force-pushed the max/fix-CVE-2026-87776 branch from abcc528 to 778836e Compare October 28, 2026 08:38
@github-actions

github-actions Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

🚀 Performance Test Results

Test Configuration:

  • VUs: 4
  • Duration: 1m0s

Test Metrics:

  • Requests/s: 81.54
  • Iterations/s: 27.18
  • Failed Requests: 0.00% (0 of 4897)
📜 Logs

> performance@1.0.0 run-tests:testenv /home/runner/work/rafiki/rafiki/test/performance
> ./scripts/run-tests.sh -e test -k -q --vus 4 --duration 1m

Cloud Nine GraphQL API is up: http://localhost:3101/graphql
Cloud Nine Wallet Address is up: http://localhost:3100/
Happy Life Bank Address is up: http://localhost:4100/
cloud-nine-wallet-test-backend already set
cloud-nine-wallet-test-auth already set
happy-life-bank-test-backend already set
happy-life-bank-test-auth already set
     data_received..................: 1.8 MB 29 kB/s
     data_sent......................: 3.8 MB 63 kB/s
     http_req_blocked...............: avg=6.33µs   min=922ns   med=4.91µs   max=2.01ms   p(90)=6.65µs   p(95)=7.33µs  
     http_req_connecting............: avg=126ns    min=0s      med=0s       max=301.51µs p(90)=0s       p(95)=0s      
     http_req_duration..............: avg=48.56ms  min=5.2ms   med=36.9ms   max=230.07ms p(90)=85.6ms   p(95)=92.75ms 
       { expected_response:true }...: avg=48.56ms  min=5.2ms   med=36.9ms   max=230.07ms p(90)=85.6ms   p(95)=92.75ms 
     http_req_failed................: 0.00%  ✓ 0         ✗ 4897
     http_req_receiving.............: avg=83.51µs  min=12.51µs med=76.21µs  max=2.41ms   p(90)=107.45µs p(95)=150.67µs
     http_req_sending...............: avg=32.78µs  min=5.17µs  med=23.14µs  max=2.16ms   p(90)=33.47µs  p(95)=53.92µs 
     http_req_tls_handshaking.......: avg=0s       min=0s      med=0s       max=0s       p(90)=0s       p(95)=0s      
     http_req_waiting...............: avg=48.44ms  min=5.08ms  med=36.76ms  max=230.01ms p(90)=85.47ms  p(95)=92.59ms 
     http_reqs......................: 4897   81.544725/s
     iteration_duration.............: avg=147.12ms min=95.07ms med=142.56ms max=463.19ms p(90)=176.98ms p(95)=192.5ms 
     iterations.....................: 1632   27.176024/s
     vus............................: 4      min=4       max=4 
     vus_max........................: 4      min=4       max=4 

@mkurapov
mkurapov force-pushed the max/fix-CVE-2026-87776 branch 2 times, most recently from d3f6e1c to 3ba606b Compare October 28, 2026 09:26
@mkurapov
mkurapov force-pushed the max/fix-CVE-2026-87776 branch from 3ba606b to c5ebeab Compare October 28, 2026 09:34
@mkurapov mkurapov changed the title chore: add override for compression chore: fix CVE-2026-87776 Oct 28, 2026
@mkurapov
mkurapov merged commit 99bf229 into main Oct 28, 2026
49 of 58 checks passed
@mkurapov
mkurapov deleted the max/fix-CVE-2026-87776 branch October 28, 2026 11:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants