Skip to content

GH-514: fix(Cypher Shell): patch CVE-2026-75595 vulnerability - #515

Merged
ChanukaUOJ merged 3 commits into
LDFLK:mainfrom
ChanukaUOJ:fix/CVE-2026-75595
Nov 3, 2026
Merged

ChanukaUOJ merged 3 commits into
LDFLK:mainfrom
ChanukaUOJ:fix/CVE-2026-75595

Conversation

@ChanukaUOJ

@ChanukaUOJ ChanukaUOJ commented Nov 3, 2026 •

Copy link
Copy Markdown
Member

This PR closes #514

Summary by CodeRabbit

  • Chores
    • Updated the bundled Cypher Shell to version 2026.10.0. The matching installation and cleanup steps were updated as well; the command wrapper and its permissions remain unchanged. This ensures the packaged tool and its installation process use the same version.

@coderabbitai

coderabbitai Bot commented Nov 3, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 7 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 1b01aae5-a070-47f3-8e2e-f9518343c1a0
Commits

Reviewing files that changed from the base of the PR and between acf5b91 and 67f939c.

Files selected for processing: 2
  • opengin/core-api/docker/Dockerfile
  • opengin/core-api/docker/Dockerfile.choreo

No actionable comments were generated in the recent review.

Walkthrough

The Dockerfile now downloads Cypher Shell 2026.10.0 instead of 5.26.5. The extraction, library installation, and cleanup paths use the matching version.

Changes: Cypher Shell version update

Layer / File(s) Summary
Update Cypher Shell version
opengin/core-api/docker/Dockerfile.choreo
The download, extraction, library source, and cleanup paths now use Cypher Shell 2026.10.0.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Bug fix

Possibly related issues

  • LDFLK/OpenGIN issue 514: The issue proposes upgrading Cypher Shell to 2026.10.0. This PR makes that version change, but the diff does not confirm the transitive netty-handler version.

Suggested reviewers: vibhatha

Merge Risk: Minimal · previous review acf5b

The Cypher Shell update has no established merge-blocking issue. The download is available; normal image-build validation remains appropriate.

Pre-merge checks: Passed 4
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Title check Passed The title says the PR patches CVE-2026-75595 in Cypher Shell. The raw summary shows the Dockerfile now downloads Cypher Shell 2026.10.0 instead of 5.26.5, with matching paths and names. The change is …
Full details: Title check

Explanation

The title says the PR patches CVE-2026-75595 in Cypher Shell. The raw summary shows the Dockerfile now downloads Cypher Shell 2026.10.0 instead of 5.26.5, with matching paths and names. The change is a version bump of Cypher Shell in the Dockerfile. The title names the Cypher Shell component and the vulnerability fix, which matches the change. It does not state the version bump or the Dockerfile scope, so it is a partial description of the main change. The title uses the 'GH-514: fix(...)' prefix format, which is acceptable.

Finishing Touches
Generate unit tests (beta)
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Tip

🎯 Customize your risk assessments

Guide how CodeRabbit assesses merge risk and security architecture risk. Highlight sensitive changes and explain your security boundaries using Merge Risk Instructions and Security Risk Instructions in your review settings. Security architecture risk assessments require the Advanced plan or above.

✅ Automatic approvals, with your rules

Let CodeRabbit approve pull requests once required threads are resolved, pre-merge checks pass, and your risk limits are met. Enable Automatic approvals in review settings, with overrides for teams or file paths.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

CodeRabbit Verify

  • Run CodeRabbit Verify to test the changes in this pull request.
Recent review info
Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 4460722e-9abf-4885-b904-496ce31d3c43
Commits

Reviewing files that changed from the base of the PR and between 3dea716 and acf5b91.

Files selected for processing: 1
  • opengin/core-api/docker/Dockerfile.choreo

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

@ChanukaUOJ ChanukaUOJ changed the title fix: CVE-2026-75595 (vulnerability) - Cypher Shell GH-514: fix: CVE-2026-75595 (vulnerability) - Cypher Shell Nov 3, 2026
@ChanukaUOJ ChanukaUOJ changed the title GH-514: fix: CVE-2026-75595 (vulnerability) - Cypher Shell GH-514: fix(Cypher Shell): patch CVE-2026-75595 vulnerability Nov 3, 2026
@ChanukaUOJ
ChanukaUOJ requested a review from zaeema-n November 3, 2026 08:38

@zaeema-n zaeema-n left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@ChanukaUOJ
ChanukaUOJ merged commit 3e645ef into LDFLK:main Nov 3, 2026
8 of 9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

fix: CVE-2026-75595 (vulnerability) - Cypher Shell

2 participants