Skip to content

Commit a384350

Browse files
authored
Merge pull request #1164 from hsbt/remove-webrick-advisories
Remove webrick advisories CVE-2024-47220 and CVE-2026-38969. Added to rad-ignores.sh script. Surprised that I found webrick on the https://rubygems.org/gems/webrick .
2 parents 6471a8b + 23ccf6b commit a384350

3 files changed

Lines changed: 7 additions & 49 deletions

File tree

‎gems/webrick/CVE-2024-47220.yml‎

Lines changed: 0 additions & 25 deletions
This file was deleted.

‎gems/webrick/CVE-2026-38969.yml‎

Lines changed: 0 additions & 24 deletions
This file was deleted.

‎lib/rad-ignores.sh‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,13 @@ rm -rf gems/nokogiri/GHSA-gx8x-g87m-h5q6.yml
5757
# 7/7/2026: gems/commonmarker/CVE-2023-37463.yml
5858
rm -rf gems/commonmarker/GHSA-7vh7-fw88-wj87.yml
5959

60+
# Disputed by the WEBrick maintainers. CVEs were assigned without
61+
# maintainer involvement, and WEBrick's documented scope has excluded
62+
# production use since 2020.
63+
# 7/10/2026: https://github.com/ruby/webrick/issues/198
64+
rm -f gems/webrick/CVE-2024-47220.yml
65+
rm -f gems/webrick/CVE-2026-38969.yml
66+
6067
exit
6168

6269
# AL>> QUESTION (ruby or jruby)?

0 commit comments

Comments
 (0)