{"name":"raven","full_name":"raven","tap":"homebrew/core","oldnames":[],"aliases":[],"versioned_formulae":[],"desc":"Risk Analysis and Vulnerability Enumeration for CI/CD","license":"Apache-2.0","homepage":"https://github.com/CycodeLabs/raven","versions":{"stable":"1.0.9","head":null,"bottle":true},"urls":{"stable":{"url":"https://files.pythonhosted.org/packages/d8/b6/4bc5aecae28382720fca4e9492a623e3d821d96e8f4d06e4335c77779ebd/raven_cycode-1.0.9.tar.gz","tag":null,"revision":null,"using":null,"checksum":"a7cb02102b43dbaad3b50970f92090b86a3b3bb65aae9976a3887f4c8c935238"}},"patches":[],"revision":0,"version_scheme":0,"compatibility_version":null,"autobump":true,"no_autobump_message":null,"skip_livecheck":false,"bottle":{"stable":{"rebuild":2,"root_url":"https://ghcr.io/v2/homebrew/core","files":{"arm64_golden_gate":{"cellar":":any","url":"https://ghcr.io/v2/homebrew/core/raven/blobs/sha256:4f6985ca01ac13b6b31aeaeac70670d41fbede6858121b51d5cc654cda7e1a36","sha256":"4f6985ca01ac13b6b31aeaeac70670d41fbede6858121b51d5cc654cda7e1a36"},"arm64_tahoe":{"cellar":":any","url":"https://ghcr.io/v2/homebrew/core/raven/blobs/sha256:d3e905633eb1f0d3d7e5fc048e8fe2fa6a5790243c0181db8e2c190705fe8a80","sha256":"d3e905633eb1f0d3d7e5fc048e8fe2fa6a5790243c0181db8e2c190705fe8a80"},"arm64_sequoia":{"cellar":":any","url":"https://ghcr.io/v2/homebrew/core/raven/blobs/sha256:01217a819e571872f899fa5d9c6ceb79618c31e6a837936457c241a1ea555b2b","sha256":"01217a819e571872f899fa5d9c6ceb79618c31e6a837936457c241a1ea555b2b"},"arm64_sonoma":{"cellar":":any","url":"https://ghcr.io/v2/homebrew/core/raven/blobs/sha256:7aa0a40d4446df2aad0c7d8db6e29701607ab32335e4a70101b77d9c1ea99ce2","sha256":"7aa0a40d4446df2aad0c7d8db6e29701607ab32335e4a70101b77d9c1ea99ce2"},"sonoma":{"cellar":":any","url":"https://ghcr.io/v2/homebrew/core/raven/blobs/sha256:ce38a5aedcd289f909feea97abe3d5b0c7e1226832d7035561aafac30ba8b688","sha256":"ce38a5aedcd289f909feea97abe3d5b0c7e1226832d7035561aafac30ba8b688"},"arm64_linux":{"cellar":":any_skip_relocation","url":"https://ghcr.io/v2/homebrew/core/raven/blobs/sha256:2b2a4dc459ba3a8920aabae6e35d660a72c5db180028a16234e9f9cada84be28","sha256":"2b2a4dc459ba3a8920aabae6e35d660a72c5db180028a16234e9f9cada84be28"},"x86_64_linux":{"cellar":":any_skip_relocation","url":"https://ghcr.io/v2/homebrew/core/raven/blobs/sha256:9bfe3e68919eef6de9f572601c59174431425ba393bc5a9b7b8a84a59a757123","sha256":"9bfe3e68919eef6de9f572601c59174431425ba393bc5a9b7b8a84a59a757123"}}}},"pour_bottle_only_if":null,"keg_only":false,"keg_only_reason":null,"options":[],"build_dependencies":[],"dependencies":["certifi","libyaml","python@3.14"],"test_dependencies":[],"recommended_dependencies":[],"optional_dependencies":[],"uses_from_macos":[],"uses_from_macos_bounds":[],"requirements":[],"conflicts_with":[],"conflicts_with_reasons":[],"link_overwrite":[],"caveats":null,"installed":[],"linked_keg":null,"pinned":false,"outdated":false,"deprecated":false,"deprecation_date":null,"deprecation_reason":null,"deprecation_replacement_formula":null,"deprecation_replacement_cask":null,"deprecate_args":null,"disabled":false,"disable_date":null,"disable_reason":null,"disable_replacement_formula":null,"disable_replacement_cask":null,"disable_args":null,"post_install_steps":[],"post_install_defined":false,"service":null,"tap_git_head":"d9d975694fafad366549689ea9c74a4bc790ba65","ruby_source_path":"Formula/r/raven.rb","ruby_source_checksum":{"sha256":"ce28c94b09cbaf0bd5b9bd315a1397855cfe00b91aeb27f064c29c6f9edcac31"},"variations":{},"executables":["raven"],"vulnerabilities":{"open":[{"id":"BREW-raven-CVE-2024-34062","upstream":["GHSA-g7vv-2v7x-gj9p","CVE-2024-34062","PYSEC-2026-1976"],"summary":"tqdm CLI arguments injection attack","severity":"low"},{"id":"BREW-raven-CVE-2024-35195","upstream":["GHSA-9wx4-h78v-vm56","CVE-2024-35195","PYSEC-2026-1873"],"summary":"Requests `Session` object does not verify requests after making first request with verify=False","severity":"medium"},{"id":"BREW-raven-CVE-2024-37891","upstream":["GHSA-34jh-p97f-mpxf","CVE-2024-37891","PYSEC-2026-1995"],"summary":"urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects","severity":"medium"},{"id":"BREW-raven-CVE-2024-47081","upstream":["GHSA-9hjg-9r4m-mvj7","CVE-2024-47081","PYSEC-2026-1872"],"summary":"Requests vulnerable to .netrc credentials leak via malicious URLs","severity":"medium"},{"id":"BREW-raven-CVE-2025-50181","upstream":["GHSA-pq67-6m6q-mj2v","CVE-2025-50181","PYSEC-2026-1999"],"summary":"urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation","severity":"medium"},{"id":"BREW-raven-CVE-2025-66418","upstream":["GHSA-gm62-xv2j-4w53","CVE-2025-66418","PYSEC-2026-1998"],"summary":"urllib3 allows an unbounded number of links in the decompression chain"},{"id":"BREW-raven-CVE-2025-66471","upstream":["GHSA-2xpw-w6gg-jr37","CVE-2025-66471","PYSEC-2026-1994"],"summary":"urllib3 streaming API improperly handles highly compressed data"},{"id":"BREW-raven-CVE-2025-71176","upstream":["GHSA-6w46-j5rx-g56g","CVE-2025-71176","PYSEC-2026-1845"],"summary":"pytest has vulnerable tmpdir handling","severity":"medium"},{"id":"BREW-raven-CVE-2026-21441","upstream":["GHSA-38jv-5279-wg99","CVE-2026-21441","PYSEC-2026-1996"],"summary":"Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)","severity":"high"},{"id":"BREW-raven-CVE-2026-25645","upstream":["GHSA-gc5v-m9x4-r6x2","CVE-2026-25645","PYSEC-2026-2275"],"summary":"Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function","severity":"medium"},{"id":"BREW-raven-CVE-2026-44431","upstream":["GHSA-qccp-gfcp-xxvc","CVE-2026-44431","PYSEC-2026-141"],"summary":"urllib3: Sensitive headers forwarded across origins in proxied low-level redirects","severity":"medium"},{"id":"BREW-raven-CVE-2026-4539","upstream":["GHSA-5239-wwwm-4pmq","CVE-2026-4539","PYSEC-2026-2987"],"summary":"Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching","severity":"low"},{"id":"BREW-raven-CVE-2026-45409","upstream":["GHSA-65pc-fj4g-8rjx","CVE-2026-45409","PYSEC-2026-215"],"summary":"Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix","severity":"medium"},{"id":"BREW-raven-CVE-2026-97687","upstream":["GHSA-8988-9cw3-xx77","CVE-2026-97687","PYSEC-2026-4175"],"summary":"urllib3: HTTPS proxy TLS configuration may be ignored or overridden"},{"id":"BREW-raven-CVE-2026-97689","upstream":["GHSA-vxq7-64xx-v4gw","CVE-2026-97689","PYSEC-2026-4177"],"summary":"urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory"}],"patched":[],"fixed_count":1},"analytics":{"install":{"30d":{"raven":2},"90d":{"raven":30},"365d":{"raven":154}},"install_on_request":{"30d":{"raven":2},"90d":{"raven":30},"365d":{"raven":154}},"build_error":{"30d":{"raven":0}}},
"generated_date":"2026-10-07"}