@@ -183,10 +183,10 @@ rm -f gems/kobako/CVE-2026-55107.yml
183183# GHSA-2jww-8ppq-f5qp - CVE-2019-12575 (mentions ruby but not ruby lang)
184184# #......................................................................
185185# # DISPUTED
186- # GHSA-c2xw-j3rw-89x2 DISPUTED - SQL injection vul
187- # GHSA-rjh4-8mqr-rvr8 DISPUTED - SQL injection vul
188- # GHSA-vqpc-h5g8-fhrw DISPUTED - SQL injection vul
189- # GHSA-4w6g-25w8-c8vc DISPUTED - SQL injection vul
186+ # GHSA-c2xw-j3rw-89x2 DISPUTED - SQL injection vul (Rails)
187+ # GHSA-rjh4-8mqr-rvr8 DISPUTED - SQL injection vul (Rails)
188+ # GHSA-vqpc-h5g8-fhrw DISPUTED - SQL injection vul (Rails)
189+ # GHSA-4w6g-25w8-c8vc DISPUTED - SQL injection vul (Rails)
190190# GHSA-6qq6-x75v-fgg7 DISPUTED - openssl extension - CVE-2014-2734
191191# GHSA-jwh5-q83f-2jjc DISPUTED - WEBrick gem 1.4.2
192192# #......................................................................
@@ -204,14 +204,24 @@ rm -f gems/kobako/CVE-2026-55107.yml
204204# GHSA-h4xp-827w-ffh7 - CVE-2016-4864 (ho2, not mruby lang)
205205# GHSA-jmhx-fqfh-838h NOT-RUBY
206206# CVE-2022-45301 NOT-RUBY
207- # GHSA-6938-wq9x-9rgg - CVE-2012-1241
208- # GHSA-6f39-fvhf-c6qr - CVE-2017-11465 (REJECTED)
209- # GHSA-rc82-v3mm-rhj2 - CVE-2011-3624.yml (REJECTED)
207+ # GHSA-6938-wq9x-9rgg - CVE-2012-1241 (ActiveScriptRuby)
208+ # GHSA-6f39-fvhf-c6qr - CVE-2017-11465 (REJECTED) (Ruby)
209+ # GHSA-rc82-v3mm-rhj2 - CVE-2011-3624.yml (REJECTED) (Ruby)
210210# GHSA-94xx-gq3f-6gw4 - CVE-2026-1097.yml (not ruby)
211211# #......................................................................
212212# # Redhat
213213# GHSA-3fcg-qm7h-hhpw (red hat #3)
214214# GHSA-gphm-f2cq-m9pv (red hat #2)
215215# GHSA-w5v4-7h7x-xfvq (red hat #1)
216216# GHSA-h459-7mrx-8pvc - CVE-2014-0241 (Red hat plugin, not ruby lang)
217- # GHSA-f29j-vf7h-f9g9 - CVE-2013-1945
217+ # GHSA-f29j-vf7h-f9g9 - CVE-2013-1945 (Red hat/Ruby 1.9.3)
218+
219+ # 8/26/2026
220+ # GHSA-9jfq-54vc-9rr2 - CVE-2022-3874 (foreman/Withdrawn)
221+ # GHSA-wv67-q8rr-grjp - CVE-2019-5428 (jquery/jquery-rails/Duplicate)
222+ # GHSA-257q-pv89-v3xv - CVE-2020-23064 (jquery/jquery-rails/Duplicate)
223+
224+ # 8/28/2026
225+ # GHSA-mqcp-p2hv-vw6x - CVE-2025-54314 (thor/Withdrawn)
226+ # GHSA-9jfq-54vc-9rr2 - CVE-2022-3874 (foreman/Withdrawn)
227+ # GHSA-w9fp-2996-hhwx - CVE-2019-16254 (ruby/Disputed)
0 commit comments