Skip to content

GHSA SYNC: 1 new advisory; 2 modified advisories#990

Open
jasnow wants to merge 3 commits intorubysec:masterfrom
jasnow:ghsa-syncbot-2026-02-08-10_28_16
Open

GHSA SYNC: 1 new advisory; 2 modified advisories#990
jasnow wants to merge 3 commits intorubysec:masterfrom
jasnow:ghsa-syncbot-2026-02-08-10_28_16

Conversation

@jasnow
Copy link
Contributor

@jasnow jasnow commented Feb 8, 2026

GHSA SYNC: 1 new advisory; 2 modified advisories

Copy link
Member

@postmodern postmodern left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If we want to indicate that a CVE is related to another CVE, related: cve: is already supported.

related:
  cve:
    - CVE-....
  url:
    - ...

Copy link
Member

@postmodern postmodern left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should rubies/jruby/CVE-2011-4838.yml and rubies/ruby/CVE-2011-4815.yml also get related: cve: like the rubies/jruby/CVE-2019-16254.yml file? I am OK with merging this in it's current state.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants