Skip to content

docs: add prettier-ignore tags and format#697

Merged
AlessandroPomponio merged 4 commits intomainfrom
ap_691_add_prettier_ignore_tags
Mar 18, 2026
Merged

docs: add prettier-ignore tags and format#697
AlessandroPomponio merged 4 commits intomainfrom
ap_691_add_prettier_ignore_tags

Conversation

@AlessandroPomponio
Copy link
Member

Resolves #691

Signed-off-by: Alessandro Pomponio <alessandro.pomponio1@ibm.com>
@DRL-NextGen
Copy link
Member

DRL-NextGen commented Mar 16, 2026

Checks Summary

Last run: 2026-03-18T10:04:56.523Z

Code Risk Analyzer vulnerability scan found 1 vulnerabilities:

Severity Identifier Package Details Fix
◻ Unknown CVE-2026-25048 xgrammar
xgrammar vulnerable to DoS via multi-layer nestingGHSA-7rgv-gqhr-fxg3

xgrammar:0.1.29->vllm:0.17.1
0.1.32

Mend Unified Agent vulnerability scan found 1 vulnerabilities:

Severity Identifier Package Details Fix
🔺 High CVE-2026-30922 pyasn1-0.6.2-py3-none-any.whl
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the "pyasn1" library is vulnerable to ...pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the "pyasn1" library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested "SEQUENCE" ("0x30") or "SET" ("0x31") tags with "Indefinite Length" ("0x80") markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a "RecursionError" or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 ("MAX_OID_ARC_CONTINUATION_OCTETS") does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.
Upgrade to version https://github.com/pyasn1/pyasn1.git - v0.6.3,pyasn1 - 0.6.3

Signed-off-by: Alessandro Pomponio <alessandro.pomponio1@ibm.com>
Signed-off-by: Alessandro Pomponio <alessandro.pomponio1@ibm.com>
Signed-off-by: Alessandro Pomponio <alessandro.pomponio1@ibm.com>
@AlessandroPomponio AlessandroPomponio added this pull request to the merge queue Mar 18, 2026
Merged via the queue into main with commit cc2bca5 Mar 18, 2026
19 checks passed
@AlessandroPomponio AlessandroPomponio deleted the ap_691_add_prettier_ignore_tags branch March 18, 2026 11:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

docs(website): add prettier ignore tags to sections that might be broken by prettier

3 participants