Publish Advisories

GHSA-jpcq-cgw6-v4j6
GHSA-g397-v4w5-4m79
GHSA-jm35-h8q2-73mp
GHSA-qf9q-q4hh-qph3
GHSA-f55g-x8qq-2569

advisories/github-reviewed/2020/04/GHSA-jpcq-cgw6-v4j6/GHSA-jpcq-cgw6-v4j6.json

@@ -33,6 +33,25 @@
           ]
         }
       ]
+    },
+    {
+      "package": {
+        "ecosystem": "RubyGems",
+        "name": "jquery-rails"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "4.4.0"
+            }
+          ]
+        }
+      ]
     }
   ],
   "references": [
@@ -56,6 +75,10 @@
       "type": "WEB",
       "url": "https://github.com/jquery/jquery/releases/tag/3.5.0"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2020-11023.yml"
+    },
     {
       "type": "WEB",
       "url": "https://jquery.com/upgrade-guide/3.5/"

advisories/github-reviewed/2022/04/GHSA-g397-v4w5-4m79/GHSA-g397-v4w5-4m79.json

@@ -48,6 +48,10 @@
       "type": "PACKAGE",
       "url": "https://github.com/CocoaPods/cocoapods-downloader"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cocoapods-downloader/CVE-2022-21223.yml"
+    },
     {
       "type": "WEB",
       "url": "https://snyk.io/vuln/SNYK-RUBY-COCOAPODSDOWNLOADER-2414280"

advisories/github-reviewed/2022/04/GHSA-jm35-h8q2-73mp/GHSA-jm35-h8q2-73mp.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jm35-h8q2-73mp",
-  "modified": "2022-04-19T18:25:57Z",
+  "modified": "2023-05-04T19:31:11Z",
   "published": "2022-04-07T22:09:03Z",
   "aliases": [
     "CVE-2021-43177"
@@ -48,6 +48,10 @@
       "type": "WEB",
       "url": "https://github.com/tinfoil/devise-two-factor/issues/106"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/devise-two-factor/CVE-2021-43177.yml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/tinfoil/devise-two-factor"

advisories/github-reviewed/2022/04/GHSA-qf9q-q4hh-qph3/GHSA-qf9q-q4hh-qph3.json

@@ -55,6 +55,10 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/ankane/blazer"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/blazer/CVE-2022-29498.yml"
     }
   ],
   "database_specific": {

advisories/github-reviewed/2022/05/GHSA-f55g-x8qq-2569/GHSA-f55g-x8qq-2569.json

@@ -56,6 +56,10 @@
       "type": "WEB",
       "url": "https://hackerone.com/reports/223999"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/csv-safe/CVE-2022-28481.yml"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/zvory/csv-safe"