{
 "flight": {
  "id": 5918,
  "agent": "github-copilot",
  "state": "open",
  "title": "Guard against infinite redirections in downloadFileFromUrl with redirect counter",
  "number": 6670,
  "source": "aidev",
  "commits": 7,
  "debrief": null,
  "outcome": "stale",
  "signals": [
   "aidev:Copilot"
  ],
  "index_ok": false,
  "additions": 1037,
  "closed_at": null,
  "deletions": 749,
  "merged_at": null,
  "opened_at": "2025-06-16T18:48:49+00:00",
  "task_type": "fix",
  "body_chars": 2895,
  "confidence": "dataset",
  "updated_at": "2026-11-03T17:53:33.703657+00:00",
  "enriched_at": null,
  "body_excerpt": "The `downloadFileFromUrl` function in `vscode/npm-package/install.ts` was vulnerable to infinite redirect loops, which could cause memory exhaustion, CPU exhaustion, and potential denial-of-service attacks. The function recursively followed HTTP redirects without any limit, making it susceptible to ",
  "review_count": 5,
  "files_changed": 15,
  "hours_to_merge": null,
  "metrics_source": "aidev_commit_sum",
  "change_requests": 1,
  "og_generated_at": null,
  "reviewer_excerpt": null,
  "review_comment_count": 4,
  "reviewer_excerpt_url": null
 },
 "repo": {
  "name": "kiota",
  "owner": "microsoft",
  "stars": 3847,
  "license": "MIT",
  "full_name": "microsoft/kiota",
  "primary_language": "C#"
 },
 "author": {
  "login": "Copilot",
  "name": null,
  "github_profile": "https://github.com/Copilot",
  "page": null
 },
 "claim": null,
 "events": [
  {
   "at": null,
   "url": null,
   "kind": "committed",
   "actor_login": "copilot-swe-agent[bot]"
  },
  {
   "at": null,
   "url": null,
   "kind": "committed",
   "actor_login": "copilot-swe-agent[bot]"
  },
  {
   "at": null,
   "url": null,
   "kind": "committed",
   "actor_login": "copilot-swe-agent[bot]"
  },
  {
   "at": null,
   "url": null,
   "kind": "committed",
   "actor_login": "copilot-swe-agent[bot]"
  },
  {
   "at": null,
   "url": null,
   "kind": "reviewed",
   "actor_login": null
  },
  {
   "at": null,
   "url": null,
   "kind": "committed",
   "actor_login": "copilot-swe-agent[bot]"
  },
  {
   "at": null,
   "url": null,
   "kind": "committed",
   "actor_login": "Vincent Biret"
  },
  {
   "at": null,
   "url": null,
   "kind": "reviewed",
   "actor_login": null
  },
  {
   "at": null,
   "url": null,
   "kind": "committed",
   "actor_login": "Vincent Biret"
  },
  {
   "at": null,
   "url": null,
   "kind": "reviewed",
   "actor_login": null
  },
  {
   "at": "2025-06-17T14:09:19+00:00",
   "url": "https://github.com/microsoft/kiota/pull/6670#pullrequestreview-2935843003",
   "kind": "changes_requested",
   "actor_login": "baywet"
  }
 ],
 "related": [
  {
   "agent": "github-copilot",
   "state": "merged",
   "title": "Use async file system APIs instead of sync APIs in install.ts",
   "number": 6671,
   "outcome": "merged_clean",
   "index_ok": true,
   "additions": 1451,
   "deletions": 1282,
   "merged_at": "2025-06-17T20:07:52+00:00",
   "opened_at": "2025-06-16T19:04:49+00:00",
   "task_type": "perf",
   "files_changed": 4,
   "hours_to_merge": 25.05
  },
  {
   "agent": "github-copilot",
   "state": "open",
   "title": "Fix searchOrOpenApiDescription command to respect OpenAPI description path",
   "number": 6677,
   "outcome": "stale",
   "index_ok": false,
   "additions": 515,
   "deletions": 620,
   "merged_at": null,
   "opened_at": "2025-06-17T14:25:32+00:00",
   "task_type": "fix",
   "files_changed": 5,
   "hours_to_merge": null
  },
  {
   "agent": "github-copilot",
   "state": "open",
   "title": "[VSCode] Add right-click context menu to load OpenAPI descriptions from YAML files",
   "number": 6676,
   "outcome": "stale",
   "index_ok": false,
   "additions": 2369,
   "deletions": 658,
   "merged_at": null,
   "opened_at": "2025-06-17T14:23:23+00:00",
   "task_type": "feat",
   "files_changed": 7,
   "hours_to_merge": null
  }
 ],
 "pr_url": "https://github.com/microsoft/kiota/pull/6670",
 "page": "https://agentriders.com/logs/microsoft/kiota/6670/"
}