diff --git a/advisories/github-reviewed/2017/10/GHSA-q86f-fmqf-qrf6/GHSA-q86f-fmqf-qrf6.json b/advisories/github-reviewed/2017/10/GHSA-q86f-fmqf-qrf6/GHSA-q86f-fmqf-qrf6.json index 868dab9cbd8..cd51a67d9fa 100644 --- a/advisories/github-reviewed/2017/10/GHSA-q86f-fmqf-qrf6/GHSA-q86f-fmqf-qrf6.json +++ b/advisories/github-reviewed/2017/10/GHSA-q86f-fmqf-qrf6/GHSA-q86f-fmqf-qrf6.json @@ -1,12 +1,12 @@ { "schema_version": "1.3.0", "id": "GHSA-q86f-fmqf-qrf6", - "modified": "2021-09-16T19:40:51Z", + "modified": "2023-01-23T21:32:22Z", "published": "2017-10-24T18:33:36Z", "aliases": [ "CVE-2015-9097" ], - "summary": "Moderate severity vulnerability that affects mail", + "summary": "mail CRLF Injection vulnerability", "details": "The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.", "severity": [ { @@ -62,7 +62,7 @@ }, { "type": "PACKAGE", - "url": "https://github.com/rubysec/ruby-advisory-db" + "url": "https://github.com/mikel/mail" }, { "type": "WEB", diff --git a/advisories/github-reviewed/2018/04/GHSA-px3r-jm9g-c8w8/GHSA-px3r-jm9g-c8w8.json b/advisories/github-reviewed/2018/04/GHSA-px3r-jm9g-c8w8/GHSA-px3r-jm9g-c8w8.json index e76febbbc80..0ab9d75f32c 100644 --- a/advisories/github-reviewed/2018/04/GHSA-px3r-jm9g-c8w8/GHSA-px3r-jm9g-c8w8.json +++ b/advisories/github-reviewed/2018/04/GHSA-px3r-jm9g-c8w8/GHSA-px3r-jm9g-c8w8.json @@ -1,12 +1,12 @@ { "schema_version": "1.3.0", "id": "GHSA-px3r-jm9g-c8w8", - "modified": "2020-06-16T21:50:14Z", + "modified": "2023-01-23T21:31:25Z", "published": "2018-04-26T15:41:10Z", "aliases": [ "CVE-2018-3741" ], - "summary": "Moderate severity vulnerability that affects rails-html-sanitizer", + "summary": "rails-html-sanitizer Cross-site Scripting vulnerability", "details": "There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.", "severity": [ @@ -42,8 +42,8 @@ "url": "https://github.com/rails/rails-html-sanitizer/commit/f3ba1a839a35f2ba7f941c15e239a1cb379d56ae" }, { - "type": "ADVISORY", - "url": "https://github.com/advisories/GHSA-px3r-jm9g-c8w8" + "type": "PACKAGE", + "url": "https://github.com/rails/rails-html-sanitizer" } ], "database_specific": { diff --git a/advisories/github-reviewed/2018/12/GHSA-q2qw-rmrh-vv42/GHSA-q2qw-rmrh-vv42.json b/advisories/github-reviewed/2018/12/GHSA-q2qw-rmrh-vv42/GHSA-q2qw-rmrh-vv42.json index 3d7285562bf..7fcb171b5ed 100644 --- a/advisories/github-reviewed/2018/12/GHSA-q2qw-rmrh-vv42/GHSA-q2qw-rmrh-vv42.json +++ b/advisories/github-reviewed/2018/12/GHSA-q2qw-rmrh-vv42/GHSA-q2qw-rmrh-vv42.json @@ -110,10 +110,6 @@ "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2019:0600" }, - { - "type": "ADVISORY", - "url": "https://github.com/advisories/GHSA-q2qw-rmrh-vv42" - }, { "type": "WEB", "url": "https://groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJ"