Publish Advisories

GHSA-q86f-fmqf-qrf6
GHSA-px3r-jm9g-c8w8
GHSA-q2qw-rmrh-vv42

advisories/github-reviewed/2017/10/GHSA-q86f-fmqf-qrf6/GHSA-q86f-fmqf-qrf6.json

@@ -1,12 +1,12 @@
 {
   "schema_version": "1.3.0",
   "id": "GHSA-q86f-fmqf-qrf6",
-  "modified": "2021-09-16T19:40:51Z",
+  "modified": "2023-01-23T21:32:22Z",
   "published": "2017-10-24T18:33:36Z",
   "aliases": [
     "CVE-2015-9097"
   ],
-  "summary": "Moderate severity vulnerability that affects mail",
+  "summary": "mail CRLF Injection vulnerability",
   "details": "The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.",
   "severity": [
     {
@@ -62,7 +62,7 @@
     },
     {
       "type": "PACKAGE",
-      "url": "https://github.com/rubysec/ruby-advisory-db"
+      "url": "https://github.com/mikel/mail"
     },
     {
       "type": "WEB",

advisories/github-reviewed/2018/04/GHSA-px3r-jm9g-c8w8/GHSA-px3r-jm9g-c8w8.json

@@ -1,12 +1,12 @@
 {
   "schema_version": "1.3.0",
   "id": "GHSA-px3r-jm9g-c8w8",
-  "modified": "2020-06-16T21:50:14Z",
+  "modified": "2023-01-23T21:31:25Z",
   "published": "2018-04-26T15:41:10Z",
   "aliases": [
     "CVE-2018-3741"
   ],
-  "summary": "Moderate severity vulnerability that affects rails-html-sanitizer",
+  "summary": "rails-html-sanitizer Cross-site Scripting vulnerability",
   "details": "There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.",
   "severity": [
 
@@ -42,8 +42,8 @@
       "url": "https://github.com/rails/rails-html-sanitizer/commit/f3ba1a839a35f2ba7f941c15e239a1cb379d56ae"
     },
     {
-      "type": "ADVISORY",
-      "url": "https://github.com/advisories/GHSA-px3r-jm9g-c8w8"
+      "type": "PACKAGE",
+      "url": "https://github.com/rails/rails-html-sanitizer"
     }
   ],
   "database_specific": {

advisories/github-reviewed/2018/12/GHSA-q2qw-rmrh-vv42/GHSA-q2qw-rmrh-vv42.json

@@ -110,10 +110,6 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2019:0600"
     },
-    {
-      "type": "ADVISORY",
-      "url": "https://github.com/advisories/GHSA-q2qw-rmrh-vv42"
-    },
     {
       "type": "WEB",
       "url": "https://groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJ"