diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
index d3fbf1ad69..147ec4348e 100644
--- a/.github/workflows/ruby.yml
+++ b/.github/workflows/ruby.yml
@@ -11,23 +11,22 @@ jobs:
     runs-on: ubuntu-latest
     name: Linter
     steps:
-      - uses: actions/checkout@v2
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: ruby
-      - name: Install ruby dependencies
-        run: bundle install --jobs 4 --retry 3
-      - name: Validate YAML
-        run: bundle exec rake lint
+      - uses: actions/checkout@v3
       - name: Set up Python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v4
         with:
           python-version: 3.8
-      - name: Install python dependencies
+      - name: Install yamllint
         run: |
           python -m pip install --upgrade pip
           pip install yamllint
-          if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
       - name: Lint YAML files
         run: yamllint gems rubies
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ruby
+      - name: Install ruby dependencies
+        run: bundle install --jobs 4 --retry 3
+      - name: Validate YAML
+        run: bundle exec rake lint
diff --git a/.gitignore b/.gitignore
index daa6dca0be..5ef2c9e2db 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
-_site
+/Gemfile.lock
 .bundle
-vendor
+.DS_Store
+/vendor
diff --git a/.yamllint.yml b/.yamllint.yml
index ed2e414a1e..f237760de2 100644
--- a/.yamllint.yml
+++ b/.yamllint.yml
@@ -3,4 +3,5 @@ extends: default
 rules:
   line-length: disable
   indentation:
+    spaces: 2
     indent-sequences: consistent
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index ff74344ffb..72681b560e 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -1,71 +1,16 @@
 # Contributing Guidelines
 
-* All text must be within 80 columns.
+* Try to keep all text within 80 columns.
 * YAML must be indented by 2 spaces.
-* Have any questions? Feel free to open an issue.
+* `title:` must be a single sentence/line.
+* `description: |` must contain more than one sentence/line.
+* `patched_versions`/`unaffected_versions` version ranges must be quoted
+  (ex: `">= 1.2.3"`).
+* Please see the [README](README.md#schema) for more documentation on the
+  YAML Schema.
 * Prior to submitting a pull request, run the tests:
 
 ```
 bundle install
 bundle exec rspec
 ```
-
-* Follow the schema. Here is an example advisory:
-
-```yaml
-    ---
-    gem: examplegem
-    cve: 2013-0156
-    date: 2013-05-01
-    url: https://github.com/rubysec/ruby-advisory-db/issues/123456
-    title: |
-      Ruby on Rails params_parser.rb Action Pack Type Casting Parameter Parsing
-      Remote Code Execution
-
-    description: |
-      Ruby on Rails contains a flaw in params_parser.rb of the Action Pack.
-      The issue is triggered when a type casting error occurs during the parsing
-      of parameters. This may allow a remote attacker to potentially execute
-      arbitrary code.
-
-    cvss_v2: 10.0
-    cvss_v3: 9.8
-
-    patched_versions:
-      - ~> 2.3.15
-      - ~> 3.0.19
-      - ~> 3.1.10
-      - ">= 3.2.11"
-    unaffected_versions:
-      - ~> 2.4.3
-
-    related:
-      cve:
-        - 2013-1234567
-        - 2013-1234568
-      url:
-        - https://github.com/rubysec/ruby-advisory-db/issues/123457
-
-```
-### Schema
-
-* `gem` \[String\] (required): Name of the affected gem.
-* `framework` \[String\] (optional): Name of the framework which the affected gem belongs to.
-* `platform` \[String\] (optional): If this vulnerability is platform-specific, name of platform this vulnerability affects (e.g. jruby)
-* `cve` \[String\] (optional): Common Vulnerabilities and Exposures (CVE) ID.
-* `osvdb` \[Integer\] (optional): Open Sourced Vulnerability Database (OSVDB) ID.
-* `ghsa` \[String\] (optional): GitHub Security Advisory (GHSA) ID.
-* `url` \[String\] (required): The URL to the full advisory.
-* `title` \[String\] (required): The title of the advisory or individual vulnerability.
-* `date` \[Date\] (required): The public disclosure date of the advisory.
-* `description` \[String\] (required): One or more paragraphs describing the vulnerability.
-* `cvss_v2` \[Float\] (optional): The [CVSSv2] score for the vulnerability.
-* `cvss_v3` \[Float\] (optional): The [CVSSv3] score for the vulnerability.
-* `unaffected_versions` \[Array\<String\>\] (optional): The version requirements for the
-  unaffected versions of the Ruby library.
-* `patched_versions` \[Array\<String\>\] (optional): The version requirements for the
-  patched versions of the Ruby library.
-* `related` \[Hash\<Array\<String\>\>\] (optional): Sometimes an advisory references many urls and cves. Supported keys: `cve` and `url`
-
-[CVSSv2]: https://www.first.org/cvss/v2/guide
-[CVSSv3]: https://www.first.org/cvss/user-guide
diff --git a/CONTRIBUTORS.md b/CONTRIBUTORS.md
index 2cb9be7a63..765cdd3810 100644
--- a/CONTRIBUTORS.md
+++ b/CONTRIBUTORS.md
@@ -37,5 +37,7 @@ This database would not be possible without volunteers willing to submit pull re
 * [ecneladis](https://github.com/ecneladis)
 * [Brendan Coles](https://github.com/bcoles)
 * [Florian Wininger](https://github.com/fwininger)
+* [Al Snow](https://github.com/jasnow)
+* [Adrian Hirt](https://github.com/Adrian-Hirt)
 
 The rubysec.com domain was graciously donated by [Jordi Massaguer](https://github.com/jordimassaguerpla).
diff --git a/Gemfile b/Gemfile
index 336b3267aa..da9c873bff 100644
--- a/Gemfile
+++ b/Gemfile
@@ -1,12 +1,12 @@
 source 'https://rubygems.org'
 
-gem 'faraday'
 gem 'rake'
-gem 'kwalify'
-gem 'rspec'
+gem 'faraday', '~> 2.0'
+gem 'kwalify', '~> 0.1'
+gem 'rspec',   '~> 3.0'
 
 group :development do
   gem 'pry'
-  gem 'nokogiri'
-  gem 'activesupport'
+  gem 'nokogiri',      '~> 1.0'
+  gem 'activesupport', '~> 7.0'
 end
diff --git a/Gemfile.lock b/Gemfile.lock
deleted file mode 100644
index f9f626ce9a..0000000000
--- a/Gemfile.lock
+++ /dev/null
@@ -1,60 +0,0 @@
-GEM
-  remote: https://rubygems.org/
-  specs:
-    activesupport (7.0.1)
-      concurrent-ruby (~> 1.0, >= 1.0.2)
-      i18n (>= 1.6, < 2)
-      minitest (>= 5.1)
-      tzinfo (~> 2.0)
-    coderay (1.1.3)
-    concurrent-ruby (1.1.9)
-    diff-lcs (1.5.0)
-    faraday (2.2.0)
-      faraday-net_http (~> 2.0)
-      ruby2_keywords (>= 0.0.4)
-    faraday-net_http (2.0.1)
-    i18n (1.9.1)
-      concurrent-ruby (~> 1.0)
-    kwalify (0.7.2)
-    method_source (1.0.0)
-    mini_portile2 (2.7.1)
-    minitest (5.15.0)
-    nokogiri (1.13.1)
-      mini_portile2 (~> 2.7.0)
-      racc (~> 1.4)
-    pry (0.14.1)
-      coderay (~> 1.1)
-      method_source (~> 1.0)
-    racc (1.6.0)
-    rake (13.0.6)
-    rspec (3.10.0)
-      rspec-core (~> 3.10.0)
-      rspec-expectations (~> 3.10.0)
-      rspec-mocks (~> 3.10.0)
-    rspec-core (3.10.2)
-      rspec-support (~> 3.10.0)
-    rspec-expectations (3.10.2)
-      diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.10.0)
-    rspec-mocks (3.10.3)
-      diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.10.0)
-    rspec-support (3.10.3)
-    ruby2_keywords (0.0.5)
-    tzinfo (2.0.4)
-      concurrent-ruby (~> 1.0)
-
-PLATFORMS
-  ruby
-
-DEPENDENCIES
-  activesupport
-  faraday
-  kwalify
-  nokogiri
-  pry
-  rake
-  rspec
-
-BUNDLED WITH
-   2.3.3
diff --git a/README.md b/README.md
index 2f34303249..27ca2ef872 100644
--- a/README.md
+++ b/README.md
@@ -1,12 +1,15 @@
 # Ruby Advisory Database
 
-The Ruby Advisory Database is a community effort to compile all security advisories that are relevant to Ruby libraries.
+The Ruby Advisory Database is a community effort to compile all security
+advisories that are relevant to Ruby libraries.
 
-You can check your own Gemfile.locks against this database by using [bundler-audit](https://github.com/rubysec/bundler-audit).
+You can check your own Gemfile.locks against this database by using
+[bundler-audit].
 
-## Support Ruby security!
+## Support Ruby Security!
 
-Do you know about a vulnerability that isn't listed in this database? Open an issue or submit a PR.
+Do you know about a vulnerability that isn't listed in this database? Open an
+issue or submit a PR.
 
 ## Directory Structure
 
@@ -15,65 +18,121 @@ The database is a list of directories that match the names of Ruby libraries on
 for the Ruby library. These advisory files are named using
 the advisories' [CVE] identifier number.
 
-    gems/:
-      actionpack/:
-        CVE-2014-0130.yml  CVE-2014-7818.yml  CVE-2014-7829.yml  CVE-2015-7576.yml
-        CVE-2015-7581.yml  CVE-2016-0751.yml  CVE-2016-0752.yml
-
-## Format
-
-Each advisory file contains the advisory information in [YAML] format:
-
-    ---
-    gem: examplegem
-    cve: 2013-0156
-    date: 2013-05-01
-    url: https://github.com/rubysec/ruby-advisory-db/issues/123456
-    title: |
-      Ruby on Rails params_parser.rb Action Pack Type Casting Parameter Parsing
-      Remote Code Execution
-
-    description: |
-      Ruby on Rails contains a flaw in params_parser.rb of the Action Pack.
-      The issue is triggered when a type casting error occurs during the parsing
-      of parameters. This may allow a remote attacker to potentially execute
-      arbitrary code.
-
-    cvss_v2: 10.0
-    cvss_v3: 9.8
+```
+gems/:
+  actionpack/:
+    CVE-2014-0130.yml  CVE-2014-7818.yml  CVE-2014-7829.yml  CVE-2015-7576.yml
+    CVE-2015-7581.yml  CVE-2016-0751.yml  CVE-2016-0752.yml
+rubies/:
+  jruby/:
+    ...
+  mruby/:
+    ...
+  ruby/:
+    ...
+```
 
-    patched_versions:
-      - ~> 2.3.15
-      - ~> 3.0.19
-      - ~> 3.1.10
-      - ">= 3.2.11"
-    unaffected_versions:
-      - ~> 2.4.3
+### `gems/`
+
+The `gems/` directory contains sub-directories that match the names of the Ruby
+libraries on [rubygems.org]. Within each directory are one or more advisory
+files for the Ruby library. These advisory files are named using the
+advisories' [CVE] or [GHSA] ID.
+
+### `rubies/`
+
+The `rubies/` directory contains sub-directories for each Ruby implementation.
+Within each directory are one or more advisory files for the Ruby
+implementation. These advisory files are named using the advisories' [CVE]
+or [GHSA] ID.
+
+## Examples
+
+Each advisory file contains the advisory information in [YAML] format.
+Here are some example advisories:
+
+### `gems/actionpack/CVE-2023-22795.yml`
+
+```yaml
+---
+gem: actionpack
+cve: 2023-22795
+ghsa: 8xww-x3g3-6jcv
+url: https://github.com/rails/rails/releases/tag/v7.0.4.1
+title: ReDoS based DoS vulnerability in Action Dispatch
+date: 2023-01-18
+description: |
+  There is a possible regular expression based DoS vulnerability in Action
+  Dispatch related to the If-None-Match header. This vulnerability has been
+  assigned the CVE identifier CVE-2023-22795.
+
+  Versions Affected: All
+  Not affected: None
+  Fixed Versions: 6.1.7.1, 7.0.4.1
+
+  # Impact
+
+  A specially crafted HTTP If-None-Match header can cause the regular
+  expression engine to enter a state of catastrophic backtracking, when on a
+  version of Ruby below 3.2.0. This can cause the process to use large amounts
+  of CPU and memory, leading to a possible DoS vulnerability All users running
+  an affected release should either upgrade or use one of the workarounds
+  immediately.
+
+  # Workarounds
+
+  We recommend that all users upgrade to one of the FIXED versions. In the
+  meantime, users can mitigate this vulnerability by using a load balancer or
+  other device to filter out malicious If-None-Match headers before they reach
+  the application.
+
+  Users on Ruby 3.2.0 or greater are not affected by this vulnerability.
+patched_versions:
+  - "~> 5.2.8"
+  - "~> 6.1.7, >= 6.1.7.1"
+  - ">= 7.0.4.1"
+```
 
-    related:
-      cve:
-        - 2013-1234567
-        - 2013-1234568
-      url:
-        - https://github.com/rubysec/ruby-advisory-db/issues/123457
+### `rubies/ruby/CVE-2022-28739.yml`
+
+```yaml
+---
+engine: ruby
+cve: 2022-28739
+url: https://www.ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cve-2022-28739/
+title: Buffer overrun in String-to-Float conversion
+date: 2022-04-12
+description: |
+  A buffer-overrun vulnerability is discovered in a conversion algorithm from a String to a Float. This vulnerability has been assigned the CVE identifier CVE-2022-28739. We strongly recommend upgrading Ruby.
+
+  Due to a bug in an internal function that converts a String to a Float, some convertion methods like Kernel#Float and String#to_f could cause buffer over-read. A typical consequence is a process termination due to segmentation fault, but in a limited circumstances, it may be exploitable for illegal memory read.
+
+  Please update Ruby to 2.6.10, 2.7.6, 3.0.4, or 3.1.2.
+patched_versions:
+  - ~> 2.6.10
+  - ~> 2.7.6
+  - ~> 3.0.4
+  - '>= 3.1.2'
+```
 
+## YAML Schema
 
-### Schema
+### `gems`
 
 * `gem` \[String\] (required): Name of the affected gem.
 * `library` \[String\] (optional): Name of the ruby library which the affected gem belongs to.
-* `framework` \[String\] (optional): Name of the framework which the affected
-  gem belongs to.
+* `framework` \[String\] (optional): Name of the framework which the affected gem belongs to.
 * `platform` \[String\] (optional): If this vulnerability is platform-specific, name of platform this vulnerability affects (e.g. jruby)
 * `cve` \[String\] (optional): Common Vulnerabilities and Exposures (CVE) ID.
 * `osvdb` \[Integer\] (optional): Open Sourced Vulnerability Database (OSVDB) ID.
 * `ghsa` \[String\] (optional): GitHub Security Advisory (GHSA) ID.
 * `url` \[String\] (required): The URL to the full advisory.
-* `title` \[String\] (required): The title of the advisory or individual vulnerability.
+* `title` \[String\] (required): The title of the advisory or individual vulnerability. It must be a single line sentence.
 * `date` \[Date\] (required): The public disclosure date of the advisory.
-* `description` \[String\] (required): One or more paragraphs describing the vulnerability.
+* `description` \[String\] (required): One or more paragraphs describing the vulnerability. It may contain multiple paragraphs.
 * `cvss_v2` \[Float\] (optional): The [CVSSv2] score for the vulnerability.
 * `cvss_v3` \[Float\] (optional): The [CVSSv3] score for the vulnerability.
+* `cvss_v4` \[Float\] (optional): The [CVSSv4] score for the vulnerability.
 * `unaffected_versions` \[Array\<String\>\] (optional): The version requirements for the
   unaffected versions of the Ruby library.
 * `patched_versions` \[Array\<String\>\] (optional): The version requirements for the
@@ -81,42 +140,82 @@ Each advisory file contains the advisory information in [YAML] format:
 * `related` \[Hash\<Array\<String\>\>\] (optional): Sometimes an advisory references many urls and other identifiers. Supported keys: `cve`, `ghsa`, `osvdb`, and `url`
 * `notes` \[String\] (optional): Internal notes regarding the vulnerability's inclusion in this database.
 
-### Tests
+### `rubies`
+
+* `engine` \[`ruby` | `mruby` | `jruby` | `truffleruby`\] (required): Name of the affected Ruby implementation.
+* `platform` \[String\] (optional): If this vulnerability is platform-specific, name of platform this vulnerability affects (e.g. jruby)
+* `cve` \[String\] (optional): Common Vulnerabilities and Exposures (CVE) ID.
+* `osvdb` \[Integer\] (optional): Open Sourced Vulnerability Database (OSVDB) ID.
+* `ghsa` \[String\] (optional): GitHub Security Advisory (GHSA) ID.
+* `url` \[String\] (required): The URL to the full advisory.
+* `title` \[String\] (required): The title of the advisory or individual vulnerability. It must be a single line sentence.
+* `date` \[Date\] (required): The public disclosure date of the advisory.
+* `description` \[String\] (required): One or more paragraphs describing the vulnerability. It may contain multiple paragraphs.
+* `cvss_v2` \[Float\] (optional): The [CVSSv2] score for the vulnerability.
+* `cvss_v3` \[Float\] (optional): The [CVSSv3] score for the vulnerability.
+* `cvss_v4` \[Float\] (optional): The [CVSSv4] score for the vulnerability.
+* `unaffected_versions` \[Array\<String\>\] (optional): The version requirements for the
+  unaffected versions of the Ruby implementation.
+* `patched_versions` \[Array\<String\>\] (optional): The version requirements for the
+  patched versions of the Ruby implementation.
+* `related` \[Hash\<Array\<String\>\>\] (optional): Sometimes an advisory references many urls and other identifiers. Supported keys: `cve`, `ghsa`, `osvdb`, and `url`
+* `notes` \[String\] (optional): Internal notes regarding the vulnerability's inclusion in this database.
+
+## Tests
+
 Prior to submitting a pull request, run the tests:
 
-```
+```shell
 bundle install
 bundle exec rspec
 ```
 
-### GitHub Advisory Sync
+## GitHub Advisory Sync
 
-There is a script that will create initial yaml files for RubyGem advisories which
-are in the [GitHub Security Advisory API](https://developer.github.com/v4/object/securityadvisory/),
-but are not already in this dataset.  This script can be periodically run to ensure
-this repo has all the data that is present in the GitHub Advisory data.
+There is a script that will create initial YAML files for RubyGem advisories
+which are in the [GitHub Security Advisory API], but are not already in this
+dataset. This script can be periodically run to ensure this repo has all the
+data that is present in the GitHub Advisory data.
 
 The GitHub Advisory API requires a token to access it.
-- It can be a completely scopeless token (recommended); it does not require any permissions at all.
-- Get yours at https://github.com/settings/tokens
 
-To run the GitHub Advisory sync, start by executing the rake task:
+* It can be a completely scope-less token (recommended); it does not require any
+  permissions at all.
+* Get yours at: https://github.com/settings/tokens
+
+To run the GitHub Advisory sync to retrieve all advisories, start by executing
+the rake task:
+
+```shell
+GH_API_TOKEN="your GitHub API Token" bundle exec rake sync_github_advisories
 ```
-GH_API_TOKEN=<your GitHub API Token> bundle exec rake sync_github_advisories
+
+Or, to only retrieve advisories for a single gem:
+
+```shell
+GH_API_TOKEN="your GitHub API Token" bundle exec rake sync_github_advisories[gem_name]
 ```
 
-- The rake task will write yaml files for any missing advisories.
-- Those files must be further edited.
-  - Fill in `cvss_v3` field by following the CVE link and getting it from page
-  - Fill in `patched_versions` field, using the comments at the bottom of the file
-  - Fill in `unaffected_versions`, optional, if there are unaffected_versions
-  - delete the GitHub data at the bottom of the yaml file
-  - double check all the data, commit it, and make a PR
-    - *The GitHub Advisory data is structured opposite of RubySec unfortunately:
-       GitHub identifies version range which are vulnerable; RubySec identifies
-      version ranges which are not vulnerable.  This is why some manual
-      work to translate is needed.*
+* The rake task will write YAML files for any missing advisories.
+* Those files must be further edited.
+  * Fill in `cvss_v3` field by following the CVE link and getting it from page.
+  * Fill in `cvss_v4` field by following the CVE link and getting it from page.
+  * Fill in `patched_versions` field, using the comments at the bottom of the
+    YAML file.
+  * Optionally fill in `unaffected_versions`.
+  * Delete the GitHub data at the bottom of the YAML file.
+  * Double check all the data, commit it, and make a PR.
+
+## Rails LTS
+
+The maintainers of [Rails LTS] have [asked us not to track the Rails LTS versions][PR-847].
+If you are using [Rails LTS] and [bundler-audit], it is advised that you should
+add the [List of CVEs addressed by Rails LTS] to your `.bundler-audit.yml` file
+under `ignore:`.
 
+[Rails LTS]: https://railslts.com/
+[List of CVEs addressed by Rails LTS]: https://makandracards.com/railslts/474590-list-cves-addressed-rails-lts
+[PR-847]: https://github.com/rubysec/ruby-advisory-db/pull/847
 
 ## Credits
 
@@ -126,10 +225,13 @@ This database also includes data from the [Open Sourced Vulnerability Database][
 developed by the Open Security Foundation (OSF) and its contributors.
 
 [rubygems.org]: https://rubygems.org/
+[bundler-audit]: https://github.com/rubysec/bundler-audit
 [CVE]: https://cve.mitre.org/
-[OSVDB]: http://www.osvdb.org/
+[OSVDB]: https://en.wikipedia.org/wiki/Open_Source_Vulnerability_Database
 [GHSA]: https://help.github.com/en/articles/about-maintainer-security-advisories
+[GitHub Security Advisory API]: https://developer.github.com/v4/object/securityadvisory/
 [CVSSv2]: https://www.first.org/cvss/v2/guide
-[CVSSv3]: https://www.first.org/cvss/user-guide
+[CVSSv3]: https://www.first.org/cvss/v3.1/user-guide
+[CVSSv4]: https://www.first.org/cvss/v4.0/user-guide
 [YAML]: http://www.yaml.org/
 [CONTRIBUTORS.md]: https://github.com/rubysec/ruby-advisory-db/blob/master/CONTRIBUTORS.md
diff --git a/Rakefile b/Rakefile
index ca77cd8c15..7613feaf5d 100644
--- a/Rakefile
+++ b/Rakefile
@@ -13,9 +13,9 @@ namespace :lint do
 end
 
 desc "Sync GitHub RubyGem Advisories into this project"
-task :sync_github_advisories do
+task :sync_github_advisories, [:gem_name] do |_, args|
   require_relative "lib/github_advisory_sync"
-  GitHub::GitHubAdvisorySync.sync
+  GitHub::GitHubAdvisorySync.sync(gem_name: args[:gem_name])
 end
 
 task :lint    => ['lint:yaml']
diff --git a/gems/Arabic-Prawn/CVE-2014-2322.yml b/gems/Arabic-Prawn/CVE-2014-2322.yml
index 0e3cf5392e..fcf752596b 100644
--- a/gems/Arabic-Prawn/CVE-2014-2322.yml
+++ b/gems/Arabic-Prawn/CVE-2014-2322.yml
@@ -2,12 +2,28 @@
 gem: Arabic-Prawn
 cve: 2014-2322
 osvdb: 104365
-url: https://nvd.nist.gov/vuln/detail/CVE-2014-2322
-title: Arabic Prawn Gem for Ruby lib/string_utf_support.rb User Input Handling Remote
-  Command Injection
+ghsa: hgmw-x865-hf9x
+url: http://www.openwall.com/lists/oss-security/2014/03/10/8
+title: Arabic Prawn Gem for Ruby lib/string_utf_support.rb
+  User Input Handling Remote Command Injection
 date: 2014-03-10
 description: |
   Arabic Prawn Gem for Ruby contains a flaw in the lib/string_utf_support.rb
   file. The issue is due to the program failing to sanitize user input. This may
   allow a remote attacker to inject arbitrary commands.
+
+  "lib/string_utf_support.rb" in the Arabic Prawn 0.0.1 gem for Ruby
+  allows remote attackers to execute arbitrary commands via shell
+  metacharacters  in the (1) downloaded_file or (2) url variable.
 cvss_v2: 7.5
+notes: "Never patched"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-2322
+    - http://www.openwall.com/lists/oss-security/2014/03/10/8
+    - http://www.openwall.com/lists/oss-security/2014/03/12/6
+    - https://web.archive.org/web/20160306235714/http://www.vapid.dhs.org/advisories/arabic-ruby-gem.html
+    - http://www.vapid.dhs.org/advisories/arabic-ruby-gem.html
+    - http://www.vapidlabs.com/advisory.php?v=16
+    - https://github.com/advisories/GHSA-hgmw-x865-hf9x
+    - https://rubygems.org/gems/Arabic-Prawn
diff --git a/gems/RedCloth/CVE-2012-6684.yml b/gems/RedCloth/CVE-2012-6684.yml
index 329a3686cb..b9bdd1ed82 100644
--- a/gems/RedCloth/CVE-2012-6684.yml
+++ b/gems/RedCloth/CVE-2012-6684.yml
@@ -1,18 +1,27 @@
 ---
 gem: RedCloth
 cve: 2012-6684
+ghsa: r23g-3qw4-gfh2
 osvdb: 115941
 url: https://co3k.org/blog/redcloth-unfixed-xss-en
-title: 'CVE-2012-6684 rubygem-RedCloth: XSS vulnerability'
+title: "CVE-2012-6684 rubygem-RedCloth: XSS vulnerability"
 date: 2012-02-29
-description: 'Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9
-  for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML
-  via a javascript: URI.'
+description: |
+  Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9
+  for Ruby and earlier allows remote attackers to inject arbitrary
+  web script or HTML via a javascript: URI.
 cvss_v2: 4.3
 patched_versions:
-- '>= 4.3.0'
+  - ">= 4.3.0"
 related:
   url:
-  - https://github.com/jgarber/redcloth/commit/2f6dab4d6aea5cee778d2f37a135637fe3f1573c
-  - https://gist.github.com/co3k/75b3cb416c342aa1414c
-  - https://jgarber.lighthouseapp.com/projects/13054-redcloth/tickets/243-xss
+    - http://co3k.org/blog/redcloth-unfixed-xss-en
+    - https://gist.github.com/co3k/75b3cb416c342aa1414c
+    - https://github.com/jgarber/redcloth/commit/2f6dab4d6aea5cee778d2f37a135637fe3f1573c
+    - https://github.com/jgarber/redcloth/commit/b24f03db023d1653d60dd33b28e09317cd77c6a0
+    - https://jgarber.lighthouseapp.com/projects/13054-redcloth/tickets/243-xss
+    - https://web.archive.org/web/20150128115714/http://jgarber.lighthouseapp.com/projects/13054-redcloth/tickets/243-xss
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-6684
+    - https://github.com/advisories/GHSA-r23g-3qw4-gfh2
+    - http://seclists.org/fulldisclosure/2014/Dec/50
+    - http://www.debian.org/security/2015/dsa-3168
diff --git a/gems/RedCloth/CVE-2023-31606.yml b/gems/RedCloth/CVE-2023-31606.yml
new file mode 100644
index 0000000000..c78a04cf1c
--- /dev/null
+++ b/gems/RedCloth/CVE-2023-31606.yml
@@ -0,0 +1,26 @@
+---
+gem: RedCloth
+cve: 2023-31606
+ghsa: qcm3-vfq5-wfr2
+url: https://github.com/e23e/CVE-2023-31606#readme
+title: RedCloth Regular Expression Denial of Service issue
+date: 2023-06-06
+description: |
+  A Regular Expression Denial of Service (ReDoS) issue was discovered
+  in the "sanitize_html" function of RedCloth gem >= v4.0.0.
+  This vulnerability allows attackers to cause a
+  Denial of Service (DoS) via supplying a crafted payload.
+cvss_v3: 7.5
+unaffected_versions:
+  - "< 4.0.0"
+patched_versions:
+  - ">= 4.3.3"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-31606
+    - https://github.com/e23e/CVE-2023-31606#readme
+    - https://github.com/jgarber/redcloth/issues/73
+    - https://github.com/jgarber/redcloth/blob/v4.3.2/lib/redcloth/formatters/html.rb#L327
+    - https://github.com/advisories/GHSA-qcm3-vfq5-wfr2
+    - https://github.com/jgarber/redcloth/pull/75
+    - https://github.com/jgarber/redcloth/blob/v4.3.3/lib/redcloth/formatters/html.rb#L327
diff --git a/gems/VladTheEnterprising/CVE-2014-4995.yml b/gems/VladTheEnterprising/CVE-2014-4995.yml
index 9126a72e1c..2dd57b61d1 100644
--- a/gems/VladTheEnterprising/CVE-2014-4995.yml
+++ b/gems/VladTheEnterprising/CVE-2014-4995.yml
@@ -2,6 +2,7 @@
 gem: VladTheEnterprising
 cve: 2014-4995
 osvdb: 108728
+ghsa: 86cf-g34f-7462
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-4995
 title: VladTheEnterprising Gem for Ruby /tmp/my.cnf.#{target_host} Symlink Multiple
   Impact
@@ -12,3 +13,4 @@ description: |
   a symlink attack against the /tmp/my.cnf.#{target_host} file they can
   overwrite arbitrary files, gain access to the MySQL root password,
   or inject arbitrary commands.
+cvss_v3: 7.0
diff --git a/gems/VladTheEnterprising/CVE-2014-4996.yml b/gems/VladTheEnterprising/CVE-2014-4996.yml
index 91b6e5ed0a..1b75c5363f 100644
--- a/gems/VladTheEnterprising/CVE-2014-4996.yml
+++ b/gems/VladTheEnterprising/CVE-2014-4996.yml
@@ -2,6 +2,7 @@
 gem: VladTheEnterprising
 cve: 2014-4996
 osvdb: 108728
+ghsa: x4vj-279x-qwf2
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-4996
 title: VladTheEnterprising Gem for Ruby /tmp/my.cnf.#{target_host} Symlink Multiple
   Impact
@@ -12,3 +13,4 @@ description: |
   a symlink attack against the /tmp/my.cnf.#{target_host} file they can
   overwrite arbitrary files, gain access to the MySQL root password,
   or inject arbitrary commands.
+cvss_v3: 5.5
diff --git a/gems/actionmailer/CVE-2013-4389.yml b/gems/actionmailer/CVE-2013-4389.yml
index cd50c7e2fe..785bc3a0da 100644
--- a/gems/actionmailer/CVE-2013-4389.yml
+++ b/gems/actionmailer/CVE-2013-4389.yml
@@ -1,16 +1,19 @@
 ---
 gem: actionmailer
+framework: rails
 cve: 2013-4389
 osvdb: 98629
+ghsa: rg5m-3fqp-6px8
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-4389
-title: 'CVE-2013-4389 rubygem-actionmailer: email address processing DoS'
+title: "CVE-2013-4389 rubygem-actionmailer: email address processing DoS"
 date: 2013-10-16
-description: Multiple format string vulnerabilities in log_subscriber.rb files in
+description: |
+  Multiple format string vulnerabilities in log_subscriber.rb files in
   the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15
   allow remote attackers to cause a denial of service via a crafted e-mail address
   that is improperly handled during construction of a log message.
 cvss_v2: 4.3
 unaffected_versions:
-- ~> 2.3.2
+  - "~> 2.3.2"
 patched_versions:
-- '>= 3.2.15'
+  - ">= 3.2.15"
diff --git a/gems/actionmailer/CVE-2024-47889.yml b/gems/actionmailer/CVE-2024-47889.yml
new file mode 100644
index 0000000000..cd28467784
--- /dev/null
+++ b/gems/actionmailer/CVE-2024-47889.yml
@@ -0,0 +1,47 @@
+---
+gem: actionmailer
+framework: rails
+cve: 2024-47889
+ghsa: h47h-mwp9-c6q6
+url: https://github.com/rails/rails/security/advisories/GHSA-h47h-mwp9-c6q6
+title: Possible ReDoS vulnerability in block_format in Action Mailer
+date: 2024-10-15
+description: |
+  There is a possible ReDoS vulnerability in the block_format helper
+  in Action Mailer. This vulnerability has been assigned the
+  CVE identifier CVE-2024-47889.
+
+  ## Impact
+
+  Carefully crafted text can cause the block_format helper to take an
+  unexpected amount of time, possibly resulting in a DoS vulnerability.
+  All users running an affected release should either upgrade or apply
+  the relevant patch immediately.
+
+  Ruby 3.2 has mitigations for this problem, so Rails applications
+  using Ruby 3.2 or newer are unaffected. Rails 8.0.0.beta1 requires
+  Ruby 3.2 or greater so is unaffected.
+
+  ## Releases
+
+  The fixed releases are available at the normal locations.
+
+  ## Workarounds
+
+  Users can avoid calling the `block_format` helper or upgrade
+  to Ruby 3.2.
+
+  ##Credits
+
+  Thanks to [ooooooo_q](https://hackerone.com/ooooooo_q) for the report!
+unaffected_versions:
+  - "< 3.0.0"
+patched_versions:
+  - "~> 6.1.7.9"
+  - "~> 7.0.8.5"
+  - "~> 7.1.4, >= 7.1.4.1"
+  - ">= 7.2.1.1"
+related:
+  url:
+    - https://github.com/rails/rails/security/advisories/GHSA-h47h-mwp9-c6q6
+    - https://github.com/advisories/GHSA-h47h-mwp9-c6q6
diff --git a/gems/actionpack-page_caching/CVE-2020-8159.yml b/gems/actionpack-page_caching/CVE-2020-8159.yml
index 628851bb6e..309954ca64 100644
--- a/gems/actionpack-page_caching/CVE-2020-8159.yml
+++ b/gems/actionpack-page_caching/CVE-2020-8159.yml
@@ -38,4 +38,4 @@ description: |
   Where the `show` action of the `BooksController` may be vulnerable.
 cvss_v3: 9.8
 patched_versions:
-- '>= 1.2.1'
+  - ">= 1.2.1"
diff --git a/gems/actionpack/CVE-2008-7248.yml b/gems/actionpack/CVE-2008-7248.yml
new file mode 100644
index 0000000000..18442b531a
--- /dev/null
+++ b/gems/actionpack/CVE-2008-7248.yml
@@ -0,0 +1,37 @@
+---
+gem: actionpack
+framework: rails
+cve: 2008-7248
+ghsa: 8fqx-7pv4-3jwm
+url: https://weblog.rubyonrails.org/2008/11/18/potential-circumvention-of-csrf-protection-in-rails-2-1
+title: Improper Input Validation in rails
+date: 2017-10-24
+description: |
+  Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify
+  tokens for requests with certain content types, which allows remote
+  attackers to bypass cross-site request forgery (CSRF) protection
+  for requests to applications that rely on this protection, as
+  demonstrated using text/plain.
+cvss_v2: 6.8
+unaffected_versions:
+  - "< 2.1.0"
+patched_versions:
+  - "~> 2.1.3"
+  - ">= 2.2.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2008-7248
+    - https://weblog.rubyonrails.org/2008/11/18/potential-circumvention-of-csrf-protection-in-rails-2-1
+    - https://groups.google.com/group/rubyonrails-security/browse_thread/thread/d741ee286e36e301?hl=en
+    - https://www.rorsecurity.info/journal/2008/11/19/circumvent-rails-csrf-protection.html
+    - https://github.com/advisories/GHSA-8fqx-7pv4-3jwm
+    - https://access.redhat.com/security/cve/CVE-2008-7248
+    - https://bugzilla.redhat.com/show_bug.cgi?id=544329
+    - https://pseudo-flaw.net/content/web-browsers/form-data-encoding-roundup/
+    - https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html
+    - https://www.openwall.com/lists/oss-security/2009/11/28/1
+    - https://www.openwall.com/lists/oss-security/2009/12/02/2
+    - http://github.com/rails/rails/commit/099a98e9b7108dae3e0f78b207e0a7dc5913bd1a
+    - http://github.com/rails/rails/commit/f1ad8b48aae3ee26613b3e77bc0056e120096846
+    - https://rubygems.org/gems/rails/versions/2.1.2
+    - https://rubygems.org/gems/rails/versions/2.1.2
diff --git a/gems/actionpack/CVE-2009-3009.yml b/gems/actionpack/CVE-2009-3009.yml
new file mode 100644
index 0000000000..0957dfcc40
--- /dev/null
+++ b/gems/actionpack/CVE-2009-3009.yml
@@ -0,0 +1,33 @@
+---
+gem: actionpack
+framework: rails
+cve: 2009-3009
+osvdb: 57666
+ghsa: 8qrh-h9m2-5fvf
+url: http://weblog.rubyonrails.org/2009/9/4/xss-vulnerability-in-ruby-on-rails
+title: Moderate severity XSS vulnerability that affects rails
+date: 2017-10-24
+description: |
+  Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before
+  2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary
+  web script or HTML by placing malformed Unicode strings into a form helper.
+
+  9/4/2009 url mentions patches for 2.0, 2.1, 2.2, and 2.3 series.
+unaffected_versions:
+  - "< 2.0.0"
+patched_versions:
+  - "~> 2.2.3"
+  - ">= 2.3.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2009-3009
+    - http://weblog.rubyonrails.org/2009/9/4/xss-vulnerability-in-ruby-on-rails
+    - https://groups.google.com/g/rubyonrails-security/c/SKs_SiwWGQ8/m/tNHhlHfNV38J
+    - http://www.osvdb.org/57666
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/53036
+    - https://github.com/advisories/GHSA-8qrh-h9m2-5fvf
+    - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545063
+    - https://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
+    - http://support.apple.com/kb/HT4077
+    - https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
+    - http://www.debian.org/security/2009/dsa-1887
diff --git a/gems/actionpack/CVE-2009-3086.yml b/gems/actionpack/CVE-2009-3086.yml
new file mode 100644
index 0000000000..e9bed1b6ea
--- /dev/null
+++ b/gems/actionpack/CVE-2009-3086.yml
@@ -0,0 +1,26 @@
+---
+gem: actionpack
+framework: rails
+cve: 2009-3086
+ghsa: fg9w-g6m4-557j
+url: http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails
+title: Moderate severity vulnerability that affects rails
+date: 2017-10-24
+description: |
+  A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x
+  before 2.3.4, leaks information about the complexity of message-digest
+  signature verification in the cookie store, which might allow remote
+  attackers to forge a digest via multiple attempts.
+cvss_v2: 5.0
+unaffected_versions:
+  - "< 2.1.0"
+patched_versions:
+  - "~> 2.2.3"
+  - ">= 2.3.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2009-3086
+    - http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails
+    - https://github.com/advisories/GHSA-fg9w-g6m4-557j
+    - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
+    - http://www.debian.org/security/2011/dsa-2260
diff --git a/gems/actionpack/CVE-2011-0446.yml b/gems/actionpack/CVE-2011-0446.yml
new file mode 100644
index 0000000000..77ac22cc02
--- /dev/null
+++ b/gems/actionpack/CVE-2011-0446.yml
@@ -0,0 +1,33 @@
+---
+gem: actionpack
+framework: rails
+cve: 2011-0446
+ghsa: 75w6-p6mg-vh8j
+url: https://groups.google.com/g/rubyonrails-security/c/8CpI7egxX4E/m/SmtqtyOKWzYJ
+title: XSS vulnerabilities in the mail_to helper in rails/actionpack
+date: 2017-10-24
+description: |
+  Multiple cross-site scripting (XSS) vulnerabilities in the mail_to
+  helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when
+  javascript encoding is used, allow remote attackers to inject
+  arbitrary web script or HTML via a crafted (1) name or (2) email value.
+cvss_v2: 4.3
+patched_versions:
+  - "~> 2.3.11"
+  - ">= 3.0.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-0446
+    - https://groups.google.com/g/rubyonrails-security/c/8CpI7egxX4E/m/SmtqtyOKWzYJ
+    - https://github.com/advisories/GHSA-75w6-p6mg-vh8j
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055074.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055088.html
+    - http://www.debian.org/security/2011/dsa-2247
+    - https://web.archive.org/web/20111225083933/http://secunia.com/advisories/43274
+    - https://web.archive.org/web/20111225083933/http://secunia.com/advisories/43666
+    - https://web.archive.org/web/20201208053819/http://www.securitytracker.com/id?1025064
+    - https://web.archive.org/web/20210121211512/http://www.securityfocus.com/bid/46291
+    - https://github.com/rails/rails/commit/abe97736b8316f1b714cac56c115c0779aa73217
+    - https://github.com/rails/rails/commit/e3dd2107c57a8efaaea5d61cf8da65f7444760b2
+    - https://github.com/advisories/GHSA-75w6-p6mg-vh8j
diff --git a/gems/actionpack/CVE-2011-0447.yml b/gems/actionpack/CVE-2011-0447.yml
new file mode 100644
index 0000000000..053eb4884d
--- /dev/null
+++ b/gems/actionpack/CVE-2011-0447.yml
@@ -0,0 +1,37 @@
+---
+gem: actionpack
+framework: rails
+cve: 2011-0447
+ghsa: 24fg-p96v-hxh8
+url: http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails
+title: CSRF Protection Bypass in Ruby on Rails
+date: 2017-10-24
+description: |
+  Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and
+  3.x before 3.0.4, does not properly validate HTTP requests that
+  contain an X-Requested-With header, which makes it easier for
+  remote attackers to conduct cross-site request forgery (CSRF)
+  attacks via forged (1) AJAX or (2) API requests that leverage
+  "combinations of browser plugins and HTTP redirects,"
+  a related issue to CVE-2011-0696.
+cvss_v2: 6.8
+unaffected_versions:
+  - "< 2.1.0"
+patched_versions:
+  - "~> 2.3.11"
+  - ">= 3.0.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-0447
+    - http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails
+    - https://groups.google.com/g/rubyonrails-security/c/LZWjzCPgNmU/m/HBgNjGahLsIJ
+    - https://github.com/advisories/GHSA-24fg-p96v-hxh8
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055074.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055088.html
+    - https://bugzilla.redhat.com/show_bug.cgi?id=677631
+    - http://www.debian.org/security/2011/dsa-2247
+    - https://web.archive.org/web/20111225083933/http://secunia.com/advisories/43274
+    - https://web.archive.org/web/20111225083933/http://secunia.com/advisories/43666
+    - https://web.archive.org/web/20210121211512/http://www.securityfocus.com/bid/46291
+    - https://web.archive.org/web/20201208053819/http://www.securitytracker.com/id?1025060
diff --git a/gems/actionpack/CVE-2011-0449.yml b/gems/actionpack/CVE-2011-0449.yml
new file mode 100644
index 0000000000..922d865902
--- /dev/null
+++ b/gems/actionpack/CVE-2011-0449.yml
@@ -0,0 +1,31 @@
+---
+gem: actionpack
+framework: rails
+cve: 2011-0449
+ghsa: 4ww3-3rxj-8v6q
+url: http://weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4
+title: Filter Problems on Case-Insensitive Filesystems in rails/actionpack
+date: 2017-10-24
+description: |
+  actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x
+  before 3.0.4, when a case-insensitive filesystem is used, does not
+  properly implement filters associated with the list of available
+  templates, which allows remote attackers to bypass intended access
+  restrictions via an action name that uses an unintended case for
+  alphabetic characters.
+cvss_v2: 7.5
+unaffected_versions:
+  - "< 3.0.0"
+patched_versions:
+  - ">= 3.0.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-0449
+    - http://weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4
+    - https://github.com/rails/rails/commit/6f80224057803f85b3f448936aae89e742452c3b
+    - https://groups.google.com/g/rubyonrails-security/c/Ni8fvBdhszY/m/T1vfhC5bNAQJ
+    - https://github.com/advisories/GHSA-4ww3-3rxj-8v6q
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html
+    - https://bugzilla.redhat.com/show_bug.cgi?id=679351
+    - https://web.archive.org/web/20111225083933/http://secunia.com/advisories/43278
+    - https://web.archive.org/web/20201208053819/http://securitytracker.com/id?1025061
diff --git a/gems/actionpack/CVE-2011-1497.yml b/gems/actionpack/CVE-2011-1497.yml
new file mode 100644
index 0000000000..09cc3d721a
--- /dev/null
+++ b/gems/actionpack/CVE-2011-1497.yml
@@ -0,0 +1,21 @@
+---
+gem: actionpack
+framework: rails
+cve: 2011-1497
+ghsa: q58j-fmvf-9rq6
+url: https://github.com/rails/rails/blob/38df020c95beca7e12f0188cb7e18f3c37789e20/actionpack/CHANGELOG
+title: Cross site scripting in rails/actionpack < 3.0.6
+date: 2022-04-22
+description: |
+  A cross-site scripting vulnerability flaw was found in
+  the auto_link function in Rails before version 3.0.6.
+cvss_v2: 4.3
+cvss_v3: 6.1
+patched_versions:
+  - ">= 3.0.6"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-1497
+    - https://github.com/rails/rails/blob/38df020c95beca7e12f0188cb7e18f3c37789e20/actionpack/CHANGELOG
+    - https://github.com/advisories/GHSA-q58j-fmvf-9rq6
+    - https://www.openwall.com/lists/oss-security/2011/04/06/13
diff --git a/gems/actionpack/CVE-2011-2197.yml b/gems/actionpack/CVE-2011-2197.yml
new file mode 100644
index 0000000000..ebaebd415f
--- /dev/null
+++ b/gems/actionpack/CVE-2011-2197.yml
@@ -0,0 +1,32 @@
+---
+gem: actionpack
+framework: rails
+cve: 2011-2197
+ghsa: v9v4-7jp6-8c73
+url: http://weblog.rubyonrails.org/2011/6/8/potential-xss-vulnerability-in-ruby-on-rails-applications
+title: Potential XSS Vulnerability in Ruby on Rails Applications
+date: 2017-10-24
+description: |
+  The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x
+  before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does
+  not properly handle mutation of safe buffers, which makes it easier
+  for remote attackers to conduct XSS attacks via crafted strings to an
+  application that uses a problematic string method, as demonstrated
+  by the sub method.
+cvss_v2: 4.3
+patched_versions:
+  - "~> 2.3.12"
+  - ">= 3.0.8"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-2197
+    - http://weblog.rubyonrails.org/2011/6/8/potential-xss-vulnerability-in-ruby-on-rails-applications
+    - https://github.com/rails/rails/commit/53a2c0baf2b128dd4808eca313256f6f4bb8c4cd
+    - https://github.com/rails/rails/commit/ed3796434af6069ced6a641293cf88eef3b284da
+    - https://groups.google.com/g/rubyonrails-security/c/LlFuesyWxPs/m/1OBxRA1gO2YJ
+    - https://gist.github.com/NZKoz/b2ceb626fc2bcdfe497f
+    - https://github.com/advisories/GHSA-v9v4-7jp6-8c73
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062514.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062090.html
+    - http://openwall.com/lists/oss-security/2011/06/09/2
+    - http://openwall.com/lists/oss-security/2011/06/13/9
diff --git a/gems/actionpack/CVE-2011-2929.yml b/gems/actionpack/CVE-2011-2929.yml
new file mode 100644
index 0000000000..b19eb3042e
--- /dev/null
+++ b/gems/actionpack/CVE-2011-2929.yml
@@ -0,0 +1,38 @@
+---
+gem: actionpack
+framework: rails
+cve: 2011-2929
+ghsa: r7q2-5gqg-6c7q
+url: https://rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6
+title: Filter Skipping Vulnerability in Ruby on Rails 3.0/actionpack
+date: 2017-10-24
+description: |
+  The template selection functionality in
+  actionpack/lib/action_view/template/resolver.rb in Ruby on Rails
+  3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly
+  handle glob characters, which allows remote attackers to render
+  arbitrary views via a crafted URL, related to a
+  "filter skipping vulnerability."
+cvss_v2: 5.0
+unaffected_versions:
+  - "< 3.0.0"
+patched_versions:
+  - "~> 3.0.10"
+  - "~> 3.1.0.rc6"
+  - ">= 3.1.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-2929
+    - http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6
+    - https://github.com/rails/rails/commit/5f94b93279f6d0682fafb237c301302c107a9552
+    - https://groups.google.com/g/rubyonrails-security/c/NCCsca7TEtY/m/Ya9-T266u8sJ
+    - https://bugzilla.redhat.com/show_bug.cgi?id=731432
+    - https://github.com/advisories/GHSA-r7q2-5gqg-6c7q
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065109.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html
+    - http://www.openwall.com/lists/oss-security/2011/08/17/1
+    - http://www.openwall.com/lists/oss-security/2011/08/19/11
+    - http://www.openwall.com/lists/oss-security/2011/08/20/1
+    - http://www.openwall.com/lists/oss-security/2011/08/22/13
+    - http://www.openwall.com/lists/oss-security/2011/08/22/14
+    - http://www.openwall.com/lists/oss-security/2011/08/22/5
diff --git a/gems/actionpack/CVE-2011-2931.yml b/gems/actionpack/CVE-2011-2931.yml
new file mode 100644
index 0000000000..9020e84e2b
--- /dev/null
+++ b/gems/actionpack/CVE-2011-2931.yml
@@ -0,0 +1,40 @@
+---
+gem: actionpack
+framework: rails
+cve: 2011-2931
+ghsa: v5jg-558j-q67c
+url: http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6
+title: XSS Vulnerability in strip_tags helper in rails/actionpack
+date: 2017-10-24
+description: |
+  Cross-site scripting (XSS) vulnerability in the strip_tags helper
+  in actionpack/lib/action_controller/vendor/html-scanner/html/node.rb
+  in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x
+  before 3.1.0.rc5 allows remote attackers to inject arbitrary web
+  script or HTML via a tag with an invalid name.
+cvss_v2: 4.3
+unaffected_versions:
+  - "< 2.0.0"
+  - "< 3.0.0"
+patched_versions:
+  - "~> 2.3.13"
+  - ">= 3.0.10"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-2931
+    - http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6
+    - https://groups.google.com/g/rubyonrails-security/c/K5EwdJt06hI
+    - https://github.com/rails/rails/commit/586a944ddd4d03e66dea1093306147594748037a
+    - https://bugzilla.redhat.com/show_bug.cgi?id=731436
+    - https://github.com/advisories/GHSA-v5jg-558j-q67c
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065109.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065137.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html
+    - http://www.debian.org/security/2011/dsa-2301
+    - http://www.openwall.com/lists/oss-security/2011/08/17/1
+    - http://www.openwall.com/lists/oss-security/2011/08/19/11
+    - http://www.openwall.com/lists/oss-security/2011/08/20/1
+    - http://www.openwall.com/lists/oss-security/2011/08/22/13
+    - http://www.openwall.com/lists/oss-security/2011/08/22/14
+    - http://www.openwall.com/lists/oss-security/2011/08/22/5
+    - https://web.archive.org/web/20111225083933/http://secunia.com/advisories/45921
diff --git a/gems/actionpack/OSVDB-74616.yml b/gems/actionpack/CVE-2011-3186.yml
similarity index 93%
rename from gems/actionpack/OSVDB-74616.yml
rename to gems/actionpack/CVE-2011-3186.yml
index 7cfd5b59a5..b40d962cc3 100644
--- a/gems/actionpack/OSVDB-74616.yml
+++ b/gems/actionpack/CVE-2011-3186.yml
@@ -3,6 +3,7 @@ gem: actionpack
 framework: rails
 cve: 2011-3186
 osvdb: 74616
+ghsa: fcqf-h4h4-695m
 url: https://groups.google.com/forum/#!topic/rubyonrails-security/b_yTveAph2g
 title: Response Splitting Vulnerability in Ruby on Rails
 date: 2011-08-16
@@ -12,4 +13,4 @@ description: |
   insufficient sanitization of the values provided for response content types.
 cvss_v2: 4.3
 patched_versions:
-- '>= 2.3.13'
+  - ">= 2.3.13"
diff --git a/gems/actionpack/CVE-2011-3187.yml b/gems/actionpack/CVE-2011-3187.yml
new file mode 100644
index 0000000000..098092b150
--- /dev/null
+++ b/gems/actionpack/CVE-2011-3187.yml
@@ -0,0 +1,32 @@
+---
+gem: actionpack
+framework: rails
+cve: 2011-3187
+ghsa: 3vfw-7rcp-3xgm
+url: http://webservsec.blogspot.com/2011/02/ruby-on-rails-vulnerability.html
+title: Ruby on rails 3.0.5 Remote_IP.rb Input Validation in rails/actionpack
+date: 2017-10-24
+description: |
+  The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb
+  in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header
+  in requests from IP addresses on a Class C network, which might allow
+  remote attackers to inject arbitrary text into log files or bypass
+  intended address parsing via a crafted header.
+cvss_v2: 4.3
+unaffected_versions:
+  - "< 2.3.0"
+patched_versions:
+  - ">= 2.3.13"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-3187
+    - http://webservsec.blogspot.com/2011/02/ruby-on-rails-vulnerability.html
+    - https://github.com/advisories/GHSA-3vfw-7rcp-3xgm
+    - https://www.rapid7.com/db/vulnerabilities/ruby_on_rails-cve-2011-3187
+    - http://www.openwall.com/lists/oss-security/2011/08/17/1
+    - http://www.openwall.com/lists/oss-security/2011/08/19/11
+    - http://www.openwall.com/lists/oss-security/2011/08/20/1
+    - http://www.openwall.com/lists/oss-security/2011/08/22/13
+    - http://www.openwall.com/lists/oss-security/2011/08/22/14
+    - http://www.openwall.com/lists/oss-security/2011/08/22/5
+    - https://web.archive.org/web/20111209181000/http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0337.html
diff --git a/gems/actionpack/CVE-2011-4319.yml b/gems/actionpack/CVE-2011-4319.yml
new file mode 100644
index 0000000000..c45592e831
--- /dev/null
+++ b/gems/actionpack/CVE-2011-4319.yml
@@ -0,0 +1,42 @@
+---
+gem: actionpack
+framework: rails
+cve: 2011-4319
+osvdb: 77199
+ghsa: xxr8-833v-c7wc
+url: http://weblog.rubyonrails.org/2011/11/18/rails-3-0-11-has-been-released
+title: Cross-site Scripting vulnerability in i18n translations helper method
+date: 2017-10-24
+description: |
+  A cross-site scripting (XSS) flaw was found in the way the 'translate' helper
+  method of the Ruby on Rails performed HTML escaping of interpolated user
+  input, when interpolation in combination with HTML-safe translations were
+  used. A remote attacker could use this flaw to execute arbitrary HTML or web
+  script by providing a specially-crafted input to Ruby on Rails application,
+  using the ActionPack module and its 'translate' helper method without explicit
+  (application specific) sanitization of user provided input.
+
+  Cross-site scripting (XSS) vulnerability in the i18n translations helper
+  method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2,
+  and the rails_xss plugin in Ruby on Rails 2.3.x, allows remote
+  attackers to inject arbitrary web script or HTML via vectors related
+  to a translations string whose name ends with an "html" substring.
+cvss_v2: 4.3
+unaffected_versions:
+  - "< 3.0.0"
+patched_versions:
+  - "~> 3.0.11"
+  - ">= 3.1.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-4319
+    - http://weblog.rubyonrails.org/2011/11/18/rails-3-0-11-has-been-released
+    - http://weblog.rubyonrails.org/2011/11/18/rails-3-1-2-has-been-released
+    - https://groups.google.com/g/rubyonrails-security/c/K2HXD7c8fMU
+    - https://groups.google.com/g/rubyonrails-security/c/K2HXD7c8fMU/m/gt22xPskXMYJ
+    - https://github.com/advisories/GHSA-xxr8-833v-c7wc
+    - http://osvdb.org/77199
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/71364
+    - http://openwall.com/lists/oss-security/2011/11/18/8
+    - https://web.archive.org/web/20210121211512/http://www.securityfocus.com/bid/50722
+    - https://web.archive.org/web/20201208053819/http://www.securitytracker.com/id?1026342
diff --git a/gems/actionpack/CVE-2012-1099.yml b/gems/actionpack/CVE-2012-1099.yml
index 299b8a6677..8d8c256af1 100644
--- a/gems/actionpack/CVE-2012-1099.yml
+++ b/gems/actionpack/CVE-2012-1099.yml
@@ -3,15 +3,17 @@ gem: actionpack
 framework: rails
 cve: 2012-1099
 osvdb: 79727
+ghsa: 2xjj-5x6h-8vmf
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-1099
-title: "CVE-2012-1099 rubygem-actionpack: XSS in the 'select' helper"
+title: "CVE-2012-1099 rubygem-actionpack: XSS in the \"select\" helper"
 date: 2012-03-01
-description: Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb
+description: |
+  Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb
   in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and
   3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML
   via vectors involving certain generation of OPTION elements within SELECT elements.
 cvss_v2: 4.3
 patched_versions:
-- ~> 3.0.12
-- ~> 3.1.4
-- '>= 3.2.2'
+  - "~> 3.0.12"
+  - "~> 3.1.4"
+  - ">= 3.2.2"
diff --git a/gems/actionpack/CVE-2012-2660.yml b/gems/actionpack/CVE-2012-2660.yml
new file mode 100644
index 0000000000..736c7b7f30
--- /dev/null
+++ b/gems/actionpack/CVE-2012-2660.yml
@@ -0,0 +1,32 @@
+---
+gem: actionpack
+framework: rails
+cve: 2012-2660
+ghsa: hgpp-pp89-4fgf
+url: https://groups.google.com/g/rubyonrails-security/c/8SA-M3as7A8/m/Mr9fi9X4kNgJ
+title: Unsafe Query Generation Risk in Ruby on Rails
+date: 2017-10-24
+description: |
+  actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails
+  before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not
+  properly consider differences in parameter handling between the
+  Active Record component and the Rack interface, which allows remote
+  attackers to bypass intended database-query restrictions and perform
+  NULL checks via a crafted request, as demonstrated by certain
+  "[nil]" values, a related issue to CVE-2012-2694.
+cvss_v2: 6.4
+patched_versions:
+  - "~> 3.0.13"
+  - "~> 3.1.5"
+  - ">= 3.2.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-2660
+    - https://groups.google.com/g/rubyonrails-security/c/8SA-M3as7A8/m/Mr9fi9X4kNgJ
+    - https://github.com/advisories/GHSA-hgpp-pp89-4fgf
+    - http://rhn.redhat.com/errata/RHSA-2013-0154.html
+    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00002.html
+    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00014.html
+    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00016.html
+    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00017.html
+    - http://lists.opensuse.org/opensuse-updates/2012-08/msg00046.html
diff --git a/gems/actionpack/CVE-2012-2694.yml b/gems/actionpack/CVE-2012-2694.yml
new file mode 100644
index 0000000000..96afbc6e81
--- /dev/null
+++ b/gems/actionpack/CVE-2012-2694.yml
@@ -0,0 +1,32 @@
+---
+gem: actionpack
+framework: rails
+cve: 2012-2694
+ghsa: q34c-48gc-m9g8
+url: https://groups.google.com/g/rubyonrails-security/c/jILZ34tAHF4/m/7x0hLH-o0-IJ
+title: Unsafe Query Generation Risk in Ruby on Rails
+date: 2017-10-24
+description: |
+  actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails
+  before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not
+  properly consider differences in parameter handling between the
+  Active Record component and the Rack interface, which allows remote
+  attackers to bypass intended database-query restrictions and perform
+  NULL checks via a crafted request, as demonstrated by certain
+  "['xyz', nil]" values, a related issue to CVE-2012-2660.
+cvss_v2: 4.3
+patched_versions:
+  - "~> 3.0.14"
+  - "~> 3.1.6"
+  - ">= 3.2.6"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-2694
+    - https://groups.google.com/g/rubyonrails-security/c/jILZ34tAHF4/m/7x0hLH-o0-IJ
+    - https://github.com/advisories/GHSA-q34c-48gc-m9g8
+    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00002.html
+    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00014.html
+    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00016.html
+    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00017.html
+    - http://lists.opensuse.org/opensuse-updates/2012-08/msg00046.html
+    - http://rhn.redhat.com/errata/RHSA-2013-0154.html
diff --git a/gems/actionpack/CVE-2012-3424.yml b/gems/actionpack/CVE-2012-3424.yml
index b13e66d8c4..5d99b0d118 100644
--- a/gems/actionpack/CVE-2012-3424.yml
+++ b/gems/actionpack/CVE-2012-3424.yml
@@ -3,18 +3,20 @@ gem: actionpack
 framework: rails
 cve: 2012-3424
 osvdb: 84243
+ghsa: 92w9-2pqw-rhjj
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-3424
-title: 'CVE-2012-3424 rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest'
+title: "CVE-2012-3424 rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest"
 date: 2012-07-26
-description: The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb
+description: |
+  The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb
   in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts
   Digest Authentication strings to symbols, which allows remote attackers to cause
   a denial of service by leveraging access to an application that uses a with_http_digest
   helper method, as demonstrated by the authenticate_or_request_with_http_digest method.
 cvss_v2: 5.0
 unaffected_versions:
-- '>= 2.3.5, <= 2.3.14'
+  - ">= 2.3.5, <= 2.3.14"
 patched_versions:
-- ~> 3.0.16
-- ~> 3.1.7
-- '>= 3.2.7'
+  - "~> 3.0.16"
+  - "~> 3.1.7"
+  - ">= 3.2.7"
diff --git a/gems/actionpack/CVE-2012-3463.yml b/gems/actionpack/CVE-2012-3463.yml
index a715c3d6b8..c80d976dab 100644
--- a/gems/actionpack/CVE-2012-3463.yml
+++ b/gems/actionpack/CVE-2012-3463.yml
@@ -3,18 +3,20 @@ gem: actionpack
 framework: rails
 cve: 2012-3463
 osvdb: 84515
+ghsa: 98mf-8f57-64qf
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-3463
 title: 'CVE-2012-3463 rubygem-actionpack: potential XSS vulnerability in select_tag
   prompt'
 date: 2012-08-09
-description: Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_tag_helper.rb
+description: |
+  Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_tag_helper.rb
   in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows
   remote attackers to inject arbitrary web script or HTML via the prompt field to
   the select_tag helper.
 cvss_v2: 4.3
 unaffected_versions:
-- ~> 2.3.0
+  - "~> 2.3.0"
 patched_versions:
-- ~> 3.0.17
-- ~> 3.1.8
-- '>= 3.2.8'
+  - "~> 3.0.17"
+  - "~> 3.1.8"
+  - ">= 3.2.8"
diff --git a/gems/actionpack/CVE-2012-3465.yml b/gems/actionpack/CVE-2012-3465.yml
index d9890fd68c..a964c2441b 100644
--- a/gems/actionpack/CVE-2012-3465.yml
+++ b/gems/actionpack/CVE-2012-3465.yml
@@ -3,15 +3,17 @@ gem: actionpack
 framework: rails
 cve: 2012-3465
 osvdb: 84513
+ghsa: 7g65-ghrg-hpf5
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-3465
-title: 'CVE-2012-3465 rubygem-actionpack: XSS Vulnerability in strip_tags'
+title: "CVE-2012-3465 rubygem-actionpack: XSS Vulnerability in strip_tags"
 date: 2012-08-09
-description: Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb
+description: |
+  Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb
   in the strip_tags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and
   3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML
   via malformed HTML markup.
 cvss_v2: 4.3
 patched_versions:
-- ~> 3.0.17
-- ~> 3.1.8
-- '>= 3.2.8'
+  - "~> 3.0.17"
+  - "~> 3.1.8"
+  - ">= 3.2.8"
diff --git a/gems/actionpack/CVE-2013-0156.yml b/gems/actionpack/CVE-2013-0156.yml
index 24e919b787..a096b16203 100644
--- a/gems/actionpack/CVE-2013-0156.yml
+++ b/gems/actionpack/CVE-2013-0156.yml
@@ -3,11 +3,13 @@ gem: actionpack
 framework: rails
 cve: 2013-0156
 osvdb: 89026
+ghsa: jmgw-6vjg-jjwg
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0156
 title: 'CVE-2013-0156 rubygem-activesupport: Multiple vulnerabilities in parameter
   parsing in ActionPack'
 date: 2013-01-08
-description: active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15,
+description: |
+  active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15,
   3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly
   restrict casts of string values, which allows remote attackers to conduct object-injection
   attacks and execute arbitrary code, or cause a denial of service (memory and CPU
@@ -15,7 +17,7 @@ description: active_support/core_ext/hash/conversions.rb in Ruby on Rails before
   for (1) YAML type conversion or (2) Symbol type conversion.
 cvss_v2: 10.0
 patched_versions:
-- ~> 2.3.15
-- ~> 3.0.19
-- ~> 3.1.10
-- '>= 3.2.11'
+  - "~> 2.3.15"
+  - "~> 3.0.19"
+  - "~> 3.1.10"
+  - ">= 3.2.11"
diff --git a/gems/actionpack/CVE-2013-1855.yml b/gems/actionpack/CVE-2013-1855.yml
index 5b83f0b06f..7f21c9cc6b 100644
--- a/gems/actionpack/CVE-2013-1855.yml
+++ b/gems/actionpack/CVE-2013-1855.yml
@@ -3,10 +3,12 @@ gem: actionpack
 framework: rails
 cve: 2013-1855
 osvdb: 91452
+ghsa: q759-hwvc-m3jg
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1855
-title: 'CVE-2013-1855 rubygem-actionpack: css_sanitization: XSS vulnerability in sanitize_css'
+title: "CVE-2013-1855 rubygem-actionpack: css_sanitization: XSS vulnerability in sanitize_css"
 date: 2013-03-19
-description: The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb
+description: |
+  The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb
   in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before
   3.1.12, and 3.2.x before 3.2.13 does not properly handle \n (newline) characters,
   which makes it easier for remote attackers to conduct cross-site scripting (XSS)
@@ -15,6 +17,6 @@ description: The sanitize_css method in lib/action_controller/vendor/html-scanne
   XSS attacks against users of an application using Action Pack.
 cvss_v2: 4.3
 patched_versions:
-- ~> 2.3.18
-- ~> 3.1.12
-- '>= 3.2.13'
+  - "~> 2.3.18"
+  - "~> 3.1.12"
+  - ">= 3.2.13"
diff --git a/gems/actionpack/CVE-2013-1857.yml b/gems/actionpack/CVE-2013-1857.yml
index 7431543588..7ae594647c 100644
--- a/gems/actionpack/CVE-2013-1857.yml
+++ b/gems/actionpack/CVE-2013-1857.yml
@@ -3,11 +3,13 @@ gem: actionpack
 framework: rails
 cve: 2013-1857
 osvdb: 91454
+ghsa: j838-vfpq-fmf2
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1857
 title: 'CVE-2013-1857 rubygem-actionpack: sanitize_protocol: XSS Vulnerability in
   the  helper of Ruby on Rails'
 date: 2013-03-19
-description: 'The sanitize helper in lib/action_controller/vendor/html-scanner/html/sanitizer.rb
+description: |
+  'The sanitize helper in lib/action_controller/vendor/html-scanner/html/sanitizer.rb
   in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before
   3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : (colon) characters
   in URLs, which makes it easier for remote attackers to conduct cross-site scripting
@@ -17,6 +19,6 @@ description: 'The sanitize helper in lib/action_controller/vendor/html-scanner/h
   Pack.'
 cvss_v2: 4.3
 patched_versions:
-- ~> 2.3.18
-- ~> 3.1.12
-- '>= 3.2.13'
+  - "~> 2.3.18"
+  - "~> 3.1.12"
+  - ">= 3.2.13"
diff --git a/gems/actionpack/OSVDB-100528.yml b/gems/actionpack/CVE-2013-4491.yml
similarity index 91%
rename from gems/actionpack/OSVDB-100528.yml
rename to gems/actionpack/CVE-2013-4491.yml
index 26ed374a3a..27b4330754 100644
--- a/gems/actionpack/OSVDB-100528.yml
+++ b/gems/actionpack/CVE-2013-4491.yml
@@ -3,6 +3,7 @@ gem: actionpack
 framework: rails
 cve: 2013-4491
 osvdb: 100528
+ghsa: 699m-mcjm-9cw8
 url: https://groups.google.com/forum/#!topic/ruby-security-ann/pLrh6DUw998
 title: Reflective XSS Vulnerability in Ruby on Rails
 date: 2013-12-03
@@ -15,5 +16,5 @@ description: |
   been assigned the identifier CVE-2013-4492.
 cvss_v2: 4.3
 patched_versions:
-- ~> 3.2.16
-- '>= 4.0.2'
+  - "~> 3.2.16"
+  - ">= 4.0.2"
diff --git a/gems/actionpack/OSVDB-100525.yml b/gems/actionpack/CVE-2013-6414.yml
similarity index 84%
rename from gems/actionpack/OSVDB-100525.yml
rename to gems/actionpack/CVE-2013-6414.yml
index 8707a94b18..00b0fbc2dc 100644
--- a/gems/actionpack/OSVDB-100525.yml
+++ b/gems/actionpack/CVE-2013-6414.yml
@@ -3,6 +3,7 @@ gem: actionpack
 framework: rails
 cve: 2013-6414
 osvdb: 100525
+ghsa: mpxf-gcw2-pw5q
 url: https://groups.google.com/forum/#!topic/ruby-security-ann/A-ebV4WxzKg
 title: Denial of Service Vulnerability in Action View
 date: 2013-12-03
@@ -11,8 +12,7 @@ description: |
   Action View.
 cvss_v2: 5.0
 unaffected_versions:
-- ~> 2.3.0
-
+  - "~> 2.3.0"
 patched_versions:
-- ~> 3.2.16
-- '>= 4.0.2'
+  - "~> 3.2.16"
+  - ">= 4.0.2"
diff --git a/gems/actionpack/OSVDB-100524.yml b/gems/actionpack/CVE-2013-6415.yml
similarity index 91%
rename from gems/actionpack/OSVDB-100524.yml
rename to gems/actionpack/CVE-2013-6415.yml
index eaa39c7528..93dec36fd4 100644
--- a/gems/actionpack/OSVDB-100524.yml
+++ b/gems/actionpack/CVE-2013-6415.yml
@@ -3,6 +3,7 @@ gem: actionpack
 framework: rails
 cve: 2013-6415
 osvdb: 100524
+ghsa: 6h5q-96hp-9jgm
 url: https://groups.google.com/forum/#!topic/ruby-security-ann/9WiRn2nhfq0
 title: XSS Vulnerability in number_to_currency
 date: 2013-12-03
@@ -13,5 +14,5 @@ description: |
   which pass user controlled data as the unit parameter are vulnerable to an XSS attack.
 cvss_v2: 4.3
 patched_versions:
-- ~> 3.2.16
-- '>= 4.0.2'
+  - "~> 3.2.16"
+  - ">= 4.0.2"
diff --git a/gems/actionpack/OSVDB-100526.yml b/gems/actionpack/CVE-2013-6416.yml
similarity index 90%
rename from gems/actionpack/OSVDB-100526.yml
rename to gems/actionpack/CVE-2013-6416.yml
index 296c1f9a4c..bdfd607d53 100644
--- a/gems/actionpack/OSVDB-100526.yml
+++ b/gems/actionpack/CVE-2013-6416.yml
@@ -3,6 +3,7 @@ gem: actionpack
 framework: rails
 cve: 2013-6416
 osvdb: 100526
+ghsa: w37c-q653-qg95
 url: https://groups.google.com/forum/#!topic/ruby-security-ann/5ZI1-H5OoIM
 title: XSS Vulnerability in simple_format helper
 date: 2013-12-03
@@ -16,9 +17,8 @@ description: |
   attributes will be vulnerable to an XSS attack.
 cvss_v2: 4.3
 unaffected_versions:
-- ~> 2.3.0
-- ~> 3.1.0
-- ~> 3.2.0
-
+  - "~> 2.3.0"
+  - "~> 3.1.0"
+  - "~> 3.2.0"
 patched_versions:
-- '>= 4.0.2'
+  - ">= 4.0.2"
diff --git a/gems/actionpack/OSVDB-100527.yml b/gems/actionpack/CVE-2013-6417.yml
similarity index 93%
rename from gems/actionpack/OSVDB-100527.yml
rename to gems/actionpack/CVE-2013-6417.yml
index e7b2062f30..ddc93211b7 100644
--- a/gems/actionpack/OSVDB-100527.yml
+++ b/gems/actionpack/CVE-2013-6417.yml
@@ -3,6 +3,7 @@ gem: actionpack
 framework: rails
 cve: 2013-6417
 osvdb: 100527
+ghsa: wpw7-wxjm-cw8r
 url: https://groups.google.com/forum/#!topic/ruby-security-ann/niK4drpSHT4
 title: Incomplete fix to CVE-2013-0155 (Unsafe Query Generation Risk)
 date: 2013-12-03
@@ -17,5 +18,5 @@ description: |
   vulnerability.
 cvss_v2: 6.4
 patched_versions:
-- ~> 3.2.16
-- '>= 4.0.2'
+  - "~> 3.2.16"
+  - ">= 4.0.2"
diff --git a/gems/actionpack/CVE-2014-0081.yml b/gems/actionpack/CVE-2014-0081.yml
index 8f1d6f6b8a..e332c0cb88 100644
--- a/gems/actionpack/CVE-2014-0081.yml
+++ b/gems/actionpack/CVE-2014-0081.yml
@@ -3,17 +3,19 @@ gem: actionpack
 framework: rails
 cve: 2014-0081
 osvdb: 103439
+ghsa: m46p-ggm5-5j83
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-0081
-title: 'CVE-2014-0081 rubygem-actionpack: number_to_currency, number_to_percentage
-  and number_to_human XSS vulnerability'
+title: "CVE-2014-0081 rubygem-actionpack: number_to_currency,
+  number_to_percentage and number_to_human XSS vulnerability"
 date: 2014-02-18
-description: Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb
+description: |
+  Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb
   in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2
   allow remote attackers to inject arbitrary web script or HTML via the (1) format,
   (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage,
   or (c) number_to_human helper.
 cvss_v2: 4.3
 patched_versions:
-- ~> 3.2.17
-- ~> 4.0.3
-- '>= 4.1.0.beta2'
+  - "~> 3.2.17"
+  - "~> 4.0.3"
+  - ">= 4.1.0.beta2"
diff --git a/gems/actionpack/CVE-2014-0082.yml b/gems/actionpack/CVE-2014-0082.yml
index 8b4f612522..87b27fb021 100644
--- a/gems/actionpack/CVE-2014-0082.yml
+++ b/gems/actionpack/CVE-2014-0082.yml
@@ -3,15 +3,17 @@ gem: actionpack
 framework: rails
 cve: 2014-0082
 osvdb: 103440
+ghsa: 7cgp-c3g7-qvrw
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-0082
-title: 'CVE-2014-0082 rubygem-actionpack: Action View string handling denial of service'
+title: "CVE-2014-0082 rubygem-actionpack: Action View string handling denial of service"
 date: 2014-02-18
-description: actionpack/lib/action_view/template/text.rb in Action View in Ruby on
+description: |
+  actionpack/lib/action_view/template/text.rb in Action View in Ruby on
   Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the
   :text option to the render method, which allows remote attackers to cause a denial
   of service (memory consumption) by including these strings in headers.
 cvss_v2: 5.0
 unaffected_versions:
-- '>= 4.0.0'
+  - ">= 4.0.0"
 patched_versions:
-- '>= 3.2.17'
+  - ">= 3.2.17"
diff --git a/gems/actionpack/CVE-2014-0130.yml b/gems/actionpack/CVE-2014-0130.yml
index bf444fcb95..e75e9e050b 100644
--- a/gems/actionpack/CVE-2014-0130.yml
+++ b/gems/actionpack/CVE-2014-0130.yml
@@ -2,6 +2,7 @@
 gem: actionpack
 framework: rails
 cve: 2014-0130
+ghsa: 6x85-j5j2-27jx
 url: https://groups.google.com/forum/#!topic/rubyonrails-security/NkKc7vTW70o
 title: Directory Traversal Vulnerability With Certain Route Configurations
 date: 2014-05-06
@@ -15,6 +16,6 @@ description: |
   rails application server.
 cvss_v2: 4.3
 patched_versions:
-- ~> 3.2.18
-- ~> 4.0.5
-- '>= 4.1.1'
+  - "~> 3.2.18"
+  - "~> 4.0.5"
+  - ">= 4.1.1"
diff --git a/gems/actionpack/CVE-2014-7818.yml b/gems/actionpack/CVE-2014-7818.yml
index 3b6386d73c..7b801ab0b2 100644
--- a/gems/actionpack/CVE-2014-7818.yml
+++ b/gems/actionpack/CVE-2014-7818.yml
@@ -2,6 +2,7 @@
 gem: actionpack
 framework: rails
 cve: 2014-7818
+ghsa: 29gr-w57f-rpfw
 url: https://groups.google.com/forum/#!topic/rubyonrails-security/dCp7duBiQgo
 title: Arbitrary file existence disclosure in Action Pack
 date: 2014-10-30
@@ -12,10 +13,9 @@ description: |
   exists.
 cvss_v2: 4.3
 unaffected_versions:
-- < 3.0.0
-
+  - "< 3.0.0"
 patched_versions:
-- ~> 3.2.20
-- ~> 4.0.11
-- ~> 4.1.7
-- '>= 4.2.0.beta3'
+  - "~> 3.2.20"
+  - "~> 4.0.11"
+  - "~> 4.1.7"
+  - ">= 4.2.0.beta3"
diff --git a/gems/actionpack/CVE-2014-7829.yml b/gems/actionpack/CVE-2014-7829.yml
index f85557320e..c5da7574b9 100644
--- a/gems/actionpack/CVE-2014-7829.yml
+++ b/gems/actionpack/CVE-2014-7829.yml
@@ -2,6 +2,7 @@
 gem: actionpack
 framework: rails
 cve: 2014-7829
+ghsa: h56m-vwxc-3qpw
 url: https://groups.google.com/forum/#!topic/rubyonrails-security/rMTQy4oRCGk
 title: Arbitrary file existence disclosure in Action Pack
 date: 2014-11-17
@@ -13,11 +14,10 @@ description: |
   specially crafted string is slightly different.
 cvss_v2: 5.0
 unaffected_versions:
-- < 3.0.0
-
+  - "< 3.0.0"
 patched_versions:
-- ~> 3.2.21
-- ~> 4.0.11.1
-- ~> 4.0.12
-- ~> 4.1.7.1
-- '>= 4.1.8'
+  - "~> 3.2.21"
+  - "~> 4.0.11.1"
+  - "~> 4.0.12"
+  - "~> 4.1.7.1"
+  - ">= 4.1.8"
diff --git a/gems/actionpack/CVE-2015-7576.yml b/gems/actionpack/CVE-2015-7576.yml
index 9b41c89c7a..7ed83e8b7c 100644
--- a/gems/actionpack/CVE-2015-7576.yml
+++ b/gems/actionpack/CVE-2015-7576.yml
@@ -110,7 +110,7 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 3.7
 patched_versions:
-- '>= 5.0.0.beta1.1'
-- ~> 4.2.5, >= 4.2.5.1
-- ~> 4.1.14, >= 4.1.14.1
-- ~> 3.2.22.1
+  - ">= 5.0.0.beta1.1"
+  - "~> 4.2.5, >= 4.2.5.1"
+  - "~> 4.1.14, >= 4.1.14.1"
+  - "~> 3.2.22.1"
diff --git a/gems/actionpack/CVE-2015-7581.yml b/gems/actionpack/CVE-2015-7581.yml
index 38c5a38cf6..77874c548c 100644
--- a/gems/actionpack/CVE-2015-7581.yml
+++ b/gems/actionpack/CVE-2015-7581.yml
@@ -46,8 +46,8 @@ description: |
   Please note that only the 4.1.x and 4.2.x series are supported at present.  Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.
 cvss_v3: 7.5
 unaffected_versions:
-- < 4.0.0
-- '>= 5.0.0.beta1'
+  - "< 4.0.0"
+  - ">= 5.0.0.beta1"
 patched_versions:
-- ~> 4.2.5, >= 4.2.5.1
-- ~> 4.1.14, >= 4.1.14.1
+  - "~> 4.2.5, >= 4.2.5.1"
+  - "~> 4.1.14, >= 4.1.14.1"
diff --git a/gems/actionpack/CVE-2016-0751.yml b/gems/actionpack/CVE-2016-0751.yml
index 63f0e0a304..324ebabef7 100644
--- a/gems/actionpack/CVE-2016-0751.yml
+++ b/gems/actionpack/CVE-2016-0751.yml
@@ -65,7 +65,7 @@ description: |
 cvss_v2: 5.0
 cvss_v3: 7.5
 patched_versions:
-- '>= 5.0.0.beta1.1'
-- ~> 4.2.5, >= 4.2.5.1
-- ~> 4.1.14, >= 4.1.14.1
-- ~> 3.2.22.1
+  - ">= 5.0.0.beta1.1"
+  - "~> 4.2.5, >= 4.2.5.1"
+  - "~> 4.1.14, >= 4.1.14.1"
+  - "~> 3.2.22.1"
diff --git a/gems/actionpack/CVE-2016-0752.yml b/gems/actionpack/CVE-2016-0752.yml
index 67cbe2d2e6..371b2be865 100644
--- a/gems/actionpack/CVE-2016-0752.yml
+++ b/gems/actionpack/CVE-2016-0752.yml
@@ -2,9 +2,10 @@
 gem: actionpack
 framework: rails
 cve: 2016-0752
-date: 2016-01-25
+ghsa: xrr4-p6fq-hjg7
 url: https://groups.google.com/forum/#!topic/rubyonrails-security/335P1DcLG00
 title: Possible Information Leak Vulnerability in Action View
+date: 2016-01-25
 description: |
   There is a possible directory traversal and information leak vulnerability in
   Action View. This vulnerability has been assigned the CVE identifier
@@ -83,11 +84,12 @@ description: |
   Credits
   -------
   Thanks John Poulin for reporting this!
+cvss_v3: 7.5
 unaffected_versions:
-- '>= 4.1.0'
+  - ">= 4.1.0"
 patched_versions:
-- '>= 5.0.0.beta1.1'
-- ~> 4.2.5, >= 4.2.5.1
-- ~> 4.1.14, >= 4.1.14.1
-- ~> 3.2.22.1
-notes: Newer versions are affected, but tracked in the actionview gem.
+  - ">= 5.0.0.beta1.1"
+  - "~> 4.2.5, >= 4.2.5.1"
+  - "~> 4.1.14, >= 4.1.14.1"
+  - "~> 3.2.22.1"
+notes: "Newer versions are affected, but tracked in the actionview gem."
diff --git a/gems/actionpack/CVE-2016-2097.yml b/gems/actionpack/CVE-2016-2097.yml
index 7ce9938ff0..0043b02266 100644
--- a/gems/actionpack/CVE-2016-2097.yml
+++ b/gems/actionpack/CVE-2016-2097.yml
@@ -2,10 +2,11 @@
 gem: actionpack
 framework: rails
 cve: 2016-2097
-date: 2016-02-29
+ghsa: vx9j-46rh-fqr8
 url: https://groups.google.com/forum/#!topic/rubyonrails-security/ddY6HgqB2z4
 title: Possible Information Leak Vulnerability in Action View
-description: |2
+date: 2016-02-29
+description: |
 
   There is a possible directory traversal and information leak vulnerability
   in Action View. This was meant to be fixed on CVE-2016-0752. However the 3.2
@@ -78,10 +79,11 @@ description: |2
   -------
   Thanks to both Jyoti Singh and Tobias Kraze from makandra for reporting this
   and working with us in the patch!
+cvss_v3: 5.3
 unaffected_versions:
-- '>= 4.1.0'
+  - ">= 4.1.0"
 patched_versions:
-- ~> 3.2.22.2
-- ~> 4.1.14
-- '>= 4.1.14.2'
-notes: Newer versions are affected, but tracked in the actionview gem.
+  - "~> 3.2.22.2"
+  - "~> 4.1.14"
+  - ">= 4.1.14.2"
+notes: "Newer versions are affected, but tracked in the actionview gem."
diff --git a/gems/actionpack/CVE-2016-2098.yml b/gems/actionpack/CVE-2016-2098.yml
index d60e6abcac..602abef34d 100644
--- a/gems/actionpack/CVE-2016-2098.yml
+++ b/gems/actionpack/CVE-2016-2098.yml
@@ -80,8 +80,8 @@ description: |
   reporting this!
 cvss_v3: 7.3
 unaffected_versions:
-- '>= 5.0.0.beta1'
+  - ">= 5.0.0.beta1"
 patched_versions:
-- ~> 3.2.22.2
-- ~> 4.2.5, >= 4.2.5.2
-- ~> 4.1.14, >= 4.1.14.2
+  - "~> 3.2.22.2"
+  - "~> 4.2.5, >= 4.2.5.2"
+  - "~> 4.1.14, >= 4.1.14.2"
diff --git a/gems/actionpack/CVE-2016-6316.yml b/gems/actionpack/CVE-2016-6316.yml
index 8f2a404681..093f843dc7 100644
--- a/gems/actionpack/CVE-2016-6316.yml
+++ b/gems/actionpack/CVE-2016-6316.yml
@@ -2,9 +2,10 @@
 gem: actionpack
 framework: rails
 cve: 2016-6316
-date: 2016-08-11
+ghsa: pc3m-v286-2jwj
 url: https://groups.google.com/forum/#!topic/rubyonrails-security/I-VWr034ouk
 title: Possible XSS Vulnerability in Action View
+date: 2016-08-11
 description: |
   There is a possible XSS vulnerability in Action View.  Text declared as "HTML
   safe" will not have quotes escaped when used as attribute values in tag
@@ -43,11 +44,12 @@ description: |
 
   content_tag(:div, "hi", title: escape_quotes(sanitize(user_input)))
   ```
+cvss_v3: 6.1
 unaffected_versions:
-- < 3.0.0
-- '>= 4.1.0'
+  - "< 3.0.0"
+  - ">= 4.1.0"
 patched_versions:
-- ~> 3.2.22.3
-- ~> 4.2.7.1
-- '>= 5.0.0.1'
-notes: Newer versions are affected, but tracked in the actionview gem.
+  - "~> 3.2.22.3"
+  - "~> 4.2.7.1"
+  - ">= 5.0.0.1"
+notes: "Newer versions are affected, but tracked in the actionview gem."
diff --git a/gems/actionpack/CVE-2020-8164.yml b/gems/actionpack/CVE-2020-8164.yml
index ad18365998..f37122b52b 100644
--- a/gems/actionpack/CVE-2020-8164.yml
+++ b/gems/actionpack/CVE-2020-8164.yml
@@ -41,8 +41,9 @@ description: |
   -----------
   Do not use the return values of `each`, `each_value`, or `each_pair` in your
   application.
+cvss_v3: 7.5
 unaffected_versions:
-- < 4.0.0
+  - "< 4.0.0"
 patched_versions:
-- ~> 5.2.4, >= 5.2.4.3
-- '>= 6.0.3.1'
+  - "~> 5.2.4, >= 5.2.4.3"
+  - ">= 6.0.3.1"
diff --git a/gems/actionpack/CVE-2020-8166.yml b/gems/actionpack/CVE-2020-8166.yml
index ca45f66f8b..98185cb917 100644
--- a/gems/actionpack/CVE-2020-8166.yml
+++ b/gems/actionpack/CVE-2020-8166.yml
@@ -28,5 +28,5 @@ description: |
   until such time as the application can be upgraded.
 cvss_v3: 4.3
 patched_versions:
-- "~> 5.2.4, >= 5.2.4.3"
-- ">= 6.0.3.1"
+  - "~> 5.2.4, >= 5.2.4.3"
+  - ">= 6.0.3.1"
diff --git a/gems/actionpack/CVE-2020-8185.yml b/gems/actionpack/CVE-2020-8185.yml
index b6108e3dc1..d370f159d0 100644
--- a/gems/actionpack/CVE-2020-8185.yml
+++ b/gems/actionpack/CVE-2020-8185.yml
@@ -36,6 +36,6 @@ description: |
   `config.middleware.delete ActionDispatch::ActionableExceptions`
 cvss_v3: 6.5
 unaffected_versions:
-- "< 6.0.0"
+  - "< 6.0.0"
 patched_versions:
-- ">= 6.0.3.2"
+  - ">= 6.0.3.2"
diff --git a/gems/actionpack/CVE-2020-8264.yml b/gems/actionpack/CVE-2020-8264.yml
index 595a361354..cf6b279320 100644
--- a/gems/actionpack/CVE-2020-8264.yml
+++ b/gems/actionpack/CVE-2020-8264.yml
@@ -31,6 +31,6 @@ description: |
   `config.middleware.delete ActionDispatch::ActionableExceptions`
 cvss_v3: 6.1
 unaffected_versions:
-- < 6.0.0
+  - "< 6.0.0"
 patched_versions:
-- '>= 6.0.3.4'
+  - ">= 6.0.3.4"
diff --git a/gems/actionpack/CVE-2021-22881.yml b/gems/actionpack/CVE-2021-22881.yml
index 383e5088a0..f3964bf5ee 100644
--- a/gems/actionpack/CVE-2021-22881.yml
+++ b/gems/actionpack/CVE-2021-22881.yml
@@ -61,7 +61,7 @@ description: |
   ```
 cvss_v3: 6.1
 unaffected_versions:
-- "< 6.0.0"
+  - "< 6.0.0"
 patched_versions:
-- "~> 6.0.3, >= 6.0.3.5"
-- ">= 6.1.2.1"
+  - "~> 6.0.3, >= 6.0.3.5"
+  - ">= 6.1.2.1"
diff --git a/gems/actionpack/CVE-2021-22885.yml b/gems/actionpack/CVE-2021-22885.yml
index d83420cae5..c9798a7fee 100644
--- a/gems/actionpack/CVE-2021-22885.yml
+++ b/gems/actionpack/CVE-2021-22885.yml
@@ -59,9 +59,9 @@ description: |
   ```
 cvss_v3: 7.5
 unaffected_versions:
-- < 2.0.0
+  - "< 2.0.0"
 patched_versions:
-- ~> 5.2.4.6
-- ~> 5.2.6
-- ~> 6.0.3, >= 6.0.3.7
-- '>= 6.1.3.2'
+  - "~> 5.2.4.6"
+  - "~> 5.2.6"
+  - "~> 6.0.3, >= 6.0.3.7"
+  - ">= 6.1.3.2"
diff --git a/gems/actionpack/CVE-2021-22902.yml b/gems/actionpack/CVE-2021-22902.yml
index e732bb2228..4270ce996f 100644
--- a/gems/actionpack/CVE-2021-22902.yml
+++ b/gems/actionpack/CVE-2021-22902.yml
@@ -35,7 +35,7 @@ description: |
   ```
 cvss_v3: 7.5
 unaffected_versions:
-- < 6.0.0
+  - "< 6.0.0"
 patched_versions:
-- ~> 6.0.3, >= 6.0.3.7
-- '>= 6.1.3.2'
+  - "~> 6.0.3, >= 6.0.3.7"
+  - ">= 6.1.3.2"
diff --git a/gems/actionpack/CVE-2021-22903.yml b/gems/actionpack/CVE-2021-22903.yml
index 6aa8d03b64..ccd6c7d020 100644
--- a/gems/actionpack/CVE-2021-22903.yml
+++ b/gems/actionpack/CVE-2021-22903.yml
@@ -43,9 +43,9 @@ description: |
   ```
 cvss_v3: 6.1
 unaffected_versions:
-- < 6.1.0.rc2
+  - "< 6.1.0.rc2"
 patched_versions:
-- '>= 6.1.3.2'
+  - ">= 6.1.3.2"
 related:
   cve:
-  - 2021-22881
+    - 2021-22881
diff --git a/gems/actionpack/CVE-2021-22904.yml b/gems/actionpack/CVE-2021-22904.yml
index 6c2cb44889..c412cabe16 100644
--- a/gems/actionpack/CVE-2021-22904.yml
+++ b/gems/actionpack/CVE-2021-22904.yml
@@ -54,9 +54,9 @@ description: |
   ```
 cvss_v3: 7.5
 unaffected_versions:
-- < 4.0.0
+  - "< 4.0.0"
 patched_versions:
-- ~> 5.2.4.6
-- ~> 5.2.6
-- ~> 6.0.3, >= 6.0.3.7
-- '>= 6.1.3.2'
+  - "~> 5.2.4.6"
+  - "~> 5.2.6"
+  - "~> 6.0.3, >= 6.0.3.7"
+  - ">= 6.1.3.2"
diff --git a/gems/actionpack/CVE-2021-22942.yml b/gems/actionpack/CVE-2021-22942.yml
index d3efbc313b..60d5211ce8 100644
--- a/gems/actionpack/CVE-2021-22942.yml
+++ b/gems/actionpack/CVE-2021-22942.yml
@@ -67,10 +67,10 @@ description: |
   ```
 cvss_v3: 7.6
 unaffected_versions:
-- "< 6.0.0"
+  - "< 6.0.0"
 patched_versions:
-- "~> 6.0.4, >= 6.0.4.1"
-- ">= 6.1.4.1"
+  - "~> 6.0.4, >= 6.0.4.1"
+  - ">= 6.1.4.1"
 related:
   cve:
-  - 2021-22881
+    - 2021-22881
diff --git a/gems/actionpack/CVE-2021-44528.yml b/gems/actionpack/CVE-2021-44528.yml
index 5b5155522f..6e05b21d39 100644
--- a/gems/actionpack/CVE-2021-44528.yml
+++ b/gems/actionpack/CVE-2021-44528.yml
@@ -1,11 +1,12 @@
 ---
 gem: actionpack
+framework: rails
 cve: 2021-44528
 ghsa: qphc-hf5q-v8fc
 url: https://groups.google.com/g/ruby-security-ann/c/vG9gz3nk1pM/m/7-NU4MNrDAAJ
 title: Possible Open Redirect in Host Authorization Middleware
 date: 2021-12-14
-description: |-
+description: |
   There is a possible open redirect vulnerability in the Host Authorization
   middleware in Action Pack.
 
@@ -45,15 +46,15 @@ description: |-
   fixes for unsupported releases.
 cvss_v3: 6.1
 unaffected_versions:
-- "< 6.0.0"
+  - "< 6.0.0"
 patched_versions:
-- "~> 6.0.4, >= 6.0.4.2"
-- "~> 6.1.4, >= 6.1.4.2"
-- ">= 7.0.0.rc2"
+  - "~> 6.0.4, >= 6.0.4.2"
+  - "~> 6.1.4, >= 6.1.4.2"
+  - ">= 7.0.0.rc2"
 related:
   cve:
-  - 2021-22881
-  - 2021-22942
+    - 2021-22881
+    - 2021-22942
   url:
-  - https://github.com/rails/rails/commit/aecba3c301b80e9d5a63c30ea1b287bceaf2c107
-  - https://github.com/rails/rails/blob/v6.1.4.2/actionpack/CHANGELOG.md#rails-6142-december-14-2021
+    - https://github.com/rails/rails/commit/aecba3c301b80e9d5a63c30ea1b287bceaf2c107
+    - https://github.com/rails/rails/blob/v6.1.4.2/actionpack/CHANGELOG.md#rails-6142-december-14-2021
diff --git a/gems/actionpack/CVE-2022-22577.yml b/gems/actionpack/CVE-2022-22577.yml
new file mode 100644
index 0000000000..3f42790f5c
--- /dev/null
+++ b/gems/actionpack/CVE-2022-22577.yml
@@ -0,0 +1,41 @@
+---
+gem: actionpack
+framework: rails
+cve: 2022-22577
+ghsa: mm33-5vfq-3mm3
+url: https://groups.google.com/g/ruby-security-ann/c/NuFRKaN5swI
+title: Possible XSS Vulnerability in Action Pack
+date: 2022-04-27
+description: |
+  There is a possible XSS vulnerability in Rails / Action Pack. This vulnerability has been
+  assigned the CVE identifier CVE-2022-22577.
+
+  Versions Affected:  >= 5.2.0
+  Not affected:       < 5.2.0
+  Fixed Versions:     7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1
+
+  ## Impact
+
+  CSP headers were only sent along with responses that Rails considered as
+  "HTML" responses.  This left API requests without CSP headers, which could
+  possibly expose users to XSS attacks.
+
+  ## Releases
+
+  The FIXED releases are available at the normal locations.
+
+  ## Workarounds
+
+  Set a CSP for your API responses manually.
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 5.2.0"
+patched_versions:
+  - "~> 5.2.7, >= 5.2.7.1"
+  - "~> 6.0.4, >= 6.0.4.8"
+  - "~> 6.1.5, >= 6.1.5.1"
+  - ">= 7.0.2.4"
+related:
+  url:
+    - https://github.com/rails/rails/pull/44635
+    - https://github.com/rails/rails/blob/7-0-stable/actionpack/CHANGELOG.md#rails-7024-april-26-2022
diff --git a/gems/actionpack/CVE-2022-23633.yml b/gems/actionpack/CVE-2022-23633.yml
index edfc983f59..7b7aef6cad 100644
--- a/gems/actionpack/CVE-2022-23633.yml
+++ b/gems/actionpack/CVE-2022-23633.yml
@@ -1,11 +1,12 @@
 ---
 gem: actionpack
+framework: rails
 cve: 2022-23633
 ghsa: wh98-p28r-vrc9
 url: https://groups.google.com/g/ruby-security-ann/c/FkTM-_7zSNA/m/K2RiMJBlBAAJ
 title: Possible exposure of information vulnerability in Action Pack
 date: 2022-02-11
-description: |-
+description: |
   ## Impact
 
   Under certain circumstances response bodies will not be closed, for example a
@@ -46,14 +47,15 @@ description: |-
     config.middleware.swap ActionDispatch::Executor, GuardedExecutor, executor
   end
   ```
+cvss_v3: 7.4
 unaffected_versions:
-- "< 5.0.0"
+  - "< 5.0.0"
 patched_versions:
-- "~> 5.2.6, >= 5.2.6.2"
-- "~> 6.0.4, >= 6.0.4.6"
-- "~> 6.1.4, >= 6.1.4.6"
-- ">= 7.0.2.2"
+  - "~> 5.2.6, >= 5.2.6.2"
+  - "~> 6.0.4, >= 6.0.4.6"
+  - "~> 6.1.4, >= 6.1.4.6"
+  - ">= 7.0.2.2"
 related:
   url:
-  - https://github.com/rails/rails/commit/10c64a472f2f19a5e485bdac7d5106a76aeb29a5
-  - https://github.com/rails/rails/blob/7-0-stable/actionpack/CHANGELOG.md#rails-7021-february-11-2022
+    - https://github.com/rails/rails/commit/10c64a472f2f19a5e485bdac7d5106a76aeb29a5
+    - https://github.com/rails/rails/blob/7-0-stable/actionpack/CHANGELOG.md#rails-7021-february-11-2022
diff --git a/gems/actionpack/CVE-2023-22792.yml b/gems/actionpack/CVE-2023-22792.yml
new file mode 100644
index 0000000000..7c352ad89b
--- /dev/null
+++ b/gems/actionpack/CVE-2023-22792.yml
@@ -0,0 +1,38 @@
+---
+gem: actionpack
+framework: rails
+cve: 2023-22792
+ghsa: p84v-45xj-wwqj
+url: https://github.com/rails/rails/releases/tag/v7.0.4.1
+title: ReDoS based DoS vulnerability in Action Dispatch
+date: 2023-01-18
+description: |
+  There is a possible regular expression based DoS vulnerability in Action
+  Dispatch. This vulnerability has been assigned the CVE identifier
+  CVE-2023-22792.
+
+  Versions Affected: >= 3.0.0
+  Not affected: < 3.0.0
+  Fixed Versions: 6.1.7.1, 7.0.4.1
+
+  # Impact
+
+  Specially crafted cookies, in combination with a specially crafted
+  X_FORWARDED_HOST header can cause the regular expression engine to enter a
+  state of catastrophic backtracking. This can cause the process to use large
+  amounts of CPU and memory, leading to a possible DoS vulnerability All users
+  running an affected release should either upgrade or use one of the
+  workarounds immediately.
+
+  # Workarounds
+
+  We recommend that all users upgrade to one of the FIXED versions. In the
+  meantime, users can mitigate this vulnerability by using a load balancer or
+  other device to filter out malicious X_FORWARDED_HOST headers before they
+  reach the application.
+unaffected_versions:
+  - "< 3.0.0"
+patched_versions:
+  - "~> 5.2.8"
+  - "~> 6.1.7, >= 6.1.7.1"
+  - ">= 7.0.4.1"
diff --git a/gems/actionpack/CVE-2023-22795.yml b/gems/actionpack/CVE-2023-22795.yml
new file mode 100644
index 0000000000..50cb369923
--- /dev/null
+++ b/gems/actionpack/CVE-2023-22795.yml
@@ -0,0 +1,38 @@
+---
+gem: actionpack
+framework: rails
+cve: 2023-22795
+ghsa: 8xww-x3g3-6jcv
+url: https://github.com/rails/rails/releases/tag/v7.0.4.1
+title: ReDoS based DoS vulnerability in Action Dispatch
+date: 2023-01-18
+description: |
+  There is a possible regular expression based DoS vulnerability in Action
+  Dispatch related to the If-None-Match header. This vulnerability has been
+  assigned the CVE identifier CVE-2023-22795.
+
+  Versions Affected: All
+  Not affected: None
+  Fixed Versions: 6.1.7.1, 7.0.4.1
+
+  # Impact
+
+  A specially crafted HTTP If-None-Match header can cause the regular
+  expression engine to enter a state of catastrophic backtracking, when on a
+  version of Ruby below 3.2.0. This can cause the process to use large amounts
+  of CPU and memory, leading to a possible DoS vulnerability All users running
+  an affected release should either upgrade or use one of the workarounds
+  immediately.
+
+  # Workarounds
+
+  We recommend that all users upgrade to one of the FIXED versions. In the
+  meantime, users can mitigate this vulnerability by using a load balancer or
+  other device to filter out malicious If-None-Match headers before they reach
+  the application.
+
+  Users on Ruby 3.2.0 or greater are not affected by this vulnerability.
+patched_versions:
+  - "~> 5.2.8"
+  - "~> 6.1.7, >= 6.1.7.1"
+  - ">= 7.0.4.1"
diff --git a/gems/actionpack/CVE-2023-22797.yml b/gems/actionpack/CVE-2023-22797.yml
new file mode 100644
index 0000000000..156c33ffaf
--- /dev/null
+++ b/gems/actionpack/CVE-2023-22797.yml
@@ -0,0 +1,42 @@
+---
+gem: actionpack
+framework: rails
+cve: 2023-22797
+ghsa: 9445-4cr6-336r
+url: https://github.com/rails/rails/releases/tag/v7.0.4.1
+title: Open Redirect Vulnerability in Action Pack
+date: 2023-01-18
+description: |
+  There is a vulnerability in Action Controller’s redirect_to. This
+  vulnerability has been assigned the CVE identifier CVE-2023-22797.
+
+  Versions Affected: >= 7.0.0
+  Not affected: < 7.0.0
+  Fixed Versions: 7.0.4.1
+
+  # Impact
+
+  There is a possible open redirect when using the redirect_to helper with
+  untrusted user input.
+
+  Vulnerable code will look like this:
+  ```
+  redirect_to(params[:some_param])
+  ```
+
+  Rails 7.0 introduced protection against open redirects from calling
+  redirect_to with untrusted user input. In prior versions the developer was
+  fully responsible for only providing trusted input. However the check
+  introduced could be bypassed by a carefully crafted URL.
+
+  All users running an affected release should either upgrade or use one of
+  the workarounds immediately.
+
+  # Workarounds
+
+  There are no feasible workarounds for this issue.
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 7.0.0"
+patched_versions:
+  - ">= 7.0.4.1"
diff --git a/gems/actionpack/CVE-2023-28362.yml b/gems/actionpack/CVE-2023-28362.yml
new file mode 100644
index 0000000000..846095c2bf
--- /dev/null
+++ b/gems/actionpack/CVE-2023-28362.yml
@@ -0,0 +1,36 @@
+---
+gem: actionpack
+framework: rails
+cve: 2023-28362
+ghsa: 4g8v-vg43-wpgf
+url: https://discuss.rubyonrails.org/t/cve-2023-28362-possible-xss-via-user-supplied-values-to-redirect-to/83132
+title: Possible XSS via User Supplied Values to redirect_to
+date: 2023-06-26
+description: |
+  The redirect_to method in Rails allows provided values to contain characters
+  which are not legal in an HTTP header value. This results in the potential for
+  downstream services which enforce RFC compliance on HTTP response headers to
+  remove the assigned Location header. This vulnerability has been assigned the
+  CVE identifier CVE-2023-28362.
+
+  Versions Affected: All. Not affected: None Fixed Versions: 7.0.5.1, 6.1.7.4
+
+  # Impact
+
+  This introduces the potential for a Cross-site-scripting (XSS) payload to be
+  delivered on the now static redirection page. Note that this both requires
+  user interaction and for a Rails app to be configured to allow redirects to
+  external hosts (defaults to false in Rails >= 7.0.x).
+
+  # Releases
+
+  The FIXED releases are available at the normal locations.
+
+  # Workarounds
+
+  Avoid providing user supplied URLs with arbitrary schemes to the redirect_to
+  method.
+cvss_v3: 4.0
+patched_versions:
+  - "~> 6.1.7.4"
+  - ">= 7.0.5.1"
diff --git a/gems/actionpack/CVE-2024-26142.yml b/gems/actionpack/CVE-2024-26142.yml
new file mode 100644
index 0000000000..66437b1b29
--- /dev/null
+++ b/gems/actionpack/CVE-2024-26142.yml
@@ -0,0 +1,36 @@
+---
+gem: actionpack
+framework: rails
+cve: 2024-26142
+ghsa: jjhx-jhvp-74wq
+url: https://discuss.rubyonrails.org/t/possible-redos-vulnerability-in-accept-header-parsing-in-action-dispatch/84946
+title: Possible ReDoS vulnerability in Accept header parsing in Action Dispatch
+date: 2024-02-21
+description: |
+  There is a possible ReDoS vulnerability in the Accept header parsing routines
+  of Action Dispatch. This vulnerability has been assigned the CVE identifier
+  CVE-2024-26142.
+
+  Versions Affected: >= 7.1.0, < 7.1.3.1 Not affected: < 7.1.0 Fixed Versions: 7.1.3.1
+
+  # Impact
+
+  Carefully crafted Accept headers can cause Accept header parsing in
+  Action Dispatch to take an unexpected amount of time, possibly resulting in a
+  DoS vulnerability. All users running an affected release should either upgrade
+  or use one of the workarounds immediately.
+
+  Ruby 3.2 has mitigations for this problem, so Rails applications using
+  Ruby 3.2 or newer are unaffected.
+
+  # Releases
+
+  The fixed releases are available at the normal locations.
+
+  # Workarounds
+
+  There are no feasible workarounds for this issue.
+unaffected_versions:
+  - "< 7.1.0"
+patched_versions:
+  - ">= 7.1.3.1"
diff --git a/gems/actionpack/CVE-2024-26143.yml b/gems/actionpack/CVE-2024-26143.yml
new file mode 100644
index 0000000000..19a2b46ff0
--- /dev/null
+++ b/gems/actionpack/CVE-2024-26143.yml
@@ -0,0 +1,59 @@
+---
+gem: actionpack
+framework: rails
+cve: 2024-26143
+ghsa: 9822-6m93-xqf4
+url: https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947
+title: Possible XSS Vulnerability in Action Controller
+date: 2024-02-21
+description: |
+  There is a possible XSS vulnerability when using the translation helpers
+  (`translate`, `t`, etc) in Action Controller. This vulnerability has been
+  assigned the CVE identifier CVE-2024-26143.
+
+  Versions Affected: >= 7.0.0
+  Not affected: < 7.0.0
+  Fixed Versions: 7.1.3.1, 7.0.8.1
+
+  # Impact
+
+  Applications using translation methods like `translate`, or `t` on a
+  controller, with a key ending in “_html”, a `:default` key which contains
+  untrusted user input, and the resulting string is used in a view, may be
+  susceptible to an XSS vulnerability.
+
+  For example, impacted code will look something like this:
+
+  ```
+  class ArticlesController < ApplicationController
+    def show
+      @message = t("message_html", default: untrusted_input)
+      # The `show` template displays the contents of `@message`
+    end
+  end
+  ```
+
+  To reiterate the pre-conditions, applications must:
+
+  * Use a translation function from a controller (i.e. *not* `I18n.t`, or
+  `t` from a view)
+  * Use a key that ends in `_html`
+  * Use a default value where the default value is untrusted and unescaped input
+  * Send the text to the victim (whether that’s part of a template, or a
+    `render` call)
+
+  All users running an affected release should either upgrade or use one of the workarounds immediately.
+
+  # Releases
+
+  The fixed releases are available at the normal locations.
+
+  # Workarounds
+
+  There are no feasible workarounds for this issue.
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 7.0.0"
+patched_versions:
+  - "~> 7.0.8, >= 7.0.8.1"
+  - ">= 7.1.3.1"
diff --git a/gems/actionpack/CVE-2024-28103.yml b/gems/actionpack/CVE-2024-28103.yml
new file mode 100644
index 0000000000..8878bde1f7
--- /dev/null
+++ b/gems/actionpack/CVE-2024-28103.yml
@@ -0,0 +1,68 @@
+---
+gem: actionpack
+framework: rails
+cve: 2024-28103
+ghsa: fwhr-88qx-h9g7
+url: https://github.com/rails/rails/security/advisories/GHSA-fwhr-88qx-h9g7
+title: Missing security headers in Action Pack on non-HTML responses
+date: 2024-06-04
+description: |
+  Permissions-Policy is Only Served on HTML Content-Type
+
+  The application configurable Permissions-Policy is only served
+  on responses with an HTML related Content-Type.
+
+  This has been assigned the CVE identifier CVE-2024-28103.
+
+  Versions Affected:  >= 6.1.0
+  Not affected:       < 6.1.0
+  Fixed Versions:     6.1.7.8, 7.0.8.4, and 7.1.3.4
+
+  Impact
+  ------
+
+  Responses with a non-HTML Content-Type are not serving the configured
+  Permissions-Policy. There are certain non-HTML Content-Types that
+  would benefit from having the Permissions-Policy enforced.
+
+  Releases
+  --------
+
+  The fixed releases are available at the normal locations.
+
+  Workarounds
+  -----------
+
+  N/A
+
+  Patches
+  -------
+
+  To aid users who aren't able to upgrade immediately we have provided
+  patches for the supported release series in accordance with our
+  [maintenance policy](https://guides.rubyonrails.org/maintenance_policy.html#security-issues)
+  regarding security issues. They are in git-am format and consist
+  of a single changeset.
+
+  * 6-1-include-permissions-policy-header-on-non-html.patch - Patch for 6.1 series
+  * 7-0-include-permissions-policy-header-on-non-html.patch - Patch for 7.0 series
+  * 7-1-include-permissions-policy-header-on-non-html.patch - Patch for 7.1 series
+
+  Credits
+  -------
+
+  Thank you [shinkbr](https://hackerone.com/shinkbr) for reporting this!
+cvss_v3: 5.4
+unaffected_versions:
+  - "< 6.1.0"
+patched_versions:
+  - "~> 6.1.7, >= 6.1.7.8"
+  - "~> 7.0.8, >= 7.0.8.4"
+  - "~> 7.1.3, >= 7.1.3.4"
+  - ">= 7.2.0.beta2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-28103
+    - https://github.com/rails/rails/security/advisories/GHSA-fwhr-88qx-h9g7
+    - https://github.com/rails/rails/commit/35858f1d9d57f6c4050a8d9ab754bd5d088b4523
+    - https://github.com/advisories/GHSA-fwhr-88qx-h9g7
diff --git a/gems/actionpack/CVE-2024-41128.yml b/gems/actionpack/CVE-2024-41128.yml
new file mode 100644
index 0000000000..d762438264
--- /dev/null
+++ b/gems/actionpack/CVE-2024-41128.yml
@@ -0,0 +1,49 @@
+---
+gem: actionpack
+framework: rails
+cve: 2024-41128
+ghsa: x76w-6vjr-8xgj
+url: https://github.com/rails/rails/security/advisories/GHSA-x76w-6vjr-8xgj
+title: Possible ReDoS vulnerability in query parameter filtering in Action Dispatch
+date: 2024-10-15
+description: |
+  There is a possible ReDoS vulnerability in the query parameter
+  filtering routines of Action Dispatch. This vulnerability has
+  been assigned the CVE identifier CVE-2024-41128.
+
+  ## Impact
+
+  Carefully crafted query parameters can cause query parameter
+  filtering to take an unexpected amount of time, possibly resulting
+  in a DoS vulnerability. All users running an affected release
+  should either upgrade or apply the relevant patch immediately.
+
+  Ruby 3.2 has mitigations for this problem, so Rails applications
+  using Ruby 3.2 or newer are unaffected. Rails 8.0.0.beta1 depends
+  on Ruby 3.2 or greater so is unaffected.
+
+  ## Releases
+
+  The fixed releases are available at the normal locations.
+
+  ## Workarounds
+
+  Users on Ruby 3.2 are unaffected by this issue.
+
+  ## Credits
+
+  Thanks to [scyoon](https://hackerone.com/scyoon) for the report and patches!
+cvss_v4: 6.6
+unaffected_versions:
+  - "< 3.1.0"
+patched_versions:
+  - "~> 6.1.7.9"
+  - "~> 7.0.8.5"
+  - "~> 7.1.4, >= 7.1.4.1"
+  - ">= 7.2.1.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-41128
+    - https://github.com/rails/rails/security/advisories/GHSA-x76w-6vjr-8xgj
+    - https://hackerone.com/reports/2872502
+    - https://github.com/advisories/GHSA-x76w-6vjr-8xgj
diff --git a/gems/actionpack/CVE-2024-47887.yml b/gems/actionpack/CVE-2024-47887.yml
new file mode 100644
index 0000000000..8a9163b721
--- /dev/null
+++ b/gems/actionpack/CVE-2024-47887.yml
@@ -0,0 +1,49 @@
+---
+gem: actionpack
+framework: rails
+cve: 2024-47887
+ghsa: vfg9-r3fq-jvx4
+url: https://github.com/rails/rails/security/advisories/GHSA-vfg9-r3fq-jvx4
+title: Possible ReDoS vulnerability in HTTP Token authentication
+  in Action Controller
+date: 2024-10-15
+description: |
+  There is a possible ReDoS vulnerability in Action Controller's
+  HTTP Token authentication. This vulnerability has been assigned
+  the CVE identifier CVE-2024-47887.
+
+  ## Impact
+
+  For applications using HTTP Token authentication via
+  `authenticate_or_request_with_http_token` or similar, a carefully
+  crafted header may cause header parsing to take an unexpected amount
+  of time, possibly resulting in a DoS vulnerability. All users running
+  an affected release should either upgrade or apply the relevant
+  patch immediately.
+
+  Ruby 3.2 has mitigations for this problem, so Rails applications
+  using Ruby 3.2 or newer are unaffected. Rails 8.0.0.beta1 depends
+  on Ruby 3.2 or greater so is unaffected.
+
+  ## Releases
+
+  The fixed releases are available at the normal locations.
+
+  ## Workarounds
+
+  Users on Ruby 3.2 are unaffected by this issue.
+
+  ## Credits
+
+  Thanks to [scyoon](https://hackerone.com/scyoon) for reporting
+unaffected_versions:
+  - "< 4.0.0"
+patched_versions:
+  - "~> 6.1.7.9"
+  - "~> 7.0.8.5"
+  - "~> 7.1.4, >= 7.1.4.1"
+  - ">= 7.2.1.1"
+related:
+  url:
+    - https://github.com/rails/rails/security/advisories/GHSA-vfg9-r3fq-jvx4
+    - https://github.com/advisories/GHSA-vfg9-r3fq-jvx4
diff --git a/gems/actionpack/CVE-2024-54133.yml b/gems/actionpack/CVE-2024-54133.yml
new file mode 100644
index 0000000000..86e6c22eac
--- /dev/null
+++ b/gems/actionpack/CVE-2024-54133.yml
@@ -0,0 +1,46 @@
+---
+gem: actionpack
+framework: rails
+cve: 2024-54133
+ghsa: vfm5-rmrh-j26v
+url: https://github.com/rails/rails/security/advisories/GHSA-vfm5-rmrh-j26v
+title: Possible Content Security Policy bypass in Action Dispatch
+date: 2024-12-10
+description: |
+  There is a possible Cross Site Scripting (XSS) vulnerability
+  in the `content_security_policy` helper in Action Pack.
+
+  ## Impact
+
+  Applications which set Content-Security-Policy (CSP) headers
+  dynamically from untrusted user input may be vulnerable to
+  carefully crafted inputs being able to inject new directives
+  into the CSP. This could lead to a bypass of the CSP and its
+  protection against XSS and other attacks.
+
+  ## Releases
+
+  The fixed releases are available at the normal locations.
+
+  ## Workarounds
+
+  Applications can avoid setting CSP headers dynamically from
+  untrusted input, or can validate/sanitize that input.
+
+  ## Credits
+
+  Thanks to [ryotak](https://hackerone.com/ryotak) for the report!
+cvss_v4: 2.3
+unaffected_versions:
+  - "< 5.2.0"
+patched_versions:
+  - "~> 7.0.8.7"
+  - "~> 7.1.5.1"
+  - "~> 7.2.2.1"
+  - ">= 8.0.0.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-54133
+    - https://hackerone.com/reports/2905532
+    - https://github.com/rails/rails/security/advisories/GHSA-vfm5-rmrh-j26v
+    - https://github.com/advisories/GHSA-vfm5-rmrh-j26v
diff --git a/gems/actionpack/OSVDB-77199.yml b/gems/actionpack/OSVDB-77199.yml
deleted file mode 100644
index 502c67eed1..0000000000
--- a/gems/actionpack/OSVDB-77199.yml
+++ /dev/null
@@ -1,20 +0,0 @@
----
-gem: actionpack
-framework: rails
-cve: 2011-4319
-osvdb: 77199
-url: https://groups.google.com/forum/#!topic/rubyonrails-security/K2HXD7c8fMU
-title: XSS vulnerability in the translate helper method in Ruby on Rails
-date: 2011-11-17
-description: |
-  A cross-site scripting (XSS) flaw was found in the way the 'translate' helper
-  method of the Ruby on Rails performed HTML escaping of interpolated user
-  input, when interpolation in combination with HTML-safe translations were
-  used. A remote attacker could use this flaw to execute arbitrary HTML or web
-  script by providing a specially-crafted input to Ruby on Rails application,
-  using the ActionPack module and its 'translate' helper method without explicit
-  (application specific) sanitization of user provided input.
-cvss_v2: 4.3
-patched_versions:
-- ~> 3.0.11
-- '>= 3.1.2'
diff --git a/gems/actiontext/CVE-2024-32464.yml b/gems/actiontext/CVE-2024-32464.yml
new file mode 100644
index 0000000000..815d4f3acb
--- /dev/null
+++ b/gems/actiontext/CVE-2024-32464.yml
@@ -0,0 +1,59 @@
+---
+gem: actiontext
+framework: rails
+cve: 2024-32464
+ghsa: prjp-h48f-jgf6
+url: https://github.com/rails/rails/security/advisories/GHSA-prjp-h48f-jgf6
+title: ActionText ContentAttachment can Contain Unsanitized HTML
+date: 2024-06-04
+description: |
+  Instances of ActionText::Attachable::ContentAttachment included
+  within a rich_text_area tag could potentially contain unsanitized HTML.
+
+  This has been assigned the CVE identifier CVE-2024-32464.
+
+  Versions Affected:  >= 7.1.0
+  Not affected:       < 7.1.0
+  Fixed Versions:     7.1.3.4
+
+  Impact
+  ------
+
+  This could lead to a potential cross site scripting issue within the Trix editor.
+
+  Releases
+  --------
+
+  The fixed releases are available at the normal locations.
+
+  Workarounds
+  -----------
+
+  N/A
+
+  Patches
+  -------
+  To aid users who aren't able to upgrade immediately we have provided
+  patches for the supported release series in accordance with our
+  [maintenance policy](https://guides.rubyonrails.org/maintenance_policy.html#security-issues)
+  regarding security issues. They are in git-am format and consist
+  of a single changeset.
+
+  * action_text_content_attachment_xss_7_1_stable.patch - Patch for 7.1 series
+
+  Credits
+  -------
+
+  Thank you [ooooooo_q](https://hackerone.com/ooooooo_q) for reporting this!
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 7.1.0"
+patched_versions:
+  - "~> 7.1.3, >= 7.1.3.4"
+  - ">= 7.2.0.beta2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-32464
+    - https://github.com/rails/rails/security/advisories/GHSA-prjp-h48f-jgf6
+    - https://github.com/rails/rails/commit/e215bf3360e6dfe1497c1503a495e384ed6b0995
+    - https://github.com/advisories/GHSA-prjp-h48f-jgf6
diff --git a/gems/actiontext/CVE-2024-34341.yml b/gems/actiontext/CVE-2024-34341.yml
new file mode 100644
index 0000000000..f041c89f5a
--- /dev/null
+++ b/gems/actiontext/CVE-2024-34341.yml
@@ -0,0 +1,73 @@
+---
+gem: actiontext
+cve: 2024-34341
+ghsa: qjqp-xr96-cj99
+url: https://github.com/advisories/GHSA-qjqp-xr96-cj99
+title: Arbitrary Code Execution Vulnerability in Trix Editor included in ActionText
+date: 2024-05-07
+description: |
+  From version 7.0 onwards the ActionText gem includes a copy of the Trix rich text editor.
+  Prior to versions 7.0.8.3 and 7.1.3.3, ActionText included a version of Trix that
+  is vulnerable to arbitrary code execution when
+  copying and pasting content from the web or other documents with markup into the editor.
+  The vulnerability stems from improper sanitization of pasted content, allowing an attacker
+  to embed malicious scripts which are executed within the context of the application.
+
+  # Vulnerable Versions:
+    * 7.1 series older than 7.1.3.3
+    * 7.0 series older than 7.0.8.3
+
+  # Fixed Versions:
+    * 7.1.3.3
+    * 7.0.8.3
+
+  # Vector:
+
+  Bug 1: When copying content manipulated by a script, such as:
+  ```javascript
+  document.addEventListener('copy', function(e){
+    e.clipboardData.setData('text/html', '<div><noscript><div class="123</noscript>456<img src=1 onerror=alert(1)//"></div></noscript></div>');
+    e.preventDefault();
+  });
+  ```
+  and pasting into the Trix editor, the script within the content is executed.
+
+  Bug 2: Similar execution occurs with content structured as:
+
+  ```javascript
+  document.write(`copy<div data-trix-attachment="{&quot;contentType&quot;:&quot;text/html&quot;,&quot;content&quot;:&quot;&lt;img src=1 onerror=alert(101)&gt;HELLO123&quot;}"></div>me`);
+  ```
+
+  # Impact:
+
+  An attacker could exploit these vulnerabilities to execute arbitrary JavaScript code
+  within the context of the user's session, potentially leading to unauthorized actions
+  being performed or sensitive information being disclosed.
+
+  # Remediation:
+
+  Update Recommendation: Users of ActionText 7.0 should upgrade to ActionText version 7.0.8.3 or later.
+  Users of ActionText 7.1 should upgrade to version 7.1.3.3 or later.
+  These updated versions incorporate proper sanitization of input from copied content.
+
+  CSP Enhancement: Additionally, enhancing the Content Security Policy (CSP) to disallow inline scripts
+  can significantly mitigate the risk of such vulnerabilities.
+  Set CSP policies such as script-src 'self' to ensure that only scripts hosted on the same origin
+  are executed, and explicitly prohibit inline scripts using script-src-elem.
+unaffected_versions:
+  - "< 7.0.0"
+patched_versions:
+  - "~> 7.0.8.3"
+  - ">= 7.1.3.3"
+cvss_v3: 5.4
+related:
+  url:
+    - https://discuss.rubyonrails.org/t/xss-vulnerabilities-in-trix-editor/85803
+    - https://github.com/basecamp/trix/releases/tag/v2.1.1
+    - https://github.com/basecamp/trix/pull/1147
+    - https://github.com/basecamp/trix#1149
+    - https://github.com/basecamp/trix#1153
+    - https://github.com/basecamp/trix/security/advisories/GHSA-qjqp-xr96-cj99
+    - https://github.com/basecamp/trix/commit/1a5c68a14d48421fc368e30026f4a7918028b7ad
+    - https://github.com/basecamp/trix/commit/841ff19b53f349915100bca8fcb488214ff93554
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-34341
diff --git a/gems/actiontext/CVE-2024-47888.yml b/gems/actiontext/CVE-2024-47888.yml
new file mode 100644
index 0000000000..6cf0d3e39d
--- /dev/null
+++ b/gems/actiontext/CVE-2024-47888.yml
@@ -0,0 +1,49 @@
+---
+gem: actiontext
+framework: rails
+cve: 2024-47888
+ghsa: wwhv-wxv9-rpgw
+url: https://github.com/rails/rails/security/advisories/GHSA-wwhv-wxv9-rpgw
+title: Possible ReDoS vulnerability in plain_text_for_blockquote_node
+  in Action Text
+date: 2024-10-15
+description: |
+  There is a possible ReDoS vulnerability in the
+  plain_text_for_blockquote_node helper in Action Text. This
+  vulnerability has been assigned the CVE identifier CVE-2024-47888.
+
+  ## Impact
+
+  Carefully crafted text can cause the plain_text_for_blockquote_node
+  helper to take an unexpected amount of time, possibly resulting
+  in a DoS vulnerability. All users running an affected release should
+  either upgrade or apply the relevant patch immediately.
+
+  Ruby 3.2 has mitigations for this problem, so Rails applications
+  using Ruby 3.2 or newer are unaffected. Rails 8.0.0.beta1 depends
+  on Ruby 3.2 or greater so is unaffected.
+
+  ## Releases
+
+  The fixed releases are available at the normal locations.
+
+  ## Workarounds
+
+  Users can avoid calling `plain_text_for_blockquote_node` or
+  upgrade to Ruby 3.2.
+
+  ## Credits
+
+  Thanks to [ooooooo_q](https://hackerone.com/ooooooo_q) for the report!
+unaffected_versions:
+  - "< 6.0.0"
+patched_versions:
+  - "~> 6.1.7.9"
+  - "~> 7.0.8.5"
+  - "~> 7.1.4, >= 7.1.4.1"
+  - ">= 7.2.1.1"
+related:
+  url:
+    - https://github.com/rails/rails/security/advisories/GHSA-wwhv-wxv9-rpgw
+    - https://hackerone.com/reports/2792776
+    - https://github.com/advisories/GHSA-wwhv-wxv9-rpgw
diff --git a/gems/actionview/CVE-2011-0446.yml b/gems/actionview/CVE-2011-0446.yml
new file mode 100644
index 0000000000..9e198ba334
--- /dev/null
+++ b/gems/actionview/CVE-2011-0446.yml
@@ -0,0 +1,30 @@
+---
+gem: actionview
+framework: rails
+cve: 2011-0446
+ghsa: 75w6-p6mg-vh8j
+url: https://groups.google.com/g/rubyonrails-security/c/8CpI7egxX4E/m/SmtqtyOKWzYJ
+title: XSS vulnerabilities in the mail_to helper in rails/actionview
+date: 2017-10-24
+description: |
+  Multiple cross-site scripting (XSS) vulnerabilities in the mail_to
+  helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when
+  javascript encoding is used, allow remote attackers to inject
+  arbitrary web script or HTML via a crafted (1) name or (2) email value.
+cvss_v2: 4.3
+patched_versions:
+  - "~> 2.3.11"
+  - ">= 3.0.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-0446
+    - https://groups.google.com/g/rubyonrails-security/c/8CpI7egxX4E/m/SmtqtyOKWzYJ
+    - https://github.com/advisories/GHSA-75w6-p6mg-vh8j
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055074.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055088.html
+    - http://www.debian.org/security/2011/dsa-2247
+    - https://web.archive.org/web/20111225083933/http://secunia.com/advisories/43274
+    - https://web.archive.org/web/20111225083933/http://secunia.com/advisories/43666
+    - https://web.archive.org/web/20201208053819/http://www.securitytracker.com/id?1025064
+    - https://web.archive.org/web/20210121211512/http://www.securityfocus.com/bid/46291
diff --git a/gems/actionview/CVE-2016-0752.yml b/gems/actionview/CVE-2016-0752.yml
index c7692bc619..b67801a1c3 100644
--- a/gems/actionview/CVE-2016-0752.yml
+++ b/gems/actionview/CVE-2016-0752.yml
@@ -87,7 +87,6 @@ description: |
 cvss_v2: 5.0
 cvss_v3: 7.5
 patched_versions:
-- '>= 5.0.0.beta1.1'
-- ~> 4.2.5, >= 4.2.5.1
-- ~> 4.1.14, >= 4.1.14.1
-notes: "'~> 3.2.22.1' is found in gems/actionpack/CVE-2016-0752.yml"
+  - ">= 5.0.0.beta1.1"
+  - "~> 4.2.5, >= 4.2.5.1"
+  - "~> 4.1.14, >= 4.1.14.1"
diff --git a/gems/actionview/CVE-2016-2097.yml b/gems/actionview/CVE-2016-2097.yml
index c4a3fa32a0..cb35e4ee57 100644
--- a/gems/actionview/CVE-2016-2097.yml
+++ b/gems/actionview/CVE-2016-2097.yml
@@ -6,7 +6,7 @@ ghsa: vx9j-46rh-fqr8
 url: https://groups.google.com/forum/#!topic/rubyonrails-security/ddY6HgqB2z4
 title: Possible Information Leak Vulnerability in Action View
 date: 2016-02-29
-description: |2
+description: |
 
   There is a possible directory traversal and information leak vulnerability
   in Action View. This was meant to be fixed on CVE-2016-0752. However the 3.2
@@ -81,7 +81,6 @@ description: |2
   and working with us in the patch!
 cvss_v3: 5.3
 unaffected_versions:
-- '>= 4.2.0'
+  - ">= 4.2.0"
 patched_versions:
-- ~> 4.1.14, >= 4.1.14.2
-notes: "'~> 3.2.22.2' is found in gems/actionpack/CVE-2016-2097.yml"
+  - "~> 4.1.14, >= 4.1.14.2"
diff --git a/gems/actionview/CVE-2016-6316.yml b/gems/actionview/CVE-2016-6316.yml
index 6c940c9e5f..58bb48902c 100644
--- a/gems/actionview/CVE-2016-6316.yml
+++ b/gems/actionview/CVE-2016-6316.yml
@@ -46,9 +46,8 @@ description: |
   ```
 cvss_v3: 6.1
 unaffected_versions:
-- "< 3.0.0"
+  - "< 3.0.0"
 patched_versions:
-- "~> 4.2.7.1"
-- "~> 4.2.8"
-- ">= 5.0.0.1"
-notes: "'~> 3.2.22.3' is found in gems/actionpack/CVE-2016-6316.yml"
+  - "~> 4.2.7.1"
+  - "~> 4.2.8"
+  - ">= 5.0.0.1"
diff --git a/gems/actionview/CVE-2019-5418.yml b/gems/actionview/CVE-2019-5418.yml
index 0c867b4f03..54e1f039aa 100644
--- a/gems/actionview/CVE-2019-5418.yml
+++ b/gems/actionview/CVE-2019-5418.yml
@@ -90,8 +90,8 @@ description: |
   Thanks to John Hawthorn <john@hawthorn.email> of GitHub
 cvss_v3: 7.5
 patched_versions:
-- ~> 4.2.11, >= 4.2.11.1
-- ~> 5.0.7, >= 5.0.7.2
-- ~> 5.1.6, >= 5.1.6.2
-- ~> 5.2.2, >= 5.2.2.1
-- '>= 6.0.0.beta3'
+  - "~> 4.2.11, >= 4.2.11.1"
+  - "~> 5.0.7, >= 5.0.7.2"
+  - "~> 5.1.6, >= 5.1.6.2"
+  - "~> 5.2.2, >= 5.2.2.1"
+  - ">= 6.0.0.beta3"
diff --git a/gems/actionview/CVE-2019-5419.yml b/gems/actionview/CVE-2019-5419.yml
index 5d88b0e83b..a2ba2e033e 100644
--- a/gems/actionview/CVE-2019-5419.yml
+++ b/gems/actionview/CVE-2019-5419.yml
@@ -86,8 +86,8 @@ description: |
   Thanks to John Hawthorn <john@hawthorn.email> of GitHub
 cvss_v3: 7.5
 patched_versions:
-- '>= 6.0.0.beta3'
-- ~> 5.2.2, >= 5.2.2.1
-- ~> 5.1.6, >= 5.1.6.2
-- ~> 5.0.7, >= 5.0.7.2
-- ~> 4.2.11, >= 4.2.11.1
+  - ">= 6.0.0.beta3"
+  - "~> 5.2.2, >= 5.2.2.1"
+  - "~> 5.1.6, >= 5.1.6.2"
+  - "~> 5.0.7, >= 5.0.7.2"
+  - "~> 4.2.11, >= 4.2.11.1"
diff --git a/gems/actionview/CVE-2020-15169.yml b/gems/actionview/CVE-2020-15169.yml
index 62c76f29d6..bcef48f0c5 100644
--- a/gems/actionview/CVE-2020-15169.yml
+++ b/gems/actionview/CVE-2020-15169.yml
@@ -39,5 +39,5 @@ description: |
   ```
 cvss_v3: 5.4
 patched_versions:
-- "~> 5.2.4, >= 5.2.4.4"
-- ">= 6.0.3.3"
+  - "~> 5.2.4, >= 5.2.4.4"
+  - ">= 6.0.3.3"
diff --git a/gems/actionview/CVE-2020-5267.yml b/gems/actionview/CVE-2020-5267.yml
index b7a30c0397..4b4f6eb34e 100644
--- a/gems/actionview/CVE-2020-5267.yml
+++ b/gems/actionview/CVE-2020-5267.yml
@@ -66,5 +66,5 @@ description: |
   ```
 cvss_v3: 4.0
 patched_versions:
-- ~> 5.2.4, >= 5.2.4.2
-- '>= 6.0.2.2'
+  - "~> 5.2.4, >= 5.2.4.2"
+  - ">= 6.0.2.2"
diff --git a/gems/actionview/CVE-2020-8163.yml b/gems/actionview/CVE-2020-8163.yml
index 6c5a891863..ac6c4edab3 100644
--- a/gems/actionview/CVE-2020-8163.yml
+++ b/gems/actionview/CVE-2020-8163.yml
@@ -25,5 +25,6 @@ description: |
 
   Until such time as the patch can be applied, application developers should
   ensure that all user-provided local names are alphanumeric.
+cvss_v3: 8.8
 patched_versions:
-- '>= 4.2.11.2'
+  - ">= 4.2.11.2"
diff --git a/gems/actionview/CVE-2020-8167.yml b/gems/actionview/CVE-2020-8167.yml
index 90b5e91a9b..8066b88c20 100644
--- a/gems/actionview/CVE-2020-8167.yml
+++ b/gems/actionview/CVE-2020-8167.yml
@@ -42,5 +42,5 @@ description: |
       end
 cvss_v3: 6.5
 patched_versions:
-- "~> 5.2.4, >= 5.2.4.3"
-- ">= 6.0.3.1"
+  - "~> 5.2.4, >= 5.2.4.3"
+  - ">= 6.0.3.1"
diff --git a/gems/actionview/CVE-2022-27777.yml b/gems/actionview/CVE-2022-27777.yml
new file mode 100644
index 0000000000..d9dcd657ad
--- /dev/null
+++ b/gems/actionview/CVE-2022-27777.yml
@@ -0,0 +1,51 @@
+---
+gem: actionview
+framework: rails
+cve: 2022-27777
+ghsa: ch3h-j2vf-95pv
+url: https://groups.google.com/g/ruby-security-ann/c/9wJPEDv-iRw
+title: Possible XSS Vulnerability in Action View tag helpers
+date: 2022-04-26
+description: |
+  There is a possible XSS vulnerability in Action View tag helpers.  Passing
+  untrusted input as hash keys can lead to a possible XSS vulnerability. This
+  vulnerability has been assigned the CVE identifier CVE-2022-27777.
+
+  Versions Affected:  ALL
+  Not affected:       NONE
+  Fixed Versions:     7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1
+
+  ## Impact
+
+  If untrusted data is passed as the hash key for tag attributes, there is a
+  possibility that the untrusted data may not be properly escaped which can
+  lead to an XSS vulnerability.
+
+  Impacted code will look something like this:
+
+  ```
+  check_box_tag('thename', 'thevalue', false, aria: { malicious_input => 'thevalueofaria' })
+  ```
+
+  Where the "malicious_input" variable contains untrusted data.
+
+  All users running an affected release should either upgrade or use one of the
+  workarounds immediately.
+
+  ## Releases
+
+  The FIXED releases are available at the normal locations.
+
+  ## Workarounds
+
+  Escape the untrusted data before using it as a key for tag helper methods.
+cvss_v3: 6.1
+patched_versions:
+  - "~> 5.2.7, >= 5.2.7.1"
+  - "~> 6.0.4, >= 6.0.4.8"
+  - "~> 6.1.5, >= 6.1.5.1"
+  - ">= 7.0.2.4"
+related:
+  url:
+    - https://github.com/rails/rails/commit/649516ce0feb699ae06a8c5e81df75d460cc9a85
+    - https://github.com/rails/rails/blob/7-0-stable/actionview/CHANGELOG.md#rails-7024-april-26-2022
diff --git a/gems/actionview/CVE-2023-23913.yml b/gems/actionview/CVE-2023-23913.yml
new file mode 100644
index 0000000000..fe98b6925d
--- /dev/null
+++ b/gems/actionview/CVE-2023-23913.yml
@@ -0,0 +1,77 @@
+---
+gem: actionview
+framework: rails
+cve: 2023-23913
+ghsa: xp5h-f8jf-rc8q
+url: https://discuss.rubyonrails.org/t/cve-2023-23913-dom-based-cross-site-scripting-in-rails-ujs-for-contenteditable-html-elements/82468
+title: DOM Based Cross-site Scripting in rails-ujs for contenteditable HTML Elements
+date: 2023-03-13
+description: |
+  NOTE: rails-ujs is part of Rails/actionview since 5.1.0.
+
+  There is a potential DOM based cross-site scripting issue in rails-ujs
+  which leverages the Clipboard API to target HTML elements that are
+  assigned the contenteditable attribute. This has the potential to
+  occur when pasting malicious HTML content from the clipboard that
+  includes a data-method, data-remote or data-disable-with attribute.
+
+  This vulnerability has been assigned the CVE identifier CVE-2023-23913.
+
+  Not affected: < 5.1.0
+  Versions Affected: >= 5.1.0
+  Fixed Versions: 6.1.7.3, 7.0.4.3
+
+  Impact
+    If the specified malicious HTML clipboard content is provided to a
+    contenteditable element, this could result in the arbitrary execution
+    of javascript on the origin in question.
+
+  Releases
+    The FIXED releases are available at the normal locations.
+
+  Workarounds
+    We recommend that all users upgrade to one of the FIXED versions.
+    In the meantime, users can attempt to mitigate this vulnerability
+    by removing the contenteditable attribute from elements in pages
+    that rails-ujs will interact with.
+
+  Patches
+    To aid users who aren’t able to upgrade immediately we have provided
+    patches for the two supported release series. They are in git-am
+    format and consist of a single changeset.
+
+  * rails-ujs-data-method-contenteditable-6-1.patch - Patch for 6.1 series
+  * rails-ujs-data-method-contenteditable-7-0.patch - Patch for 7.0 series
+
+  Please note that only the 7.0.Z and 6.1.Z series are
+  supported at present, and 6.0.Z for severe vulnerabilities.
+
+  Users of earlier unsupported releases are advised to upgrade as
+  soon as possible as we cannot guarantee the continued availability
+  of security fixes for unsupported releases.
+
+  Credits
+    We would like to thank ryotak 15 for reporting this!
+
+  * rails-ujs-data-method-contenteditable-6-1.patch (8.5 KB)
+  * rails-ujs-data-method-contenteditable-7-0.patch (8.5 KB)
+  * rails-ujs-data-method-contenteditable-main.patch (8.9 KB)
+cvss_v3: 7.5
+unaffected_versions:
+  - "< 5.1.0"
+patched_versions:
+  - "~> 6.1.7.3"
+  - ">= 7.0.4.3"
+related:
+  url:
+    - https://discuss.rubyonrails.org/t/cve-2023-23913-dom-based-cross-site-scripting-in-rails-ujs-for-contenteditable-html-elements/82468
+    - https://www.cve.org/CVERecord?id=CVE-2023-23913
+    - https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=aa67066c383f12dee5aee964667de4d8
+    - https://access.redhat.com/security/cve/cve-2023-23913
+    - https://bugzilla.redhat.com/show_bug.cgi?id=2182160
+    - https://security.snyk.io/vuln/SNYK-RUBY-RAILS-5291540
+    - https://www.suse.com/security/cve/CVE-2023-23913.html
+    - https://security-tracker.debian.org/tracker/CVE-2023-23913
+    - https://www.mend.io/vulnerability-database/CVE-2023-23913
+    - https://github.com/jasnow/gsd-database/blob/main/2023/23xxx/GSD-2023-23913.json
+notes: "CVE has been reserved, but not filled out."
diff --git a/gems/active-support/CVE-2018-3779.yml b/gems/active-support/CVE-2018-3779.yml
index 25950238e9..0645d0513b 100644
--- a/gems/active-support/CVE-2018-3779.yml
+++ b/gems/active-support/CVE-2018-3779.yml
@@ -13,4 +13,4 @@ description: |
   Replace this gem with the official `activesupport` gem.
 related:
   url:
-  - https://github.com/rubygems/rubygems.org/pull/1762
+    - https://github.com/rubygems/rubygems.org/pull/1762
diff --git a/gems/active_attr/CVE-2021-4250.yml b/gems/active_attr/CVE-2021-4250.yml
new file mode 100644
index 0000000000..04e922865a
--- /dev/null
+++ b/gems/active_attr/CVE-2021-4250.yml
@@ -0,0 +1,25 @@
+---
+gem: active_attr
+cve: 2021-4250
+ghsa: 4whf-rmx5-8frv
+url: https://github.com/cgriego/active_attr/issues/184
+title: active_attr Improper Resource Shutdown or Release vulnerability
+date: 2022-12-19
+description: |
+  A vulnerability classified as problematic has been found in cgriego active_attr
+  up to 0.15.3. This affects the function call of the file
+  lib/active_attr/typecasting/boolean_typecaster.rb of the component Regex Handler.
+  The manipulation of the argument value leads to denial of service. The exploit
+  has been disclosed to the public and may be used. Upgrading to version 0.15.4 can
+  address this issue. The name of the patch is dab95e5843b01525444b82bd7b336ef1d79377df.
+  It is recommended to upgrade the affected component. The associated identifier of
+  this vulnerability is VDB-216207.
+cvss_v3: 3.5
+patched_versions:
+  - ">= 0.15.4"
+related:
+  url:
+    - https://github.com/cgriego/active_attr/pull/185
+    - https://github.com/cgriego/active_attr/commit/dab95e5843b01525444b82bd7b336ef1d79377df
+    - https://github.com/cgriego/active_attr/releases/tag/v0.15.4
+    - https://vuldb.com/?id.216207
diff --git a/gems/activeadmin/CVE-2023-50448.yml b/gems/activeadmin/CVE-2023-50448.yml
new file mode 100644
index 0000000000..e8bce14244
--- /dev/null
+++ b/gems/activeadmin/CVE-2023-50448.yml
@@ -0,0 +1,37 @@
+---
+gem: activeadmin
+cve: 2023-50448
+ghsa: 356j-hg45-x525
+url: https://github.com/activeadmin/activeadmin/security/advisories/GHSA-356j-hg45-x525
+title: Potential CSV export data leak
+date: 2023-12-15
+description: |
+
+  ### Impact
+
+  In ActiveAdmin versions prior to 2.12.0, a concurrency issue was
+  found that could allow a malicious actor to be able to access
+  potentially private data that belongs to another user.
+
+  The bug affects the functionality to export data as CSV files, and
+  was caused by a variable holding the collection to be exported being
+  shared across threads and not properly synchronized.
+
+  The attacker would need access to the same ActiveAdmin application
+  as the victim, and could exploit the issue by timing their request
+  immediately before when they know someone else will request a CSV
+  (e.g. via phishing) or request CSVs frequently and hope someone
+  else makes a concurrent request.
+
+  ### Patches
+
+  Versions 2.12.0 and above fixed the problem by completely
+  removing the shared state.
+cvss_v3: 8.4
+patched_versions:
+  - ">= 2.12.0"
+related:
+  url:
+    - https://github.com/activeadmin/activeadmin/security/advisories/GHSA-356j-hg45-x525
+    - https://github.com/advisories/GHSA-356j-hg45-x525
+notes: "No NVD or mention in repo for this CVE."
diff --git a/gems/activeadmin/CVE-2023-51763.yml b/gems/activeadmin/CVE-2023-51763.yml
new file mode 100644
index 0000000000..dd5fef6b6a
--- /dev/null
+++ b/gems/activeadmin/CVE-2023-51763.yml
@@ -0,0 +1,20 @@
+---
+gem: activeadmin
+cve: 2023-51763
+ghsa: rqxc-9p8h-xqgq
+url: https://github.com/advisories/GHSA-rqxc-9p8h-xqgq
+title: ActiveAdmin vulnerable to CSV injection
+date: 2023-12-24
+description: |
+  csv_builder.rb in ActiveAdmin (aka Active Admin)
+  before 3.2.0 allows CSV injection.
+cvss_v3: 8.4
+patched_versions:
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-51763
+    - https://github.com/activeadmin/activeadmin/releases/tag/v3.2.0
+    - https://github.com/activeadmin/activeadmin/pull/8161
+    - https://github.com/activeadmin/activeadmin/commit/697be2b183491beadc8f0b7d8b5bfb44f2387909
+    - https://github.com/advisories/GHSA-rqxc-9p8h-xqgq
diff --git a/gems/activeadmin/CVE-2024-37031.yml b/gems/activeadmin/CVE-2024-37031.yml
new file mode 100644
index 0000000000..54584a67bb
--- /dev/null
+++ b/gems/activeadmin/CVE-2024-37031.yml
@@ -0,0 +1,77 @@
+---
+gem: activeadmin
+cve: 2024-37031
+ghsa: 9mg6-x45v-hcfm
+url: https://github.com/activeadmin/activeadmin/security/advisories/GHSA-9mg6-x45v-hcfm
+title: activeadmin vulnerable to stored persistent cross-site
+  scripting (XSS) in dynamic form legends
+date: 2024-06-02
+description: |
+  ### Impact
+
+  Users settings their active admin form legends dynamically may be
+  vulnerable to stored XSS, as long as its value can be injected
+  directly by a malicious user.
+
+  For example:
+
+  * A public web application allows users to create entities with
+    arbitrary names.
+  * Active Admin is used to administrate these entities through a
+    private backend.
+  * The form to edit these entities in the private backend has the
+    following shape (note the dynamic `name` value dependent on an
+    attribute of the `resource`):
+
+  ```ruby
+    form do |f|
+      f.inputs name: resource.name do
+        f.input :name
+        f.input :description
+      end
+
+      f.actions
+    end
+  ```
+
+  Then a malicious user could create an entity with a payload that
+  would get executed in the active admin administrator's browser.
+
+  Both `form` blocks with an implicit or explicit name (i.e., both
+  `form resource.name` or `form name: resource.name` would suffer
+  from the problem), where the value of the name can be arbitrarily
+  set by non admin users.
+
+  ### Patches
+
+  The problem has been fixed in ActiveAdmin 3.2.2 and ActiveAdmin 4.0.0.beta7.
+
+  ### Workarounds
+
+  Users can workaround this problem without upgrading by explicitly
+  escaping the form name using an HTML escaping utility. For example:
+
+  ```ruby
+    form do |f|
+      f.inputs name: ERB::Util.html_escape(resource.name) do
+        f.input :name
+        f.input :description
+      end
+
+      f.actions
+    end
+  ```
+  Upgrading is of course recommended though.
+
+  ### References
+  https://owasp.org/www-community/attacks/xss/#stored-xss-attacks
+cvss_v3: 7.2
+patched_versions:
+  - "~> 3.2, >= 3.2.2"
+  - ">= 4.0.0.beta7"
+related:
+  url:
+    - https://github.com/activeadmin/activeadmin/security/advisories/GHSA-9mg6-x45v-hcfm
+    - https://github.com/activeadmin/activeadmin/pull/8349
+    - https://owasp.org/www-community/attacks/xss/#stored-xss-attacks
+    - https://github.com/advisories/GHSA-9mg6-x45v-hcfm
diff --git a/gems/activejob/CVE-2018-16476.yml b/gems/activejob/CVE-2018-16476.yml
index 3a60d48452..30d044b4bd 100644
--- a/gems/activejob/CVE-2018-16476.yml
+++ b/gems/activejob/CVE-2018-16476.yml
@@ -1,5 +1,6 @@
 ---
 gem: activejob
+framework: rails
 cve: 2018-16476
 ghsa: q2qw-rmrh-vv42
 url: https://groups.google.com/forum/#!topic/rubyonrails-security/FL4dSdzr2zw
@@ -26,10 +27,10 @@ description: |
   workarounds immediately.
 cvss_v3: 7.5
 unaffected_versions:
-- < 4.2.0
+  - "< 4.2.0"
 patched_versions:
-- ~> 4.2.11
-- ~> 5.0.7.1
-- ~> 5.1.6.1
-- ~> 5.1.7
-- '>= 5.2.1.1'
+  - "~> 4.2.11"
+  - "~> 5.0.7.1"
+  - "~> 5.1.6.1"
+  - "~> 5.1.7"
+  - ">= 5.2.1.1"
diff --git a/gems/activemodel/CVE-2016-0753.yml b/gems/activemodel/CVE-2016-0753.yml
index a4b97e7d78..a838dbfca4 100644
--- a/gems/activemodel/CVE-2016-0753.yml
+++ b/gems/activemodel/CVE-2016-0753.yml
@@ -84,8 +84,8 @@ description: |
 cvss_v2: 5.0
 cvss_v3: 5.3
 unaffected_versions:
-- <= 4.0.13
+  - "<= 4.0.13"
 patched_versions:
-- '>= 5.0.0.beta1.1'
-- ~> 4.2.5, >= 4.2.5.1
-- ~> 4.1.14, >= 4.1.14.1
+  - ">= 5.0.0.beta1.1"
+  - "~> 4.2.5, >= 4.2.5.1"
+  - "~> 4.1.14, >= 4.1.14.1"
diff --git a/gems/activerecord-jdbc-adapter/OSVDB-114854.yml b/gems/activerecord-jdbc-adapter/OSVDB-114854.yml
index 6821d8902f..d8907709b7 100644
--- a/gems/activerecord-jdbc-adapter/OSVDB-114854.yml
+++ b/gems/activerecord-jdbc-adapter/OSVDB-114854.yml
@@ -2,8 +2,8 @@
 gem: activerecord-jdbc-adapter
 platform: jruby
 osvdb: 114854
-url: http://osvdb.org/show/osvdb/114854
-title: |
+url: https://github.com/jruby/activerecord-jdbc-adapter/issues/322
+title:
   ActiveRecord-JDBC-Adapter (AR-JDBC) lib/arjdbc/jdbc/adapter.rb sql.gsub()
   Function SQL Injection
 date: 2013-02-25
@@ -15,6 +15,13 @@ description: |
   manipulate SQL queries in the back-end database, allowing for the
   manipulation or disclosure of arbitrary data.
 unaffected_versions:
-- < 1.2.6
+  - "< 1.2.6"
 patched_versions:
-- '>= 1.2.8'
+  - ">= 1.2.8"
+related:
+  url:
+    - https://github.com/jruby/activerecord-jdbc-adapter/issues/322
+    - https://github.com/jruby/activerecord-jdbc-adapter/blob/master/lib/arjdbc/jdbc/adapter.rb
+    - https://security.snyk.io/vuln/SNYK-RUBY-ACTIVERECORDJDBCADAPTER-20076
+    - https://my.diffend.io/gems/activerecord-jdbc-adapter/1.2.5/1.2.8
+    - http://osvdb.org/show/osvdb/114854
diff --git a/gems/activerecord-oracle_enhanced-adapter/OSVDB-95376.yml b/gems/activerecord-oracle_enhanced-adapter/OSVDB-95376.yml
index e4709d0ddd..aabf2b2836 100644
--- a/gems/activerecord-oracle_enhanced-adapter/OSVDB-95376.yml
+++ b/gems/activerecord-oracle_enhanced-adapter/OSVDB-95376.yml
@@ -1,7 +1,7 @@
 ---
 gem: activerecord-oracle_enhanced-adapter
 osvdb: 95376
-url: http://osvdb.org/show/osvdb/95376
+url: https://www.versioneye.com/Ruby/activerecord-oracle_enhanced-adapter/1.1.6
 title: Oracle "enhanced" ActiveRecord Gem for Ruby :limit / :offset SQL Injection
 date: 2008-10-10
 description: |
@@ -12,4 +12,9 @@ description: |
   queries in the back-end database, allowing for the manipulation or disclosure
   of arbitrary data.
 patched_versions:
-- '>= 1.1.8'
+  - ">= 1.1.8"
+related:
+  url:
+    - https://www.versioneye.com/Ruby/activerecord-oracle_enhanced-adapter/1.1.6
+    - https://security.snyk.io/vuln/SNYK-RUBY-ACTIVERECORDORACLEENHANCEDADAPTER-20006
+    - http://osvdb.org/show/osvdb/95376
diff --git a/gems/activerecord-session_store/CVE-2019-25025.yml b/gems/activerecord-session_store/CVE-2019-25025.yml
index b924cdc732..14025d4eff 100644
--- a/gems/activerecord-session_store/CVE-2019-25025.yml
+++ b/gems/activerecord-session_store/CVE-2019-25025.yml
@@ -16,11 +16,11 @@ description: |
   Users should upgrade to `activerecord-session_store` version 2.0.0 or later.
 cvss_v3: 5.9
 patched_versions:
-- '>= 2.0.0'
+  - ">= 2.0.0"
 
 related:
   cve:
-  - 2019-16782
+    - 2019-16782
   url:
-  - https://github.com/rails/activerecord-session_store/pull/151
-  - https://github.com/rails/activerecord-session_store/releases/tag/v2.0.0
+    - https://github.com/rails/activerecord-session_store/pull/151
+    - https://github.com/rails/activerecord-session_store/releases/tag/v2.0.0
diff --git a/gems/activerecord/CVE-2008-4094.yml b/gems/activerecord/CVE-2008-4094.yml
new file mode 100644
index 0000000000..691329e3cc
--- /dev/null
+++ b/gems/activerecord/CVE-2008-4094.yml
@@ -0,0 +1,30 @@
+---
+gem: activerecord
+framework: rails
+cve: 2008-4094
+ghsa: xf96-32q2-9rw2
+url: http://www.rorsecurity.info/2008/09/08/sql-injection-issue-in-limit-and-offset-parameter
+title: High severity vulnerability that affects rails
+date: 2017-10-24
+description: |
+  Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1
+  allow remote attackers to execute arbitrary SQL commands via the
+  (1) :limit and (2) :offset parameters, related to ActiveRecord,
+  ActiveSupport, ActiveResource, ActionPack, and ActionMailer.
+cvss_v2: 7.5
+patched_versions:
+  - "~> 2.0.0"
+  - ">= 2.1.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2008-4094
+    - http://www.rorsecurity.info/2008/09/08/sql-injection-issue-in-limit-and-offset-parameter
+    - https://rubyonrails.org/2008/10/23/rails-2-1-2-security-other-fixes
+    - https://github.com/rails/rails/commit/213f31513e4cb640fa3ed45f387f221401023646
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/45109
+    - https://github.com/advisories/GHSA-xf96-32q2-9rw2
+    - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html
+    - http://rails.lighthouseapp.com/projects/8994/tickets/288
+    - http://rails.lighthouseapp.com/projects/8994/tickets/964
+    - http://www.openwall.com/lists/oss-security/2008/09/13/2
+    - http://www.openwall.com/lists/oss-security/2008/09/16/1
diff --git a/gems/activerecord/CVE-2010-3933.yml b/gems/activerecord/CVE-2010-3933.yml
new file mode 100644
index 0000000000..0e500ebcc5
--- /dev/null
+++ b/gems/activerecord/CVE-2010-3933.yml
@@ -0,0 +1,27 @@
+---
+gem: activerecord
+framework: rails
+cve: 2010-3933
+ghsa: gjxw-5w2q-7grf
+url: http://weblog.rubyonrails.org/2010/10/15/security-vulnerability-in-nested-attributes-code-in-ruby-on-rails-2-3-9-and-3-0-0
+title: Security Vulnerability in Nested Attributes code in Ruby On Rails 2.3.9 and 3.0.0
+date: 2017-10-24
+description: |
+  Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested
+  attributes, which allows remote attackers to modify arbitrary
+  records by changing the names of parameters for form inputs.
+
+  Patches are available for 2.3 and 3.0 series.
+cvss_v2: 6.4
+unaffected_versions:
+  - "< 2.3.9"
+patched_versions:
+  - "~> 2.3.9"
+  - ">= 3.0.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-3933
+    - http://weblog.rubyonrails.org/2010/10/15/security-vulnerability-in-nested-attributes-code-in-ruby-on-rails-2-3-9-and-3-0-0
+    - https://github.com/advisories/GHSA-gjxw-5w2q-7grf
+    - https://web.archive.org/web/20111225083933/http://secunia.com/advisories/41930
+    - https://web.archive.org/web/20201208053819/http://securitytracker.com/id?1024624
diff --git a/gems/activerecord/CVE-2011-0448.yml b/gems/activerecord/CVE-2011-0448.yml
new file mode 100644
index 0000000000..9581301916
--- /dev/null
+++ b/gems/activerecord/CVE-2011-0448.yml
@@ -0,0 +1,28 @@
+---
+gem: activerecord
+framework: rails
+cve: 2011-0448
+ghsa: jmm9-2p29-vh2w
+url: http://weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4
+title: Potential SQL Injection with limit in rails/activerecord
+date: 2017-10-24
+description: |
+  Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to
+  the limit function specify integer values, which makes it easier
+  for remote attackers to conduct SQL injection attacks via a
+  non-numeric argument.
+cvss_v2: 7.5
+unaffected_versions:
+  - "< 3.0.0"
+patched_versions:
+  - "~> 2.3.11"
+  - "> 3.0.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-0448
+    - http://weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4
+    - https://groups.google.com/g/rubyonrails-security/c/tliQLPa_Tu0/m/rUCt9kyGGU4J
+    - https://github.com/advisories/GHSA-jmm9-2p29-vh2w
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html
+    - https://web.archive.org/web/20111225083933/http://secunia.com/advisories/43278
+    - https://web.archive.org/web/20201208053819/http://securitytracker.com/id?1025063
diff --git a/gems/activerecord/CVE-2011-2930.yml b/gems/activerecord/CVE-2011-2930.yml
new file mode 100644
index 0000000000..67d576813b
--- /dev/null
+++ b/gems/activerecord/CVE-2011-2930.yml
@@ -0,0 +1,36 @@
+---
+gem: activerecord
+framework: rails
+cve: 2011-2930
+ghsa: h6w6-xmqv-7q78
+url: http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6
+title: SQL Injection Vulnerability in quote_table_name in rails/activerecord
+date: 2017-10-24
+description: |
+  Multiple SQL injection vulnerabilities in the
+  quote_table_name method in the ActiveRecord adapters in
+  activerecord/lib/active_record/connection_adapters in Ruby on Rails
+  before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allow
+  remote attackers to execute arbitrary SQL commands via a crafted column name.
+cvss_v2: 7.5
+patched_versions:
+  - "~> 2.3.13"
+  - "~> 3.0.10"
+  - "~> 3.1.0.rc5"
+  - ">= 3.1.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-2930
+    - http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6
+    - https://groups.google.com/g/rubyonrails-security/c/ah5HN0S8OJs/m/MN35sDZdqLEJ
+    - https://github.com/rails/rails/commit/8a39f411dc3c806422785b1f4d5c7c9d58e4bf85
+    - https://github.com/advisories/GHSA-h6w6-xmqv-7q78
+    - https://bugzilla.redhat.com/show_bug.cgi?id=731438
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html
+    - http://www.debian.org/security/2011/dsa-2301
+    - http://www.openwall.com/lists/oss-security/2011/08/17/1
+    - http://www.openwall.com/lists/oss-security/2011/08/19/11
+    - http://www.openwall.com/lists/oss-security/2011/08/20/1
+    - http://www.openwall.com/lists/oss-security/2011/08/22/13
+    - http://www.openwall.com/lists/oss-security/2011/08/22/14
+    - http://www.openwall.com/lists/oss-security/2011/08/22/5
diff --git a/gems/activerecord/CVE-2012-2660.yml b/gems/activerecord/CVE-2012-2660.yml
index 2786d9339e..e04b3539bb 100644
--- a/gems/activerecord/CVE-2012-2660.yml
+++ b/gems/activerecord/CVE-2012-2660.yml
@@ -4,9 +4,10 @@ framework: rails
 cve: 2012-2660
 osvdb: 82610
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-2660
-title: 'CVE-2012-2660 rubygem-actionpack: Unsafe query generation'
+title: "CVE-2012-2660 rubygem-actionpack: Unsafe query generation"
 date: 2012-05-31
-description: actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before
+description: |
+  actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before
   3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences
   in parameter handling between the Active Record component and the Rack interface,
   which allows remote attackers to bypass intended database-query restrictions and
@@ -14,6 +15,6 @@ description: actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails bef
   a related issue to CVE-2012-2694.
 cvss_v2: 7.5
 patched_versions:
-- ~> 3.0.13
-- ~> 3.1.5
-- '>= 3.2.4'
+  - "~> 3.0.13"
+  - "~> 3.1.5"
+  - ">= 3.2.4"
diff --git a/gems/activerecord/CVE-2012-2661.yml b/gems/activerecord/CVE-2012-2661.yml
index 737bc9f935..b6231a0b6f 100644
--- a/gems/activerecord/CVE-2012-2661.yml
+++ b/gems/activerecord/CVE-2012-2661.yml
@@ -3,19 +3,21 @@ gem: activerecord
 framework: rails
 cve: 2012-2661
 osvdb: 82403
+ghsa: fh39-v733-mxfr
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-2661
 title: 'CVE-2012-2661 rubygem-activerecord: SQL injection when processing nested query
   paramaters'
 date: 2012-05-31
-description: The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x
+description: |
+  The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x
   before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of
   request data to a where method in an ActiveRecord class, which allows remote attackers
   to conduct certain SQL injection attacks via nested query parameters that leverage
   unintended recursion, a related issue to CVE-2012-2695.
 cvss_v2: 5.0
 unaffected_versions:
-- ~> 2.3.14
+  - "~> 2.3.14"
 patched_versions:
-- ~> 3.0.13
-- ~> 3.1.5
-- '>= 3.2.4'
+  - "~> 3.0.13"
+  - "~> 3.1.5"
+  - ">= 3.2.4"
diff --git a/gems/activerecord/CVE-2012-2695.yml b/gems/activerecord/CVE-2012-2695.yml
new file mode 100644
index 0000000000..104d3c7ca7
--- /dev/null
+++ b/gems/activerecord/CVE-2012-2695.yml
@@ -0,0 +1,30 @@
+---
+gem: activerecord
+framework: rails
+cve: 2012-2695
+ghsa: 76wq-xw4h-f8wj
+url: https://groups.google.com/g/rubyonrails-security/c/l4L0TEVAz1k/m/Vr84sD9B464J
+title: SQL Injection Vulnerability in Ruby on Rails
+date: 2017-10-24
+description: |
+  The Active Record component in Ruby on Rails before 3.0.14, 3.1.x
+  before 3.1.6, and 3.2.x before 3.2.6 does not properly implement
+  the passing of request data to a where method in an ActiveRecord
+  class, which allows remote attackers to conduct certain SQL
+  injection attacks via nested query parameters that leverage
+  improper handling of nested hashes, a related issue to CVE-2012-2661.
+cvss_v2: 7.5
+patched_versions:
+  - "~> 3.0.14"
+  - "~> 3.1.6"
+  - ">= 3.2.6"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-2695
+    - https://groups.google.com/g/rubyonrails-security/c/l4L0TEVAz1k/m/Vr84sD9B464J
+    - https://github.com/advisories/GHSA-76wq-xw4h-f8wj
+    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00002.html
+    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00014.html
+    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00016.html
+    - http://lists.opensuse.org/opensuse-updates/2012-08/msg00046.html
+    - http://rhn.redhat.com/errata/RHSA-2013-0154.html
diff --git a/gems/activerecord/OSVDB-88661.yml b/gems/activerecord/CVE-2012-6496.yml
similarity index 88%
rename from gems/activerecord/OSVDB-88661.yml
rename to gems/activerecord/CVE-2012-6496.yml
index 45f37e5969..50573f1abb 100644
--- a/gems/activerecord/OSVDB-88661.yml
+++ b/gems/activerecord/CVE-2012-6496.yml
@@ -3,6 +3,7 @@ gem: activerecord
 framework: rails
 cve: 2012-6496
 osvdb: 88661
+ghsa: gh2w-j7cx-2664
 url: https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/DCNTNp_qjFM
 title: Ruby on Rails find_by_* Methods Authlogic SQL Injection Bypass
 date: 2012-12-22
@@ -12,6 +13,6 @@ description: |
   crafted requests can use the scope to inject arbitrary SQL.
 cvss_v2: 6.4
 patched_versions:
-- ~> 3.0.18
-- ~> 3.1.9
-- '>= 3.2.10'
+  - "~> 3.0.18"
+  - "~> 3.1.9"
+  - ">= 3.2.10"
diff --git a/gems/activerecord/CVE-2013-0155.yml b/gems/activerecord/CVE-2013-0155.yml
index c9fd07d862..b5f8d3d871 100644
--- a/gems/activerecord/CVE-2013-0155.yml
+++ b/gems/activerecord/CVE-2013-0155.yml
@@ -3,11 +3,13 @@ gem: activerecord
 framework: rails
 cve: 2013-0155
 osvdb: 89025
+ghsa: gppp-5xc5-wfpx
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0155
 title: 'CVE-2013-0155 rubygem-actionpack, rubygem-activerecord: Unsafe Query Generation
   Risk in Ruby on Rails'
 date: 2013-01-08
-description: Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before
+description: |
+  Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before
   3.2.11 does not properly consider differences in parameter handling between the
   Active Record component and the JSON implementation, which allows remote attackers
   to bypass intended database-query restrictions and perform NULL checks or trigger
@@ -15,7 +17,7 @@ description: Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x b
   values, a related issue to CVE-2012-2660 and CVE-2012-2694.
 cvss_v2: 10.0
 patched_versions:
-- ~> 2.3.16
-- ~> 3.0.19
-- ~> 3.1.10
-- '>= 3.2.11'
+  - "~> 2.3.16"
+  - "~> 3.0.19"
+  - "~> 3.1.10"
+  - ">= 3.2.11"
diff --git a/gems/activerecord/CVE-2013-0276.yml b/gems/activerecord/CVE-2013-0276.yml
index 754b43f66d..ed2f6e1fbb 100644
--- a/gems/activerecord/CVE-2013-0276.yml
+++ b/gems/activerecord/CVE-2013-0276.yml
@@ -3,14 +3,16 @@ gem: activerecord
 framework: rails
 cve: 2013-0276
 osvdb: 90072
+ghsa: gr44-7grc-37vq
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0276
-title: 'CVE-2013-0276 rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected'
+title: "CVE-2013-0276 rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected"
 date: 2013-02-11
-description: ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and
+description: |
+  ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and
   3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection
   mechanism and modify protected model attributes via a crafted request.
 cvss_v2: 5.0
 patched_versions:
-- ~> 2.3.17
-- ~> 3.1.11
-- '>= 3.2.12'
+  - "~> 2.3.17"
+  - "~> 3.1.11"
+  - ">= 3.2.12"
diff --git a/gems/activerecord/CVE-2013-0277.yml b/gems/activerecord/CVE-2013-0277.yml
index 46fe72aec7..657b9afbc5 100644
--- a/gems/activerecord/CVE-2013-0277.yml
+++ b/gems/activerecord/CVE-2013-0277.yml
@@ -3,15 +3,17 @@ gem: activerecord
 framework: rails
 cve: 2013-0277
 osvdb: 90073
+ghsa: fhj9-cjjh-27vm
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0277
 title: 'CVE-2013-0277 rubygem-activerecord: Serialized Attributes YAML Vulnerability
   with Rails 2.3 and 3.0'
 date: 2013-02-11
-description: ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows
+description: |
+  ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows
   remote attackers to cause a denial of service or execute arbitrary code via crafted
   serialized attributes that cause the +serialize+ helper to deserialize arbitrary
   YAML.
 cvss_v2: 10.0
 patched_versions:
-- ~> 2.3.17
-- '>= 3.1.0'
+  - "~> 2.3.17"
+  - ">= 3.1.0"
diff --git a/gems/activerecord/CVE-2013-1854.yml b/gems/activerecord/CVE-2013-1854.yml
index b8730b9147..b2df28b581 100644
--- a/gems/activerecord/CVE-2013-1854.yml
+++ b/gems/activerecord/CVE-2013-1854.yml
@@ -3,10 +3,12 @@ gem: activerecord
 framework: rails
 cve: 2013-1854
 osvdb: 91453
+ghsa: 3crr-9vmg-864v
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1854
-title: 'CVE-2013-1854 rubygem-activerecord: attribute_dos Symbol DoS vulnerability'
+title: "CVE-2013-1854 rubygem-activerecord: attribute_dos Symbol DoS vulnerability"
 date: 2013-03-19
-description: The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x
+description: |
+  The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x
   before 3.1.12, and 3.2.x before 3.2.13 processes certain queries by converting hash
   keys to symbols, which allows remote attackers to cause a denial of service via
   crafted input to a where method. A flaw was found in the way Ruby on Rails handled
@@ -15,8 +17,8 @@ description: The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3
   would result in the creation of Ruby symbols, which were never garbage collected.
 cvss_v2: 7.8
 unaffected_versions:
-- ~> 3.0.0
+  - "~> 3.0.0"
 patched_versions:
-- ~> 2.3.18
-- ~> 3.1.12
-- '>= 3.2.13'
+  - "~> 2.3.18"
+  - "~> 3.1.12"
+  - ">= 3.2.13"
diff --git a/gems/activerecord/CVE-2014-0080.yml b/gems/activerecord/CVE-2014-0080.yml
index 2d9eb02f71..d16ddf9be4 100644
--- a/gems/activerecord/CVE-2014-0080.yml
+++ b/gems/activerecord/CVE-2014-0080.yml
@@ -3,17 +3,19 @@ gem: activerecord
 framework: rails
 cve: 2014-0080
 osvdb: 103438
+ghsa: hqf9-rc9j-5fmj
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-0080
-title: 'CVE-2014-0080 rubygem-activerecord: PostgreSQL array data injection vulnerability'
+title: "CVE-2014-0080 rubygem-activerecord: PostgreSQL array data injection vulnerability"
 date: 2014-02-18
-description: SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/cast.rb
+description: |
+  SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/cast.rb
   in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL
   is used, allows remote attackers to execute "add data" SQL commands via vectors
   involving \ (backslash) characters that are not properly handled in operations on
   array columns.
 unaffected_versions:
-- < 3.2.0
-- ~> 3.2.0
+  - "< 3.2.0"
+  - "~> 3.2.0"
 patched_versions:
-- ~> 4.0.3
-- '>= 4.1.0.beta2'
+  - "~> 4.0.3"
+  - ">= 4.1.0.beta2"
diff --git a/gems/activerecord/CVE-2014-3482.yml b/gems/activerecord/CVE-2014-3482.yml
index db91d7078b..45dff6a0e5 100644
--- a/gems/activerecord/CVE-2014-3482.yml
+++ b/gems/activerecord/CVE-2014-3482.yml
@@ -3,11 +3,12 @@ gem: activerecord
 framework: rails
 cve: 2014-3482
 osvdb: 108664
+ghsa: mhwp-qhpc-h3jm
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-3482
-title: "CVE-2014-3482 rubygem-activerecord: SQL injection vulnerability in 'bitstring'\
-  \ quoting"
+title: "CVE-2014-3482 rubygem-activerecord: SQL injection vulnerability in 'bitstring' quoting"
 date: 2014-07-02
-description: SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql_adapter.rb
+description: |
+  SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql_adapter.rb
   in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before
   3.2.19 allows remote attackers to execute arbitrary SQL commands by leveraging improper
   bitstring quoting. It was discovered that Active Record did not properly quote values
@@ -15,6 +16,6 @@ description: SQL injection vulnerability in activerecord/lib/active_record/conne
   attacker could possibly use this flaw to conduct an SQL injection attack against
   applications using Active Record.
 unaffected_versions:
-- '>= 4.0.0'
+  - ">= 4.0.0"
 patched_versions:
-- ~> 3.2.19
+  - "~> 3.2.19"
diff --git a/gems/activerecord/CVE-2014-3483.yml b/gems/activerecord/CVE-2014-3483.yml
index 93947fa342..474b30eb87 100644
--- a/gems/activerecord/CVE-2014-3483.yml
+++ b/gems/activerecord/CVE-2014-3483.yml
@@ -3,11 +3,12 @@ gem: activerecord
 framework: rails
 cve: 2014-3483
 osvdb: 108665
+ghsa: r8fh-hq2p-7qhq
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-3483
-title: "CVE-2014-3483 rubygem-activerecord: SQL injection vulnerability in 'range'\
-  \ quoting"
+title: "CVE-2014-3483 rubygem-activerecord: SQL injection vulnerability in 'range' quoting"
 date: 2014-07-02
-description: SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb
+description: |
+  SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb
   in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and
   4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by
   leveraging improper range quoting. It was discovered that Active Record did not
@@ -15,7 +16,7 @@ description: SQL injection vulnerability in activerecord/lib/active_record/conne
   adapter. A remote attacker could possibly use this flaw to conduct an SQL injection
   attack against applications using Active Record.
 unaffected_versions:
-- < 4.0.0
+  - "< 4.0.0"
 patched_versions:
-- ~> 4.0.7
-- '>= 4.1.3'
+  - "~> 4.0.7"
+  - ">= 4.1.3"
diff --git a/gems/activerecord/CVE-2014-3514.yml b/gems/activerecord/CVE-2014-3514.yml
index 1297d7ef86..e498b9aaf3 100644
--- a/gems/activerecord/CVE-2014-3514.yml
+++ b/gems/activerecord/CVE-2014-3514.yml
@@ -2,19 +2,18 @@
 gem: activerecord
 framework: rails
 cve: 2014-3514
+ghsa: 9rf5-jm6f-2fmm
 url: https://groups.google.com/forum/#!msg/rubyonrails-security/M4chq5Sb540/CC1Fh0Y_NWwJ
 title: Data Injection Vulnerability in Active Record
 date: 2014-08-18
-description: >-
-  The create_with functionality in Active Record was implemented
-  incorrectly and completely bypasses the strong parameters
-  protection. Applications which pass user-controlled values to
-  create_with could allow attackers to set arbitrary attributes on
-  models.
+description: |
+  The create_with functionality in Active Record was implemented incorrectly
+  and completely bypasses the strong parameters protection. Applications which pass
+  user-controlled values to create_with could allow attackers to set arbitrary attributes
+  on models.
 cvss_v2: 8.7
 unaffected_versions:
-- < 4.0.0
-
+  - "< 4.0.0"
 patched_versions:
-- ~> 4.0.9
-- '>= 4.1.5'
+  - "~> 4.0.9"
+  - ">= 4.1.5"
diff --git a/gems/activerecord/CVE-2015-7577.yml b/gems/activerecord/CVE-2015-7577.yml
index f0f89bb367..ccf3b15419 100644
--- a/gems/activerecord/CVE-2015-7577.yml
+++ b/gems/activerecord/CVE-2015-7577.yml
@@ -97,10 +97,10 @@ description: |
 cvss_v2: 5.0
 cvss_v3: 5.3
 unaffected_versions:
-- ~> 3.0.0
-- < 3.0.0
+  - "~> 3.0.0"
+  - "< 3.0.0"
 patched_versions:
-- '>= 5.0.0.beta1.1'
-- ~> 4.2.5, >= 4.2.5.1
-- ~> 4.1.14, >= 4.1.14.1
-- ~> 3.2.22.1
+  - ">= 5.0.0.beta1.1"
+  - "~> 4.2.5, >= 4.2.5.1"
+  - "~> 4.1.14, >= 4.1.14.1"
+  - "~> 3.2.22.1"
diff --git a/gems/activerecord/CVE-2016-6317.yml b/gems/activerecord/CVE-2016-6317.yml
index 10e23640ae..b1be5dea2b 100644
--- a/gems/activerecord/CVE-2016-6317.yml
+++ b/gems/activerecord/CVE-2016-6317.yml
@@ -65,7 +65,7 @@ description: |
     ```
 cvss_v3: 7.5
 unaffected_versions:
-- < 4.2.0
-- '>= 5.0.0'
+  - "< 4.2.0"
+  - ">= 5.0.0"
 patched_versions:
-- '>= 4.2.7.1'
+  - ">= 4.2.7.1"
diff --git a/gems/activerecord/CVE-2021-22880.yml b/gems/activerecord/CVE-2021-22880.yml
index afd0c47c83..2f62e97db5 100644
--- a/gems/activerecord/CVE-2021-22880.yml
+++ b/gems/activerecord/CVE-2021-22880.yml
@@ -55,8 +55,8 @@ description: |
   ```
 cvss_v3: 5.3
 unaffected_versions:
-- < 4.2.0
+  - "< 4.2.0"
 patched_versions:
-- ~> 5.2.4, >= 5.2.4.5
-- ~> 6.0.3, >= 6.0.3.5
-- '>= 6.1.2.1'
+  - "~> 5.2.4, >= 5.2.4.5"
+  - "~> 6.0.3, >= 6.0.3.5"
+  - ">= 6.1.2.1"
diff --git a/gems/activerecord/CVE-2022-32224.yml b/gems/activerecord/CVE-2022-32224.yml
new file mode 100644
index 0000000000..466108ca56
--- /dev/null
+++ b/gems/activerecord/CVE-2022-32224.yml
@@ -0,0 +1,78 @@
+---
+gem: activerecord
+framework: rails
+cve: 2022-32224
+ghsa: 3hhc-qp5v-9p2j
+url: https://groups.google.com/g/rubyonrails-security/c/MmFO3LYQE8U
+title: Possible RCE escalation bug with Serialized Columns in Active Record
+date: 2022-07-12
+description: |
+  There is a possible escalation to RCE when using YAML serialized columns in
+  Active Record. This vulnerability has been assigned the CVE identifier
+  CVE-2022-32224.
+
+  Versions Affected:  All.
+  Not affected:       None
+  Fixed Versions:     7.0.3.1, 6.1.6.1, 6.0.5.1, 5.2.8.1
+
+  Impact
+  ------
+  When serialized columns that use YAML (the default) are deserialized, Rails
+  uses `YAML.unsafe_load` to convert the YAML data in to Ruby objects.  If an
+  attacker can manipulate data in the database (via means like SQL injection),
+  then it may be possible for the attacker to escalate to an RCE.
+
+  Impacted Active Record models will look something like this:
+
+  ```ruby
+  class User < ApplicationRecord
+    serialize :options       # Vulnerable: Uses YAML for serialization
+    serialize :values, Array # Vulnerable: Uses YAML for serialization
+    serialize :values, JSON  # Not vulnerable
+  end
+  ```
+
+  All users running an affected release should either upgrade or use one of the
+  workarounds immediately.
+
+  Releases
+  --------
+  The FIXED releases are available at the normal locations.
+
+  The released versions change the default YAML deserializer to use
+  `YAML.safe_load`, which prevents deserialization of possibly dangerous
+  objects.  This may introduce backwards compatibility issues with existing
+  data.
+
+  In order to cope with that situation, the released version also contains two
+  new Active Record configuration options.  The configuration options are as
+  follows:
+
+  * `config.active_record.use_yaml_unsafe_load`
+
+  When set to true, this configuration option tells Rails to use the old
+  "unsafe" YAML loading strategy, maintaining the existing behavior but leaving
+  the possible escalation vulnerability in place.  Setting this option to true
+  is *not* recommended, but can aid in upgrading.
+
+  * `config.active_record.yaml_column_permitted_classes`
+
+  The "safe YAML" loading method does not allow all classes to be deserialized
+  by default.  This option allows you to specify classes deemed "safe" in your
+  application.  For example, if your application uses Symbol and Time in
+  serialized data, you can add Symbol and Time to the allowed list as follows:
+
+  ```
+  config.active_record.yaml_column_permitted_classes = [Symbol, Date, Time]
+  ```
+
+  Workarounds
+  -----------
+  There are no feasible workarounds for this issue, but other coders (such as
+  JSON) are not impacted.
+cvss_v3: 9.8
+patched_versions:
+  - "~> 5.2.8, >= 5.2.8.1"
+  - "~> 6.0.5, >= 6.0.5.1"
+  - "~> 6.1.6, >= 6.1.6.1"
+  - ">= 7.0.3.1"
diff --git a/gems/activerecord/CVE-2022-44566.yml b/gems/activerecord/CVE-2022-44566.yml
new file mode 100644
index 0000000000..bbb7c7a700
--- /dev/null
+++ b/gems/activerecord/CVE-2022-44566.yml
@@ -0,0 +1,35 @@
+---
+gem: activerecord
+framework: rails
+cve: 2022-44566
+ghsa: 579w-22j4-4749
+url: https://github.com/rails/rails/releases/tag/v7.0.4.1
+title: Denial of Service Vulnerability in ActiveRecord’s PostgreSQL adapter
+date: 2023-01-18
+description: |
+  There is a potential denial of service vulnerability present in
+  ActiveRecord’s PostgreSQL adapter.
+
+  This has been assigned the CVE identifier CVE-2022-44566.
+
+  Versions Affected: All.
+  Not affected: None.
+  Fixed Versions: 6.1.7.1, 7.0.4.1
+
+  # Impact
+
+  In ActiveRecord <7.0.4.1 and <6.1.7.1, when a value outside the range for a
+  64bit signed integer is provided to the PostgreSQL connection adapter, it
+  will treat the target column type as numeric. Comparing integer values
+  against numeric values can result in a slow sequential scan resulting in
+  potential Denial of Service.
+
+  # Workarounds
+
+  Ensure that user supplied input which is provided to ActiveRecord clauses do
+  not contain integers wider than a signed 64bit representation or floats.
+cvss_v3: 7.5
+patched_versions:
+  - "~> 5.2.8"
+  - "~> 6.1.7, >= 6.1.7.1"
+  - ">= 7.0.4.1"
diff --git a/gems/activerecord/CVE-2023-22794.yml b/gems/activerecord/CVE-2023-22794.yml
new file mode 100644
index 0000000000..6d4a092656
--- /dev/null
+++ b/gems/activerecord/CVE-2023-22794.yml
@@ -0,0 +1,62 @@
+---
+gem: activerecord
+framework: rails
+cve: 2023-22794
+ghsa: hq7p-j377-6v63
+url: https://github.com/rails/rails/releases/tag/v7.0.4.1
+title: SQL Injection Vulnerability via ActiveRecord comments
+date: 2023-01-18
+description: |
+  There is a possible vulnerability in ActiveRecord related to the
+  sanitization of comments. This vulnerability has been assigned the CVE
+  identifier CVE-2023-22794.
+
+  Versions Affected: >= 6.0.0
+  Not affected: < 6.0.0
+  Fixed Versions: 6.0.6.1, 6.1.7.1, 7.0.4.1
+
+  # Impact
+
+  Previously the implementation of escaping for comments was insufficient for
+
+  If malicious user input is passed to either the annotate query method, the
+  optimizer_hints query method, or through the QueryLogs interface which
+  automatically adds annotations, it may be sent to the database with
+  insufficient sanitization and be able to inject SQL outside of the comment.
+
+  In most cases these interfaces won’t be used with user input and users
+  should avoid doing so.
+
+  Example vulnerable code:
+  ```
+  Post.where(id: 1).annotate("#{params[:user_input]}")
+
+  Post.where(id: 1).optimizer_hints("#{params[:user_input]}")
+  ```
+
+  Example vulnerable QueryLogs configuration (the default configuration is not
+  vulnerable):
+  ```
+  config.active_record.query_log_tags = [
+    {
+      something: -> { <some value including user input> }
+    }
+  ]
+  ```
+  All users running an affected release should either upgrade or use one of the
+  workarounds immediately.
+
+  # Workarounds
+
+  Avoid passing user input to annotate and avoid using QueryLogs configuration
+  which can include user input.
+cvss_v3: 8.8
+unaffected_versions:
+  - "< 6.0.0"
+patched_versions:
+  - "~> 6.0.6, >= 6.0.6.1"
+  - "~> 6.1.7, >= 6.1.7.1"
+  - ">= 7.0.4.1"
+related:
+  url:
+    - https://github.com/rails/rails/commit/d7aba06953f9fa789c411676b941d20df8ef73de
diff --git a/gems/activeresource/CVE-2020-8151.yml b/gems/activeresource/CVE-2020-8151.yml
index b572905dd4..febc97ce97 100644
--- a/gems/activeresource/CVE-2020-8151.yml
+++ b/gems/activeresource/CVE-2020-8151.yml
@@ -47,4 +47,4 @@ description: |
   ```
 cvss_v3: 7.5
 patched_versions:
-- ">= 5.1.1"
+  - ">= 5.1.1"
diff --git a/gems/activeresource/OSVDB-95749.yml b/gems/activeresource/OSVDB-95749.yml
index 3f7812fe6b..e74cd2aa6f 100644
--- a/gems/activeresource/OSVDB-95749.yml
+++ b/gems/activeresource/OSVDB-95749.yml
@@ -1,9 +1,9 @@
 ---
 gem: activeresource
 osvdb: 95749
-url: http://osvdb.org/show/osvdb/95749
-title: activeresource Gem for Ruby lib/active_resource/connection.rb request Function
-  Multiple Variable Format String
+url: https://my.diffend.io/gems/activeresource/versions/2.1.0
+title: activeresource Gem for Ruby lib/active_resource/connection.rb
+  request Function Multiple Variable Format String
 date: 2008-08-15
 description: |
   activeresource contains a format string flaw in the request function of
@@ -13,4 +13,9 @@ description: |
   allow a remote attacker to cause a denial of service or potentially execute
   arbitrary code.
 patched_versions:
-- '>= 2.2.0'
+  - ">= 2.2.0"
+related:
+  url:
+    - https://my.diffend.io/gems/activeresource/versions/2.1.0
+    - https://security.snyk.io/vuln/SNYK-RUBY-ACTIVERESOURCE-20004
+    - http://osvdb.org/show/osvdb/95749
diff --git a/gems/activestorage/CVE-2018-16477.yml b/gems/activestorage/CVE-2018-16477.yml
index 0c8f74127b..312cb5e6f0 100644
--- a/gems/activestorage/CVE-2018-16477.yml
+++ b/gems/activestorage/CVE-2018-16477.yml
@@ -37,6 +37,6 @@ description: |
   ```
 cvss_v3: 6.5
 unaffected_versions:
-- < 5.2.0
+  - "< 5.2.0"
 patched_versions:
-- '>= 5.2.1.1'
+  - ">= 5.2.1.1"
diff --git a/gems/activestorage/CVE-2020-8162.yml b/gems/activestorage/CVE-2020-8162.yml
index 84dc81e392..9cf7657d35 100644
--- a/gems/activestorage/CVE-2020-8162.yml
+++ b/gems/activestorage/CVE-2020-8162.yml
@@ -25,6 +25,7 @@ description: |
 
   This is a low-severity security issue. As such, no workaround is necessarily
   until such time as the application can be upgraded.
+cvss_v3: 7.5
 patched_versions:
-- ~> 5.2.4, >= 5.2.4.3
-- '>= 6.0.3.1'
+  - "~> 5.2.4, >= 5.2.4.3"
+  - ">= 6.0.3.1"
diff --git a/gems/activestorage/CVE-2022-21831.yml b/gems/activestorage/CVE-2022-21831.yml
new file mode 100644
index 0000000000..498679fbb3
--- /dev/null
+++ b/gems/activestorage/CVE-2022-21831.yml
@@ -0,0 +1,51 @@
+---
+gem: activestorage
+framework: rails
+cve: 2022-21831
+ghsa: w749-p3v6-hccq
+url: https://groups.google.com/g/rubyonrails-security/c/n-p-W1yxatI
+title: Possible code injection vulnerability in Rails / Active Storage
+date: 2022-03-08
+description: |
+  There is a possible code injection vulnerability in the Active Storage module
+  of Rails. This vulnerability has been assigned the CVE identifier
+  CVE-2022-21831.
+
+  Versions Affected:  >= 5.2.0
+  Not affected:       < 5.2.0
+  Fixed Versions:     7.0.2.3, 6.1.4.7, 6.0.4.7, 5.2.6.3
+
+  Impact
+  ------
+  There is a possible code injection vulnerability in the Active Storage module
+  of Rails.  This vulnerability impacts applications that use Active Storage
+  with the image_processing processing in addition to the mini_magick back end
+  for image_processing.
+
+  Vulnerable code will look something similar to this:
+
+  ```ruby
+  <%= image_tag blob.variant(params[:t] => params[:v]) %>
+  ```
+
+  Where the transformation method or its arguments are untrusted arbitrary
+  input.
+
+  All users running an affected release should either upgrade or use one of the
+  workarounds immediately.
+
+  Workarounds
+  -----------
+  To work around this issue, applications should implement a strict allow-list
+  on accepted transformation methods or arguments.  Additionally, a strict image
+  magick security policy will help mitigate this issue.
+
+    https://imagemagick.org/script/security-policy.php
+cvss_v3: 9.8
+unaffected_versions:
+  - "< 5.2.0"
+patched_versions:
+  - "~> 5.2.6, >= 5.2.6.3"
+  - "~> 6.0.4, >= 6.0.4.7"
+  - "~> 6.1.4, >= 6.1.4.7"
+  - ">= 7.0.2.3"
diff --git a/gems/activestorage/CVE-2024-26144.yml b/gems/activestorage/CVE-2024-26144.yml
new file mode 100644
index 0000000000..e1fb4bf080
--- /dev/null
+++ b/gems/activestorage/CVE-2024-26144.yml
@@ -0,0 +1,53 @@
+---
+gem: activestorage
+framework: rails
+cve: 2024-26144
+ghsa: 8h22-8cf7-hq6g
+url: https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945
+title: Possible Sensitive Session Information Leak in Active Storage
+date: 2024-02-21
+description: |
+  There is a possible sensitive session information leak in Active Storage.
+  By default, Active Storage sends a `Set-Cookie` header along with the user’s
+  session cookie when serving blobs. It also sets `Cache-Control` to public.
+  Certain proxies may cache the `Set-Cookie`, leading to an information leak.
+
+  This vulnerability has been assigned the CVE identifier CVE-2024-26144.
+
+  Versions Affected: >= 5.2.0, < 7.1.0
+
+  Not affected: < 5.2.0, >= 7.1.0
+
+  Fixed Versions: 7.0.8.1, 6.1.7.7
+
+  # Impact
+
+  A proxy which chooses to caches this request can cause users to share
+  sessions. This may include a user receiving an attacker’s session or vice
+  versa.
+
+  This was patched in 7.1.0 but not previously identified as a security
+  vulnerability.
+
+  All users running an affected release should either upgrade or use one of the
+  workarounds immediately.
+
+  # Releases
+
+  The fixed releases are available at the normal locations.
+
+  # Workarounds
+
+  Upgrade to Rails 7.1.X, or configure caching proxies not to cache the
+  `Set-Cookie` headers.
+cvss_v3: 5.3
+unaffected_versions:
+  - "< 5.2.0"
+  - ">= 7.1.0"
+patched_versions:
+  - "~> 6.1.7, >= 6.1.7.7"
+  - ">= 7.0.8.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-26144
+    - https://hackerone.com/reports/3082917
diff --git a/gems/activesupport/CVE-2009-3009.yml b/gems/activesupport/CVE-2009-3009.yml
new file mode 100644
index 0000000000..d6fff488ab
--- /dev/null
+++ b/gems/activesupport/CVE-2009-3009.yml
@@ -0,0 +1,33 @@
+---
+gem: activesupport
+framework: rails
+cve: 2009-3009
+osvdb: 57666
+ghsa: 8qrh-h9m2-5fvf
+url: http://weblog.rubyonrails.org/2009/9/4/xss-vulnerability-in-ruby-on-rails
+title: Moderate severity XSS vulnerability that affects rails
+date: 2017-10-24
+description: |
+  Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before
+  2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary
+  web script or HTML by placing malformed Unicode strings into a form helper.
+
+  9/4/2009 url mentions patches for 2.0, 2.1, 2.2, and 2.3 series.
+unaffected_versions:
+  - "< 2.0.0"
+patched_versions:
+  - "~> 2.2.3"
+  - ">= 2.3.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2009-3009
+    - http://weblog.rubyonrails.org/2009/9/4/xss-vulnerability-in-ruby-on-rails
+    - https://groups.google.com/g/rubyonrails-security/c/SKs_SiwWGQ8/m/tNHhlHfNV38J
+    - http://www.osvdb.org/57666
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/53036
+    - https://github.com/advisories/GHSA-8qrh-h9m2-5fvf
+    - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545063
+    - https://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
+    - http://support.apple.com/kb/HT4077
+    - https://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
+    - http://www.debian.org/security/2009/dsa-1887
diff --git a/gems/activesupport/CVE-2009-3086.yml b/gems/activesupport/CVE-2009-3086.yml
new file mode 100644
index 0000000000..55a5cbc217
--- /dev/null
+++ b/gems/activesupport/CVE-2009-3086.yml
@@ -0,0 +1,34 @@
+---
+gem: activesupport
+framework: rails
+cve: 2009-3086
+ghsa: fg9w-g6m4-557j
+url: http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails
+title: actionpack and activesupport vulnerable to information leaks
+date: 2017-10-24
+description: |
+  A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x
+  before 2.3.4, leaks information about the complexity of message-digest
+  signature verification in the cookie store, which might allow remote
+  attackers to forge a digest via multiple attempts.
+cvss_v2: 5.0
+unaffected_versions:
+  - "< 2.1.0"
+patched_versions:
+  - "~> 2.2.3"
+  - ">= 2.3.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2009-3086
+    - http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails
+    - https://github.com/advisories/GHSA-fg9w-g6m4-557j
+    - http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
+    - http://www.debian.org/security/2011/dsa-2260
+    - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2009-3086.yml
+    - https://github.com/rails/rails/commit/1f07a89c5946910fc28ea5ccd1da6af8a0f972a0
+    - https://github.com/rails/rails/commit/674f780d59a5a7ec0301755d43a7b277a3ad2978
+    - https://github.com/rails/rails/commit/d460c9a25560f43e7c3789abadf7b455053eb686
+    - https://web.archive.org/web/20090906010200/http://www.vupen.com/english/advisories/2009/2544
+    - https://web.archive.org/web/20090907001716/http://secunia.com/advisories/36600
+    - https://web.archive.org/web/20200229150042/http://www.securityfocus.com/bid/37427
+    - https://github.com/advisories/GHSA-fg9w-g6m4-557j
diff --git a/gems/activesupport/CVE-2011-2197.yml b/gems/activesupport/CVE-2011-2197.yml
new file mode 100644
index 0000000000..4dd55ba80c
--- /dev/null
+++ b/gems/activesupport/CVE-2011-2197.yml
@@ -0,0 +1,32 @@
+---
+gem: activesupport
+framework: rails
+cve: 2011-2197
+ghsa: v9v4-7jp6-8c73
+url: http://weblog.rubyonrails.org/2011/6/8/potential-xss-vulnerability-in-ruby-on-rails-applications
+title: Potential XSS Vulnerability in Ruby on Rails Applications
+date: 2017-10-24
+description: |
+  The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x
+  before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does
+  not properly handle mutation of safe buffers, which makes it easier
+  for remote attackers to conduct XSS attacks via crafted strings to an
+  application that uses a problematic string method, as demonstrated
+  by the sub method.
+cvss_v2: 4.3
+patched_versions:
+  - "~> 2.3.12"
+  - ">= 3.0.8"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-2197
+    - http://weblog.rubyonrails.org/2011/6/8/potential-xss-vulnerability-in-ruby-on-rails-applications
+    - https://github.com/rails/rails/commit/53a2c0baf2b128dd4808eca313256f6f4bb8c4cd
+    - https://github.com/rails/rails/commit/ed3796434af6069ced6a641293cf88eef3b284da
+    - https://groups.google.com/g/rubyonrails-security/c/LlFuesyWxPs/m/1OBxRA1gO2YJ
+    - https://gist.github.com/NZKoz/b2ceb626fc2bcdfe497f
+    - https://github.com/advisories/GHSA-v9v4-7jp6-8c73
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062514.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062090.html
+    - http://openwall.com/lists/oss-security/2011/06/09/2
+    - http://openwall.com/lists/oss-security/2011/06/13/9
diff --git a/gems/activesupport/CVE-2011-2932.yml b/gems/activesupport/CVE-2011-2932.yml
new file mode 100644
index 0000000000..75e02f57f2
--- /dev/null
+++ b/gems/activesupport/CVE-2011-2932.yml
@@ -0,0 +1,39 @@
+---
+gem: activesupport
+framework: rails
+cve: 2011-2932
+ghsa: 9fh3-vh3h-q4g3
+url: http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6
+title: UTF-8 escaping vulnerability in rails/activesupport
+date: 2017-10-24
+description: |
+  Cross-site scripting (XSS) vulnerability in
+  activesupport/lib/active_support/core_ext/string/output_safety.rb
+  in Ruby on Rails 2.x before 2.3.13, 3.0.x before 3.0.10, and
+  3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary
+  web script or HTML via a malformed Unicode string, related to
+  a "UTF-8 escaping vulnerability."
+cvss_v2: 4.3
+patched_versions:
+  - "~> 2.3.13"
+  - "~> 3.0.10"
+  - "~> 3.1.0.rc5"
+  - ">= 3.1.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-2932
+    - http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6
+    - https://groups.google.com/g/rubyonrails-security/c/Vr_7WSOrEZU/m/IZ_bc5d00vEJ
+    - https://github.com/rails/rails/commit/bfc432574d0b141fd7fe759edfe9b6771dd306bd
+    - https://bugzilla.redhat.com/show_bug.cgi?id=731435
+    - https://github.com/advisories/GHSA-9fh3-vh3h-q4g3
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065114.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065189.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html
+    - http://www.openwall.com/lists/oss-security/2011/08/17/1
+    - http://www.openwall.com/lists/oss-security/2011/08/19/11
+    - http://www.openwall.com/lists/oss-security/2011/08/20/1
+    - http://www.openwall.com/lists/oss-security/2011/08/22/13
+    - http://www.openwall.com/lists/oss-security/2011/08/22/14
+    - http://www.openwall.com/lists/oss-security/2011/08/22/5
+    - https://web.archive.org/web/20111225083933/http://secunia.com/advisories/45917
diff --git a/gems/activesupport/CVE-2012-1098.yml b/gems/activesupport/CVE-2012-1098.yml
index 677c2a3002..0e831a6686 100644
--- a/gems/activesupport/CVE-2012-1098.yml
+++ b/gems/activesupport/CVE-2012-1098.yml
@@ -3,18 +3,20 @@ gem: activesupport
 framework: rails
 cve: 2012-1098
 osvdb: 79726
+ghsa: qv8p-v9qw-wc7g
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-1098
 title: 'CVE-2012-1098 rubygem-activesupport: XSS in SafeBuffer#[] (unescaped safe
   buffers can be marked as safe)'
 date: 2012-03-01
-description: Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before
+description: |
+  Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before
   3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject
   arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated
   through certain methods.
 cvss_v2: 4.3
 unaffected_versions:
-- < 3.0.0
+  - "< 3.0.0"
 patched_versions:
-- ~> 3.0.12
-- ~> 3.1.4
-- '>= 3.2.2'
+  - "~> 3.0.12"
+  - "~> 3.1.4"
+  - ">= 3.2.2"
diff --git a/gems/activesupport/CVE-2012-3464.yml b/gems/activesupport/CVE-2012-3464.yml
index 5f6de161f9..c824521880 100644
--- a/gems/activesupport/CVE-2012-3464.yml
+++ b/gems/activesupport/CVE-2012-3464.yml
@@ -3,15 +3,17 @@ gem: activesupport
 framework: rails
 cve: 2012-3464
 osvdb: 84516
+ghsa: h835-75hw-pj89
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-3464
-title: 'CVE-2012-3464 rubygem-actionpack: potential XSS vulnerability'
+title: "CVE-2012-3464 rubygem-actionpack: potential XSS vulnerability"
 date: 2012-08-09
-description: Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb
+description: |
+  Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb
   in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might
   allow remote attackers to inject arbitrary web script or HTML via vectors involving
   a ' (quote) character.
 cvss_v2: 4.3
 patched_versions:
-- ~> 3.0.17
-- ~> 3.1.8
-- '>= 3.2.8'
+  - "~> 3.0.17"
+  - "~> 3.1.8"
+  - ">= 3.2.8"
diff --git a/gems/activesupport/CVE-2013-0333.yml b/gems/activesupport/CVE-2013-0333.yml
index f62973afe4..d14b8e9f2b 100644
--- a/gems/activesupport/CVE-2013-0333.yml
+++ b/gems/activesupport/CVE-2013-0333.yml
@@ -3,15 +3,17 @@ gem: activesupport
 framework: rails
 cve: 2013-0333
 osvdb: 89594
+ghsa: xgr2-v94m-rc9g
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0333
-title: 'CVE-2013-0333 rubygem-activesupport: json to yaml parsing'
+title: "CVE-2013-0333 rubygem-activesupport: json to yaml parsing"
 date: 2013-01-28
-description: lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before
+description: |
+  lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before
   2.3.16 and 3.0.x before 3.0.20 does not properly convert JSON data to YAML data
   for processing by a YAML parser, which allows remote attackers to execute arbitrary
   code, conduct SQL injection attacks, or bypass authentication via crafted data that
   triggers unsafe decoding, a different vulnerability than CVE-2013-0156.
 cvss_v2: 9.3
 patched_versions:
-- ~> 2.3.16
-- '>= 3.0.20'
+  - "~> 2.3.16"
+  - ">= 3.0.20"
diff --git a/gems/activesupport/CVE-2013-1856.yml b/gems/activesupport/CVE-2013-1856.yml
index 64ed008da7..0628a13349 100644
--- a/gems/activesupport/CVE-2013-1856.yml
+++ b/gems/activesupport/CVE-2013-1856.yml
@@ -4,6 +4,7 @@ framework: rails
 platform: jruby
 cve: 2013-1856
 osvdb: 91451
+ghsa: 9c2j-593q-3g82
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1856
 title: XML Parsing Vulnerability affecting JRuby users
 date: 2013-03-19
@@ -18,8 +19,7 @@ description: |
   various denial of service attacks. Action Pack
 cvss_v2: 7.8
 unaffected_versions:
-- ~> 2.3.0
-
+  - "~> 2.3.0"
 patched_versions:
-- ~> 3.1.12
-- '>= 3.2.13'
+  - "~> 3.1.12"
+  - ">= 3.2.13"
diff --git a/gems/activesupport/CVE-2015-3226.yml b/gems/activesupport/CVE-2015-3226.yml
index ef17ab974e..79a459bfa1 100644
--- a/gems/activesupport/CVE-2015-3226.yml
+++ b/gems/activesupport/CVE-2015-3226.yml
@@ -44,7 +44,7 @@ description: |
       end
     end
 unaffected_versions:
-- < 4.1.0
+  - "< 4.1.0"
 patched_versions:
-- '>= 4.2.2'
-- ~> 4.1.11
+  - ">= 4.2.2"
+  - "~> 4.1.11"
diff --git a/gems/activesupport/CVE-2015-3227.yml b/gems/activesupport/CVE-2015-3227.yml
index 03d511f44d..be46cb056e 100644
--- a/gems/activesupport/CVE-2015-3227.yml
+++ b/gems/activesupport/CVE-2015-3227.yml
@@ -24,6 +24,6 @@ description: |
   If you cannot change XML parsers, then adjust
   `RUBY_THREAD_MACHINE_STACK_SIZE`.
 patched_versions:
-- '>= 4.2.2'
-- ~> 4.1.11
-- ~> 3.2.22
+  - ">= 4.2.2"
+  - "~> 4.1.11"
+  - "~> 3.2.22"
diff --git a/gems/activesupport/CVE-2020-8165.yml b/gems/activesupport/CVE-2020-8165.yml
index 83bab3987d..732633f665 100644
--- a/gems/activesupport/CVE-2020-8165.yml
+++ b/gems/activesupport/CVE-2020-8165.yml
@@ -37,6 +37,7 @@ description: |
   It is recommended that application developers apply the suggested patch or upgrade to the latest release as
   soon as possible. If this is not possible, we recommend ensuring that all user-provided strings cached using
   the `raw` argument should be double-checked to ensure that they conform to the expected format.
+cvss_v3: 9.8
 patched_versions:
-- ~> 5.2.4, >= 5.2.4.3
-- '>= 6.0.3.1'
+  - "~> 5.2.4, >= 5.2.4.3"
+  - ">= 6.0.3.1"
diff --git a/gems/activesupport/CVE-2023-22796.yml b/gems/activesupport/CVE-2023-22796.yml
new file mode 100644
index 0000000000..06380c0f9f
--- /dev/null
+++ b/gems/activesupport/CVE-2023-22796.yml
@@ -0,0 +1,40 @@
+---
+gem: activesupport
+framework: rails
+cve: 2023-22796
+ghsa: j6gc-792m-qgm2
+url: https://github.com/rails/rails/releases/tag/v7.0.4.1
+title: ReDoS based DoS vulnerability in Active Support’s underscore
+date: 2023-01-18
+description: |
+  There is a possible regular expression based DoS vulnerability in Active
+  Support. This vulnerability has been assigned the CVE identifier
+  CVE-2023-22796.
+
+  Versions Affected: All
+  Not affected: None
+  Fixed Versions: 6.1.7.1, 7.0.4.1
+
+  # Impact
+
+  A specially crafted string passed to the underscore method can cause the
+  regular expression engine to enter a state of catastrophic backtracking.
+  This can cause the process to use large amounts of CPU and memory, leading
+  to a possible DoS vulnerability.
+
+  This affects String#underscore, ActiveSupport::Inflector.underscore,
+  String#titleize, and any other methods using these.
+
+  All users running an affected release should either upgrade or use one of the
+  workarounds immediately.
+
+  # Workarounds
+
+  There are no feasible workarounds for this issue.
+
+  Users on Ruby 3.2.0 or greater may be able to reduce the impact by
+  configuring Regexp.timeout.
+patched_versions:
+  - "~> 5.2.8"
+  - "~> 6.1.7, >= 6.1.7.1"
+  - ">= 7.0.4.1"
diff --git a/gems/activesupport/CVE-2023-28120.yml b/gems/activesupport/CVE-2023-28120.yml
new file mode 100644
index 0000000000..a87392a2a0
--- /dev/null
+++ b/gems/activesupport/CVE-2023-28120.yml
@@ -0,0 +1,31 @@
+---
+gem: activesupport
+framework: rails
+cve: 2023-28120
+ghsa: pj73-v5mw-pm9j
+url: https://discuss.rubyonrails.org/t/cve-2023-28120-possible-xss-security-vulnerability-in-safebuffer-bytesplice/82469
+title: Possible XSS Security Vulnerability in SafeBuffer#bytesplice
+date: 2023-03-13
+description: |
+  There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input.
+  This vulnerability has been assigned the CVE identifier CVE-2023-28120.
+
+  Versions Affected: All. Not affected: None Fixed Versions: 7.0.4.3, 6.1.7.3
+
+  # Impact
+
+  ActiveSupport uses the SafeBuffer string subclass to tag strings as html_safe after they have been sanitized.
+  When these strings are mutated, the tag is should be removed to mark them as no longer being html_safe.
+
+  Ruby 3.2 introduced a new bytesplice method which ActiveSupport did not yet understand to be a mutation.
+  Users on older versions of Ruby are likely unaffected.
+
+  All users running an affected release and using bytesplice should either upgrade or use one of the workarounds immediately.
+
+  # Workarounds
+
+  Avoid calling bytesplice on a SafeBuffer (html_safe) string with untrusted user input.
+cvss_v3: 5.3
+patched_versions:
+  - "~> 6.1.7, >= 6.1.7.3"
+  - ">= 7.0.4.3"
diff --git a/gems/activesupport/CVE-2023-38037.yml b/gems/activesupport/CVE-2023-38037.yml
new file mode 100644
index 0000000000..1a18bbf0e6
--- /dev/null
+++ b/gems/activesupport/CVE-2023-38037.yml
@@ -0,0 +1,53 @@
+---
+gem: activesupport
+framework: rails
+cve: 2023-38037
+ghsa: cr5q-6q9f-rq6q
+url: https://github.com/rails/rails/releases/tag/v7.0.7.1
+title: Possible File Disclosure of Locally Encrypted Files
+date: 2023-08-23
+description: |
+  There is a possible file disclosure of locally encrypted files in
+  Active Support. This vulnerability has been assigned the
+  CVE identifier CVE-2023-38037.
+
+  * Versions Affected: >= 5.2.0
+  * Not affected: < 5.2.0
+  * Fixed Versions: 7.0.7.1, 6.1.7.5
+
+  # Impact
+
+  ActiveSupport::EncryptedFile writes contents that will be encrypted
+  to a temporary file. The temporary file’s permissions are defaulted
+  to the user’s current umask settings, meaning that it’s possible
+  for other users on the same system to read the contents of the
+  temporary file.
+
+  Attackers that have access to the file system could possibly read
+  the contents of this temporary file while a user is editing it.
+
+  All users running an affected release should either upgrade or use
+  one of the workarounds immediately.
+
+  # Releases
+
+  The fixed releases are available at the normal locations.
+
+  # Workarounds
+
+  To work around this issue, you can set your umask to be more
+  restrictive like this:
+
+    $ umask 0077
+cvss_v3: 5.5
+unaffected_versions:
+  - "< 5.2.0"
+patched_versions:
+  - "~> 6.1.7, >= 6.1.7.5"
+  - ">= 7.0.7.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-38037
+    - https://github.com/rails/rails/releases/tag/v7.0.7.1
+    - https://github.com/rails/rails/commit/a21d6edf35a60383dfa6c4da49e4b1aef5f00731
+    - https://github.com/advisories/GHSA-cr5q-6q9f-rq6q
diff --git a/gems/addressable/CVE-2021-32740.yml b/gems/addressable/CVE-2021-32740.yml
index 75d76600df..3094d95725 100644
--- a/gems/addressable/CVE-2021-32740.yml
+++ b/gems/addressable/CVE-2021-32740.yml
@@ -12,6 +12,6 @@ description: |
   Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected.
 cvss_v3: 7.5
 unaffected_versions:
-- '< 2.3.0'
+  - "< 2.3.0"
 patched_versions:
-- '>= 2.8.0'
+  - ">= 2.8.0"
diff --git a/gems/administrate/CVE-2016-3098.yml b/gems/administrate/CVE-2016-3098.yml
index 21d43f6a0c..193dce6f3b 100644
--- a/gems/administrate/CVE-2016-3098.yml
+++ b/gems/administrate/CVE-2016-3098.yml
@@ -1,12 +1,14 @@
 ---
 gem: administrate
 cve: 2016-3098
+ghsa: cc8c-26rj-v2vx
+url: http://seclists.org/oss-sec/2016/q2/0
 title: Cross-site request forgery (CSRF) vulnerability in administrate gem
 date: 2016-04-01
-url: http://seclists.org/oss-sec/2016/q2/0
-description: >-
-  `Administrate::ApplicationController` actions didn't have CSRF
-  protection. Remote attackers can hijack user's sessions and use any
-  functionality that administrate exposes on their behalf.
+description: |
+  "`Administrate::ApplicationController` actions didn't have CSRF protection.
+  Remote attackers can hijack user's sessions and use any functionality that administrate
+  exposes on their behalf."
+cvss_v3: 5.4
 patched_versions:
-- '>= 0.1.5'
+  - ">= 0.1.5"
diff --git a/gems/administrate/CVE-2020-5257.yml b/gems/administrate/CVE-2020-5257.yml
index c5800adfa4..b9bdf64fa9 100644
--- a/gems/administrate/CVE-2020-5257.yml
+++ b/gems/administrate/CVE-2020-5257.yml
@@ -17,8 +17,8 @@ description: |
   Administrate dashboards, which should generally be behind authentication.
 cvss_v3: 7.7
 patched_versions:
-- '>= 0.13.0'
+  - ">= 0.13.0"
 
 related:
   url:
-  - https://github.com/thoughtbot/administrate/commit/3ab838b83c5f565fba50e0c6f66fe4517f98eed3
+    - https://github.com/thoughtbot/administrate/commit/3ab838b83c5f565fba50e0c6f66fe4517f98eed3
diff --git a/gems/aescrypt/CVE-2013-7463.yml b/gems/aescrypt/CVE-2013-7463.yml
index 5b7814d597..5925b87aec 100644
--- a/gems/aescrypt/CVE-2013-7463.yml
+++ b/gems/aescrypt/CVE-2013-7463.yml
@@ -1,10 +1,12 @@
 ---
 gem: aescrypt
 cve: 2013-7463
-date: 2013-10-01
+ghsa: 4c4w-3q45-hp9j
 url: https://github.com/Gurpartap/aescrypt/issues/4
 title: Vulnerability in aescrypt because IV is not randomized
+date: 2013-10-01
 description: |
   The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the
   AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to
   defeat cryptographic protection mechanisms via a chosen plaintext attack.
+cvss_v3: 7.5
diff --git a/gems/agoo/CVE-2020-7670.yml b/gems/agoo/CVE-2020-7670.yml
index 639a532dac..46c855db99 100644
--- a/gems/agoo/CVE-2020-7670.yml
+++ b/gems/agoo/CVE-2020-7670.yml
@@ -13,8 +13,8 @@ description: |
   leveraged for TE:CL smuggling attacks.
 cvss_v3: 7.5
 patched_versions:
-- '>= 2.13.0'
+  - ">= 2.13.0"
 
 related:
   url:
-  - https://github.com/ohler55/agoo/commit/23d03535cf7b50d679a60a953a0cae9519a4a130
+    - https://github.com/ohler55/agoo/commit/23d03535cf7b50d679a60a953a0cae9519a4a130
diff --git a/gems/airbrake-ruby/CVE-2019-16060.yml b/gems/airbrake-ruby/CVE-2019-16060.yml
index 48805c5fef..80a00789c2 100644
--- a/gems/airbrake-ruby/CVE-2019-16060.yml
+++ b/gems/airbrake-ruby/CVE-2019-16060.yml
@@ -11,10 +11,10 @@ description: |
   could leak user passwords without knowing it.
 cvss_v3: 9.8
 unaffected_versions:
-- < 4.2.3
-- '> 4.2.3'
+  - "< 4.2.3"
+  - "> 4.2.3"
 patched_versions:
-- '>= 4.2.4'
+  - ">= 4.2.4"
 related:
   url:
-  - https://github.com/airbrake/airbrake-ruby/pull/469
+    - https://github.com/airbrake/airbrake-ruby/pull/469
diff --git a/gems/alchemy_cms/CVE-2018-18307.yml b/gems/alchemy_cms/CVE-2018-18307.yml
new file mode 100644
index 0000000000..8f924e29a5
--- /dev/null
+++ b/gems/alchemy_cms/CVE-2018-18307.yml
@@ -0,0 +1,22 @@
+---
+gem: alchemy_cms
+cve: 2018-18307
+ghsa: 7mj4-2984-955f
+url: https://nvd.nist.gov/vuln/detail/CVE-2018-18307
+title: AlchemyCMS is vulnerable to stored XSS via the /admin/pictures image field
+date: 2022-05-14
+description: |
+  A stored XSS vulnerability has been discovered in version 4.1.0 of AlchemyCMS
+  via the /admin/pictures image filename field.
+cvss_v3: 5.9
+unaffected_versions:
+- "< 4.1.0"
+notes: Never patched
+related:
+  url:
+  - https://nvd.nist.gov/vuln/detail/CVE-2018-18307
+  - http://packetstormsecurity.com/files/149787/Alchemy-CMS-4.1-Stable-Cross-Site-Scripting.html
+  - https://github.com/AlchemyCMS/alchemy_cms/blob/4.1-stable/app/controllers/alchemy/admin/base_controller.rb#L15
+  - https://github.com/AlchemyCMS/alchemy_cms/blob/4.1-stable/app/controllers/alchemy/admin/pictures_controller.rb#L5
+  - https://github.com/AlchemyCMS/alchemy_cms/blob/4.1-stable/app/controllers/alchemy/admin/resources_controller.rb#L21
+  - https://github.com/advisories/GHSA-7mj4-2984-955f
diff --git a/gems/apollo_upload_server/CVE-2021-39880.yml b/gems/apollo_upload_server/CVE-2021-39880.yml
new file mode 100644
index 0000000000..8e556fe05b
--- /dev/null
+++ b/gems/apollo_upload_server/CVE-2021-39880.yml
@@ -0,0 +1,23 @@
+---
+gem: apollo_upload_server
+cve: 2021-39880
+ghsa: w6pv-c757-6rgr
+url: https://hackerone.com/reports/1181284
+title: apollo_upload_server has Denial of Service vulnerability
+date: 2022-05-24
+description: |
+  A Denial Of Service vulnerability in the apollo_upload_server Ruby gem
+  in GitLab CE/EE version 11.11 and above allows an attacker to deny access to all
+  users via specially crafted requests to the apollo_upload_server middleware.
+cvss_v3: 6.5
+patched_versions:
+  - ">= 2.1.0"
+related:
+  url:
+    - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39880.json
+    - https://gitlab.com/gitlab-org/gitlab/-/issues/330561
+    - https://github.com/jetruby/apollo_upload_server-ruby/pull/44
+    - https://github.com/jetruby/apollo_upload_server-ruby/commit/b0582c1a3e458eee3c994fb38278bd0221f20486
+    - https://github.com/jetruby/apollo_upload_server-ruby/releases/tag/2.1.0
+    - https://gitlab.com/gitlab-org/gitlab/-/issues/330561#note_642879964
+    - https://vuldb.com/?id.183842
diff --git a/gems/archive-tar-minitar/CVE-2016-10173.yml b/gems/archive-tar-minitar/CVE-2016-10173.yml
index 7edc8dfd29..36a7d400b2 100644
--- a/gems/archive-tar-minitar/CVE-2016-10173.yml
+++ b/gems/archive-tar-minitar/CVE-2016-10173.yml
@@ -15,4 +15,4 @@ description: |
   Credit: ecneladis
 cvss_v3: 7.5
 patched_versions:
-- ">= 0.6.0"
+  - ">= 0.6.0"
diff --git a/gems/arr-pm/CVE-2022-39224.yml b/gems/arr-pm/CVE-2022-39224.yml
new file mode 100644
index 0000000000..80cb2be9ff
--- /dev/null
+++ b/gems/arr-pm/CVE-2022-39224.yml
@@ -0,0 +1,47 @@
+---
+gem: arr-pm
+cve: 2022-39224
+ghsa: 88cv-mj24-8w3q
+url: https://github.com/jordansissel/ruby-arr-pm/security/advisories/GHSA-88cv-mj24-8w3q
+title: arr-pm vulnerable to arbitrary shell execution when extracting or listing files contained in a malicious rpm
+date: 2022-09-21
+description: |
+  ### Impact
+
+  Arbitrary shell execution is possible when using RPM::File#files and
+  RPM::File#extract if the RPM contains a malicious "payload compressor" field.
+
+  This vulnerability impacts the `extract` and `files` methods of the
+  `RPM::File` class in the affected versions of this library.
+
+  ### Patches
+
+  Version 0.0.12 is available with a fix for these issues.
+
+  ### Workarounds
+
+  When using an affected version of this library (arr-pm), ensure any RPMs
+  being processed contain valid/known payload compressor values. Such values
+  include: gzip, bzip2, xz, zstd, and lzma.
+
+  You can check the payload compressor field in an rpm by using the rpm command
+  line tool. For example:
+
+  ```
+  % rpm -qp example-1.0-1.x86_64.rpm --qf "%{PAYLOADCOMPRESSOR}\n"
+  gzip
+  ```
+
+  ### Impact on known dependent projects
+
+  This library is used by [fpm](https://github.com/jordansissel/fpm). The
+  vulnerability may impact fpm only when using the flag `-s rpm` or
+  `--input-type rpm` to convert a malicious rpm to another format. It does
+  not impact creating rpms.
+cvss_v3: 7.0
+patched_versions:
+  - ">= 0.0.12"
+related:
+  url:
+    - https://github.com/jordansissel/ruby-arr-pm/pull/14
+    - https://github.com/jordansissel/ruby-arr-pm/pull/15
diff --git a/gems/as/OSVDB-112683.yml b/gems/as/OSVDB-112683.yml
index 68c81a0c9c..6454981249 100644
--- a/gems/as/OSVDB-112683.yml
+++ b/gems/as/OSVDB-112683.yml
@@ -1,10 +1,18 @@
 ---
 gem: as
 osvdb: 112683
-url: http://osvdb.org/show/osvdb/112683
+url: https://security.snyk.io/vuln/SNYK-RUBY-AS-20195
 title: as Gem for Ruby Process List Local Plaintext Credentials Disclosure
 date: 2014-09-25
 description: |
   as Gem for Ruby contains a flaw that is due to the program displaying
   credential information in plaintext in the process list. This may
   allow a local attacker to gain access to credential information.
+notes: "Never patched"
+related:
+  url:
+    - https://security.snyk.io/vuln/SNYK-RUBY-AS-20195
+    - http://www.vapid.dhs.org/advisories/as-v1.0.html
+    - http://www.vapidlabs.com/advisory.php?v=17
+    - http://osvdb.org/show/osvdb/112683
+# FYI: rubygem.org Homepage is 404"
diff --git a/gems/asciidoctor-include-ext/CVE-2022-24803.yml b/gems/asciidoctor-include-ext/CVE-2022-24803.yml
new file mode 100644
index 0000000000..40ec0bbb9a
--- /dev/null
+++ b/gems/asciidoctor-include-ext/CVE-2022-24803.yml
@@ -0,0 +1,49 @@
+---
+gem: asciidoctor-include-ext
+cve: 2022-24803
+ghsa: v222-6mr4-qj29
+url: https://github.com/jirutka/asciidoctor-include-ext/security/advisories/GHSA-v222-6mr4-qj29
+title: Command Injection vulnerability in asciidoctor-include-ext
+date: 2022-03-31
+description: |
+  ### Impact
+
+  Applications using [Asciidoctor (Ruby)](https://github.com/asciidoctor/asciidoctor)
+  with [asciidoctor-include-ext](https://github.com/jirutka/asciidoctor-include-ext)
+  (prior to version 0.4.0), which render user-supplied input in AsciiDoc markup, may
+  allow an attacker to execute arbitrary system commands on the host operating system.
+  This attack is possible even when `allow-uri-read` is disabled!
+
+  ### Patches
+
+  The vulnerability has been fixed in commit c7ea001 (and further improved in cbaccf3),
+  which is included in version
+  [0.4.0](https://rubygems.org/gems/asciidoctor-include-ext/versions/0.4.0).
+
+  ### Workarounds
+
+  ```rb
+  require 'asciidoctor/include_ext'
+
+  class Asciidoctor::IncludeExt::IncludeProcessor
+    # Overrides superclass private method to mitigate Command Injection
+    # vulnerability in asciidoctor-include-ext <0.4.0.
+    def target_uri?(target)
+      target.downcase.start_with?('http://', 'https://') \
+        && URI.parse(target).is_a?(URI::HTTP)
+    rescue URI::InvalidURIError
+      false
+    end
+  end
+  ```
+
+  ### References
+
+  * https://sakurity.com/blog/2015/02/28/openuri.html
+cvss_v3: 10.0
+patched_versions:
+  - ">= 0.4.0"
+related:
+  url:
+    - https://github.com/jirutka/asciidoctor-include-ext/commit/c7ea001a597c7033575342c51483dab7b87ae155
+    - https://github.com/jirutka/asciidoctor-include-ext/commit/cbaccf3de533cbca224bf61d0b74e4b84d41d8ee
diff --git a/gems/asciidoctor/CVE-2018-18385.yml b/gems/asciidoctor/CVE-2018-18385.yml
new file mode 100644
index 0000000000..0e014781f7
--- /dev/null
+++ b/gems/asciidoctor/CVE-2018-18385.yml
@@ -0,0 +1,17 @@
+---
+gem: asciidoctor
+cve: 2018-18385
+ghsa: qc9p-mjxm-j2wj
+url: https://github.com/asciidoctor/asciidoctor/issues/2888
+title: Asciidoctor Infinite Loop vulnerability
+date: 2022-05-13
+description: |
+  Asciidoctor in versions < 1.5.8 allows remote attackers to cause a denial
+  of service (infinite loop). The loop was caused by the fact that `Parser.next_block`
+  was not exhausting all the lines in the reader as the while loop expected it would.
+  This was happening because the regular expression that detects any list was not
+  agreeing with the regular expression that detects a specific list type. So the line
+  kept getting pushed back onto the reader, hence causing the loop.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 1.5.8"
diff --git a/gems/audited/CVE-2024-22047.yml b/gems/audited/CVE-2024-22047.yml
new file mode 100644
index 0000000000..b7ea62bf6a
--- /dev/null
+++ b/gems/audited/CVE-2024-22047.yml
@@ -0,0 +1,38 @@
+---
+gem: audited
+cve: 2024-22047
+ghsa: hjp3-5g2q-7jww
+url: https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww
+title: Race Condition leading to logging errors
+date: 2023-05-01
+description: |
+  In certain setups with threaded web servers, Audited's use of
+  `Thread.current` can incorrectly attributed audits to the wrong user.
+
+  Fixed in 5.3.3.
+
+  In March, @convisoappsec noticed that the library in question had a
+  Race Condition problem, which caused logs to be registered at times
+  with different users than those who performed the genuine actions.
+
+  - The first issue we identified was from November
+    2021: https://github.com/collectiveidea/audited/issues/601
+
+  - So the solution was implemented in the following Pull Request:
+    https://github.com/collectiveidea/audited/pull/669
+
+  - And the feature was published in version 5.3.3:
+    RELEASE: https://github.com/collectiveidea/audited/pull/671
+cvss_v3: 3.1
+unaffected_versions:
+  - "< 4.0.0"
+patched_versions:
+  - ">= 5.3.3"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-22047
+    - https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww
+    - https://github.com/collectiveidea/audited/issues/601
+    - https://github.com/collectiveidea/audited/pull/669
+    - https://github.com/collectiveidea/audited/pull/671
+    - https://github.com/advisories/GHSA-hjp3-5g2q-7jww
diff --git a/gems/authlogic/CVE-2012-6497.yml b/gems/authlogic/CVE-2012-6497.yml
index aa607ff34b..ccc9a00cd7 100644
--- a/gems/authlogic/CVE-2012-6497.yml
+++ b/gems/authlogic/CVE-2012-6497.yml
@@ -2,6 +2,7 @@
 gem: authlogic
 cve: 2012-6497
 osvdb: 89064
+ghsa: rx7j-mw4c-76g9
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-6497
 title: Ruby on Rails Authlogic Gem secret_token.rb Known secret_token Value Weakness
 date: 2012-12-21
@@ -12,4 +13,4 @@ description: |
   secret_token.rb, a remote attacker to more easily conduct SQL injection
   attacks.
 patched_versions:
-- '>= 3.3.0'
+  - ">= 3.3.0"
diff --git a/gems/auto_awesomplete/OSVDB-132800.yml b/gems/auto_awesomplete/OSVDB-132800.yml
index bc62baff8d..d7ef78aafd 100644
--- a/gems/auto_awesomplete/OSVDB-132800.yml
+++ b/gems/auto_awesomplete/OSVDB-132800.yml
@@ -1,11 +1,17 @@
 ---
 gem: auto_awesomplete
 osvdb: 132800
-url: https://github.com/Tab10id/auto_awesomplete/issues/2
-title: |
-  auto_awesomplete Gem for Ruby allows arbitrary search execution
+url: https://www.openwall.com/lists/oss-security/2016/01/11/2
+title: auto_awesomplete Gem for Ruby allows arbitrary search execution
 date: 2016-01-08
 description: |
-  auto_awesomplete Gem for Ruby contains a flaw that is triggered when handling the
-  'params[:default_class_name]' option. This allows users to search any object
-  of all given ActiveRecord classes.
+  auto_awesomplete Gem for Ruby contains a flaw that is triggered
+  when handling the 'params[:default_class_name]' option. This
+  allows users to search any object of all given ActiveRecord classes.
+notes: "Never patched"
+related:
+  url:
+    - https://www.openwall.com/lists/oss-security/2016/01/11/2
+    - https://github.com/Tab10id/auto_awesomplete/issues/2
+    - https://github.com/rubysec/ruby-advisory-db/issues/224
+    - https://github.com/rubysec/ruby-advisory-db/pull/227
diff --git a/gems/auto_select2/OSVDB-132800.yml b/gems/auto_select2/OSVDB-132800.yml
index aeee2dd2fd..6b38b0aedf 100644
--- a/gems/auto_select2/OSVDB-132800.yml
+++ b/gems/auto_select2/OSVDB-132800.yml
@@ -1,13 +1,20 @@
 ---
 gem: auto_select2
 osvdb: 132800
-url: https://github.com/Loriowar/auto_select2/issues/4
-title: |
-  auto_select2 Gem for Ruby allows arbitrary search execution
+url: https://www.openwall.com/lists/oss-security/2016/01/11/2
+title: auto_select2 Gem for Ruby allows arbitrary search execution
 date: 2016-01-08
 description: |
-  auto_select2 Gem for Ruby contains a flaw that is triggered when handling the
-  'params[:default_class_name]' option. This allows users to search any object
-  of all given ActiveRecord classes.
+  auto_select2 Gem for Ruby contains a flaw that is triggered
+  when handling the 'params[:default_class_name]' option. This
+  allows users to search any object of all given ActiveRecord classes.
 patched_versions:
-- '>= 0.5.0'
+  - ">= 0.5.0"
+related:
+  url:
+    - https://www.openwall.com/lists/oss-security/2016/01/11/2
+    - https://github.com/Loriowar/auto_select2/issues/4
+    - https://github.com/bkocherov/auto_select2/commit/c283ba5b2ad828c3b7414565ae66cd0d86f5a5df
+    - https://github.com/rubysec/ruby-advisory-db/issues/224
+    - https://github.com/rubysec/ruby-advisory-db/pull/227
+    - https://github.com/Tab10id/auto_awesomplete/issues/2
diff --git a/gems/avo/CVE-2023-34102.yml b/gems/avo/CVE-2023-34102.yml
new file mode 100644
index 0000000000..173686597b
--- /dev/null
+++ b/gems/avo/CVE-2023-34102.yml
@@ -0,0 +1,53 @@
+---
+gem: avo
+cve: 2023-34102
+ghsa: 86h2-2g4g-29qx
+url: https://github.com/avo-hq/avo/security/advisories/GHSA-86h2-2g4g-29qx
+title: avo possible unsafe reflection / partial DoS vulnerability
+date: 2023-06-06
+description: |
+  ### Summary
+
+  The polymorphic field type stores the classes to operate on when updating
+  a record with user input, and does not validate them in the back end.
+  This can lead to unexpected behavior, remote code execution, or
+  application crashes when viewing a manipulated record.
+
+  ### Details
+
+  After reviewing the polymorphic field implementation and performing
+  some black box approaches, we identified a potential security issue
+  related to the use of safe_constantize / constantize. This Rails
+  functionality is capable of searching for classes within the Rails
+  context and returning the class for further use. Because Avo does
+  not validate user input when updating or creating a new polymorphic
+  resource, it is possible to create database entries with completely
+  different or invalid class names than the preselected ones. Avo
+  assumes that the class specified by the user request is a valid one
+  and attempts to work with it, which may result in dangerous behavior
+  and code execution.
+
+  ### Impact
+
+  The final exploitation of this vulnerability requires more time than
+  is provided in this assessment, but initial testing of the post request
+  shows the potential critical risk. The classes could be instantiated
+  at any point in the code and this could also lead to code execution.
+
+  ### Recommendation
+
+  Avo should be configured to never trust user-supplied input, especially
+  when defining classes for records. In this particular case, Avo can
+  evaluate the options list given for the polymorphic field and only allow
+  strings from that list. With this white-list approach, an attacker
+  cannot supply unintended classes.
+cvss_v3: 8.3
+patched_versions:
+  - ">= 2.33.3"
+related:
+  url:
+    - https://github.com/avo-hq/avo/security/advisories/GHSA-86h2-2g4g-29qx
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-34102
+    - https://github.com/avo-hq/avo/commit/ec117882ddb1b519481bdd046dc3cfa4474e6e17
+    - https://github.com/avo-hq/avo/releases/tag/v2.33.3
+    - https://github.com/advisories/GHSA-86h2-2g4g-29qx
diff --git a/gems/avo/CVE-2023-34103.yml b/gems/avo/CVE-2023-34103.yml
new file mode 100644
index 0000000000..327ad4a904
--- /dev/null
+++ b/gems/avo/CVE-2023-34103.yml
@@ -0,0 +1,54 @@
+---
+gem: avo
+cve: 2023-34103
+ghsa: 5cr9-5jx3-2g39
+url: https://github.com/avo-hq/avo/security/advisories/GHSA-5cr9-5jx3-2g39
+title: avo vulnerable to Stored XSS (Cross Site Scripting) in
+  html content based fields
+date: 2023-06-06
+description: |
+  ### Summary
+
+  Some avo fields are vulnerable to XSS when rendering html based content.
+
+  ### Details
+  During the analysis of the web application, a rendered field was
+  discovered that did not filter JS / HTML tags in a safe way and can
+  be abused to execute js code on a client side. The trix field uses
+  the trix editor in the backend to edit rich text data which basically
+  operates with html tags. To display the stored data in a rendered view,
+  the HasHTMLAttributes concern is used. This can be exploited by an
+  attacker to store javascript code in any trix field by intercepting
+  the request and modifying the post data, as the trix editor does not
+  allow adding custom html or js tags on the frontend.
+
+  ### Impact
+
+  Unlike non-persistent XSS, persistent XSS does not require a social
+  engineering phase. Victims of this attack do not need to be tricked
+  into clicking a link or something like that. However, by exploiting
+  such a vulnerability on this particular target, attackers may be able
+  to gain access to accounts that require special protection, such as
+  administrators of the web service, which is what Avo is primarily
+  intended to be used for.
+
+  ### Recommendation
+
+  The content of a field that contains html code should be sanitized
+  using the according rails helper which uses a whitelist of known-safe
+  tags and attributes. Also this security consideration should be
+  applied to the “as_html” attribute as well because it may contain
+  user controlled input as well.
+
+  https://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html
+
+cvss_v3: 7.3
+patched_versions:
+  - ">= 2.33.3"
+related:
+  url:
+    - https://github.com/avo-hq/avo/security/advisories/GHSA-5cr9-5jx3-2g39
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-34103
+    - https://github.com/avo-hq/avo/releases/tag/v2.33.3
+    - https://github.com/avo-hq/avo/commit/7891c01e1fba9ca5d7dbccc43d27f385e5d08563
+    - https://github.com/advisories/GHSA-5cr9-5jx3-2g39
diff --git a/gems/avo/CVE-2024-22191.yml b/gems/avo/CVE-2024-22191.yml
new file mode 100644
index 0000000000..7f3b54bbae
--- /dev/null
+++ b/gems/avo/CVE-2024-22191.yml
@@ -0,0 +1,44 @@
+---
+gem: avo
+cve: 2024-22191
+ghsa: ghjv-mh6x-7q6h
+url: https://github.com/avo-hq/avo/security/advisories/GHSA-ghjv-mh6x-7q6h
+title: avo vulnerable to stored cross-site scripting (XSS) in key_value field
+date: 2024-01-16
+description: |
+
+  ### Summary
+
+  A **stored cross-site scripting (XSS)** vulnerability was found in
+  the **key_value** field of Avo v3.2.3. This vulnerability could allow
+  an attacker to execute arbitrary JavaScript code in the victim's browser.
+
+  ### Details
+
+  The value of the key_value is inserted directly into the HTML code.
+  In the current version of Avo (possibly also older versions), the
+  value is not properly sanitized before it is inserted into the HTML code.
+
+  This vulnerability can be exploited by an attacker to inject malicious
+  JavaScript code into the key_value field. When a victim views the page
+  containing the malicious code, the code will be executed in their browser.
+
+  In [avo/fields/common/key_value_component.html.erb](https://github.com/avo-hq/avo/blob/main/app/components/avo/fields/common/key_value_component.html.erb#L38C21-L38C33)
+  the value is taken in lines **38** and **49** and seems to be
+  interpreted directly as html in lines **44** and **55**.
+
+  ### Impact
+
+  This vulnerability could be used to steal sensitive information from
+  victims that could be used to hijack victims' accounts or redirect
+  them to malicious websites.
+cvss_v3: 7.3
+patched_versions:
+  - ">= 3.2.4"
+  - "~> 2.47, >= 2.47"
+related:
+  url:
+    - https://github.com/avo-hq/avo/security/advisories/GHSA-ghjv-mh6x-7q6h
+    - https://github.com/avo-hq/avo/commit/51bb80b181cd8e31744bdc4e7f9b501c81172347
+    - https://github.com/avo-hq/avo/commit/fc92a05a8556b1787c8694643286a1afa6a71258
+    - https://github.com/advisories/GHSA-ghjv-mh6x-7q6h
diff --git a/gems/avo/CVE-2024-22411.yml b/gems/avo/CVE-2024-22411.yml
new file mode 100644
index 0000000000..b9d69da1d9
--- /dev/null
+++ b/gems/avo/CVE-2024-22411.yml
@@ -0,0 +1,27 @@
+---
+gem: avo
+cve: 2024-22411
+ghsa: g8vp-2v5p-9qfh
+url: https://github.com/avo-hq/avo/security/advisories/GHSA-g8vp-2v5p-9qfh
+title: Cross-site scripting (XSS) in Action messages on Avo
+date: 2024-01-17
+description: |
+  Avo is a framework to create admin panels for Ruby on Rails apps.
+  In Avo 3 pre12 any HTML inside text that is passed to `error` or
+  `succeed` in an `Avo::BaseAction` subclass will be rendered directly
+  without sanitization in the toast/notification that appears in the
+  UI on Action completion. A malicious user could exploit this
+  vulnerability to trigger a cross site scripting attack on an
+  unsuspecting user.
+
+  This issue has been addressed in the 3.0.2 release of Avo. Users
+  are advised to upgrade.
+cvss_v3: 6.5
+patched_versions:
+  - ">= 3.3.0"
+  - "~> 2.47, >= 2.47"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-22411
+    - https://github.com/avo-hq/avo/security/advisories/GHSA-g8vp-2v5p-9qfh
+    - https://github.com/advisories/GHSA-g8vp-2v5p-9qfh
diff --git a/gems/awesome-bot/CVE-2019-15224.yml b/gems/awesome-bot/CVE-2019-15224.yml
index b4aba56ae0..89e3a5b51f 100644
--- a/gems/awesome-bot/CVE-2019-15224.yml
+++ b/gems/awesome-bot/CVE-2019-15224.yml
@@ -13,8 +13,8 @@ description: |
   1.17.2 or upgrading to 1.19.x.
 cvss_v3: 9.8
 unaffected_versions:
-- "< 1.18.0"
-- "> 1.18.0"
+  - "< 1.18.0"
+  - "> 1.18.0"
 related:
   url:
-  - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
+    - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
diff --git a/gems/awesome_spawn/CVE-2014-0156.yml b/gems/awesome_spawn/CVE-2014-0156.yml
index ec6d1eddd3..8b17ffdfe6 100644
--- a/gems/awesome_spawn/CVE-2014-0156.yml
+++ b/gems/awesome_spawn/CVE-2014-0156.yml
@@ -1,16 +1,17 @@
 ---
 gem: awesome_spawn
 cve: 2014-0156
+ghsa: qpqw-mc85-qvm9
 url: https://github.com/ManageIQ/awesome_spawn/commit/e524f85f1c6e292ef7d117d7818521307ac269ff
 title: OS command injection flaw in awesome_spawn
 date: 2014-03-28
-description: >-
+description: |
   Awesome spawn contains OS command injection vulnerability, which allows
-  execution of additional commands passed to Awesome spawn as arguments, e.g.
-  AwesomeSpawn.run('ls',:params => {'-l' => ";touch haxored"}). If untrusted
-  input was included in command arguments, attacker could use this flaw to
-  execute arbitrary command.
+  execution of additional commands passed to Awesome spawn as arguments, e.g. AwesomeSpawn.run('ls',:params
+  => {'-l' => ";touch haxored"}). If untrusted input was included in command arguments,
+  attacker could use this flaw to execute arbitrary command.
 cvss_v2: 6.8
+cvss_v3: 9.8
 patched_versions:
-- ~> 1.2.0
-- '>= 1.3.0'
+  - "~> 1.2.0"
+  - ">= 1.3.0"
diff --git a/gems/backup-agoddard/CVE-2014-4993.yml b/gems/backup-agoddard/CVE-2014-4993.yml
index f36174f57c..8a37b7e6fa 100644
--- a/gems/backup-agoddard/CVE-2014-4993.yml
+++ b/gems/backup-agoddard/CVE-2014-4993.yml
@@ -2,10 +2,13 @@
 gem: backup-agoddard
 cve: 2014-4993
 osvdb: 108578
+ghsa: wr5j-q359-6vr2
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-4993
 title: backup-agoddard Gem for Ruby /lib/backup/cli/utility.rb Process Table Local
   Plaintext Password Disclosure
 date: 2014-06-30
-description: backup-agoddard Gem for Ruby contains a flaw in /lib/backup/cli/utility.rb
+description: |
+  backup-agoddard Gem for Ruby contains a flaw in /lib/backup/cli/utility.rb
   that is due to the application exposing password information in plaintext in the
   process table. This may allow a local attacker to gain access to password information.
+cvss_v3: 7.8
diff --git a/gems/backup_checksum/CVE-2014-4993.yml b/gems/backup_checksum/CVE-2014-4993.yml
index afe64daed6..9ae6d7cec9 100644
--- a/gems/backup_checksum/CVE-2014-4993.yml
+++ b/gems/backup_checksum/CVE-2014-4993.yml
@@ -2,6 +2,7 @@
 gem: backup_checksum
 cve: 2014-4993
 osvdb: 108569
+ghsa: wr5j-q359-6vr2
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-4993
 title: backup_checksum Gem for Ruby /lib/backup/cli/utility.rb Process List Local
   Plaintext Password Disclosure
@@ -11,3 +12,4 @@ description: |
   that is triggered as the program displays password information in plaintext
   in the process list. This may allow a local attacker to gain access to
   password information.
+cvss_v3: 7.8
diff --git a/gems/backup_checksum/OSVDB-108570.yml b/gems/backup_checksum/OSVDB-108570.yml
index 16c9728d12..e69eb91f68 100644
--- a/gems/backup_checksum/OSVDB-108570.yml
+++ b/gems/backup_checksum/OSVDB-108570.yml
@@ -1,11 +1,18 @@
 ---
 gem: backup_checksum
 osvdb: 108570
-url: http://osvdb.org/show/osvdb/108570
-title: backup_checksum Gem for Ruby /lib/backup/cli/utility.rb Metacharacter Handling
-  Remote Command Execution
+url: https://www.openwall.com/lists/oss-security/2014/07/07/12
+title: backup_checksum Gem for Ruby /lib/backup/cli/utility.rb
+  Metacharacter Handling Remote Command Execution
 date: 2014-06-30
 description: |
   backup_checksum Gem for Ruby contains a flaw in /lib/backup/cli/utility.rb
   that is triggered when handling metacharacters. This may allow a remote
   attacker to execute arbitrary commands.
+notes: "Never patched"
+related:
+  url:
+    - https://www.openwall.com/lists/oss-security/2014/07/07/12
+    - https://my.diffend.io/gems/backup_checksum/3.0.23
+    - https://github.com/backup/backup
+    - http://osvdb.org/show/osvdb/108570
diff --git a/gems/bcrypt-ruby/OSVDB-62067.yml b/gems/bcrypt-ruby/OSVDB-62067.yml
index 80e12053e9..481a94747f 100644
--- a/gems/bcrypt-ruby/OSVDB-62067.yml
+++ b/gems/bcrypt-ruby/OSVDB-62067.yml
@@ -7,14 +7,24 @@ title: bcrypt-ruby Gem for Ruby incorrect encoding of non US-ASCII characters (J
   only)
 date: 2010-02-01
 description: |
+  In https://security.snyk.io/vuln/SNYK-RUBY-BCRYPT-20009, found
+  "The advisory has been revoked - it doesn't affect any version of package bcrypt"
+
   bcrypt-ruby Gem for Ruby suffered from a bug related to character
   encoding that substantially reduced the entropy of hashed passwords
   containing non US-ASCII characters. An incorrect encoding step
-  transparently replaced such characters by '?' prior to hashing. In the
-  worst case of a password consisting solely of non-US-ASCII characters,
-  this would cause its hash to be equivalent to all other such passwords
-  of the same length. This issue only affects the JRuby implementation.
+  transparently replaced such characters by '?' prior to hashing.
+  In the worst case of a password consisting solely of non-US-ASCII
+  characters, this would cause its hash to be equivalent to all other
+  such passwords of the same length.
+
+  This issue only affects the JRuby implementation.
 
   This gem has been renamed. Please use "bcrypt" from now on.
 patched_versions:
-- '>= 2.1.4'
+  - ">= 2.1.4"
+related:
+  url:
+    - https://github.com/jeremyh/jBCrypt
+    - http://www.mindrot.org/files/jBCrypt/internat.adv
+    - https://github.com/bcrypt-ruby/bcrypt-ruby/blob/master/ext/jruby/bcrypt_jruby/BCrypt.java
diff --git a/gems/bcrypt/OSVDB-62067.yml b/gems/bcrypt/OSVDB-62067.yml
index 3154d22e2c..e4d9d76824 100644
--- a/gems/bcrypt/OSVDB-62067.yml
+++ b/gems/bcrypt/OSVDB-62067.yml
@@ -7,12 +7,22 @@ title: bcrypt-ruby Gem for Ruby incorrect encoding of non US-ASCII characters (J
   only)
 date: 2010-02-01
 description: |
+  In https://security.snyk.io/vuln/SNYK-RUBY-BCRYPT-20009, found
+  "The advisory has been revoked - it doesn't affect any version of package bcrypt"
+
   bcrypt-ruby Gem for Ruby suffered from a bug related to character
   encoding that substantially reduced the entropy of hashed passwords
   containing non US-ASCII characters. An incorrect encoding step
-  transparently replaced such characters by '?' prior to hashing. In the
-  worst case of a password consisting solely of non-US-ASCII characters,
-  this would cause its hash to be equivalent to all other such passwords
-  of the same length. This issue only affects the JRuby implementation.
+  transparently replaced such characters by '?' prior to hashing.
+  In the worst case of a password consisting solely of non-US-ASCII
+  characters, this would cause its hash to be equivalent to all other
+  such passwords of the same length.
+
+  This issue only affects the JRuby implementation.
 patched_versions:
-- '>= 2.1.4'
+  - ">= 2.1.4"
+related:
+  url:
+    - https://github.com/jeremyh/jBCrypt
+    - http://www.mindrot.org/files/jBCrypt/internat.adv
+    - https://github.com/bcrypt-ruby/bcrypt-ruby/blob/master/ext/jruby/bcrypt_jruby/BCrypt.java
diff --git a/gems/better_errors/CVE-2021-39197.yml b/gems/better_errors/CVE-2021-39197.yml
index 97702b9f64..f36382ce27 100644
--- a/gems/better_errors/CVE-2021-39197.yml
+++ b/gems/better_errors/CVE-2021-39197.yml
@@ -26,4 +26,4 @@ description: |
   - Open an issue in [better_errors](https://github.com/BetterErrors/better_errors)
 cvss_v3: 6.3
 patched_versions:
-- ">= 2.8.0"
+  - ">= 2.8.0"
diff --git a/gems/bibtex-ruby/CVE-2019-10780.yml b/gems/bibtex-ruby/CVE-2019-10780.yml
index 5f44c9f1e4..e6494ebbd7 100644
--- a/gems/bibtex-ruby/CVE-2019-10780.yml
+++ b/gems/bibtex-ruby/CVE-2019-10780.yml
@@ -11,4 +11,4 @@ description: |
   BibTeX.open.
 cvss_v3: 9.8
 patched_versions:
-- '>= 5.1.0'
+  - ">= 5.1.0"
diff --git a/gems/bindata/CVE-2021-32823.yml b/gems/bindata/CVE-2021-32823.yml
index 44f14fc971..201a359d33 100644
--- a/gems/bindata/CVE-2021-32823.yml
+++ b/gems/bindata/CVE-2021-32823.yml
@@ -14,4 +14,4 @@ description: |
   and Integers.
 cvss_v3: 3.7
 patched_versions:
-- '>= 2.4.10'
+  - ">= 2.4.10"
diff --git a/gems/bio-basespace-sdk/CVE-2013-7111.yml b/gems/bio-basespace-sdk/CVE-2013-7111.yml
index 3f9763ba38..7dd0383267 100644
--- a/gems/bio-basespace-sdk/CVE-2013-7111.yml
+++ b/gems/bio-basespace-sdk/CVE-2013-7111.yml
@@ -2,9 +2,11 @@
 gem: bio-basespace-sdk
 cve: 2013-7111
 osvdb: 101031
+ghsa: xwr3-fmgj-mmfr
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-7111
 title: Bio Basespace SDK Gem for Ruby Command Line API Key Disclosure
 date: 2013-12-14
-description: Bio Basespace SDK Gem for Ruby contains a flaw that is due to the API
+description: |
+  Bio Basespace SDK Gem for Ruby contains a flaw that is due to the API
   client code passing the API_KEY to a curl command. This may allow a local attacker
   to gain access to API key information by monitoring the process table.
diff --git a/gems/bitcoin_vanity/CVE-2019-15224.yml b/gems/bitcoin_vanity/CVE-2019-15224.yml
index ae3df5820f..cb8b43496e 100644
--- a/gems/bitcoin_vanity/CVE-2019-15224.yml
+++ b/gems/bitcoin_vanity/CVE-2019-15224.yml
@@ -12,8 +12,8 @@ description: |
   No unaffected version is known to exist, as the gem appears to have been entirely removed.
 cvss_v3: 9.8
 unaffected_versions:
-- "< 4.3.3"
-- "> 4.3.3"
+  - "< 4.3.3"
+  - "> 4.3.3"
 related:
   url:
-  - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
+    - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
diff --git a/gems/blazer/CVE-2022-29498.yml b/gems/blazer/CVE-2022-29498.yml
new file mode 100644
index 0000000000..123a1f9ba7
--- /dev/null
+++ b/gems/blazer/CVE-2022-29498.yml
@@ -0,0 +1,21 @@
+---
+gem: blazer
+cve: 2022-29498
+ghsa: qf9q-q4hh-qph3
+url: https://github.com/ankane/blazer/issues/392
+title: SQL injection for certain queries with variables
+date: 2022-04-20
+description: |
+  For some queries, specific variable values can modify the query
+  rather than just the variable. This can occur if:
+
+  1. the query's data source uses different escaping than the Rails database OR
+  2. the query has a variable inside a string literal
+
+  Since Blazer is designed to run arbitrary queries, the impact will typically be low.
+  Users cannot run any queries they could not have already run. However, an attacker
+  could get a user to run a query they would not have normally run. If the data source
+  has write permissions, this could include modifying data in some cases.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 2.6.0"
diff --git a/gems/blockchain_wallet/CVE-2019-15224.yml b/gems/blockchain_wallet/CVE-2019-15224.yml
index 63db1e7b8f..6f37b3fb40 100644
--- a/gems/blockchain_wallet/CVE-2019-15224.yml
+++ b/gems/blockchain_wallet/CVE-2019-15224.yml
@@ -13,8 +13,8 @@ description: |
   0.0.5.
 cvss_v3: 9.8
 unaffected_versions:
-- "< 0.0.6"
-- "> 0.0.7"
+  - "< 0.0.6"
+  - "> 0.0.7"
 related:
   url:
-  - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
+    - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
diff --git a/gems/bolt/CVE-2023-5214.yml b/gems/bolt/CVE-2023-5214.yml
new file mode 100644
index 0000000000..e575b92c60
--- /dev/null
+++ b/gems/bolt/CVE-2023-5214.yml
@@ -0,0 +1,19 @@
+---
+gem: bolt
+cve: 2023-5214
+ghsa: 289m-2964-f8q5
+url: https://www.puppet.com/security/cve/cve-2023-5214-privilege-escalation-puppet-bolt
+title: Puppet Bolt privilege escalation vulnerability
+date: 2023-10-06
+description: |
+  In Puppet Bolt versions prior to 3.27.4, a path
+  to escalate privileges was identified.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 3.27.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-5214
+    - https://www.puppet.com/security/cve/cve-2023-5214-privilege-escalation-puppet-bolt
+    - https://yanac.hu/2023/10/07/cve-2023-5214-puppetlabs-puppet-bolt-up-to-3-27-3-privileges-management
+    - https://github.com/advisories/GHSA-289m-2964-f8q5
diff --git a/gems/bootstrap-sass/CVE-2016-10735.yml b/gems/bootstrap-sass/CVE-2016-10735.yml
index b201655975..fd82619a6d 100644
--- a/gems/bootstrap-sass/CVE-2016-10735.yml
+++ b/gems/bootstrap-sass/CVE-2016-10735.yml
@@ -1,6 +1,7 @@
 ---
 gem: bootstrap-sass
 cve: 2016-10735
+ghsa: 4p24-vmcr-4gqj
 url: https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0/
 title: XSS vulnerability via data-target in bootstrap-sass
 date: 2016-07-27
@@ -10,8 +11,7 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 6.1
 patched_versions:
-- '>= 3.4.0'
-
+  - ">= 3.4.0"
 related:
   url:
-  - https://github.com/twbs/bootstrap/issues/20184
+    - https://github.com/twbs/bootstrap/issues/20184
diff --git a/gems/bootstrap-sass/CVE-2018-14040.yml b/gems/bootstrap-sass/CVE-2018-14040.yml
new file mode 100644
index 0000000000..5732befe5c
--- /dev/null
+++ b/gems/bootstrap-sass/CVE-2018-14040.yml
@@ -0,0 +1,47 @@
+---
+gem: bootstrap-sass
+cve: 2018-14040
+ghsa: 3wqf-4x89-9g79
+url: https://github.com/advisories/GHSA-3wqf-4x89-9g79
+title: Bootstrap vulnerable to Cross-Site Scripting (XSS)
+date: 2022-05-13
+description: |
+  In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as
+  4.x before 4.1.2, XSS is possible in the collapse data-parent attribute.
+cvss_v2: 4.3
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 2.3.0"
+patched_versions:
+  - "~> 3.4.0"
+  - ">= 4.1.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-14040
+    - https://github.com/twbs/bootstrap/issues/26423
+    - https://github.com/twbs/bootstrap/issues/26625
+    - https://github.com/twbs/bootstrap/pull/26630
+    - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@
+    - https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@
+    - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@
+    - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@
+    - https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@
+    - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@
+    - https://lists.debian.org/debian-lts-announce/2018/08/msg00027.html
+    - https://seclists.org/bugtraq/2019/May/18
+    - https://www.oracle.com/security-alerts/cpuApr2021.html
+    - https://www.tenable.com/security/tns-2021-14
+    - http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html
+    - http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html
+    - http://seclists.org/fulldisclosure/2019/May/10
+    - http://seclists.org/fulldisclosure/2019/May/11
+    - http://seclists.org/fulldisclosure/2019/May/13
+    - https://github.com/twbs/bootstrap/blob/v3.4.1/js/collapse.js#L140
+    - https://github.com/twbs/bootstrap/blob/v3.4.1/js/scrollspy.js#L56
+    - https://github.com/twbs/bootstrap/blob/v3.4.1/js/tooltip.js#L352
+    - https://github.com/twbs/bootstrap-rubygem/commit/f34c43c936ac7d0ebb129289321d8c51cd56aed1#diff-4e736e880b7fc39eb5e85576b629f6e3cd08f02f45104a7b4581f82852e97a81R1306
+    - https://github.com/twbs/bootstrap/commit/149096016f70fd815540d62c0989fd99cdc809e0
+    - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14040.yml
+    - https://github.com/twbs/bootstrap/commit/2a5ba23ce8f041f3548317acc992ed8a736b609d
+    - https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2
+    - https://github.com/advisories/GHSA-3wqf-4x89-9g79
diff --git a/gems/bootstrap-sass/CVE-2018-14042.yml b/gems/bootstrap-sass/CVE-2018-14042.yml
new file mode 100644
index 0000000000..920e3a9952
--- /dev/null
+++ b/gems/bootstrap-sass/CVE-2018-14042.yml
@@ -0,0 +1,45 @@
+---
+gem: bootstrap-sass
+cve: 2018-14042
+ghsa: 7mvr-5x2g-wfc8
+url: https://github.com/advisories/GHSA-7mvr-5x2g-wfc8
+title: Bootstrap Cross-site Scripting vulnerability
+date: 2018-09-13
+description: |
+  In Bootstrap starting in version 2.3.0 and prior to versions
+  3.4.0 and 4.1.2, XSS is possible in the data-container
+  property of tooltip.  This is similar to CVE-2018-14041.
+cvss_v2: 4.3
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 2.3.0"
+patched_versions:
+  - "~> 3.4.0"
+  - ">= 4.1.2"
+related:
+  cve:
+    - CVE-2018-14041
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-14042
+    - https://github.com/twbs/bootstrap/issues/26423
+    - https://github.com/twbs/bootstrap/issues/26628
+    - https://github.com/twbs/bootstrap/pull/26630
+    - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@
+    - https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@
+    - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@
+    - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@
+    - https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@
+    - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@
+    - https://seclists.org/bugtraq/2019/May/18
+    - https://www.oracle.com/security-alerts/cpuApr2021.html
+    - http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html
+    - http://seclists.org/fulldisclosure/2019/May/10
+    - http://seclists.org/fulldisclosure/2019/May/11
+    - http://seclists.org/fulldisclosure/2019/May/13
+    - https://github.com/twbs/bootstrap/issues/26428
+    - https://github.com/twbs/bootstrap/commit/2d90d369bbc2bd2647620246c55cec8c4705e3d0
+    - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14042.yml
+    - https://www.tenable.com/security/tns-2021-14
+    - https://github.com/twbs/bootstrap/commit/2a5ba23ce8f041f3548317acc992ed8a736b609d
+    - https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2
+    - https://github.com/advisories/GHSA-7mvr-5x2g-wfc8
diff --git a/gems/bootstrap-sass/CVE-2018-20676.yml b/gems/bootstrap-sass/CVE-2018-20676.yml
new file mode 100644
index 0000000000..eb237e40a9
--- /dev/null
+++ b/gems/bootstrap-sass/CVE-2018-20676.yml
@@ -0,0 +1,31 @@
+---
+gem: bootstrap-sass
+cve: 2018-20676
+ghsa: 3mgp-fx93-9xv5
+url: https://github.com/advisories/GHSA-3mgp-fx93-9xv5
+title: XSS vulnerability that affects bootstrap
+date: 2019-01-17
+description: |
+  In Bootstrap before 3.4.0, XSS is possible in the tooltip
+  data-viewport  attribute.
+cvss_v2: 4.3
+cvss_v3: 6.1
+patched_versions:
+  - ">= 3.4.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-20676
+    - https://github.com/twbs/bootstrap/issues/27044
+    - https://github.com/twbs/bootstrap/issues/27915#issuecomment-452140906
+    - https://github.com/twbs/bootstrap/issues/27915#issuecomment-452196628
+    - https://github.com/twbs/bootstrap/pull/27047
+    - https://access.redhat.com/errata/RHBA-2019:1076
+    - https://access.redhat.com/errata/RHBA-2019:1570
+    - https://access.redhat.com/errata/RHSA-2019:1456
+    - https://access.redhat.com/errata/RHSA-2019:3023
+    - https://access.redhat.com/errata/RHSA-2020:0132
+    - https://access.redhat.com/errata/RHSA-2020:0133
+    - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@
+    - https://github.com/twbs/bootstrap/commit/2a5ba23ce8f041f3548317acc992ed8a736b609d
+    - https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0
+    - https://github.com/advisories/GHSA-3mgp-fx93-9xv5
diff --git a/gems/bootstrap-sass/CVE-2018-20677.yml b/gems/bootstrap-sass/CVE-2018-20677.yml
new file mode 100644
index 0000000000..5bfb9f6f6c
--- /dev/null
+++ b/gems/bootstrap-sass/CVE-2018-20677.yml
@@ -0,0 +1,32 @@
+---
+gem: bootstrap-sass
+cve: 2018-20677
+ghsa: ph58-4vrj-w6hr
+url: https://github.com/advisories/GHSA-ph58-4vrj-w6hr
+title: bootstrap Cross-site Scripting vulnerability
+date: 2019-01-17
+description: |
+  In Bootstrap before 3.4.0, XSS is possible in the affix
+  configuration target property.
+cvss_v2: 4.3
+cvss_v3: 6.1
+patched_versions:
+  - ">= 3.4.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-20677
+    - https://github.com/twbs/bootstrap/issues/27045
+    - https://github.com/twbs/bootstrap/issues/27915#issuecomment-452140906
+    - https://github.com/twbs/bootstrap/issues/27915#issuecomment-452196628
+    - https://github.com/twbs/bootstrap/pull/27047
+    - https://access.redhat.com/errata/RHBA-2019:1076
+    - https://access.redhat.com/errata/RHBA-2019:1570
+    - https://access.redhat.com/errata/RHSA-2019:1456
+    - https://access.redhat.com/errata/RHSA-2019:3023
+    - https://access.redhat.com/errata/RHSA-2020:0132
+    - https://access.redhat.com/errata/RHSA-2020:0133
+    - https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@
+    - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@
+    - https://github.com/twbs/bootstrap/commit/2a5ba23ce8f041f3548317acc992ed8a736b609d
+    - https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0
+    - https://github.com/advisories/GHSA-ph58-4vrj-w6hr
diff --git a/gems/bootstrap-sass/CVE-2019-10842.yml b/gems/bootstrap-sass/CVE-2019-10842.yml
index 4a585a7a53..e7d549149f 100644
--- a/gems/bootstrap-sass/CVE-2019-10842.yml
+++ b/gems/bootstrap-sass/CVE-2019-10842.yml
@@ -20,6 +20,6 @@ description: |
   Cloudflare.)
 cvss_v3: 9.8
 unaffected_versions:
-- "<= 3.2.0.2"
+  - "<= 3.2.0.2"
 patched_versions:
-- ">= 3.2.0.4"
+  - ">= 3.2.0.4"
diff --git a/gems/bootstrap-sass/CVE-2019-8331.yml b/gems/bootstrap-sass/CVE-2019-8331.yml
index 9789900146..2f0ed95125 100644
--- a/gems/bootstrap-sass/CVE-2019-8331.yml
+++ b/gems/bootstrap-sass/CVE-2019-8331.yml
@@ -11,7 +11,7 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 6.1
 patched_versions:
-- '>= 3.4.1'
+  - ">= 3.4.1"
 related:
   url:
-  - https://github.com/twbs/bootstrap-sass/releases/tag/v3.4.1
+    - https://github.com/twbs/bootstrap-sass/releases/tag/v3.4.1
diff --git a/gems/bootstrap-sass/CVE-2024-6484.yml b/gems/bootstrap-sass/CVE-2024-6484.yml
new file mode 100644
index 0000000000..48cf21eccf
--- /dev/null
+++ b/gems/bootstrap-sass/CVE-2024-6484.yml
@@ -0,0 +1,23 @@
+---
+gem: bootstrap-sass
+cve: 2024-6484
+ghsa: 9mvj-f7w8-pvh2
+url: https://github.com/advisories/GHSA-9mvj-f7w8-pvh2
+title: Bootstrap Cross-Site Scripting (XSS) vulnerability
+date: 2024-07-11
+description: |
+  A vulnerability has been identified in Bootstrap that exposes users
+  to Cross-Site Scripting (XSS) attacks. The issue is present in the
+  carousel component, where the data-slide and data-slide-to attributes
+  can be exploited through the href attribute of an <a> tag due to
+  inadequate sanitization. This vulnerability could potentially enable
+  attackers to execute arbitrary JavaScript within the victim's browser.
+cvss_v3: 6.4
+unaffected_versions:
+  - "< 2.0.0"
+notes: Never patched
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-6484
+    - https://www.herodevs.com/vulnerability-directory/cve-2024-6484
+    - https://github.com/advisories/GHSA-9mvj-f7w8-pvh2
diff --git a/gems/bootstrap-wysihtml5-rails/CVE-2019-19919.yml b/gems/bootstrap-wysihtml5-rails/CVE-2019-19919.yml
new file mode 100644
index 0000000000..aadd24f061
--- /dev/null
+++ b/gems/bootstrap-wysihtml5-rails/CVE-2019-19919.yml
@@ -0,0 +1,21 @@
+---
+gem: bootstrap-wysihtml5-rails
+cve: 2019-19919
+ghsa: w457-6q6x-cgp9
+url: https://github.com/advisories/GHSA-w457-6q6x-cgp9
+title: Prototype Pollution in handlebars
+date: 2019-12-26
+description: |
+  The bootstrap-wysihtml5-rails gem includes the vendored JavaScript library 'handlebars.js'.
+  Versions 0.3.3.7-0.3.3.8 include handlebars 3.0.2, and versions 0.3.3.5-0.3.3.6 include handlebars 1.3.0.
+
+  Versions Affected: 0.3.3.5-0.3.3.8
+  Not affected: < 0.3.3.5
+  Fixed Versions: None
+
+  Versions of handlebars prior to 3.0.8 or 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution.
+  Templates may alter an Objects' __proto__ and __defineGetter__ properties, which may allow an attacker to execute
+  arbitrary code through crafted payloads.
+cvss_v3: 9.8
+unaffected_versions:
+  - "< 0.3.3.5"
diff --git a/gems/bootstrap/CVE-2016-10735.yml b/gems/bootstrap/CVE-2016-10735.yml
index 0625f69a95..8d8d9e8f71 100644
--- a/gems/bootstrap/CVE-2016-10735.yml
+++ b/gems/bootstrap/CVE-2016-10735.yml
@@ -1,6 +1,7 @@
 ---
 gem: bootstrap
 cve: 2016-10735
+ghsa: 4p24-vmcr-4gqj
 url: https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2/
 title: XSS vulnerability via data-target in bootstrap
 date: 2016-07-27
@@ -10,8 +11,7 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 6.1
 patched_versions:
-- '>= 4.0.0-beta.2'
-
+  - ">= 4.0.0-beta.2"
 related:
   url:
-  - https://github.com/twbs/bootstrap/issues/20184
+    - https://github.com/twbs/bootstrap/issues/20184
diff --git a/gems/bootstrap/CVE-2018-14040.yml b/gems/bootstrap/CVE-2018-14040.yml
index ea586807a9..8b45d5be03 100644
--- a/gems/bootstrap/CVE-2018-14040.yml
+++ b/gems/bootstrap/CVE-2018-14040.yml
@@ -1,6 +1,7 @@
 ---
 gem: bootstrap
 cve: 2018-14040
+ghsa: 3wqf-4x89-9g79
 url: https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2/
 title: XSS vulnerabilities via data-parent, data-target, data-container in bootstrap
 date: 2018-07-03
@@ -11,11 +12,13 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 6.1
 patched_versions:
-- '>= 4.1.2'
-
+  - ">= 4.1.2"
 related:
   cve:
-  - 2018-14041
-  - 2018-14042
+    - 2018-14041
+    - 2018-14042
   url:
-  - https://github.com/twbs/bootstrap/issues/26423
+    - https://nvd.nist.gov/vuln/detail/cve-2018-14040
+    - https://github.com/twbs/bootstrap/issues/26423
+    - https://github.com/twbs/bootstrap/pull/26630
+    - https://github.com/advisories/GHSA-3wqf-4x89-9g79
diff --git a/gems/bootstrap/CVE-2018-14041.yml b/gems/bootstrap/CVE-2018-14041.yml
new file mode 100644
index 0000000000..141d11be9b
--- /dev/null
+++ b/gems/bootstrap/CVE-2018-14041.yml
@@ -0,0 +1,28 @@
+---
+gem: bootstrap
+cve: 2018-14041
+ghsa: 3wqf-4x89-9g79
+url: https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2
+title: Bootstrap vulnerable to Cross-Site Scripting (XSS)
+date: 2018-09-13
+description: |
+  In Bootstrap before 4.1.2, XSS is possible in the collapse
+  data-parent attribute.
+cvss_v3: 6.1
+patched_versions:
+  - ">= 4.1.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-14040
+    - https://github.com/twbs/bootstrap/issues/26625
+    - https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2
+    - https://github.com/twbs/bootstrap/issues/26423
+    - https://github.com/twbs/bootstrap/issues/26628
+    - https://github.com/twbs/bootstrap/pull/26630
+    - https://github.com/twbs/bootstrap/commit/149096016f70fd815540d62c0989fd99cdc809e0
+    - https://github.com/twbs/bootstrap/blob/v3.4.1/js/collapse.js#L140
+    - https://lists.debian.org/debian-lts-announce/2018/08/msg00027.html
+    - https://seclists.org/bugtraq/2019/May/18
+    - https://www.oracle.com/security-alerts/cpuApr2021.html
+    - https://www.tenable.com/security/tns-2021-14
+    - https://github.com/advisories/GHSA-3wqf-4x89-9g79
diff --git a/gems/bootstrap/CVE-2018-14042.yml b/gems/bootstrap/CVE-2018-14042.yml
new file mode 100644
index 0000000000..636517f620
--- /dev/null
+++ b/gems/bootstrap/CVE-2018-14042.yml
@@ -0,0 +1,38 @@
+---
+gem: bootstrap
+cve: 2018-14042
+ghsa: 7mvr-5x2g-wfc8
+url: https://github.com/twbs/bootstrap/issues/26423
+title: Bootstrap Cross-site Scripting vulnerability
+date: 2018-09-13
+description: |
+  In Bootstrap before 4.1.2, XSS is possible in the data-container property
+  of tooltip.  This is similar to CVE-2018-14041.
+cvss_v3: 6.1
+patched_versions:
+  - ">= 4.1.2"
+related:
+  cve:
+    - 2018-14041
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-14042
+    - https://github.com/twbs/bootstrap/issues/26423
+    - https://github.com/twbs/bootstrap/issues/26628
+    - https://github.com/twbs/bootstrap/pull/26630
+    - https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2/
+    - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@
+    - https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@
+    - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@
+    - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@
+    - https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@
+    - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@
+    - https://seclists.org/bugtraq/2019/May/18
+    - https://www.oracle.com/security-alerts/cpuApr2021.html
+    - http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html
+    - http://seclists.org/fulldisclosure/2019/May/10
+    - http://seclists.org/fulldisclosure/2019/May/11
+    - http://seclists.org/fulldisclosure/2019/May/13
+    - https://github.com/advisories/GHSA-7mvr-5x2g-wfc8
+    - https://github.com/twbs/bootstrap/issues/26428
+    - https://github.com/twbs/bootstrap/commit/2d90d369bbc2bd2647620246c55cec8c4705e3d0
+    - https://www.tenable.com/security/tns-2021-14
diff --git a/gems/bootstrap/CVE-2018-20676.yml b/gems/bootstrap/CVE-2018-20676.yml
new file mode 100644
index 0000000000..172ed3961c
--- /dev/null
+++ b/gems/bootstrap/CVE-2018-20676.yml
@@ -0,0 +1,31 @@
+---
+gem: bootstrap
+cve: 2018-20676
+ghsa: 3mgp-fx93-9xv5
+url: https://github.com/advisories/GHSA-3mgp-fx93-9xv5
+title: XSS vulnerability that affects bootstrap
+date: 2019-01-17
+description: |
+  In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport
+  attribute.
+cvss_v2: 4.3
+cvss_v3: 6.1
+patched_versions:
+  - ">= 3.4.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-20676
+    - https://github.com/twbs/bootstrap/issues/27044
+    - https://github.com/twbs/bootstrap/issues/27915#issuecomment-452140906
+    - https://github.com/twbs/bootstrap/issues/27915#issuecomment-452196628
+    - https://github.com/twbs/bootstrap/pull/27047
+    - https://access.redhat.com/errata/RHBA-2019:1076
+    - https://access.redhat.com/errata/RHBA-2019:1570
+    - https://access.redhat.com/errata/RHSA-2019:1456
+    - https://access.redhat.com/errata/RHSA-2019:3023
+    - https://access.redhat.com/errata/RHSA-2020:0132
+    - https://access.redhat.com/errata/RHSA-2020:0133
+    - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@
+    - https://github.com/twbs/bootstrap/commit/2a5ba23ce8f041f3548317acc992ed8a736b609d
+    - https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0
+    - https://github.com/advisories/GHSA-3mgp-fx93-9xv5
diff --git a/gems/bootstrap/CVE-2018-20677.yml b/gems/bootstrap/CVE-2018-20677.yml
new file mode 100644
index 0000000000..82bf4aa832
--- /dev/null
+++ b/gems/bootstrap/CVE-2018-20677.yml
@@ -0,0 +1,32 @@
+---
+gem: bootstrap
+cve: 2018-20677
+ghsa: ph58-4vrj-w6hr
+url: https://github.com/advisories/GHSA-ph58-4vrj-w6hr
+title: bootstrap Cross-site Scripting vulnerability
+date: 2019-01-17
+description: |
+  In Bootstrap before 3.4.0, XSS is possible in the affix
+  configuration target property.
+cvss_v2: 4.3
+cvss_v3: 6.1
+patched_versions:
+  - ">= 3.4.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-20677
+    - https://github.com/twbs/bootstrap/issues/27045
+    - https://github.com/twbs/bootstrap/issues/27915#issuecomment-452140906
+    - https://github.com/twbs/bootstrap/issues/27915#issuecomment-452196628
+    - https://github.com/twbs/bootstrap/pull/27047
+    - https://access.redhat.com/errata/RHBA-2019:1076
+    - https://access.redhat.com/errata/RHBA-2019:1570
+    - https://access.redhat.com/errata/RHSA-2019:1456
+    - https://access.redhat.com/errata/RHSA-2019:3023
+    - https://access.redhat.com/errata/RHSA-2020:0132
+    - https://access.redhat.com/errata/RHSA-2020:0133
+    - https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@
+    - https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@
+    - https://github.com/twbs/bootstrap/commit/2a5ba23ce8f041f3548317acc992ed8a736b609d
+    - https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0
+    - https://github.com/advisories/GHSA-ph58-4vrj-w6hr
diff --git a/gems/bootstrap/CVE-2019-8331.yml b/gems/bootstrap/CVE-2019-8331.yml
index 142a0b6036..764c4eeb78 100644
--- a/gems/bootstrap/CVE-2019-8331.yml
+++ b/gems/bootstrap/CVE-2019-8331.yml
@@ -11,7 +11,7 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 6.1
 patched_versions:
-- '>= 4.3.1'
+  - ">= 4.3.1"
 related:
   url:
-  - https://github.com/twbs/bootstrap-rubygem/releases/tag/v4.3.1
+    - https://github.com/twbs/bootstrap-rubygem/releases/tag/v4.3.1
diff --git a/gems/bootstrap/CVE-2024-6484.yml b/gems/bootstrap/CVE-2024-6484.yml
new file mode 100644
index 0000000000..1bdcc96dce
--- /dev/null
+++ b/gems/bootstrap/CVE-2024-6484.yml
@@ -0,0 +1,24 @@
+---
+gem: bootstrap
+cve: 2024-6484
+ghsa: 9mvj-f7w8-pvh2
+url: https://github.com/advisories/GHSA-9mvj-f7w8-pvh2
+title: Bootstrap Cross-Site Scripting (XSS) vulnerability
+date: 2024-07-11
+description: |
+  A vulnerability has been identified in Bootstrap that exposes users
+  to Cross-Site Scripting (XSS) attacks. The issue is present in the
+  carousel component, where the data-slide and data-slide-to attributes
+  can be exploited through the href attribute of an <a> tag due to
+  inadequate sanitization. This vulnerability could potentially enable
+  attackers to execute arbitrary JavaScript within the victim's browser.
+cvss_v3: 6.4
+unaffected_versions:
+  - "< 2.0.0"
+patched_versions:
+  - "> 3.4.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-6484
+    - https://www.herodevs.com/vulnerability-directory/cve-2024-6484
+    - https://github.com/advisories/GHSA-9mvj-f7w8-pvh2
diff --git a/gems/bootstrap/CVE-2024-6531.yml b/gems/bootstrap/CVE-2024-6531.yml
new file mode 100644
index 0000000000..8ff6b99c6c
--- /dev/null
+++ b/gems/bootstrap/CVE-2024-6531.yml
@@ -0,0 +1,24 @@
+---
+gem: bootstrap
+cve: 2024-6531
+ghsa: vc8w-jr9v-vj7f
+url: https://github.com/advisories/GHSA-vc8w-jr9v-vj7f
+title: Bootstrap Cross-Site Scripting (XSS) vulnerability
+date: 2024-07-11
+description: |
+  A vulnerability has been identified in Bootstrap that exposes users
+  to Cross-Site Scripting (XSS) attacks. The issue is present in the
+  carousel component, where the data-slide and data-slide-to attributes
+  can be exploited through the href attribute of an <a> tag due to
+  inadequate sanitization. This vulnerability could potentially enable
+  attackers to execute arbitrary JavaScript within the victim's browser.
+cvss_v3: 6.4
+unaffected_versions:
+  - "< 4.0.0"
+patched_versions:
+  - "> 4.6.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-6531
+    - https://www.herodevs.com/vulnerability-directory/cve-2024-6531
+    - https://github.com/advisories/GHSA-vc8w-jr9v-vj7f
diff --git a/gems/brakeman/CVE-2019-18409.yml b/gems/brakeman/CVE-2019-18409.yml
index 881ac159ec..6191c9264d 100644
--- a/gems/brakeman/CVE-2019-18409.yml
+++ b/gems/brakeman/CVE-2019-18409.yml
@@ -13,11 +13,11 @@ description: |
 cvss_v2: 4.6
 cvss_v3: 7.8
 patched_versions:
-- '>= 4.7.1'
+  - ">= 4.7.1"
 
 unaffected_versions:
-- <= 4.4.0
+  - "<= 4.4.0"
 
 related:
   url:
-  - https://github.com/zenspider/ruby_parser-legacy/issues/1
+    - https://github.com/zenspider/ruby_parser-legacy/issues/1
diff --git a/gems/brbackup/CVE-2014-5004.yml b/gems/brbackup/CVE-2014-5004.yml
index 1d88e14b6d..f46a9a691b 100644
--- a/gems/brbackup/CVE-2014-5004.yml
+++ b/gems/brbackup/CVE-2014-5004.yml
@@ -2,10 +2,23 @@
 gem: brbackup
 cve: 2014-5004
 osvdb: 108901
-url: https://nvd.nist.gov/vuln/detail/CVE-2014-5004
+ghsa: vqcm-7f7f-r539
+url: http://www.vapid.dhs.org/advisories/brbackup-0.1.1.html
 title: brbackup Gem for Ruby Process List Local Plaintext Password Disclosure
 date: 2014-07-09
 description: |
   brbackup Gem for Ruby contains a flaw that is due to the program exposing
   password information in plaintext in the process list. This may allow a
   local attacker to gain access to password information.
+cvss_v2: 2.1
+cvss_v3: 7.8
+notes: "Never patched"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-5004
+    - http://www.vapid.dhs.org/advisories/brbackup-0.1.1.html
+    - http://www.vapidlabs.com/advisory.php?v=25
+    - http://www.openwall.com/lists/oss-security/2014/07/10/6
+    - http://www.openwall.com/lists/oss-security/2014/07/17/5
+    - http://www.securityfocus.com/bid/68506
+    - https://web.archive.org/web/20200229055655/https://www.securityfocus.com/bid/68506/
diff --git a/gems/brbackup/OSVDB-108899.yml b/gems/brbackup/OSVDB-108899.yml
index 3309eb7e83..82c4db0351 100644
--- a/gems/brbackup/OSVDB-108899.yml
+++ b/gems/brbackup/OSVDB-108899.yml
@@ -1,7 +1,7 @@
 ---
 gem: brbackup
 osvdb: 108899
-url: http://osvdb.org/show/osvdb/108899
+url: https://www.openwall.com/lists/oss-security/2014/07/10/6
 title: brbackup Gem for Ruby /lib/brbackup.rb name Parameter SQL Injection
 date: 2014-07-09
 description: |
@@ -10,3 +10,12 @@ description: |
   properly sanitizing user-supplied input to the 'name' parameter. This may
   allow a remote attacker to inject or manipulate SQL queries in the back-end
   database, allowing for the manipulation or disclosure of arbitrary data.
+notes: "Never patched"
+related:
+  url:
+    - https://www.openwall.com/lists/oss-security/2014/07/10/6
+    - https://raw.githubusercontent.com/codesake/codesake-dawn/master/Roadmap.md
+    - https://github.com/tongueroo/brbackup/blob/master/lib/brbackup.rb
+    - http://www.vapid.dhs.org/advisories/brbackup-0.1.1.html
+    - http://www.vapidlabs.com/advisory.php?v=25
+    - http://osvdb.org/show/osvdb/108899
diff --git a/gems/brbackup/OSVDB-108900.yml b/gems/brbackup/OSVDB-108900.yml
index 75b32fa44b..26ecee0229 100644
--- a/gems/brbackup/OSVDB-108900.yml
+++ b/gems/brbackup/OSVDB-108900.yml
@@ -1,12 +1,20 @@
 ---
 gem: brbackup
 osvdb: 108900
-url: http://osvdb.org/show/osvdb/108900
-title: brbackup Gem for Ruby dbuser Variable Shell Metacharacter Injection Remote
-  Command Execution
+url: https://www.openwall.com/lists/oss-security/2014/07/10/6
+title: brbackup Gem for Ruby dbuser Variable Shell Metacharacter
+  Injection Remote Command Execution
 date: 2014-07-09
 description: |
   brbackup Gem for Ruby contains a flaw that is triggered as input passed
   via the 'dbuser' variable is not properly sanitized. This may allow a
   remote attacker to inject shell metacharacters and execute arbitrary
   commands.
+notes: "Never patched"
+related:
+  url:
+    - https://www.openwall.com/lists/oss-security/2014/07/10/6
+    - https://raw.githubusercontent.com/codesake/codesake-dawn/master/Roadmap.md
+    - http://www.vapid.dhs.org/advisories/brbackup-0.1.1.html
+    - http://www.vapidlabs.com/advisory.php?v=25
+    - http://osvdb.org/show/osvdb/108900
diff --git a/gems/bson/CVE-2015-4411.yml b/gems/bson/CVE-2015-4411.yml
index 9039b9d1cf..65e2ff1ae6 100644
--- a/gems/bson/CVE-2015-4411.yml
+++ b/gems/bson/CVE-2015-4411.yml
@@ -12,8 +12,8 @@ description: |
   fix to CVE-2015-4410.
 cvss_v3: 7.5
 patched_versions:
-- '>= 3.0.4'
+  - ">= 3.0.4"
 
 related:
   cve:
-  - 2015-4410
+    - 2015-4410
diff --git a/gems/bson/CVE-2015-4412.yml b/gems/bson/CVE-2015-4412.yml
index 84052beeda..1bf5b43ee9 100644
--- a/gems/bson/CVE-2015-4412.yml
+++ b/gems/bson/CVE-2015-4412.yml
@@ -5,13 +5,14 @@ ghsa: h6rj-8r3c-9gpj
 url: http://sakurity.com/blog/2015/06/04/mongo_ruby_regexp.html
 title: Data Injection Vulnerability in bson Rubygem
 date: 2015-06-04
-description: A flaw in the ObjectId validation regular expression can enable attackers
+description: |
+  A flaw in the ObjectId validation regular expression can enable attackers
   to inject arbitrary information into a given BSON object.
 cvss_v3: 9.8
 patched_versions:
-- "~> 1.12.3"
-- ">= 3.0.4"
+  - "~> 1.12.3"
+  - ">= 3.0.4"
 related:
   url:
-  - https://github.com/mongodb/mongo-ruby-driver/compare/6ae981167759d5819ba3d41e374e5b2af5b79077~1...9859a3ab9773a8a883eb8438b665a921cc991c71
-  - https://github.com/mongodb/bson-ruby/compare/7446d7c6764dfda8dc4480ce16d5c023e74be5ca...28f34978a85b689a4480b4d343389bf4886522e7
+    - https://github.com/mongodb/mongo-ruby-driver/compare/6ae981167759d5819ba3d41e374e5b2af5b79077~1...9859a3ab9773a8a883eb8438b665a921cc991c71
+    - https://github.com/mongodb/bson-ruby/compare/7446d7c6764dfda8dc4480ce16d5c023e74be5ca...28f34978a85b689a4480b4d343389bf4886522e7
diff --git a/gems/builder/OSVDB-95668.yml b/gems/builder/OSVDB-95668.yml
index 0e3b7d0e93..e6b9bc1feb 100644
--- a/gems/builder/OSVDB-95668.yml
+++ b/gems/builder/OSVDB-95668.yml
@@ -1,7 +1,7 @@
 ---
 gem: builder
 osvdb: 95668
-url: http://osvdb.org/show/osvdb/95668
+url: https://my.diffend.io/gems/builder/2.1.1/2.1.2
 title: Builder Gem for Ruby Tag Name Handling Private Method Exposure
 date: 2007-06-15
 description: |
@@ -10,4 +10,8 @@ description: |
   method with that name. With a specially crafted file, a context-dependent
   attacker can call private methods and manipulate data.
 patched_versions:
-- '>= 2.1.2'
+  - ">= 2.1.2"
+related:
+  url:
+    - https://my.diffend.io/gems/builder/2.1.1/2.1.2
+    - http://osvdb.org/show/osvdb/95668
diff --git a/gems/bundler/CVE-2013-0334.yml b/gems/bundler/CVE-2013-0334.yml
index 7aa6014c3f..cc813e5bd2 100644
--- a/gems/bundler/CVE-2013-0334.yml
+++ b/gems/bundler/CVE-2013-0334.yml
@@ -2,11 +2,12 @@
 gem: bundler
 cve: 2013-0334
 osvdb: 110004
+ghsa: 49jx-9cmc-xjxm
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0334
-title: "CVE-2013-0334 rubygem-bundler: 'bundle install' may install a gem from a source\
-  \ other than expected"
+title: "CVE-2013-0334 rubygem-bundler: 'bundle install' may install a gem from a source other than expected"
 date: 2014-08-13
-description: Bundler before 1.7, when multiple top-level source lines are used, allows
+description: |
+  Bundler before 1.7, when multiple top-level source lines are used, allows
   remote attackers to install arbitrary gems by creating a gem with the same name
   as another gem in a different source. A flaw was found in the way Bundler handled
   gems available from multiple sources. An attacker with access to one of the sources
@@ -15,4 +16,4 @@ description: Bundler before 1.7, when multiple top-level source lines are used,
   malicious gem.
 cvss_v2: 5.0
 patched_versions:
-- '>= 1.7.0'
+  - ">= 1.7.0"
diff --git a/gems/bundler/CVE-2016-7954.yml b/gems/bundler/CVE-2016-7954.yml
new file mode 100644
index 0000000000..ebcdbaf30a
--- /dev/null
+++ b/gems/bundler/CVE-2016-7954.yml
@@ -0,0 +1,40 @@
+---
+gem: bundler
+cve: 2016-7954
+ghsa: jvgm-pfqv-887x
+url: https://collectiveidea.com/blog/archives/2016/10/06/bundlers-multiple-source-security-vulnerability
+title: Allows an attacker to inject arbitrary code into your application
+  via any secondary Gem source declared in your Gemfile
+date: 2016-10-06
+description: |
+  Bundler 1.x might allow remote attackers to inject arbitrary Ruby
+  code into an application by leveraging a Gem name collision on a
+  secondary source.
+
+  Please note that this vulnerability only applies for Ruby
+  projects using Bundler < 2.0 with Gemfiles having 2 or more
+  "source" lines.
+
+  In other words, if the user's Gemfile does not use multiple
+  sources, this vulnerability can be ignored.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - ">= 2.0.0"
+related:
+  cve:
+    - 2013-0334
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2016-7954
+    - https://collectiveidea.com/blog/archives/2016/10/06/bundlers-multiple-source-security-vulnerability
+    - https://bundler.io/blog/2014/08/14/bundler-may-install-gems-from-a-different-source-than-expected-cve-2013-0334.html
+    - https://github.com/advisories/GHSA-jvgm-pfqv-887x
+    - https://seclists.org/oss-sec/2016/q4/25
+    - https://seclists.org/oss-sec/2016/q4/18
+    - https://seclists.org/oss-sec/2016/q4/20
+    - https://github.com/rubygems/bundler/pull/3696
+    - https://github.com/rubygems/bundler/issues/3671
+    - https://github.com/rubygems/bundler/issues/5274
+    - https://github.com/rubygems/bundler/issues/5051
+    - https://github.com/rubygems/bundler/issues/5062
+notes: "NOTE: This might overlap CVE-2013-0334.; GHSA is unreviewed"
diff --git a/gems/bundler/CVE-2019-3881.yml b/gems/bundler/CVE-2019-3881.yml
index 31c4bf5f0d..2109f56762 100644
--- a/gems/bundler/CVE-2019-3881.yml
+++ b/gems/bundler/CVE-2019-3881.yml
@@ -13,7 +13,7 @@ description: |
   in this directory that would be later loaded and executed.
 cvss_v3: 7.0
 patched_versions:
-- '>= 2.1.0'
+  - ">= 2.1.0"
 
 unaffected_versions:
-- < 1.14.0
+  - "< 1.14.0"
diff --git a/gems/bundler/CVE-2020-36327.yml b/gems/bundler/CVE-2020-36327.yml
index aca8cae224..54db49f45f 100644
--- a/gems/bundler/CVE-2020-36327.yml
+++ b/gems/bundler/CVE-2020-36327.yml
@@ -13,18 +13,18 @@ description: |
   explicitly depended on by the application.
 cvss_v3: 8.8
 patched_versions:
-- '>= 2.2.18'
-- 2.2.10
+  - "= 2.2.10"
+  - ">= 2.2.18"
 
 unaffected_versions:
-- < 1.16.0
+  - "< 1.16.0"
 
 related:
   cve:
-  - 2021-24105
+    - 2021-24105
   url:
-  - https://bundler.io/blog/2021/02/15/a-more-secure-bundler-we-fixed-our-source-priorities.html
-  - https://mensfeld.pl/2021/02/rubygems-dependency-confusion-attack-side-of-things/
-  - https://www.zofrex.com/blog/2021/04/29/bundler-still-vulnerable-dependency-confusion-cve-2020-36327/
-  - https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-24105
-  - https://github.com/rubygems/rubygems/pull/4609
+    - https://bundler.io/blog/2021/02/15/a-more-secure-bundler-we-fixed-our-source-priorities.html
+    - https://mensfeld.pl/2021/02/rubygems-dependency-confusion-attack-side-of-things/
+    - https://www.zofrex.com/blog/2021/04/29/bundler-still-vulnerable-dependency-confusion-cve-2020-36327/
+    - https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-24105
+    - https://github.com/rubygems/rubygems/pull/4609
diff --git a/gems/bundler/CVE-2021-43809.yml b/gems/bundler/CVE-2021-43809.yml
index 3e12f7791a..b3f8e6fdb7 100644
--- a/gems/bundler/CVE-2021-43809.yml
+++ b/gems/bundler/CVE-2021-43809.yml
@@ -5,7 +5,7 @@ ghsa: fj7f-vq84-fh43
 url: https://github.com/rubygems/rubygems/security/advisories/GHSA-fj7f-vq84-fh43
 title: Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile
 date: 2021-12-08
-description: |-
+description: |
   In `bundler` versions before 2.2.33, when working with untrusted and apparently harmless
   `Gemfile`'s, it is not expected that they lead to execution of external code, unless
   that's explicit in the ruby code inside the `Gemfile` itself. However, if the `Gemfile`
@@ -60,10 +60,10 @@ description: |-
   can contain arbitrary ruby code.
 cvss_v3: 6.7
 patched_versions:
-- ">= 2.2.33"
+  - ">= 2.2.33"
 related:
   url:
-  - https://github.com/rubygems/rubygems/pull/5142
-  - https://github.com/rubygems/rubygems/commit/0fad1ccfe9dd7a3c5b82c1496df3c2b4842870d3
-  - https://github.com/rubygems/rubygems/commit/a4f2f8ac17e6ce81c689527a8b6f14381060d95f
-  - https://cwe.mitre.org/data/definitions/88.html
+    - https://github.com/rubygems/rubygems/pull/5142
+    - https://github.com/rubygems/rubygems/commit/0fad1ccfe9dd7a3c5b82c1496df3c2b4842870d3
+    - https://github.com/rubygems/rubygems/commit/a4f2f8ac17e6ce81c689527a8b6f14381060d95f
+    - https://cwe.mitre.org/data/definitions/88.html
diff --git a/gems/bundler/OSVDB-115090.yml b/gems/bundler/OSVDB-115090.yml
index fdb8b1f6e7..fd3910c068 100644
--- a/gems/bundler/OSVDB-115090.yml
+++ b/gems/bundler/OSVDB-115090.yml
@@ -1,7 +1,7 @@
 ---
 gem: bundler
 osvdb: 115090
-url: http://www.osvdb.org/show/osvdb/115090
+url: https://github.com/rubygems/bundler/releases/tag/v1.3.0.pre.8
 title: Bundler Gem for Ruby Missing SSL Certificate Validation MitM Spoofing
 date: 2013-02-12
 description: |
@@ -10,4 +10,10 @@ description: |
   an attacker with the ability to intercept network traffic (e.g. MiTM, DNS
   cache poisoning) can disclose and optionally manipulate transmitted data.
 patched_versions:
-- '>= 1.3.0.pre.8'
+  - ">= 1.3.0.pre.8"
+related:
+  url:
+    - https://github.com/rubygems/bundler/releases/tag/v1.3.0.pre.8
+    - https://my.diffend.io/gems/bundler/1.3.0.pre.7/1.3.0.pre.8
+    - https://my.diffend.io/gems/bundler/versions/1.0.0.beta.8
+    - http://www.osvdb.org/show/osvdb/115090
diff --git a/gems/bundler/OSVDB-115091.yml b/gems/bundler/OSVDB-115091.yml
index 354412d459..fae79e7aa6 100644
--- a/gems/bundler/OSVDB-115091.yml
+++ b/gems/bundler/OSVDB-115091.yml
@@ -1,13 +1,19 @@
 ---
 gem: bundler
 osvdb: 115091
-url: http://www.osvdb.org/show/osvdb/115091
-title: Bundler Gem for Ruby Redirection Remote HTTP Basic Authentication Credential
-  Disclosure
+url: https://github.com/rubygems/bundler/releases/tag/v1.3.0.pre.8
+title: Bundler Gem for Ruby Redirection Remote
+  HTTP Basic Authentication Credential Disclosure
 date: 2013-02-12
 description: |
   Bundler Gem for Ruby contains a flaw that is triggered during the
-  redirection to other hosts. This may allow a remote attacker to gain access
-  to HTTP basic authentication credential information.
+  redirection to other hosts. This may allow a remote attacker to
+  gain access to HTTP basic authentication credential information.
 patched_versions:
-- '>= 1.3.0.pre.8'
+  - ">= 1.3.0.pre.8"
+related:
+  url:
+    - https://github.com/rubygems/bundler/releases/tag/v1.3.0.pre.8
+    - https://my.diffend.io/gems/bundler/1.3.0.pre.7/1.3.0.pre.8
+    - https://my.diffend.io/gems/bundler/versions/1.0.0.beta.8
+    - http://www.osvdb.org/show/osvdb/115091
diff --git a/gems/bundler/OSVDB-115917.yml b/gems/bundler/OSVDB-115917.yml
index dde88714cd..f3179d59c9 100644
--- a/gems/bundler/OSVDB-115917.yml
+++ b/gems/bundler/OSVDB-115917.yml
@@ -1,13 +1,21 @@
 ---
 gem: bundler
 osvdb: 115917
-url: http://www.osvdb.org/show/osvdb/115917
-title: Bundler Gem for Ruby install Command Process Listing Local Plaintext Credential
-  Disclosure
+url: https://my.diffend.io/gems/bundler/versions/1.0.0.beta.8
+title: Bundler Gem for Ruby install Command Process Listing
+  Local Plaintext Credential Disclosure
 date: 2011-09-20
 description: |
   Bundler Gem for Ruby contains a flaw that is due to the program listing
   credential information in plaintext in the install command process listing.
   This may allow a local attacker to gain access to credential information.
 patched_versions:
-- '>= 1.1.rc'
+  - ">= 1.1.rc"
+related:
+  url:
+    - https://my.diffend.io/gems/bundler/versions/1.0.0.beta.8
+    - https://my.diffend.io/gems/bundler/versions/1.1.rc
+    - https://github.com/rubygems/bundler/commit/95bb14483cf8af857dc901c22db48cd3057d243e
+    - https://github.com/rubygems/bundler/pull/1463
+    - https://github.com/rubygems/bundler/issues/1440
+    - http://www.osvdb.org/show/osvdb/115917
diff --git a/gems/cairo/CVE-2017-7475.yml b/gems/cairo/CVE-2017-7475.yml
index f92eb661df..0a72e75868 100644
--- a/gems/cairo/CVE-2017-7475.yml
+++ b/gems/cairo/CVE-2017-7475.yml
@@ -10,4 +10,4 @@ description: |
   to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.
 cvss_v3: 5.5
 patched_versions:
-- '>= 1.15.5'
+  - ">= 1.15.5"
diff --git a/gems/camaleon_cms/CVE-2018-18260.yml b/gems/camaleon_cms/CVE-2018-18260.yml
new file mode 100644
index 0000000000..57073232c7
--- /dev/null
+++ b/gems/camaleon_cms/CVE-2018-18260.yml
@@ -0,0 +1,14 @@
+---
+gem: camaleon_cms
+cve: 2018-18260
+ghsa: 7f84-9cqf-g4j9
+url: http://packetstormsecurity.com/files/149772/CAMALEON-CMS-2.4-Cross-Site-Scripting.html
+title: Camaleon CMS vulnerable to Stored Cross-site Scripting
+date: 2022-05-13
+description: |
+  In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The
+  profile image in the User settings section can be run in the update / upload area
+  via `/admin/media/upload?actions=false`.
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 2.4"
diff --git a/gems/camaleon_cms/CVE-2021-25969.yml b/gems/camaleon_cms/CVE-2021-25969.yml
new file mode 100644
index 0000000000..8dcffe4e60
--- /dev/null
+++ b/gems/camaleon_cms/CVE-2021-25969.yml
@@ -0,0 +1,20 @@
+---
+gem: camaleon_cms
+cve: 2021-25969
+ghsa: x78v-4fvj-rg9j
+url: https://github.com/owen2345/camaleon-cms/commit/05506e9087bb05282c0bae6ccfe0283d0332ab3c
+title: Camaleon CMS Stored Cross-site Scripting vulnerability
+date: 2022-05-24
+description: |
+  In “Camaleon CMS” application, versions 0.0.1 through 2.6.0 are vulnerable
+  to stored XSS, that allows unprivileged application users to store malicious scripts
+  in the comments section of the post. These scripts are executed in a victim’s browser
+  when they open the page containing the malicious comment.
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 0.0.1"
+patched_versions:
+  - ">= 2.6.0.1"
+related:
+  url:
+    - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25969
diff --git a/gems/camaleon_cms/CVE-2021-25970.yml b/gems/camaleon_cms/CVE-2021-25970.yml
new file mode 100644
index 0000000000..8faa35c2ce
--- /dev/null
+++ b/gems/camaleon_cms/CVE-2021-25970.yml
@@ -0,0 +1,20 @@
+---
+gem: camaleon_cms
+cve: 2021-25970
+ghsa: 438x-2p9v-g8h9
+url: https://github.com/owen2345/camaleon-cms/commit/77e31bc6cdde7c951fba104aebcd5ebb3f02b030
+title: Camaleon CMS Insufficient Session Expiration vulnerability
+date: 2022-05-24
+description: |
+  Camaleon CMS 0.1.7 through 2.6.0 doesn’t terminate the active session
+  of the users, even after the admin changes the user’s password. A user that was
+  already logged in, will still have access to the application even after the password
+  was changed.
+cvss_v3: 8.8
+unaffected_versions:
+  - "< 0.1.7"
+patched_versions:
+  - ">= 2.6.0.1"
+related:
+  url:
+    - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25970
diff --git a/gems/camaleon_cms/CVE-2021-25971.yml b/gems/camaleon_cms/CVE-2021-25971.yml
new file mode 100644
index 0000000000..bd718f92c0
--- /dev/null
+++ b/gems/camaleon_cms/CVE-2021-25971.yml
@@ -0,0 +1,19 @@
+---
+gem: camaleon_cms
+cve: 2021-25971
+ghsa: r2w2-h6r8-3r53
+url: https://github.com/owen2345/camaleon-cms/commit/ab89584ab32b98a0af3d711e3f508a1d048147d2
+title: Camaleon CMS vulnerable to Uncaught Exception
+date: 2022-05-24
+description: |
+  In Camaleon CMS, versions 2.0.1 through 2.6.0 are vulnerable to an Uncaught
+  Exception. The app's media upload feature crashes permanently when an attacker with
+  a low privileged access uploads a specially crafted .svg file.
+cvss_v3: 4.3
+unaffected_versions:
+  - "< 2.0.1"
+patched_versions:
+  - ">= 2.6.0.1"
+related:
+  url:
+    - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25971
diff --git a/gems/camaleon_cms/CVE-2021-25972.yml b/gems/camaleon_cms/CVE-2021-25972.yml
new file mode 100644
index 0000000000..b68d3fc0b8
--- /dev/null
+++ b/gems/camaleon_cms/CVE-2021-25972.yml
@@ -0,0 +1,21 @@
+---
+gem: camaleon_cms
+cve: 2021-25972
+ghsa: vx6p-q4gj-x6xx
+url: https://github.com/owen2345/camaleon-cms/commit/5a252d537411fdd0127714d66c1d76069dc7e190
+title: Camaleon CMS vulnerable to Server-Side Request Forgery
+date: 2022-05-24
+description: |
+  In Camaleon CMS, versions 2.1.2.0 through 2.6.0, are vulnerable to Server-Side
+  Request Forgery (SSRF) in the media upload feature, which allows admin users to
+  fetch media files from external URLs but fails to validate URLs referencing to localhost
+  or other internal servers. This allows attackers to read files stored in the internal
+  server.
+cvss_v3: 4.9
+unaffected_versions:
+  - "< 2.1.2.0"
+patched_versions:
+  - ">= 2.6.0.1"
+related:
+  url:
+    - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25972
diff --git a/gems/camaleon_cms/CVE-2023-30145.yml b/gems/camaleon_cms/CVE-2023-30145.yml
new file mode 100644
index 0000000000..fdb28e775a
--- /dev/null
+++ b/gems/camaleon_cms/CVE-2023-30145.yml
@@ -0,0 +1,25 @@
+---
+gem: camaleon_cms
+cve: 2023-30145
+ghsa: x487-866m-p8hr
+url: http://packetstormsecurity.com/files/172593/Camaleon-CMS-2.7.0-Server-Side-Template-Injection.html
+title: Server-Side Template Injection in Camaleon CMS
+date: 2023-05-26
+description: |
+  Camaleon CMS prior to 2.7.4 was discovered to contain a Server-Side
+  Template Injection (SSTI) vulnerability via the `formats` parameter.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 2.7.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-30145
+    - https://github.com/paragbagul111/CVE-2023-30145
+    - http://packetstormsecurity.com/files/172593/Camaleon-CMS-2.7.0-Server-Side-Template-Injection.html
+    - https://github.com/owen2345/camaleon-cms/issues/1052
+    - https://github.com/owen2345/camaleon-cms/commit/4485788c544eb1aae52ca613bd9626129e3df6ee
+    - https://github.com/owen2345/camaleon-cms/releases/tag/2.7.4
+    - https://drive.google.com/file/d/11MsSYqUnDRFjcwbQKJeL9Q8nWpgVYf2r/view?usp=share_link
+    - https://portswigger.net/research/server-side-template-injection
+    - https://book.hacktricks.xyz/pentesting-web/ssti-server-side-template-injection
+    - https://github.com/advisories/GHSA-x487-866m-p8hr
diff --git a/gems/camaleon_cms/CVE-2024-46986.yml b/gems/camaleon_cms/CVE-2024-46986.yml
new file mode 100644
index 0000000000..f4f91d0635
--- /dev/null
+++ b/gems/camaleon_cms/CVE-2024-46986.yml
@@ -0,0 +1,103 @@
+---
+gem: camaleon_cms
+cve: 2024-46986
+ghsa: wmjg-vqhv-q5p5
+url: https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-wmjg-vqhv-q5p5
+title: Camaleon CMS affected by arbitrary file write to RCE (GHSL-2024-182)
+date: 2024-09-18
+description: |
+  An arbitrary file write vulnerability accessible via the upload method
+  of the `MediaController` allows authenticated users to write arbitrary
+  files to any location on the web server Camaleon CMS is running on
+  (depending on the permissions of the underlying filesystem).
+  E.g. This can lead to a delayed remote code execution in case an
+  attacker is able to write a Ruby file into the `config/initializers/`
+  subfolder of the Ruby on Rails application.
+
+  Once a user upload is started via the [upload] method, the
+  `file_upload` and the folder parameter.
+
+  [upload]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/controllers/camaleon_cms/admin/media_controller.rb#L86-L87
+
+  ```ruby
+  def upload(settings = {})
+    params[:dimension] = nil if params[:skip_auto_crop].present?
+    f = { error: 'File not found.' }
+    if params[:file_upload].present?
+      f = upload_file(params[:file_upload],
+                      { folder: params[:folder], dimension: params['dimension'], formats: params[:formats], versions: params[:versions],
+                        thumb_size: params[:thumb_size] }.merge(settings))
+    end
+    [..]
+  end
+  ```
+
+  are passed to the [upload_file] method. Inside that method the
+  given settings are [merged] with some presets. The file format
+  is [checked against] the formats settings we can override with
+  the formats parameters.
+
+  [upload_file]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/helpers/camaleon_cms/uploader_helper.rb#L23-L24
+  [merged]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/helpers/camaleon_cms/uploader_helper.rb#L41-L42
+  [checked against]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/helpers/camaleon_cms/uploader_helper.rb#L61-L62
+
+  ```ruby
+  # formats validations
+    return { error: "#{ct('file_format_error')} (#{settings[:formats]})" } unless cama_uploader.class.validate_file_format(
+      uploaded_io.path, settings[:formats]
+   )
+  ```
+
+  Our given folder is then [passed unchecked] to the `Cama_uploader`:
+
+  [passed unchecked]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/helpers/camaleon_cms/uploader_helper.rb#L73-L74
+
+  ```ruby
+  key = File.join(settings[:folder], settings[:filename]).to_s.cama_fix_slash
+  res = cama_uploader.add_file(settings[:uploaded_io], key, { same_name: settings[:same_name] })
+  ```
+
+  In the [add_file] method of `CamaleonCmsLocalUploader` this key argument containing the
+  unchecked path is then used to write the file to the file system:
+
+  [add_file]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/uploaders/camaleon_cms_local_uploader.rb#L77
+
+  ```ruby
+  def add_file(uploaded_io_or_file_path, key, args = {})
+    [..]
+    upload_io = uploaded_io_or_file_path.is_a?(String) ? File.open(uploaded_io_or_file_path) : uploaded_io_or_file_path
+    File.open(File.join(@root_folder, key), 'wb') { |file| file.write(upload_io.read) }
+    [..]
+  end
+  ```
+
+  ## Impact
+
+  This issue may lead up to Remote Code Execution (RCE) via arbitrary
+  file write.
+
+  ## Remediation
+
+  Normalize file paths constructed from untrusted user input before using
+  them and check that the resulting path is inside the targeted directory.
+  Additionally, do not allow character sequences such as `..` in untrusted
+  input that is used to build paths.
+
+  ## See Also
+
+  [CodeQL: Uncontrolled data used in path expression](https://codeql.github.com/codeql-query-help/ruby/rb-path-injection/)
+  [OWASP: Path Traversal](https://owasp.org/www-community/attacks/Path_Traversal)
+cvss_v3: 9.9
+unaffected_versions:
+  - "< 2.8.0"
+patched_versions:
+  - ">= 2.8.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-46986
+    - https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-wmjg-vqhv-q5p5
+    - https://github.com/owen2345/camaleon-cms/commit/b3b12b1e4a9e3fccaf5bb4330820fa7f8744e6bd
+    - https://codeql.github.com/codeql-query-help/ruby/rb-path-injection
+    - https://owasp.org/www-community/attacks/Path_Traversal
+    - https://www.reddit.com/r/rails/comments/1exwtdm/camaleon_cms_281_has_been_released
+    - https://github.com/advisories/GHSA-wmjg-vqhv-q5p5
diff --git a/gems/camaleon_cms/CVE-2024-46987.yml b/gems/camaleon_cms/CVE-2024-46987.yml
new file mode 100644
index 0000000000..94bfc5db0c
--- /dev/null
+++ b/gems/camaleon_cms/CVE-2024-46987.yml
@@ -0,0 +1,78 @@
+---
+gem: camaleon_cms
+cve: 2024-46987
+ghsa: cp65-5m9r-vc2c
+url: https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-cp65-5m9r-vc2c
+title: Camaleon CMS vulnerable to arbitrary path traversal (GHSL-2024-183)
+date: 2024-09-18
+description: |
+  A path traversal vulnerability accessible via MediaController's
+  download_private_file method allows authenticated users to download
+  any file on the web server Camaleon CMS is running on (depending
+  on the file permissions).
+
+  In the [download_private_file] method:
+
+  ```ruby
+  def download_private_file
+    cama_uploader.enable_private_mode!
+
+    file = cama_uploader.fetch_file("private/#{params[:file]}")
+
+    send_file file, disposition: 'inline'
+  end
+  ```
+
+  [download_private_file]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/controllers/camaleon_cms/admin/media_controller.rb#L28
+
+  The file parameter is passed to the [fetch_file] method of the
+  CamaleonCmsLocalUploader class (when files are uploaded locally):
+
+  ```ruby
+  def fetch_file(file_name)
+    raise ActionController::RoutingError, 'File not found' unless file_exists?(file_name)
+
+    file_name
+  end
+  ```
+
+  [fetch_file]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/uploaders/camaleon_cms_local_uploader.rb#L27
+
+  If the file exists it's passed back to the download_private_file method
+  where the file is sent to the user via [send_file].
+
+  [send_file]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/controllers/camaleon_cms/admin/media_controller.rb#L33-L34
+
+  ## Proof of concept
+
+  An authenticated user can download the /etc/passwd file by visiting an URL such as:
+
+      https://<camaleon-host>/admin/media/download_private_file?file=../../../../../../etc/passwd
+
+  ## Impact
+
+  This issue may lead to Information Disclosure.
+
+  ## Remediation
+
+  Normalize file paths constructed from untrusted user input before using
+  them and check that the resulting path is inside the targeted directory.
+  Additionally, do not allow character sequences such as `..` in untrusted
+  input that is used to build paths.
+
+  ## See Also
+
+  * [CodeQL: Uncontrolled data used in path expression](https://codeql.github.com/codeql-query-help/ruby/rb-path-injection/)
+  * [OWASP: Path Traversal](https://owasp.org/www-community/attacks/Path_Traversal)
+cvss_v3: 7.7
+patched_versions:
+  - ">= 2.8.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-46987
+    - https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-cp65-5m9r-vc2c
+    - https://github.com/owen2345/camaleon-cms/commit/071b1b09d6d61ab02a5960b1ccafd9d9c2155a3e
+    - https://codeql.github.com/codeql-query-help/ruby/rb-path-injection
+    - https://owasp.org/www-community/attacks/Path_Traversal
+    - https://www.reddit.com/r/rails/comments/1exwtdm/camaleon_cms_281_has_been_released
+    - https://github.com/advisories/GHSA-cp65-5m9r-vc2c
diff --git a/gems/camaleon_cms/CVE-2024-48652.yml b/gems/camaleon_cms/CVE-2024-48652.yml
new file mode 100644
index 0000000000..6f45d87868
--- /dev/null
+++ b/gems/camaleon_cms/CVE-2024-48652.yml
@@ -0,0 +1,21 @@
+---
+gem: camaleon_cms
+cve: 2024-48652
+ghsa: hhxg-rvc9-8726
+url: https://github.com/paragbagul111/CVE-2024-48652
+title: camaleon_cms affected by cross site scripting
+date: 2024-10-23
+description: |
+  Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows
+  remote attacker to execute arbitrary code via the content group
+  name field.
+cvss_v3: 4.8
+notes: |
+  Never patched
+
+  Unclear if versions 2.8.0 to 2.8.3 patch this vulnerability.
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-48652
+    - https://github.com/paragbagul111/CVE-2024-48652
+    - https://github.com/advisories/GHSA-hhxg-rvc9-8726
diff --git a/gems/camaleon_cms/CVE-2025-2304.yml b/gems/camaleon_cms/CVE-2025-2304.yml
new file mode 100644
index 0000000000..afc2c88931
--- /dev/null
+++ b/gems/camaleon_cms/CVE-2025-2304.yml
@@ -0,0 +1,25 @@
+---
+gem: camaleon_cms
+cve: 2025-2304
+ghsa: rp28-mvq3-wf8j
+url: https://github.com/advisories/GHSA-rp28-mvq3-wf8j
+title: Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment
+date: 2025-03-14
+description: |
+  A Privilege Escalation through a Mass Assignment exists in Camaleon CMS
+
+  When a user wishes to change his password, the 'updated_ajax' method
+  of the UsersController is called. The vulnerability stems from the
+  use of the dangerous permit! method, which allows all parameters to
+  pass through without any filtering.
+cvss_v4: 9.4
+patched_versions:
+  - ">= 2.9.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-2304
+    - https://www.tenable.com/security/research/tra-2025-09
+    - https://github.com/owen2345/camaleon-cms/pull/1109
+    - https://github.com/owen2345/camaleon-cms/commit/179fd6b1ecf258d3e214aebfa87ac4a322ea4db4
+    - https://github.com/owen2345/camaleon-cms/releases/tag/2.9.1
+    - https://github.com/advisories/GHSA-rp28-mvq3-wf8j
diff --git a/gems/camaleon_cms/GHSA-75j2-9gmc-m855.yml b/gems/camaleon_cms/GHSA-75j2-9gmc-m855.yml
new file mode 100644
index 0000000000..57a0d16549
--- /dev/null
+++ b/gems/camaleon_cms/GHSA-75j2-9gmc-m855.yml
@@ -0,0 +1,54 @@
+---
+gem: camaleon_cms
+ghsa: 75j2-9gmc-m855
+url: https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-r9cr-qmfw-pmrc
+title: Camaleon CMS vulnerable to stored XSS through user file
+  upload (GHSL-2024-184)
+date: 2024-09-25
+description: |
+  A stored cross-site scripting has been found in the image upload
+  functionality that can be used by normal registered users:
+  It is possible to upload a SVG image containing JavaScript and it's
+  also possible to upload a HTML document when the format parameter
+  is manually changed to [documents][1] or a string of an
+  [unsupported format][2]. If an authenticated user or administrator
+  visits that uploaded image or document malicious JavaScript can be
+  executed on their behalf (e.g. changing or deleting content inside
+  of the CMS.)
+
+  [1]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/uploaders/camaleon_cms_uploader.rb#L105-L106
+  [2]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/uploaders/camaleon_cms_uploader.rb#L110-L111
+
+  ## Impact
+
+  This issue may lead to account takeover due to reflected Cross-site
+  scripting (XSS).
+
+  ## Remediation
+
+  Only allow the upload of safe files such as PNG, TXT and others or
+  serve all "unsafe" files such as SVG and other files with a
+  content-disposition: attachment header, which should prevent browsers
+  from displaying them.
+
+  Additionally, a [Content security policy (CSP)][3] can be created
+  that disallows inlined script. (Other parts of the application might
+  need modification to continue functioning.)
+
+  [3]: https://web.dev/articles/csp
+
+  To prevent the theft of the auth_token it could be marked with
+  HttpOnly. This would however not prevent that actions could be
+  performed as the authenticated user/administrator. Furthermore, it
+  could make sense to use the authentication provided by Ruby on Rails,
+  so that stolen tokens cannot be used anymore after some time.
+cvss_v3: 5.4
+unaffected_versions:
+  - "< 2.8.0"
+patched_versions:
+  - ">= 2.8.2"
+related:
+  url:
+    - https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-r9cr-qmfw-pmrc
+    - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/GHSA-8fx8-3rg2-79xw.yml
+    - https://github.com/advisories/GHSA-75j2-9gmc-m855
diff --git a/gems/camaleon_cms/GHSA-7x4w-cj9r-h4v9.yml b/gems/camaleon_cms/GHSA-7x4w-cj9r-h4v9.yml
new file mode 100644
index 0000000000..287f7a5a0e
--- /dev/null
+++ b/gems/camaleon_cms/GHSA-7x4w-cj9r-h4v9.yml
@@ -0,0 +1,81 @@
+---
+gem: camaleon_cms
+ghsa: 7x4w-cj9r-h4v9
+url: https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-7x4w-cj9r-h4v9
+title: Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185)
+date: 2024-09-18
+description: |
+  The [actions](https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/controllers/camaleon_cms/admin/media_controller.rb#L51-L52)
+  defined inside of the MediaController class do not check whether a
+  given path is inside a certain path (e.g. inside the media folder).
+  If an attacker performed an account takeover of an administrator
+  account (See: GHSL-2024-184) they could delete arbitrary files or
+  folders on the server hosting Camaleon CMS. The
+  [crop_url](https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/controllers/camaleon_cms/admin/media_controller.rb#L64-L65)
+  action might make arbitrary file writes (similar impact to GHSL-2024-182)
+  for any authenticated user possible, but it doesn't seem to work currently.
+
+  Arbitrary file deletion can be exploited with following code path:
+  The parameter folder flows from the actions method:
+  ```ruby
+    def actions
+      authorize! :manage, :media if params[:media_action] != 'crop_url'
+      params[:folder] = params[:folder].gsub('//', '/') if params[:folder].present?
+      case params[:media_action]
+      [..]
+      when 'del_file'
+        cama_uploader.delete_file(params[:folder].gsub('//', '/'))
+        render plain: ''
+  ```
+  into the method delete_file of the CamaleonCmsLocalUploader
+  class (when files are uploaded locally):
+  ```ruby
+  def delete_file(key)
+    file = File.join(@root_folder, key)
+    FileUtils.rm(file) if File.exist? file
+    @instance.hooks_run('after_delete', key)
+    get_media_collection.find_by_key(key).take.destroy
+  end
+  ```
+  Where it is joined in an unchecked manner with the root folder and
+  then deleted.
+
+  **Proof of concept**
+  The following request would delete the file README.md in the top
+  folder of the Ruby on Rails application. (The values for auth_token,
+  X-CSRF-Token and _cms_session would also need to be replaced with
+  authenticated values in the curl command below)
+  ```
+  curl --path-as-is -i -s -k -X $'POST' \
+      -H $'X-CSRF-Token: [..]' -H $'User-Agent: Mozilla/5.0' -H $'Content-Type: application/x-www-form-urlencoded; charset=UTF-8' -H $'Accept: */*' -H $'Connection: keep-alive' \
+      -b $'auth_token=[..]; _cms_session=[..]' \
+      --data-binary $'versions=&thumb_size=&formats=&media_formats=&dimension=&private=&folder=..
+  2F..
+  2F..
+  2FREADME.md&media_action=del_file' \
+      $'https://<camaleon-host>/admin/media/actions?actions=true'
+  ```
+
+  **Impact**
+
+  This issue may lead to a defective CMS or system.
+
+  **Remediation**
+
+  Normalize all file paths constructed from untrusted user input
+  before using them and check that the resulting path is inside the
+  targeted directory. Additionally, do not allow character sequences
+  such as .. in untrusted input that is used to build paths.
+
+  **See also:**
+
+  [CodeQL: Uncontrolled data used in path expression](https://codeql.github.com/codeql-query-help/ruby/rb-path-injection/)
+  [OWASP: Path Traversal](https://owasp.org/www-community/attacks/Path_Traversal)
+cvss_v3: 7.2
+patched_versions:
+  - ">= 2.8.1"
+related:
+  url:
+    - https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-7x4w-cj9r-h4v9
+    - https://github.com/owen2345/camaleon-cms/commit/f5d032549fa0a204d06e738caf2663607967dee2
+    - https://github.com/advisories/GHSA-7x4w-cj9r-h4v9
diff --git a/gems/camaleon_cms/GHSA-8fx8-3rg2-79xw.yml b/gems/camaleon_cms/GHSA-8fx8-3rg2-79xw.yml
new file mode 100644
index 0000000000..5be43d195f
--- /dev/null
+++ b/gems/camaleon_cms/GHSA-8fx8-3rg2-79xw.yml
@@ -0,0 +1,52 @@
+---
+gem: camaleon_cms
+ghsa: 8fx8-3rg2-79xw
+url: https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-r9cr-qmfw-pmrc
+title: Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)
+date: 2024-09-23
+description: |
+  A stored cross-site scripting has been found in the image upload
+  functionality that can be used by normal registered users:
+  It is possible to upload a SVG image containing JavaScript and
+  it's also possible to upload a HTML document when the format
+  parameter is manually changed to [documents][1] or a string of
+  an [unsupported format][2]. If an authenticated user or administrator
+  visits that uploaded image or document malicious JavaScript can
+  be executed on their behalf (e.g. changing or deleting content
+  inside of the CMS.)
+
+  [1]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/uploaders/camaleon_cms_uploader.rb#L105-L106
+  [2]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/uploaders/camaleon_cms_uploader.rb#L110-L111
+
+  ## Impact
+
+  This issue may lead to account takeover due to reflected
+  Cross-site scripting (XSS).
+
+  ## Remediation
+
+  Only allow the upload of safe files such as PNG, TXT and others
+  or serve all "unsafe" files such as SVG and other files with a
+  content-disposition: attachment header, which should prevent
+  browsers from displaying them.
+
+  Additionally, a [Content security policy (CSP)][3] can be created
+  that disallows inlined script. (Other parts of the application
+  might need modification to continue functioning.)
+
+  [3]: https://web.dev/articles/csp
+
+  To prevent the theft of the auth_token it could be marked with
+  HttpOnly. This would however not prevent that actions could be
+  performed as the authenticated user/administrator. Furthermore,
+  it could make sense to use the authentication provided by
+  Ruby on Rails, so that stolen tokens cannot be used anymore
+  after some time.
+cvss_v3: 5.4
+patched_versions:
+  - ">= 2.8.1"
+related:
+  url:
+    - https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-r9cr-qmfw-pmrc
+    - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/GHSA-r9cr-qmfw-pmrc.yml
+    - https://github.com/advisories/GHSA-8fx8-3rg2-79xw
diff --git a/gems/camaleon_cms/GHSA-r9cr-qmfw-pmrc.yml b/gems/camaleon_cms/GHSA-r9cr-qmfw-pmrc.yml
new file mode 100644
index 0000000000..e8126cb515
--- /dev/null
+++ b/gems/camaleon_cms/GHSA-r9cr-qmfw-pmrc.yml
@@ -0,0 +1,52 @@
+---
+gem: camaleon_cms
+ghsa: r9cr-qmfw-pmrc
+url: https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-r9cr-qmfw-pmrc
+title: Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)
+date: 2024-09-18
+description: |
+  A stored cross-site scripting has been found in the image upload
+  functionality that can be used by normal registered users:
+  It is possible to upload a SVG image containing JavaScript and
+  it's also possible to upload a HTML document when the format
+  parameter is manually changed to [documents][1] or a string of an
+  [unsupported format][2]. If an authenticated user or administrator
+  visits that uploaded image or document malicious JavaScript can be
+  executed on their behalf
+  (e.g. changing or deleting content inside of the CMS.)
+
+  [1]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/uploaders/camaleon_cms_uploader.rb#L105-L106
+  [2]: https://github.com/owen2345/camaleon-cms/blob/feccb96e542319ed608acd3a16fa5d92f13ede67/app/uploaders/camaleon_cms_uploader.rb#L110-L111
+
+  ## Impact
+
+  This issue may lead to account takeover due to reflected
+  Cross-site scripting (XSS).
+
+  ## Remediation
+
+  Only allow the upload of safe files such as PNG, TXT and others
+  or serve all "unsafe" files such as SVG and other files with a
+  content-disposition: attachment header, which should prevent
+  browsers from displaying them.
+
+  Additionally, a [Content security policy (CSP)][3]
+  can be created that disallows inlined script. (Other parts of the
+  application might need modification to continue functioning.)
+
+  [3]: https://web.dev/articles/csp
+
+  To prevent the theft of the auth_token it could be marked with
+  HttpOnly. This would however not prevent that actions could be
+  performed as the authenticated user/administrator. Furthermore,
+  it could make sense to use the authentication provided by
+  Ruby on Rails, so that stolen tokens cannot be used anymore
+  after some time.
+cvss_v3: 5.4
+patched_versions:
+  - ">= 2.8.1"
+related:
+  url:
+    - https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-r9cr-qmfw-pmrc
+    - https://github.com/owen2345/camaleon-cms/commit/b18fbc74f3ecd98a1f781d015f5466ef16b1425b
+    - https://github.com/advisories/GHSA-r9cr-qmfw-pmrc
diff --git a/gems/cap-strap/CVE-2014-4992.yml b/gems/cap-strap/CVE-2014-4992.yml
index 16c85c9a44..f5972743f4 100644
--- a/gems/cap-strap/CVE-2014-4992.yml
+++ b/gems/cap-strap/CVE-2014-4992.yml
@@ -2,9 +2,12 @@
 gem: cap-strap
 cve: 2014-4992
 osvdb: 108574
+ghsa: pcm6-g2qp-9gw8
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-4992
 title: cap-strap Gem for Ruby Process Table Local Plaintext Credential Disclosure
 date: 2014-06-30
-description: cap-strap Gem for Ruby contains a flaw that is due to the application
+description: |
+  cap-strap Gem for Ruby contains a flaw that is due to the application
   exposing credential information in plaintext in the process table listing. This
   may allow a local attacker to gain access to credential information.
+cvss_v3: 7.8
diff --git a/gems/cap-strap/OSVDB-108575.yml b/gems/cap-strap/OSVDB-108575.yml
index b4b22e181d..796c8e1aaf 100644
--- a/gems/cap-strap/OSVDB-108575.yml
+++ b/gems/cap-strap/OSVDB-108575.yml
@@ -1,9 +1,18 @@
 ---
 gem: cap-strap
 osvdb: 108575
-url: http://osvdb.org/show/osvdb/108575
+url: https://www.openwall.com/lists/oss-security/2014/07/07/9
 title: cap-strap Gem for Ruby Hardcoded Password Crypt Hash Salt Weakness
 date: 2014-06-30
-description: cap-strap Gem for Ruby contains a flaw that is due to the application
-  using a hardcoded default 'sa' salt for password encryption. This may allow a local
-  attacker to more easily decrypt passwords.
+description: |
+  cap-strap Gem for Ruby contains a flaw that is due to the application
+  using a hardcoded default 'sa' salt for password encryption. This may
+  allow a local attacker to more easily decrypt passwords.
+notes: "Never patched"
+related:
+  url:
+    - https://www.openwall.com/lists/oss-security/2014/07/07/9
+    - https://github.com/substantial/cap-strap
+    - http://www.vapid.dhs.org/advisories/cap-strap-0.1.5.html
+    - http://www.vapidlabs.com/advisory.php?v=27
+    - http://osvdb.org/show/osvdb/108575
diff --git a/gems/capistrano-colors/CVE-2019-15224.yml b/gems/capistrano-colors/CVE-2019-15224.yml
index ce73a01599..1df4e96021 100644
--- a/gems/capistrano-colors/CVE-2019-15224.yml
+++ b/gems/capistrano-colors/CVE-2019-15224.yml
@@ -13,8 +13,8 @@ description: |
   0.5.4.
 cvss_v3: 9.8
 unaffected_versions:
-- "< 0.5.5"
-- "> 0.5.5"
+  - "< 0.5.5"
+  - "> 0.5.5"
 related:
   url:
-  - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
+    - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
diff --git a/gems/carrierwave/CVE-2021-21288.yml b/gems/carrierwave/CVE-2021-21288.yml
index 03bbb1436e..9f1b651469 100644
--- a/gems/carrierwave/CVE-2021-21288.yml
+++ b/gems/carrierwave/CVE-2021-21288.yml
@@ -5,7 +5,7 @@ ghsa: fwcm-636p-68r5
 url: https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-fwcm-636p-68r5
 date: 2021-02-08
 title: Server-side request forgery in CarrierWave
-description: |-
+description: |
   ### Impact
   [CarrierWave download feature](https://github.com/carrierwaveuploader/carrierwave#uploading-files-from-a-remote-location
   has an SSRF vulnerability, allowing attacks to provide DNS entries or IP addresses that are intended for internal use
@@ -21,5 +21,5 @@ description: |-
   without access to any internal network resources or cloud metadata access.
 cvss_v3: 4.3
 patched_versions:
-- ~> 1.3.2
-- '>= 2.1.1'
+  - "~> 1.3.2"
+  - ">= 2.1.1"
diff --git a/gems/carrierwave/CVE-2021-21305.yml b/gems/carrierwave/CVE-2021-21305.yml
index 1aedf3333a..77ad3ea94c 100644
--- a/gems/carrierwave/CVE-2021-21305.yml
+++ b/gems/carrierwave/CVE-2021-21305.yml
@@ -5,7 +5,7 @@ ghsa: cf3w-g86h-35x4
 url: https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-cf3w-g86h-35x4
 date: 2021-02-08
 title: Code Injection vulnerability in CarrierWave::RMagick
-description: |-
+description: |
   ### Impact
   [CarrierWave::RMagick](https://github.com/carrierwaveuploader/carrierwave/blob/master/lib/carrierwave/processing/rmagick.rb)
   has a Code Injection vulnerability. Its `#manipulate!` method inappropriately evals the content of mutation
@@ -32,5 +32,5 @@ description: |-
   Stop supplying untrusted input to `#manipulate!`'s mutation option.
 cvss_v3: 7.4
 patched_versions:
-- ~> 1.3.2
-- '>= 2.1.1'
+  - "~> 1.3.2"
+  - ">= 2.1.1"
diff --git a/gems/carrierwave/CVE-2023-49090.yml b/gems/carrierwave/CVE-2023-49090.yml
new file mode 100644
index 0000000000..1980250d0a
--- /dev/null
+++ b/gems/carrierwave/CVE-2023-49090.yml
@@ -0,0 +1,50 @@
+---
+gem: carrierwave
+cve: 2023-49090
+ghsa: gxhx-g4fq-49hj
+url: https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-gxhx-g4fq-49hj
+title: CarrierWave Content-Type allowlist bypass vulnerability,
+  possibly leading to XSS
+date: 2023-11-29
+description: |
+  ###Impact
+  [CarrierWave::Uploader::ContentTypeAllowlist](https://github.com/carrierwaveuploader/carrierwave/blob/master/lib/carrierwave/uploader/content_type_allowlist.rb)
+  has a Content-Type allowlist bypass vulnerability, possibly leading to XSS.
+
+  The validation in `allowlisted_content_type?` determines Content-Type
+  permissions by performing a partial match.
+  If the `content_type` argument of `allowlisted_content_type?` is passed
+  a value crafted by the attacker, Content-Types not included in the
+  `content_type_allowlist` will be allowed.
+
+  In addition, by setting the Content-Type configured by the attacker
+  at the time of file delivery, it is possible to cause XSS on the
+  user's browser when the uploaded file is opened.
+
+  ### Patches
+  Upgrade to [3.0.5](https://rubygems.org/gems/carrierwave/versions/3.0.5)
+  or [2.2.5](https://rubygems.org/gems/carrierwave/versions/2.2.5).
+
+  ### Workarounds
+  When validating with `allowlisted_content_type?` in
+  [CarrierWave::Uploader::ContentTypeAllowlist](https://github.com/carrierwaveuploader/carrierwave/blob/master/lib/carrierwave/uploader/content_type_allowlist.rb),
+  forward match(`\\A`) the Content-Type set in `content_type_allowlist`,
+  preventing unintentional permission of `text/html;image/png` when
+  you want to allow only `image/png` in `content_type_allowlist`.
+
+  ### References
+  [OWASP - File Upload Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html#content-type-validation)
+cvss_v3: 6.8
+patched_versions:
+  - "~> 2.2.5"
+  - ">= 3.0.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-49090
+    - https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-gxhx-gq-49hj
+    - https://github.com/carrierwaveuploader/carrierwave/commit/39b282db5c1303899b3d3381ce8a837840f983b5
+    - https://github.com/carrierwaveuploader/carrierwave/commit/863d425c76eba12c3294227b39018f6b2dccbbf3
+    - https://github.com/carrierwaveuploader/carrierwave/blob/master/lib/carrierwave/uploader/content_type_allowlist.rb
+    - https://rubygems.org/gems/carrierwave/versions/2.2.5
+    - https://rubygems.org/gems/carrierwave/versions/3.0.5
+    - https://github.com/advisories/GHSA-gxhx-g4fq-49hj
diff --git a/gems/carrierwave/CVE-2024-29034.yml b/gems/carrierwave/CVE-2024-29034.yml
new file mode 100644
index 0000000000..a6c646fb8d
--- /dev/null
+++ b/gems/carrierwave/CVE-2024-29034.yml
@@ -0,0 +1,67 @@
+---
+gem: carrierwave
+cve: 2024-29034
+ghsa: vfmv-jfc5-pjjw
+url: https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-vfmv-jfc5-pjjw
+title: CarrierWave content-Type allowlist bypass vulnerability
+  which possibly leads to XSS remained
+date: 2024-03-25
+description: |
+  ### Impact
+
+  The vulnerability [CVE-2023-49090](https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-gxhx-g4fq-49hj)
+  wasn't fully addressed.
+
+  This vulnerability is caused by the fact that when uploading to
+  object storage, including Amazon S3, it is possible to set a
+  Content-Type value that is interpreted by browsers to be different
+  from what's allowed by `content_type_allowlist`, by providing
+  multiple values separated by commas.
+
+  This bypassed value can be used to cause XSS.
+
+  ### Patches
+
+  Upgrade to [3.0.7](https://rubygems.org/gems/carrierwave/versions/3.0.7) or [2.2.6](https://rubygems.org/gems/carrierwave/versions/2.2.6).
+
+  ### Workarounds
+  Use the following monkey patch to let CarrierWave parse the
+  Content-type by using `Marcel::MimeType.for`.
+
+  ```ruby
+  # For CarrierWave 3.x
+  CarrierWave::SanitizedFile.class_eval do
+    def declared_content_type
+      @declared_content_type ||
+        if @file.respond_to?(:content_type) && @file.content_type
+          Marcel::MimeType.for(declared_type: @file.content_type.to_s.chomp)
+        end
+    end
+  end
+  ```
+
+  ```ruby
+  # For CarrierWave 2.x
+  CarrierWave::SanitizedFile.class_eval do
+    def existing_content_type
+      if @file.respond_to?(:content_type) && @file.content_type
+        Marcel::MimeType.for(declared_type: @file.content_type.to_s.chomp)
+      end
+    end
+  end
+  ```
+
+  ### References
+
+  [OWASP - File Upload Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html#content-type-validation)
+
+cvss_v3: 6.8
+patched_versions:
+  - "~> 2.2.6"
+  - ">= 3.0.7"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-29034
+    - https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-vfmv-jfc5-pjjw
+    - https://github.com/carrierwaveuploader/carrierwave/commit/25b1c800d45ef8e78dc445ebe3bd8a6e3f0a3477
+    - https://github.com/advisories/GHSA-vfmv-jfc5-pjjw
diff --git a/gems/ccsv/CVE-2017-15364.yml b/gems/ccsv/CVE-2017-15364.yml
new file mode 100644
index 0000000000..bc25d4ffec
--- /dev/null
+++ b/gems/ccsv/CVE-2017-15364.yml
@@ -0,0 +1,12 @@
+---
+gem: ccsv
+cve: 2017-15364
+ghsa: 5gxp-c379-pj42
+url: https://github.com/evan/ccsv/issues/15
+title: ccsv Double Free vulnerability
+date: 2022-05-17
+description: |
+  The foreach function in `ext/ccsv.c` in Ccsv 1.1.0 allows remote attackers
+  to cause a denial of service (double free and application crash) or possibly have
+  unspecified other impact via a crafted file.
+cvss_v3: 5.5
diff --git a/gems/cgi/CVE-2021-33621.yml b/gems/cgi/CVE-2021-33621.yml
new file mode 100644
index 0000000000..fadd492aff
--- /dev/null
+++ b/gems/cgi/CVE-2021-33621.yml
@@ -0,0 +1,19 @@
+---
+gem: cgi
+cve: 2021-33621
+ghsa: vc47-6rqg-c7f5
+url: https://www.ruby-lang.org/en/news/2022/11/22/http-response-splitting-in-cgi-cve-2021-33621/
+title: HTTP response splitting in CGI
+date: 2022-11-18
+description: |
+  cgi.rb in Ruby through 2.6.x, through 3.0x, and through 3.1.x allows HTTP
+  header injection. If a CGI application using the CGI library inserts
+  untrusted input into the HTTP response header, an attacker can exploit it to
+  insert a newline character to split a header, and inject malicious content to
+  deceive clients.
+
+cvss_v3: 8.8
+patched_versions:
+  - "~> 0.1.0.2"
+  - "~> 0.2.2"
+  - ">= 0.3.5"
diff --git a/gems/cgi/CVE-2021-41816.yml b/gems/cgi/CVE-2021-41816.yml
index 659b36d2d3..7ed58a917b 100644
--- a/gems/cgi/CVE-2021-41816.yml
+++ b/gems/cgi/CVE-2021-41816.yml
@@ -5,7 +5,7 @@ ghsa: 5cqm-crxm-6qpv
 url: https://www.ruby-lang.org/en/news/2021/11/24/buffer-overrun-in-cgi-escape_html-cve-2021-41816/
 title: Buffer Overrun in CGI.escape_html
 date: 2021-11-24
-description: |-
+description: |
   A security vulnerability that causes buffer overflow when you pass a very large
   string (> 700 MB) to `CGI.escape_html` on a platform where `long` type takes 4 bytes,
   typically, Windows.
@@ -16,7 +16,9 @@ description: |-
 
   This issue has been introduced since Ruby 2.7, so the cgi version bundled with Ruby
   2.6 is not vulnerable.
+cvss_v3: 7.5
 patched_versions:
-- "~> 0.1.1"
-- "~> 0.2.1"
-- ">= 0.3.1"
+  - "~> 0.1.0.1"
+  - "~> 0.1.1"
+  - "~> 0.2.1"
+  - ">= 0.3.1"
diff --git a/gems/cgi/CVE-2021-41819.yml b/gems/cgi/CVE-2021-41819.yml
index 7d37b995a7..563149ce74 100644
--- a/gems/cgi/CVE-2021-41819.yml
+++ b/gems/cgi/CVE-2021-41819.yml
@@ -5,7 +5,7 @@ ghsa: 4vf4-qmvg-mh7h
 url: https://www.ruby-lang.org/en/news/2021/11/24/cookie-prefix-spoofing-in-cgi-cookie-parse-cve-2021-41819/
 title: Cookie Prefix Spoofing in CGI::Cookie.parse
 date: 2021-11-24
-description: |-
+description: |
   The old versions of `CGI::Cookie.parse` applied URL decoding to cookie names.
   An attacker could exploit this vulnerability to spoof security prefixes in
   cookie names, which may be able to trick a vulnerable application.
@@ -29,9 +29,10 @@ description: |-
     prior.
 cvss_v3: 7.5
 patched_versions:
-- "~> 0.1.1"
-- "~> 0.2.1"
-- ">= 0.3.1"
+  - "~> 0.1.0.1"
+  - "~> 0.1.1"
+  - "~> 0.2.1"
+  - ">= 0.3.1"
 related:
   cve:
-  - 2020-8184
+    - 2020-8184
diff --git a/gems/cgi/CVE-2025-27219.yml b/gems/cgi/CVE-2025-27219.yml
new file mode 100644
index 0000000000..809bffa313
--- /dev/null
+++ b/gems/cgi/CVE-2025-27219.yml
@@ -0,0 +1,39 @@
+---
+gem: cgi
+cve: 2025-27219
+ghsa: gh9q-2xrm-x6qv
+url: https://www.cve.org/CVERecord?id=CVE-2025-27219
+title: CVE-2025-27219 - Denial of Service in CGI::Cookie.parse
+date: 2025-02-26
+description: |
+  There is a possibility for DoS by in the cgi gem.
+  This vulnerability has been assigned the CVE identifier
+  CVE-2025-27219. We recommend upgrading the cgi gem.
+
+  ## Details
+
+  CGI::Cookie.parse took super-linear time to parse a cookie string
+  in some cases. Feeding a maliciously crafted cookie string into
+  the method could lead to a Denial of Service.
+
+  Please update CGI gem to version 0.3.5.1, 0.3.7, 0.4.2 or later.
+
+  ## Affected versions
+
+  cgi gem versions <= 0.3.5, 0.3.6, 0.4.0 and 0.4.1.
+
+  ## Credits
+
+  Thanks to lio346 for discovering this issue.
+  Also thanks to mame for fixing this vulnerability.
+cvss_v3: 5.8
+patched_versions:
+  - "~> 0.3.5.1"
+  - "~> 0.3.7"
+  - ">= 0.4.2"
+related:
+  url:
+    - https://www.cve.org/CVERecord?id=CVE-2025-27219
+    - https://www.suse.com/security/cve/CVE-2025-27219.html
+    - https://hackerone.com/reports/3013913
+    - https://www.ruby-lang.org/en/news/2025/02/26/security-advisories
diff --git a/gems/cgi/CVE-2025-27220.yml b/gems/cgi/CVE-2025-27220.yml
new file mode 100644
index 0000000000..b33bca1821
--- /dev/null
+++ b/gems/cgi/CVE-2025-27220.yml
@@ -0,0 +1,38 @@
+---
+gem: cgi
+cve: 2025-27220
+ghsa: mhwm-jh88-3gjf
+url: https://www.cve.org/CVERecord?id=CVE-2025-27220
+title: CVE-2025-27220 - ReDoS in CGI::Util#escapeElement.
+date: 2025-02-26
+description: |
+  There is a possibility for Regular expression Denial of Service (ReDoS)
+  by in the cgi gem. This vulnerability has been assigned the CVE
+  identifier CVE-2025-27220. We recommend upgrading the cgi gem.
+
+  ## Details
+
+  The regular expression used in CGI::Util#escapeElement is vulnerable
+  to ReDoS. The crafted input could lead to a high CPU consumption.
+
+  This vulnerability only affects Ruby 3.1 and 3.2. If you
+  are using these versions, please update CGI gem to version
+  0.3.5.1, 0.3.7, 0.4.2 or later.
+
+  ## Affected versions
+
+  cgi gem versions <= 0.3.5, 0.3.6, 0.4.0 and 0.4.1.
+
+  ## Credits
+
+  Thanks to svalkanov for discovering this issue.
+  Also thanks to nobu for fixing this vulnerability.
+cvss_v3: 4.0
+patched_versions:
+  - "~> 0.3.5.1"
+  - "~> 0.3.7"
+  - ">= 0.4.2"
+related:
+  url:
+    - https://www.cve.org/CVERecord?id=CVE-2025-27220
+    - https://www.ruby-lang.org/en/news/2025/02/26/security-advisories
diff --git a/gems/chartkick/CVE-2019-12732.yml b/gems/chartkick/CVE-2019-12732.yml
index 0c9f47f32d..dc4bdcbcfe 100644
--- a/gems/chartkick/CVE-2019-12732.yml
+++ b/gems/chartkick/CVE-2019-12732.yml
@@ -20,4 +20,4 @@ description: |
     <%= line_chart params[:data], min: params[:min] %>
 cvss_v3: 4.7
 patched_versions:
-- '>= 3.2.0'
+  - ">= 3.2.0"
diff --git a/gems/chartkick/CVE-2019-18841.yml b/gems/chartkick/CVE-2019-18841.yml
index a4e74b856a..693ab916a4 100644
--- a/gems/chartkick/CVE-2019-18841.yml
+++ b/gems/chartkick/CVE-2019-18841.yml
@@ -8,7 +8,8 @@ date: 2019-11-09
 description: |
   A specially crafted response in data loaded via URL
   can cause prototype pollution in JavaScript.
+cvss_v3: 7.3
 unaffected_versions:
-- < 3.1.0
+  - "< 3.1.0"
 patched_versions:
-- '>= 3.3.0'
+  - ">= 3.3.0"
diff --git a/gems/chartkick/CVE-2020-16254.yml b/gems/chartkick/CVE-2020-16254.yml
index 5cfa712e16..0b16220c8f 100644
--- a/gems/chartkick/CVE-2020-16254.yml
+++ b/gems/chartkick/CVE-2020-16254.yml
@@ -16,4 +16,4 @@ description: |
   <%= line_chart data, width: "100%; background-image: url('http://example.com/image.png')" %>
 cvss_v3: 6.1
 patched_versions:
-- ">= 3.4.0"
+  - ">= 3.4.0"
diff --git a/gems/chef/CVE-2010-5142.yml b/gems/chef/CVE-2010-5142.yml
new file mode 100644
index 0000000000..5da3d4e468
--- /dev/null
+++ b/gems/chef/CVE-2010-5142.yml
@@ -0,0 +1,22 @@
+---
+gem: chef
+cve: 2010-5142
+ghsa: f68m-q26r-64f6
+url: https://github.com/advisories/GHSA-f68m-q26r-64f6
+title: Chef Improper Access Control Vulnerability
+date: 2012-08-08
+description: |
+  `chef-server-api/app/controllers/users.rb` in the API in Chef before
+  0.9.0 does not require administrative privileges for the create,
+  destroy, and update methods, which allows remote authenticated
+  users to manage user accounts via requests to the /users URI.
+cvss_v2: 6.5
+patched_versions:
+  - ">= 0.9.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-5142
+    - https://vuldb.com/?id.61514
+    - http://tickets.opscode.com/browse/CHEF-1289
+    - https://github.com/opscode/chef/commit/c3bb41f727fbe00e5de719d687757b24c8dcdfc8
+    - https://github.com/advisories/GHSA-f68m-q26r-64f6
diff --git a/gems/chloride/CVE-2018-6517.yml b/gems/chloride/CVE-2018-6517.yml
index 31fdb538c6..c9d6ef77db 100644
--- a/gems/chloride/CVE-2018-6517.yml
+++ b/gems/chloride/CVE-2018-6517.yml
@@ -12,4 +12,4 @@ description: |
   is not updated by chloride.
 cvss_v3: 5.0
 patched_versions:
-- '>= 0.3.0'
+  - ">= 0.3.0"
diff --git a/gems/ciborg/CVE-2014-5003.yml b/gems/ciborg/CVE-2014-5003.yml
index 4b887dbc07..2d320517eb 100644
--- a/gems/ciborg/CVE-2014-5003.yml
+++ b/gems/ciborg/CVE-2014-5003.yml
@@ -2,10 +2,13 @@
 gem: ciborg
 cve: 2014-5003
 osvdb: 108586
+ghsa: g982-9r8g-6qxw
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-5003
 title: ciborg Gem for Ruby default.rb /tmp/perlbrew-installer Local Symlink File Overwrite
 date: 2014-06-30
-description: ciborg Gem for Ruby contains a flaw as default.rb creates temporary files
+description: |
+  ciborg Gem for Ruby contains a flaw as default.rb creates temporary files
   insecurely. It is possible for a local attacker to use a symlink attack against
   the /tmp/perlbrew-installer file to cause the program to unexpectedly overwrite
   an arbitrary file.
+cvss_v3: 5.5
diff --git a/gems/clearance/CVE-2021-23435.yml b/gems/clearance/CVE-2021-23435.yml
index 8a097e23ae..032f9cc1d3 100644
--- a/gems/clearance/CVE-2021-23435.yml
+++ b/gems/clearance/CVE-2021-23435.yml
@@ -13,4 +13,4 @@ description: |
   (http://example.com).
 cvss_v3: 7.6
 patched_versions:
-- ">= 2.5.0"
+  - ">= 2.5.0"
diff --git a/gems/clockwork_web/CVE-2023-25015.yml b/gems/clockwork_web/CVE-2023-25015.yml
new file mode 100644
index 0000000000..a50f6afc22
--- /dev/null
+++ b/gems/clockwork_web/CVE-2023-25015.yml
@@ -0,0 +1,16 @@
+---
+gem: clockwork_web
+cve: 2023-25015
+ghsa: p4xx-w6fr-c4w9
+url: https://github.com/ankane/clockwork_web/issues/4
+title: CSRF Vulnerability with Rails < 5.2
+date: 2023-02-01
+description: |
+  Clockwork Web is vulnerable to cross-site request forgery (CSRF) with Rails < 5.2.
+
+  A CSRF attack works by getting an authorized user to visit a malicious website and
+  then performing requests on behalf of the user. In this instance, actions include
+  enabling and disabling jobs.
+cvss_v3: 6.5
+patched_versions:
+  - ">= 0.1.2"
diff --git a/gems/cocaine/CVE-2013-4457.yml b/gems/cocaine/CVE-2013-4457.yml
index 9bc18dca3e..c59ade6e50 100644
--- a/gems/cocaine/CVE-2013-4457.yml
+++ b/gems/cocaine/CVE-2013-4457.yml
@@ -2,14 +2,16 @@
 gem: cocaine
 cve: 2013-4457
 osvdb: 98835
+ghsa: c43v-hrmg-56r4
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-4457
 title: Cocaine Gem for Ruby contains a flaw
 date: 2013-10-22
-description: Cocaine Gem for Ruby contains a flaw that is due to the method of variable
+description: |
+  Cocaine Gem for Ruby contains a flaw that is due to the method of variable
   interpolation used by the program. With a specially crafted object, a context-dependent
   attacker can execute arbitrary commands.
 cvss_v2: 6.8
 unaffected_versions:
-- < 0.4.0
+  - "< 0.4.0"
 patched_versions:
-- '>= 0.5.3'
+  - ">= 0.5.3"
diff --git a/gems/cocoapods-downloader/CVE-2022-21223.yml b/gems/cocoapods-downloader/CVE-2022-21223.yml
new file mode 100644
index 0000000000..a34d0be08a
--- /dev/null
+++ b/gems/cocoapods-downloader/CVE-2022-21223.yml
@@ -0,0 +1,16 @@
+---
+gem: cocoapods-downloader
+cve: 2022-21223
+ghsa: g397-v4w5-4m79
+url: https://github.com/CocoaPods/cocoapods-downloader/pull/127
+title: Command injection in cocoapods-downloader
+date: 2022-04-02
+description: |
+  The package cocoapods-downloader before 1.6.2 are vulnerable to Command
+  Injection via hg argument injection. When calling the download function (when using
+  hg), the url (and/or revision, tag, branch) is passed to the hg clone command in
+  a way that additional flags can be set. The additional flags can be used to perform
+  a command injection.
+cvss_v3: 8.1
+patched_versions:
+  - ">= 1.6.2"
diff --git a/gems/cocoapods-downloader/CVE-2022-24440.yml b/gems/cocoapods-downloader/CVE-2022-24440.yml
new file mode 100644
index 0000000000..da01bf5cf2
--- /dev/null
+++ b/gems/cocoapods-downloader/CVE-2022-24440.yml
@@ -0,0 +1,22 @@
+---
+gem: cocoapods-downloader
+cve: 2022-24440
+ghsa: 7627-mp87-jf6q
+url: https://github.com/CocoaPods/cocoapods-downloader/pull/124
+title: Command injection in cocoapods-downloader
+date: 2022-04-02
+description: |
+  The package cocoapods-downloader before 1.6.0, from 1.6.2 and before
+  1.6.3 are vulnerable to Command Injection via git argument injection. When calling
+  the Pod::Downloader.preprocess_options function and using git, both the git and
+  branch parameters are passed to the git ls-remote subcommand in a way that additional
+  flags can be set. The additional flags can be used to perform a command injection.
+cvss_v3: 8.1
+unaffected_versions:
+  - ">= 1.6.0, < 1.6.2"
+patched_versions:
+  - "= 1.6.0"
+  - ">= 1.6.3"
+related:
+  url:
+    - https://github.com/CocoaPods/cocoapods-downloader/pull/128
diff --git a/gems/codders-dataset/CVE-2014-4991.yml b/gems/codders-dataset/CVE-2014-4991.yml
index d5fec232ef..d5858758a8 100644
--- a/gems/codders-dataset/CVE-2014-4991.yml
+++ b/gems/codders-dataset/CVE-2014-4991.yml
@@ -2,10 +2,13 @@
 gem: codders-dataset
 cve: 2014-4991
 osvdb: 108582
+ghsa: w9vv-fvw8-j6q3
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-4991
 title: codders-dataset Gem for Ruby lib/dataset/database/mysql.rb and lib/dataset/database/postgresql.rb
   Process Table Local Plaintext Credential Disclosure
 date: 2014-06-30
-description: (1) lib/dataset/database/mysql.rb and (2) lib/dataset/database/postgresql.rb
+description: |
+  "(1) lib/dataset/database/mysql.rb and (2) lib/dataset/database/postgresql.rb
   in the codders-dataset gem 1.3.2.1 for Ruby place credentials on the mysqldump command
-  line, which allows local users to obtain sensitive information by listing the process.
+  line, which allows local users to obtain sensitive information by listing the process."
+cvss_v3: 7.8
diff --git a/gems/coin_base/CVE-2019-15224.yml b/gems/coin_base/CVE-2019-15224.yml
index 893e62a567..d325627cf9 100644
--- a/gems/coin_base/CVE-2019-15224.yml
+++ b/gems/coin_base/CVE-2019-15224.yml
@@ -12,8 +12,8 @@ description: |
   No unaffected version is known to exist, as the gem appears to have been entirely removed.
 cvss_v3: 9.8
 unaffected_versions:
-- "< 4.2.1"
-- "> 4.2.2"
+  - "< 4.2.1"
+  - "> 4.2.2"
 related:
   url:
-  - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
+    - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
diff --git a/gems/colorscore/CVE-2015-7541.yml b/gems/colorscore/CVE-2015-7541.yml
index 8194ae90c9..778730d7c9 100644
--- a/gems/colorscore/CVE-2015-7541.yml
+++ b/gems/colorscore/CVE-2015-7541.yml
@@ -19,4 +19,4 @@ description: |
   must be sanitized for shell metacharacters.
 cvss_v3: 10.0
 patched_versions:
-- ">= 0.0.5"
+  - ">= 0.0.5"
diff --git a/gems/coming-soon/CVE-2019-15224.yml b/gems/coming-soon/CVE-2019-15224.yml
index 4f9f3f6396..8b6a4a35e0 100644
--- a/gems/coming-soon/CVE-2019-15224.yml
+++ b/gems/coming-soon/CVE-2019-15224.yml
@@ -12,8 +12,8 @@ description: |
   No unaffected version is known to exist, as the gem appears to have been entirely removed.
 cvss_v3: 9.8
 unaffected_versions:
-- "< 0.2.8"
-- "> 0.2.8"
+  - "< 0.2.8"
+  - "> 0.2.8"
 related:
   url:
-  - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
+    - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
diff --git a/gems/command_wrap/CVE-2013-1875.yml b/gems/command_wrap/CVE-2013-1875.yml
index 905271074e..7c25f7232c 100644
--- a/gems/command_wrap/CVE-2013-1875.yml
+++ b/gems/command_wrap/CVE-2013-1875.yml
@@ -2,10 +2,12 @@
 gem: command_wrap
 cve: 2013-1875
 osvdb: 91450
+ghsa: p673-hjf2-pwfr
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1875
 title: command_wrap Gem for Ruby URI Handling Arbitrary Command Injection
 date: 2013-03-18
-description: command_wrap Gem for Ruby contains a flaw that is triggered during the
+description: |
+  command_wrap Gem for Ruby contains a flaw that is triggered during the
   handling of input passed via the URL that contains a semicolon character (;). This
   will allow a remote attacker to inject arbitrary commands and have them executed
   in the context of the user clicking it.
diff --git a/gems/commonmarker/CVE-2024-22051.yml b/gems/commonmarker/CVE-2024-22051.yml
new file mode 100644
index 0000000000..b3377bf7fb
--- /dev/null
+++ b/gems/commonmarker/CVE-2024-22051.yml
@@ -0,0 +1,59 @@
+---
+gem: commonmarker
+cve: 2024-22051
+ghsa: fmx4-26r3-wxpf
+url: https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x
+title: Integer overflow in cmark-gfm table parsing extension leads to heap memory
+  corruption
+date: 2022-03-03
+description: |
+
+  ### Impact
+
+  CommonMarker uses `cmark-gfm` for rendering
+  [Github Flavored Markdown](https://github.github.com/gfm/).
+  An [integer overflow in `cmark-gfm`'s table row parsing](https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x)
+  may lead to heap memory corruption when parsing tables who's marker
+  rows contain more than UINT16_MAX columns. The impact of this heap
+  corruption ranges from Information Leak to Arbitrary Code Execution.
+
+  If affected versions of CommonMarker are used for rendering remote
+  user controlled markdown, this vulnerability may lead to
+  Remote Code Execution (RCE).
+
+  ### Patches
+
+  This vulnerability has been patched in the following CommonMarker release:
+
+  - v0.23.4
+
+  ### Workarounds
+
+  The vulnerability exists in the table markdown extensions of
+  `cmark-gfm`. Disabling any use of the table extension will prevent
+  this vulnerability from being triggered.
+
+  ### References
+
+  - https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x
+
+  ### Acknowledgements
+
+  We would like to thank Felix Wilhelm of Google's Project Zero
+  for reporting this vulnerability
+
+  ### For more information
+
+  If you have any questions or comments about this advisory:
+
+  * Open an issue in [CommonMarker](http://github.com/gjtorikian/commonmarker)
+cvss_v3: 8.8
+patched_versions:
+  - ">= 0.23.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-22051
+    - https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x
+    - https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-fmx4-26r3-wxpf
+    - https://github.com/gjtorikian/commonmarker/commit/ab4504fd17460627a6ab255bc3c63e8e5fc6aed3
+    - https://github.com/advisories/GHSA-fmx4-26r3-wxpf
diff --git a/gems/commonmarker/GHSA-48wp-p9qv-4j64.yml b/gems/commonmarker/GHSA-48wp-p9qv-4j64.yml
new file mode 100644
index 0000000000..84668bc936
--- /dev/null
+++ b/gems/commonmarker/GHSA-48wp-p9qv-4j64.yml
@@ -0,0 +1,43 @@
+---
+gem: commonmarker
+ghsa: 48wp-p9qv-4j64
+url: https://github.com/gjtorikian/commonmarker/releases/tag/v0.23.9
+title: Commonmarker vulnerable to to several quadratic complexity bugs
+  that may lead to denial of service
+date: 2023-03-31
+description: |
+  ## Impact
+
+  Several quadratic complexity bugs in commonmarker's underlying
+  cmark-gfm library may lead to unbounded resource exhaustion and
+  subsequent denial of service.
+
+  The following vulnerabilities were addressed:
+  * CVE-2023-24824
+  * CVE-2023-26485
+
+  For more information, consult the release notes for versions
+  0.23.0.gfm.10 and 0.23.0.gfm.11.
+
+  ## Mitigation
+
+  Users are advised to upgrade to commonmarker version 0.23.9
+cvss_v3: 7.5
+patched_versions:
+  - ">= 0.23.9"
+related:
+  cve:
+    - 2023-24824
+    - 2023-26485
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-24824
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-26485
+    - https://github.com/gjtorikian/commonmarker/pull/236
+    - https://rubygems.org/gems/commonmarker/versions/0.23.9
+    - https://github.com/gjtorikian/commonmarker/releases/tag/v0.23.9
+    - https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-48wp-p9qv-4j64
+    - https://github.com/github/cmark-gfm/commit/2300c1bd2c8226108885bf019655c4159cf26b59
+    - https://github.com/github/cmark-gfm/security/advisories/GHSA-66g8-4hjf-77xh
+    - https://github.com/github/cmark-gfm/security/advisories/GHSA-r8vr-c48j-fcc5
+    - https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.10
+    - https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.11
diff --git a/gems/commonmarker/GHSA-4qw4-jpp4-8gvp.yml b/gems/commonmarker/GHSA-4qw4-jpp4-8gvp.yml
new file mode 100644
index 0000000000..0cc6197779
--- /dev/null
+++ b/gems/commonmarker/GHSA-4qw4-jpp4-8gvp.yml
@@ -0,0 +1,34 @@
+---
+gem: commonmarker
+ghsa: 4qw4-jpp4-8gvp
+url: https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-4qw4-jpp4-8gvp
+title: Unbounded resource exhaustion in cmark-gfm autolink extension may lead to denial of service
+date: 2022-09-21
+description: |
+  ### Impact
+
+  CommonMarker uses `cmark-gfm` for rendering [Github Flavored
+  Markdown](https://github.github.com/gfm/). A polynomial time complexity issue
+  in cmark-gfm's autolink extension may lead to unbounded resource exhaustion
+  and subsequent denial of service.
+
+  ### Patches
+
+  This vulnerability has been patched in the following CommonMarker release:
+
+  - v0.23.6
+
+  ### Workarounds
+
+  Disable use of the autolink extension.
+
+  ### References
+  https://en.wikipedia.org/wiki/Time_complexity
+patched_versions:
+  - ">= 0.23.6"
+related:
+  url:
+    - https://github.com/gjtorikian/commonmarker/pull/190
+    - https://github.com/gjtorikian/commonmarker/releases/tag/v0.23.6
+  ghsa:
+    - cgh3-p57x-9q7q
diff --git a/gems/commonmarker/GHSA-636f-xm5j-pj9m.yml b/gems/commonmarker/GHSA-636f-xm5j-pj9m.yml
new file mode 100644
index 0000000000..b13e906a84
--- /dev/null
+++ b/gems/commonmarker/GHSA-636f-xm5j-pj9m.yml
@@ -0,0 +1,38 @@
+---
+gem: commonmarker
+ghsa: 636f-xm5j-pj9m
+url: https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-636f-xm5j-pj9m
+title: Several quadratic complexity bugs may lead to denial of service in Commonmarker
+date: 2023-01-24
+description: |
+  ## Impact
+
+  Several quadratic complexity bugs in commonmarker's underlying [`cmark-gfm`](https://github.com/github/cmark-gfm)
+  library may lead to unbounded resource exhaustion and subsequent denial of service.
+
+  The following vulnerabilities were addressed:
+
+  * [CVE-2023-22483](https://github.com/github/cmark-gfm/security/advisories/GHSA-29g3-96g3-jg6c)
+  * [CVE-2023-22484](https://github.com/github/cmark-gfm/security/advisories/GHSA-24f7-9frr-5h2r)
+  * [CVE-2023-22485](https://github.com/github/cmark-gfm/security/advisories/GHSA-c944-cv5f-hpvr)
+  * [CVE-2023-22486](https://github.com/github/cmark-gfm/security/advisories/GHSA-r572-jvj2-3m8p)
+
+  For more information, consult the release notes for version
+  [`0.23.0.gfm.7`](https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.7).
+
+  ## Mitigation
+
+  Users are advised to upgrade to commonmarker version [`0.23.7`](https://rubygems.org/gems/commonmarker/versions/0.23.7).
+patched_versions:
+  - ">= 0.23.7"
+related:
+  cve:
+    - 2023-22483
+    - 2023-22484
+    - 2023-22485
+    - 2023-22486
+  ghsa:
+    - 29g3-96g3-jg6c
+    - 24f7-9frr-5h2r
+    - c944-cv5f-hpvr
+    - r572-jvj2-3m8p
diff --git a/gems/commonmarker/GHSA-7vh7-fw88-wj87.yml b/gems/commonmarker/GHSA-7vh7-fw88-wj87.yml
new file mode 100644
index 0000000000..a815a99018
--- /dev/null
+++ b/gems/commonmarker/GHSA-7vh7-fw88-wj87.yml
@@ -0,0 +1,37 @@
+---
+gem: commonmarker
+ghsa: 7vh7-fw88-wj87
+url: https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-7vh7-fw88-wj87
+title: Several quadratic complexity bugs may lead to
+  denial of service in Commonmarker
+date: 2023-08-08
+description: |
+  ## Impact
+
+  Several quadratic complexity bugs in commonmarker's underlying
+  [`cmark-gfm`](https://github.com/github/cmark-gfm) library may
+  lead to unbounded resource exhaustion and subsequent denial of service.
+
+  The following vulnerabilities were addressed:
+
+  * [CVE-2023-37463](https://github.com/github/cmark-gfm/security/advisories/GHSA-w4qg-3vf7-m9x5)
+
+  For more information, consult the release notes for version
+  [`0.29.0.gfm.12`](https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.12).
+
+  ## Mitigation
+
+  Users are advised to upgrade to commonmarker version
+  [`0.23.10`](https://rubygems.org/gems/commonmarker/versions/0.23.10).
+
+patched_versions:
+  - ">= 0.23.10"
+related:
+  url:
+    - https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-7vh7-fw88-wj87
+    - https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.12
+    - https://github.com/gjtorikian/commonmarker/commit/db8cd377b54541f7fd484d168b7682a282a680f7
+    - https://github.com/github/cmark-gfm/security/advisories/GHSA-w4qg-3vf7-m9x5
+    - https://rubygems.org/gems/commonmarker/versions/0.23.10
+    - https://github.com/advisories/GHSA-7vh7-fw88-wj87
+notes: "No CVE number, no cvss_v2, no cvss_v3"
diff --git a/gems/commonmarker/GHSA-fmx4-26r3-wxpf.yml b/gems/commonmarker/GHSA-fmx4-26r3-wxpf.yml
new file mode 100644
index 0000000000..5197e7115a
--- /dev/null
+++ b/gems/commonmarker/GHSA-fmx4-26r3-wxpf.yml
@@ -0,0 +1,35 @@
+---
+gem: commonmarker
+ghsa: fmx4-26r3-wxpf
+url: https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x
+title: Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption
+date: 2022-03-03
+description: |
+  ### Impact
+
+  CommonMarker uses `cmark-gfm` for rendering [Github Flavored Markdown](https://github.github.com/gfm/).
+  An [integer overflow in `cmark-gfm`'s table row parsing](https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x)
+  may lead to heap memory corruption when parsing tables who's marker rows contain more than UINT16_MAX
+  columns. The impact of this heap corruption ranges from Information Leak to Arbitrary Code Execution.
+
+  If affected versions of CommonMarker are used for rendering remote user controlled markdown, this
+  vulnerability may lead to Remote Code Execution (RCE).
+
+  ### Patches
+
+  This vulnerability has been patched in the following CommonMarker release:
+
+  - v0.23.4
+
+  ### Workarounds
+
+  The vulnerability exists in the table markdown extensions of `cmark-gfm`. Disabling any use of the
+  table extension will prevent this vulnerability from being triggered.
+cvss_v3: 8.8
+patched_versions:
+  - ">= 0.23.4"
+related:
+  ghsa:
+    - mc3g-88wq-6f4x
+  url:
+    - https://github.com/gjtorikian/commonmarker/commit/ab4504fd17460627a6ab255bc3c63e8e5fc6aed3
diff --git a/gems/consul/CVE-2019-16377.yml b/gems/consul/CVE-2019-16377.yml
index 45dec04dba..c2501efba5 100644
--- a/gems/consul/CVE-2019-16377.yml
+++ b/gems/consul/CVE-2019-16377.yml
@@ -13,4 +13,4 @@ description: |
   and hence unauthenticated access to certain controller actions.
 cvss_v3: 9.8
 patched_versions:
-- '>= 1.0.3'
+  - ">= 1.0.3"
diff --git a/gems/crack/CVE-2013-1800.yml b/gems/crack/CVE-2013-1800.yml
index 8213568f5b..d1bfc07981 100644
--- a/gems/crack/CVE-2013-1800.yml
+++ b/gems/crack/CVE-2013-1800.yml
@@ -2,14 +2,16 @@
 gem: crack
 cve: 2013-1800
 osvdb: 90742
+ghsa: m7fq-cf8q-35q7
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1800
-title: 'CVE-2013-1800 rubygem-crack: YAML parameter parsing vulnerability'
+title: "CVE-2013-1800 rubygem-crack: YAML parameter parsing vulnerability"
 date: 2013-01-09
-description: The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts
+description: |
+  The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts
   of string values, which might allow remote attackers to conduct object-injection
   attacks and execute arbitrary code, or cause a denial of service (memory and CPU
   consumption) by leveraging Action Pack support for (1) YAML type conversion or (2)
   Symbol type conversion, a similar vulnerability to CVE-2013-0156.
 cvss_v2: 7.5
 patched_versions:
-- '>= 0.3.2'
+  - ">= 0.3.2"
diff --git a/gems/cremefraiche/CVE-2013-2090.yml b/gems/cremefraiche/CVE-2013-2090.yml
index 0e5793f8eb..4affd34e07 100644
--- a/gems/cremefraiche/CVE-2013-2090.yml
+++ b/gems/cremefraiche/CVE-2013-2090.yml
@@ -2,14 +2,16 @@
 gem: cremefraiche
 cve: 2013-2090
 osvdb: 93395
+ghsa: m6f7-46hw-grcj
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-2090
 title: Creme Fraiche Gem for Ruby File Name Shell Metacharacter Injection Arbitrary
   Command Execution
 date: 2013-05-14
-description: Creme Fraiche Gem for Ruby contains a flaw that is due to the program
+description: |
+  Creme Fraiche Gem for Ruby contains a flaw that is due to the program
   failing to properly sanitize input in file names. With a specially crafted file
   name that contains shell metacharacters, a context-dependent attacker can execute
   arbitrary commands
 cvss_v2: 9.3
 patched_versions:
-- '>= 0.6.1'
+  - ">= 0.6.1"
diff --git a/gems/cron_parser/CVE-2019-15224.yml b/gems/cron_parser/CVE-2019-15224.yml
index 669bf5609c..c6af6940a2 100644
--- a/gems/cron_parser/CVE-2019-15224.yml
+++ b/gems/cron_parser/CVE-2019-15224.yml
@@ -12,10 +12,10 @@ description: |
   No unaffected version is known to exist, as the gem appears to have been entirely removed.
 cvss_v3: 9.8
 unaffected_versions:
-- "< 1.0.12"
-- "> 1.0.13"
-- "< 0.1.4"
-- "> 0.1.4"
+  - "< 1.0.12"
+  - "> 1.0.13"
+  - "< 0.1.4"
+  - "> 0.1.4"
 related:
   url:
-  - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
+    - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
diff --git a/gems/csv-safe/CVE-2022-28481.yml b/gems/csv-safe/CVE-2022-28481.yml
new file mode 100644
index 0000000000..008459c465
--- /dev/null
+++ b/gems/csv-safe/CVE-2022-28481.yml
@@ -0,0 +1,18 @@
+---
+gem: csv-safe
+cve: 2022-28481
+ghsa: f55g-x8qq-2569
+url: https://github.com/zvory/csv-safe/issues/7
+title: CSV-Safe improperly filters special characters potentially leading to CSV injection
+date: 2022-05-03
+description: |
+  CSV-Safe gem < 3.0.0 doesn't filter out special characters which could
+  trigger CSV Injection.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 3.0.0"
+related:
+  url:
+    - https://github.com/zvory/csv-safe/pull/8
+    - https://github.com/WeblateOrg/weblate/commit/d9e136ff228e3760fd6dd7572869ac38e9a81809
+    - https://hackerone.com/reports/223999
diff --git a/gems/curb/OSVDB-114600.yml b/gems/curb/OSVDB-114600.yml
index 5fec6d7d9a..657a9e5a80 100644
--- a/gems/curb/OSVDB-114600.yml
+++ b/gems/curb/OSVDB-114600.yml
@@ -1,12 +1,17 @@
 ---
 gem: curb
 osvdb: 114600
-url: http://osvdb.org/show/osvdb/114600
+url: https://my.diffend.io/gems/curb/versions/0.6.4.0
 title: curb Gem for Ruby Empty http_put Body Handling Remote DoS
 date: 2010-08-12
 description: |
-  curb Gem for Ruby contains a flaw that is triggered when handling an empty
-  http_put body. This may allow a remote attacker to crash an application
-  linked against the library.
+  curb Gem for Ruby contains a flaw that is triggered when handling
+  an empty http_put body. This may allow a remote attacker to crash
+  an application linked against the library.
 patched_versions:
-- '>= 0.7.8'
+  - ">= 0.7.8"
+related:
+  url:
+    - https://my.diffend.io/gems/curb/versions/0.6.4.0
+    - https://my.diffend.io/gems/curb/0.7.7.1/0.7.8
+    - http://osvdb.org/show/osvdb/114600
diff --git a/gems/curl/CVE-2013-2617.yml b/gems/curl/CVE-2013-2617.yml
index 8a51b955ae..e9eefd49a6 100644
--- a/gems/curl/CVE-2013-2617.yml
+++ b/gems/curl/CVE-2013-2617.yml
@@ -2,9 +2,11 @@
 gem: curl
 cve: 2013-2617
 osvdb: 91230
+ghsa: hxx6-p24v-wg8c
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-2617
-title: 'CVE-2013-2617 rubygem-curl: insufficient URL escaping command injection'
+title: "CVE-2013-2617 rubygem-curl: insufficient URL escaping command injection"
 date: 2013-03-12
-description: lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute
+description: |
+  lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute
   arbitrary commands via shell metacharacters in a URL.
 cvss_v2: 7.5
diff --git a/gems/curupira/CVE-2015-10053.yml b/gems/curupira/CVE-2015-10053.yml
new file mode 100644
index 0000000000..92eb6b4cb0
--- /dev/null
+++ b/gems/curupira/CVE-2015-10053.yml
@@ -0,0 +1,23 @@
+---
+gem: curupira
+cve: 2015-10053
+ghsa: 85gf-wr67-f83w
+url: https://github.com/prodigasistemas/curupira/commit/93a9a77896bb66c949acb8e64bceafc74bc8c271
+title: curupira is vulnerable to SQL injection
+date: 2023-01-16
+description: |
+  A vulnerability classified as critical has been found in prodigasistemas
+  curupira up to 0.1.3. Affected is an unknown function of the file
+  app/controllers/curupira/passwords_controller.rb.
+  The manipulation leads to sql injection. Upgrading to version 0.1.4 is able
+  to address this issue. The name of the patch is
+  93a9a77896bb66c949acb8e64bceafc74bc8c271. It is recommended to upgrade the
+  affected component. VDB-218394 is the identifier assigned to this
+  vulnerability.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 0.1.4"
+related:
+  url:
+    - https://github.com/prodigasistemas/curupira/releases/tag/v0.1.4
+    - https://vuldb.com/?id.218394
diff --git a/gems/dalli/CVE-2022-4064.yml b/gems/dalli/CVE-2022-4064.yml
new file mode 100644
index 0000000000..125ea48e70
--- /dev/null
+++ b/gems/dalli/CVE-2022-4064.yml
@@ -0,0 +1,20 @@
+---
+gem: dalli
+cve: 2022-4064
+ghsa: 3xg8-cc8f-9wv2
+url: https://github.com/petergoldstein/dalli/issues/932
+title: Unsanitized input leading to code injection in Dalli
+date: 2022-11-19
+description: |
+  A vulnerability was found in Dalli. Affected is the function self.meta_set
+  of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol
+  Handler. The manipulation leads to injection. The exploit has been disclosed to
+  the public and may be used. The name of the patch is 48d594dae55934476fec61789e7a7c3700e0f50d.
+  It is recommended to apply a patch to fix this issue.
+cvss_v3: 3.7
+patched_versions:
+  - ">= 3.2.3"
+related:
+  url:
+    - https://github.com/petergoldstein/dalli/pull/933
+    - https://github.com/petergoldstein/dalli/commit/48d594dae55934476fec61789e7a7c3700e0f50d
diff --git a/gems/datagrid/CVE-2019-14281.yml b/gems/datagrid/CVE-2019-14281.yml
index 617c014e0d..c376ba6da6 100644
--- a/gems/datagrid/CVE-2019-14281.yml
+++ b/gems/datagrid/CVE-2019-14281.yml
@@ -9,6 +9,6 @@ description: |
   The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included
   a code-execution backdoor inserted by a third party.
 unaffected_versions:
-- < 1.0.6
-- '> 1.0.6'
+  - "< 1.0.6"
+  - "> 1.0.6"
 cvss_v3: 9.8
diff --git a/gems/date/CVE-2021-41817.yml b/gems/date/CVE-2021-41817.yml
index 11dc4db734..0b211b2cd1 100644
--- a/gems/date/CVE-2021-41817.yml
+++ b/gems/date/CVE-2021-41817.yml
@@ -5,7 +5,7 @@ ghsa: qg54-694p-wgpp
 url: https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/
 title: Regular Expression Denial of Service Vulnerability of Date Parsing Methods
 date: 2021-11-15
-description: |-
+description: |
   Date's parsing methods including `Date.parse` are using Regexps internally, some of
   which are vulnerable against regular expression denial of service. Applications and
   libraries that apply such methods to untrusted input may be affected.
@@ -19,8 +19,9 @@ description: |-
   Please update the date gem to version 3.2.1, 3.1.2, 3.0.2, and 2.0.1, or later.  You
   can use `gem update date` to update it.  If you are using bundler, please add
   `gem "date", ">= 3.2.1"` to your `Gemfile`.
+cvss_v3: 7.5
 patched_versions:
-- "~> 2.0.1"
-- "~> 3.0.2"
-- "~> 3.1.2"
-- ">= 3.2.1"
+  - "~> 2.0.1"
+  - "~> 3.0.2"
+  - "~> 3.1.2"
+  - ">= 3.2.1"
diff --git a/gems/decidim-admin/CVE-2023-48220.yml b/gems/decidim-admin/CVE-2023-48220.yml
new file mode 100644
index 0000000000..06d3d77391
--- /dev/null
+++ b/gems/decidim-admin/CVE-2023-48220.yml
@@ -0,0 +1,96 @@
+---
+gem: decidim-admin
+cve: 2023-48220
+ghsa: w3q8-m492-4pwp
+url: https://github.com/decidim/decidim/security/advisories/GHSA-w3q8-m492-4pwp
+title: Possibility to circumvent the invitation token expiry period
+date: 2024-02-20
+description: |
+
+  ### Impact
+
+  The invites feature allows users to accept the invitation for an
+  unlimited amount of time through the password reset functionality.
+
+  When using the password reset functionality, the `devise_invitable`
+  gem always accepts the pending invitation if the user has been
+  invited as shown in this piece of code within the `devise_invitable` gem:
+  https://github.com/scambra/devise_invitable/blob/41f58970ff76fb64382a9b9ea1bd530f7c3adab2/lib/devise_invitable/models.rb#L198
+
+  The only check done here is if the user has been invited but the code
+  does not ensure that the pending invitation is still valid as defined
+  by the `invite_for` expiry period as explained in the gem's documentation:
+  https://github.com/scambra/devise_invitable#model-configuration-
+
+  > `invite_for`: The period the generated invitation token is valid.
+  After this period, the invited resource won’t be able to accept the
+  invitation. When `invite_for` is `0` (the default), the invitation won’t expire.
+
+  Decidim sets this configuration to `2.weeks` so this configuration
+  should be respected:
+  https://github.com/decidim/decidim/blob/d2d390578050772d1bdb6d731395f1afc39dcbfc/decidim-core/config/initializers/devise.rb#L134
+
+  The bug is in the `devise_invitable` gem and should be fixed there
+  and the dependency should be upgraded in Decidim once the fix becomes available.
+
+  ### Patches
+
+  Update `devise_invitable` to version `2.0.9` or above by running the following command:
+
+  ```
+  $ bundle update devise_invitable
+  ```
+
+  ### Workarounds
+
+  The invitations can be cancelled directly from the database by
+  running the following command from the Rails console:
+
+  ```
+  > Decidim::User.invitation_not_accepted.update_all(invitation_token: nil)
+  ```
+
+  ### References
+
+  OWASP ASVS V4.0.3-2.3.1
+
+  This bug has existed in the `devise_invitable` gem since this commit
+  which was first included in the `v0.4.rc3` release of this gem:
+  https://github.com/scambra/devise_invitable/commit/94d859c7de0829bf63f679ae5dd3cab2b866a098
+
+  All versions since then are affected.
+
+  This gem was first introduced at its version `~> 1.7.0` to the
+  `decidim-admin` gem in this commit which was first included in
+  the `v0.0.1.alpha3` release of Decidim:
+  https://github.com/decidim/decidim/commit/073e60e2e4224dd81815a784002ebba30f2ebb34
+
+  It was first introduced at its version `~> 1.7.0` to the `decidim-system`
+  gem in this commit which was also first included in the `v0.0.1.alpha3`
+  release of Decidim:
+  https://github.com/decidim/decidim/commit/b12800717a689c295a9ea680a38ca9f823d2c454
+
+  ### Credits
+
+  This issue was discovered in City of Helsinki's security audit against
+  Decidim 0.27 done during September 2023. The security audit was
+  implemented by [Deloitte Finland](https://www2.deloitte.com/fi/fi.html).
+cvss_v3: 5.7
+unaffected_versions:
+  - "< 0.0.1.alpha3"
+patched_versions:
+  - "~> 0.26.9"
+  - ">= 0.27.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-48220
+    - https://github.com/decidim/decidim/releases/tag/v0.26.9
+    - https://github.com/decidim/decidim/releases/tag/v0.27.5
+    - https://github.com/decidim/decidim/releases/tag/v0.28.0
+    - https://github.com/decidim/decidim/security/advisories/GHSA-w3q8-m492-4pwp
+    - https://github.com/decidim/decidim/commit/073e60e2e4224dd81815a784002ebba30f2ebb34
+    - https://github.com/decidim/decidim/commit/b12800717a689c295a9ea680a38ca9f823d2c454
+    - https://github.com/scambra/devise_invitable/commit/94d859c7de0829bf63f679ae5dd3cab2b866a098
+    - https://github.com/decidim/decidim/blob/d2d390578050772d1bdb6d731395f1afc39dcbfc/decidim-core/config/initializers/devise.rb#L134
+    - https://github.com/scambra/devise_invitable/blob/41f58970ff76fb64382a9b9ea1bd530f7c3adab2/lib/devise_invitable/models.rb#L198
+    - https://github.com/advisories/GHSA-w3q8-m492-4pwp
diff --git a/gems/decidim-admin/CVE-2024-27095.yml b/gems/decidim-admin/CVE-2024-27095.yml
new file mode 100644
index 0000000000..343893cc26
--- /dev/null
+++ b/gems/decidim-admin/CVE-2024-27095.yml
@@ -0,0 +1,42 @@
+---
+gem: decidim-admin
+cve: 2024-27095
+ghsa: 529p-jj47-w3m3
+url: https://github.com/decidim/decidim/security/advisories/GHSA-529p-jj47-w3m3
+title: Decidim cross-site scripting (XSS) in the admin panel
+date: 2024-07-10
+description: |
+  ### Impact
+
+  The admin panel is subject to potential XSS attach in case the attacker
+  manages to modify some records being uploaded to the server.
+
+  The attacker is able to change  e.g. to `<svg onload=alert('XSS')>`
+  if they know how to craft these requests themselves. And then enter
+  the returned blob ID to the form inputs manually by modifying the
+  edit page source.
+
+  ### Patches
+
+  Available in versions 0.27.6 and 0.28.1.
+
+  ### Workarounds
+
+  Review the user accounts that have access to the admin panel (i.e.
+  general Administrators, and participatory space's Administrators)
+  and remove access to them if they don't need it.
+
+  ### References
+
+  OWASP ASVS v4.0.3-5.1.3
+cvss_v3: 5.4
+patched_versions:
+  - "~> 0.27.6"
+  - ">= 0.28.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-27095
+    - https://github.com/decidim/decidim/security/advisories/GHSA-529p-jj47-w3m3
+    - https://github.com/decidim/decidim/releases/tag/v0.27.6
+    - https://github.com/decidim/decidim/releases/tag/v0.28.1
+    - https://github.com/advisories/GHSA-529p-jj47-w3m3
diff --git a/gems/decidim-admin/CVE-2024-32034.yml b/gems/decidim-admin/CVE-2024-32034.yml
new file mode 100644
index 0000000000..0448e61989
--- /dev/null
+++ b/gems/decidim-admin/CVE-2024-32034.yml
@@ -0,0 +1,37 @@
+---
+gem: decidim-admin
+cve: 2024-32034
+ghsa: rx9f-5ggv-5rh6
+url: https://github.com/decidim/decidim/security/advisories/GHSA-rx9f-5ggv-5rh6
+title: Decidim::Admin vulnerable to cross-site scripting (XSS) in the admin activity
+  log
+date: 2024-09-16
+description: |
+  ### Impact
+  The admin panel is subject to potential XSS attach in case an admin
+  assigns a valuator to a proposal, or does any other action that
+  generates an admin activity log where one of the resources has an
+  XSS crafted.
+
+  ### Patches
+  N/A
+
+  ### Workarounds
+  Redirect the pages /admin and /admin/logs to other admin pages
+  to prevent this access (i.e. `/admin/organization/edit`)
+
+  ### References
+  OWASP ASVS v4.0.3-5.1.3
+cvss_v3: 6.8
+patched_versions:
+  - "~> 0.27.7"
+  - ">= 0.28.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-32034
+    - https://github.com/decidim/decidim/security/advisories/GHSA-rx9f-5ggv-5rh6
+    - https://github.com/decidim/decidim/commit/23fc8d702a4976727f78617f5e42353d67931645
+    - https://github.com/decidim/decidim/commit/9d79f09a2d38c87feb28725670d6cc1f55c22072
+    - https://github.com/decidim/decidim/commit/e494235d559be13dd1f8694345e6f6bba762d1c0
+    - https://github.com/decidim/decidim/commit/ff755e23814aeb56e9089fc08006a5d3faee47b6
+    - https://github.com/advisories/GHSA-rx9f-5ggv-5rh6
diff --git a/gems/decidim-core/CVE-2023-32693.yml b/gems/decidim-core/CVE-2023-32693.yml
new file mode 100644
index 0000000000..e36b414491
--- /dev/null
+++ b/gems/decidim-core/CVE-2023-32693.yml
@@ -0,0 +1,28 @@
+---
+gem: decidim-core
+cve: 2023-32693
+ghsa: 469h-mqg8-535r
+url: https://github.com/decidim/decidim/security/advisories/GHSA-469h-mqg8-535r
+title: Decidim Cross-site Scripting vulnerability in the external link redirections
+date: 2023-07-11
+description: |
+  ### Impact
+
+  The external link feature is susceptible to Cross-site scripting. This allows a remote attacker to execute JavaScript code in the context of a currently logged-in user. An attacker could use this vulnerability to make other users endorse or support proposals they have no intention of supporting or endorsing.
+
+  ### Patches
+
+  The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3) and [v0.26.6](https://github.com/decidim/decidim/releases/tag/v0.26.6)
+cvss_v3: 8.1
+unaffected_versions:
+  - "< 0.25.0"
+patched_versions:
+  - "~> 0.26.6"
+  - ">= 0.27.3"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-469h-mqg8-535r
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-32693
+    - https://github.com/decidim/decidim/releases/tag/v0.26.6
+    - https://github.com/decidim/decidim/releases/tag/v0.27.3
+    - https://github.com/advisories/GHSA-469h-mqg8-535r
diff --git a/gems/decidim-core/CVE-2023-34089.yml b/gems/decidim-core/CVE-2023-34089.yml
new file mode 100644
index 0000000000..6ca4b39c37
--- /dev/null
+++ b/gems/decidim-core/CVE-2023-34089.yml
@@ -0,0 +1,28 @@
+---
+gem: decidim-core
+cve: 2023-34089
+ghsa: 5652-92r9-3fx9
+url: https://github.com/decidim/decidim/security/advisories/GHSA-5652-92r9-3fx9
+title: Decidim Cross-site Scripting vulnerability in the processes filter
+date: 2023-07-11
+description: |
+  ### Impact
+
+  The processes filter feature is susceptible to Cross-site scripting. This allows a remote attacker to execute JavaScript code in the context of a currently logged-in user. An attacker could use this vulnerability to make other users endorse or support proposals they have no intention of supporting or endorsing.
+
+  ### Patches
+
+  The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3) and [v0.26.6](https://github.com/decidim/decidim/releases/tag/v0.26.6)
+cvss_v3: 8.1
+unaffected_versions:
+  - "< 0.14.0"
+patched_versions:
+  - "~> 0.26.6"
+  - ">= 0.27.3"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-5652-92r9-3fx9
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-34089
+    - https://github.com/decidim/decidim/releases/tag/v0.26.6
+    - https://github.com/decidim/decidim/releases/tag/v0.27.3
+    - https://github.com/advisories/GHSA-5652-92r9-3fx9
diff --git a/gems/decidim-core/CVE-2023-51447.yml b/gems/decidim-core/CVE-2023-51447.yml
new file mode 100644
index 0000000000..e203b8aa04
--- /dev/null
+++ b/gems/decidim-core/CVE-2023-51447.yml
@@ -0,0 +1,48 @@
+---
+gem: decidim-core
+cve: 2023-51447
+ghsa: 9w99-78rj-hmxq
+url: https://github.com/decidim/decidim/security/advisories/GHSA-9w99-78rj-hmxq
+title: Cross-site scripting (XSS) in the dynamic file uploads
+date: 2024-02-20
+description: |
+  ### Impact
+  The dynamic file upload feature is subject to potential XSS attach in case the attacker manages to modify the file names of the records being uploaded to the server.
+
+  This appears in sections where the user controls the file upload dialogs themselves and has the technical knowledge to change the file names through the dynamic upload endpoint. Therefore I believe it would require the attacker to control the whole session of the particular user but in any case, this needs to be fixed.
+
+  Successful exploit of this vulneratibility would require the user to have successfully uploaded a file blob to the server with a malicious file name and then have the possibility to direct the other user to the edit page of the record where the attachment is attached.
+
+  The users are able to craft the direct upload requests themselves controlling the file name that gets stored to the database as shown here:
+  https://github.com/rails/rails/blob/a967d355c6fee9ad9b8bd115d43bc8b0fc207e7e/activestorage/app/controllers/active_storage/direct_uploads_controller.rb#L14
+
+  The attacker is able to change the filename e.g. to `<svg onload=alert('XSS')>` if they know how to craft these requests themselves. And then enter the returned blob ID to the form inputs manually by modifying the edit page source.
+
+  Therefore, anywhere we display these strings, we should properly escape them.
+
+  ### Patches
+  PR #11612 fixes this problem both for 0.28.dev and 0.27.x.
+
+  ### Workarounds
+  Disable dynamic uploads for the instance, e.g. from proposals.
+
+  ### References
+  OWASP ASVS v4.0.3-5.1.3
+
+  ### Credits
+  This issue was discovered in City of Helsinki's security audit against Decidim 0.27 done during September 2023. The security audit was implemented by [Deloitte Finland](https://www2.deloitte.com/fi/fi.html).
+cvss_v3: 6.3
+unaffected_versions:
+  - "< 0.27.0"
+patched_versions:
+  - ">= 0.27.5"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-9w99-78rj-hmxq
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-51447
+    - https://github.com/decidim/decidim/pull/11612
+    - https://github.com/decidim/decidim/commit/aaf72787cf18beeeb6a771c1f7cbb7654b073423
+    - https://github.com/decidim/decidim/releases/tag/v0.27.5
+    - https://github.com/decidim/decidim/releases/tag/v0.28.0
+    - https://github.com/rails/rails/blob/a967d355c6fee9ad9b8bd115d43bc8b0fc207e7e/activestorage/app/controllers/active_storage/direct_uploads_controller.rb#L14
+    - https://github.com/advisories/GHSA-9w99-78rj-hmxq
diff --git a/gems/decidim-decidim_awesome/CVE-2024-43415.yml b/gems/decidim-decidim_awesome/CVE-2024-43415.yml
new file mode 100644
index 0000000000..05e8ff190f
--- /dev/null
+++ b/gems/decidim-decidim_awesome/CVE-2024-43415.yml
@@ -0,0 +1,67 @@
+---
+gem: decidim-decidim_awesome
+cve: 2024-43415
+ghsa: cxwf-qc32-375f
+url: https://github.com/decidim-ice/decidim-module-decidim_awesome/security/advisories/GHSA-cxwf-qc32-375f
+title: Decidim-Awesome has SQL injection in AdminAccountability
+date: 2024-11-12
+description: |
+  ## Vulnerability type: CWE-89: Improper Neutralization of Special
+
+  Elements used in an SQL Command ('SQL Injection')
+
+  ## Vendor:
+
+  Decidim International
+  Community Environment
+
+  ### Has vendor conﬁrmed: Yes
+
+  ### Attack type: Remote
+
+  ### Impact:
+
+  Code Execution
+  Escalation of Privileges
+  Information Disclosure
+
+  ### Aﬀected component:
+
+  A raw sql-statement that uses an interpolated variable
+  exists in the admin_role_actions method of the
+  `papertrail/version-model(app/models/decidim/decidim_awesome/paper_trail_version.rb`).
+
+  ### Attack vector:
+
+  An attacker with admin permissions could manipulate database queries
+  in order to read out the database, read ﬁles from the ﬁlesystem,
+  write ﬁles from the ﬁlesystem. In the worst case, this could lead
+  to remote code execution on the server.
+
+  Description of the vulnerability for use in the CVE
+  [ℹ] (https://cveproject.github.io/docs/content/key-details-\nphrasing.pdf):
+    An improper neutralization of special elements used in an SQL
+    command in the `papertrail/version-\nmodel` of the
+    decidim_awesome-module <= v0.11.1 (> 0.9.0) allows an authenticated
+    admin user to manipulate sql queries\nto disclose information,
+    read and write ﬁles or execute commands.
+
+  ### Discoverer Credits: Wolfgang Hotwagner
+
+  ### References:
+
+  https://pentest.ait.ac.at/security-advisory/decidim-awesome-sql-injection-in-adminaccountability
+  https://portswigger.net/web-security/sql-injection
+cvss_v3: 9.0
+unaffected_versions:
+  - "< 0.11.0"
+patched_versions:
+  - "~> 0.10.3"
+  - ">= 0.11.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-43415
+    - https://github.com/decidim-ice/decidim-module-decidim_awesome/commit/84374037d34a3ac80dc18406834169c65869f11b
+    - https://github.com/decidim-ice/decidim-module-decidim_awesome/security/advisories/GHSA-cxwf-qc32-375f
+    - https://pentest.ait.ac.at/security-advisory/decidim-awesome-sql-injection-in-adminaccountability
+    - https://github.com/advisories/GHSA-cxwf-qc32-375f
diff --git a/gems/decidim-meetings/CVE-2023-34090.yml b/gems/decidim-meetings/CVE-2023-34090.yml
new file mode 100644
index 0000000000..7d81d0fe5c
--- /dev/null
+++ b/gems/decidim-meetings/CVE-2023-34090.yml
@@ -0,0 +1,34 @@
+---
+gem: decidim-meetings
+cve: 2023-34090
+ghsa: jm79-9pm4-vrw9
+url: https://github.com/decidim/decidim/security/advisories/GHSA-jm79-9pm4-vrw9
+title: Decidim vulnerable to sensitive data disclosure
+date: 2023-07-11
+description: |
+  Note: added the actual report as a [comment](https://github.com/decidim/decidim/security/advisories/GHSA-jm79-9pm4-vrw9#advisory-comment-81110).
+
+  ### Summary
+
+  Decidim, a platform for digital citizen participation, uses a third-party library named Ransack for filtering certain database collections (e.g., public meetings). By default, this library allows filtering on all data attributes and associations. This allows an unauthenticated remote attacker to exfiltrate non-public data from the underlying database of a Decidim instance (e.g., exfiltrating data from the user table).
+
+  ### Impact
+  This issue may lead to Sensitive Data Disclosure.
+
+  ### Patches
+  The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3).
+
+  ### Workarounds
+  Disable or unpublish all meetings components from your application.
+cvss_v3: 7.5
+unaffected_versions:
+  - "< 0.27.0"
+patched_versions:
+  - ">= 0.27.3"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-jm79-9pm4-vrw9
+    - https://github.com/decidim/decidim/security/advisories/GHSA-jm79-9pm4-vrw9#advisory-comment-81110
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-34090
+    - https://github.com/decidim/decidim/releases/tag/v0.27.3
+    - https://github.com/advisories/GHSA-jm79-9pm4-vrw9
diff --git a/gems/decidim-meetings/CVE-2024-45594.yml b/gems/decidim-meetings/CVE-2024-45594.yml
new file mode 100644
index 0000000000..8b6e00c1d1
--- /dev/null
+++ b/gems/decidim-meetings/CVE-2024-45594.yml
@@ -0,0 +1,39 @@
+---
+gem: decidim-meetings
+cve: 2024-45594
+ghsa: j4h6-gcj7-7v9v
+url: https://github.com/decidim/decidim/security/advisories/GHSA-j4h6-gcj7-7v9v
+title: decidim-meetings Cross-site scripting vulnerability
+  in the online or hybrid meeting embeds
+date: 2024-11-13
+description: |
+  ### Impact
+
+  The meeting embeds feature used in the online or hybrid meetings
+  is subject to potential XSS attack through a malformed URL.
+
+  ### Workarounds
+
+  Disable the creation of meetings by participants in the meeting component.
+
+  ### References
+
+  OWASP ASVS v4.0.3-5.1.3
+
+  ### Credits
+
+  This issue was discovered in a security audit organized by mitgestalten
+  Partizipationsbüro against Decidim. The security audit was implemented
+  by the Austrian Institute of Technology.
+cvss_v3: 7.7
+unaffected_versions:
+  - "< 0.28.0"
+patched_versions:
+  - "~> 0.28.3"
+  - ">= 0.29.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-45594
+    - https://github.com/decidim/decidim/releases/tag/v0.28.3
+    - https://github.com/decidim/decidim/security/advisories/GHSA-j4h6-gcj7-7v9v
+    - https://github.com/advisories/GHSA-j4h6-gcj7-7v9v
diff --git a/gems/decidim-system/CVE-2023-48220.yml b/gems/decidim-system/CVE-2023-48220.yml
new file mode 100644
index 0000000000..8612aa9968
--- /dev/null
+++ b/gems/decidim-system/CVE-2023-48220.yml
@@ -0,0 +1,73 @@
+---
+gem: decidim-system
+cve: 2023-48220
+ghsa: w3q8-m492-4pwp
+url: https://github.com/decidim/decidim/security/advisories/GHSA-w3q8-m492-4pwp
+title: Possibility to circumvent the invitation token expiry period
+date: 2024-02-20
+description: |
+  ### Impact
+  The invites feature allows users to accept the invitation for an unlimited amount of time through the password reset functionality.
+
+  When using the password reset functionality, the `devise_invitable` gem always accepts the pending invitation if the user has been invited as shown in this piece of code within the `devise_invitable` gem:
+  https://github.com/scambra/devise_invitable/blob/41f58970ff76fb64382a9b9ea1bd530f7c3adab2/lib/devise_invitable/models.rb#L198
+
+  The only check done here is if the user has been invited but the code does not ensure that the pending invitation is still valid as defined by the `invite_for` expiry period as explained in the gem's documentation:
+  https://github.com/scambra/devise_invitable#model-configuration-
+
+  > `invite_for`: The period the generated invitation token is valid. After this period, the invited resource won’t be able to accept the invitation. When `invite_for` is `0` (the default), the invitation won’t expire.
+
+  Decidim sets this configuration to `2.weeks` so this configuration should be respected:
+  https://github.com/decidim/decidim/blob/d2d390578050772d1bdb6d731395f1afc39dcbfc/decidim-core/config/initializers/devise.rb#L134
+
+  The bug is in the `devise_invitable` gem and should be fixed there and the dependency should be upgraded in Decidim once the fix becomes available.
+
+  ### Patches
+  Update `devise_invitable` to version `2.0.9` or above by running the following command:
+
+  ```
+  $ bundle update devise_invitable
+  ```
+
+  ### Workarounds
+  The invitations can be cancelled directly from the database by running the following command from the Rails console:
+
+  ```
+  > Decidim::User.invitation_not_accepted.update_all(invitation_token: nil)
+  ```
+
+  ### References
+  OWASP ASVS V4.0.3-2.3.1
+
+  This bug has existed in the `devise_invitable` gem since this commit which was first included in the `v0.4.rc3` release of this gem:
+  https://github.com/scambra/devise_invitable/commit/94d859c7de0829bf63f679ae5dd3cab2b866a098
+
+  All versions since then are affected.
+
+  This gem was first introduced at its version `~> 1.7.0` to the `decidim-admin` gem in this commit which was first included in the `v0.0.1.alpha3` release of Decidim:
+  https://github.com/decidim/decidim/commit/073e60e2e4224dd81815a784002ebba30f2ebb34
+
+  It was first introduced at its version `~> 1.7.0` to the `decidim-system` gem in this commit which was also first included in the `v0.0.1.alpha3` release of Decidim:
+  https://github.com/decidim/decidim/commit/b12800717a689c295a9ea680a38ca9f823d2c454
+
+  ### Credits
+  This issue was discovered in City of Helsinki's security audit against Decidim 0.27 done during September 2023. The security audit was implemented by [Deloitte Finland](https://www2.deloitte.com/fi/fi.html).
+cvss_v3: 5.7
+unaffected_versions:
+  - "< 0.0.1.alpha3"
+patched_versions:
+  - "~> 0.26.9"
+  - ">= 0.27.5"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-w3q8-m492-4pwp
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-48220
+    - https://github.com/decidim/decidim/commit/073e60e2e4224dd81815a784002ebba30f2ebb34
+    - https://github.com/decidim/decidim/commit/b12800717a689c295a9ea680a38ca9f823d2c454
+    - https://github.com/scambra/devise_invitable/commit/94d859c7de0829bf63f679ae5dd3cab2b866a098
+    - https://github.com/decidim/decidim/blob/d2d390578050772d1bdb6d731395f1afc39dcbfc/decidim-core/config/initializers/devise.rb#L134
+    - https://github.com/decidim/decidim/releases/tag/v0.26.9
+    - https://github.com/decidim/decidim/releases/tag/v0.27.5
+    - https://github.com/decidim/decidim/releases/tag/v0.28.0
+    - https://github.com/scambra/devise_invitable/blob/41f58970ff76fb64382a9b9ea1bd530f7c3adab2/lib/devise_invitable/models.rb#L198
+    - https://github.com/advisories/GHSA-w3q8-m492-4pwp
diff --git a/gems/decidim-templates/CVE-2023-36465.yml b/gems/decidim-templates/CVE-2023-36465.yml
new file mode 100644
index 0000000000..2c92646c1d
--- /dev/null
+++ b/gems/decidim-templates/CVE-2023-36465.yml
@@ -0,0 +1,27 @@
+---
+gem: decidim-templates
+cve: 2023-36465
+ghsa: 639h-86hw-qcjq
+url: https://github.com/decidim/decidim/security/advisories/GHSA-639h-86hw-qcjq
+title: Decidim has broken access control in templates
+date: 2023-10-05
+description: |
+  ### Impact
+
+  The `templates` module doesn't enforce the correct permissions,
+  allowing any logged-in user to access to this functionality in
+  the administration panel. An attacker could use this vulnerability
+  to change, create or delete templates of surveys.
+cvss_v3: 9.1
+unaffected_versions:
+  - "< 0.23.2"
+patched_versions:
+  - "~> 0.26.8"
+  - ">= 0.27.4"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-639h-86hw-qcjq
+    - https://github.com/decidim/decidim/releases/tag/v0.26.8
+    - https://github.com/decidim/decidim/releases/tag/v0.27.4
+    - https://github.com/advisories/GHSA-639h-86hw-qcjq
+notes: "No NVD url; No cvss_v2"
diff --git a/gems/decidim-templates/CVE-2023-47635.yml b/gems/decidim-templates/CVE-2023-47635.yml
new file mode 100644
index 0000000000..f2cdc6a226
--- /dev/null
+++ b/gems/decidim-templates/CVE-2023-47635.yml
@@ -0,0 +1,42 @@
+---
+gem: decidim-templates
+cve: 2023-47635
+ghsa: f3qm-vfc3-jg6v
+url: https://github.com/decidim/decidim/security/advisories/GHSA-f3qm-vfc3-jg6v
+title: Possible CSRF attack at questionnaire templates preview
+date: 2024-02-20
+description: |
+  ### Impact
+  The CSRF authenticity token check is currently disabled for the questionnaire templates preview as per:
+  https://github.com/decidim/decidim/blob/3187bdfd40ea1c57c2c12512b09a7fec0b2bed08/decidim-templates/app/controllers/decidim/templates/admin/questionnaire_templates_controller.rb#L11
+
+  This was introduced by this commit in the PR that introduced this feature (#6247):
+  https://github.com/decidim/decidim/pull/6247/commits/5542227be66e3b6d7530f5b536069bce09376660
+
+  The issue does not imply a serious security thread as you need to have access also to the session cookie in order to see this resource. This URL does not allow modifying the resource but it may allow attackers to gain access to information which was not meant to be public.
+
+  ### Patches
+  #11743
+
+  ### Workarounds
+  Disable the templates functionality or remove all available templates.
+
+  ### References
+  #11743
+cvss_v3: 4.5
+unaffected_versions:
+  - "< 0.23.0"
+patched_versions:
+  - ">= 0.27.5"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-f3qm-vfc3-jg6v
+    - https://github.com/decidim/decidim/pull/11743
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-47635
+    - https://github.com/decidim/decidim/pull/6247
+    - https://github.com/decidim/decidim/commit/5542227be66e3b6d7530f5b536069bce09376660
+    - https://github.com/decidim/decidim/commit/57a4b467787448307b5d9b01ce6e2c8502e121ac
+    - https://github.com/decidim/decidim/blob/3187bdfd40ea1c57c2c12512b09a7fec0b2bed08/decidim-templates/app/controllers/decidim/templates/admin/questionnaire_templates_controller.rb#L11
+    - https://github.com/decidim/decidim/releases/tag/v0.27.5
+    - https://github.com/decidim/decidim/releases/tag/v0.28.0
+    - https://github.com/advisories/GHSA-f3qm-vfc3-jg6v
diff --git a/gems/decidim/CVE-2023-32693.yml b/gems/decidim/CVE-2023-32693.yml
new file mode 100644
index 0000000000..36d2ddb168
--- /dev/null
+++ b/gems/decidim/CVE-2023-32693.yml
@@ -0,0 +1,28 @@
+---
+gem: decidim
+cve: 2023-32693
+ghsa: 469h-mqg8-535r
+url: https://github.com/decidim/decidim/security/advisories/GHSA-469h-mqg8-535r
+title: Decidim Cross-site Scripting vulnerability in the external link redirections
+date: 2023-07-11
+description: |
+  ### Impact
+
+  The external link feature is susceptible to Cross-site scripting. This allows a remote attacker to execute JavaScript code in the context of a currently logged-in user. An attacker could use this vulnerability to make other users endorse or support proposals they have no intention of supporting or endorsing.
+
+  ### Patches
+
+  The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3) and [v0.26.6](https://github.com/decidim/decidim/releases/tag/v0.26.6)
+cvss_v3: 8.1
+unaffected_versions:
+  - "< 0.25.0"
+patched_versions:
+  - "~> 0.26.6"
+  - ">= 0.27.3"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-469h-mqg8-535r
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-32693
+    - https://github.com/decidim/decidim/releases/tag/v0.26.6
+    - https://github.com/decidim/decidim/releases/tag/v0.27.3
+    - https://github.com/advisories/GHSA-469h-mqg8-535r
diff --git a/gems/decidim/CVE-2023-34089.yml b/gems/decidim/CVE-2023-34089.yml
new file mode 100644
index 0000000000..f988d44bbc
--- /dev/null
+++ b/gems/decidim/CVE-2023-34089.yml
@@ -0,0 +1,28 @@
+---
+gem: decidim
+cve: 2023-34089
+ghsa: 5652-92r9-3fx9
+url: https://github.com/decidim/decidim/security/advisories/GHSA-5652-92r9-3fx9
+title: Decidim Cross-site Scripting vulnerability in the processes filter
+date: 2023-07-11
+description: |
+  ### Impact
+
+  The processes filter feature is susceptible to Cross-site scripting. This allows a remote attacker to execute JavaScript code in the context of a currently logged-in user. An attacker could use this vulnerability to make other users endorse or support proposals they have no intention of supporting or endorsing.
+
+  ### Patches
+
+  The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3) and [v0.26.6](https://github.com/decidim/decidim/releases/tag/v0.26.6)
+cvss_v3: 8.1
+unaffected_versions:
+  - "< 0.14.0"
+patched_versions:
+  - "~> 0.26.6"
+  - ">= 0.27.3"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-5652-92r9-3fx9
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-34089
+    - https://github.com/decidim/decidim/releases/tag/v0.26.6
+    - https://github.com/decidim/decidim/releases/tag/v0.27.3
+    - https://github.com/advisories/GHSA-5652-92r9-3fx9
diff --git a/gems/decidim/CVE-2023-34090.yml b/gems/decidim/CVE-2023-34090.yml
new file mode 100644
index 0000000000..c53f0e2d39
--- /dev/null
+++ b/gems/decidim/CVE-2023-34090.yml
@@ -0,0 +1,34 @@
+---
+gem: decidim
+cve: 2023-34090
+ghsa: jm79-9pm4-vrw9
+url: https://github.com/decidim/decidim/security/advisories/GHSA-jm79-9pm4-vrw9
+title: Decidim vulnerable to sensitive data disclosure
+date: 2023-07-11
+description: |
+  Note: added the actual report as a [comment](https://github.com/decidim/decidim/security/advisories/GHSA-jm79-9pm4-vrw9#advisory-comment-81110).
+
+  ### Summary
+
+  Decidim, a platform for digital citizen participation, uses a third-party library named Ransack for filtering certain database collections (e.g., public meetings). By default, this library allows filtering on all data attributes and associations. This allows an unauthenticated remote attacker to exfiltrate non-public data from the underlying database of a Decidim instance (e.g., exfiltrating data from the user table).
+
+  ### Impact
+  This issue may lead to Sensitive Data Disclosure.
+
+  ### Patches
+  The problem was patched in [v0.27.3](https://github.com/decidim/decidim/releases/tag/v0.27.3).
+
+  ### Workarounds
+  Disable or unpublish all meetings components from your application.
+cvss_v3: 7.5
+unaffected_versions:
+  - "< 0.27.0"
+patched_versions:
+  - ">= 0.27.3"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-jm79-9pm4-vrw9
+    - https://github.com/decidim/decidim/security/advisories/GHSA-jm79-9pm4-vrw9#advisory-comment-81110
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-34090
+    - https://github.com/decidim/decidim/releases/tag/v0.27.3
+    - https://github.com/advisories/GHSA-jm79-9pm4-vrw9
diff --git a/gems/decidim/CVE-2023-36465.yml b/gems/decidim/CVE-2023-36465.yml
new file mode 100644
index 0000000000..6d8914a448
--- /dev/null
+++ b/gems/decidim/CVE-2023-36465.yml
@@ -0,0 +1,27 @@
+---
+gem: decidim
+cve: 2023-36465
+ghsa: 639h-86hw-qcjq
+url: https://github.com/decidim/decidim/security/advisories/GHSA-639h-86hw-qcjq
+title: Decidim has broken access control in templates
+date: 2023-10-05
+description: |
+  ### Impact
+
+  The `templates` module doesn't enforce the correct permissions,
+  allowing any logged-in user to access to this functionality in
+  the administration panel. An attacker could use this vulnerability
+  to change, create or delete templates of surveys.
+cvss_v3: 9.1
+unaffected_versions:
+  - "< 0.23.2"
+patched_versions:
+  - "~> 0.26.8"
+  - ">= 0.27.4"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-639h-86hw-qcjq
+    - https://github.com/decidim/decidim/releases/tag/v0.26.8
+    - https://github.com/decidim/decidim/releases/tag/v0.27.4
+    - https://github.com/advisories/GHSA-639h-86hw-qcjq
+notes: "No NVD url; No cvss_v2"
diff --git a/gems/decidim/CVE-2023-47634.yml b/gems/decidim/CVE-2023-47634.yml
new file mode 100644
index 0000000000..3865ffa1b3
--- /dev/null
+++ b/gems/decidim/CVE-2023-47634.yml
@@ -0,0 +1,31 @@
+---
+gem: decidim
+cve: 2023-47634
+ghsa: r275-j57c-7mf2
+url: https://github.com/decidim/decidim/security/advisories/GHSA-r275-j57c-7mf2
+title: Race condition in Endorsements
+date: 2024-02-20
+description: |
+  ### Impact
+
+  A race condition in the endorsement of resources (for instance,
+  a proposal) allows a user to make more than once endorsement.
+
+  To exploit this vulnerability, the request to set an
+  endorsement must be sent several times in parallel.
+
+  ### Workarounds
+
+  Disable the Endorsement feature in the components.
+cvss_v3: 3.1
+unaffected_versions:
+  - "< 0.10.0"
+patched_versions:
+  - "~> 0.26.9"
+  - ">= 0.27.5"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-r275-j57c-7mf2
+    - https://github.com/decidim/decidim/commit/5c5ee7a50d75c10643dd8c495e2517641e4d74db
+    - https://github.com/decidim/decidim/commit/7b840d2c37a562709f4481db644d8c43add28536
+    - https://github.com/advisories/GHSA-r275-j57c-7mf2
diff --git a/gems/decidim/CVE-2023-48220.yml b/gems/decidim/CVE-2023-48220.yml
new file mode 100644
index 0000000000..83b3963dbf
--- /dev/null
+++ b/gems/decidim/CVE-2023-48220.yml
@@ -0,0 +1,73 @@
+---
+gem: decidim
+cve: 2023-48220
+ghsa: w3q8-m492-4pwp
+url: https://github.com/decidim/decidim/security/advisories/GHSA-w3q8-m492-4pwp
+title: Possibility to circumvent the invitation token expiry period
+date: 2024-02-20
+description: |
+  ### Impact
+  The invites feature allows users to accept the invitation for an unlimited amount of time through the password reset functionality.
+
+  When using the password reset functionality, the `devise_invitable` gem always accepts the pending invitation if the user has been invited as shown in this piece of code within the `devise_invitable` gem:
+  https://github.com/scambra/devise_invitable/blob/41f58970ff76fb64382a9b9ea1bd530f7c3adab2/lib/devise_invitable/models.rb#L198
+
+  The only check done here is if the user has been invited but the code does not ensure that the pending invitation is still valid as defined by the `invite_for` expiry period as explained in the gem's documentation:
+  https://github.com/scambra/devise_invitable#model-configuration-
+
+  > `invite_for`: The period the generated invitation token is valid. After this period, the invited resource won’t be able to accept the invitation. When `invite_for` is `0` (the default), the invitation won’t expire.
+
+  Decidim sets this configuration to `2.weeks` so this configuration should be respected:
+  https://github.com/decidim/decidim/blob/d2d390578050772d1bdb6d731395f1afc39dcbfc/decidim-core/config/initializers/devise.rb#L134
+
+  The bug is in the `devise_invitable` gem and should be fixed there and the dependency should be upgraded in Decidim once the fix becomes available.
+
+  ### Patches
+  Update `devise_invitable` to version `2.0.9` or above by running the following command:
+
+  ```
+  $ bundle update devise_invitable
+  ```
+
+  ### Workarounds
+  The invitations can be cancelled directly from the database by running the following command from the Rails console:
+
+  ```
+  > Decidim::User.invitation_not_accepted.update_all(invitation_token: nil)
+  ```
+
+  ### References
+  OWASP ASVS V4.0.3-2.3.1
+
+  This bug has existed in the `devise_invitable` gem since this commit which was first included in the `v0.4.rc3` release of this gem:
+  https://github.com/scambra/devise_invitable/commit/94d859c7de0829bf63f679ae5dd3cab2b866a098
+
+  All versions since then are affected.
+
+  This gem was first introduced at its version `~> 1.7.0` to the `decidim-admin` gem in this commit which was first included in the `v0.0.1.alpha3` release of Decidim:
+  https://github.com/decidim/decidim/commit/073e60e2e4224dd81815a784002ebba30f2ebb34
+
+  It was first introduced at its version `~> 1.7.0` to the `decidim-system` gem in this commit which was also first included in the `v0.0.1.alpha3` release of Decidim:
+  https://github.com/decidim/decidim/commit/b12800717a689c295a9ea680a38ca9f823d2c454
+
+  ### Credits
+  This issue was discovered in City of Helsinki's security audit against Decidim 0.27 done during September 2023. The security audit was implemented by [Deloitte Finland](https://www2.deloitte.com/fi/fi.html).
+cvss_v3: 5.7
+unaffected_versions:
+  - "< 0.0.1.alpha3"
+patched_versions:
+  - "~> 0.26.9"
+  - ">= 0.27.5"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-w3q8-m492-4pwp
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-48220
+    - https://github.com/decidim/decidim/commit/073e60e2e4224dd81815a784002ebba30f2ebb34
+    - https://github.com/decidim/decidim/commit/b12800717a689c295a9ea680a38ca9f823d2c454
+    - https://github.com/scambra/devise_invitable/commit/94d859c7de0829bf63f679ae5dd3cab2b866a098
+    - https://github.com/decidim/decidim/blob/d2d390578050772d1bdb6d731395f1afc39dcbfc/decidim-core/config/initializers/devise.rb#L134
+    - https://github.com/decidim/decidim/releases/tag/v0.26.9
+    - https://github.com/decidim/decidim/releases/tag/v0.27.5
+    - https://github.com/decidim/decidim/releases/tag/v0.28.0
+    - https://github.com/scambra/devise_invitable/blob/41f58970ff76fb64382a9b9ea1bd530f7c3adab2/lib/devise_invitable/models.rb#L198
+    - https://github.com/advisories/GHSA-w3q8-m492-4pwp
diff --git a/gems/decidim/CVE-2023-51447.yml b/gems/decidim/CVE-2023-51447.yml
new file mode 100644
index 0000000000..bedd6ff455
--- /dev/null
+++ b/gems/decidim/CVE-2023-51447.yml
@@ -0,0 +1,48 @@
+---
+gem: decidim
+cve: 2023-51447
+ghsa: 9w99-78rj-hmxq
+url: https://github.com/decidim/decidim/security/advisories/GHSA-9w99-78rj-hmxq
+title: Cross-site scripting (XSS) in the dynamic file uploads
+date: 2024-02-20
+description: |
+  ### Impact
+  The dynamic file upload feature is subject to potential XSS attach in case the attacker manages to modify the file names of the records being uploaded to the server.
+
+  This appears in sections where the user controls the file upload dialogs themselves and has the technical knowledge to change the file names through the dynamic upload endpoint. Therefore I believe it would require the attacker to control the whole session of the particular user but in any case, this needs to be fixed.
+
+  Successful exploit of this vulneratibility would require the user to have successfully uploaded a file blob to the server with a malicious file name and then have the possibility to direct the other user to the edit page of the record where the attachment is attached.
+
+  The users are able to craft the direct upload requests themselves controlling the file name that gets stored to the database as shown here:
+  https://github.com/rails/rails/blob/a967d355c6fee9ad9b8bd115d43bc8b0fc207e7e/activestorage/app/controllers/active_storage/direct_uploads_controller.rb#L14
+
+  The attacker is able to change the filename e.g. to `<svg onload=alert('XSS')>` if they know how to craft these requests themselves. And then enter the returned blob ID to the form inputs manually by modifying the edit page source.
+
+  Therefore, anywhere we display these strings, we should properly escape them.
+
+  ### Patches
+  PR #11612 fixes this problem both for 0.28.dev and 0.27.x.
+
+  ### Workarounds
+  Disable dynamic uploads for the instance, e.g. from proposals.
+
+  ### References
+  OWASP ASVS v4.0.3-5.1.3
+
+  ### Credits
+  This issue was discovered in City of Helsinki's security audit against Decidim 0.27 done during September 2023. The security audit was implemented by [Deloitte Finland](https://www2.deloitte.com/fi/fi.html).
+cvss_v3: 6.3
+unaffected_versions:
+  - "< 0.27.0"
+patched_versions:
+  - ">= 0.27.5"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-9w99-78rj-hmxq
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-51447
+    - https://github.com/decidim/decidim/pull/11612
+    - https://github.com/decidim/decidim/commit/aaf72787cf18beeeb6a771c1f7cbb7654b073423
+    - https://github.com/decidim/decidim/releases/tag/v0.27.5
+    - https://github.com/decidim/decidim/releases/tag/v0.28.0
+    - https://github.com/rails/rails/blob/a967d355c6fee9ad9b8bd115d43bc8b0fc207e7e/activestorage/app/controllers/active_storage/direct_uploads_controller.rb#L14
+    - https://github.com/advisories/GHSA-9w99-78rj-hmxq
diff --git a/gems/decidim/CVE-2024-27090.yml b/gems/decidim/CVE-2024-27090.yml
new file mode 100644
index 0000000000..337dd5ed0b
--- /dev/null
+++ b/gems/decidim/CVE-2024-27090.yml
@@ -0,0 +1,34 @@
+---
+gem: decidim
+cve: 2024-27090
+ghsa: qcj6-vxwx-4rqv
+url: https://github.com/decidim/decidim/security/advisories/GHSA-qcj6-vxwx-4rqv
+title: Decidim vulnerable to data disclosure through the embed feature
+date: 2024-07-10
+description: |
+  ### Impact
+  If an attacker can infer the slug or URL of an unpublished or private
+  resource, and this resource can be embedded (such as a Participatory
+  Process, an Assembly, a Proposal, a Result, etc), then some data of
+  this resource could be accessed.
+
+  ### Patches
+
+  Version 0.27.6
+
+  https://github.com/decidim/decidim/commit/1756fa639ef393ca8e8bb16221cab2e2e7875705
+
+  ### Workarounds
+
+  Disallow access through your web server to the URLs finished with `/embed.html`
+cvss_v3: 5.3
+patched_versions:
+  - ">= 0.27.6"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-27090
+    - https://github.com/decidim/decidim/security/advisories/GHSA-qcj6-vxwx-4rqv
+    - https://github.com/decidim/decidim/pull/12528
+    - https://github.com/decidim/decidim/commit/1756fa639ef393ca8e8bb16221cab2e2e7875705
+    - https://github.com/decidim/decidim/releases/tag/v0.27.6
+    - https://github.com/advisories/GHSA-qcj6-vxwx-4rqv
diff --git a/gems/decidim/CVE-2024-32469.yml b/gems/decidim/CVE-2024-32469.yml
new file mode 100644
index 0000000000..750deacf63
--- /dev/null
+++ b/gems/decidim/CVE-2024-32469.yml
@@ -0,0 +1,40 @@
+---
+gem: decidim
+cve: 2024-32469
+ghsa: 7cx8-44pc-xv3q
+url: https://github.com/decidim/decidim/security/advisories/GHSA-7cx8-44pc-xv3q
+title: Decidim cross-site scripting (XSS) in the pagination
+date: 2024-07-10
+description: |
+  ### Impact
+
+  The pagination feature used in searches and filters is subject to
+  potential XSS attack through a malformed URL using the GET parameter
+  `per_page`.
+
+  ### Patches
+
+  Patched in version 0.27.6 and 0.28.1
+
+  ### References
+
+  OWASP ASVS v4.0.3-5.1.3
+
+  ### Credits
+
+  This issue was discovered in a security audit organized by the
+  [mitgestalten Partizipationsbüro](https://partizipationsbuero.at/)
+  and funded by [netidee](https://www.netidee.at/) against Decidim
+  done during April 2024. The security audit was implemented by
+  [AIT Austrian Institute of Technology GmbH](https://www.ait.ac.at/),
+cvss_v3: 7.1
+patched_versions:
+  - "~> 0.27.6"
+  - ">= 0.28.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-32469
+    - https://github.com/decidim/decidim/security/advisories/GHSA-7cx8-44pc-xv3q
+    - https://github.com/decidim/decidim/releases/tag/v0.27.6
+    - https://github.com/decidim/decidim/releases/tag/v0.28.1
+    - https://github.com/advisories/GHSA-7cx8-44pc-xv3q
diff --git a/gems/decidim/CVE-2024-39910.yml b/gems/decidim/CVE-2024-39910.yml
new file mode 100644
index 0000000000..6c94c346dd
--- /dev/null
+++ b/gems/decidim/CVE-2024-39910.yml
@@ -0,0 +1,39 @@
+---
+gem: decidim
+cve: 2024-39910
+ghsa: vvqw-fqwx-mqmm
+url: https://github.com/decidim/decidim/security/advisories/GHSA-vvqw-fqwx-mqmm
+title: Decidim::Admin vulnerable to cross-site scripting (XSS) in
+  the admin panel with QuillJS WYSWYG editor
+date: 2024-09-16
+description: |
+  ### Impact
+  The WYSWYG editor QuillJS is subject to potential XSS attach in
+  case the attacker manages to modify the HTML before being
+  uploaded to the server.
+
+  The attacker is able to change e.g. to <svg onload=alert('XSS')>
+  if they know how to craft these requests themselves.
+
+  ### Patches
+  N/A
+
+  ### Workarounds
+  Review the user accounts that have access to the admin panel (i.e.
+  general Administrators, and participatory space's Administrators)
+  and remove access to them if they don't need it.
+
+  Disable the "Enable rich text editor for participants" setting in
+  the admin dashboard.
+
+  ### References
+  OWASP ASVS v4.0.3-5.1.3
+cvss_v3: 5.4
+patched_versions:
+  - ">= 0.27.7"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-39910
+    - https://github.com/decidim/decidim/security/advisories/GHSA-vvqw-fqwx-mqmm
+    - https://github.com/decidim/decidim/commit/47adca81cabea898005ec07b130b008f2a2be99f
+    - https://github.com/advisories/GHSA-vvqw-fqwx-mqmm
diff --git a/gems/decidim/CVE-2024-41673.yml b/gems/decidim/CVE-2024-41673.yml
new file mode 100644
index 0000000000..11a555d042
--- /dev/null
+++ b/gems/decidim/CVE-2024-41673.yml
@@ -0,0 +1,35 @@
+---
+gem: decidim
+cve: 2024-41673
+ghsa: cc4g-m3g7-xmw8
+url: https://github.com/decidim/decidim/security/advisories/GHSA-cc4g-m3g7-xmw8
+title: Decidim has a cross-site scripting vulnerability in the version control page
+date: 2024-10-01
+description: |
+  ### Impact
+
+  The version control feature used in resources is subject to potential
+  cross-site scripting (XSS) attack through a malformed URL.
+
+  ### Workarounds
+
+  Not available
+
+  ### References
+
+  OWASP ASVS v4.0.3-5.1.3
+
+  ### Credits
+
+  This issue was discovered in a security audit organized by
+  [Open Source Politics](https://opensourcepolitics.eu/)
+  against Decidim done during July 2025.
+cvss_v3: 7.1
+patched_versions:
+  - ">= 0.27.8"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-41673
+    - https://github.com/decidim/decidim/security/advisories/GHSA-cc4g-m3g7-xmw8
+    - https://github.com/decidim/decidim/commit/8a18c8b1ee85a1b35ee0d8d5893f218695d15637
+    - https://github.com/advisories/GHSA-cc4g-m3g7-xmw8
diff --git a/gems/delayed_job_web/CVE-2017-12097.yml b/gems/delayed_job_web/CVE-2017-12097.yml
index 54bb14b506..5a412df8f0 100644
--- a/gems/delayed_job_web/CVE-2017-12097.yml
+++ b/gems/delayed_job_web/CVE-2017-12097.yml
@@ -13,4 +13,4 @@ description: |
   to trigger this vulnerability.
 cvss_v3: 6.1
 patched_versions:
-- '>= 1.4.2'
+  - ">= 1.4.2"
diff --git a/gems/dependabot-common/CVE-2020-26222.yml b/gems/dependabot-common/CVE-2020-26222.yml
index 33fafebecb..d2c09a53bc 100644
--- a/gems/dependabot-common/CVE-2020-26222.yml
+++ b/gems/dependabot-common/CVE-2020-26222.yml
@@ -5,7 +5,7 @@ ghsa: 23f7-99jx-m54r
 url: https://github.com/dependabot/dependabot-core/security/advisories/GHSA-23f7-99jx-m54r
 date: 2020-11-13
 title: Remote code execution in dependabot-core branch names when cloning
-description: |-
+description: |
   ### Impact
   Remote code execution vulnerability in `dependabot-common` and
   `dependabot-go_modules` when a source branch name contains malicious
@@ -58,11 +58,11 @@ description: |-
   ```
 cvss_v3: 8.7
 patched_versions:
-- '>= 0.125.1'
+  - ">= 0.125.1"
 
 unaffected_versions:
-- < 0.119.0.beta1
+  - "< 0.119.0.beta1"
 
 related:
   url:
-  - https://github.com/dependabot/dependabot-core/pull/2727
+    - https://github.com/dependabot/dependabot-core/pull/2727
diff --git a/gems/dependabot-omnibus/CVE-2020-26222.yml b/gems/dependabot-omnibus/CVE-2020-26222.yml
index 97b40b9c86..4d1841a186 100644
--- a/gems/dependabot-omnibus/CVE-2020-26222.yml
+++ b/gems/dependabot-omnibus/CVE-2020-26222.yml
@@ -5,7 +5,7 @@ ghsa: 23f7-99jx-m54r
 url: https://github.com/dependabot/dependabot-core/security/advisories/GHSA-23f7-99jx-m54r
 date: 2020-11-13
 title: Remote code execution in dependabot-core branch names when cloning
-description: |-
+description: |
   ### Impact
   Remote code execution vulnerability in `dependabot-common` and
   `dependabot-go_modules` when a source branch name contains malicious
@@ -58,11 +58,11 @@ description: |-
   ```
 cvss_v3: 8.7
 patched_versions:
-- '>= 0.125.1'
+  - ">= 0.125.1"
 
 unaffected_versions:
-- < 0.119.0.beta1
+  - "< 0.119.0.beta1"
 
 related:
   url:
-  - https://github.com/dependabot/dependabot-core/pull/2727
+    - https://github.com/dependabot/dependabot-core/pull/2727
diff --git a/gems/devise-two-factor/CVE-2015-7225.yml b/gems/devise-two-factor/CVE-2015-7225.yml
index da194db770..0722034d03 100644
--- a/gems/devise-two-factor/CVE-2015-7225.yml
+++ b/gems/devise-two-factor/CVE-2015-7225.yml
@@ -19,4 +19,4 @@ description: |
   duration of the timestep.
 cvss_v3: 5.3
 patched_versions:
-- ">= 2.0.0"
+  - ">= 2.0.0"
diff --git a/gems/devise-two-factor/CVE-2021-43177.yml b/gems/devise-two-factor/CVE-2021-43177.yml
new file mode 100644
index 0000000000..706b1c5730
--- /dev/null
+++ b/gems/devise-two-factor/CVE-2021-43177.yml
@@ -0,0 +1,27 @@
+---
+gem: devise-two-factor
+cve: 2021-43177
+ghsa: jm35-h8q2-73mp
+url: https://github.com/tinfoil/devise-two-factor/security/advisories/GHSA-jm35-h8q2-73mp
+title: Improper one time password handling in devise-two-factor
+date: 2022-04-07
+description: |
+  ### Impact
+
+  As a result of an incomplete fix for CVE-2015-7225, in versions of
+  devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password
+  (OTP) for one (and only one) immediately trailing interval.
+
+  ### Patches
+
+  This vulnerability has been patched in version 4.0.2 which was released on
+  March 24th, 2022. Individuals using this package are strongly encouraged to
+  upgrade as soon as possible.
+cvss_v3: 5.3
+patched_versions:
+  - ">= 4.0.2"
+related:
+  cve:
+    - 2015-7225
+  url:
+    - https://github.com/tinfoil/devise-two-factor/issues/106
diff --git a/gems/devise-two-factor/CVE-2024-8796.yml b/gems/devise-two-factor/CVE-2024-8796.yml
new file mode 100644
index 0000000000..01272d7cfa
--- /dev/null
+++ b/gems/devise-two-factor/CVE-2024-8796.yml
@@ -0,0 +1,62 @@
+---
+gem: devise-two-factor
+cve: 2024-8796
+ghsa: qjxf-mc72-wjr2
+url: https://github.com/devise-two-factor/devise-two-factor/security/advisories/GHSA-qjxf-mc72-wjr2
+title: Devise-Two-Factor Authentication Uses Insufficient Default
+  OTP Shared Secret Length
+date: 2024-09-17
+description: |
+  ### Summary
+  Under the default configuration, Devise-Two-Factor version
+  >= 2.2.0 & < 6.0.0 generate TOTP shared secrets that are 120 bits
+  instead of the 128-bit minimum defined by
+  [RFC 4226](https://datatracker.ietf.org/doc/html/rfc4226).
+  Using a shared secret shorter than the minimum to generate a
+  multi-factor authentication code could make it easier for an
+  attacker to guess the shared secret and generate valid TOTP codes.
+
+  ### Remediation
+  Devise-Two-Factor should be upgraded to version v6.0.0 as soon
+  as possible. After upgrading, the length of shared secrets and
+  TOTP URLs generated by the library will increase since the new
+  shared secrets will be longer.
+
+  If upgrading is not possible, you can override the default
+  `otp_secret_length` attribute in the model when configuring
+  `two_factor_authenticable` and set it to a value of at least
+  26 to ensure newly generated shared secrets are at least
+  128-bits long.
+
+  After upgrading or implementing the workaround, applications
+  using Devise-Two-Factor may wish to migrate users to the new
+  OTP length to provide increased protection for those accounts.
+  Turning off OTP for users by setting `otp_required_for_login`
+  to false is not recommended since it would leave accounts
+  unprotected. However, you may wish to implement application
+  logic that checks the length of a user's shared secret and
+  prompts users to re-enroll in OTP.
+
+  ### Background
+  Devise-Two-Factor uses [ROTP](https://github.com/mdp/rotp) to
+  generate shared secrets for TOTP. In ROTP < 5.0.0, the first
+  argument to the "ROTP::Base32#random_base32" function represented
+  the number of bytes to read from SecureRandom which were then
+  returned as a base32-encoded string. In ROTP 5.1.0, this function
+  was changed so that the first argument now represents the length
+  of the base32-encoded string returned by the function instead
+  of the number of bytes to read from SecureRandom resulting in
+  a shorter key being generated for the same input value.
+  (https://github.com/mdp/rotp/commit/c6c24ab894e7c2b1579d45ac82c41454d1e98227).
+cvss_v3: 5.3
+cvss_v4: 6.0
+unaffected_versions:
+  - "< 2.2.0"
+patched_versions:
+  - ">= 6.0.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-8796
+    - https://github.com/devise-two-factor/devise-two-factor/security/advisories/GHSA-qjxf-mc72-wjr2
+    - https://github.com/devise-two-factor/devise-two-factor/commit/cc6f34423d9c6af9f3e02be478c3c40dc7462e19
+    - https://github.com/advisories/GHSA-qjxf-mc72-wjr2
diff --git a/gems/devise/CVE-2013-0233.yml b/gems/devise/CVE-2013-0233.yml
index 2055b30a92..429a98768c 100644
--- a/gems/devise/CVE-2013-0233.yml
+++ b/gems/devise/CVE-2013-0233.yml
@@ -2,6 +2,7 @@
 gem: devise
 cve: 2013-0233
 osvdb: 89642
+ghsa: jxhw-mg8m-2pj8
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0233
 title: Devise Database Type Conversion Crafted Request Parsing Security Bypass
 date: 2013-01-28
@@ -11,7 +12,7 @@ description: |
   request, a remote attacker can bypass security restrictions.
 cvss_v2: 6.8
 patched_versions:
-- ~> 1.5.4
-- ~> 2.0.5
-- ~> 2.1.3
-- '>= 2.2.3'
+  - "~> 1.5.4"
+  - "~> 2.0.5"
+  - "~> 2.1.3"
+  - ">= 2.2.3"
diff --git a/gems/devise/CVE-2015-8314.yml b/gems/devise/CVE-2015-8314.yml
index c614dd6205..6f5b15ba45 100644
--- a/gems/devise/CVE-2015-8314.yml
+++ b/gems/devise/CVE-2015-8314.yml
@@ -1,6 +1,7 @@
 ---
 gem: devise
 cve: 2015-8314
+ghsa: 746g-3gfp-hfhw
 url: http://blog.plataformatec.com.br/2016/01/improve-remember-me-cookie-expiration-in-devise/
 title: Devise Gem for Ruby Unauthorized Access Using Remember Me Cookie
 date: 2016-01-18
@@ -10,5 +11,6 @@ description: |
   attacker manages to steal a remember me cookie and the user does not change
   the password frequently, the cookie can be used to gain access to the
   application indefinitely.
+cvss_v3: 7.5
 patched_versions:
-- '>= 3.5.4'
+  - ">= 3.5.4"
diff --git a/gems/devise/CVE-2019-16109.yml b/gems/devise/CVE-2019-16109.yml
index 81c0201012..dc71e1f2a5 100644
--- a/gems/devise/CVE-2019-16109.yml
+++ b/gems/devise/CVE-2019-16109.yml
@@ -11,4 +11,4 @@ description: |
   However, there is no scenario within Devise itself in which such database records would exist.
 cvss_v3: 5.3
 patched_versions:
-- '>= 4.7.1'
+  - ">= 4.7.1"
diff --git a/gems/devise/CVE-2019-5421.yml b/gems/devise/CVE-2019-5421.yml
index 346c964209..aa5c38c67e 100644
--- a/gems/devise/CVE-2019-5421.yml
+++ b/gems/devise/CVE-2019-5421.yml
@@ -13,4 +13,4 @@ description: |
 cvss_v2: 7.5
 cvss_v3: 9.8
 patched_versions:
-- '>= 4.6.0'
+  - ">= 4.6.0"
diff --git a/gems/devise/OSVDB-114435.yml b/gems/devise/OSVDB-114435.yml
index 3936cf7655..8f0b4a3b09 100644
--- a/gems/devise/OSVDB-114435.yml
+++ b/gems/devise/OSVDB-114435.yml
@@ -11,5 +11,12 @@ description: |
   If an attacker has knowledge of said token, a specially crafted request can
   be made to it, allowing the attacker to conduct CSRF attacks.
 patched_versions:
-- ~> 2.2.5
-- '>= 3.0.1'
+  - "~> 2.2.5"
+  - ">= 3.0.1"
+related:
+  url:
+    - http://blog.plataformatec.com.br/2013/08/csrf-token-fixation-attacks-in-devise
+    - https://github.com/heartcombo/devise/commit/747751a20f50aa8814dcd3eb9a3648f00ab6a707
+    - https://github.com/heartcombo/devise/compare/v3.0.0...v3.0.1
+    - https://my.diffend.io/gems/devise/3.0.0/3.0.1
+    - https://security.snyk.io/vuln/SNYK-RUBY-DEVISE-20103
diff --git a/gems/devise_invitable/CVE-2023-48220.yml b/gems/devise_invitable/CVE-2023-48220.yml
new file mode 100644
index 0000000000..d4786cdffa
--- /dev/null
+++ b/gems/devise_invitable/CVE-2023-48220.yml
@@ -0,0 +1,72 @@
+---
+gem: devise_invitable
+cve: 2023-48220
+ghsa: w3q8-m492-4pwp
+url: https://github.com/decidim/decidim/security/advisories/GHSA-w3q8-m492-4pwp
+title: Possibility to circumvent the invitation token expiry period
+date: 2024-02-20
+description: |
+  ### Impact
+  The invites feature allows users to accept the invitation for an unlimited amount of time through the password reset functionality.
+
+  When using the password reset functionality, the `devise_invitable` gem always accepts the pending invitation if the user has been invited as shown in this piece of code within the `devise_invitable` gem:
+  https://github.com/scambra/devise_invitable/blob/41f58970ff76fb64382a9b9ea1bd530f7c3adab2/lib/devise_invitable/models.rb#L198
+
+  The only check done here is if the user has been invited but the code does not ensure that the pending invitation is still valid as defined by the `invite_for` expiry period as explained in the gem's documentation:
+  https://github.com/scambra/devise_invitable#model-configuration-
+
+  > `invite_for`: The period the generated invitation token is valid. After this period, the invited resource won’t be able to accept the invitation. When `invite_for` is `0` (the default), the invitation won’t expire.
+
+  Decidim sets this configuration to `2.weeks` so this configuration should be respected:
+  https://github.com/decidim/decidim/blob/d2d390578050772d1bdb6d731395f1afc39dcbfc/decidim-core/config/initializers/devise.rb#L134
+
+  The bug is in the `devise_invitable` gem and should be fixed there and the dependency should be upgraded in Decidim once the fix becomes available.
+
+  ### Patches
+  Update `devise_invitable` to version `2.0.9` or above by running the following command:
+
+  ```
+  $ bundle update devise_invitable
+  ```
+
+  ### Workarounds
+  The invitations can be cancelled directly from the database by running the following command from the Rails console:
+
+  ```
+  > Decidim::User.invitation_not_accepted.update_all(invitation_token: nil)
+  ```
+
+  ### References
+  OWASP ASVS V4.0.3-2.3.1
+
+  This bug has existed in the `devise_invitable` gem since this commit which was first included in the `v0.4.rc3` release of this gem:
+  https://github.com/scambra/devise_invitable/commit/94d859c7de0829bf63f679ae5dd3cab2b866a098
+
+  All versions since then are affected.
+
+  This gem was first introduced at its version `~> 1.7.0` to the `decidim-admin` gem in this commit which was first included in the `v0.0.1.alpha3` release of Decidim:
+  https://github.com/decidim/decidim/commit/073e60e2e4224dd81815a784002ebba30f2ebb34
+
+  It was first introduced at its version `~> 1.7.0` to the `decidim-system` gem in this commit which was also first included in the `v0.0.1.alpha3` release of Decidim:
+  https://github.com/decidim/decidim/commit/b12800717a689c295a9ea680a38ca9f823d2c454
+
+  ### Credits
+  This issue was discovered in City of Helsinki's security audit against Decidim 0.27 done during September 2023. The security audit was implemented by [Deloitte Finland](https://www2.deloitte.com/fi/fi.html).
+cvss_v3: 5.7
+unaffected_versions:
+  - "< 0.4.rc3"
+patched_versions:
+  - ">= 2.0.9"
+related:
+  url:
+    - https://github.com/decidim/decidim/security/advisories/GHSA-w3q8-m492-4pwp
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-48220
+    - https://github.com/decidim/decidim/commit/073e60e2e4224dd81815a784002ebba30f2ebb34
+    - https://github.com/decidim/decidim/commit/b12800717a689c295a9ea680a38ca9f823d2c454
+    - https://github.com/scambra/devise_invitable/commit/94d859c7de0829bf63f679ae5dd3cab2b866a098
+    - https://github.com/decidim/decidim/blob/d2d390578050772d1bdb6d731395f1afc39dcbfc/decidim-core/config/initializers/devise.rb#L134
+    - https://github.com/decidim/decidim/releases/tag/v0.26.9
+    - https://github.com/decidim/decidim/releases/tag/v0.27.5
+    - https://github.com/decidim/decidim/releases/tag/v0.28.0
+    - https://github.com/scambra/devise_invitable/blob/41f58970ff76fb64382a9b9ea1bd530f7c3adab2/lib/devise_invitable/models.rb#L198
+    - https://github.com/advisories/GHSA-w3q8-m492-4pwp
diff --git a/gems/devise_masquerade/CVE-2021-28680.yml b/gems/devise_masquerade/CVE-2021-28680.yml
index 30e7f94575..32b61f849c 100644
--- a/gems/devise_masquerade/CVE-2021-28680.yml
+++ b/gems/devise_masquerade/CVE-2021-28680.yml
@@ -20,9 +20,9 @@ description: |
   and pretending that a user is already masqueraded by an administrator.
 cvss_v3: 8.1
 patched_versions:
-- ">= 1.3.1"
+  - ">= 1.3.1"
 related:
   url:
-  - https://labanskoller.se/blog/2021/03/23/the-devise-extension-that-peeled-off-one-layer-of-the-security-onion-cve-2021-28680/
-  - https://github.com/oivoodoo/devise_masquerade/pull/76
-  - https://github.com/oivoodoo/devise_masquerade/releases/tag/v1.3.1
+    - https://labanskoller.se/blog/2021/03/23/the-devise-extension-that-peeled-off-one-layer-of-the-security-onion-cve-2021-28680/
+    - https://github.com/oivoodoo/devise_masquerade/pull/76
+    - https://github.com/oivoodoo/devise_masquerade/releases/tag/v1.3.1
diff --git a/gems/devise_token_auth/CVE-2019-16751.yml b/gems/devise_token_auth/CVE-2019-16751.yml
new file mode 100644
index 0000000000..ff44c8abc9
--- /dev/null
+++ b/gems/devise_token_auth/CVE-2019-16751.yml
@@ -0,0 +1,18 @@
+---
+gem: devise_token_auth
+cve: 2019-16751
+ghsa: mvqr-r76c-wm5f
+url: https://github.com/lynndylanhurley/devise_token_auth/issues/1332
+title: Devise Token Auth vulnerable to Cross-site Scripting
+date: 2022-05-24
+description: |
+  An issue was discovered in Devise Token Auth through 1.1.2. The omniauth
+  failure endpoint is vulnerable to Reflected Cross Site Scripting (XSS) through the
+  message parameter. Unauthenticated attackers can craft a URL that executes a malicious
+  JavaScript payload in the victim's browser. This affects the fallback_render method
+  in the omniauth callbacks controller.
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 0.1.33"
+patched_versions:
+  - ">= 1.1.3"
diff --git a/gems/diffy/CVE-2022-33127.yml b/gems/diffy/CVE-2022-33127.yml
new file mode 100644
index 0000000000..3c332ce6dc
--- /dev/null
+++ b/gems/diffy/CVE-2022-33127.yml
@@ -0,0 +1,17 @@
+---
+gem: diffy
+cve: 2022-33127
+ghsa: 5ww9-9qp2-x524
+url: https://github.com/samg/diffy/commit/478f392082b66d38f54a02b4bb9c41be32fd6593
+title: Improper handling of double quotes in file name in Diffy in Windows environment
+date: 2022-06-24
+description: |
+  The function that calls the diff tool in versions of Diffy prior to 3.4.1
+  does not properly handle double quotes in a filename when run in a Windows environment.
+  This allows attackers to execute arbitrary commands via a crafted string.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 3.4.1"
+related:
+  url:
+    - https://github.com/samg/diffy/blob/56fd935aea256742f7352b050592542d3d153bf6/CHANGELOG#L1
diff --git a/gems/discordrb/CVE-2023-28102.yml b/gems/discordrb/CVE-2023-28102.yml
new file mode 100644
index 0000000000..0e03f28e57
--- /dev/null
+++ b/gems/discordrb/CVE-2023-28102.yml
@@ -0,0 +1,20 @@
+---
+gem: discordrb
+cve: 2023-28102
+ghsa: 8832-4mm5-x2r6
+url: https://securitylab.github.com/advisories/GHSL-2022-094_discordrb
+title: "GHSL-2022-094: Remote Code Execution in discordrb"
+date: 2023-03-27
+description: |
+  The encode_file method may lead to remote code execution
+   (RCE) if invoked with untrusted user-controlled data.
+cvss_v3: 9.6
+patched_versions:
+  - ">= 3.4.3"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-28102
+    - https://securitylab.github.com/advisories/GHSL-2022-094_discordrb
+    - https://github.com/shardlab/discordrb/commit/91e13043ffa89227c3fcdc3408f06da237d28c95
+    - https://rubygems.org/gems/discordrb
+    - https://github.com/advisories/GHSA-8832-4mm5-x2r6
diff --git a/gems/doge-coin/CVE-2019-15224.yml b/gems/doge-coin/CVE-2019-15224.yml
index 4103570a24..621f7003c3 100644
--- a/gems/doge-coin/CVE-2019-15224.yml
+++ b/gems/doge-coin/CVE-2019-15224.yml
@@ -13,8 +13,8 @@ description: |
   1.0.1.
 cvss_v3: 9.8
 unaffected_versions:
-- "< 1.0.2"
-- "> 1.0.2"
+  - "< 1.0.2"
+  - "> 1.0.2"
 related:
   url:
-  - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
+    - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
diff --git a/gems/doorkeeper-openid_connect/CVE-2019-9837.yml b/gems/doorkeeper-openid_connect/CVE-2019-9837.yml
index 60f6f8334d..40492abdbd 100644
--- a/gems/doorkeeper-openid_connect/CVE-2019-9837.yml
+++ b/gems/doorkeeper-openid_connect/CVE-2019-9837.yml
@@ -5,13 +5,14 @@ ghsa: vv4c-g6q7-p3q7
 url: https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md#v154-2019-02-15
 title: Doorkeeper::OpenidConnect Open Redirect
 date: 2019-03-25
-description: Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper)
+description: |
+  Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper)
   1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirect_uri field in
   an OAuth authorization request (that results in an error response) with the 'openid'
   scope and a prompt=none value. This allows phishing attacks against the authorization
   flow.
 cvss_v3: 6.1
 unaffected_versions:
-- < 1.4.0
+  - "< 1.4.0"
 patched_versions:
-- '>= 1.5.4'
+  - ">= 1.5.4"
diff --git a/gems/doorkeeper/CVE-2014-8144.yml b/gems/doorkeeper/CVE-2014-8144.yml
index 72d0392961..fc8e5965c8 100644
--- a/gems/doorkeeper/CVE-2014-8144.yml
+++ b/gems/doorkeeper/CVE-2014-8144.yml
@@ -2,10 +2,11 @@
 gem: doorkeeper
 cve: 2014-8144
 osvdb: 116010
+ghsa: 685w-vc84-wxcx
 url: https://groups.google.com/forum/#!topic/ruby-security-ann/5_VqJtNc8jw
-title: |
-  Cross-site request forgery (CSRF) vulnerability in doorkeeper 1.4.0
-  and earlier.
+title:
+  Cross-site request forgery (CSRF) vulnerability in doorkeeper 1.4.0 and
+  earlier.
 date: 2014-12-18
 description: |
   Cross-site request forgery (CSRF) vulnerability in doorkeeper 1.4.0
@@ -19,5 +20,5 @@ description: |
   logged in.
 cvss_v2: 6.8
 patched_versions:
-- ~> 1.4.1
-- '>= 2.0.0'
+  - "~> 1.4.1"
+  - ">= 2.0.0"
diff --git a/gems/doorkeeper/CVE-2016-6582.yml b/gems/doorkeeper/CVE-2016-6582.yml
index 8f9d03fc78..3a02650209 100644
--- a/gems/doorkeeper/CVE-2016-6582.yml
+++ b/gems/doorkeeper/CVE-2016-6582.yml
@@ -32,9 +32,9 @@ description: |
   value).
 cvss_v3: 9.1
 unaffected_versions:
-- "< 1.2.0"
+  - "< 1.2.0"
 patched_versions:
-- ">= 4.2.0"
+  - ">= 4.2.0"
 related:
   url:
-  - https://github.com/doorkeeper-gem/doorkeeper/commit/fb938051777a3c9cb071e96fc66458f8f615bd53
+    - https://github.com/doorkeeper-gem/doorkeeper/commit/fb938051777a3c9cb071e96fc66458f8f615bd53
diff --git a/gems/doorkeeper/CVE-2018-1000088.yml b/gems/doorkeeper/CVE-2018-1000088.yml
index 1cc8b72896..e7d1459d34 100644
--- a/gems/doorkeeper/CVE-2018-1000088.yml
+++ b/gems/doorkeeper/CVE-2018-1000088.yml
@@ -25,10 +25,10 @@ description: |
   DWF has assigned CVE-2018-1000088.
 cvss_v3: 7.6
 unaffected_versions:
-- < 2.1.0
+  - "< 2.1.0"
 patched_versions:
-- '>= 4.2.6'
+  - ">= 4.2.6"
 related:
   url:
-  - https://github.com/doorkeeper-gem/doorkeeper/issues/969
-  - https://github.com/doorkeeper-gem/doorkeeper/issues/970
+    - https://github.com/doorkeeper-gem/doorkeeper/issues/969
+    - https://github.com/doorkeeper-gem/doorkeeper/issues/970
diff --git a/gems/doorkeeper/CVE-2018-1000211.yml b/gems/doorkeeper/CVE-2018-1000211.yml
index 58a52c5eb1..9830f883b5 100644
--- a/gems/doorkeeper/CVE-2018-1000211.yml
+++ b/gems/doorkeeper/CVE-2018-1000211.yml
@@ -25,12 +25,12 @@ description: |
   DWF has assigned CVE-2018-1000211.
 cvss_v3: 7.5
 unaffected_versions:
-- "< 4.2.0"
+  - "< 4.2.0"
 patched_versions:
-- ">= 4.4.0"
-- ">= 5.0.0.rc2"
+  - ">= 4.4.0"
+  - ">= 5.0.0.rc2"
 related:
   url:
-  - https://github.com/doorkeeper-gem/doorkeeper/issues/891
-  - https://github.com/doorkeeper-gem/doorkeeper/pull/1119
-  - https://github.com/doorkeeper-gem/doorkeeper/pull/1120
+    - https://github.com/doorkeeper-gem/doorkeeper/issues/891
+    - https://github.com/doorkeeper-gem/doorkeeper/pull/1119
+    - https://github.com/doorkeeper-gem/doorkeeper/pull/1120
diff --git a/gems/doorkeeper/CVE-2020-10187.yml b/gems/doorkeeper/CVE-2020-10187.yml
index 859fc26cb5..a7b225708c 100644
--- a/gems/doorkeeper/CVE-2020-10187.yml
+++ b/gems/doorkeeper/CVE-2020-10187.yml
@@ -16,16 +16,16 @@ description: |
   Recommended additional hardening for >= 5.1 is to enable application secrets
   hashing. This would render the exposed secret useless.
 unaffected_versions:
-- < 5.0.0
+  - "< 5.0.0"
 
 patched_versions:
-- ~> 5.0.3
-- ~> 5.1.1
-- ~> 5.2.5
-- '>= 5.3.2'
+  - "~> 5.0.3"
+  - "~> 5.1.1"
+  - "~> 5.2.5"
+  - ">= 5.3.2"
 
 cvss_v2: 5.5
 cvss_v3: 5.4
 related:
   url:
-  - https://github.com/doorkeeper-gem/doorkeeper/commit/25d038022c2fcad45af5b73f9d003cf38ff491f6
+    - https://github.com/doorkeeper-gem/doorkeeper/commit/25d038022c2fcad45af5b73f9d003cf38ff491f6
diff --git a/gems/doorkeeper/CVE-2023-34246.yml b/gems/doorkeeper/CVE-2023-34246.yml
new file mode 100644
index 0000000000..f107a8738f
--- /dev/null
+++ b/gems/doorkeeper/CVE-2023-34246.yml
@@ -0,0 +1,35 @@
+---
+gem: doorkeeper
+cve: 2023-34246
+ghsa: 7w2c-w47h-789w
+url: https://github.com/advisories/GHSA-7w2c-w47h-789w
+title: Doorkeeper Improper Authentication vulnerability
+date: 2023-06-12
+description: |
+  OAuth RFC 8252 says  https://www.rfc-editor.org/rfc/rfc8252#section-8.6
+
+  > the authorization server SHOULD NOT process authorization requests
+  > automatically without user consent or interaction, except when the
+  > identity of the client can be assured. **This includes the case
+  > where the user has previously approved an authorization request
+  > for a given client id**
+
+  But Doorkeeper automatically processes authorization requests without
+  user consent for public clients that have been previous approved.
+  Public clients are inherently  vulnerable to impersonation, their
+  identity cannot be assured.
+
+  Issue https://github.com/doorkeeper-gem/doorkeeper/issues/1589
+
+  Fix https://github.com/doorkeeper-gem/doorkeeper/pull/1646
+cvss_v3: 4.2
+patched_versions:
+  - ">= 5.6.6"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-34246
+    - https://github.com/doorkeeper-gem/doorkeeper/releases/tag/v5.6.6
+    - https://github.com/doorkeeper-gem/doorkeeper/pull/1646
+    - https://github.com/doorkeeper-gem/doorkeeper/issues/1589
+    - https://www.rfc-editor.org/rfc/rfc8252#section-8.6
+    - https://github.com/advisories/GHSA-7w2c-w47h-789w
diff --git a/gems/doorkeeper/OSVDB-118830.yml b/gems/doorkeeper/OSVDB-118830.yml
index a4a545cc62..b31fae8fd6 100644
--- a/gems/doorkeeper/OSVDB-118830.yml
+++ b/gems/doorkeeper/OSVDB-118830.yml
@@ -1,10 +1,8 @@
 ---
 gem: doorkeeper
 osvdb: 118830
-url: http://www.osvdb.org/show/osvdb/118830
-title: |
-  Doorkeeper Gem for Ruby stores sensitive information
-  in production logs
+url: https://www.versioneye.com/Ruby/doorkeeper/2.1.1
+title: Doorkeeper Gem for Ruby stores sensitive information in production logs
 date: 2015-02-10
 description: |
   Doorkeeper Gem for Ruby contains a flaw in lib/doorkeeper/engine.rb.
@@ -12,5 +10,17 @@ description: |
   production logs. This may allow a local attacker to gain access to
   sensitive information.
 patched_versions:
-- ~> 1.4.2
-- '>= 2.1.2'
+  - "~> 1.4.2"
+  - ">= 2.1.2"
+related:
+  url:
+    - https://www.versioneye.com/Ruby/doorkeeper/2.1.1
+    - https://github.com/doorkeeper-gem/doorkeeper/commit/d6bca5f32b741b8cee83a4aeb818338b919181fe
+    - https://github.com/doorkeeper-gem/doorkeeper/blob/main/lib/doorkeeper/engine.rb
+    - https://github.com/doorkeeper-gem/doorkeeper/issues/576
+    - https://github.com/rubysec/ruby-advisory-db/pull/128
+    - https://my.diffend.io/gems/doorkeeper/versions/0.3.0
+    - https://security.snyk.io/vuln/SNYK-RUBY-DOORKEEPER-20206
+    - https://www.mend.io/vulnerability-database/WS-2015-0039
+    - http://www.osvdb.org/show/osvdb/118830
+notes: "Issue #576 backported to 1.4.x on March 2, 2015."
diff --git a/gems/dragonfly/CVE-2013-1756.yml b/gems/dragonfly/CVE-2013-1756.yml
index 7e14702874..38e4dc3e14 100644
--- a/gems/dragonfly/CVE-2013-1756.yml
+++ b/gems/dragonfly/CVE-2013-1756.yml
@@ -2,6 +2,7 @@
 gem: dragonfly
 cve: 2013-1756
 osvdb: 90647
+ghsa: p463-639r-q9g9
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1756
 title: Dragonfly Gem for Ruby Crafted Request Parsing Remote Code Execution
 date: 2013-02-19
@@ -10,7 +11,7 @@ description: |
   of a specially crafted request. This may allow a remote attacker to execute
   arbitrary code.
 cvss_v2: 7.5
-patched_versions:
-- '>= 0.9.13'
 unaffected_versions:
-- < 0.7.0
+  - "< 0.7.0"
+patched_versions:
+  - ">= 0.9.13"
diff --git a/gems/dragonfly/CVE-2013-5671.yml b/gems/dragonfly/CVE-2013-5671.yml
index 2f7aaa1ccb..dc48a9162b 100644
--- a/gems/dragonfly/CVE-2013-5671.yml
+++ b/gems/dragonfly/CVE-2013-5671.yml
@@ -2,6 +2,7 @@
 gem: dragonfly
 cve: 2013-5671
 osvdb: 96798
+ghsa: qrgf-jqqm-x7xv
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-5671
 title: fog-dragonfly Gem for Ruby imagemagickutils.rb Remote Command Execution
 date: 2013-09-03
@@ -11,4 +12,4 @@ description: |
   This may allow a remote attacker to execute arbitrary commands.
 cvss_v2: 7.5
 patched_versions:
-- '>= 0.8.4'
+  - ">= 0.8.4"
diff --git a/gems/dragonfly/CVE-2021-33473.yml b/gems/dragonfly/CVE-2021-33473.yml
new file mode 100644
index 0000000000..bddcc55364
--- /dev/null
+++ b/gems/dragonfly/CVE-2021-33473.yml
@@ -0,0 +1,17 @@
+---
+gem: dragonfly
+cve: 2021-33473
+ghsa: fj34-jhjx-xmvv
+url: https://github.com/markevans/dragonfly/issues/513
+title: Arbitrary file write in dragonfly
+date: 2022-06-03
+description: |
+  An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows
+  attackers to read and write arbitrary files when the verify_url option is disabled.
+  This vulnerability is exploited via a crafted URL.
+cvss_v3: 9.1
+patched_versions:
+  - ">= 1.4.0"
+related:
+  url:
+    - https://github.com/markevans/dragonfly/commit/25399297bb457f7fcf8e3f91e85945b255b111b5
diff --git a/gems/dragonfly/CVE-2021-33564.yml b/gems/dragonfly/CVE-2021-33564.yml
index f76254ff1c..f4858c050c 100644
--- a/gems/dragonfly/CVE-2021-33564.yml
+++ b/gems/dragonfly/CVE-2021-33564.yml
@@ -13,4 +13,4 @@ description: |
   convert utility.
 cvss_v3: 9.8
 patched_versions:
-- '>= 1.4.0'
+  - ">= 1.4.0"
diff --git a/gems/dragonfly/OSVDB-110439.yml b/gems/dragonfly/OSVDB-110439.yml
index 1aba7055de..fc696b2e4d 100644
--- a/gems/dragonfly/OSVDB-110439.yml
+++ b/gems/dragonfly/OSVDB-110439.yml
@@ -1,13 +1,19 @@
 ---
 gem: dragonfly
 osvdb: 110439
-url: http://osvdb.org/show/osvdb/110439
+url: https://security.snyk.io/vuln/SNYK-RUBY-DRAGONFLY-20193
 title: Dragonfly Gem for Ruby Image Uploading & Processing Remote Command Execution
 date: 2014-08-25
 description: |
-  Dragonfly Gem for Ruby contains a flaw in Uploading & Processing that is due
-  to the gem failing to restrict arbitrary commands to imagemagicks convert.
-  This may allow a remote attacker to gain read/write access to the filesystem
-  and execute arbitrary commands.
+  Dragonfly Gem for Ruby contains a flaw in Uploading & Processing
+  that is due to the gem failing to restrict arbitrary commands to
+  imagemagicks convert. This may allow a remote attacker to gain
+  read/write access to the filesystem and execute arbitrary commands.
 patched_versions:
-- '>= 1.0.7'
+  - ">= 1.0.7"
+related:
+  url:
+    - https://github.com/markevans/dragonfly/compare/v1.0.6...v1.0.7
+    - https://security.snyk.io/vuln/SNYK-RUBY-DRAGONFLY-20193
+    - https://www.mend.io/vulnerability-database/WS-2014-0016
+    - http://osvdb.org/show/osvdb/110439
diff --git a/gems/dragonfly/OSVDB-97854.yml b/gems/dragonfly/OSVDB-97854.yml
index 22c6eb4845..16c9ec4fb3 100644
--- a/gems/dragonfly/OSVDB-97854.yml
+++ b/gems/dragonfly/OSVDB-97854.yml
@@ -1,12 +1,20 @@
 ---
 gem: dragonfly
 osvdb: 97854
-url: http://osvdb.org/show/osvdb/97854
+url: https://security.snyk.io/vuln/SNYK-RUBY-DRAGONFLY-20016
 title: Dragonfly Gem for Ruby on Windows Shell Escaping Weakness
 date: 2011-09-01
 description: |
-  Dragonfly Gem for Ruby contains a flaw that is due to the program failing to
-  properly escape a shell that contains injected characters. This may allow a
-  context-dependent attacker to potentially execute arbitrary commands.
+  Dragonfly Gem for Ruby contains a flaw that is due to the program
+  failing to properly escape a shell that contains injected characters.
+  This may allow a context-dependent attacker to potentially execute
+  arbitrary commands.
 patched_versions:
-- '>= 0.9.6'
+  - ">= 0.9.6"
+related:
+  url:
+    - https://github.com/markevans/dragonfly/blob/master/spec/dragonfly/shell_spec.rb#L26
+    - https://github.com/markevans/dragonfly/pull/506
+    - https://github.com/markevans/dragonfly/commit/f4f8e37a171a34f0ef3a6d80b52f44ed4d66d3bc
+    - https://security.snyk.io/vuln/SNYK-RUBY-DRAGONFLY-20016
+    - http://osvdb.org/show/osvdb/97854
diff --git a/gems/easymon/CVE-2018-1000855.yml b/gems/easymon/CVE-2018-1000855.yml
index b211245621..651f880591 100644
--- a/gems/easymon/CVE-2018-1000855.yml
+++ b/gems/easymon/CVE-2018-1000855.yml
@@ -12,7 +12,7 @@ description: |
   invalid name and have it executed in Firefox
 cvss_v3: 6.1
 patched_versions:
-- ">= 1.4.1"
+  - ">= 1.4.1"
 related:
   url:
-  - https://github.com/basecamp/easymon/pull/25
+    - https://github.com/basecamp/easymon/pull/25
diff --git a/gems/echor/CVE-2014-1834.yml b/gems/echor/CVE-2014-1834.yml
index 8408a19e50..ac24b31f67 100644
--- a/gems/echor/CVE-2014-1834.yml
+++ b/gems/echor/CVE-2014-1834.yml
@@ -2,6 +2,7 @@
 gem: echor
 cve: 2014-1834
 osvdb: 102129
+ghsa: 8936-cgj4-phr2
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-1834
 title: echor Gem for Ruby backplane.rb perform_request Function Arbitrary Command
   Execution
@@ -11,3 +12,4 @@ description: |
   function that is triggered when a semi-colon (;) is injected into a username
   or password. This may allow a context-dependent attacker to inject arbitrary
   commands if the gem is used in a rails application.
+cvss_v3: 7.8
diff --git a/gems/echor/CVE-2014-1835.yml b/gems/echor/CVE-2014-1835.yml
index 61097c2e4c..2fc3c8f1e2 100644
--- a/gems/echor/CVE-2014-1835.yml
+++ b/gems/echor/CVE-2014-1835.yml
@@ -2,6 +2,7 @@
 gem: echor
 cve: 2014-1835
 osvdb: 102130
+ghsa: j4gx-p3x5-m987
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-1835
 title: echor Gem for Ruby Process Listing Local Plaintext Credential Disclosure
 date: 2014-01-14
@@ -9,3 +10,4 @@ description: |
   echor Gem for Ruby contains a flaw that is due to the program exposing
   credential information in the system process listing. This may allow a local
   attacker to gain access to plaintext credential information.
+cvss_v3: 7.8
diff --git a/gems/ejson2env/CVE-2025-48069.yml b/gems/ejson2env/CVE-2025-48069.yml
new file mode 100644
index 0000000000..059d8f6ce8
--- /dev/null
+++ b/gems/ejson2env/CVE-2025-48069.yml
@@ -0,0 +1,48 @@
+---
+gem: ejson2env
+cve: 2025-48069
+ghsa: 2c47-m757-32g6
+url: https://github.com/Shopify/ejson2env/security/advisories/GHSA-2c47-m757-32g6
+title: Insufficient input sanitization in ejson2env
+date: 2025-05-21
+description: |
+  ### Summary
+  The `ejson2env` tool has a vulnerability related to how it writes to
+  `stdout`. Specifically, the tool is intended to write an export
+  statement for environment variables and their values. However, due
+  to inadequate output sanitization, there is a potential risk where
+  variable names or values may include malicious content, resulting
+  in additional unintended commands being output to `stdout`. If this
+  output is improperly utilized in further command execution, it could
+  lead to command injection vulnerabilities, allowing an attacker to
+  execute arbitrary commands on the host system.
+
+  ### Details
+  The vulnerability exists because environment variables are not
+  properly sanitized during the decryption phase, which enables
+  malicious keys or encrypted values to inject commands.
+
+  ### Impact
+  An attacker with control over `.ejson` files can inject commands
+  in the environment where `source $(ejson2env)` or `eval ejson2env`
+  are executed.
+
+  ### Mitigation
+  - Update to a version of `ejson2env` that sanitizes the output
+    during decryption or
+  - Do not use `ejson2env` to decrypt untrusted user secrets or
+  - Do not evaluate or execute the direct output from `ejson2env`
+    without removing nonprintable characters.
+
+  ### Credit
+  Thanks to security researcher [Demonia](https://hackerone.com/demonia?type=user)
+  for reporting this issue.
+cvss_v3: 6.6
+patched_versions:
+  - ">= 2.0.8"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-48069
+    - https://github.com/Shopify/ejson2env/security/advisories/GHSA-2c47-m757-32g6
+    - https://github.com/Shopify/ejson2env/commit/592b3ceea967fee8b064e70983e8cec087b6d840
+    - https://github.com/advisories/GHSA-2c47-m757-32g6
diff --git a/gems/elastic-apm/CVE-2019-7615.yml b/gems/elastic-apm/CVE-2019-7615.yml
new file mode 100644
index 0000000000..1a0ff5a5e3
--- /dev/null
+++ b/gems/elastic-apm/CVE-2019-7615.yml
@@ -0,0 +1,19 @@
+---
+gem: elastic-apm
+cve: 2019-7615
+ghsa: 35j2-p8fh-x966
+url: https://github.com/elastic/apm-agent-ruby/pull/449
+title: Elastic APM agent for Ruby vulnerable to Improper Certificate Validation
+date: 2022-05-24
+description: |
+  A TLS certificate validation flaw was found in Elastic APM agent for
+  Ruby versions before 2.9.0. When specifying a trusted server CA certificate via
+  the `server_ca_cert` setting, the Ruby agent would not properly verify the certificate
+  returned by the APM server. This could result in a man in the middle style attack
+  against the Ruby agent.
+cvss_v3: 7.4
+patched_versions:
+  - ">= 2.9.0"
+related:
+  url:
+    - https://www.elastic.co/community/security/
diff --git a/gems/em-http-request/CVE-2020-13482.yml b/gems/em-http-request/CVE-2020-13482.yml
index 463bc0e0f6..78b0fa835f 100644
--- a/gems/em-http-request/CVE-2020-13482.yml
+++ b/gems/em-http-request/CVE-2020-13482.yml
@@ -11,4 +11,4 @@ description: |
   library. The hostname in a TLS server certificate is not verified.
 cvss_v3: 7.4
 patched_versions:
-- '>= 1.1.6'
+  - ">= 1.1.6"
diff --git a/gems/ember-source/CVE-2013-4170.yml b/gems/ember-source/CVE-2013-4170.yml
index 3978421991..f43af0f83a 100644
--- a/gems/ember-source/CVE-2013-4170.yml
+++ b/gems/ember-source/CVE-2013-4170.yml
@@ -1,9 +1,9 @@
 ---
 gem: ember-source
 cve: 2013-4170
+ghsa: 5m48-c37x-f792
 url: https://groups.google.com/forum/#!topic/ember-security/dokLVwwxAdM
-title: |
-  Ember.js Potential XSS Exploit When Binding `tagName` to User-Supplied Data
+title: Ember.js Potential XSS Exploit When Binding `tagName` to User-Supplied Data
 date: 2013-07-25
 description: |
   In general, Ember.js escapes or strips any user-supplied content
@@ -16,10 +16,11 @@ description: |
 
   This vulnerability only affects applications that assign or bind
   user-provided content to `tagName`.
+cvss_v3: 6.1
 patched_versions:
-- ~> 1.0.0.rc1.1
-- ~> 1.0.0.rc2.1
-- ~> 1.0.0.rc3.1
-- ~> 1.0.0.rc4.1
-- ~> 1.0.0.rc5.1
-- '>= 1.0.0.rc6.1'
+  - "~> 1.0.0.rc1.1"
+  - "~> 1.0.0.rc2.1"
+  - "~> 1.0.0.rc3.1"
+  - "~> 1.0.0.rc4.1"
+  - "~> 1.0.0.rc5.1"
+  - ">= 1.0.0.rc6.1"
diff --git a/gems/ember-source/CVE-2014-0013.yml b/gems/ember-source/CVE-2014-0013.yml
index 3fd8732003..e9af676238 100644
--- a/gems/ember-source/CVE-2014-0013.yml
+++ b/gems/ember-source/CVE-2014-0013.yml
@@ -1,8 +1,9 @@
 ---
 gem: ember-source
 cve: 2014-0013
+ghsa: 8xm3-gm7c-5fjx
 url: https://groups.google.com/forum/#!topic/ember-security/2kpXXCxISS4
-title: |
+title:
   Ember.js Potential XSS Exploit With User-Supplied Data When Binding
   Primitive Values
 date: 2014-01-14
@@ -25,9 +26,10 @@ description: |
   This vulnerability affects applications that contain templates whose context is
   set to a user-supplied primitive value (such as a string or number) and also
   contain the `{{this}}` special Handlebars variable to display the value.
+cvss_v3: 5.4
 patched_versions:
-- ~> 1.0.1
-- ~> 1.1.3
-- ~> 1.2.1
-- ~> 1.3.1
-- '>= 1.4.0.beta.2'
+  - "~> 1.0.1"
+  - "~> 1.1.3"
+  - "~> 1.2.1"
+  - "~> 1.3.1"
+  - ">= 1.4.0.beta.2"
diff --git a/gems/ember-source/CVE-2014-0014.yml b/gems/ember-source/CVE-2014-0014.yml
index def8a91f81..1335e61cbe 100644
--- a/gems/ember-source/CVE-2014-0014.yml
+++ b/gems/ember-source/CVE-2014-0014.yml
@@ -1,8 +1,9 @@
 ---
 gem: ember-source
 cve: 2014-0014
+ghsa: rcx6-7jp6-pqf2
 url: https://groups.google.com/forum/#!topic/ember-security/PSE4RzTi6l4
-title: |
+title:
   Ember.js Potential XSS Exploit With User-Supplied Data When Using {{group}}
   Helper
 date: 2014-01-14
@@ -22,9 +23,10 @@ description: |
 
   This vulnerability only affects applications that use the `{{group}}` helper
   to display user-provided content.
+cvss_v3: 5.4
 patched_versions:
-- ~> 1.0.1
-- ~> 1.1.3
-- ~> 1.2.1
-- ~> 1.3.1
-- '>= 1.4.0.beta.2'
+  - "~> 1.0.1"
+  - "~> 1.1.3"
+  - "~> 1.2.1"
+  - "~> 1.3.1"
+  - ">= 1.4.0.beta.2"
diff --git a/gems/ember-source/CVE-2014-0046.yml b/gems/ember-source/CVE-2014-0046.yml
index 675f613f46..2d1023caeb 100644
--- a/gems/ember-source/CVE-2014-0046.yml
+++ b/gems/ember-source/CVE-2014-0046.yml
@@ -1,6 +1,7 @@
 ---
 gem: ember-source
 cve: 2014-0046
+ghsa: 4q53-fqhc-cr46
 url: https://groups.google.com/forum/#!topic/ember-security/1h6FRgr8lXQ
 title: Ember.js XSS Vulnerability With {{link-to}} Helper in Non-block Form
 date: 2014-02-07
@@ -19,8 +20,8 @@ description: |
   All users running an affected release and binding user-supplied data to the
   {{link-to}} helper's title attribute should either upgrade or use one of the
   workarounds immediately.
-patched_versions:
-- ~> 1.2.2
-- '>= 1.3.2'
 unaffected_versions:
-- < 1.2.0
+  - "< 1.2.0"
+patched_versions:
+  - "~> 1.2.2"
+  - ">= 1.3.2"
diff --git a/gems/ember-source/CVE-2015-1866.yml b/gems/ember-source/CVE-2015-1866.yml
index afee976262..762aaff0a6 100644
--- a/gems/ember-source/CVE-2015-1866.yml
+++ b/gems/ember-source/CVE-2015-1866.yml
@@ -21,8 +21,8 @@ description: |
   immediately.
 cvss_v3: 6.1
 unaffected_versions:
-- "< 1.10.0"
+  - "< 1.10.0"
 patched_versions:
-- "~> 1.10.1"
-- "~> 1.11.2"
-- ">= 1.12.0"
+  - "~> 1.10.1"
+  - "~> 1.11.2"
+  - ">= 1.12.0"
diff --git a/gems/ember-source/CVE-2015-7565.yml b/gems/ember-source/CVE-2015-7565.yml
index 638be94c91..cba7fce3ff 100644
--- a/gems/ember-source/CVE-2015-7565.yml
+++ b/gems/ember-source/CVE-2015-7565.yml
@@ -22,11 +22,11 @@ description: |
   the workarounds immediately.
 cvss_v3: 6.1
 unaffected_versions:
-- < 1.8.0
+  - "< 1.8.0"
 patched_versions:
-- ~> 1.11.4
-- ~> 1.12.2
-- ~> 1.13.12
-- ~> 2.0.3
-- ~> 2.1.2
-- '>= 2.2.1'
+  - "~> 1.11.4"
+  - "~> 1.12.2"
+  - "~> 1.13.12"
+  - "~> 2.0.3"
+  - "~> 2.1.2"
+  - ">= 2.2.1"
diff --git a/gems/encoded_id-rails/CVE-2024-0241.yml b/gems/encoded_id-rails/CVE-2024-0241.yml
new file mode 100644
index 0000000000..3affa677b3
--- /dev/null
+++ b/gems/encoded_id-rails/CVE-2024-0241.yml
@@ -0,0 +1,57 @@
+---
+gem: encoded_id-rails
+cve: 2024-0241
+ghsa: 3px7-jm2p-6h2c
+url: https://github.com/stevegeek/encoded_id-rails/security/advisories/GHSA-3px7-jm2p-6h2c
+title: encoded_id-rails potential DOS vulnerability due to URIs with extremely long
+  encoded IDs
+date: 2023-10-24
+description: |
+  ### Impact
+
+  The length of URIs and the various parts (eg path segments, query
+  parameters) is usually limited by the webserver processing the
+  incoming request. In the case of Puma the defaults are :
+
+  - path segment length: 8192
+  - Max URI length: 1024 * 12
+  - Max query length: 1024 * 10
+
+  See https://github.com/puma/puma/blob/master/docs/compile_options.md
+
+  If too long Puma raises:
+  > Puma caught this error: HTTP element REQUEST_PATH is longer than
+    the (8192) allowed length (was 12503) (Puma::HttpParserError)
+
+  However due to the performance of `hashids` extremely long encoded
+  IDs will consume a large amount of CPU and allocate a huge number
+  of intermediate objects.
+
+  For example:
+
+  ```
+  curl -vvv https://localhost.ssl:3000//dos?id=abcd-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+  ```
+
+  This causes the application to spend a huge amount of time decoding
+  the ID and the allocation of > 200MB of objects.
+
+  ### Patches
+
+  Upgrade to `1.0.0.beta2`
+
+  This introduces a new option to limit the length of IDs that can
+  be decoded. A future release will also improve the performance and
+  hugely reduce allocations in the underlying hashids implementation.
+
+  ### References
+  _Are there any links users can visit to find out more?_
+cvss_v3: 7.5
+patched_versions:
+  - ">= 1.0.0.beta2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-0241
+    - https://github.com/stevegeek/encoded_id-rails/security/advisories/GHSA-3px7-jm2p-6h2c
+    - https://github.com/stevegeek/encoded_id-rails/commit/afa495a77b8a21ad582611f9cdc2081dc4018b91
+    - https://github.com/advisories/GHSA-3px7-jm2p-6h2c
diff --git a/gems/encoded_id-rails/GHSA-3px7-jm2p-6h2c.yml b/gems/encoded_id-rails/GHSA-3px7-jm2p-6h2c.yml
new file mode 100644
index 0000000000..8e6aebf359
--- /dev/null
+++ b/gems/encoded_id-rails/GHSA-3px7-jm2p-6h2c.yml
@@ -0,0 +1,53 @@
+---
+gem: encoded_id-rails
+ghsa: 3px7-jm2p-6h2c
+url: https://github.com/stevegeek/encoded_id-rails/releases/tag/1.0.0.beta2
+title: encoded_id-rails potential DOS vulnerability due to URIs with
+  extremely long encoded IDs
+date: 2023-10-24
+description: |
+  ### Impact
+
+  The length of URIs and the various parts (eg path segments, query
+  parameters) is usually limited by the webserver processing the
+  incoming request. In the case of Puma the defaults are :
+
+  - path segment length: 8192
+  - Max URI length: 1024 * 12
+  - Max query length: 1024 * 10
+
+  See https://github.com/puma/puma/blob/master/docs/compile_options.md
+
+  If too long Puma raises:
+  > Puma caught this error: HTTP element REQUEST_PATH is longer than
+  > the (8192) allowed length (was 12503) (Puma::HttpParserError)
+
+  However due to the performance of `hashids` extremely long encoded
+  IDs will consume a large amount of CPU and allocate a huge number
+  of intermediate objects.
+
+  For example:
+
+  ```
+  curl -vvv https://localhost.ssl:3000//dos?id=abcd-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+  ```
+
+  This causes the application to spend a huge amount of time decoding
+  the ID and the allocation of > 200MB of objects.
+
+  ### Patches
+
+  Upgrade to `1.0.0.beta2`
+
+  This introduces a new option to limit the length of IDs that can
+  be decoded. A future release will also improve the performance and
+  hugely reduce allocations in the underlying hashids implementation.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 1.0.0.beta2"
+related:
+  url:
+    - https://github.com/advisories/GHSA-3px7-jm2p-6h2c
+    - https://github.com/stevegeek/encoded_id-rails/releases/tag/1.0.0.beta2
+    - https://github.com/stevegeek/encoded_id-rails/commit/afa495a77b8a21ad582611f9cdc2081dc4018b91
+    - https://github.com/stevegeek/encoded_id-rails/security/advisories/GHSA-3px7-jm2p-6h2c
diff --git a/gems/enum_column3/OSVDB-94679.yml b/gems/enum_column3/OSVDB-94679.yml
index f37ba32d3e..7b384b136c 100644
--- a/gems/enum_column3/OSVDB-94679.yml
+++ b/gems/enum_column3/OSVDB-94679.yml
@@ -1,9 +1,15 @@
 ---
 gem: enum_column3
 osvdb: 94679
-url: http://osvdb.org/show/osvdb/94679
+url: https://security.snyk.io/vuln/SNYK-RUBY-ENUMCOLUMN3-20100
 title: enum_column3 Gem for Ruby Symbol Creation Remote DoS
 date: 2013-06-26
-description: The enum_column3 Gem for Ruby contains a flaw that may allow a remote
-  denial of service. The issue is due to the program typecasting unexpected strings
-  to symbols. This may allow a remote attacker to crash the program.
+description: |
+  The enum_column3 Gem for Ruby contains a flaw that may allow a remote
+  denial of service. The issue is due to the program typecasting unexpected
+  strings to symbols. This may allow a remote attacker to crash the program.
+related:
+  url:
+    - https://security.snyk.io/vuln/SNYK-RUBY-ENUMCOLUMN3-20100
+    - http://osvdb.org/show/osvdb/94679
+notes: "Never patched"
diff --git a/gems/espeak-ruby/CVE-2016-10193.yml b/gems/espeak-ruby/CVE-2016-10193.yml
index 6de4370453..94f3e36ee7 100644
--- a/gems/espeak-ruby/CVE-2016-10193.yml
+++ b/gems/espeak-ruby/CVE-2016-10193.yml
@@ -12,4 +12,4 @@ description: |
   and bytes_wav methods in the lib/espeak/speech.rb library.
 cvss_v3: 9.8
 patched_versions:
-- ">= 1.0.3"
+  - ">= 1.0.3"
diff --git a/gems/excon/CVE-2019-16779.yml b/gems/excon/CVE-2019-16779.yml
index 452700371c..0d32c6a240 100644
--- a/gems/excon/CVE-2019-16779.yml
+++ b/gems/excon/CVE-2019-16779.yml
@@ -5,7 +5,7 @@ ghsa: q58g-455p-8vw9
 url: https://github.com/excon/excon/security/advisories/GHSA-q58g-455p-8vw9
 date: 2019-12-16
 title: Race condition when using persistent connections
-description: |-
+description: |
   There was a race condition around persistent connections, where a connection
   which is interrupted (such as by a timeout) would leave data on the socket.
   Subsequent requests would then read this data, returning content from the
@@ -16,8 +16,8 @@ description: |-
   this may cause performance implications.
 cvss_v3: 5.8
 patched_versions:
-- '>= 0.71.0'
+  - ">= 0.71.0"
 
 related:
   url:
-  - https://github.com/excon/excon/commit/ccb57d7a422f020dc74f1de4e8fb505ab46d8a29
+    - https://github.com/excon/excon/commit/ccb57d7a422f020dc74f1de4e8fb505ab46d8a29
diff --git a/gems/exiftool_vendored/GHSA-q95h-cqrv-8jv5.yml b/gems/exiftool_vendored/GHSA-q95h-cqrv-8jv5.yml
new file mode 100644
index 0000000000..a758128fef
--- /dev/null
+++ b/gems/exiftool_vendored/GHSA-q95h-cqrv-8jv5.yml
@@ -0,0 +1,23 @@
+---
+gem: exiftool_vendored
+ghsa: q95h-cqrv-8jv5
+url: https://github.com/exiftool-rb/exiftool_vendored.rb/security/advisories/GHSA-q95h-cqrv-8jv5
+title: ExifTool vulnerable to arbitrary code execution
+date: 2023-01-20
+description: |
+  ### Impact
+  Arbitrary code execution can occur when running `exiftool` against files with hostile metadata payloads
+
+  ### Patches
+  ExifTool has already been patched in version 12.24. `exiftool_vendored.rb`, which vendors ExifTool, includes this patch in [v12.25.0](https://github.com/exiftool-rb/exiftool_vendored.rb/releases/tag/v12.25.0).
+
+  ### Workarounds
+  No
+cvss_v3: 7.8
+patched_versions:
+  - ">= 12.25.0"
+related:
+  url:
+    - https://twitter.com/wcbowling/status/1385803927321415687
+  cve:
+    - 2021-22204
diff --git a/gems/extlib/CVE-2013-1802.yml b/gems/extlib/CVE-2013-1802.yml
index 503006fde7..6d021bff4c 100644
--- a/gems/extlib/CVE-2013-1802.yml
+++ b/gems/extlib/CVE-2013-1802.yml
@@ -2,6 +2,7 @@
 gem: extlib
 cve: 2013-1802
 osvdb: 90740
+ghsa: 9h36-4jf2-hx53
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1802
 title: extlib Gem for Ruby Type Casting Parameter Parsing Remote Code Execution
 date: 2013-01-08
@@ -11,4 +12,4 @@ description: |
   context-dependent attacker to potentially execute arbitrary code.
 cvss_v2: 9.3
 patched_versions:
-- '>= 0.9.16'
+  - ">= 0.9.16"
diff --git a/gems/facter/CVE-2014-3248.yml b/gems/facter/CVE-2014-3248.yml
new file mode 100644
index 0000000000..4b0e59e99c
--- /dev/null
+++ b/gems/facter/CVE-2014-3248.yml
@@ -0,0 +1,28 @@
+---
+gem: facter
+cve: 2014-3248
+ghsa: 92v7-pq4h-58j5
+url: https://github.com/advisories/GHSA-92v7-pq4h-58j5
+title: Moderate severity vulnerability that affects facter, hiera, mcollective-client, and puppet
+date: 2017-10-24
+description: |
+  Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7,
+  Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera
+  before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier,
+  allows local users to gain privileges via a Trojan horse file in the current working
+  directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2)
+  Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so;
+  or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so
+  in puppet/confine.
+patched_versions:
+  - "~> 1.7.6"
+  - ">= 2.0.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-3248
+    - https://github.com/advisories/GHSA-92v7-pq4h-58j5
+    - http://puppetlabs.com/security/cve/cve-2014-3248
+    - http://rowediness.com/2014/06/13/cve-2014-3248-a-little-problem-with-puppet/
+    - http://secunia.com/advisories/59197
+    - http://secunia.com/advisories/59200
+    - http://www.securityfocus.com/bid/68035
diff --git a/gems/facter/CVE-2015-1426.yml b/gems/facter/CVE-2015-1426.yml
new file mode 100644
index 0000000000..573336a494
--- /dev/null
+++ b/gems/facter/CVE-2015-1426.yml
@@ -0,0 +1,26 @@
+---
+gem: facter
+cve: 2015-1426
+ghsa: j436-h7hm-rx46
+url: https://www.puppet.com/security/cve/cve-2015-1426-potential-sensitive-information-leakage-facters-amazon-ec2-metadata
+title: Puppet Labs Facter allows local users to obtains sensitive Amazon
+  EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.
+date: 2015-02-10
+description: |
+  Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to
+  obtains sensitive Amazon EC2 IAM instance metadata by reading
+  a fact for an Amazon EC2 node.
+cvss_v2: 2.1
+cvss_v3: 1.3
+unaffected_versions:
+  - "< 1.6.0"
+patched_versions:
+  - ">= 2.4.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2015-1426
+    - https://www.puppet.com/security/cve/cve-2015-1426-potential-sensitive-information-leakage-facters-amazon-ec2-metadata
+    - https://sca.analysiscenter.veracode.com/vulnerability-database/security/disclosure-amazon-ec2-iam-instance/ruby/sid-1508/summary
+    - https://srcclr.com/security/disclosure-amazon-ec2-iam-instance/ruby/s-1508
+    - https://github.com/rubysec/ruby-advisory-db/issues/238
+    - https://github.com/advisories/GHSA-j436-h7hm-rx46
diff --git a/gems/fastreader/CVE-2013-2615.yml b/gems/fastreader/CVE-2013-2615.yml
index 5f255cb238..980e6889b2 100644
--- a/gems/fastreader/CVE-2013-2615.yml
+++ b/gems/fastreader/CVE-2013-2615.yml
@@ -2,6 +2,7 @@
 gem: fastreader
 cve: 2013-2615
 osvdb: 91232
+ghsa: w248-xr37-jx8m
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-2615
 title: fastreader Gem for Ruby URI Handling Arbitrary Command Injection
 date: 2013-03-13
diff --git a/gems/fat_free_crm/CVE-2013-7222.yml b/gems/fat_free_crm/CVE-2013-7222.yml
index 36d2b9aad5..845289fb01 100644
--- a/gems/fat_free_crm/CVE-2013-7222.yml
+++ b/gems/fat_free_crm/CVE-2013-7222.yml
@@ -1,7 +1,8 @@
 ---
 gem: fat_free_crm
-osvdb: 101445
 cve: 2013-7222
+osvdb: 101445
+ghsa: g897-cgfc-7q8v
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-7222
 title: Fat Free CRM Gem for Ruby lack of support for cycling the Rails session secret
 date: 2013-12-24
@@ -12,5 +13,5 @@ description: |
   arbitrary code.
 cvss_v2: 5.0
 patched_versions:
-- '>= 0.13.0'
-- ~> 0.12.1
+  - ">= 0.13.0"
+  - "~> 0.12.1"
diff --git a/gems/fat_free_crm/CVE-2013-7223.yml b/gems/fat_free_crm/CVE-2013-7223.yml
index c64649992c..70b2f980c5 100644
--- a/gems/fat_free_crm/CVE-2013-7223.yml
+++ b/gems/fat_free_crm/CVE-2013-7223.yml
@@ -1,7 +1,8 @@
 ---
 gem: fat_free_crm
-osvdb: 101446
 cve: 2013-7223
+osvdb: 101446
+ghsa: mcvq-7xjq-46x6
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-7223
 title: Fat Free CRM Gem for Ruby contains multiple cross-site request forgery (CSRF)
   vulnerabilities
@@ -15,5 +16,5 @@ description: |
   (CSRF / XSRF) attack causing the victim to perform unspecified actions.
 cvss_v2: 6.8
 patched_versions:
-- '>= 0.13.0'
-- ~> 0.12.1
+  - ">= 0.13.0"
+  - "~> 0.12.1"
diff --git a/gems/fat_free_crm/CVE-2013-7224.yml b/gems/fat_free_crm/CVE-2013-7224.yml
index d61b4ab980..4eebdc2ff4 100644
--- a/gems/fat_free_crm/CVE-2013-7224.yml
+++ b/gems/fat_free_crm/CVE-2013-7224.yml
@@ -1,7 +1,8 @@
 ---
 gem: fat_free_crm
-osvdb: 101447
 cve: 2013-7224
+osvdb: 101447
+ghsa: 4xq9-vw89-p5cx
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-7224
 title: Fat Free CRM Gem for Ruby allows remote attackers to obtain sensitive informations
 date: 2013-12-24
@@ -12,5 +13,5 @@ description: |
   users password hashes.
 cvss_v2: 5.0
 patched_versions:
-- '>= 0.13.0'
-- ~> 0.12.1
+  - ">= 0.13.0"
+  - "~> 0.12.1"
diff --git a/gems/fat_free_crm/CVE-2013-7225.yml b/gems/fat_free_crm/CVE-2013-7225.yml
index 4b3c393f9f..c9075f620a 100644
--- a/gems/fat_free_crm/CVE-2013-7225.yml
+++ b/gems/fat_free_crm/CVE-2013-7225.yml
@@ -1,7 +1,8 @@
 ---
 gem: fat_free_crm
-osvdb: 101448
 cve: 2013-7225
+osvdb: 101448
+ghsa: 9ggp-5rf4-x7q9
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-7225
 title: Fat Free CRM Gem for Ruby allows remote attackers to inject or manipulate SQL
   queries
@@ -15,5 +16,5 @@ description: |
   the manipulation or disclosure of arbitrary data.
 cvss_v2: 6.5
 patched_versions:
-- '>= 0.13.0'
-- ~> 0.12.1
+  - ">= 0.13.0"
+  - "~> 0.12.1"
diff --git a/gems/fat_free_crm/CVE-2013-7249.yml b/gems/fat_free_crm/CVE-2013-7249.yml
index 3f0fe69a60..cb49746a71 100644
--- a/gems/fat_free_crm/CVE-2013-7249.yml
+++ b/gems/fat_free_crm/CVE-2013-7249.yml
@@ -1,7 +1,8 @@
 ---
 gem: fat_free_crm
-osvdb: 101700
 cve: 2013-7249
+osvdb: 101700
+ghsa: f25h-3mj6-4jpg
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-7249
 title: Fat Free CRM Gem for Ruby allows remote attackers to obtain sensitive informations
 date: 2013-12-24
@@ -11,5 +12,5 @@ description: |
   access to potentially sensitive information.
 cvss_v2: 5.0
 patched_versions:
-- '>= 0.13.0'
-- ~> 0.12.1
+  - ">= 0.13.0"
+  - "~> 0.12.1"
diff --git a/gems/fat_free_crm/CVE-2014-5441.yml b/gems/fat_free_crm/CVE-2014-5441.yml
index ede8908176..cbe92e3c15 100644
--- a/gems/fat_free_crm/CVE-2014-5441.yml
+++ b/gems/fat_free_crm/CVE-2014-5441.yml
@@ -1,7 +1,8 @@
 ---
 gem: fat_free_crm
-osvdb: 110420
 cve: 2014-5441
+osvdb: 110420
+ghsa: wcfx-3m6v-4frg
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-5441
 title: Fat Free CRM Gem contains a javascript cross-site scripting (XSS) vulnerability
 date: 2014-08-22
@@ -13,6 +14,6 @@ description: |
   This code would be executed for all logged in users.
 cvss_v2: 4.3
 unaffected_versions:
-- <= 0.11.0
+  - "<= 0.11.0"
 patched_versions:
-- '>= 0.13.3'
+  - ">= 0.13.3"
diff --git a/gems/fat_free_crm/CVE-2015-1585.yml b/gems/fat_free_crm/CVE-2015-1585.yml
index 26de23f896..9a4d33b314 100644
--- a/gems/fat_free_crm/CVE-2015-1585.yml
+++ b/gems/fat_free_crm/CVE-2015-1585.yml
@@ -1,7 +1,8 @@
 ---
 gem: fat_free_crm
-osvdb: 118465
 cve: 2015-1585
+osvdb: 118465
+ghsa: wx7c-8j35-mpg8
 url: https://nvd.nist.gov/vuln/detail/CVE-2015-1585
 title: Fat Free CRM Gem being vulnerable to CSRF-type attacks
 date: 2015-02-16
@@ -14,4 +15,4 @@ description: |
   users.
 cvss_v2: 6.8
 patched_versions:
-- '>= 0.13.6'
+  - ">= 0.13.6"
diff --git a/gems/fat_free_crm/CVE-2018-1000842.yml b/gems/fat_free_crm/CVE-2018-1000842.yml
index 60443e75bb..5bc7528dee 100644
--- a/gems/fat_free_crm/CVE-2018-1000842.yml
+++ b/gems/fat_free_crm/CVE-2018-1000842.yml
@@ -15,8 +15,8 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 6.1
 patched_versions:
-- '>= 0.18.1'
-- ~> 0.17.3
-- ~> 0.16.4
-- ~> 0.15.2
-- ~> 0.14.2
+  - ">= 0.18.1"
+  - "~> 0.17.3"
+  - "~> 0.16.4"
+  - "~> 0.15.2"
+  - "~> 0.14.2"
diff --git a/gems/fat_free_crm/CVE-2018-20975.yml b/gems/fat_free_crm/CVE-2018-20975.yml
index 88d8148bd8..1680d321b6 100644
--- a/gems/fat_free_crm/CVE-2018-20975.yml
+++ b/gems/fat_free_crm/CVE-2018-20975.yml
@@ -9,4 +9,4 @@ description: |
   Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.
 cvss_v3: 6.1
 patched_versions:
-- '>= 0.18.1'
+  - ">= 0.18.1"
diff --git a/gems/fat_free_crm/CVE-2019-10226.yml b/gems/fat_free_crm/CVE-2019-10226.yml
new file mode 100644
index 0000000000..56c21a1cb5
--- /dev/null
+++ b/gems/fat_free_crm/CVE-2019-10226.yml
@@ -0,0 +1,11 @@
+---
+gem: fat_free_crm
+cve: 2019-10226
+ghsa: gmg5-r3c4-3fm9
+url: http://packetstormsecurity.com/files/152263/Fat-Free-CRM-0.19.0-HTML-Injection.html
+title: Fat Free CRM Cross-site Scripting vulnerability
+date: 2022-05-24
+description: |
+  HTML Injection has been discovered in the v0.19.0 version of the Fat
+  Free CRM product via an authenticated request to the /comments URI.
+cvss_v3: 5.4
diff --git a/gems/fat_free_crm/CVE-2022-39281.yml b/gems/fat_free_crm/CVE-2022-39281.yml
new file mode 100644
index 0000000000..518a0bf662
--- /dev/null
+++ b/gems/fat_free_crm/CVE-2022-39281.yml
@@ -0,0 +1,50 @@
+---
+gem: fat_free_crm
+cve: 2022-39281
+ghsa: p75c-5x3h-cxcg
+url: https://github.com/fatfreecrm/fat_free_crm/security/advisories/GHSA-p75c-5x3h-cxcg
+title: Fat Free CRM vulnerable to Remote Denial of Service via Tasks endpoint
+date: 2022-10-07
+description: |
+  ### Impact
+  An authenticated user can perform a remote Denial of Service attack against
+  Fat Free CRM.
+
+  This vulnerability has been assigned the CVE identifier: CVE-2022-39281
+
+  Affected versions: All
+  Not affected: None
+  Fixed versions: 0.20.1
+
+  All users running an affected release should either upgrade or apply the patch
+  immediately.
+
+  ### Releases
+  Fixed versions: 0.20.1 and above
+
+  ### Patches
+
+  If you are unable to upgrade immediately, you should apply the following
+  patch.
+
+  ```
+  diff --git a/app/models/polymorphic/task.rb b/app/models/polymorphic/task.rb
+  index d3d5c32c..7cdb24d6 100644
+  --- a/app/models/polymorphic/task.rb
+  +++ b/app/models/polymorphic/task.rb
+  @@ -189,6 +189,7 @@ class Task < ActiveRecord::Base
+     #----------------------------------------------------------------------------
+     def self.bucket_empty?(bucket, user, view = "pending")
+       return false if bucket.blank? || !ALLOWED_VIEWS.include?(view)
+  +    return false unless Setting.task_bucket.map(&:to_s).include?(bucket.to_s)
+
+       if view == "assigned"
+         assigned_by(user).send(bucket).pending.count
+  ```
+cvss_v3: 6.5
+patched_versions:
+  - ">= 0.20.1"
+related:
+  url:
+    - https://github.com/fatfreecrm/fat_free_crm/commit/c85a2546348c2692d32f952c753f7f0b43d1ca71
+    - https://github.com/fatfreecrm/fat_free_crm/releases/tag/v0.20.1
diff --git a/gems/faye-websocket/CVE-2020-15133.yml b/gems/faye-websocket/CVE-2020-15133.yml
index 6d99106455..0224f9c9cc 100644
--- a/gems/faye-websocket/CVE-2020-15133.yml
+++ b/gems/faye-websocket/CVE-2020-15133.yml
@@ -5,7 +5,7 @@ ghsa: 2v5c-755p-p4gv
 url: https://github.com/faye/faye-websocket-ruby/security/advisories/GHSA-2v5c-755p-p4gv
 date: 2020-07-31
 title: Missing TLS certificate verification in faye-websocket
-description: |-
+description: |
   The `Faye::WebSocket::Client` class uses the [`EM::Connection#start_tls`][1]
   method in [EventMachine][2] to implement the TLS handshake whenever a `wss:` URL
   is used for the connection. This method does not implement certificate
@@ -97,4 +97,4 @@ description: |-
   [15]: https://github.com/DanielMorsing
 cvss_v3: 8.0
 patched_versions:
-- '>= 0.11.0'
+  - ">= 0.11.0"
diff --git a/gems/faye/CVE-2020-11020.yml b/gems/faye/CVE-2020-11020.yml
index 44420587eb..b9f50b6391 100644
--- a/gems/faye/CVE-2020-11020.yml
+++ b/gems/faye/CVE-2020-11020.yml
@@ -5,7 +5,7 @@ ghsa: qpg4-4w7w-2mq5
 url: https://github.com/faye/faye/security/advisories/GHSA-qpg4-4w7w-2mq5
 date: 2020-04-29
 title: Authentication and extension bypass in Faye
-description: |-
+description: |
   On 20 April 2020 it was reported to me that the potential for authentication
   bypass exists in [Faye][1]'s extension system. This vulnerability has existed in
   the Node.js and Ruby versions of the server since version 0.5.0, when extensions
@@ -81,9 +81,9 @@ description: |-
   [2]: https://faye.jcoglan.com/node/extensions.html
 cvss_v3: 8.5
 patched_versions:
-- ~> 1.0.4
-- ~> 1.1.3
-- '>= 1.2.5'
+  - "~> 1.0.4"
+  - "~> 1.1.3"
+  - ">= 1.2.5"
 
 unaffected_versions:
-- < 0.5.0
+  - "< 0.5.0"
diff --git a/gems/faye/CVE-2020-15134.yml b/gems/faye/CVE-2020-15134.yml
index a6b8446c83..318ac737b7 100644
--- a/gems/faye/CVE-2020-15134.yml
+++ b/gems/faye/CVE-2020-15134.yml
@@ -5,7 +5,7 @@ ghsa: 3q49-h8f9-9fr9
 url: https://github.com/faye/faye/security/advisories/GHSA-3q49-h8f9-9fr9
 date: 2020-07-31
 title: Missing TLS certificate verification
-description: |-
+description: |
   Faye uses [em-http-request][6] and [faye-websocket][10] in the Ruby version of
   its client. Those libraries both use the [`EM::Connection#start_tls`][1] method
   in [EventMachine][2] to implement the TLS handshake whenever a `wss:` URL is
@@ -95,4 +95,4 @@ description: |-
   [15]: https://github.com/DanielMorsing
 cvss_v3: 8.0
 patched_versions:
-- '>= 1.4.0'
+  - ">= 1.4.0"
diff --git a/gems/features/CVE-2013-4318.yml b/gems/features/CVE-2013-4318.yml
index 6ff60bf894..c27f8b748b 100644
--- a/gems/features/CVE-2013-4318.yml
+++ b/gems/features/CVE-2013-4318.yml
@@ -2,11 +2,14 @@
 gem: features
 cve: 2013-4318
 osvdb: 96975
+ghsa: 42gq-h7xj-33r4
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-4318
 title: Features Gem for Ruby /tmp/out.html Local XSS
 date: 2013-09-01
-description: Features Gem for Ruby contains a flaw that allows a local cross-site
+description: |
+  Features Gem for Ruby contains a flaw that allows a local cross-site
   scripting (XSS) attack. This flaw exists because the application does not validate
   certain input upon submission to /tmp/out.html. This may allow an attacker to create
   a specially crafted request that would execute arbitrary script code in a user's
   browser within the trust relationship between their browser and the server.
+cvss_v3: 5.4
diff --git a/gems/ffi/CVE-2018-1000201.yml b/gems/ffi/CVE-2018-1000201.yml
index 679a6dbe38..05a383b104 100644
--- a/gems/ffi/CVE-2018-1000201.yml
+++ b/gems/ffi/CVE-2018-1000201.yml
@@ -12,8 +12,8 @@ description: |
 cvss_v2: 6.8
 cvss_v3: 7.8
 patched_versions:
-- '>= 1.9.24'
+  - ">= 1.9.24"
 related:
   url:
-  - https://github.com/ffi/ffi/commit/09e0c6076466b4383da7fa4e13f714311109945a
-  - https://github.com/ffi/ffi/commit/e0fe486df0e117ed67b0282b6ada04b7214ca05c
+    - https://github.com/ffi/ffi/commit/09e0c6076466b4383da7fa4e13f714311109945a
+    - https://github.com/ffi/ffi/commit/e0fe486df0e117ed67b0282b6ada04b7214ca05c
diff --git a/gems/field_test/CVE-2019-13146.yml b/gems/field_test/CVE-2019-13146.yml
index 51f19be259..d5379b58cc 100644
--- a/gems/field_test/CVE-2019-13146.yml
+++ b/gems/field_test/CVE-2019-13146.yml
@@ -17,6 +17,6 @@ description: |
   Page.where("key = '#{landing_page}'")
 cvss_v3: 5.3
 unaffected_versions:
-- < 0.3.0
+  - "< 0.3.0"
 patched_versions:
-- '>= 0.3.1'
+  - ">= 0.3.1"
diff --git a/gems/field_test/CVE-2020-16252.yml b/gems/field_test/CVE-2020-16252.yml
index f705fa2575..951cb362ab 100644
--- a/gems/field_test/CVE-2020-16252.yml
+++ b/gems/field_test/CVE-2020-16252.yml
@@ -18,6 +18,6 @@ description: |
   which allows for changing the variant assigned to a user.
 cvss_v3: 4.3
 unaffected_versions:
-- "< 0.2.0"
+  - "< 0.2.0"
 patched_versions:
-- ">= 0.4.0"
+  - ">= 0.4.0"
diff --git a/gems/fileutils/CVE-2013-2516.yml b/gems/fileutils/CVE-2013-2516.yml
index e097f1aaa4..33e1b12e71 100644
--- a/gems/fileutils/CVE-2013-2516.yml
+++ b/gems/fileutils/CVE-2013-2516.yml
@@ -2,11 +2,14 @@
 gem: fileutils
 cve: 2013-2516
 osvdb: 90717
+ghsa: 9x97-x2p9-hvpf
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-2516
 title: fileutils Gem for Ruby file_utils.rb Crafted URL Handling Remote Command Execution
 date: 2013-02-28
-description: fileutils Gem for Ruby contains a flaw in file_utils.rb. The issue is
+description: |
+  fileutils Gem for Ruby contains a flaw in file_utils.rb. The issue is
   triggered when handling a specially crafted URL containing a command after a delimiter
   (;). This may allow a remote attacker to potentially execute arbitrary commands.
+cvss_v3: 8.8
 patched_versions:
-- '>= 0.7.1'
+  - ">= 0.7.1"
diff --git a/gems/flash_tool/CVE-2013-2513.yml b/gems/flash_tool/CVE-2013-2513.yml
index 3c93897489..f1018aaa83 100644
--- a/gems/flash_tool/CVE-2013-2513.yml
+++ b/gems/flash_tool/CVE-2013-2513.yml
@@ -2,9 +2,12 @@
 gem: flash_tool
 cve: 2013-2513
 osvdb: 90829
+ghsa: 6325-6g32-7p35
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-2513
 title: flash_tool Gem for Ruby File Download Handling Arbitrary Command Execution
 date: 2013-03-04
-description: flash_tool Gem for Ruby contains a flaw that is triggered during the
+description: |
+  flash_tool Gem for Ruby contains a flaw that is triggered during the
   handling of downloaded files that contain shell characters. With a specially crafted
   file, a context-dependent attacker can execute arbitrary commands.
+cvss_v3: 9.8
diff --git a/gems/flavour_saver/OSVDB-110796.yml b/gems/flavour_saver/OSVDB-110796.yml
index 1187efeecd..204d3d2f43 100644
--- a/gems/flavour_saver/OSVDB-110796.yml
+++ b/gems/flavour_saver/OSVDB-110796.yml
@@ -1,9 +1,8 @@
 ---
 gem: flavour_saver
 osvdb: 110796
-url: http://osvdb.org/show/osvdb/110796
-title: |
-  FlavourSaver handlebars helper remote code execution.
+url: https://security.snyk.io/vuln/SNYK-RUBY-FLAVOURSAVER-5457859
+title: FlavourSaver handlebars helper remote code execution.
 date: 2014-09-04
 description: |
   FlavourSaver contains a flaw in helper method dispatch where it uses
@@ -11,4 +10,12 @@ description: |
   within the template context first.  This allows expressions such as
   {{system "ls"}} or {{eval "puts 1 + 1"}} to be executed.
 patched_versions:
-- '>= 0.3.3'
+  - ">= 0.3.3"
+related:
+  url:
+    - https://github.com/FlavourSaver/FlavourSaver/compare/v0.3.2...v0.3.3
+    - https://github.com/FlavourSaver/FlavourSaver/commit/04a8ff444a9a9668a75b01b20b4974d398087a64
+    - https://raw.githubusercontent.com/codesake/codesake-dawn/master/Roadmap.md
+    - https://github.com/slowmistio/dawnscanner-analysis-security-scanner-for-ruby-/blob/master/Roadmap.md
+    - https://security.snyk.io/vuln/SNYK-RUBY-FLAVOURSAVER-5457859
+    - http://osvdb.org/show/osvdb/110796
diff --git a/gems/fluentd-ui/CVE-2020-21514.yml b/gems/fluentd-ui/CVE-2020-21514.yml
new file mode 100644
index 0000000000..b36abd8bde
--- /dev/null
+++ b/gems/fluentd-ui/CVE-2020-21514.yml
@@ -0,0 +1,18 @@
+---
+gem: fluentd-ui
+cve: 2020-21514
+ghsa: wrxf-x8rm-6ggg
+url: https://github.com/advisories/GHSA-wrxf-x8rm-6ggg
+title: Fluent Fluentd and Fluent-ui use default password
+date: 2023-04-04
+description: |
+  An issue was discovered in Fluent Fluentd v.1.8.0 and Fluent-ui v.1.2.2
+  that allows attackers to gain escilated privileges and execute arbitrary code due
+  to use of a default password.
+cvss_v3: 8.8
+notes: Never patched
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-21514
+    - https://github.com/fluent/fluentd-ui/issues/295
+    - https://github.com/advisories/GHSA-wrxf-x8rm-6ggg
diff --git a/gems/fluentd/CVE-2017-10906.yml b/gems/fluentd/CVE-2017-10906.yml
new file mode 100644
index 0000000000..32423ca34f
--- /dev/null
+++ b/gems/fluentd/CVE-2017-10906.yml
@@ -0,0 +1,21 @@
+---
+gem: fluentd
+cve: 2017-10906
+ghsa: 5jrp-w8fr-mrww
+url: https://github.com/fluent/fluentd/pull/1733
+title: Fluentd Escape Sequence Injection Vulnerability
+date: 2022-05-13
+description: |
+  Escape sequence injection vulnerability in Fluentd versions 0.12.29 through
+  0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands
+  on the device via unspecified vectors.
+cvss_v3: 9.8
+unaffected_versions:
+  - "< 0.12.29"
+patched_versions:
+  - ">= 0.12.41"
+related:
+  url:
+    - https://access.redhat.com/errata/RHSA-2018:2225
+    - https://github.com/fluent/fluentd/blob/v0.12/CHANGELOG.md#bug-fixes
+    - https://jvn.jp/en/vu/JVNVU95124098/index.html
diff --git a/gems/fluentd/CVE-2021-41186.yml b/gems/fluentd/CVE-2021-41186.yml
index 0e214864d7..dcd98cb894 100644
--- a/gems/fluentd/CVE-2021-41186.yml
+++ b/gems/fluentd/CVE-2021-41186.yml
@@ -19,10 +19,10 @@ description: |
   * Put patched version of parser_apache2.rb into /etc/fluent/plugin  directory (or any other directories specified by the environment variable `FLUENT_PLUGIN` or `--plugin` option of fluentd).
 cvss_v3: 5.9
 unaffected_versions:
-- "< 0.14.14"
+  - "< 0.14.14"
 patched_versions:
-- ">= 1.14.2"
+  - ">= 1.14.2"
 related:
   url:
-  - https://securitylab.github.com/advisories/GHSL-2021-102-fluent-fluentd/
-  - https://github.com/fluent/fluentd/blob/master/CHANGELOG.md#v1142
+    - https://securitylab.github.com/advisories/GHSL-2021-102-fluent-fluentd/
+    - https://github.com/fluent/fluentd/blob/master/CHANGELOG.md#v1142
diff --git a/gems/fluentd/CVE-2022-39379.yml b/gems/fluentd/CVE-2022-39379.yml
new file mode 100644
index 0000000000..40dbfeddcb
--- /dev/null
+++ b/gems/fluentd/CVE-2022-39379.yml
@@ -0,0 +1,38 @@
+---
+gem: fluentd
+cve: 2022-39379
+ghsa: fppq-mj76-fpj2
+url: https://github.com/fluent/fluentd/security/advisories/GHSA-fppq-mj76-fpj2
+title: fluentd vulnerable to remote code execution due to insecure deserialization
+  (in non-default configuration)
+date: 2022-11-02
+description: |
+  ### Impact
+  A remote code execution (RCE) vulnerability in non-default configurations of
+  Fluentd allows unauthenticated attackers to execute arbitrary code via
+  specially crafted JSON payloads.
+
+  Fluentd setups are only affected if the environment variable
+  `FLUENT_OJ_OPTION_MODE` is explicitly set to `object`.
+
+  Please note: The option FLUENT_OJ_OPTION_MODE was introduced in Fluentd
+  version 1.13.2. Earlier versions of Fluentd are not affected by this
+  vulnerability.
+
+  ### Patches
+  v1.15.3
+
+  ### Workarounds
+  Do not use `FLUENT_OJ_OPTION_MODE=object`.
+
+  ### References
+  * GHSL-2022-067
+cvss_v3: 3.1
+unaffected_versions:
+  - "< 1.13.2"
+patched_versions:
+  - ">= 1.15.3"
+related:
+  url:
+    - https://securitylab.github.com/advisories/GHSL-2022-067_fluentd/
+    - https://github.com/fluent/fluentd/commit/48e5b85dab1b6d4c273090d538fc11b3f2fd8135
diff --git a/gems/flukso4r/OSVDB-101577.yml b/gems/flukso4r/OSVDB-101577.yml
index 87059963bb..afbdbc3919 100644
--- a/gems/flukso4r/OSVDB-101577.yml
+++ b/gems/flukso4r/OSVDB-101577.yml
@@ -1,9 +1,16 @@
 ---
 gem: flukso4r
 osvdb: 101577
-url: http://osvdb.org/show/osvdb/101577
+url: https://vulners.com/seebug/SSV:61267
 title: flukso4r Gem for Ruby /lib/flukso/R.rb Arbitrary Command Execution
 date: 2013-12-31
-description: flukso4r Gem for Ruby contains a flaw in /lib/flukso/R.rb that is due
+description: |
+  flukso4r Gem for Ruby contains a flaw in /lib/flukso/R.rb that is due
   to the application failing to properly validate user-supplied input. This may allow
   a context-dependent attacker to execute arbitrary commands.
+notes: "No patched version"
+related:
+  url:
+    - https://security.snyk.io/vuln/SNYK-RUBY-FLUKSO4R-20136
+    - https://vulners.com/seebug/SSV:61267
+    - http://osvdb.org/show/osvdb/101577
diff --git a/gems/fog-dragonfly/CVE-2013-1756.yml b/gems/fog-dragonfly/CVE-2013-1756.yml
index b04c1745eb..29abe97831 100644
--- a/gems/fog-dragonfly/CVE-2013-1756.yml
+++ b/gems/fog-dragonfly/CVE-2013-1756.yml
@@ -13,6 +13,6 @@ description: |
   This gem has been renamed. Please use "dragonfly" from now on.
 cvss_v2: 7.5
 unaffected_versions:
-- < 0.7.0
+  - "< 0.7.0"
 patched_versions:
-- '>= 0.9.14'
+  - ">= 0.9.14"
diff --git a/gems/fog-dragonfly/CVE-2013-5671.yml b/gems/fog-dragonfly/CVE-2013-5671.yml
index e4a64d9b67..6664313f64 100644
--- a/gems/fog-dragonfly/CVE-2013-5671.yml
+++ b/gems/fog-dragonfly/CVE-2013-5671.yml
@@ -2,6 +2,7 @@
 gem: fog-dragonfly
 cve: 2013-5671
 osvdb: 96798
+ghsa: qrgf-jqqm-x7xv
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-5671
 title: fog-dragonfly Gem for Ruby imagemagickutils.rb Remote Command Execution
 date: 2013-09-03
@@ -13,4 +14,4 @@ description: |
   This gem has been renamed. Please use "dragonfly" from now on.
 cvss_v2: 7.5
 patched_versions:
-- '>= 0.8.4'
+  - ">= 0.8.4"
diff --git a/gems/fog-dragonfly/OSVDB-110439.yml b/gems/fog-dragonfly/OSVDB-110439.yml
index 9d7044d027..d783e247dc 100644
--- a/gems/fog-dragonfly/OSVDB-110439.yml
+++ b/gems/fog-dragonfly/OSVDB-110439.yml
@@ -1,15 +1,21 @@
 ---
 gem: fog-dragonfly
 osvdb: 110439
-url: http://osvdb.org/show/osvdb/110439
+url: https://security.snyk.io/vuln/SNYK-RUBY-DRAGONFLY-20193
 title: Dragonfly Gem for Ruby Image Uploading & Processing Remote Command Execution
-date: 2014-08-25
+date: 2010-04-27
 description: |
-  Dragonfly Gem for Ruby contains a flaw in Uploading & Processing that is due
-  to the gem failing to restrict arbitrary commands to imagemagicks convert.
-  This may allow a remote attacker to gain read/write access to the filesystem
-  and execute arbitrary commands.
+  Dragonfly Gem for Ruby contains a flaw in Uploading & Processing
+  that is due to the gem failing to restrict arbitrary commands to
+  imagemagicks convert. This may allow a remote attacker to gain
+  read/write access to the filesystem and execute arbitrary commands.
 
   This gem has been renamed. Please use "dragonfly" from now on.
 patched_versions:
-- '>= 0.8.4'
+  - ">= 0.8.4"
+related:
+  url:
+    - https://github.com/markevans/dragonfly/compare/v0.8.3...v0.8.4
+    - https://security.snyk.io/vuln/SNYK-RUBY-DRAGONFLY-20193
+    - https://www.mend.io/vulnerability-database/WS-2014-0016
+    - http://osvdb.org/show/osvdb/110439
diff --git a/gems/fog-dragonfly/OSVDB-97854.yml b/gems/fog-dragonfly/OSVDB-97854.yml
index 36039fd20e..0f2cb61be6 100644
--- a/gems/fog-dragonfly/OSVDB-97854.yml
+++ b/gems/fog-dragonfly/OSVDB-97854.yml
@@ -1,12 +1,22 @@
 ---
 gem: fog-dragonfly
 osvdb: 97854
-url: http://osvdb.org/show/osvdb/97854
+url: https://security.snyk.io/vuln/SNYK-RUBY-DRAGONFLY-20016
 title: Dragonfly Gem for Ruby on Windows Shell Escaping Weakness
 date: 2011-09-01
 description: |
-  Dragonfly Gem for Ruby contains a flaw that is due to the program failing to
-  properly escape a shell that contains injected characters. This may allow a
-  context-dependent attacker to potentially execute arbitrary commands.
+  Dragonfly Gem for Ruby contains a flaw that is due to the program
+  failing to properly escape a shell that contains injected characters.
+  This may allow a context-dependent attacker to potentially execute
+  arbitrary commands.
 
   This gem has been renamed. Please use "dragonfly" from now on.
+patched_versions:
+  - ">= 0.9.6"
+related:
+  url:
+    - https://github.com/markevans/dragonfly/blob/master/spec/dragonfly/shell_spec.rb#L26
+    - https://github.com/markevans/dragonfly/pull/506
+    - https://github.com/markevans/dragonfly/commit/f4f8e37a171a34f0ef3a6d80b52f44ed4d66d3bc
+    - https://security.snyk.io/vuln/SNYK-RUBY-DRAGONFLY-20016
+    - http://osvdb.org/show/osvdb/97854
diff --git a/gems/foreman_ansible/CVE-2021-3589.yml b/gems/foreman_ansible/CVE-2021-3589.yml
new file mode 100644
index 0000000000..c3ac4dcf98
--- /dev/null
+++ b/gems/foreman_ansible/CVE-2021-3589.yml
@@ -0,0 +1,19 @@
+---
+gem: foreman_ansible
+cve: 2021-3589
+ghsa: vvff-6wrr-4g7q
+url: https://access.redhat.com/security/cve/CVE-2021-3589
+title: Missing Authentication for Critical Function in Foreman Ansible
+date: 2022-03-24
+description: |
+  An authorization flaw was found in Foreman Ansible. An authenticated attacker
+  with certain permissions to create and run Ansible jobs can access hosts
+  through job templates. The highest threat from this vulnerability is to data
+  confidentiality and integrity as well as system availability.
+cvss_v3: 9.9
+patched_versions:
+  - ">= 2.0.0"
+related:
+  url:
+    - https://bugzilla.redhat.com/show_bug.cgi?id=1969265
+    - https://github.com/theforeman/foreman_ansible/commit/a5e0827bc3ec6c8ab82f968907857a15646305d5
diff --git a/gems/foreman_fog_proxmox/CVE-2021-20259.yml b/gems/foreman_fog_proxmox/CVE-2021-20259.yml
index 42d9bfeefc..8e3fbe0578 100644
--- a/gems/foreman_fog_proxmox/CVE-2021-20259.yml
+++ b/gems/foreman_fog_proxmox/CVE-2021-20259.yml
@@ -13,4 +13,4 @@ description: |
   0.13.1 are affected
 cvss_v3: 7.8
 patched_versions:
-- '>= 0.13.1'
+  - ">= 0.13.1"
diff --git a/gems/ftpd/CVE-2013-2512.yml b/gems/ftpd/CVE-2013-2512.yml
index 1d5f701f06..a738f1afd9 100644
--- a/gems/ftpd/CVE-2013-2512.yml
+++ b/gems/ftpd/CVE-2013-2512.yml
@@ -2,6 +2,7 @@
 gem: ftpd
 cve: 2013-2512
 osvdb: 90784
+ghsa: 7vxr-6cxg-j3x8
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-2512
 title: ftpd Gem for Ruby Shell Character Handling Remote Command Injection
 date: 2013-02-28
@@ -11,5 +12,6 @@ description: |
   character. This may allow a remote attacker to inject arbitrary
   commands.
 cvss_v2: 9.0
+cvss_v3: 9.8
 patched_versions:
-- '>= 0.2.2'
+  - ">= 0.2.2"
diff --git a/gems/fugit/CVE-2024-43380.yml b/gems/fugit/CVE-2024-43380.yml
new file mode 100644
index 0000000000..ee23fb1bce
--- /dev/null
+++ b/gems/fugit/CVE-2024-43380.yml
@@ -0,0 +1,42 @@
+---
+gem: fugit
+cve: 2024-43380
+ghsa: 2m96-52r3-2f3g
+url: https://github.com/floraison/fugit/security/advisories/GHSA-2m96-52r3-2f3g
+title: fugit parse and parse_nat stall on lengthy input
+date: 2024-08-19
+description: |
+  ### Impact
+
+  The fugit "natural" parser, that turns "every wednesday at 5pm" into
+  "0 17 * * 3", accepted any length of input and went on attempting to
+  parse it, not returning promptly, as expected. The parse call could
+  hold the thread with no end in sight.
+
+  Fugit dependents that do not check (user) input length for
+  plausability are impacted.
+
+  ### Patches
+
+  Problem was reported in #104 and the fix was released in
+  [fugit 1.11.1](https://rubygems.org/gems/fugit/versions/1.11.1)
+
+  ### Workarounds
+
+  By making sure that `Fugit.parse(s)`, `Fugit.do_parse(s)`,
+  `Fugit.parse_nat(s)`, `Fugit.do_parse_nat(s)`, `Fugit::Nat.parse(s)`,
+  and `Fugit::Nat.do_parse(s)` are not fed strings too long.
+  1000 chars feels ok, while 10_000 chars makes it stall.
+
+  In fewer words, making sure those fugit methods are not fed
+  unvetted input strings.
+cvss_v3: 5.3
+patched_versions:
+  - ">= 1.11.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-43380
+    - https://github.com/floraison/fugit/security/advisories/GHSA-2m96-52r3-2f3g
+    - https://github.com/floraison/fugit/issues/104
+    - https://github.com/floraison/fugit/commit/ad2c1c9c737213d585fff0b51c927d178b2c05a5
+    - https://github.com/advisories/GHSA-2m96-52r3-2f3g
diff --git a/gems/geminabox/CVE-2017-14506.yml b/gems/geminabox/CVE-2017-14506.yml
new file mode 100644
index 0000000000..eefeeb221c
--- /dev/null
+++ b/gems/geminabox/CVE-2017-14506.yml
@@ -0,0 +1,18 @@
+---
+gem: geminabox
+cve: 2017-14506
+ghsa: 98hq-3qvg-pg78
+url: http://baraktawily.blogspot.co.il/2017/09/gem-in-box-xss-vulenrability-cve-2017.html
+title: Gem in a Box vulnerable to Cross-site Scripting
+date: 2022-05-13
+description: |
+  geminabox (aka Gem in a Box) before 0.13.6 is vulnerable to Cross-site
+  Scripting (XSS), as demonstrated by uploading a gem file that has a crafted gem.homepage
+  value in its .gemspec file.
+cvss_v3: 5.4
+patched_versions:
+  - ">= 0.13.6"
+related:
+  url:
+    - https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md
+    - https://github.com/geminabox/geminabox/commit/99aaae196c4fc6ae0df28e186ca1e493ae658e02
diff --git a/gems/geminabox/CVE-2017-14683.yml b/gems/geminabox/CVE-2017-14683.yml
new file mode 100644
index 0000000000..e36bd72478
--- /dev/null
+++ b/gems/geminabox/CVE-2017-14683.yml
@@ -0,0 +1,17 @@
+---
+gem: geminabox
+cve: 2017-14683
+ghsa: qwv2-2x8g-g43g
+url: http://baraktawily.blogspot.co.il/2017/09/gem-in-box-xss-vulenrability-cve-2017.html
+title: Gem in a Box vulnerable to Cross-site Request Forgery
+date: 2022-05-13
+description: |
+  geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated
+  by an unintended gem upload.
+cvss_v3: 8.8
+patched_versions:
+  - ">= 0.13.7"
+related:
+  url:
+    - https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md
+    - https://github.com/geminabox/geminabox/commit/a01c4e8b3403624109499dec75eb6ee30bd01a55
diff --git a/gems/geminabox/CVE-2017-16792.yml b/gems/geminabox/CVE-2017-16792.yml
index 68bc8e047c..e7bf58392f 100644
--- a/gems/geminabox/CVE-2017-16792.yml
+++ b/gems/geminabox/CVE-2017-16792.yml
@@ -15,8 +15,8 @@ description: |
   in order to achieve stored XSS via the gem hyperlink.
 cvss_v3: 6.1
 patched_versions:
-- ">= 0.13.10"
+  - ">= 0.13.10"
 related:
   url:
-  - https://github.com/geminabox/geminabox/commit/f8429a9e364658459add170e4ebc7a5d3b4759e7
-  - https://github.com/geminabox/geminabox/commit/e7e0b16147677e9029f0b55eff6bc6dda52398d4
+    - https://github.com/geminabox/geminabox/commit/f8429a9e364658459add170e4ebc7a5d3b4759e7
+    - https://github.com/geminabox/geminabox/commit/e7e0b16147677e9029f0b55eff6bc6dda52398d4
diff --git a/gems/gemirro/CVE-2017-16833.yml b/gems/gemirro/CVE-2017-16833.yml
index cdae3ebfed..b668dbde0b 100644
--- a/gems/gemirro/CVE-2017-16833.yml
+++ b/gems/gemirro/CVE-2017-16833.yml
@@ -15,9 +15,9 @@ description: |
   in order to achieve stored XSS via the author name hyperlink.
 cvss_v3: 6.1
 patched_versions:
-- ">= 0.15.0"
+  - ">= 0.15.0"
 related:
   url:
-  - https://github.com/PierreRambaud/gemirro/commit/8acfb9ce9774128d535e2795d583242bb86d6ea8
-  - https://github.com/PierreRambaud/gemirro/commit/8fa709b121b7e18fceda308917d0fb68dc1479c3
-  - https://rubygems.org/gems/gemirro/versions/0.15.0
+    - https://github.com/PierreRambaud/gemirro/commit/8acfb9ce9774128d535e2795d583242bb86d6ea8
+    - https://github.com/PierreRambaud/gemirro/commit/8fa709b121b7e18fceda308917d0fb68dc1479c3
+    - https://rubygems.org/gems/gemirro/versions/0.15.0
diff --git a/gems/geocoder/CVE-2020-7981.yml b/gems/geocoder/CVE-2020-7981.yml
index ef8a945ea0..8736b94f40 100644
--- a/gems/geocoder/CVE-2020-7981.yml
+++ b/gems/geocoder/CVE-2020-7981.yml
@@ -11,8 +11,8 @@ description: |
 cvss_v2: 7.5
 cvss_v3: 9.8
 patched_versions:
-- '>= 1.6.1'
+  - ">= 1.6.1"
 related:
   url:
-  - https://github.com/alexreisner/geocoder/compare/v1.6.0...v1.6.1
-  - https://github.com/alexreisner/geocoder/commit/dcdc3d8675411edce3965941a2ca7c441ca48613
+    - https://github.com/alexreisner/geocoder/compare/v1.6.0...v1.6.1
+    - https://github.com/alexreisner/geocoder/commit/dcdc3d8675411edce3965941a2ca7c441ca48613
diff --git a/gems/geokit-rails/CVE-2023-26153.yml b/gems/geokit-rails/CVE-2023-26153.yml
new file mode 100644
index 0000000000..d681918309
--- /dev/null
+++ b/gems/geokit-rails/CVE-2023-26153.yml
@@ -0,0 +1,29 @@
+---
+gem: geokit-rails
+cve: 2023-26153
+ghsa: 7xvc-v44j-46fh
+url: https://github.com/advisories/GHSA-7xvc-v44j-46fh
+title: geokit-rails Command Injection vulnerability
+date: 2023-10-06
+description: |
+  Versions of the package geokit-rails before 2.5.0 are vulnerable
+  to Command Injection due to unsafe deserialisation of YAML within
+  the 'geo_location' cookie. This issue can be exploited remotely
+  via a malicious cookie value.
+
+  **Note:**
+
+   An attacker can use this vulnerability to execute commands
+   on the host system.
+cvss_v3: 8.3
+patched_versions:
+  - ">= 2.5.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-26153
+    - https://gist.github.com/CalumHutton/b7aa1c2e71c8d4386463ac14f686901d
+    - https://github.com/geokit/geokit-rails/commit/7ffc5813e57f6f417987043e1039925fd0865c43
+    - https://github.com/geokit/geokit-rails/commit/a93dfe49fb9aeae7164e2f8c4041450a04b5482f
+    - https://github.com/geokit/geokit-rails/blob/master/lib/geokit-rails/ip_geocode_lookup.rb#L37
+    - https://security.snyk.io/vuln/SNYK-RUBY-GEOKITRAILS-5920323
+    - https://github.com/advisories/GHSA-7xvc-v44j-46fh
diff --git a/gems/gibbon/CVE-2022-27311.yml b/gems/gibbon/CVE-2022-27311.yml
new file mode 100644
index 0000000000..88fbc1023c
--- /dev/null
+++ b/gems/gibbon/CVE-2022-27311.yml
@@ -0,0 +1,13 @@
+---
+gem: gibbon
+cve: 2022-27311
+ghsa: vx9g-377x-xwxq
+url: https://github.com/amro/gibbon/pull/321
+title: Server side request forgery in gibbon
+date: 2022-04-26
+description: |
+  Gibbon v3.4.3 and below allows attackers to execute a Server-Side Request
+  Forgery (SSRF) via a crafted URL. This issue has been resolved in version 3.4.4
+cvss_v3: 9.8
+patched_versions:
+  - ">= 3.4.4"
diff --git a/gems/git-fastclone/CVE-2015-8968.yml b/gems/git-fastclone/CVE-2015-8968.yml
index c0e5583860..ad8133b2ba 100644
--- a/gems/git-fastclone/CVE-2015-8968.yml
+++ b/gems/git-fastclone/CVE-2015-8968.yml
@@ -20,4 +20,4 @@ description: |
   cloning both local and remote repositories.
 cvss_v3: 8.8
 patched_versions:
-- ">= 1.0.1"
+  - ">= 1.0.1"
diff --git a/gems/git-fastclone/CVE-2015-8969.yml b/gems/git-fastclone/CVE-2015-8969.yml
index c8cae3645b..0673162faa 100644
--- a/gems/git-fastclone/CVE-2015-8969.yml
+++ b/gems/git-fastclone/CVE-2015-8969.yml
@@ -12,4 +12,4 @@ description: |
   library.
 cvss_v3: 9.8
 patched_versions:
-- ">= 1.0.5"
+  - ">= 1.0.5"
diff --git a/gems/git/CVE-2022-25648.yml b/gems/git/CVE-2022-25648.yml
new file mode 100644
index 0000000000..8e4feb6059
--- /dev/null
+++ b/gems/git/CVE-2022-25648.yml
@@ -0,0 +1,18 @@
+---
+gem: git
+cve: 2022-25648
+ghsa: 69p6-wvmq-27gg
+url: https://github.com/ruby-git/ruby-git/pull/569
+title: Command injection in ruby-git
+date: 2022-04-20
+description: |
+  The package git before 1.11.0 are vulnerable to Command Injection via
+  git argument injection. When calling the fetch(remote = 'origin', opts = {}) function,
+  the remote parameter is passed to the git fetch subcommand in a way that additional
+  flags can be set. The additional flags can be used to perform a command injection.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 1.11.0"
+related:
+  url:
+    - https://github.com/ruby-git/ruby-git/releases/tag/v1.11.0
diff --git a/gems/git/CVE-2022-46648.yml b/gems/git/CVE-2022-46648.yml
new file mode 100644
index 0000000000..92f719322e
--- /dev/null
+++ b/gems/git/CVE-2022-46648.yml
@@ -0,0 +1,25 @@
+---
+gem: git
+cve: 2022-46648
+ghsa: pfpr-3463-c6jh
+url: https://github.com/ruby-git/ruby-git/pull/602
+title: Potential remote code execution in ruby-git
+date: 2023-01-05
+description: |
+  The git gem, between versions 1.2.0 and 1.12.0, incorrectly parsed the output
+  of the 'git ls-files' command using eval() to unescape quoted file names.
+  If a file name was added to the git repository contained special characters,
+  such as '\n', then the 'git ls-files' command would print the file name in
+  quotes and escape any special characters.
+  If the 'Git#ls_files' method encountered a quoted file name it would use
+  eval() to unquote and unescape any special characters, leading to potential
+  remote code execution. Version 1.13.0 of the git gem was released which
+  correctly parses any quoted file names.
+cvss_v3: 5.5
+unaffected_versions:
+  - "< 1.2.0"
+patched_versions:
+  - ">= 1.13.0"
+related:
+  url:
+    - https://github.com/ruby-git/ruby-git/releases/tag/v1.13.0
diff --git a/gems/git/CVE-2022-47318.yml b/gems/git/CVE-2022-47318.yml
new file mode 100644
index 0000000000..1ba1ff0a42
--- /dev/null
+++ b/gems/git/CVE-2022-47318.yml
@@ -0,0 +1,18 @@
+---
+gem: git
+cve: 2022-47318
+ghsa: pphf-gfrm-v32r
+url: https://github.com/ruby-git/ruby-git/pull/602
+title: Code injection in ruby git
+date: 2023-01-17
+description: |
+  ruby-git versions prior to v1.13.0 allows a remote authenticated attacker
+  to execute an arbitrary ruby code by having a user to load a repository containing
+  a specially crafted filename to the product. This vulnerability is different from
+  CVE-2022-46648.
+cvss_v3: 8.0
+patched_versions:
+  - ">= 1.13.0"
+related:
+  url:
+    - https://jvn.jp/en/jp/JVN16765254/index.html
diff --git a/gems/gitaly/CVE-2020-13353.yml b/gems/gitaly/CVE-2020-13353.yml
new file mode 100644
index 0000000000..55d917f19d
--- /dev/null
+++ b/gems/gitaly/CVE-2020-13353.yml
@@ -0,0 +1,21 @@
+---
+gem: gitaly
+cve: 2020-13353
+ghsa: mmmm-chjf-jmvw
+url: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13353.json
+title: Gitaly Insufficient Session Expiration vulnerability
+date: 2022-05-24
+description: |
+  When importing repos via URL, one time use git credentials were persisted
+  beyond the expected time window in Gitaly 1.79.0 or above. Affected versions are:
+  >=1.79.0, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.
+cvss_v3: 3.2
+unaffected_versions:
+  - "< 1.79.0"
+patched_versions:
+  - "~> 13.3.9"
+  - "~> 13.4.5"
+  - ">= 13.5.2"
+related:
+  url:
+    - https://gitlab.com/gitlab-org/gitaly/-/issues/2882
diff --git a/gems/gitlab-grit/CVE-2013-4489.yml b/gems/gitlab-grit/CVE-2013-4489.yml
index fd951fa8f2..3a0de936ac 100644
--- a/gems/gitlab-grit/CVE-2013-4489.yml
+++ b/gems/gitlab-grit/CVE-2013-4489.yml
@@ -2,12 +2,14 @@
 gem: gitlab-grit
 cve: 2013-4489
 osvdb: 99370
+ghsa: 95xq-v4m2-fq3r
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-4489
 title: GitLab Grit Gem for Ruby contains a flaw
 date: 2013-11-04
-description: GitLab Grit Gem for Ruby contains a flaw in the app/contexts/search_context.rb
+description: |
+  GitLab Grit Gem for Ruby contains a flaw in the app/contexts/search_context.rb
   script. The issue is triggered when input passed via the code search box is not
   properly sanitized, which allows strings to be evaluated by the Bourne shell. This
   may allow a remote attacker to execute arbitrary commands.
 patched_versions:
-- '>= 2.6.1'
+  - ">= 2.6.1"
diff --git a/gems/globalid/CVE-2023-22799.yml b/gems/globalid/CVE-2023-22799.yml
new file mode 100644
index 0000000000..f2ec118c76
--- /dev/null
+++ b/gems/globalid/CVE-2023-22799.yml
@@ -0,0 +1,30 @@
+---
+gem: globalid
+cve: 2023-22799
+ghsa: 23c2-gwp5-pxw9
+url: https://github.com/rails/globalid/releases/tag/v1.0.1
+title: ReDoS based DoS vulnerability in GlobalID
+date: 2023-01-18
+description: |
+  There is a ReDoS based DoS vulnerability in the GlobalID gem. This
+  vulnerability has been assigned the CVE identifier CVE-2023-22799.
+
+  Versions Affected: >= 0.2.1
+  Not affected: < 0.2.1
+  Fixed Versions: 1.0.1
+
+  # Impact
+
+  There is a possible DoS vulnerability in the model name parsing section
+  of the GlobalID gem. Carefully crafted input can cause the regular
+  expression engine to take an unexpected amount of time. All users running
+  an affected release should either upgrade or use one of the workarounds
+  immediately.
+
+  # Workarounds
+
+  There are no feasible workarounds for this issue.
+unaffected_versions:
+  - "< 0.2.1"
+patched_versions:
+  - ">= 1.0.1"
diff --git a/gems/gnms/OSVDB-108594.yml b/gems/gnms/OSVDB-108594.yml
index e53e8f5792..8553c15f8e 100644
--- a/gems/gnms/OSVDB-108594.yml
+++ b/gems/gnms/OSVDB-108594.yml
@@ -1,10 +1,17 @@
 ---
 gem: gnms
 osvdb: 108594
-url: http://osvdb.org/show/osvdb/108594
-title: gnms Gem for Ruby /lib/cmd_parse.rb ip Variable Shell Metacharacter Handling
-  Remote Command Injection
+url: http://www.vapidlabs.com/advisories/gnms-2.1.1.html
+title: gnms Gem for Ruby /lib/cmd_parse.rb ip Variable
+  Shell Metacharacter Handling Remote Command Injection
 date: 2014-06-30
-description: gnms Gem for Ruby contains a flaw in /lib/cmd_parse.rb that is triggered
-  when handling shell metacharacters passed via the 'ip' variable. This may allow
-  a remote attacker to inject arbitrary commands.
+description: |
+  gnms Gem for Ruby contains a flaw in /lib/cmd_parse.rb that is triggered
+  when handling shell metacharacters passed via the 'ip' variable.
+  This may allow a remote attacker to inject arbitrary commands.
+notes: "Never patched"
+related:
+  url:
+    - http://www.vapidlabs.com/advisories/gnms-2.1.1.html
+    - http://www.vapidlabs.com/advisory.php?v=55
+    - http://osvdb.org/show/osvdb/108594
diff --git a/gems/gollum-grit_adapter/CVE-2014-9489.yml b/gems/gollum-grit_adapter/CVE-2014-9489.yml
index cdf51250bf..30d2b70fbc 100644
--- a/gems/gollum-grit_adapter/CVE-2014-9489.yml
+++ b/gems/gollum-grit_adapter/CVE-2014-9489.yml
@@ -2,7 +2,7 @@
 gem: gollum-grit_adapter
 cve: 2014-9489
 url: https://github.com/gollum/gollum/issues/913
-title: |
+title:
   gollum-grit_adapter Search Functionality Allows Arbitrary Command
   Execution
 date: 2014-12-04
@@ -20,4 +20,4 @@ description: |
   whatever is the default branch that gollum uses) in any of the wiki's
   documents for this to succeed.
 patched_versions:
-- '>= 0.1.1'
+  - ">= 0.1.1"
diff --git a/gems/gollum-lib/CVE-2014-9489.yml b/gems/gollum-lib/CVE-2014-9489.yml
new file mode 100644
index 0000000000..bf633958bc
--- /dev/null
+++ b/gems/gollum-lib/CVE-2014-9489.yml
@@ -0,0 +1,25 @@
+---
+gem: gollum-lib
+cve: 2014-9489
+ghsa: q97v-764g-r2rp
+url: https://github.com/gollum/gollum/issues/913
+title: gollum and gollum-lib allow remote authenticated users to execute arbitrary code
+date: 2017-11-16
+description: |
+  The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and
+  the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string `master`
+  is in any of the wiki documents, allows remote authenticated users to execute arbitrary
+  code via the `-O` or `--open-files-in-pager` flags.
+cvss_v2: 6.5
+cvss_v3: 8.8
+patched_versions:
+  - ">= 4.0.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-9489
+    - https://github.com/gollum/gollum/issues/913
+    - https://github.com/gollum/grit_adapter/commit/4520d973c81fecfebbeacd2ef2f1849d763951c7
+    - http://www.openwall.com/lists/oss-security/2015/01/03/19
+    - https://web.archive.org/web/20200229041306/http://www.securityfocus.com/bid/71499
+    - https://github.com/advisories/GHSA-q97v-764g-r2rp
+    - https://github.com/rubysec/ruby-advisory-db/pull/204
diff --git a/gems/gollum/CVE-2014-9489.yml b/gems/gollum/CVE-2014-9489.yml
new file mode 100644
index 0000000000..40ad77c85c
--- /dev/null
+++ b/gems/gollum/CVE-2014-9489.yml
@@ -0,0 +1,24 @@
+---
+gem: gollum
+cve: 2014-9489
+ghsa: q97v-764g-r2rp
+url: https://github.com/gollum/gollum/issues/913
+title: gollum and gollum-lib allow remote authenticated users to execute arbitrary code
+date: 2017-11-16
+description: |
+  The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and
+  the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string `master`
+  is in any of the wiki documents, allows remote authenticated users to execute arbitrary
+  code via the `-O` or `--open-files-in-pager` flags.
+cvss_v2: 6.5
+cvss_v3: 8.8
+patched_versions:
+  - ">= 3.1.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-9489
+    - https://github.com/gollum/gollum/issues/913
+    - https://github.com/gollum/grit_adapter/commit/4520d973c81fecfebbeacd2ef2f1849d763951c7
+    - http://www.openwall.com/lists/oss-security/2015/01/03/19
+    - https://web.archive.org/web/20200229041306/http://www.securityfocus.com/bid/71499
+    - https://github.com/advisories/GHSA-q97v-764g-r2rp
diff --git a/gems/gollum/CVE-2015-7314.yml b/gems/gollum/CVE-2015-7314.yml
index b432f74414..99ef5f9deb 100644
--- a/gems/gollum/CVE-2015-7314.yml
+++ b/gems/gollum/CVE-2015-7314.yml
@@ -11,4 +11,4 @@ description: |
   allow arbitrary file access. This occurs due to a lack of type checking
   when handling temporary files during the upload process.
 patched_versions:
-- '>= 4.0.1'
+  - ">= 4.0.1"
diff --git a/gems/gollum/CVE-2020-35305.yml b/gems/gollum/CVE-2020-35305.yml
new file mode 100644
index 0000000000..85e0c75aa9
--- /dev/null
+++ b/gems/gollum/CVE-2020-35305.yml
@@ -0,0 +1,18 @@
+---
+gem: gollum
+cve: 2020-35305
+ghsa: fj2w-qmjp-3rjm
+url: https://github.com/gollum/gollum/commit/137728cdabc0f60859fcd30404ad2b8fff6ef715
+title: XSS via `filename` parameter to New Page dialog
+date: 2022-07-16
+description: |
+  Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the `filename` parameter
+  to the 'New Page' dialog.
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 5.0"
+patched_versions:
+  - ">= 5.1.2"
+related:
+  url:
+    - https://github.com/gollum/gollum/releases/tag/v5.1.2
diff --git a/gems/gon/CVE-2020-25739.yml b/gems/gon/CVE-2020-25739.yml
index 608cf993ee..097b9ad95f 100644
--- a/gems/gon/CVE-2020-25739.yml
+++ b/gems/gon/CVE-2020-25739.yml
@@ -13,4 +13,4 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 6.1
 patched_versions:
-- '>= 6.4.0'
+  - ">= 6.4.0"
diff --git a/gems/google-protobuf/CVE-2021-22569.yml b/gems/google-protobuf/CVE-2021-22569.yml
index 64d8ce111d..006ed166c5 100644
--- a/gems/google-protobuf/CVE-2021-22569.yml
+++ b/gems/google-protobuf/CVE-2021-22569.yml
@@ -37,8 +37,8 @@ description: |
   - google-protobuf [JRuby gem only] (3.19.2)
 cvss_v3: 7.5
 patched_versions:
-- ">= 3.19.2"
+  - ">= 3.19.2"
 related:
   url:
-  - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39330
-  - https://cloud.google.com/support/bulletins#gcp-2022-001
+    - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39330
+    - https://cloud.google.com/support/bulletins#gcp-2022-001
diff --git a/gems/google-protobuf/CVE-2022-3171.yml b/gems/google-protobuf/CVE-2022-3171.yml
new file mode 100644
index 0000000000..ffe424a098
--- /dev/null
+++ b/gems/google-protobuf/CVE-2022-3171.yml
@@ -0,0 +1,51 @@
+---
+gem: google-protobuf
+platform: jruby
+cve: 2022-3171
+ghsa: h4h5-3hr4-j3g2
+url: https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2
+title: protobuf-java has a potential Denial of Service issue
+date: 2022-10-04
+description: |
+  ## Summary
+  A potential Denial of Service issue in `protobuf-java` core and lite was
+  discovered in the parsing procedure for binary and text format data.
+  Input streams containing multiple instances of non-repeated [embedded
+  messages](http://developers.google.com/protocol-buffers/docs/encoding#embedded)
+  with repeated or unknown fields causes objects to be converted back-n-forth
+  between mutable and immutable forms, resulting in potentially long garbage
+  collection pauses.
+
+  Reporter: [OSS Fuzz](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48771)
+
+  Affected versions: This issue affects both the Java full and lite Protobuf
+  runtimes, as well as Protobuf for Kotlin and JRuby, which themselves use the
+  Java Protobuf runtime.
+
+  ## Severity
+
+  [CVE-2022-3171](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3171)
+  Medium - CVSS Score: 5.7 (NOTE: there may be a delay in publication)
+
+  ## Remediation and Mitigation
+
+  Please update to the latest available versions of the following packages:
+
+  * protobuf-java (3.21.7, 3.20.3, 3.19.6, 3.16.3)
+  * protobuf-javalite (3.21.7, 3.20.3, 3.19.6, 3.16.3)
+  * protobuf-kotlin (3.21.7, 3.20.3, 3.19.6, 3.16.3)
+  * protobuf-kotlin-lite (3.21.7, 3.20.3, 3.19.6, 3.16.3)
+  * google-protobuf [JRuby gem only] (3.21.7, 3.20.3, 3.19.6)
+cvss_v3: 5.7
+patched_versions:
+  - "~> 3.16.3"
+  - "~> 3.19.6"
+  - "~> 3.20.3"
+  - ">= 3.21.7"
+related:
+  url:
+    - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48771
+    - https://github.com/protocolbuffers/protobuf/releases/tag/v21.7
+    - https://github.com/protocolbuffers/protobuf/releases/tag/v3.16.3
+    - https://github.com/protocolbuffers/protobuf/releases/tag/v3.19.6
+    - https://github.com/protocolbuffers/protobuf/releases/tag/v3.20.3
diff --git a/gems/google-protobuf/CVE-2024-7254.yml b/gems/google-protobuf/CVE-2024-7254.yml
new file mode 100644
index 0000000000..ce6a06a19c
--- /dev/null
+++ b/gems/google-protobuf/CVE-2024-7254.yml
@@ -0,0 +1,63 @@
+---
+gem: google-protobuf
+cve: 2024-7254
+ghsa: 735f-pc8j-v9w8
+url: https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-735f-pc8j-v9w8
+title: protobuf-java has potential Denial of Service issue
+date: 2024-09-19
+description: |+
+  ### Summary
+  When parsing unknown fields in the Protobuf Java Lite and Full library,
+  a maliciously crafted message can cause a StackOverflow error and lead
+  to a program crash.
+
+  Reporter: Alexis Challande, Trail of Bits Ecosystem Security
+  Team <ecosystem@trailofbits.com>
+
+  Affected versions: This issue affects all versions of both the Java
+  full and lite Protobuf runtimes, as well as Protobuf for Kotlin and
+  JRuby, which themselves use the Java Protobuf runtime.
+
+  ### Severity
+  [CVE-2024-7254](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7254)
+  **High** CVSS4.0 Score 8.7 (NOTE: there may be a delay in publication)
+
+  This is a potential Denial of Service. Parsing nested groups as unknown
+  fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser,
+  or against Protobuf map fields, creates unbounded recursions that can
+  be abused by an attacker.
+
+  ### Proof of Concept
+  For reproduction details, please refer to the unit tests (Protobuf Java
+  [LiteTest](https://github.com/protocolbuffers/protobuf/blob/a037f28ff81ee45ebe008c64ab632bf5372242ce/java/lite/src/test/java/com/google/protobuf/LiteTest.java)
+  and [CodedInputStreamTest](https://github.com/protocolbuffers/protobuf/blob/a037f28ff81ee45ebe008c64ab632bf5372242ce/java/core/src/test/java/com/google/protobuf/CodedInputStreamTest.java))
+  that identify the specific inputs that exercise this parsing weakness.
+
+  ### Remediation and Mitigation
+  We have been working diligently to address this issue and have released
+  a mitigation that is available now. Please update to the latest
+  available versions of the following packages:
+
+  * protobuf-java (3.25.5, 4.27.5, 4.28.2)
+  * protobuf-javalite (3.25.5, 4.27.5, 4.28.2)
+  * protobuf-kotlin (3.25.5, 4.27.5, 4.28.2)
+  * protobuf-kotlin-lite (3.25.5, 4.27.5, 4.28.2)
+  * com-protobuf [JRuby gem only] (3.25.5, 4.27.5, 4.28.2)
+
+cvss_v3: 7.5
+cvss_v4: 8.7
+patched_versions:
+  - "~> 3.25.5"
+  - "~> 4.27.5"
+  - ">= 4.28.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-7254
+    - https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-735f-pc8j-v9w8
+    - https://github.com/protocolbuffers/protobuf/commit/4728531c162f2f9e8c2ca1add713cfee2db6be3b
+    - https://github.com/protocolbuffers/protobuf/commit/850fcce9176e2c9070614dab53537760498c926b
+    - https://github.com/protocolbuffers/protobuf/commit/9a5f5fe752a20cbac2e722b06949ac985abdd534
+    - https://github.com/protocolbuffers/protobuf/commit/ac9fb5b4c71b0dd80985b27684e265d1f03abf46
+    - https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa
+    - https://github.com/protocolbuffers/protobuf/commit/d6c82fc55a76481c676f541a255571e8950bb8c3
+    - https://github.com/advisories/GHSA-735f-pc8j-v9w8
diff --git a/gems/govuk_tech_docs/CVE-2024-22048.yml b/gems/govuk_tech_docs/CVE-2024-22048.yml
new file mode 100644
index 0000000000..fa1133c06b
--- /dev/null
+++ b/gems/govuk_tech_docs/CVE-2024-22048.yml
@@ -0,0 +1,39 @@
+---
+gem: govuk_tech_docs
+cve: 2024-22048
+ghsa: x2xw-hw8g-6773
+url: https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773
+title: govuk_tech_docs vulnerable to unescaped HTML on search results page
+date: 2023-04-11
+description: |
+
+  ### Impact
+
+  Pages that are indexed in search results have their entire contents
+  indexed, including any HTML code snippets. These HTML snippets would
+  appear in the search results unsanitised, so it was possible to
+  render arbitrary HTML or run arbitrary scripts.
+
+  This is a low risk security issue; to exploit it, an attacker would
+  need to find a way of committing malicious code to a page indexed
+  by a site that uses tech-docs-gem (which are typically not editable
+  by untrusted users). Their code would also be limited by the relatively
+  short length that's rendered in the corresponding search result.
+  Nevertheless, the XSS would then be triggerable by visiting a
+  pre-constructed URL (/search/index.html?q=some+search+term), which
+  users could be tricked into clicking on through social engineering.
+
+  ### Patches
+
+  This has been fixed in v3.3.1. HTML is now sanitised in search results.
+unaffected_versions:
+  - "< 2.0.2"
+patched_versions:
+  - ">= 3.3.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-22048
+    - https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773
+    - https://github.com/alphagov/tech-docs-gem/releases/tag/v3.3.1
+    - https://github.com/alphagov/tech-docs-gem/pull/323
+    - https://github.com/advisories/GHSA-x2xw-hw8g-6773
diff --git a/gems/govuk_tech_docs/GHSA-x2xw-hw8g-6773.yml b/gems/govuk_tech_docs/GHSA-x2xw-hw8g-6773.yml
new file mode 100644
index 0000000000..73d6782087
--- /dev/null
+++ b/gems/govuk_tech_docs/GHSA-x2xw-hw8g-6773.yml
@@ -0,0 +1,34 @@
+---
+gem: govuk_tech_docs
+ghsa: x2xw-hw8g-6773
+url: https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773
+title: govuk_tech_docs vulnerable to unescaped HTML on search results page
+date: 2023-04-11
+description: |
+  Impact
+    Pages that are indexed in search results have their entire contents
+    indexed, including any HTML code snippets. These HTML snippets would
+    appear in the search results unsanitised, so it was possible to render
+    arbitrary HTML or run arbitrary scripts.
+
+    This is a low risk security issue; to exploit it, an attacker would
+    need to find a way of committing malicious code to a page indexed by
+    a site that uses tech-docs-gem (which are typically not editable by
+    untrusted users). Their code would also be limited by the relatively
+    short length that's rendered in the corresponding search result.
+    Nevertheless, the XSS would then be triggerable by visiting a
+    pre-constructed URL (/search/index.html?q=some+search+term), which
+    users could be tricked into clicking on through social engineering.
+
+  Patches
+    This has been fixed in v3.3.1. HTML is now sanitised in search results.
+unaffected_versions:
+  - "< 2.0.2"
+patched_versions:
+  - ">= 3.3.1"
+related:
+  url:
+    - https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773
+    - https://github.com/alphagov/tech-docs-gem/pull/323
+    - https://github.com/alphagov/tech-docs-gem/releases/tag/v3.3.1
+    - https://github.com/advisories/GHSA-x2xw-hw8g-6773
diff --git a/gems/grape/CVE-2018-3769.yml b/gems/grape/CVE-2018-3769.yml
index 980a102bef..cab1797f7b 100644
--- a/gems/grape/CVE-2018-3769.yml
+++ b/gems/grape/CVE-2018-3769.yml
@@ -12,9 +12,10 @@ description: |
 
   Example:
   http://example.com/api/endpoint?format=%3Cscript%3Ealert(document.cookie)%3C/script%3E
+cvss_v3: 6.1
 patched_versions:
-- '>= 1.1.0'
+  - ">= 1.1.0"
 related:
   url:
-  - https://github.com/ruby-grape/grape/pull/1763
-  - https://github.com/ruby-grape/grape/commit/6876b71efc7b03f7ce1be3f075eaa4e7e6de19af
+    - https://github.com/ruby-grape/grape/pull/1763
+    - https://github.com/ruby-grape/grape/commit/6876b71efc7b03f7ce1be3f075eaa4e7e6de19af
diff --git a/gems/graphql/CVE-2025-27407.yml b/gems/graphql/CVE-2025-27407.yml
new file mode 100644
index 0000000000..4cfafa17b6
--- /dev/null
+++ b/gems/graphql/CVE-2025-27407.yml
@@ -0,0 +1,41 @@
+---
+gem: graphql
+cve: 2025-27407
+ghsa: q92j-grw3-h492
+url: https://github.com/rmosolgo/graphql-ruby/security/advisories/GHSA-q92j-grw3-h492
+title: graphql allows remote code execution when loading a crafted GraphQL schema
+date: 2025-03-12
+description: |
+  Loading a malicious schema definition in
+  `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`)
+  can result in remote code execution. Any system which loads a schema
+  by JSON from an untrusted source is vulnerable, including those that
+  use [GraphQL::Client](https://github.com/github-community-projects/graphql-client)
+  to load external schemas via GraphQL introspection.
+cvss_v3: 9.1
+unaffected_versions:
+  - "< 1.11.5"
+patched_versions:
+  - "~> 1.11.11"
+  - "~> 1.12.25"
+  - "~> 1.13.24"
+  - "~> 2.0.32"
+  - "~> 2.1.15"
+  - "~> 2.2.17"
+  - "~> 2.3.21"
+  - ">= 2.4.13"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-27407
+    - https://github.com/github-community-projects/graphql-client
+    - https://github.com/rmosolgo/graphql-ruby/security/advisories/GHSA-q92j-grw3-h492
+    - https://github.com/rmosolgo/graphql-ruby/commit/e58676c70aa695e3052ba1fbc787efee4ba7d67e
+    - https://github.com/rmosolgo/graphql-ruby/commit/28233b16c0eb9d0fb7808f4980e061dc7507c4cd
+    - https://github.com/rmosolgo/graphql-ruby/commit/2d2f4ed1f79472f8eed29c864b039649e1de238f
+    - https://github.com/rmosolgo/graphql-ruby/commit/5c5a7b9a9bdce143be048074aea50edb7bb747be
+    - https://github.com/rmosolgo/graphql-ruby/commit/6eca16b9fa553aa957099a30dbde64ddcdac52ca
+    - https://github.com/rmosolgo/graphql-ruby/commit/d0963289e0dab4ea893bbecf12bb7d89294957bb
+    - https://github.com/rmosolgo/graphql-ruby/commit/d1117ae0361d9ed67e0795b07f5c3e98e62f3c7c
+    - https://github.com/rmosolgo/graphql-ruby/commit/e3b33ace05391da2871c75ab4d3b66e29133b367
+    - https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released
+    - https://github.com/advisories/GHSA-q92j-grw3-h492
diff --git a/gems/grpc/CVE-2023-1428.yml b/gems/grpc/CVE-2023-1428.yml
new file mode 100644
index 0000000000..955aa4cf7b
--- /dev/null
+++ b/gems/grpc/CVE-2023-1428.yml
@@ -0,0 +1,32 @@
+---
+gem: grpc
+cve: 2023-1428
+ghsa: 6628-q6j9-w8vg
+url: https://github.com/grpc/grpc/issues/33463
+title: gRPC Reachable Assertion issue
+date: 2023-07-06
+description: |
+  There exists an vulnerability causing an abort() to be called in gRPC.
+  The following headers cause gRPC's C++ implementation to abort()
+  when called via http2:
+
+  te: x (x != trailers)
+
+  :scheme: x (x != http, https)
+
+  grpclb_client_stats: x (x == anything)
+
+  On top of sending one of those headers, a later header must be sent
+  that gets the total header size past 8KB. We recommend upgrading
+  past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53
+  and above.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 1.53.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-1428
+    - https://github.com/grpc/grpc/issues/33463
+    - https://github.com/grpc/grpc/pull/32507
+    - https://github.com/grpc/grpc/commit/2485fa94bd8a723e5c977d55a3ce10b301b437f8
+    - https://github.com/advisories/GHSA-6628-q6j9-w8vg
diff --git a/gems/grpc/CVE-2023-32731.yml b/gems/grpc/CVE-2023-32731.yml
new file mode 100644
index 0000000000..6ff70e27af
--- /dev/null
+++ b/gems/grpc/CVE-2023-32731.yml
@@ -0,0 +1,29 @@
+---
+gem: grpc
+cve: 2023-32731
+ghsa: cfgp-2977-2fmm
+url: https://github.com/grpc/grpc/issues/33463
+title: Connection confusion in gRPC
+date: 2023-07-05
+description: |
+  When gRPC HTTP2 stack raised a header size exceeded error, it
+  skipped parsing the rest of the HPACK frame. This caused any HPACK
+  table mutations to also be skipped, resulting in a desynchronization
+  of HPACK tables between sender and receiver. If leveraged, say,
+  between a proxy and a backend, this could lead to requests from the
+  proxy being interpreted as containing headers from different
+  proxy clients
+  - leading to an information leak that can be used for privilege
+    escalation or data exfiltration. We recommend upgrading beyond
+    the commit contained in  https://github.com/grpc/grpc/pull/32309
+cvss_v3: 7.5
+patched_versions:
+  - ">= 1.53.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-32731
+    - https://github.com/grpc/grpc/releases/tag/v1.53.1
+    - https://github.com/grpc/grpc/issues/33463
+    - https://github.com/grpc/grpc/pull/33005
+    - https://github.com/grpc/grpc/pull/32309
+    - https://github.com/advisories/GHSA-cfgp-2977-2fmm
diff --git a/gems/grpc/CVE-2023-32732.yml b/gems/grpc/CVE-2023-32732.yml
new file mode 100644
index 0000000000..81c1ac76e7
--- /dev/null
+++ b/gems/grpc/CVE-2023-32732.yml
@@ -0,0 +1,22 @@
+---
+gem: grpc
+cve: 2023-32732
+ghsa: 9hxf-ppjv-w6rq
+url: https://github.com/grpc/grpc/releases/tag/v1.53.1
+title: gRPC connection termination issue
+date: 2023-07-06
+description: |
+  gRPC contains a vulnerability whereby a client can cause a
+  termination of connection between a HTTP2 proxy and a gRPC server:
+  a base64 encoding error for `-bin` suffixed headers will result in
+  a disconnection by the gRPC server, but is typically allowed by
+  HTTP2 proxies. We recommend upgrading beyond the commit in
+  https://github.com/grpc/grpc/pull/32309.
+cvss_v3: 5.3
+patched_versions:
+  - ">= 1.53.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-32732
+    - https://github.com/grpc/grpc/pull/32309
+    - https://github.com/advisories/GHSA-9hxf-ppjv-w6rq
diff --git a/gems/grpc/CVE-2023-33953.yml b/gems/grpc/CVE-2023-33953.yml
new file mode 100644
index 0000000000..6387eb6ef9
--- /dev/null
+++ b/gems/grpc/CVE-2023-33953.yml
@@ -0,0 +1,47 @@
+---
+gem: grpc
+cve: 2023-33953
+ghsa: 496j-2rq6-j6cc
+url: https://github.com/advisories/GHSA-496j-2rq6-j6cc
+title: Excessive Iteration in gRPC
+date: 2023-08-09
+description: |
+  gRPC contains a vulnerability that allows hpack table accounting
+  errors could lead to unwanted disconnects between clients and
+  servers in exceptional cases/ Three vectors were found that allow
+  the following DOS attacks:
+
+  - Unbounded memory buffering in the HPACK parser
+  - Unbounded CPU consumption in the HPACK parser
+
+  The unbounded CPU consumption is down to a copy that occurred
+  per-input-block in the parser, and because that could be unbounded
+  due to the memory copy bug we end up with an O(n^2) parsing loop,
+  with n selected by the client.
+
+  The unbounded memory buffering bugs:
+
+  - The header size limit check was behind the string reading code,
+    so we needed to first buffer up to a 4 gigabyte string before
+    rejecting it as longer than 8 or 16kb.
+
+  - HPACK varints have an encoding quirk whereby an infinite number
+    of 0’s can be added at the start of an integer. gRPC’s hpack
+    parser needed to read all of them before concluding a parse.
+
+  - gRPC’s metadata overflow check was performed per frame, so that
+    the following sequence of frames could cause infinite buffering:
+    HEADERS: containing a: 1 CONTINUATION: containing a: 2 CONTINUATION:
+    containing a: 3 etc…
+cvss_v3: 7.5
+patched_versions:
+  - "~> 1.53.2"
+  - "~> 1.54.3"
+  - "~> 1.55.2"
+  - ">= 1.56.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-33953
+    - https://cloud.google.com/support/bulletins#gcp-2023-022
+    - https://security.snyk.io/vuln/SNYK-RUBY-GRPC-5834442
+    - https://github.com/advisories/GHSA-496j-2rq6-j6cc
diff --git a/gems/grpc/CVE-2023-4785.yml b/gems/grpc/CVE-2023-4785.yml
new file mode 100644
index 0000000000..30cedf49f8
--- /dev/null
+++ b/gems/grpc/CVE-2023-4785.yml
@@ -0,0 +1,38 @@
+---
+gem: grpc
+cve: 2023-4785
+ghsa: p25m-jpj4-qcrr
+url: https://groups.google.com/g/grpc-io/c/LlLkB1CeE4U
+title: Denial of Service Vulnerability in gRPC TCP Server
+  (Posix-compatible platforms)
+date: 2023-09-13
+description: |
+  Lack of error handling in the TCP server in Google's gRPC starting
+  version 1.23 on posix-compatible platforms (ex. Linux) allows an
+  attacker to cause a denial of service by initiating a significant
+  number of connections with the server.
+
+  Note that gRPC C++ Python, and Ruby are affected, but
+  gRPC Java and Go are NOT affected. 
+cvss_v3: 7.5
+unaffected_versions:
+  - "< 1.53.0"
+patched_versions:
+  - "~> 1.53.2"
+  - "~> 1.54.3"
+  - "~> 1.55.3"
+  - ">= 1.56.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-4785
+    - https://groups.google.com/g/grpc-io/c/LlLkB1CeE4U
+    - https://rubygems.org/gems/grpc/versions/1.53.2
+    - https://rubygems.org/gems/grpc/versions/1.54.3
+    - https://rubygems.org/gems/grpc/versions/1.55.3
+    - https://rubygems.org/gems/grpc/versions/1.56.2
+    - https://github.com/grpc/grpc/pull/33656
+    - https://github.com/grpc/grpc/pull/33667
+    - https://github.com/grpc/grpc/pull/33669
+    - https://github.com/grpc/grpc/pull/33670
+    - https://github.com/grpc/grpc/pull/33672
+    - https://github.com/advisories/GHSA-p25m-jpj4-qcrr
diff --git a/gems/gtk2/CVE-2007-6183.yml b/gems/gtk2/CVE-2007-6183.yml
index fa995efc84..3d08f7e940 100644
--- a/gems/gtk2/CVE-2007-6183.yml
+++ b/gems/gtk2/CVE-2007-6183.yml
@@ -2,13 +2,15 @@
 gem: gtk2
 cve: 2007-6183
 osvdb: 40774
+ghsa: xgj6-pgrm-x4r2
 url: https://nvd.nist.gov/vuln/detail/CVE-2007-6183
-title: 'CVE-2007-6183 ruby-gnome2: format string vulnerability'
+title: "CVE-2007-6183 ruby-gnome2: format string vulnerability"
 date: 2007-11-27
-description: Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c
+description: |
+  Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c
   in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows
   context-dependent attackers to execute arbitrary code via format string specifiers
   in the message parameter.
 cvss_v2: 6.8
 patched_versions:
-- '> 0.16.0'
+  - "> 0.16.0"
diff --git a/gems/gyazo/CVE-2014-4994.yml b/gems/gyazo/CVE-2014-4994.yml
index 3d477fd500..979a37fee4 100644
--- a/gems/gyazo/CVE-2014-4994.yml
+++ b/gems/gyazo/CVE-2014-4994.yml
@@ -2,10 +2,13 @@
 gem: gyazo
 cve: 2014-4994
 osvdb: 108563
+ghsa: 6x45-86q6-rcmr
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-4994
 title: gyazo Gem for Ruby client.rb Metacharacter Handling Remote Command Execution
 date: 2014-06-30
-description: gyazo Gem for Ruby contains a flaw in client.rb that is triggered when
+description: |
+  gyazo Gem for Ruby contains a flaw in client.rb that is triggered when
   handling metacharacters. This may allow a remote attacker to execute arbitrary commands.
+cvss_v3: 5.5
 patched_versions:
-- '>= 2.0.0'
+  - ">= 2.0.0"
diff --git a/gems/haml/CVE-2017-1002201.yml b/gems/haml/CVE-2017-1002201.yml
index 6abbe54c08..d77589bfa2 100644
--- a/gems/haml/CVE-2017-1002201.yml
+++ b/gems/haml/CVE-2017-1002201.yml
@@ -13,7 +13,7 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 6.1
 patched_versions:
-- '>= 5.0.0.beta.2'
+  - ">= 5.0.0.beta.2"
 related:
   url:
-  - https://snyk.io/vuln/SNYK-RUBY-HAML-20362
+    - https://snyk.io/vuln/SNYK-RUBY-HAML-20362
diff --git a/gems/hammer_cli_foreman/CVE-2017-2667.yml b/gems/hammer_cli_foreman/CVE-2017-2667.yml
new file mode 100644
index 0000000000..a2c134ecc5
--- /dev/null
+++ b/gems/hammer_cli_foreman/CVE-2017-2667.yml
@@ -0,0 +1,20 @@
+---
+gem: hammer_cli_foreman
+cve: 2017-2667
+ghsa: 77h8-xr85-3x5q
+url: https://access.redhat.com/errata/RHSA-2018:0336
+title: hammer_cli_foreman Improper Certificate Validation vulnerability
+date: 2022-05-13
+description: |
+  Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not
+  explicitly set the verify_ssl flag for apipie-bindings that disable it by default.
+  As a result the server certificates are not checked and connections are prone to
+  man-in-the-middle attacks.
+cvss_v3: 8.1
+patched_versions:
+  - ">= 0.10.0"
+related:
+  url:
+    - https://bugzilla.redhat.com/show_bug.cgi?id=1436262
+    - http://projects.theforeman.org/issues/19033
+    - http://www.securityfocus.com/bid/97153
diff --git a/gems/handlebars-source/CVE-2021-23369.yml b/gems/handlebars-source/CVE-2021-23369.yml
new file mode 100644
index 0000000000..52916a9752
--- /dev/null
+++ b/gems/handlebars-source/CVE-2021-23369.yml
@@ -0,0 +1,15 @@
+---
+gem: handlebars-source
+cve: 2021-23369
+ghsa: f2jv-r9rf-7988
+url: https://github.com/advisories/GHSA-f2jv-r9rf-7988
+title: Remote code execution in handlebars when compiling templates
+date: 2021-04-12
+description: |
+  The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when
+  selecting certain compiling options to compile templates coming from an untrusted source.
+  This vulnerability has been assigned the CVE identifier CVE-2021-23369.
+
+cvss_v3: 9.8
+patched_versions:
+  - ">= 4.7.7"
diff --git a/gems/handlebars-source/CVE-2021-23383.yml b/gems/handlebars-source/CVE-2021-23383.yml
new file mode 100644
index 0000000000..c7eae89c2d
--- /dev/null
+++ b/gems/handlebars-source/CVE-2021-23383.yml
@@ -0,0 +1,15 @@
+---
+gem: handlebars-source
+cve: 2021-23383
+ghsa: 765h-qjxv-5f44
+url: https://github.com/advisories/GHSA-765h-qjxv-5f44
+title: Prototype Pollution in handlebars
+date: 2021-05-04
+description: |
+  The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when
+  selecting certain compiling options to compile templates coming from an untrusted source.
+  This vulnerability has been assigned the CVE identifier CVE-2021-23383.
+
+cvss_v3: 9.8
+patched_versions:
+  - ">= 4.7.7"
diff --git a/gems/handlebars-source/OSVDB-131671.yml b/gems/handlebars-source/OSVDB-131671.yml
index 356a097e6f..50be54377b 100644
--- a/gems/handlebars-source/OSVDB-131671.yml
+++ b/gems/handlebars-source/OSVDB-131671.yml
@@ -1,17 +1,26 @@
 ---
 gem: handlebars-source
 osvdb: 131671
-url: https://blog.srcclr.com/handlebars_vulnerability_research_findings/
+url: https://security.snyk.io/vuln/SNYK-RUBY-HANDLEBARSSOURCE-20238
 title: handlebars.js - quoteless attributes in templates can lead to XSS
 date: 2015-08-24
 description: |
-  The upstream 'handlebars' node.js module was found to not properly escape
-  equals (=) signs, leading to possible content injection via attributes
-  in templates.
+  The upstream 'handlebars' node.js module was found to not properly
+  escape equals (=) signs, leading to possible content injection
+  via attributes in templates.
 
   Example:
   * Template: <a href={{foo}}/>
   * Input: { 'foo' : 'test.com onload=alert(1)'}
   * Rendered result: <a href=test.com onload=alert(1)/>
 patched_versions:
-- '>= 4.0.0'
+  - ">= 4.0.0"
+related:
+  ghsa:
+    - 9prh-257w-9277
+  url:
+    - https://github.com/handlebars-lang/handlebars.js
+    - https://github.com/handlebars-lang/handlebars.js/compare/v3.0.8...v4.0.0
+    - https://security.snyk.io/vuln/SNYK-RUBY-HANDLEBARSSOURCE-20238
+    - https://github.com/rubysec/bundler-audit/issues/185
+    - https://www.veracode.com/blog/research/handlebarsjs-vulnerability-impact-study
diff --git a/gems/hiera/CVE-2014-3248.yml b/gems/hiera/CVE-2014-3248.yml
new file mode 100644
index 0000000000..7e70632236
--- /dev/null
+++ b/gems/hiera/CVE-2014-3248.yml
@@ -0,0 +1,27 @@
+---
+gem: hiera
+cve: 2014-3248
+ghsa: 92v7-pq4h-58j5
+url: https://github.com/advisories/GHSA-92v7-pq4h-58j5
+title: Moderate severity vulnerability that affects facter, hiera, mcollective-client, and puppet
+date: 2017-10-24
+description: |
+  Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7,
+  Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera
+  before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier,
+  allows local users to gain privileges via a Trojan horse file in the current working
+  directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2)
+  Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so;
+  or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so
+  in puppet/confine.
+patched_versions:
+  - ">= 1.3.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-3248
+    - https://github.com/advisories/GHSA-92v7-pq4h-58j5
+    - http://puppetlabs.com/security/cve/cve-2014-3248
+    - http://rowediness.com/2014/06/13/cve-2014-3248-a-little-problem-with-puppet/
+    - http://secunia.com/advisories/59197
+    - http://secunia.com/advisories/59200
+    - http://www.securityfocus.com/bid/68035
diff --git a/gems/http/CVE-2015-1828.yml b/gems/http/CVE-2015-1828.yml
index 901d1eb543..be2395d3e4 100644
--- a/gems/http/CVE-2015-1828.yml
+++ b/gems/http/CVE-2015-1828.yml
@@ -12,5 +12,5 @@ description: |
 cvss_v2: 5.0
 cvss_v3: 5.9
 patched_versions:
-- ">= 0.7.3"
-- "~> 0.6.4"
+  - ">= 0.7.3"
+  - "~> 0.6.4"
diff --git a/gems/httparty/CVE-2013-1801.yml b/gems/httparty/CVE-2013-1801.yml
index f5c2ece001..40fa43137e 100644
--- a/gems/httparty/CVE-2013-1801.yml
+++ b/gems/httparty/CVE-2013-1801.yml
@@ -2,6 +2,7 @@
 gem: httparty
 cve: 2013-1801
 osvdb: 90741
+ghsa: mgx3-27hr-mfgp
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1801
 title: httparty Gem for Ruby Type Casting Parameter Parsing Remote Code Execution
 date: 2013-01-14
@@ -11,4 +12,4 @@ description: |
   context-dependent attacker to potentially execute arbitrary code.
 cvss_v2: 7.5
 patched_versions:
-- '>= 0.10.0'
+  - ">= 0.10.0"
diff --git a/gems/httparty/CVE-2024-22049.yml b/gems/httparty/CVE-2024-22049.yml
new file mode 100644
index 0000000000..26ff21678a
--- /dev/null
+++ b/gems/httparty/CVE-2024-22049.yml
@@ -0,0 +1,28 @@
+---
+gem: httparty
+cve: 2024-22049
+ghsa: 5pq7-52mg-hr42
+url: https://github.com/jnunemaker/httparty/security/advisories/GHSA-5pq7-52mg-hr42
+title: httparty has multipart/form-data request tampering vulnerability
+date: 2023-01-03
+description: |
+  HTTP multipart/form-data request tampering vulnerability in httparty < 0.20.0,
+  due to lack of proper escaping of double quotes within the filename attribute
+  of the Content-Disposition header. If the Content-Disposition header is set to
+  "form-data" and contains the "filename" attribute, and the "filename"
+  attribute contains a double quote followed by additional attributes, then
+  those attributes will be parsed as Content-Disposition attributes and will
+  override the Content-Disposition header's previous attributes.
+
+      Content-Disposition: form-data; name="avatar"; filename="overwrite_name_field_and_extension.sh"; name="foo"; dummy=".txt"
+
+cvss_v3: 6.5
+patched_versions:
+  - ">= 0.21.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-22049
+    - https://github.com/jnunemaker/httparty/security/advisories/GHSA-5pq7-52mg-hr42
+    - https://github.com/jnunemaker/httparty/commit/cdb45a678c43e44570b4e73f84b1abeb5ec22b8e
+    - https://github.com/jnunemaker/httparty/blob/4416141d37fd71bdba4f37589ec265f55aa446ce/lib/httparty/request/body.rb#L43
+    - https://github.com/advisories/GHSA-5pq7-52mg-hr42
diff --git a/gems/httparty/GHSA-5pq7-52mg-hr42.yml b/gems/httparty/GHSA-5pq7-52mg-hr42.yml
new file mode 100644
index 0000000000..9f1f3f5adb
--- /dev/null
+++ b/gems/httparty/GHSA-5pq7-52mg-hr42.yml
@@ -0,0 +1,29 @@
+---
+gem: httparty
+ghsa: 5pq7-52mg-hr42
+url: https://github.com/jnunemaker/httparty/security/advisories/GHSA-5pq7-52mg-hr42
+title: httparty has multipart/form-data request tampering vulnerability
+date: 2023-01-03
+description: |
+  "multipart/form-data request tampering vulnerability"
+  caused by Content-Disposition "filename" lack of escaping in httparty.
+
+  `httparty/lib/httparty/request` > `body.rb` > `def generate_multipart`
+
+  https://github.com/jnunemaker/httparty/blob/4416141d37fd71bdba4f37589ec265f55aa446ce/lib/httparty/request/body.rb#L43
+
+  By exploiting this problem, the following attacks are possible
+
+  * An attack that rewrites the \"name\" field according to the crafted file
+  name, impersonating (overwriting) another field.
+  * Attacks that rewrite the filename extension at the time multipart/form-data
+  is generated by tampering with the filename.
+cvss_v3: 6.5
+patched_versions:
+  - ">= 0.21.0"
+related:
+  url:
+    - https://github.com/jnunemaker/httparty/security/advisories/GHSA-5pq7-52mg-hr42
+    - https://github.com/jnunemaker/httparty/commit/cdb45a678c43e44570b4e73f84b1abeb5ec22b8e
+    - https://github.com/jnunemaker/httparty/blob/4416141d37fd71bdba4f37589ec265f55aa446ce/lib/httparty/request/body.rb#L43
+    - https://bugzilla.mozilla.org/show_bug.cgi?id=1556711
diff --git a/gems/hub/CVE-2014-0177.yml b/gems/hub/CVE-2014-0177.yml
new file mode 100644
index 0000000000..a29fc2ed18
--- /dev/null
+++ b/gems/hub/CVE-2014-0177.yml
@@ -0,0 +1,22 @@
+---
+gem: hub
+cve: 2014-0177
+ghsa: x5m6-jh4r-34mv
+url: https://github.com/mislav/hub/releases/tag/v1.12.1
+title: Hub Package Arbitrary File Overwrite
+date: 2022-02-15
+description: |
+  The am function in lib/hub/commands.rb in hub before 1.12.1 allows
+  local users to overwrite arbitrary files via a symlink attack
+  on a temporary patch file.
+cvss_v2: 3.6
+cvss_v3: 4.4
+patched_versions:
+  - ">= 1.12.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-0177
+    - https://github.com/mislav/hub/releases/tag/v1.12.1
+    - https://www.suse.com/zh-cn/security/cve/CVE-2014-0177.html
+    - https://github.com/github/hub/commit/016ec99d25b1cb83cb4367e541177aa431beb600
+    - https://github.com/advisories/GHSA-x5m6-jh4r-34mv
diff --git a/gems/i18n/OSVDB-100528.yml b/gems/i18n/CVE-2013-4492.yml
similarity index 86%
rename from gems/i18n/OSVDB-100528.yml
rename to gems/i18n/CVE-2013-4492.yml
index c3f8a0c8fb..b95a04eac9 100644
--- a/gems/i18n/OSVDB-100528.yml
+++ b/gems/i18n/CVE-2013-4492.yml
@@ -2,6 +2,7 @@
 gem: i18n
 cve: 2013-4492
 osvdb: 100528
+ghsa: r5hc-9xx5-97rw
 url: https://groups.google.com/forum/#!topic/ruby-security-ann/pLrh6DUw998
 title: i18n missing translation error message XSS
 date: 2013-12-03
@@ -10,5 +11,5 @@ description: |
   to escape the keys.
 cvss_v2: 4.3
 patched_versions:
-- ~> 0.5.1
-- '>= 0.6.6'
+  - "~> 0.5.1"
+  - ">= 0.6.6"
diff --git a/gems/i18n/CVE-2014-10077.yml b/gems/i18n/CVE-2014-10077.yml
index b73885ba0b..c866bef26e 100644
--- a/gems/i18n/CVE-2014-10077.yml
+++ b/gems/i18n/CVE-2014-10077.yml
@@ -1,6 +1,7 @@
 ---
 gem: i18n
 cve: 2014-10077
+ghsa: 34hf-g744-jw64
 url: https://github.com/svenfuchs/i18n/pull/289
 title: i18n Gem for Ruby lib/i18n/core_ext/hash.rb Hash#slice() Function Hash Handling
   DoS
@@ -10,9 +11,9 @@ description: |
   lib/i18n/core_ext/hash.rb that is triggered when calling a hash when
   :some_key is in keep_keys but not in the hash. This may allow an attacker
   to cause the program to crash.
+cvss_v3: 7.5
 patched_versions:
-- '>= 0.8.0'
-
+  - ">= 0.8.0"
 related:
   osvdb:
-  - 121500
+    - 121500
diff --git a/gems/image_processing/CVE-2022-24720.yml b/gems/image_processing/CVE-2022-24720.yml
new file mode 100644
index 0000000000..eefb80064b
--- /dev/null
+++ b/gems/image_processing/CVE-2022-24720.yml
@@ -0,0 +1,40 @@
+---
+gem: image_processing
+cve: 2022-24720
+ghsa: cxf7-qrc5-9446
+url: https://github.com/janko/image_processing/security/advisories/GHSA-cxf7-qrc5-9446
+title: Remote shell execution vulnerability when applying commands from user input
+date: 2022-03-01
+description: |
+  ### Impact
+
+  When using the `#apply` method from image_processing to apply a series of operations that are coming from unsanitized user input, this allows the attacker to execute shell commands:
+
+  ```rb
+  ImageProcessing::Vips.apply({ system: "echo EXECUTED" })
+  #>> EXECUTED
+  ```
+
+  This method is called internally by Active Storage variants, so Active Storage is vulnerable as well.
+
+  ### Patches
+
+  The vulnerability has been fixed in version 1.12.2 of image_processing.
+
+  ### Workarounds
+
+  If you're processing based on user input, it's highly recommended that you always sanitize the user input, by allowing only a constrained set of operations. For example:
+
+  ```rb
+  operations = params[:operations]
+    .map { |operation| [operation[:name], *operation[:value]] }
+    .select { |name, *| name.to_s.include? %w[resize_to_limit strip ...] } # sanitization
+
+  ImageProcessing::Vips.apply(operations)
+  ```
+cvss_v3: 9.8
+patched_versions:
+  - ">= 1.12.2"
+related:
+  url:
+    - https://github.com/janko/image_processing/commit/038e4574e8f4f4b636a62394e09983c71980dada
diff --git a/gems/inline_svg/CVE-2020-36644.yml b/gems/inline_svg/CVE-2020-36644.yml
new file mode 100644
index 0000000000..069c185da4
--- /dev/null
+++ b/gems/inline_svg/CVE-2020-36644.yml
@@ -0,0 +1,24 @@
+---
+gem: inline_svg
+cve: 2020-36644
+ghsa: p33q-4h4m-j994
+url: https://github.com/jamesmartin/inline_svg/pull/117
+title: Inline SVG vulnerable to Cross-site Scripting
+date: 2023-01-07
+description: |
+  A vulnerability has been found in jamesmartin Inline SVG up to 1.7.1
+  and classified as problematic. Affected by this vulnerability is an unknown functionality
+  of the file `lib/inline_svg/action_view/helpers.rb` of the component `URL Parameter
+  Handler`. The manipulation of the argument filename leads to cross site scripting.
+  The attack can be launched remotely. Upgrading to version 1.7.2 is able to address
+  this issue. The name of the patch is f5363b351508486021f99e083c92068cf2943621. It
+  is recommended to upgrade the affected component. The identifier VDB-217597 was
+  assigned to this vulnerability.
+cvss_v3: 6.1
+patched_versions:
+  - ">= 1.7.2"
+related:
+  url:
+    - https://github.com/jamesmartin/inline_svg/commit/f5363b351508486021f99e083c92068cf2943621
+    - https://github.com/jamesmartin/inline_svg/releases/tag/v1.7.2
+    - https://vuldb.com/?id.217597
diff --git a/gems/iodine/CVE-2024-22050.yml b/gems/iodine/CVE-2024-22050.yml
new file mode 100644
index 0000000000..827113cb9c
--- /dev/null
+++ b/gems/iodine/CVE-2024-22050.yml
@@ -0,0 +1,45 @@
+---
+gem: iodine
+cve: 2024-22050
+ghsa: 85rf-xh54-whp3
+url: https://github.com/boazsegev/iodine/security/advisories/GHSA-85rf-xh54-whp3
+title: Malicious URL drafting attack against iodines static file server may allow
+  path traversal
+date: 2019-10-07
+description: |
+
+  ### Impact
+
+  A path traversal vulnerability was detected in iodine's static
+  file service. This vulnerability effects any application running
+  iodine's static file server on an effected iodine version.
+
+  Malicious URL drafting may cause the static file server to attempt
+  a response containing data from files that shouldn't be normally
+  accessible from the public folder.
+
+  ### Patches
+
+  The vulnerability was patched in version 0.7.34. Please upgrade
+  to the latest version.
+
+  ### Workarounds
+
+  A possible workaround would be to disable the static file service
+  and it's `X-Sendfile` support, sending static files using nginx
+  or a source code solution (sending the data dynamically).
+
+  However, it would be better to upgrade iodine to the latest
+  version, as it also contains non-security related fixes.
+
+  ### For more information
+  If you have any questions or comments about this advisory:
+  * Email [Boaz Segev](https://github.com/boazsegev)
+patched_versions:
+  - ">= 0.7.34"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-22050
+    - https://github.com/boazsegev/iodine/security/advisories/GHSA-85rf-xh54-whp3
+    - https://github.com/boazsegev/iodine/commit/5558233fb7defda706b4f9c87c17759705949889
+    - https://github.com/advisories/GHSA-85rf-xh54-whp3
diff --git a/gems/iodine/GHSA-85rf-xh54-whp3.yml b/gems/iodine/GHSA-85rf-xh54-whp3.yml
index 7183ec04bb..4f92cd1f41 100644
--- a/gems/iodine/GHSA-85rf-xh54-whp3.yml
+++ b/gems/iodine/GHSA-85rf-xh54-whp3.yml
@@ -18,4 +18,4 @@ description: |
   containing data from files that shouldn't be normally accessible from the
   public folder.
 patched_versions:
-- '>= 0.7.34'
+  - ">= 0.7.34"
diff --git a/gems/jekyll/CVE-2018-17567.yml b/gems/jekyll/CVE-2018-17567.yml
index 0dc4b43c47..885221d8aa 100644
--- a/gems/jekyll/CVE-2018-17567.yml
+++ b/gems/jekyll/CVE-2018-17567.yml
@@ -5,11 +5,12 @@ ghsa: 4xjh-m3qx-49wc
 url: https://jekyllrb.com/news/2018/09/19/security-fixes-for-3-6-3-7-3-8/
 title: Jekyll _config.yml privilege escalation
 date: 2018-09-28
-description: Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows
+description: |
+  Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows
   attackers to access arbitrary files by specifying a symlink in the "include" key
   in the "_config.yml" file.
 cvss_v3: 7.5
 patched_versions:
-- ~> 3.6.3
-- ~> 3.7.4
-- '>= 3.8.4'
+  - "~> 3.6.3"
+  - "~> 3.7.4"
+  - ">= 3.8.4"
diff --git a/gems/jmespath/CVE-2022-32511.yml b/gems/jmespath/CVE-2022-32511.yml
new file mode 100644
index 0000000000..3a73376b17
--- /dev/null
+++ b/gems/jmespath/CVE-2022-32511.yml
@@ -0,0 +1,17 @@
+---
+gem: jmespath
+cve: 2022-32511
+ghsa: 5c5f-7vfq-3732
+url: https://github.com/jmespath/jmespath.rb/pull/55
+title: JMESPath for Ruby using JSON.load instead of JSON.parse
+date: 2022-06-07
+description: |
+  jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a
+  situation where JSON.parse is preferable.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 1.6.1"
+related:
+  url:
+    - https://github.com/jmespath/jmespath.rb/compare/v1.6.0...v1.6.1
+    - https://stackoverflow.com/a/30050571/580231
diff --git a/gems/job-iteration/CVE-2025-53623.yml b/gems/job-iteration/CVE-2025-53623.yml
new file mode 100644
index 0000000000..9c85826112
--- /dev/null
+++ b/gems/job-iteration/CVE-2025-53623.yml
@@ -0,0 +1,40 @@
+---
+gem: job-iteration
+cve: 2025-53623
+ghsa: 6qjf-g333-pv38
+url: https://github.com/Shopify/job-iteration/security/advisories/GHSA-6qjf-g333-pv38
+title: Job Iteration API is vulnerable to OS Command Injection attack
+  through its CsvEnumerator class
+date: 2025-07-14
+description: |
+  ### Impact
+
+  There is an arbitrary code execution vulnerability in the
+  `CsvEnumerator` class of the `job-iteration` repository. This
+  vulnerability can be exploited by an attacker to execute arbitrary
+  commands on the system where the application is running, potentially
+  leading to unauthorized access, data leakage, or complete system
+  compromise.
+
+  ### Patches
+
+  Issue is fixed in versions `1.11.0` and above.
+
+  ### Workarounds
+
+  Users can mitigate the risk by avoiding the use of untrusted input
+  in the `CsvEnumerator` class and ensuring that any file paths are
+  properly sanitized and validated before being passed to the class
+  methods. Users should avoid calling `size` on enumerators
+  constructed with untrusted CSV filenames.
+cvss_v4: 8.1
+patched_versions:
+  - ">= 1.11"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-53623
+    - https://github.com/Shopify/job-iteration/security/advisories/GHSA-6qjf-g333-pv38
+    - https://github.com/Shopify/job-iteration/pull/595
+    - https://github.com/Shopify/job-iteration/commit/1a7adfdd041105a5e45e774cadc6b973a292ba55
+    - https://github.com/Shopify/job-iteration/releases/tag/v1.11.0
+    - https://github.com/advisories/GHSA-6qjf-g333-pv38
diff --git a/gems/jquery-rails/CVE-2011-4969.yml b/gems/jquery-rails/CVE-2011-4969.yml
new file mode 100644
index 0000000000..e4b9bfe4c0
--- /dev/null
+++ b/gems/jquery-rails/CVE-2011-4969.yml
@@ -0,0 +1,27 @@
+---
+gem: jquery-rails
+cve: 2011-4969
+ghsa: 579v-mp3v-rrw5
+url: http://blog.jquery.com/2011/09/01/jquery-1-6-3-released
+title: jQuery vulnerable to Cross-Site Scripting (XSS)
+date: 2011-09-01
+description: |
+  Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3,
+  when using location.hash to select elements, allows remote attackers
+  to inject arbitrary web script or HTML via a crafted tag.
+cvss_v2: 4.3
+patched_versions:
+  - ">= 1.6.3"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-4969
+    - http://blog.jquery.com/2011/09/01/jquery-1-6-3-released
+    - http://blog.mindedsecurity.com/2011/07/jquery-is-sink.html
+    - http://bugs.jquery.com/ticket/9521
+    - https://github.com/jquery/jquery/commit/db9e023e62c1ff5d8f21ed9868ab6878da2005e9
+    - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8
+    - https://security.netapp.com/advisory/ntap-20190416-0007
+    - http://www.openwall.com/lists/oss-security/2013/01/31/3
+    - http://www.ubuntu.com/usn/USN-1722-1
+    - https://security.snyk.io/vuln/SNYK-DOTNET-JQUERY-450224
+    - https://github.com/advisories/GHSA-579v-mp3v-rrw5
diff --git a/gems/jquery-rails/CVE-2012-6708.yml b/gems/jquery-rails/CVE-2012-6708.yml
new file mode 100644
index 0000000000..60457d01b2
--- /dev/null
+++ b/gems/jquery-rails/CVE-2012-6708.yml
@@ -0,0 +1,32 @@
+---
+gem: jquery-rails
+framework: rails
+cve: 2012-6708
+ghsa: 2pqj-h3vj-pqgw
+url: https://nvd.nist.gov/vuln/detail/cve-2012-6708
+title: Cross-Site Scripting in jquery
+date: 2020-09-01
+description: |
+  Affected versions of `jquery` are vulnerable to cross-site scripting.
+  This occurs because the main `jquery` function uses a regular expression
+  to differentiate between HTML and selectors, but does not properly anchor
+  the regular expression. The result is that `jquery` may interpret HTML
+  as selectors when given certain inputs, allowing for client side code
+  execution.
+
+  ## Proof of Concept
+  $("#log").html(
+      $("element[attribute='<img src=\"x\" onerror=\"alert(1)\" />']").html()
+  );
+cvss_v2: 4.3
+cvss_v3: 6.1
+patched_versions:
+  - "~> 2.1.4"
+  - ">= 2.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/cve-2012-6708
+    - https://github.com/rails/jquery-rails/blob/v2.1.4/vendor/assets/javascripts/jquery.js#L59
+    - https://github.com/rails/jquery-rails/blob/v2.2.0/vendor/assets/javascripts/jquery.js#L67
+    - https://github.com/advisories/GHSA-2pqj-h3vj-pqgw
+notes: "Found 2 jquery-rails in GHSA database."
diff --git a/gems/jquery-rails/CVE-2015-1840.yml b/gems/jquery-rails/CVE-2015-1840.yml
index 60c2516015..647e25ce58 100644
--- a/gems/jquery-rails/CVE-2015-1840.yml
+++ b/gems/jquery-rails/CVE-2015-1840.yml
@@ -30,8 +30,8 @@ description: |
     end
 
   See also:
-  - http://blog.honeybadger.io/understanding-the-rails-jquery-csrf-vulnerability-cve-2015-1840/
+    - http://blog.honeybadger.io/understanding-the-rails-jquery-csrf-vulnerability-cve-2015-1840/
 cvss_v2: 5.0
 patched_versions:
-- '>= 4.0.4'
-- ~> 3.1.3
+  - ">= 4.0.4"
+  - "~> 3.1.3"
diff --git a/gems/jquery-rails/CVE-2015-9251.yml b/gems/jquery-rails/CVE-2015-9251.yml
new file mode 100644
index 0000000000..70678c2a95
--- /dev/null
+++ b/gems/jquery-rails/CVE-2015-9251.yml
@@ -0,0 +1,24 @@
+---
+gem: jquery-rails
+framework: rails
+cve: 2015-9251
+ghsa: rmxg-73gg-4p98
+url: https://github.com/rails/jquery-rails/releases/tag/v4.2.0
+title: Cross-Site Scripting (XSS) in jquery
+date: 2018-01-22
+description: |
+  Affected versions of `jquery` interpret `text/javascript` responses
+  from cross-origin ajax requests, and automatically execute the
+  contents in `jQuery.globalEval`, even when the ajax request
+  doesn't contain the `dataType` option.
+cvss_v2: 6.1
+cvss_v3: 6.1
+patched_versions:
+  - ">= 4.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2015-9251
+    - https://github.com/rails/jquery-rails/releases/tag/v4.2.0
+    - https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#420
+    - https://github.com/rails/jquery-rails/blob/v4.2.0/vendor/assets/javascripts/jquery3.js#L9377
+    - https://github.com/advisories/GHSA-rmxg-73gg-4p98
diff --git a/gems/jquery-rails/CVE-2016-10707.yml b/gems/jquery-rails/CVE-2016-10707.yml
new file mode 100644
index 0000000000..d1cfd79bc4
--- /dev/null
+++ b/gems/jquery-rails/CVE-2016-10707.yml
@@ -0,0 +1,32 @@
+---
+gem: jquery-rails
+cve: 2016-10707
+ghsa: mhpp-875w-9cpv
+url: https://nvd.nist.gov/vuln/detail/CVE-2016-10707
+title: Denial of Service in jquery
+date: 2018-01-18
+description: |
+  Affected versions of `jquery` use a lowercasing logic on attribute
+  names. When given a boolean attribute with a name that contains
+  uppercase characters, `jquery` enters into an infinite recursion
+  loop, exceeding the call stack limit, and resulting in a denial
+  of service condition.
+
+  ## Recommendation
+
+  Update to version 3.0.0 or later.
+cvss_v2: 5.0
+cvss_v3: 7.5
+unaffected_versions:
+  - "< 3.0.0-rc.1"
+patched_versions:
+  - ">= 3.0.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2016-10707
+    - https://github.com/advisories/GHSA-mhpp-875w-9cpv
+    - https://github.com/jquery/jquery/issues/3133
+    - https://github.com/jquery/jquery/issues/3133#issuecomment-358978489
+    - https://www.npmjs.com/advisories/330
+    - https://github.com/jquery/jquery/pull/3134
+    - https://snyk.io/vuln/npm:jquery:20160529
diff --git a/gems/jquery-rails/CVE-2019-11358.yml b/gems/jquery-rails/CVE-2019-11358.yml
index 143b436616..ae331a7e11 100644
--- a/gems/jquery-rails/CVE-2019-11358.yml
+++ b/gems/jquery-rails/CVE-2019-11358.yml
@@ -2,9 +2,10 @@
 gem: jquery-rails
 framework: rails
 cve: 2019-11358
-date: 2019-04-19
+ghsa: 6c3j-c64m-qhgq
 url: https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/
 title: Prototype pollution attack through jQuery $.extend
+date: 2019-04-19
 description: |
   jQuery before 3.4.0 mishandles jQuery.extend(true, {}, ...) because of
   bject.prototype pollution. If an unsanitized source object contained an
@@ -12,11 +13,10 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 6.1
 patched_versions:
-- '>= 4.3.4'
-
+  - ">= 4.3.4"
 related:
   url:
-  - https://hackerone.com/reports/454365
-  - https://github.com/jquery/jquery/pull/4333
-  - https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b
-  - https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#434
+    - https://hackerone.com/reports/454365
+    - https://github.com/jquery/jquery/pull/4333
+    - https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b
+    - https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#434
diff --git a/gems/jquery-rails/CVE-2020-11022.yml b/gems/jquery-rails/CVE-2020-11022.yml
new file mode 100644
index 0000000000..0a83e1065e
--- /dev/null
+++ b/gems/jquery-rails/CVE-2020-11022.yml
@@ -0,0 +1,92 @@
+---
+gem: jquery-rails
+cve: 2020-11022
+ghsa: gxr4-xjj5-5px2
+url: https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2
+title: Potential XSS vulnerability in jQuery
+date: 2020-04-29
+description: |
+  ### Impact
+  Passing HTML from untrusted sources - even after sanitizing it - to
+  one of jQuery's DOM manipulation methods (i.e. `.html()`, `.append()`,
+  and others) may execute untrusted code.
+
+  ### Patches
+  This problem is patched in jQuery 3.5.0.
+
+  ### Workarounds
+  To workaround the issue without upgrading, adding the following to
+  your code:
+  ```js
+  jQuery.htmlPrefilter = function( html ) {
+    return html;
+  };
+  ```
+  You need to use at least jQuery 1.12/2.2 or newer to be able to
+  apply this workaround.
+
+  ### References
+  https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
+  https://jquery.com/upgrade-guide/3.5/
+
+  ### For more information
+  If you have any questions or comments about this advisory, search
+  for a relevant issue in
+  [the jQuery repo](https://github.com/jquery/jquery/issues).
+
+  If you don't find an answer, open a new issue."
+cvss_v2: 4.3
+cvss_v3: 6.9
+unaffected_versions:
+  - "< 1.2.0"
+patched_versions:
+  - ">= 3.5.0"
+related:
+  url:
+    - https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2
+    - https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77
+    - https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
+    - https://jquery.com/upgrade-guide/3.5/
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-11022
+    - https://security.netapp.com/advisory/ntap-20200511-0006/
+    - https://www.drupal.org/sa-core-2020-002
+    - https://www.debian.org/security/2020/dsa-4693
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOE7P7APPRQKD4FGNHBKJPDY6FFCOH3W/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K/
+    - https://www.oracle.com/security-alerts/cpujul2020.html
+    - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html
+    - https://security.gentoo.org/glsa/202007-03
+    - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html
+    - https://lists.apache.org/thread.html/rdf44341677cf7eec7e9aa96dcf3f37ed709544863d619cca8c36f133@
+    - https://github.com/advisories/GHSA-gxr4-xjj5-5px2
+    - https://www.npmjs.com/advisories/1518
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4/
+    - https://www.oracle.com/security-alerts/cpuoct2020.html
+    - https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d@
+    - https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67@
+    - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html
+    - https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48@
+    - https://www.tenable.com/security/tns-2020-10
+    - https://www.tenable.com/security/tns-2020-11
+    - https://www.oracle.com/security-alerts/cpujan2021.html
+    - https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760@
+    - https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c@
+    - https://www.tenable.com/security/tns-2021-02
+    - https://lists.debian.org/debian-lts-announce/2021/03/msg00033.html
+    - http://packetstormsecurity.com/files/162159/jQuery-1.2-Cross-Site-Scripting.html
+    - https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4@
+    - https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2@
+    - https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae@
+    - https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108@
+    - https://www.tenable.com/security/tns-2021-10
+    - https://www.oracle.com/security-alerts/cpuApr2021.html
+    - https://www.oracle.com//security-alerts/cpujul2021.html
+    - https://www.oracle.com/security-alerts/cpuoct2021.html
+    - https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36@
+    - https://github.com/jquery/jquery/releases/tag/3.5.0
+    - https://www.oracle.com/security-alerts/cpujan2022.html
+    - https://www.oracle.com/security-alerts/cpuapr2022.html
+    - https://www.oracle.com/security-alerts/cpujul2022.html
+    - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
diff --git a/gems/jquery-rails/CVE-2020-11023.yml b/gems/jquery-rails/CVE-2020-11023.yml
index f4b417d2df..1ba91059e2 100644
--- a/gems/jquery-rails/CVE-2020-11023.yml
+++ b/gems/jquery-rails/CVE-2020-11023.yml
@@ -20,7 +20,7 @@ description: |
   jQuery method.
 cvss_v3: 6.9
 patched_versions:
-- '>= 4.4.0'
+  - ">= 4.4.0"
 related:
   url:
-  - https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#440
+    - https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#440
diff --git a/gems/jquery-rails/CVE-2020-23064.yml b/gems/jquery-rails/CVE-2020-23064.yml
new file mode 100644
index 0000000000..8fc0df7963
--- /dev/null
+++ b/gems/jquery-rails/CVE-2020-23064.yml
@@ -0,0 +1,29 @@
+---
+gem: jquery-rails
+framework: rails
+cve: 2020-23064
+ghsa: 257q-pv89-v3xv
+url: https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
+title: jQuery Cross Site Scripting vulnerability
+date: 2023-06-26
+description: |
+  Cross Site Scripting vulnerability in jQuery v.2.2.0 until v.3.5.0
+  allows a remote attacker to execute arbitrary code via the
+  `<options>` element.
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 4.1.0"
+patched_versions:
+  - ">= 4.4.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-23064
+    - https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
+    - https://github.com/rails/jquery-rails/blob/v4.4.0/vendor/assets/javascripts/jquery3.js#L6162
+    - https://github.com/rails/jquery-rails/blob/v4.3.5/vendor/assets/javascripts/jquery3.js#L5979
+    - https://snyk.io/vuln/SNYK-JS-JQUERY-565129
+    - https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77
+    - https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#410
+    - https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#440
+
+    - https://github.com/advisories/GHSA-257q-pv89-v3xv
diff --git a/gems/jquery-rails/CVE-2020-7656.yml b/gems/jquery-rails/CVE-2020-7656.yml
new file mode 100644
index 0000000000..a3f3415d6d
--- /dev/null
+++ b/gems/jquery-rails/CVE-2020-7656.yml
@@ -0,0 +1,23 @@
+---
+gem: jquery-rails
+cve: 2020-7656
+ghsa: q4m3-2j7h-f7xw
+url: https://snyk.io/vuln/SNYK-JS-JQUERY-569619
+title: Cross-Site Scripting in jquery
+date: 2020-05-20
+description: |
+  Versions of `jquery` prior to 1.9.0 are vulnerable to Cross-Site
+  Scripting. The load method fails to recognize and remove "<script>"
+  HTML tags that contain a whitespace character, i.e: "</script >",
+  which results in the enclosed script logic to be executed. This
+  allows attackers to execute arbitrary JavaScript in a victim's browser.
+cvss_v2: 4.3
+cvss_v3: 6.1
+patched_versions:
+  - ">= 2.1.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-7656
+    - https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#220-19-january-2013
+    - https://github.com/rails/jquery-rails/blob/v2.1.4/vendor/assets/javascripts/jquery.js#L7481
+    - https://github.com/advisories/GHSA-q4m3-2j7h-f7xw
diff --git a/gems/jquery-ui-rails/CVE-2010-5312.yml b/gems/jquery-ui-rails/CVE-2010-5312.yml
new file mode 100644
index 0000000000..1a1a7a4653
--- /dev/null
+++ b/gems/jquery-ui-rails/CVE-2010-5312.yml
@@ -0,0 +1,44 @@
+---
+gem: jquery-ui-rails
+cve: 2010-5312
+ghsa: wcm2-9c89-wmfm
+url: https://nvd.nist.gov/vuln/detail/CVE-2010-5312
+title: Cross-site Scripting in jquery-ui
+date: 2017-10-24
+description: |
+  Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in
+  the Dialog widget in jQuery UI before 1.10.0 allows remote attackers
+  to inject arbitrary web script or HTML via the title option.
+cvss_v2: 4.3
+cvss_v3: 6.1
+patched_versions:
+  - ">= 4.0.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-5312
+    - https://github.com/jquery-ui-rails/jquery-ui-rails/commit/61a8e3f50796118e9f49fbd224b67d4065b40c50
+    - http://bugs.jqueryui.com/ticket/6016
+    - https://github.com/jquery/jquery-ui/commit/7e9060c109b928769a664dbcc2c17bd21231b6f3
+    - https://security.netapp.com/advisory/ntap-20190416-0007
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/98696
+    - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f
+    - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442
+    - http://rhn.redhat.com/errata/RHSA-2015-0442.html
+    - http://rhn.redhat.com/errata/RHSA-2015-1462.html
+    - http://seclists.org/oss-sec/2014/q4/613
+    - http://seclists.org/oss-sec/2014/q4/616
+    - http://www.debian.org/security/2015/dsa-3249
+    - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc
+    - https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html
+    - https://www.drupal.org/sa-core-2022-002
+    - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f
+    - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442
+    - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/
+    - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
+    - https://web.archive.org/web/20150316023043/http://www.securityfocus.com/bid/71106
+    - https://web.archive.org/web/20170316161850/http://www.securitytracker.com/id/1037035
+    - https://github.com/advisories/GHSA-wcm2-9c89-wmfm
diff --git a/gems/jquery-ui-rails/CVE-2012-6662.yml b/gems/jquery-ui-rails/CVE-2012-6662.yml
new file mode 100644
index 0000000000..a1d449b1ec
--- /dev/null
+++ b/gems/jquery-ui-rails/CVE-2012-6662.yml
@@ -0,0 +1,32 @@
+---
+gem: jquery-ui-rails
+cve: 2012-6662
+ghsa: qqxp-xp9v-vvx6
+url: https://nvd.nist.gov/vuln/detail/CVE-2012-6662
+title: Moderate severity vulnerability that affects jquery-ui
+date: 2017-10-24
+description: |
+  Cross-site scripting (XSS) vulnerability in the default content option
+  in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before
+  1.10.0 allows remote attackers to inject arbitrary web script or
+  HTML via the title attribute, which is not properly handled in the
+  autocomplete combo box demo.
+cvss_v2: 4.3
+patched_versions:
+  - ">= 4.0.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-6662
+    - https://github.com/jquery-ui-rails/jquery-ui-rails/commit/61a8e3f50796118e9f49fbd224b67d4065b40c50
+    - https://github.com/jquery/jquery-ui/commit/f2854408cce7e4b7fc6bf8676761904af9c96bde
+    - https://github.com/jquery/jquery-ui/commit/5fee6fd5000072ff32f2d65b6451f39af9e0e39e
+    - http://bugs.jqueryui.com/ticket/8859
+    - http://bugs.jqueryui.com/ticket/8861
+    - https://github.com/jquery/jquery/issues/2432
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/98697
+    - http://rhn.redhat.com/errata/RHSA-2015-0442.html
+    - http://rhn.redhat.com/errata/RHSA-2015-1462.html
+    - http://seclists.org/oss-sec/2014/q4/613
+    - http://seclists.org/oss-sec/2014/q4/616
+    - http://www.securityfocus.com/bid/71107
+    - https://github.com/advisories/GHSA-qqxp-xp9v-vvx6
diff --git a/gems/jquery-ui-rails/CVE-2016-7103.yml b/gems/jquery-ui-rails/CVE-2016-7103.yml
index 2e306f7c39..1dbe0907dc 100644
--- a/gems/jquery-ui-rails/CVE-2016-7103.yml
+++ b/gems/jquery-ui-rails/CVE-2016-7103.yml
@@ -2,9 +2,10 @@
 gem: jquery-ui-rails
 framework: rails
 cve: 2016-7103
-date: 2016-08-27
+ghsa: hpcf-8vf9-q4gj
 url: https://github.com/jquery/api.jqueryui.com/issues/281
 title: XSS Vulnerability on closeText option of Dialog jQuery UI
+date: 2016-08-27
 description: |
   Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might
   allow remote attackers to inject arbitrary web script or HTML via the
@@ -12,9 +13,8 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 6.1
 patched_versions:
-- '>= 6.0.0'
-
+  - ">= 6.0.0"
 related:
   url:
-  - https://github.com/jquery/jquery-ui/pull/1635
-  - https://github.com/jquery-ui-rails/jquery-ui-rails/blob/master/History.md#600
+    - https://github.com/jquery/jquery-ui/pull/1635
+    - https://github.com/jquery-ui-rails/jquery-ui-rails/blob/master/History.md#600
diff --git a/gems/jquery-ui-rails/CVE-2021-41182.yml b/gems/jquery-ui-rails/CVE-2021-41182.yml
new file mode 100644
index 0000000000..b6ee623ce2
--- /dev/null
+++ b/gems/jquery-ui-rails/CVE-2021-41182.yml
@@ -0,0 +1,64 @@
+---
+gem: jquery-ui-rails
+cve: 2021-41182
+ghsa: 9gj3-hwp5-pmwc
+url: https://github.com/jquery/jquery-ui/security/advisories/GHSA-9gj3-hwp5-pmwc
+title: XSS in the `altField` option of the Datepicker widget in jquery-ui
+date: 2021-10-26
+description: |
+  ### Impact
+  Accepting the value of the `altField` option of the Datepicker
+  widget from untrusted sources may execute untrusted code. For
+  example, initializing the datepicker in the following way:
+  ```js
+  $("#datepicker").datepicker( {
+    altField: "<img onerror='doEvilThing()' src='/404' >",
+  } );
+  ```
+  will call the `doEvilThing` function.
+
+  ### Patches
+  The issue is fixed in jQuery UI 1.13.0. Any string value passed to
+  the `altField` option is now treated as a CSS selector.
+
+  ### Workarounds
+
+  A workaround is to not accept the value of the `altField` option
+  from untrusted sources.
+
+  ### For more information
+
+  If you have any questions or comments about this advisory, search
+  for a relevant issue in
+  [the jQuery UI repo](https://github.com/jquery/jquery-ui/issues).
+  If you don't find an answer, open a new issue."
+cvss_v2: 4.3
+cvss_v3: 6.5
+patched_versions:
+  - ">= 7.0.0"
+related:
+  url:
+    - https://github.com/jquery/jquery-ui/security/advisories/GHSA-9gj3-hwp5-pmwc
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-41182
+    - https://github.com/jquery/jquery-ui/pull/1954/commits/6809ce843e5ac4128108ea4c15cbc100653c2b63
+    - https://blog.jqueryui.com/2021/10/jquery-ui-1-13-0-released/
+    - https://security.netapp.com/advisory/ntap-20211118-0004/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NXIUUBRVLA4E7G7MMIKCEN75YN7UFERW/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O74SXYY7RGXREQDQUDQD4BPJ4QQTD2XQ/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SNXA7XRKGINWSUIPIZ6ZBCTV6N3KSHES/
+    - https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html
+    - https://www.drupal.org/sa-contrib-2022-004
+    - https://www.drupal.org/sa-core-2022-002
+    - https://www.oracle.com/security-alerts/cpuapr2022.html
+    - https://www.tenable.com/security/tns-2022-09
+    - https://www.oracle.com/security-alerts/cpujul2022.html
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
+    - https://github.com/advisories/GHSA-9gj3-hwp5-pmwc
+    - https://github.com/jquery-ui-rails/jquery-ui-rails/commit/413265e81f790f795239e07e7e25e01429b2f18d
diff --git a/gems/jquery-ui-rails/CVE-2021-41183.yml b/gems/jquery-ui-rails/CVE-2021-41183.yml
new file mode 100644
index 0000000000..1de2655a6a
--- /dev/null
+++ b/gems/jquery-ui-rails/CVE-2021-41183.yml
@@ -0,0 +1,73 @@
+---
+gem: jquery-ui-rails
+cve: 2021-41183
+ghsa: j7qv-pgf6-hvh4
+url: https://github.com/jquery/jquery-ui/security/advisories/GHSA-j7qv-pgf6-hvh4
+title: XSS in `*Text` options of the Datepicker widget in jquery-ui
+date: 2021-10-26
+description: |
+  ### Impact
+  Accepting the value of various `*Text` options of the Datepicker
+  widget from untrusted sources may execute untrusted code. For example, initializing
+  the datepicker in the following way:
+  ```js
+  $("#datepicker").datepicker( {
+    showButtonPanel: true,
+    showOn: "both",
+    closeText: "<script>doEvilThing('closeText XSS')</script>",
+    currentText: "<script>doEvilThing('currentText XSS')</script>",
+    prevText: "<script>doEvilThing('prevText XSS')</script>",
+    nextText: "<script>doEvilThing('nextText XSS')</script>",
+    buttonText: "<script>doEvilThing('buttonText XSS')</script>",
+    appendText: "<script>doEvilThing('appendText XSS')</script>",
+    }
+  );
+  ```
+  will call `doEvilThing` with 6 different parameters coming from
+  all `*Text` options.
+
+  ### Patches
+  The issue is fixed in jQuery UI 1.13.0. The values passed to various
+  `*Text` options are now always treated as pure text, not HTML.
+
+  ### Workarounds
+  A workaround is to not accept the value of the `*Text` options from
+  untrusted sources.
+
+  ### For more information
+  If you have any questions or comments about this advisory, search
+  for a relevant issue in
+  [the jQuery UI repo](https://github.com/jquery/jquery-ui/issues).
+  If you don't find an answer, open a new issue.
+cvss_v2: 4.3
+cvss_v3: 6.5
+patched_versions:
+  - ">= 7.0.0"
+related:
+  url:
+    - https://github.com/jquery/jquery-ui/security/advisories/GHSA-j7qv-pgf6-hvh4
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-41183
+    - https://github.com/jquery/jquery-ui/pull/1953
+    - https://blog.jqueryui.com/2021/10/jquery-ui-1-13-0-released/
+    - https://bugs.jqueryui.com/ticket/15284
+    - https://security.netapp.com/advisory/ntap-20211118-0004/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NXIUUBRVLA4E7G7MMIKCEN75YN7UFERW/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O74SXYY7RGXREQDQUDQD4BPJ4QQTD2XQ/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SNXA7XRKGINWSUIPIZ6ZBCTV6N3KSHES/
+    - https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html
+    - https://www.drupal.org/sa-contrib-2022-004
+    - https://www.drupal.org/sa-core-2022-001
+    - https://www.drupal.org/sa-core-2022-002
+    - https://www.oracle.com/security-alerts/cpuapr2022.html
+    - https://www.tenable.com/security/tns-2022-09
+    - https://www.oracle.com/security-alerts/cpujul2022.html
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
+    - https://github.com/advisories/GHSA-j7qv-pgf6-hvh4
+    - https://github.com/jquery-ui-rails/jquery-ui-rails/commit/413265e81f790f795239e07e7e25e01429b2f18d
diff --git a/gems/jquery-ui-rails/CVE-2021-41184.yml b/gems/jquery-ui-rails/CVE-2021-41184.yml
new file mode 100644
index 0000000000..828cfd7124
--- /dev/null
+++ b/gems/jquery-ui-rails/CVE-2021-41184.yml
@@ -0,0 +1,64 @@
+---
+gem: jquery-ui-rails
+cve: 2021-41184
+ghsa: gpqq-952q-5327
+url: https://github.com/jquery/jquery-ui/security/advisories/GHSA-gpqq-952q-5327
+title: XSS in the `of` option of the `.position()` util in jquery-ui
+date: 2021-10-26
+description: |
+  ### Impact
+  Accepting the value of the `of` option of the
+  [`.position()`](https://api.jqueryui.com/position/)
+  util from untrusted sources may execute untrusted code. For example, invoking the
+  following code:
+  ```js
+  $("#element").position( {
+    my: "left top", at: "right bottom",
+    of: "<img onerror='doEvilThing()' src='/404' />",
+    collision: "none"
+  });
+  ```
+  will call the `doEvilThing()` function.
+
+  ### Patches
+  The issue is fixed in jQuery UI 1.13.0. Any string value passed to
+  the `of` option is now treated as a CSS selector.
+
+  ### Workarounds
+  A workaround is to not accept the value of the `of` option from
+  untrusted sources.
+
+  ### For more information
+  If you have any questions or comments about this advisory, search
+  for a relevant issue in
+  [the jQuery UI repo](https://github.com/jquery/jquery-ui/issues).
+
+  If you don't find an answer, open a new issue."
+cvss_v2: 4.3
+cvss_v3: 6.5
+patched_versions:
+  - ">= 7.0.0"
+related:
+  url:
+    - https://github.com/jquery/jquery-ui/security/advisories/GHSA-gpqq-952q-5327
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-41184
+    - https://github.com/jquery/jquery-ui/commit/effa323f1505f2ce7a324e4f429fa9032c72f280
+    - https://blog.jqueryui.com/2021/10/jquery-ui-1-13-0-released/
+    - https://security.netapp.com/advisory/ntap-20211118-0004/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NXIUUBRVLA4E7G7MMIKCEN75YN7UFERW/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O74SXYY7RGXREQDQUDQD4BPJ4QQTD2XQ/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SNXA7XRKGINWSUIPIZ6ZBCTV6N3KSHES/
+    - https://www.drupal.org/sa-core-2022-001
+    - https://www.oracle.com/security-alerts/cpuapr2022.html
+    - https://www.tenable.com/security/tns-2022-09
+    - https://www.oracle.com/security-alerts/cpujul2022.html
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.fedoraproject.org/archives/list/package-announce
+    - https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
+    - https://github.com/advisories/GHSA-gpqq-952q-5327
+    - https://github.com/jquery-ui-rails/jquery-ui-rails/commit/413265e81f790f795239e07e7e25e01429b2f18d
diff --git a/gems/jquery-ui-rails/CVE-2022-31160.yml b/gems/jquery-ui-rails/CVE-2022-31160.yml
new file mode 100644
index 0000000000..5113e0f71f
--- /dev/null
+++ b/gems/jquery-ui-rails/CVE-2022-31160.yml
@@ -0,0 +1,81 @@
+---
+gem: jquery-ui-rails
+cve: 2022-31160
+ghsa: h6gj-6jjq-h8g9
+url: https://github.com/jquery/jquery-ui/security/advisories/GHSA-h6gj-6jjq-h8g9
+title:
+  jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like
+  initial text label
+date: 2022-07-15
+description: |
+  ### Impact
+  Initializing a checkboxradio widget on an input enclosed within a label makes
+  that parent label contents considered as the input label. If you call
+  `.checkboxradio( "refresh" )` on such a widget and the initial HTML contained
+  encoded HTML entities, they will erroneously get decoded. This can lead to
+  potentially executing JavaScript code.
+
+  For example, starting with the following initial secure HTML:
+
+  ```html
+  <label>
+  	<input id="test-input">
+  	&lt;img src=x onerror="alert(1)"&gt;
+  </label>
+  ```
+
+  and calling:
+
+  ```javascript
+  $( "#test-input" ).checkboxradio();
+  $( "#test-input" ).checkboxradio( "refresh" );
+  ```
+
+  will turn the initial HTML into:
+
+  ```html
+  <label>
+  	<!-- some jQuery UI elements -->
+  	<input id="test-input">
+  	<img src=x onerror="alert(1)">
+  </label>
+  ```
+
+  and the alert will get executed.
+
+  ### Patches
+  The bug has been patched in jQuery UI 1.13.2.
+
+  ### Workarounds
+  To remediate the issue, if you can change the initial HTML, you can wrap all
+  the non-input contents of the `label` in a `span`:
+
+  ```html
+  <label>
+  	<input id="test-input">
+  	<span>&lt;img src=x onerror="alert(1)"&gt;</span>
+  </label>
+  ```
+
+  ### References
+  https://blog.jqueryui.com/2022/07/jquery-ui-1-13-2-released/
+
+  ### For more information
+  If you have any questions or comments about this advisory, search for a
+  relevant issue in [the jQuery UI repo](https://github.com/jquery/jquery-ui/issues?q=is%3Aissue+is%3Aopen+sort%3Aupdated-desc).
+  If you don't find an answer, open a new issue.
+cvss_v3: 6.1
+patched_versions:
+  - ">= 8.0.0"
+related:
+  url:
+    - https://github.com/jquery/jquery-ui/security/advisories/GHSA-h6gj-6jjq-h8g9
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-31160
+    - https://github.com/advisories/GHSA-h6gj-6jjq-h8g9#:~:text=https%3A//nvd.nist,12/msg00015.html
+    - https://blog.jqueryui.com/2022/07/jquery-ui-1-13-2-released/
+    - https://www.drupal.org/sa-contrib-2022-052
+    - https://security.netapp.com/advisory/ntap-20220909-0007/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6XBR3G3JR5ZIOJDO4224M3INXDS2VFDD/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J5LGNTICB5BRFAG3DHVVELS6H3CZSQMO/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QB2FJQXCNHO32VGVOC6DY6IPGVE4VDU6/
+    - https://lists.debian.org/debian-lts-announce/2022/12/msg00015.html
diff --git a/gems/jquery-ujs/CVE-2015-1840.yml b/gems/jquery-ujs/CVE-2015-1840.yml
index 2cbf9376dc..2c5793ebdc 100644
--- a/gems/jquery-ujs/CVE-2015-1840.yml
+++ b/gems/jquery-ujs/CVE-2015-1840.yml
@@ -30,7 +30,7 @@ description: |
     end
 
   See also:
-  - http://blog.honeybadger.io/understanding-the-rails-jquery-csrf-vulnerability-cve-2015-1840/
+    - http://blog.honeybadger.io/understanding-the-rails-jquery-csrf-vulnerability-cve-2015-1840/
 cvss_v2: 5.0
 patched_versions:
-- '>= 1.0.4'
+  - ">= 1.0.4"
diff --git a/gems/jruby-openssl/CVE-2009-4123.yml b/gems/jruby-openssl/CVE-2009-4123.yml
index 2cf22cbcb7..38b9e8f60f 100644
--- a/gems/jruby-openssl/CVE-2009-4123.yml
+++ b/gems/jruby-openssl/CVE-2009-4123.yml
@@ -2,6 +2,7 @@
 gem: jruby-openssl
 platform: jruby
 cve: 2009-4123
+ghsa: xgv7-pqqh-h2w9
 url: http://jruby.org/2009/12/07/vulnerability-in-jruby-openssl
 title: jruby-openssl Gem for JRuby fails to do proper certificate validation
 date: 2009-12-07
@@ -12,5 +13,6 @@ description: |
   that a secure connection to a rogue SSL server is legitimate. Attackers could
   also penetrate client-validated SSL server applications with a dummy
   certificate.
+cvss_v3: 7.5
 patched_versions:
-- '>= 0.6'
+  - ">= 0.6"
diff --git a/gems/jruby-sandbox/OSVDB-106279.yml b/gems/jruby-sandbox/OSVDB-106279.yml
index c81b8e9316..8615072be4 100644
--- a/gems/jruby-sandbox/OSVDB-106279.yml
+++ b/gems/jruby-sandbox/OSVDB-106279.yml
@@ -2,11 +2,15 @@
 gem: jruby-sandbox
 platform: jruby
 osvdb: 106279
-url: http://www.phenoelit.org/stuff/jruby-sandbox.txt
+url: https://security.snyk.io/vuln/SNYK-RUBY-JRUBYSANDBOX-20156
 title: jruby-sandbox Java Class Importation Sandbox Bypass
 date: 2014-04-24
 description: |
   jruby-sandbox contains a flaw that is triggered when importing Java Classes.
   This may allow a remote attacker to bypass the sandbox for code execution.
 patched_versions:
-- '>= 0.2.3'
+  - ">= 0.2.3"
+related:
+  url:
+    - https://www.exploit-db.com/exploits/33028
+    - https://security.snyk.io/vuln/SNYK-RUBY-JRUBYSANDBOX-20156
diff --git a/gems/json-jwt/CVE-2018-1000539.yml b/gems/json-jwt/CVE-2018-1000539.yml
index 7301b27455..f37153ad19 100644
--- a/gems/json-jwt/CVE-2018-1000539.yml
+++ b/gems/json-jwt/CVE-2018-1000539.yml
@@ -17,6 +17,6 @@ description: |
   attacker can forge a valid signature.
 cvss_v3: 5.3
 unaffected_versions:
-- "< 0.5.1"
+  - "< 0.5.1"
 patched_versions:
-- ">= 1.9.4"
+  - ">= 1.9.4"
diff --git a/gems/json-jwt/CVE-2019-18848.yml b/gems/json-jwt/CVE-2019-18848.yml
index 3f1783f74f..05ebf2fc43 100644
--- a/gems/json-jwt/CVE-2019-18848.yml
+++ b/gems/json-jwt/CVE-2019-18848.yml
@@ -4,12 +4,12 @@ cve: 2019-18848
 ghsa: cff7-6h4q-q5pj
 url: https://github.com/nov/json-jwt/commit/ada16e772906efdd035e3df49cb2ae372f0f948a
 date: 2019-11-14
-title: |
-  json-jwt improper input validation due to lack of element count when
-  splitting string
+title:
+  json-jwt improper input validation due to lack of element count when splitting
+  string
 description: |
   The json-jwt gem before 1.11.0 for Ruby lacks an element count during
   the splitting of a JWE string.
 cvss_v3: 7.5
 patched_versions:
-- '>= 1.11.0'
+  - ">= 1.11.0"
diff --git a/gems/json-jwt/CVE-2023-51774.yml b/gems/json-jwt/CVE-2023-51774.yml
new file mode 100644
index 0000000000..5f32f987d7
--- /dev/null
+++ b/gems/json-jwt/CVE-2023-51774.yml
@@ -0,0 +1,21 @@
+---
+gem: json-jwt
+cve: 2023-51774
+ghsa: c8v6-786g-vjx6
+url: https://github.com/P3ngu1nW/CVE_Request/blob/main/novjson-jwt.md
+title: json-jwt allows bypass of identity checks via a sign/encryption confusion attack
+date: 2024-02-29
+description: |
+  The json-jwt (aka JSON::JWT) gem versions 1.16.5 and below sometimes allows
+  bypass of identity checks via a sign/encryption confusion attack.
+  For example, JWE can sometimes be used to bypass JSON::JWT.decode.
+patched_versions:
+  - "~> 1.15.3, >= 1.15.3.1"
+  - ">= 1.16.6"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-51774
+    - https://github.com/P3ngu1nW/CVE_Request/blob/main/novjson-jwt.md
+    - https://github.com/advisories/GHSA-c8v6-786g-vjx6
+# no CVSS score yet. advisory was published before version 1.16.4 was released.
+# versions 1.16.4 and 1.16.5 do not seem patched.
diff --git a/gems/json/CVE-2013-0269.yml b/gems/json/CVE-2013-0269.yml
index 60e0016ee3..a35b656260 100644
--- a/gems/json/CVE-2013-0269.yml
+++ b/gems/json/CVE-2013-0269.yml
@@ -2,10 +2,12 @@
 gem: json
 cve: 2013-0269
 osvdb: 101137
+ghsa: x457-cw4h-hq5f
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0269
-title: 'CVE-2013-0269 rubygem-json: Denial of Service and SQL Injection'
+title: "CVE-2013-0269 rubygem-json: Denial of Service and SQL Injection"
 date: 2013-02-12
-description: The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7
+description: |
+  The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7
   for Ruby allows remote attackers to cause a denial of service (resource consumption)
   or bypass the mass assignment protection mechanism via a crafted JSON document that
   triggers the creation of arbitrary Ruby symbols or certain internal objects, as
@@ -13,6 +15,6 @@ description: The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7
   Object Creation Vulnerability."
 cvss_v2: 9.0
 patched_versions:
-- ~> 1.5.5
-- ~> 1.6.8
-- '>= 1.7.7'
+  - "~> 1.5.5"
+  - "~> 1.6.8"
+  - ">= 1.7.7"
diff --git a/gems/json/CVE-2020-10663.yml b/gems/json/CVE-2020-10663.yml
index 007225f2e7..4fb9f2d2db 100644
--- a/gems/json/CVE-2020-10663.yml
+++ b/gems/json/CVE-2020-10663.yml
@@ -27,9 +27,9 @@ description: |
   security consequences depending upon the application code.
 cvss_v3: 7.5
 patched_versions:
-- ">= 2.3.0"
+  - ">= 2.3.0"
 related:
   cve:
-  - 2013-0269
+    - 2013-0269
   url:
-  - https://groups.google.com/forum/#!topic/ruby-security-ann/ermX1eQqqKA
+    - https://groups.google.com/forum/#!topic/ruby-security-ann/ermX1eQqqKA
diff --git a/gems/json/CVE-2025-27788.yml b/gems/json/CVE-2025-27788.yml
new file mode 100644
index 0000000000..5d255c3300
--- /dev/null
+++ b/gems/json/CVE-2025-27788.yml
@@ -0,0 +1,34 @@
+---
+gem: json
+cve: 2025-27788
+ghsa: 9m3q-rhmv-5q44
+url: https://github.com/ruby/json/security/advisories/GHSA-9m3q-rhmv-5q44
+title: Out-of-bounds Read in Ruby JSON Parser
+date: 2025-03-12
+description: |
+  ### Impact
+
+  A specially crafted document could cause an out of bound read,
+  most likely resulting in a crash.
+
+  Versions 2.10.0 and 2.10.1 are impacted. Older versions are not.
+
+  ### Patches
+
+  Version 2.10.2 fixes the problem.
+
+  ### Workarounds
+
+  None.
+cvss_v3: 7.5
+unaffected_versions:
+  - "< 2.10.0"
+patched_versions:
+  - ">= 2.10.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-27788
+    - https://github.com/ruby/json/security/advisories/GHSA-9m3q-rhmv-5q44
+    - https://github.com/ruby/json/releases/tag/v2.10.2
+    - https://github.com/ruby/json/commit/c56db31f800d5d508389793e69682f99749dbadf
+    - https://github.com/advisories/GHSA-9m3q-rhmv-5q44
diff --git a/gems/json/OSVDB-101157.yml b/gems/json/OSVDB-101157.yml
index e1fb0f51a2..be19f4993c 100644
--- a/gems/json/OSVDB-101157.yml
+++ b/gems/json/OSVDB-101157.yml
@@ -1,7 +1,7 @@
 ---
 gem: json
 osvdb: 101157
-url: http://osvdb.org/show/osvdb/101157
+url: https://security.snyk.io/vuln/SNYK-RUBY-JSON-20000
 title: json Gem for Ruby Data Handling Stack Buffer Overflow
 date: 2007-05-21
 description: |
@@ -11,4 +11,8 @@ description: |
   overflow, resulting in a denial of service or potentially allowing the
   execution of arbitrary code.
 patched_versions:
-- '>= 1.1.0'
+  - ">= 1.1.0"
+related:
+  url:
+    - https://security.snyk.io/vuln/SNYK-RUBY-JSON-20000
+    - http://osvdb.org/show/osvdb/101157
diff --git a/gems/jwe/CVE-2025-54887.yml b/gems/jwe/CVE-2025-54887.yml
new file mode 100644
index 0000000000..038c354917
--- /dev/null
+++ b/gems/jwe/CVE-2025-54887.yml
@@ -0,0 +1,46 @@
+---
+gem: jwe
+cve: 2025-54887
+ghsa: c7p4-hx26-pr73
+url: https://github.com/jwt/ruby-jwe/security/advisories/GHSA-c7p4-hx26-pr73
+title: JWE is missing AES-GCM authentication tag validation in encrypted JWE
+date: 2025-08-07
+description: |
+  ### Overview
+
+  The authentication tag of encrypted JWEs can be brute forced,
+  which may result in loss of confidentiality for those JWEs and
+  provide ways to craft arbitrary JWEs.
+
+  ### Impact
+
+  - JWEs can be modified to decrypt to an arbitrary value
+  - JWEs can be decrypted by observing parsing differences
+  - The GCM internal
+    [GHASH key](https://en.wikipedia.org/wiki/Galois/Counter_Mode)
+    can be recovered
+
+  ### Am I Affected?
+
+  You are affected by this vulnerability even if you do not
+  use an `AES-GCM` encryption algorithm for your JWEs.
+
+  ### Patches
+
+  The version 1.1.1 fixes the issue by adding the tag length check for the `AES-GCM` algorithm.
+
+  **Important:** As the [GHASH key](https://en.wikipedia.org/wiki/Galois/Counter_Mode)
+  could have leaked, you must rotate the encryption keys after
+  upgrading to version 1.1.1.
+
+  ### References
+
+  [Félix Charette talk at NorthSec 2025 about the issue](https://www.youtube.com/watch?v=9IT659uUXfs&t=15830s)
+cvss_v3: 9.1
+patched_versions:
+  - ">= 1.1.1"
+related:
+  url:
+    - https://github.com/jwt/ruby-jwe/security/advisories/GHSA-c7p4-hx26-pr73
+    - https://github.com/jwt/ruby-jwe/releases/tag/v1.1.1
+    - https://github.com/advisories/GHSA-c7p4-hx26-pr73
diff --git a/gems/kafo/CVE-2014-0135.yml b/gems/kafo/CVE-2014-0135.yml
index c11a01bf32..ea0828b3d4 100644
--- a/gems/kafo/CVE-2014-0135.yml
+++ b/gems/kafo/CVE-2014-0135.yml
@@ -2,14 +2,20 @@
 gem: kafo
 cve: 2014-0135
 osvdb: 106826
+ghsa: hxvp-655x-xxqv
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-0135
 title: 'CVE-2014-0135 rubygem-kafo: temporary file creation vulnerability when creating
   /tmp/default_values.yaml'
 date: 2014-03-13
-description: Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable
+description: |
+  Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable
   permissions for default_values.yaml, which allows local users to obtain passwords
   and other sensitive information by reading the file.
 cvss_v2: 1.9
 patched_versions:
-- ~> 0.3.17
-- '>= 0.5.2'
+  - "~> 0.3.17"
+  - ">= 0.5.2"
+related:
+  url:
+    - https://github.com/rubysec/ruby-advisory-db/issues/238
+    - https://sca.analysiscenter.veracode.com/vulnerability-database/security/world-readable-permissions-as-default/ruby/sid-740/summary
diff --git a/gems/kajam/CVE-2014-4999.yml b/gems/kajam/CVE-2014-4999.yml
index 61d5d7b8a3..fc043b67c9 100644
--- a/gems/kajam/CVE-2014-4999.yml
+++ b/gems/kajam/CVE-2014-4999.yml
@@ -2,6 +2,7 @@
 gem: kajam
 cve: 2014-4999
 osvdb: 108529
+ghsa: 4ph7-5c44-pppv
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-4999
 title: kajam Gem for Ruby /dataset/lib/dataset/database/postgresql.rb Process List
   Local Plaintext Password Disclosure
@@ -11,3 +12,4 @@ description: |
   /dataset/lib/dataset/database/postgresql.rb that is triggered as the program
   exposes the MySQL or PostgreSQL password in the process list. This may allow
   a local attacker to gain access to password information.
+cvss_v3: 7.8
diff --git a/gems/kajam/OSVDB-108530.yml b/gems/kajam/OSVDB-108530.yml
index 3de4524431..c30ba58227 100644
--- a/gems/kajam/OSVDB-108530.yml
+++ b/gems/kajam/OSVDB-108530.yml
@@ -1,12 +1,18 @@
 ---
 gem: kajam
 osvdb: 108530
-url: http://osvdb.org/show/osvdb/108530
-title: kajam Gem for Ruby /dataset/lib/dataset/database/postgresql.rb Metacharacter
-  Handling Remote Command Execution
+url: https://security.snyk.io/vuln/SNYK-RUBY-KAJAM-20171
+title: kajam Gem for Ruby /dataset/lib/dataset/database/postgresql.rb
+  Metacharacter Handling Remote Command Execution
 date: 2014-06-30
 description: |
   kajam Gem for Ruby contains a flaw in
-  /dataset/lib/dataset/database/postgresql.rb that is triggered when handling
-  metacharacters. This may allow a remote attacker to execute arbitrary
-  commands.
+  /dataset/lib/dataset/database/postgresql.rb that is triggered
+  when handling metacharacters. This may allow a remote attacker
+  to execute arbitrary commands.
+notes: "Never patched"
+related:
+  url:
+    - https://security.snyk.io/vuln/SNYK-RUBY-KAJAM-20171
+    - https://my.diffend.io/gems/kajam/1.0.3.rc2
+    - http://osvdb.org/show/osvdb/108530
diff --git a/gems/kaminari/CVE-2020-11082.yml b/gems/kaminari/CVE-2020-11082.yml
index 91d65dce54..b55686589a 100644
--- a/gems/kaminari/CVE-2020-11082.yml
+++ b/gems/kaminari/CVE-2020-11082.yml
@@ -5,7 +5,7 @@ ghsa: r5jw-62xg-j433
 url: https://github.com/kaminari/kaminari/security/advisories/GHSA-r5jw-62xg-j433
 date: 2020-05-28
 title: Cross-Site Scripting in Kaminari via `original_script_name` parameter
-description: |-
+description: |
   ### Impact
   There was a vulnerability in versions of Kaminari that would allow an attacker to inject arbitrary code into pages with pagination links.
 
@@ -29,4 +29,4 @@ description: |-
   ```
 cvss_v3: 6.4
 patched_versions:
-- '>= 1.2.1'
+  - ">= 1.2.1"
diff --git a/gems/kaminari/CVE-2024-32978.yml b/gems/kaminari/CVE-2024-32978.yml
new file mode 100644
index 0000000000..11f2124b49
--- /dev/null
+++ b/gems/kaminari/CVE-2024-32978.yml
@@ -0,0 +1,63 @@
+---
+gem: kaminari
+cve: 2024-32978
+ghsa: 7r3j-qmr4-jfpj
+url: https://nvd.nist.gov/vuln/detail/CVE-2024-32978
+title: Insecure File Permissions vulnerability in kaminari
+date: 2024-05-27
+description: |
+  kaminari versions prior to 0.16.2 are vulnerable to an Insecure File
+  Permissions vulnerability, where certain files within the kaminari gem have
+  insecure file permissions.
+
+  Versions Affected: < 0.16.2
+  Fixed Versions: >= 0.16.2
+
+  # Impact
+
+  An attacker with local access could write arbitrary code to the affected files
+  resulting in arbitrary code execution.
+
+  # Releases
+
+  The fixed releases are available at the normal locations.
+
+  # Workarounds
+
+  Manually set the permissions of the affected files to `644`.
+
+  ## All Affected Versions:
+
+  ```
+  lib/kaminari/models/page_scope_methods.rb
+  ```
+
+  ## Version 0.15.0 and 0.15.1:
+
+  ```
+  spec/models/mongo_mapper/mongo_mapper_spec.rb
+  ```
+
+  ## Version 0.16.0:
+
+  ```
+  spec/models/mongo_mapper/mongo_mapper_spec.rb
+  spec/models/mongoid/mongoid_spec.rb
+  ```
+
+  ## Version 0.16.1:
+
+  ```
+  spec/models/active_record/scopes_spec.rb
+  spec/models/mongo_mapper/mongo_mapper_spec.rb
+  spec/models/mongoid/mongoid_spec.rb
+  gemfiles/data_mapper_12.gemfile
+  gemfiles/active_record_32.gemfile
+  ```
+
+cvss_v3: 6.6
+patched_versions:
+  - ">= 0.16.2"
+related:
+  url:
+    - https://github.com/kaminari/kaminari/security/advisories/GHSA-7r3j-qmr4-jfpj
diff --git a/gems/karo/CVE-2014-10075.yml b/gems/karo/CVE-2014-10075.yml
new file mode 100644
index 0000000000..b6fe46ace6
--- /dev/null
+++ b/gems/karo/CVE-2014-10075.yml
@@ -0,0 +1,33 @@
+---
+gem: karo
+library: rubygems
+framework: rubygems
+platform: rubygems
+cve: 2014-10075
+osvdb: 108573
+ghsa: qfwq-chf4-jvwg
+url: https://nvd.nist.gov/vuln/detail/CVE-2014-10075
+title: karo Gem for Ruby db.rb Metacharacter Handling Remote Command Execution
+date: 2014-06-30
+description: |
+  The karo gem 2.3.8 for Ruby allows Remote command injection via
+  the host field.
+
+  karo Gem for Ruby contains a flaw in db.rb that is triggered when handling
+  metacharacters. This may allow a remote attacker to execute arbitrary
+  commands.
+
+  * CWE-77 - Improper Neutralization of Special Elements used
+    in a Command ('Command Injection')
+
+  * Severity: CRITICAL - CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
+cvss_v3: 9.8
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-10075
+    - http://www.vapid.dhs.org/advisories/karo-2.3.8.html
+    - http://www.vapidlabs.com/advisory.php?v=63
+    - http://osvdb.org/show/osvdb/108573
+    - https://github.com/advisories/GHSA-qf67-vmxx-gp4jGHSA-qfwq-chf4-jvwg.json
+    - https://github.com/rahult/karo
+    - https://github.com/rahult/karo/blob/master/CHANGELOG.md
diff --git a/gems/karo/OSVDB-108573.yml b/gems/karo/OSVDB-108573.yml
deleted file mode 100644
index 0f7384f830..0000000000
--- a/gems/karo/OSVDB-108573.yml
+++ /dev/null
@@ -1,10 +0,0 @@
----
-gem: karo
-osvdb: 108573
-url: http://osvdb.org/show/osvdb/108573
-title: karo Gem for Ruby db.rb Metacharacter Handling Remote Command Execution
-date: 2014-06-30
-description: |
-  karo Gem for Ruby contains a flaw in db.rb that is triggered when handling
-  metacharacters. This may allow a remote attacker to execute arbitrary
-  commands.
diff --git a/gems/karteek-docsplit/CVE-2013-1933.yml b/gems/karteek-docsplit/CVE-2013-1933.yml
index 5ca5f437a6..5b8bb9b2f9 100644
--- a/gems/karteek-docsplit/CVE-2013-1933.yml
+++ b/gems/karteek-docsplit/CVE-2013-1933.yml
@@ -2,11 +2,13 @@
 gem: karteek-docsplit
 cve: 2013-1933
 osvdb: 92117
+ghsa: 4fvg-pwv7-v54g
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1933
 title: Karteek Docsplit Gem for Ruby text_extractor.rb File Name Shell Metacharacter
   Injection Arbitrary Command Execution
 date: 2013-04-08
-description: Karteek Docsplit Gem for Ruby contains a flaw that is due to the program
+description: |
+  Karteek Docsplit Gem for Ruby contains a flaw that is due to the program
   failing to properly sanitize input passed to text_extractor.rb. With a specially
   crafted file name that contains shell metacharacters, a context-dependent attacker
   can execute arbitrary commands
diff --git a/gems/katello/CVE-2012-3503.yml b/gems/katello/CVE-2012-3503.yml
new file mode 100644
index 0000000000..a370b71058
--- /dev/null
+++ b/gems/katello/CVE-2012-3503.yml
@@ -0,0 +1,29 @@
+---
+gem: katello
+cve: 2012-3503
+ghsa: 5xv2-q475-rwrh
+url: https://github.com/advisories/GHSA-5xv2-q475-rwrh
+title: Katello uses hard coded credential
+date: 2022-05-17
+description: |
+  The installation script in Katello 1.0 and earlier does not properly
+  generate the `Application.config.secret_token` value, which causes
+  each default installation to have the same secret token, and allows
+  remote attackers to authenticate to the CloudForms System Engine
+  web interface as an arbitrary user by creating a cookie using the
+  default `secret_token`.
+cvss_v2: 6.5
+cvss_v3: 9.8
+patched_versions:
+  - "~> 1.0.6"
+  - ">= 1.1.7"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-3503
+    - https://github.com/Katello/katello/pull/499
+    - https://github.com/Katello/katello/commit/7c256fef9d75029d0ffff58ff1dcda915056d3a3
+    - http://rhn.redhat.com/errata/RHSA-2012-1186.html
+    - http://rhn.redhat.com/errata/RHSA-2012-1187.html
+    - https://web.archive.org/web/20140806122239/http://secunia.com/advisories/50344
+    - https://web.archive.org/web/20200229120740/http://www.securityfocus.com/bid/55140
+    - https://github.com/advisories/GHSA-5xv2-q475-rwrh
diff --git a/gems/katello/CVE-2016-3072.yml b/gems/katello/CVE-2016-3072.yml
new file mode 100644
index 0000000000..0b589ba4a6
--- /dev/null
+++ b/gems/katello/CVE-2016-3072.yml
@@ -0,0 +1,20 @@
+---
+gem: katello
+cve: 2016-3072
+ghsa: 527r-mfmj-prqf
+url: https://github.com/Katello/katello/pull/6051
+title: Katello SQL Injection vulnerabilities
+date: 2022-05-14
+description: |
+  Multiple SQL injection vulnerabilities in the scoped_search function
+  in app/controllers/katello/api/v2/api_controller.rb in Katello allow remote authenticated
+  users to execute arbitrary SQL commands via the (1) sort_by or (2) sort_order parameter.
+cvss_v3: 8.8
+patched_versions:
+  - ">= 2.4.3"
+related:
+  url:
+    - https://access.redhat.com/errata/RHSA-2016:1083
+    - https://bugzilla.redhat.com/show_bug.cgi?id=1322050
+    - https://github.com/Katello/katello/commit/5645ed4365980a34e30a9c57fe0793dff729e8e4
+    - https://access.redhat.com/security/cve/CVE-2016-3072
diff --git a/gems/katello/CVE-2017-2662.yml b/gems/katello/CVE-2017-2662.yml
new file mode 100644
index 0000000000..f64fadd102
--- /dev/null
+++ b/gems/katello/CVE-2017-2662.yml
@@ -0,0 +1,20 @@
+---
+gem: katello
+cve: 2017-2662
+ghsa: cpv6-pfq6-j2v7
+url: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2662
+title: katello Improper Privilege Management vulnerability
+date: 2022-05-13
+description: |
+  A flaw was found in Foreman's katello plugin version 3.4.5. After setting
+  a new role to allow restricted access on a repository with a filter (filter set
+  on the Product Name), the filter is not respected when the actions are done via
+  hammer using the repository id.
+cvss_v3: 4.3
+patched_versions:
+  - ">= 3.17.0.rc1"
+related:
+  url:
+    - https://projects.theforeman.org/issues/18838
+    - https://github.com/Katello/katello/pull/8772
+    - https://github.com/Katello/katello/commit/853260e3e9f94179d5881199e7885d1c08e600f6
diff --git a/gems/katello/CVE-2018-14623.yml b/gems/katello/CVE-2018-14623.yml
new file mode 100644
index 0000000000..a9c325552d
--- /dev/null
+++ b/gems/katello/CVE-2018-14623.yml
@@ -0,0 +1,18 @@
+---
+gem: katello
+cve: 2018-14623
+ghsa: jx5v-788g-qw58
+url: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14623
+title: katello SQL Injection vulnerability
+date: 2022-05-13
+description: |
+  A SQL injection flaw was found in katello's errata-related API. An authenticated
+  remote attacker can craft input data to force a malformed SQL query to the backend
+  database, which will leak internal IDs. This is issue is related to an incomplete
+  fix for CVE-2016-3072. Version 3.10 and older is vulnerable.
+cvss_v3: 4.3
+related:
+  url:
+    - https://web.archive.org/web/20200227100255/http://www.securityfocus.com/bid/106224
+  ghsa:
+    - 527r-mfmj-prqf
diff --git a/gems/katello/CVE-2018-16887.yml b/gems/katello/CVE-2018-16887.yml
new file mode 100644
index 0000000000..7c9796c776
--- /dev/null
+++ b/gems/katello/CVE-2018-16887.yml
@@ -0,0 +1,20 @@
+---
+gem: katello
+cve: 2018-16887
+ghsa: mhhc-r88h-2qrm
+url: https://access.redhat.com/errata/RHSA-2019:1222
+title: katello Cross-site Scripting vulnerability
+date: 2022-05-14
+description: |
+  A cross-site scripting (XSS) flaw was found in the katello component
+  of Satellite. An attacker with privilege to create/edit organizations and locations
+  is able to execute a XSS attacks against other users through the Subscriptions or
+  the Red Hat Repositories wizards. This can possibly lead to malicious code execution
+  and extraction of the anti-CSRF token of higher privileged users. Versions before
+  3.9.0 are vulnerable.
+cvss_v3: 5.4
+patched_versions:
+  - ">= 3.9.0"
+related:
+  url:
+    - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16887
diff --git a/gems/katello/CVE-2019-14825.yml b/gems/katello/CVE-2019-14825.yml
new file mode 100644
index 0000000000..10b4370a18
--- /dev/null
+++ b/gems/katello/CVE-2019-14825.yml
@@ -0,0 +1,24 @@
+---
+gem: katello
+cve: 2019-14825
+ghsa: m4wh-848j-9w2r
+url: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14825
+title: Katello cleartext password storage issue
+date: 2022-05-24
+description: |
+  A cleartext password storage issue was discovered in Katello, versions
+  3.x.x.x before katello 3.12.2. Registry credentials used during container image
+  discovery were inadvertently logged without being masked. This flaw could expose
+  the registry credentials to other privileged users.
+cvss_v3: 2.7
+patched_versions:
+  - ">= 3.12.2"
+related:
+  url:
+    - https://github.com/Katello/katello/pull/8244
+    - https://github.com/Katello/katello/pull/8253
+    - https://github.com/Katello/katello/commit/332484232b66b7907a8104a19ea97eb697b75c79
+    - https://github.com/Katello/katello/commit/4eefa678a905140620ca8b390d48fe318d36e4ea
+    - https://bugzilla.redhat.com/show_bug.cgi?id=1730668
+    - https://github.com/Katello/katello/commits/3.12.2
+    - https://projects.theforeman.org/issues/27485
diff --git a/gems/kcapifony/CVE-2014-5001.yml b/gems/kcapifony/CVE-2014-5001.yml
index 544da09add..103f0c5522 100644
--- a/gems/kcapifony/CVE-2014-5001.yml
+++ b/gems/kcapifony/CVE-2014-5001.yml
@@ -2,10 +2,19 @@
 gem: kcapifony
 cve: 2014-5001
 osvdb: 108571
+ghsa: 6fcq-3cm2-j3j5
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-5001
 title: kcapifony Gem for Ruby /lib/ksymfony1.rb Process List Local Plaintext Password
   Disclosure
 date: 2014-06-30
-description: kcapifony Gem for Ruby contains a flaw in /lib/ksymfony1.rb that is triggered
+description: |
+  kcapifony Gem for Ruby contains a flaw in /lib/ksymfony1.rb that is triggered
   as the program displays password information in plaintext in the process list. This
   may allow a local attacker to gain access to password information.
+cvss_v2: 2.1
+cvss_v3: 7.8
+notes: "Never patched"
+related:
+  url:
+    - http://www.vapid.dhs.org/advisories/kcapifony-2.1.6.html
+    - http://www.vapidlabs.com/advisory.php?v=65
diff --git a/gems/kcapifony/OSVDB-108572.yml b/gems/kcapifony/OSVDB-108572.yml
index 0ac6298028..16c328dfc0 100644
--- a/gems/kcapifony/OSVDB-108572.yml
+++ b/gems/kcapifony/OSVDB-108572.yml
@@ -1,10 +1,19 @@
 ---
 gem: kcapifony
 osvdb: 108572
-url: http://osvdb.org/show/osvdb/108572
-title: kcapifony Gem for Ruby /lib/ksymfony1.rb Metacharacter Handling Remote Command
-  Execution
+url: https://www.mend.io/vulnerability-database/WS-2014-0019
+title: kcapifony Gem for Ruby /lib/ksymfony1.rb Metacharacter
+  Handling Remote Command Execution
 date: 2014-06-30
-description: kcapifony Gem for Ruby contains a flaw in /lib/ksymfony1.rb that is triggered
-  when handling metacharacters. This may allow a remote attacker to execute arbitrary
-  commands.
+description: |
+  kcapifony Gem for Ruby contains a flaw in /lib/ksymfony1.rb that
+  is triggered when handling metacharacters. This may allow a remote
+  attacker to execute arbitrary commands.
+notes: "Never patched"
+related:
+  url:
+    - https://www.mend.io/vulnerability-database/WS-2014-0019
+    - https://github.com/Kunstmaan/kCapifony/blob/master/lib/ksymfony1.rb
+    - http://www.vapid.dhs.org/advisories/kcapifony-2.1.6.html
+    - http://www.vapidlabs.com/advisory.php?v=65
+    - http://osvdb.org/show/osvdb/108572
diff --git a/gems/kelredd-pruview/CVE-2013-1947.yml b/gems/kelredd-pruview/CVE-2013-1947.yml
index 3f81d3e02e..8d38e537a2 100644
--- a/gems/kelredd-pruview/CVE-2013-1947.yml
+++ b/gems/kelredd-pruview/CVE-2013-1947.yml
@@ -2,11 +2,13 @@
 gem: kelredd-pruview
 cve: 2013-1947
 osvdb: 92228
+ghsa: 78j3-7wpm-qhvp
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1947
 title: kelredd-pruview Gem for Ruby /lib/pruview/document.rb File Name Shell Metacharacter
   Injection Arbitrary Command Execution
 date: 2013-04-04
-description: kelredd-pruview Gem for Ruby contains a flaw in /lib/pruview/document.rb.
+description: |
+  kelredd-pruview Gem for Ruby contains a flaw in /lib/pruview/document.rb.
   The issue is triggered during the handling of a specially crafted file name that
   contains injected shell metacharacters. This may allow a context-dependent attacker
   to potentially execute arbitrary commands.
diff --git a/gems/keynote/CVE-2017-20159.yml b/gems/keynote/CVE-2017-20159.yml
new file mode 100644
index 0000000000..8a946ca297
--- /dev/null
+++ b/gems/keynote/CVE-2017-20159.yml
@@ -0,0 +1,22 @@
+---
+gem: keynote
+cve: 2017-20159
+ghsa: 399p-vq28-5hg8
+url: https://github.com/rf-/keynote/commit/05be4356b0a6ca7de48da926a9b997beb5ffeb4a
+title: keynote Cross-site Scripting vulnerability
+date: 2022-12-31
+description: |
+  A vulnerability was found in rf Keynote up to 0.x. It has been rated
+  as problematic. Affected by this issue is some unknown functionality of the file
+  lib/keynote/rumble.rb. The manipulation of the argument value leads to cross site
+  scripting. The attack may be launched remotely. Upgrading to version 1.0.0 can address
+  this issue. The name of the patch is 05be4356b0a6ca7de48da926a9b997beb5ffeb4a. It
+  is recommended to upgrade the affected component. VDB-217142 is the identifier assigned
+  to this vulnerability.
+cvss_v3: 6.1
+patched_versions:
+  - ">= 1.0.0"
+related:
+  url:
+    - https://github.com/rf-/keynote/releases/tag/v1.0.0
+    - https://vuldb.com/?id.217142
diff --git a/gems/kitchen-terraform/CVE-2023-30618.yml b/gems/kitchen-terraform/CVE-2023-30618.yml
new file mode 100644
index 0000000000..31cc7713bc
--- /dev/null
+++ b/gems/kitchen-terraform/CVE-2023-30618.yml
@@ -0,0 +1,33 @@
+---
+gem: kitchen-terraform
+cve: 2023-30618
+ghsa: 65g2-x53q-cmf6
+url: https://github.com/newcontext-oss/kitchen-terraform/security/advisories/GHSA-65g2-x53q-cmf6
+title: Sensitive Terraform Output Values Printed At Info Logging Level In Kitchen-Terraform
+date: 2023-04-24
+description: |
+  Summary
+    Kitchen-Terraform v7.0.0 introduced a regression which caused all
+    Terraform output values, including sensitive values, to be printed
+    at the `info` logging level during the `kitchen converge` action.
+    Prior to v7.0.0, the output values were printed at the `debug` level
+    to avoid writing sensitive values to the terminal by default.
+
+  ### Original Report
+    @brettcurtis:
+      Hopefully, I'm not doing something stupid here, but I'm seeing
+      sensitive outputs printed in the kitchen output. You can check
+      this action for an example: https://github.com/osinfra-io/terraform-google-project/actions/runs/4700065515/jobs/8334277309#step:5:215
+
+      It's not really a sensitive value just used it as an example.
+cvss_v3: 3.2
+unaffected_versions:
+  - "< 7.0.0"
+patched_versions:
+  - ">= 7.0.1"
+related:
+  url:
+    - https://github.com/newcontext-oss/kitchen-terraform/security/advisories/GHSA-65g2-x53q-cmf6
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-30618
+    - https://github.com/newcontext-oss/kitchen-terraform/commit/3d20d60e7a891e2dd747df995a31226fa0b4ac48
+    - https://github.com/advisories/GHSA-65g2-x53q-cmf6
diff --git a/gems/kompanee-recipes/OSVDB-108593.yml b/gems/kompanee-recipes/OSVDB-108593.yml
index 20338859af..2a0a7e1fcd 100644
--- a/gems/kompanee-recipes/OSVDB-108593.yml
+++ b/gems/kompanee-recipes/OSVDB-108593.yml
@@ -1,9 +1,9 @@
 ---
 gem: kompanee-recipes
 osvdb: 108593
-url: http://osvdb.org/show/osvdb/108593
-title: kompanee-recipes Gem for Ruby /lib/kompanee-recipes/heroku.rb Multiple Variable
-  Handling Remote Command Execution Weakness
+url: https://www.openwall.com/lists/oss-security/2014/07/07/17
+title: kompanee-recipes Gem for Ruby /lib/kompanee-recipes/heroku.rb
+  Multiple Variable Handling Remote Command Execution Weakness
 date: 2014-06-30
 description: |
   kompanee-recipes Gem for Ruby contains a flaw in
@@ -11,3 +11,13 @@ description: |
   metacharacters passed via the 'password', 'user', 'deploy_name', and
   'application' variables. This may allow a remote attacker to execute
   arbitrary commands.
+notes: "Never patched"
+related:
+  url:
+    - https://www.openwall.com/lists/oss-security/2014/07/07/17
+    - https://seclists.org/oss-sec/2014/q3/162
+    - https://www.mend.io/vulnerability-database/WS-2014-0025
+    - https://security.snyk.io/vuln/SNYK-RUBY-KOMPANEERECIPES-20177
+    - http://www.vapid.dhs.org/advisories/kompanee-recipes-0.1.4.html
+    - http://www.vapidlabs.com/advisory.php?v=67
+    - http://osvdb.org/show/osvdb/108593
diff --git a/gems/kramdown/CVE-2020-14001.yml b/gems/kramdown/CVE-2020-14001.yml
index ba93578336..5db8bce6f1 100644
--- a/gems/kramdown/CVE-2020-14001.yml
+++ b/gems/kramdown/CVE-2020-14001.yml
@@ -14,4 +14,4 @@ description: |
 cvss_v2: 7.5
 cvss_v3: 9.8
 patched_versions:
-- '>= 2.3.0'
+  - ">= 2.3.0"
diff --git a/gems/kramdown/CVE-2021-28834.yml b/gems/kramdown/CVE-2021-28834.yml
index 1cce8816c1..e9ad72c5cc 100644
--- a/gems/kramdown/CVE-2021-28834.yml
+++ b/gems/kramdown/CVE-2021-28834.yml
@@ -10,12 +10,12 @@ description: |
   namespace, and thus arbitrary classes can be instantiated.
 cvss_v3: 9.8
 patched_versions:
-- '>= 2.3.1'
+  - ">= 2.3.1"
 
 unaffected_versions:
-- < 1.16.0
+  - "< 1.16.0"
 
 related:
   url:
-  - https://github.com/gettalong/kramdown/pull/708
-  - https://about.gitlab.com/releases/2021/03/17/security-release-gitlab-13-9-4-released/#remote-code-execution-via-unsafe-user-controlled-markdown-rendering-options
+    - https://github.com/gettalong/kramdown/pull/708
+    - https://about.gitlab.com/releases/2021/03/17/security-release-gitlab-13-9-4-released/#remote-code-execution-via-unsafe-user-controlled-markdown-rendering-options
diff --git a/gems/kredis/CVE-2023-27531.yml b/gems/kredis/CVE-2023-27531.yml
new file mode 100644
index 0000000000..73ec5427ef
--- /dev/null
+++ b/gems/kredis/CVE-2023-27531.yml
@@ -0,0 +1,49 @@
+---
+gem: kredis
+framework: rails
+cve: 2023-27531
+notes: CVE has be reserved, but not filled in.
+ghsa: h2wm-p2vg-6pw4
+url: https://discuss.rubyonrails.org/t/cve-2023-27531-possible-deserialization-of-untrusted-data-vulnerability-in-kredis-json/82467#post_1
+title: Possible Deserialization of Untrusted Data Vulnerability in Kredis JSON
+date: 2023-03-13
+description: |
+  There is a deserialization of untrusted data vulnerability in
+  the Kredis JSON deserialization code. This vulnerability has
+  been assigned the CVE identifier CVE-2023-27531.
+
+  'Not affected: None.'
+  'Versions Affected: All.'
+  'Fixed Versions: 1.3.0.1'
+
+  Impact
+    Carefully crafted JSON data processed by Kredis may result in
+    deserialization of untrusted data, potentially leading to
+    deserialization of unexpected objects in the system.
+
+    Any applications using Kredis with JSON are affected.
+
+  Releases
+    The fixed releases are available at the normal locations.
+
+  Workarounds
+    There are no feasible workarounds for this issue.
+
+  Patches
+    To aid users who aren’t able to upgrade immediately we have
+    provided patches for the two supported release series. They
+    are in git-am format and consist of a single changeset.
+
+    * 1-3-0-1-kredis.patch - Patch for 1.3.0 series
+cvss_v3: 5.3
+patched_versions:
+  - ">= 1.3.0.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-27531
+    - https://discuss.rubyonrails.org/t/cve-2023-27531-possible-deserialization-of-untrusted-data-vulnerability-in-kredis-json/82467#post_1
+    - https://github.com/rails/kredis/releases/tag/v1.3.0.1
+    - https://my.diffend.io/gems/kredis/1.3.0/1.3.0.1
+    - https://cve.report/CVE-2023-27531
+    - https://github.com/jasnow/gsd-database/blob/main/2023/27xxx/GSD-2023-27531.json
+    - https://github.com/advisories/GHSA-h2wm-p2vg-6pw4
diff --git a/gems/kubeclient/CVE-2022-0759.yml b/gems/kubeclient/CVE-2022-0759.yml
new file mode 100644
index 0000000000..66da34d0f2
--- /dev/null
+++ b/gems/kubeclient/CVE-2022-0759.yml
@@ -0,0 +1,21 @@
+---
+gem: kubeclient
+cve: 2022-0759
+ghsa: 69p3-xp37-f692
+url: https://github.com/ManageIQ/kubeclient/issues/554
+title: Improper Certificate Validation in kubeclient
+date: 2022-03-26
+description: |
+  A flaw was found in all versions of kubeclient up to (but not including)
+  v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig
+  files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient
+  ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications
+  that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle
+  attacks (MITM).
+cvss_v3: 8.1
+patched_versions:
+  - ">= 4.9.3"
+related:
+  url:
+    - https://github.com/ManageIQ/kubeclient/issues/555
+    - https://github.com/ManageIQ/kubeclient/pull/556
diff --git a/gems/lawn-login/CVE-2014-5000.yml b/gems/lawn-login/CVE-2014-5000.yml
index 6db8918f94..24e94a2dfc 100644
--- a/gems/lawn-login/CVE-2014-5000.yml
+++ b/gems/lawn-login/CVE-2014-5000.yml
@@ -2,10 +2,13 @@
 gem: lawn-login
 cve: 2014-5000
 osvdb: 108576
+ghsa: rhgq-vv9x-j4p5
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-5000
 title: lawn-login Gem for Ruby /lib/lawn.rb Process Table Local Plaintext Password
   Disclosure
 date: 2014-06-30
-description: lawn-login Gem for Ruby contains a flaw in /lib/lawn.rb that is due to
+description: |
+  lawn-login Gem for Ruby contains a flaw in /lib/lawn.rb that is due to
   the application exposing password information in plaintext in the process table.
   This may allow a local attacker to gain access to password information.
+cvss_v3: 7.8
diff --git a/gems/ldap_fluff/CVE-2012-5604.yml b/gems/ldap_fluff/CVE-2012-5604.yml
index e4bfba3eda..4a7b3da1bd 100644
--- a/gems/ldap_fluff/CVE-2012-5604.yml
+++ b/gems/ldap_fluff/CVE-2012-5604.yml
@@ -2,13 +2,15 @@
 gem: ldap_fluff
 cve: 2012-5604
 osvdb: 90579
+ghsa: 9whh-582r-589h
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-5604
 title: 'CVE-2012-5604 rubygem-ldap_fluff: CloudForms authentication bypass when handling
   anonymous LDAP bind'
 date: 2012-12-04
-description: The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when
+description: |
+  The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when
   using Active Directory for authentication, allows remote attackers to bypass authentication
   via unspecified vectors.
 cvss_v2: 5.0
 patched_versions:
-- '>= 0.1.3'
+  - ">= 0.1.3"
diff --git a/gems/ldoce/CVE-2013-1911.yml b/gems/ldoce/CVE-2013-1911.yml
index e1fe0a2477..c0a8c0f1c4 100644
--- a/gems/ldoce/CVE-2013-1911.yml
+++ b/gems/ldoce/CVE-2013-1911.yml
@@ -2,11 +2,13 @@
 gem: ldoce
 cve: 2013-1911
 osvdb: 91870
+ghsa: g266-3crh-h7gj
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1911
 title: ldoce Gem for Ruby MP3 URL Shell Metacharacter Injection Arbitrary Command
   Execution
 date: 2013-04-01
-description: ldoce Gem for Ruby contains a flaw that is triggered during the handling
+description: |
+  ldoce Gem for Ruby contains a flaw that is triggered during the handling
   of a specially crafted URL or filename for MP3 files that have shell metacharacters
   injected in to it. This may allow a context-dependent attacker to execute arbitrary
   commands.
diff --git a/gems/lean-ruport/CVE-2014-4998.yml b/gems/lean-ruport/CVE-2014-4998.yml
index a233fcd078..c144672b0c 100644
--- a/gems/lean-ruport/CVE-2014-4998.yml
+++ b/gems/lean-ruport/CVE-2014-4998.yml
@@ -2,11 +2,14 @@
 gem: lean-ruport
 cve: 2014-4998
 osvdb: 108581
+ghsa: 5g7f-p7jg-v6mv
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-4998
 title: lean-ruport Gem for Ruby /test/tc_database.rb Process Table Local Plaintext
   MySQL Password Disclosure
 date: 2014-06-30
-description: lean-ruport Gem for Ruby contains a flaw in /test/tc_database.rb that
+description: |
+  lean-ruport Gem for Ruby contains a flaw in /test/tc_database.rb that
   is due to the application exposing MySQL password information in plaintext in the
   process table. This may allow a local attacker to gain access to MySQL password
   information.
+cvss_v3: 7.8
diff --git a/gems/lingq/OSVDB-108585.yml b/gems/lingq/OSVDB-108585.yml
index 1faa4fb929..fe9373bdea 100644
--- a/gems/lingq/OSVDB-108585.yml
+++ b/gems/lingq/OSVDB-108585.yml
@@ -1,8 +1,18 @@
 ---
 gem: lingq
 osvdb: 108585
-url: http://osvdb.org/show/osvdb/108585
-title: lingq Gem for Ruby client.rb Metacharacter Handling Remote Command Execution
+url: https://www.versioneye.com/Ruby/lingq/0.3.1
+title: lingq Gem for Ruby client.rb Metacharacter
+  Handling Remote Command Execution
 date: 2014-06-30
-description: lingq Gem for Ruby contains a flaw in client.rb that is triggered when
-  handling metacharacters. This may allow a remote attacker to execute arbitrary commands.
+description: |
+  lingq Gem for Ruby contains a flaw in client.rb that is triggered
+  when handling metacharacters. This may allow a remote attacker
+  to execute arbitrary commands.
+notes: "Never patched"
+related:
+  url:
+    - https://www.versioneye.com/Ruby/lingq/0.3.1
+    - http://www.vapid.dhs.org/advisories/lingq-0.3.1.html
+    - http://www.vapidlabs.com/advisory.php?v=71
+    - http://osvdb.org/show/osvdb/108585
diff --git a/gems/lita_coin/CVE-2019-15224.yml b/gems/lita_coin/CVE-2019-15224.yml
index 1fddd7f8e6..448969a7bd 100644
--- a/gems/lita_coin/CVE-2019-15224.yml
+++ b/gems/lita_coin/CVE-2019-15224.yml
@@ -11,8 +11,8 @@ description: |
 
   No unaffected version is known to exist, as the gem appears to have been entirely removed.
 unaffected_versions:
-- < 0.0.3
-- '> 0.0.3'
+  - "< 0.0.3"
+  - "> 0.0.3"
 related:
   url:
-  - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
+    - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
diff --git a/gems/lodash-rails/CVE-2018-16487.yml b/gems/lodash-rails/CVE-2018-16487.yml
new file mode 100644
index 0000000000..29c0591055
--- /dev/null
+++ b/gems/lodash-rails/CVE-2018-16487.yml
@@ -0,0 +1,32 @@
+---
+gem: lodash-rails
+cve: 2018-16487
+ghsa: 4xc9-xhrj-v574
+url: https://github.com/advisories/GHSA-4xc9-xhrj-v574
+title: Prototype Pollution in lodash
+date: 2019-02-07
+description: |
+  Versions of `lodash` before 4.17.11 are vulnerable to
+  prototype pollution.
+
+  The vulnerable functions are 'defaultsDeep', 'merge', and
+  'mergeWith' which allow a malicious user to modify the
+  prototype of `Object` via `{constructor: {prototype:
+  {...}}}` causing the addition or modification of an existing
+  property that will exist on all objects.
+
+  ## Recommendation
+
+  Update to version 4.17.11 or later.
+cvss_v2: 6.8
+cvss_v3: 5.6
+patched_versions:
+  - ">= 4.17.11"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-16487
+    - https://hackerone.com/reports/380873
+    - https://www.npmjs.com/advisories/782
+    - https://github.com/lodash/lodash/commit/90e6199a161b6445b01454517b40ef65ebecd2ad
+    - https://security.netapp.com/advisory/ntap-20190919-0004
+    - https://github.com/advisories/GHSA-4xc9-xhrj-v574
diff --git a/gems/lodash-rails/CVE-2018-3721.yml b/gems/lodash-rails/CVE-2018-3721.yml
new file mode 100644
index 0000000000..840e40c804
--- /dev/null
+++ b/gems/lodash-rails/CVE-2018-3721.yml
@@ -0,0 +1,32 @@
+---
+gem: lodash-rails
+cve: 2018-3721
+ghsa: fvqr-27wr-82fm
+url: https://github.com/advisories/GHSA-fvqr-27wr-82fm
+title: Prototype Pollution in lodash
+date: 2018-07-26
+description: |
+  Versions of `lodash` before 4.17.5 are vulnerable to
+  prototype pollution.
+
+  The vulnerable functions are 'defaultsDeep', 'merge', and
+  'mergeWith' which allow a malicious user to modify the
+  prototype of `Object` via `__proto__` causing the addition
+  or modification of an existing property that will exist
+  on all objects.
+
+  ## Recommendation
+
+  Update to version 4.17.5 or later."
+cvss_v2: 4.0
+cvss_v3: 6.5
+patched_versions:
+  - ">= 4.17.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-3721
+    - https://hackerone.com/reports/310443
+    - https://www.npmjs.com/advisories/577
+    - https://github.com/lodash/lodash/commit/d8e069cc3410082e44eb18fcf8e7f3d08ebe1d4a
+    - https://security.netapp.com/advisory/ntap-20190919-0004
+    - https://github.com/advisories/GHSA-fvqr-27wr-82fm
diff --git a/gems/lodash-rails/CVE-2019-1010266.yml b/gems/lodash-rails/CVE-2019-1010266.yml
new file mode 100644
index 0000000000..3b48de7077
--- /dev/null
+++ b/gems/lodash-rails/CVE-2019-1010266.yml
@@ -0,0 +1,26 @@
+---
+gem: lodash-rails
+cve: 2019-1010266
+ghsa: x5rq-j2xg-h7qm
+url: https://github.com/advisories/GHSA-x5rq-j2xg-h7qm
+title: Regular Expression Denial of Service (ReDoS) in lodash
+date: 2019-07-19
+description: |
+  lodash prior to 4.7.11 is affected by: CWE-400: Uncontrolled
+  Resource Consumption. The impact is: Denial of service. The
+  component is: Date handler. The attack vector is: Attacker
+  provides very long strings, which the library attempts
+  to match using a regular expression.
+
+  The fixed version is: 4.7.11.
+patched_versions:
+  - ">= 4.17.11"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2019-1010266
+    - https://github.com/lodash/lodash/issues/3359
+    - https://snyk.io/vuln/SNYK-JS-LODASH-73639
+    - https://github.com/lodash/lodash/commit/5c08f18d365b64063bfbfa686cbb97cdd6267347
+    - https://github.com/lodash/lodash/wiki/Changelog
+    - https://security.netapp.com/advisory/ntap-20190919-0004
+    - https://github.com/advisories/GHSA-x5rq-j2xg-h7qm
diff --git a/gems/lodash-rails/CVE-2019-10744.yml b/gems/lodash-rails/CVE-2019-10744.yml
new file mode 100644
index 0000000000..6840b9313a
--- /dev/null
+++ b/gems/lodash-rails/CVE-2019-10744.yml
@@ -0,0 +1,33 @@
+---
+gem: lodash-rails
+cve: 2019-10744
+ghsa: jf85-cpcp-j695
+url: https://github.com/advisories/GHSA-jf85-cpcp-j695
+title: Prototype Pollution in lodash
+date: 2019-07-10
+description: |
+  Versions of `lodash` before 4.17.12 are vulnerable to Prototype
+  Pollution.  The function `defaultsDeep` allows a malicious user
+  to modify the prototype of `Object` via
+  `{constructor: {prototype: {...}}}` causing the addition or
+  modification of an existing property that will exist on all objects.
+
+  ## Recommendation
+
+  Update to version 4.17.12 or later.
+cvss_v2: 6.4
+cvss_v3: 9.1
+patched_versions:
+  - ">= 4.17.12"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2019-10744
+    - https://github.com/lodash/lodash/pull/4336
+    - https://snyk.io/vuln/SNYK-JS-LODASH-450202
+    - https://www.npmjs.com/advisories/1065
+    - https://access.redhat.com/errata/RHSA-2019:3024
+    - https://support.f5.com/csp/article/K47105354
+    - https://www.oracle.com/security-alerts/cpujan2021.html
+    - https://www.oracle.com/security-alerts/cpuoct2020.html
+    - https://security.netapp.com/advisory/ntap-20191004-0005
+    - https://github.com/advisories/GHSA-jf85-cpcp-j695
diff --git a/gems/lodash-rails/CVE-2020-28500.yml b/gems/lodash-rails/CVE-2020-28500.yml
new file mode 100644
index 0000000000..cdfc9d6750
--- /dev/null
+++ b/gems/lodash-rails/CVE-2020-28500.yml
@@ -0,0 +1,60 @@
+---
+gem: lodash-rails
+cve: 2020-28500
+ghsa: 29mw-wpgm-hmr9
+url: https://github.com/advisories/GHSA-29mw-wpgm-hmr9
+title: Regular Expression Denial of Service (ReDoS) in lodash
+date: 2022-01-06
+description: |
+  All versions of package lodash prior to 4.17.21 are vulnerable
+  to Regular Expression Denial of Service (ReDoS) via the
+  `toNumber`, `trim` and `trimEnd` functions.
+
+  Steps to reproduce (provided by reporter Liyuan Chen):
+
+  ```
+    var lo = require('lodash');
+
+    function build_blank(n) {
+       var ret = "1"
+       for (var i = 0; i < n; i++) {
+           ret += " "
+       }
+       return ret + "1";
+   }
+   var s = build_blank(50000) var time0 = Date.now();
+   lo.trim(s)
+   var time_cost0 = Date.now() - time0;
+   console.log("time_cost0: " + time_cost0);
+   var time1 = Date.now();
+   lo.toNumber(s) var time_cost1 = Date.now() - time1;
+   console.log("time_cost1: " + time_cost1);
+   var time2 = Date.now();
+   lo.trimEnd(s);
+   var time_cost2 = Date.now() - time2;
+   console.log("time_cost2: " + time_cost2);
+  ```
+cvss_v2: 5.0
+cvss_v3: 5.3
+patched_versions:
+  - ">= 4.17.21"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-28500
+    - https://github.com/lodash/lodash/pull/5065
+    - https://github.com/lodash/lodash/pull/5065/commits/02906b8191d3c100c193fe6f7b27d1c40f200bb7
+    - https://github.com/lodash/lodash/blob/npm/trimEnd.js
+    - https://snyk.io/vuln/SNYK-JS-LODASH-1018905
+    - https://snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074896
+    - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074894
+    - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074892
+    - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074895
+    - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074893
+    - https://www.oracle.com//security-alerts/cpujul2021.html
+    - https://www.oracle.com/security-alerts/cpuoct2021.html
+    - https://www.oracle.com/security-alerts/cpujan2022.html
+    - https://www.oracle.com/security-alerts/cpujul2022.html
+    - https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
+    - https://github.com/lodash/lodash/commit/c4847ebe7d14540bb28a8b932a9ce1b9ecbfee1a
+    - https://security.netapp.com/advisory/ntap-20210312-0006
+    - https://github.com/advisories/GHSA-29mw-wpgm-hmr9
diff --git a/gems/lodash-rails/CVE-2020-8203.yml b/gems/lodash-rails/CVE-2020-8203.yml
new file mode 100644
index 0000000000..2e8902cff7
--- /dev/null
+++ b/gems/lodash-rails/CVE-2020-8203.yml
@@ -0,0 +1,37 @@
+---
+gem: lodash-rails
+cve: 2020-8203
+ghsa: p6mc-m468-83gw
+url: https://github.com/advisories/GHSA-p6mc-m468-83gw
+title: Prototype Pollution in lodash
+date: 2020-07-15
+description: |
+  Versions of lodash prior to 4.17.19 are vulnerable to Prototype
+  Pollution. The functions `pick`, `set`, `setWith`, `update`,
+  `updateWith`, and `zipObjectDeep` allow a malicious user to
+  modify the prototype of Object if the property identifiers are
+  user-supplied. Being affected by this issue requires manipulating
+  objects based on user-provided property values or arrays.
+
+  This vulnerability causes the addition or modification of an
+  existing property that will exist on all objects and may lead to
+  Denial of Service or Code Execution under specific circumstances.
+cvss_v2: 5.8
+cvss_v3: 7.4
+unaffected_versions:
+  - "< 3.7.0"
+patched_versions:
+  - ">= 4.17.19"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-8203
+    - https://hackerone.com/reports/712065
+    - https://github.com/lodash/lodash/issues/4744
+    - https://github.com/lodash/lodash/commit/c84fe82760fb2d3e03a63379b297a1cc1a2fce12
+    - https://github.com/lodash/lodash/issues/4874
+    - https://github.com/github/advisory-database/pull/2884
+    - https://hackerone.com/reports/864701
+    - https://github.com/lodash/lodash/wiki/Changelog#v41719
+    - https://web.archive.org/web/20210914001339/https://github.com/lodash/lodash/issues/4744
+    - https://security.netapp.com/advisory/ntap-20200724-0006
+    - https://github.com/advisories/GHSA-p6mc-m468-83gw
diff --git a/gems/lodash-rails/CVE-2021-23337.yml b/gems/lodash-rails/CVE-2021-23337.yml
new file mode 100644
index 0000000000..3e93aacb60
--- /dev/null
+++ b/gems/lodash-rails/CVE-2021-23337.yml
@@ -0,0 +1,33 @@
+---
+gem: lodash-rails
+cve: 2021-23337
+ghsa: 35jh-r3h4-6jhm
+url: https://github.com/advisories/GHSA-35jh-r3h4-6jhm
+title: Command Injection in lodash
+date: 2021-05-06
+description: |
+  lodash versions prior to 4.17.21 are vulnerable to
+  Command Injection via the template function.
+cvss_v2: 6.5
+cvss_v3: 7.2
+patched_versions:
+  - ">= 4.17.21"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-23337
+    - https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c
+    - https://snyk.io/vuln/SNYK-JS-LODASH-1040724
+    - https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js#L14851
+    - https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js
+    - https://snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074932
+    - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074930
+    - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074928
+    - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074931
+    - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074929
+    - https://www.oracle.com//security-alerts/cpujul2021.html
+    - https://www.oracle.com/security-alerts/cpuoct2021.html
+    - https://www.oracle.com/security-alerts/cpujan2022.html
+    - https://www.oracle.com/security-alerts/cpujul2022.html
+    - https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
+    - https://security.netapp.com/advisory/ntap-20210312-0006
+    - https://github.com/advisories/GHSA-35jh-r3h4-6jhm
diff --git a/gems/logstash-core/CVE-2015-5378.yml b/gems/logstash-core/CVE-2015-5378.yml
new file mode 100644
index 0000000000..526c0a5d13
--- /dev/null
+++ b/gems/logstash-core/CVE-2015-5378.yml
@@ -0,0 +1,25 @@
+---
+gem: logstash-core
+cve: 2015-5378
+ghsa: g6rc-3fpq-w2gr
+url: https://packetstormsecurity.com/files/132800/Logstash-1.5.2-SSL-TLS-FREAK.html
+title: "Logstash: SSL/TLS FREAK Attack"
+date: 2015-07-21
+description: |
+  Logstash: SSL/TLS FREAK Attack: Logstash 1.5.x before 1.5.3 and
+  1.4.x before 1.4.4 allows remote attackers to read communications
+  between Logstash Forwarder agent and Logstash server.
+cvss_v2: 5.0
+cvss_v3: 7.5
+patched_versions:
+  - "~> 1.4.4"
+  - ">= 1.5.3"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2015-5378
+    - https://packetstormsecurity.com/files/132800/Logstash-1.5.2-SSL-TLS-FREAK.html
+    - https://sca.analysiscenter.veracode.com/vulnerability-database/security/factoring-attack-rsa-export-keys-freak/ruby/sid-1745/summary
+    - https://github.com/rubysec/ruby-advisory-db/issues/238
+    - https://www.elastic.co/community/security
+    - https://github.com/advisories/GHSA-g6rc-3fpq-w2gr
+    - https://web.archive.org/web/20181211080524/http://www.securityfocus.com/bid/76015
diff --git a/gems/logstash-core/CVE-2015-5619.yml b/gems/logstash-core/CVE-2015-5619.yml
new file mode 100644
index 0000000000..876740b49c
--- /dev/null
+++ b/gems/logstash-core/CVE-2015-5619.yml
@@ -0,0 +1,25 @@
+---
+gem: logstash-core
+cve: 2015-5619
+ghsa: 68pf-743m-hv2w
+url: https://www.elastic.co/blog/logstash-1-5-4-and-1-4-5-released
+title: "Logstash: Man-In-The Middle attack"
+date: 2015-08-20
+description: |
+  Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack
+  output or the Logstash forwarder does not validate SSL/TLS certificates
+  from the Logstash server, which might allow attackers to obtain
+  sensitive information via a man-in-the-middle attack.
+cvss_v2: 4.3
+cvss_v3: 5.9
+patched_versions:
+  - "~> 1.4.5"
+  - ">= 1.5.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2015-5619
+    - https://www.elastic.co/blog/logstash-1-5-4-and-1-4-5-released
+    - https://www.elastic.co/community/security
+    - https://packetstormsecurity.com/files/133269/Logstash-1.5.3-Man-In-The-Middle.html
+    - https://sca.analysiscenter.veracode.com/vulnerability-database/security/man-middle-mitm-attacks/ruby/sid-1798/summary
+    - https://github.com/advisories/GHSA-68pf-743m-hv2w
diff --git a/gems/logstash-core/CVE-2016-1000221.yml b/gems/logstash-core/CVE-2016-1000221.yml
new file mode 100644
index 0000000000..2291bfbfa7
--- /dev/null
+++ b/gems/logstash-core/CVE-2016-1000221.yml
@@ -0,0 +1,24 @@
+---
+gem: logstash-core
+cve: 2016-1000221
+ghsa: vcmm-ppqx-95ch
+url: https://web.archive.org/web/20210124065200/http://www.securityfocus.com/bid/99126
+title: Logstash Logs Sensitive Information
+date: 2017-06-16
+description: |
+  Logstash prior to version 2.3.4, Elasticsearch Output plugin would log
+  to file HTTP authorization headers which could contain sensitive information.
+cvss_v2: 5.0
+cvss_v3: 7.5
+patched_versions:
+  - ">= 2.3.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2016-1000221
+    - https://web.archive.org/web/20210124065200/http://www.securityfocus.com/bid/99126
+    - https://security-tracker.debian.org/tracker/CVE-2016-1000221
+    - http://www.securityspace.com/smysecure/catid.html?id=1.3.6.1.4.1.25623.1.0.108361
+    - https://www.scaprepo.com/control.jsp?command=relation&relationId=CVE-2016-1000221&search=CVE-2016-1000221
+    - https://cve.reconshell.com/cve/CVE-2016-1000221
+    - https://www.elastic.co/community/security
+    - https://github.com/advisories/GHSA-vcmm-ppqx-95ch
diff --git a/gems/logstash-core/CVE-2016-10362.yml b/gems/logstash-core/CVE-2016-10362.yml
new file mode 100644
index 0000000000..3c3f85603b
--- /dev/null
+++ b/gems/logstash-core/CVE-2016-10362.yml
@@ -0,0 +1,21 @@
+---
+gem: logstash-core
+cve: 2016-10362
+ghsa: 3gg4-6hqg-2vjx
+url: https://web.archive.org/web/20210730201452/http://www.securityfocus.com/bid/99154
+title: Logstash Logs Sensitive Information
+date: 2016-06-16
+description: |
+  Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating
+  connections after sniffing, would log to file HTTP basic auth credentials.
+cvss_v2: 4.0
+cvss_v3: 6.5
+patched_versions:
+  - ">= 5.0.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2016-10362
+    - https://web.archive.org/web/20210730201452/http://www.securityfocus.com/bid/99154
+    - https://www.opencve.io/cve/CVE-2016-10362
+    - https://www.elastic.co/community/security
+    - https://github.com/advisories/GHSA-3gg4-6hqg-2vjx
diff --git a/gems/logstash/CVE-2014-4326.yml b/gems/logstash/CVE-2014-4326.yml
new file mode 100644
index 0000000000..0164cdcba3
--- /dev/null
+++ b/gems/logstash/CVE-2014-4326.yml
@@ -0,0 +1,23 @@
+---
+gem: logstash
+cve: 2014-4326
+ghsa: 8qhq-rq4j-8prj
+url: https://www.elastic.co/community/security
+title: Elasticsearch Logstash allows remote attackers to execute arbitrary commands
+date: 2022-05-14
+description: |
+  Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows
+  remote attackers to execute arbitrary commands via a crafted
+  event in (1) `zabbix.rb` or (2) `nagios_nsca.rb` in `outputs/`.
+cvss_v2: 7.5
+unaffected_versions:
+  - "< 1.0.14"
+patched_versions:
+  - ">= 1.4.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-4326
+    - https://www.elastic.co/community/security
+    - https://web.archive.org/web/20140804031140/http://www.elasticsearch.org/blog/logstash-1-4-2
+    - https://web.archive.org/web/20201207013408/http://www.securityfocus.com/archive/1/532841/100/0/threaded
+    - https://github.com/advisories/GHSA-8qhq-rq4j-8prj
diff --git a/gems/loofah/CVE-2018-16468.yml b/gems/loofah/CVE-2018-16468.yml
index 6d77d32cd6..9572bd0058 100644
--- a/gems/loofah/CVE-2018-16468.yml
+++ b/gems/loofah/CVE-2018-16468.yml
@@ -10,7 +10,7 @@ description: |
   sanitized output when a crafted SVG element is republished.
 cvss_v3: 6.4
 patched_versions:
-- '>= 2.2.3'
+  - ">= 2.2.3"
 related:
   url:
-  - https://hackerone.com/reports/429267
+    - https://hackerone.com/reports/429267
diff --git a/gems/loofah/CVE-2018-8048.yml b/gems/loofah/CVE-2018-8048.yml
index 754c65e1ff..79625e9b23 100644
--- a/gems/loofah/CVE-2018-8048.yml
+++ b/gems/loofah/CVE-2018-8048.yml
@@ -10,4 +10,4 @@ description: |
   output when input with specially-crafted HTML fragments.
 cvss_v3: 6.1
 patched_versions:
-- ">= 2.2.1"
+  - ">= 2.2.1"
diff --git a/gems/loofah/CVE-2019-15587.yml b/gems/loofah/CVE-2019-15587.yml
index 8a5742d783..5b134cd7dd 100644
--- a/gems/loofah/CVE-2019-15587.yml
+++ b/gems/loofah/CVE-2019-15587.yml
@@ -10,4 +10,4 @@ description: |
   sanitized output when a crafted SVG element is republished.
 cvss_v3: 6.4
 patched_versions:
-- '>= 2.3.1'
+  - ">= 2.3.1"
diff --git a/gems/loofah/CVE-2022-23514.yml b/gems/loofah/CVE-2022-23514.yml
new file mode 100644
index 0000000000..f3a7dcda88
--- /dev/null
+++ b/gems/loofah/CVE-2022-23514.yml
@@ -0,0 +1,22 @@
+---
+gem: loofah
+cve: 2022-23514
+ghsa: 486f-hjj9-9vhh
+url: https://github.com/flavorjones/loofah/security/advisories/GHSA-486f-hjj9-9vhh
+title: "Inefficient Regular Expression Complexity in Loofah"
+date: 2022-12-13
+description: |
+  ## Summary
+
+  Loofah `< 2.19.1` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption.
+
+  ## Mitigation
+
+  Upgrade to Loofah `>= 2.19.1`.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 2.19.1"
+related:
+  url:
+    - https://cwe.mitre.org/data/definitions/1333.html
+    - https://hackerone.com/reports/1684163
diff --git a/gems/loofah/CVE-2022-23515.yml b/gems/loofah/CVE-2022-23515.yml
new file mode 100644
index 0000000000..d8190eada4
--- /dev/null
+++ b/gems/loofah/CVE-2022-23515.yml
@@ -0,0 +1,26 @@
+---
+gem: loofah
+cve: 2022-23515
+ghsa: 228g-948r-83gx
+url: https://github.com/flavorjones/loofah/security/advisories/GHSA-228g-948r-83gx
+title: "Improper neutralization of data URIs may allow XSS in Loofah"
+date: 2022-12-13
+description: |
+  ## Summary
+
+  Loofah `>= 2.1.0, < 2.19.1` is vulnerable to cross-site scripting via the `image/svg+xml` media type in data URIs.
+
+  ## Mitigation
+
+  Upgrade to Loofah `>= 2.19.1`.
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 2.1.0"
+patched_versions:
+  - ">= 2.19.1"
+related:
+  url:
+    - https://cwe.mitre.org/data/definitions/79.html
+    - https://github.com/w3c/svgwg/issues/266
+    - https://hackerone.com/reports/1694173
+    - https://github.com/flavorjones/loofah/issues/101
diff --git a/gems/loofah/CVE-2022-23516.yml b/gems/loofah/CVE-2022-23516.yml
new file mode 100644
index 0000000000..a6406e338a
--- /dev/null
+++ b/gems/loofah/CVE-2022-23516.yml
@@ -0,0 +1,25 @@
+---
+gem: loofah
+cve: 2022-23516
+ghsa: 3x8r-x6xp-q4vm
+url: https://github.com/flavorjones/loofah/security/advisories/GHSA-3x8r-x6xp-q4vm
+title: "Uncontrolled Recursion in Loofah"
+date: 2022-12-13
+description: |
+  ## Summary
+
+  Loofah `>= 2.2.0, < 2.19.1` uses recursion for sanitizing `CDATA` sections, making it susceptible to stack exhaustion and raising a `SystemStackError` exception.  This may lead to a denial of service through CPU resource consumption.
+
+  ## Mitigation
+
+  Upgrade to Loofah `>= 2.19.1`.
+
+  Users who are unable to upgrade may be able to mitigate this vulnerability by limiting the length of the strings that are sanitized.
+cvss_v3: 7.5
+unaffected_versions:
+  - "< 2.2.0"
+patched_versions:
+  - ">= 2.19.1"
+related:
+  url:
+    - https://cwe.mitre.org/data/definitions/674.html
diff --git a/gems/loofah/OSVDB-90945.yml b/gems/loofah/OSVDB-90945.yml
index 55f3ab78e1..7738fbeed5 100644
--- a/gems/loofah/OSVDB-90945.yml
+++ b/gems/loofah/OSVDB-90945.yml
@@ -1,7 +1,7 @@
 ---
 gem: loofah
 osvdb: 90945
-url: http://www.osvdb.org/show/osvdb/90945
+url: https://security.snyk.io/vuln/SNYK-RUBY-LOOFAH-20039
 title: Loofah HTML and XSS injection vulnerability
 date: 2012-09-08
 description: |
@@ -15,4 +15,11 @@ description: |
   within the trust relationship between their browser and the server.
 cvss_v2: 5.0
 patched_versions:
-- '>= 0.4.6'
+  - ">= 0.4.6"
+related:
+  url:
+    - https://github.com/flavorjones/loofah/compare/v0.4.5...v0.4.6
+    - https://security.snyk.io/vuln/SNYK-RUBY-LOOFAH-20039
+    - https://www.versioneye.com/Ruby/loofah/0.4.2
+    - https://www.mend.io/vulnerability-database/WS-2012-0023
+    - http://www.osvdb.org/show/osvdb/90945
diff --git a/gems/lynx/CVE-2014-5002.yml b/gems/lynx/CVE-2014-5002.yml
index 22363b39ca..38ee900af0 100644
--- a/gems/lynx/CVE-2014-5002.yml
+++ b/gems/lynx/CVE-2014-5002.yml
@@ -2,11 +2,14 @@
 gem: lynx
 cve: 2014-5002
 osvdb: 108580
+ghsa: 94cq-7ccq-cmcm
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-5002
 title: lynx Gem for Ruby command/basic.rb Process Table Local Plaintext Password Disclosure
 date: 2014-06-30
-description: lynx Gem for Ruby contains a flaw in command/basic.rb that is due to
+description: |
+  lynx Gem for Ruby contains a flaw in command/basic.rb that is due to
   the application exposing password information in plaintext in the process table.
   This may allow a local attacker to gain access to password information.
+cvss_v3: 7.8
 patched_versions:
-- '>= 1.0.0'
+  - ">= 1.0.0"
diff --git a/gems/lynx/OSVDB-108579.yml b/gems/lynx/OSVDB-108579.yml
index e6844b89d1..5ec560e91b 100644
--- a/gems/lynx/OSVDB-108579.yml
+++ b/gems/lynx/OSVDB-108579.yml
@@ -1,8 +1,16 @@
 ---
 gem: lynx
 osvdb: 108579
-url: http://osvdb.org/show/osvdb/108579
+url: https://www.openwall.com/lists/oss-security/2014/07/07/23
 title: lynx Gem for Ruby lib/lynx/pipe/run.rb Remote Command Execution
 date: 2014-06-30
-description: lynx Gem for Ruby contains a flaw in lib/lynx/pipe/run.rb that may allow
-  a remote attacker to execute arbitrary commands.
+description: |
+  lynx Gem for Ruby contains a flaw in lib/lynx/pipe/run.rb that
+  may allow a remote attacker to execute arbitrary commands.
+notes: "Never patched"
+related:
+  url:
+    - https://www.openwall.com/lists/oss-security/2014/07/07/23
+    - https://security.snyk.io/vuln/SNYK-RUBY-LYNX-20160
+    - https://github.com/panthomakos/lynx/blob/master/lib/lynx/pipe/run.rb
+    - http://osvdb.org/show/osvdb/108579
diff --git a/gems/mail/CVE-2011-0739.yml b/gems/mail/CVE-2011-0739.yml
index 62c95271e3..c6ccee8dcd 100644
--- a/gems/mail/CVE-2011-0739.yml
+++ b/gems/mail/CVE-2011-0739.yml
@@ -2,10 +2,11 @@
 gem: mail
 cve: 2011-0739
 osvdb: 70667
+ghsa: cpjc-p7fc-j9xh
 url: https://nvd.nist.gov/vuln/detail/CVE-2011-0739
-title: >
-  Mail Gem for Ruby lib/mail/network/delivery_methods/sendmail.rb Email From:
-  Address Arbitrary Shell Command Injection
+title:
+  "Mail Gem for Ruby lib/mail/network/delivery_methods/sendmail.rb Email From:
+  Address Arbitrary Shell Command Injection"
 date: 2011-01-25
 description: |
   Mail Gem for Ruby contains a flaw related to the failure to properly sanitise
@@ -15,4 +16,4 @@ description: |
   shell commands.
 cvss_v2: 6.8
 patched_versions:
-- '>= 2.2.15'
+  - ">= 2.2.15"
diff --git a/gems/mail/CVE-2012-2139.yml b/gems/mail/CVE-2012-2139.yml
index 2835edf101..0dfc80c09a 100644
--- a/gems/mail/CVE-2012-2139.yml
+++ b/gems/mail/CVE-2012-2139.yml
@@ -2,12 +2,14 @@
 gem: mail
 cve: 2012-2139
 osvdb: 81631
+ghsa: cj92-c4fj-w9c5
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-2139
-title: 'CVE-2012-2139 rubygem-mail: directory traversal'
+title: "CVE-2012-2139 rubygem-mail: directory traversal"
 date: 2012-03-14
-description: Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb
+description: |
+  Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb
   in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary
   files via a .. (dot dot) in the to parameter.
 cvss_v2: 5.0
 patched_versions:
-- '>= 2.4.4'
+  - ">= 2.4.4"
diff --git a/gems/mail/CVE-2012-2140.yml b/gems/mail/CVE-2012-2140.yml
index de81f0ff4f..f624f8e41b 100644
--- a/gems/mail/CVE-2012-2140.yml
+++ b/gems/mail/CVE-2012-2140.yml
@@ -2,12 +2,14 @@
 gem: mail
 cve: 2012-2140
 osvdb: 81632
+ghsa: rp63-jfmw-532w
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-2140
 title: 'CVE-2012-2140 rubygem-mail: arbitrary command execution when using exim or
   sendmail from commandline'
 date: 2012-03-14
-description: The Mail gem before 2.4.3 for Ruby allows remote attackers to execute
+description: |
+  The Mail gem before 2.4.3 for Ruby allows remote attackers to execute
   arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.
 cvss_v2: 7.5
 patched_versions:
-- '>= 2.4.4'
+  - ">= 2.4.4"
diff --git a/gems/mail/CVE-2015-9097.yml b/gems/mail/CVE-2015-9097.yml
index 0268bf5a44..c61fc50541 100644
--- a/gems/mail/CVE-2015-9097.yml
+++ b/gems/mail/CVE-2015-9097.yml
@@ -4,15 +4,16 @@ cve: 2015-9097
 osvdb: 131677
 ghsa: q86f-fmqf-qrf6
 url: https://hackerone.com/reports/137631
-title: 'CVE-2015-9097 rubygem-mail: SMTP injection via recipient email addresses'
+title: "CVE-2015-9097 rubygem-mail: SMTP injection via recipient email addresses"
 date: 2015-12-09
-description: The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is
+description: |
+  The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is
   vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM
   command, as demonstrated by CRLF sequences immediately before and after a DATA substring.
 cvss_v3: 6.1
 patched_versions:
-- ">= 2.5.5"
+  - ">= 2.5.5"
 related:
   url:
-  - http://www.mbsd.jp/Whitepaper/smtpi.pdf
-  - https://github.com/mikel/mail/pull/1097
+    - http://www.mbsd.jp/Whitepaper/smtpi.pdf
+    - https://github.com/mikel/mail/pull/1097
diff --git a/gems/mapbox-rails/OSVDB-129854.yml b/gems/mapbox-rails/CVE-2017-1000042.yml
similarity index 65%
rename from gems/mapbox-rails/OSVDB-129854.yml
rename to gems/mapbox-rails/CVE-2017-1000042.yml
index e4c04d8138..a87af69603 100644
--- a/gems/mapbox-rails/OSVDB-129854.yml
+++ b/gems/mapbox-rails/CVE-2017-1000042.yml
@@ -1,7 +1,9 @@
 ---
 gem: mapbox-rails
+cve: 2017-1000042
 osvdb: 129854
-url: https://nodesecurity.io/advisories/49
+ghsa: qr28-7j6p-9hmv
+url: https://nvd.nist.gov/vuln/detail/CVE-2017-1000042
 title: mapbox-rails Content Injection via TileJSON attribute
 date: 2015-10-24
 description: |
@@ -19,6 +21,16 @@ description: |
   * only trusted TileJSON content is loaded
   * TileJSON content comes only from mapbox.com URLs
   * a Mapbox map ID is supplied, rather than a TileJSON URL
+
+  * CWE: 79 - Improper Neutralization of Input During Web Page Generation (XSS)
+cvss_v2: 4.3
+cvss_v3: 6.1
 patched_versions:
-- ~> 1.6.5
-- '>= 2.1.7'
+  - "~> 1.6.5"
+  - ">= 2.1.7"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2017-1000042
+    - https://nodesecurity.io/advisories/49
+    - https://hackerone.com/reports/54327
+    - https://github.com/advisories/GHSA-qr28-7j6p-9hmv
diff --git a/gems/mapbox-rails/OSVDB-132871.yml b/gems/mapbox-rails/CVE-2017-1000043.yml
similarity index 70%
rename from gems/mapbox-rails/OSVDB-132871.yml
rename to gems/mapbox-rails/CVE-2017-1000043.yml
index 4541b9813e..ca98f026a2 100644
--- a/gems/mapbox-rails/OSVDB-132871.yml
+++ b/gems/mapbox-rails/CVE-2017-1000043.yml
@@ -1,7 +1,9 @@
 ---
 gem: mapbox-rails
+cve: 2017-1000043
 osvdb: 132871
-url: https://nodesecurity.io/advisories/74
+ghsa: q69p-5h74-w36f
+url: https://nvd.nist.gov/vuln/detail/CVE-2017-1000043
 title: mapbox-rails Content Injection via TileJSON Name
 date: 2016-01-12
 description: |
@@ -20,6 +22,14 @@ description: |
 
   * the map does not use a share control (L.mapbox.sharecontrol)
   * only trusted TileJSON content is loaded
+cvss_v2: 4.3
+cvss_v3: 6.1
 patched_versions:
-- ~> 1.6.6
-- '>= 2.2.4'
+  - "~> 1.6.6"
+  - ">= 2.2.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2017-1000043
+    - https://nodesecurity.io/advisories/74
+    - https://hackerone.com/reports/99245
+    - https://github.com/advisories/GHSA-q69p-5h74-w36f
diff --git a/gems/marginalia/CVE-2019-1010191.yml b/gems/marginalia/CVE-2019-1010191.yml
index 160111caae..00d01c7e6f 100644
--- a/gems/marginalia/CVE-2019-1010191.yml
+++ b/gems/marginalia/CVE-2019-1010191.yml
@@ -15,4 +15,4 @@ description: |
   The issue is resolved in version 1.6.
 cvss_v3: 9.8
 patched_versions:
-- '>= 1.6'
+  - ">= 1.6"
diff --git a/gems/matestack-ui-core/CVE-2020-5241.yml b/gems/matestack-ui-core/CVE-2020-5241.yml
index 37a54687a6..ae778bdb3b 100644
--- a/gems/matestack-ui-core/CVE-2020-5241.yml
+++ b/gems/matestack-ui-core/CVE-2020-5241.yml
@@ -12,4 +12,4 @@ description: |
 cvss_v2: 10.0
 cvss_v3: 9.8
 patched_versions:
-- '>= 0.7.4'
+  - ">= 0.7.4"
diff --git a/gems/mcollective-client/CVE-2014-3248.yml b/gems/mcollective-client/CVE-2014-3248.yml
new file mode 100644
index 0000000000..e9254c39bd
--- /dev/null
+++ b/gems/mcollective-client/CVE-2014-3248.yml
@@ -0,0 +1,27 @@
+---
+gem: mcollective-client
+cve: 2014-3248
+ghsa: 92v7-pq4h-58j5
+url: https://github.com/advisories/GHSA-92v7-pq4h-58j5
+title: Moderate severity vulnerability that affects facter, hiera, mcollective-client, and puppet
+date: 2017-10-24
+description: |
+  Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7,
+  Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera
+  before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier,
+  allows local users to gain privileges via a Trojan horse file in the current working
+  directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2)
+  Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so;
+  or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so
+  in puppet/confine.
+patched_versions:
+  - ">= 2.5.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-3248
+    - https://github.com/advisories/GHSA-92v7-pq4h-58j5
+    - http://puppetlabs.com/security/cve/cve-2014-3248
+    - http://rowediness.com/2014/06/13/cve-2014-3248-a-little-problem-with-puppet/
+    - http://secunia.com/advisories/59197
+    - http://secunia.com/advisories/59200
+    - http://www.securityfocus.com/bid/68035
diff --git a/gems/md2pdf/CVE-2013-1948.yml b/gems/md2pdf/CVE-2013-1948.yml
index fc5385af6e..b93702efd1 100644
--- a/gems/md2pdf/CVE-2013-1948.yml
+++ b/gems/md2pdf/CVE-2013-1948.yml
@@ -2,11 +2,13 @@
 gem: md2pdf
 cve: 2013-1948
 osvdb: 92290
+ghsa: 99ch-8mvp-g7m5
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1948
 title: md2pdf Gem for Ruby md2pdf/converter.rb File Name Shell Metacharacter Injection
   Arbitrary Command Execution
 date: 2013-04-13
-description: md2pdf Gem for Ruby contains a flaw that is due to the program failing
+description: |
+  md2pdf Gem for Ruby contains a flaw that is due to the program failing
   to properly sanitize input passed to md2pdf/converter.rb. With a specially crafted
   file name that contains shell metacharacters, a context-dependent attacker can execute
   arbitrary commands
diff --git a/gems/measured/GHSA-29g5-m8v7-v564.yml b/gems/measured/GHSA-29g5-m8v7-v564.yml
new file mode 100644
index 0000000000..ad7327aed1
--- /dev/null
+++ b/gems/measured/GHSA-29g5-m8v7-v564.yml
@@ -0,0 +1,25 @@
+---
+gem: measured
+ghsa: 29g5-m8v7-v564
+url: https://github.com/Shopify/measured/security/advisories/GHSA-29g5-m8v7-v564
+title: Measured is vulnerable to Path Traversal attacks during
+  class initialization
+date: 2025-07-15
+description: |
+  ### Impact
+
+  A path traversal vulnerability exists where an attacker
+  with access to manipulate inputs when initializing the
+  `Measured::Cache::Json class` would be able to instruct
+  the library to read arbitrary files.
+
+  ### Patches
+
+  Users should update to the latest version.
+patched_versions:
+  - ">= 3.2.1"
+related:
+  url:
+    - https://github.com/Shopify/measured/security/advisories/GHSA-29g5-m8v7-v564
+    - https://github.com/Shopify/measured/commit/d6319985a2304d97c085e3dc45c98af554f4be76
+    - https://github.com/advisories/GHSA-29g5-m8v7-v564
diff --git a/gems/mechanize/CVE-2021-21289.yml b/gems/mechanize/CVE-2021-21289.yml
index ef53038f59..00a9670173 100644
--- a/gems/mechanize/CVE-2021-21289.yml
+++ b/gems/mechanize/CVE-2021-21289.yml
@@ -5,7 +5,7 @@ ghsa: qrqm-fpv6-6r8g
 url: https://github.com/sparklemotion/mechanize/security/advisories/GHSA-qrqm-fpv6-6r8g
 title: Mechanize ruby gem Command Injection vulnerability
 date: 2021-02-01
-description: |-
+description: |
   ## Impact
 
   Mechanize `>= v2.0`, `< v2.7.7` allows for OS commands to be injected using several
@@ -34,6 +34,6 @@ description: |-
   on why `Kernel.open` should not be used with untrusted input.
 cvss_v3: 7.4
 unaffected_versions:
-- '< 2.0'
+  - "< 2.0"
 patched_versions:
-- '>= 2.7.7'
+  - ">= 2.7.7"
diff --git a/gems/mechanize/CVE-2022-31033.yml b/gems/mechanize/CVE-2022-31033.yml
new file mode 100644
index 0000000000..13ee4a45a7
--- /dev/null
+++ b/gems/mechanize/CVE-2022-31033.yml
@@ -0,0 +1,38 @@
+---
+gem: mechanize
+cve: 2022-31033
+ghsa: 64qm-hrgp-pgr9
+url: https://github.com/sparklemotion/mechanize/security/advisories/GHSA-64qm-hrgp-pgr9
+title: Authorization header leak on port redirect in mechanize
+date: 2022-06-09
+description: |
+  **Summary**
+
+  Mechanize (rubygem) `< v2.8.5` leaks the `Authorization` header after a
+  redirect to a different port on the same site.
+
+  **Mitigation**
+
+  Upgrade to Mechanize v2.8.5 or later.
+
+  **Notes**
+
+  See [https://curl.se/docs/CVE-2022-27776.html](CVE-2022-27776) for a similar vulnerability in curl.
+
+  Cookies are shared with a server at a different port on the same site, per
+  https://datatracker.ietf.org/doc/html/rfc6265#section-8.5 which states in part:
+
+  > Cookies do not provide isolation by port.  If a cookie is readable
+  > by a service running on one port, the cookie is also readable by a
+  > service running on another port of the same server.  If a cookie is
+  > writable by a service on one port, the cookie is also writable by a
+  > service running on another port of the same server.  For this
+  > reason, servers SHOULD NOT both run mutually distrusting services on
+  > different ports of the same host and use cookies to store security-
+  > sensitive information.
+cvss_v3: 5.9
+patched_versions:
+  - ">= 2.8.5"
+related:
+  url:
+    - https://github.com/sparklemotion/mechanize/commit/c7fe6996a5b95f9880653ba3bc548a8d4ef72317
diff --git a/gems/message_bus/CVE-2021-43840.yml b/gems/message_bus/CVE-2021-43840.yml
index 084d705de8..21fec2ed3b 100644
--- a/gems/message_bus/CVE-2021-43840.yml
+++ b/gems/message_bus/CVE-2021-43840.yml
@@ -22,7 +22,7 @@ description: |
   Disable MessageBus::Diagnostics in production like environments.
 cvss_v3: 4.2
 patched_versions:
-- ">= 3.3.7"
+  - ">= 3.3.7"
 related:
   url:
-  - https://github.com/discourse/message_bus/commit/9b6deee01ed474c7e9b5ff65a06bb0447b4db2ba
+    - https://github.com/discourse/message_bus/commit/9b6deee01ed474c7e9b5ff65a06bb0447b4db2ba
diff --git a/gems/metasploit-framework/CVE-2020-7385.yml b/gems/metasploit-framework/CVE-2020-7385.yml
new file mode 100644
index 0000000000..94de131883
--- /dev/null
+++ b/gems/metasploit-framework/CVE-2020-7385.yml
@@ -0,0 +1,28 @@
+---
+gem: metasploit-framework
+cve: 2020-7385
+ghsa: xgww-h98f-24qf
+url: https://github.com/rapid7/metasploit-framework/pull/14300
+title: Metasploit Framework user exposes Metasploit to same deserialization issue
+  that is exploited by that module
+date: 2022-05-24
+description: |
+  By launching the drb_remote_codeexec exploit, a Metasploit Framework
+  user will inadvertently expose Metasploit to the same deserialization issue that
+  is exploited by that module, due to the reliance on the vulnerable Distributed Ruby
+  class functions. Since Metasploit Framework typically runs with elevated privileges,
+  this can lead to a system compromise on the Metasploit workstation. Note that an
+  attacker would have to lie in wait and entice the Metasploit user to run the affected
+  module against a malicious endpoint in a "hack-back" type of attack. Metasploit
+  is only vulnerable when the drb_remote_codeexec module is running. In most cases,
+  this cannot happen automatically.
+cvss_v3: 8.1
+patched_versions:
+  - ">= 4.19.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-7385
+    - https://github.com/rapid7/metasploit-framework/pull/14300
+    - https://github.com/rapid7/metasploit-framework/pull/14335
+    - https://help.rapid7.com/metasploit/release-notes/archive/2020/10/
+    - https://github.com/advisories/GHSA-xgww-h98f-24qf
diff --git a/gems/mini_magick/CVE-2013-2616.yml b/gems/mini_magick/CVE-2013-2616.yml
index f1c5cc0dfa..cfa1590960 100644
--- a/gems/mini_magick/CVE-2013-2616.yml
+++ b/gems/mini_magick/CVE-2013-2616.yml
@@ -2,6 +2,7 @@
 gem: mini_magick
 cve: 2013-2616
 osvdb: 91231
+ghsa: w754-gq8r-pf5f
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-2616
 title: MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection
 date: 2013-03-12
@@ -12,4 +13,4 @@ description: |
   potentially execute arbitrary commands.
 cvss_v2: 9.3
 patched_versions:
-- '>= 3.6.0'
+  - ">= 3.6.0"
diff --git a/gems/mini_magick/CVE-2019-13574.yml b/gems/mini_magick/CVE-2019-13574.yml
index d5cd4e1be5..8f109e7641 100644
--- a/gems/mini_magick/CVE-2019-13574.yml
+++ b/gems/mini_magick/CVE-2019-13574.yml
@@ -10,7 +10,7 @@ description: |
   e.g. `MiniMagick::Image.open("| touch.txt")`
 cvss_v3: 7.5
 patched_versions:
-- '>= 4.9.4'
+  - ">= 4.9.4"
 related:
   url:
-  - https://github.com/minimagick/minimagick/commit/4cd5081e58810d3394d27a67219e8e4e0445d851
+    - https://github.com/minimagick/minimagick/commit/4cd5081e58810d3394d27a67219e8e4e0445d851
diff --git a/gems/minitar/CVE-2016-10173.yml b/gems/minitar/CVE-2016-10173.yml
index 6c3b92178e..0969e282d1 100644
--- a/gems/minitar/CVE-2016-10173.yml
+++ b/gems/minitar/CVE-2016-10173.yml
@@ -15,8 +15,8 @@ description: |
   Credit: ecneladis
 cvss_v3: 7.5
 patched_versions:
-- ">= 0.6.0"
+  - ">= 0.6.0"
 related:
   url:
-  - https://github.com/halostatue/minitar/issues/16
-  - https://github.com/halostatue/minitar/commit/e25205ecbb6277ae8a3df1e6a306d7ed4458b6e4
+    - https://github.com/halostatue/minitar/issues/16
+    - https://github.com/halostatue/minitar/commit/e25205ecbb6277ae8a3df1e6a306d7ed4458b6e4
diff --git a/gems/mixlib-archive/CVE-2017-1000026.yml b/gems/mixlib-archive/CVE-2017-1000026.yml
new file mode 100644
index 0000000000..6e2c7837a2
--- /dev/null
+++ b/gems/mixlib-archive/CVE-2017-1000026.yml
@@ -0,0 +1,17 @@
+---
+gem: mixlib-archive
+cve: 2017-1000026
+ghsa: 98wx-cw86-c97x
+url: https://github.com/chef/mixlib-archive/blob/master/CHANGELOG.md
+title: mixlib-archive Path Traversal vulnerability
+date: 2022-05-13
+description: |
+  Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable
+  to a directory traversal attack allowing attackers to overwrite arbitrary files
+  by using `..` in tar archive entries
+cvss_v3: 7.5
+patched_versions:
+  - ">= 0.4.0"
+related:
+  url:
+    - https://github.com/chef/mixlib-archive/pull/6
diff --git a/gems/mongrel/CVE-2007-6612.yml b/gems/mongrel/CVE-2007-6612.yml
new file mode 100644
index 0000000000..b55bb83745
--- /dev/null
+++ b/gems/mongrel/CVE-2007-6612.yml
@@ -0,0 +1,25 @@
+---
+gem: mongrel
+cve: 2007-6612
+ghsa: m7r6-43v2-49vf
+url: https://nvd.nist.gov/vuln/detail/CVE-2007-6612
+title: Mongrel vulnerable to directory traversal via double-encoded sequences
+date: 2022-05-01
+description: |
+  Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb)
+  in Mongrel 1.0.4 (1.0.3 and prior are not affected) and 1.1.x before
+  1.1.3 allows remote attackers to read arbitrary files via an HTTP
+  request containing double-encoded sequences (`.%252e`).
+cvss_v2: 6.4
+unaffected_versions:
+  - "< 1.0.4"
+patched_versions:
+  - "~> 1.0.5"
+  - ">= 1.1.3"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2007-6612
+    - https://lists.apple.com/archives/security-announce/2008//May/msg00001.html
+    - https://web.archive.org/web/20080111034049/http://rubyforge.org/pipermail/mongrel-users/2007-December/004743.html
+    - https://web.archive.org/web/20200301091534/http://www.securityfocus.com/bid/27133
+    - https://github.com/advisories/GHSA-m7r6-43v2-49vf
diff --git a/gems/moped/CVE-2015-4410.yml b/gems/moped/CVE-2015-4410.yml
index 57fc0a7674..8783154022 100644
--- a/gems/moped/CVE-2015-4410.yml
+++ b/gems/moped/CVE-2015-4410.yml
@@ -5,13 +5,14 @@ ghsa: f93j-hmcr-jcwh
 url: http://sakurity.com/blog/2015/06/04/mongo_ruby_regexp.html
 title: Data Injection Vulnerability in moped Rubygem
 date: 2015-06-04
-description: A flaw in the ObjectId validation regular expression can enable attackers
+description: |
+  A flaw in the ObjectId validation regular expression can enable attackers
   to inject arbitrary information into a given BSON object.
 cvss_v3: 7.5
 patched_versions:
-- "~> 1.5.3"
-- ">= 2.0.5"
+  - "~> 1.5.3"
+  - ">= 2.0.5"
 related:
   url:
-  - https://github.com/mongoid/moped/compare/e5fc928bcb5b7b89d171e31e31483be4185971b9...32cba17ad7d3da326778b4d8cd4b52e75bca9d40
-  - https://github.com/mongoid/moped/commit/276fbfd23c5ffb65e6bd18d564c8b6878c2498ac
+    - https://github.com/mongoid/moped/compare/e5fc928bcb5b7b89d171e31e31483be4185971b9...32cba17ad7d3da326778b4d8cd4b52e75bca9d40
+    - https://github.com/mongoid/moped/commit/276fbfd23c5ffb65e6bd18d564c8b6878c2498ac
diff --git a/gems/mpxj/CVE-2024-49771.yml b/gems/mpxj/CVE-2024-49771.yml
new file mode 100644
index 0000000000..b83343a9af
--- /dev/null
+++ b/gems/mpxj/CVE-2024-49771.yml
@@ -0,0 +1,35 @@
+---
+gem: mpxj
+cve: 2024-49771
+ghsa: j945-c44v-97g6
+url: https://github.com/joniles/mpxj/security/advisories/GHSA-j945-c44v-97g6
+title: MPXJ has a Potential Path Traversal Vulnerability
+date: 2024-10-28
+description: |
+  ### Impact
+
+  The patch for the historical vulnerability CVE-2020-35460 in MPXJ
+  is incomplete as there is still a possibility that a malicious path
+  could be constructed which would not be picked up by the original
+  fix and allow files to be written to arbitrary locations.
+
+  ### Patches
+
+  The issue is addressed in MPXJ version 13.5.1
+
+  ### Workarounds
+
+  Do not pass zip files to MPXJ.
+
+  ### References
+  N/A
+cvss_v3: 5.3
+unaffected_versions:
+  - "< 8.3.5"
+patched_versions:
+  - ">= 13.5.1"
+related:
+  url:
+    - https://github.com/joniles/mpxj/security/advisories/GHSA-j945-c44v-97g6
+    - https://github.com/joniles/mpxj/commit/8002802890dfdc8bc74259f37e053e15b827eea0
+    - https://github.com/advisories/GHSA-j945-c44v-97g6
diff --git a/gems/multi_xml/CVE-2013-0175.yml b/gems/multi_xml/CVE-2013-0175.yml
index b4d17f3a15..b81a153835 100644
--- a/gems/multi_xml/CVE-2013-0175.yml
+++ b/gems/multi_xml/CVE-2013-0175.yml
@@ -2,6 +2,7 @@
 gem: multi_xml
 cve: 2013-0175
 osvdb: 89148
+ghsa: pchc-949f-53m5
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0175
 title: multi_xml Gem for Ruby XML Parameter Parsing Remote Command Execution
 date: 2013-01-11
@@ -11,4 +12,4 @@ description: |
   containing arbitrary symbol and yaml types, a remote attacker can execute
   arbitrary commands.
 patched_versions:
-- '>= 0.5.2'
+  - ">= 0.5.2"
diff --git a/gems/mustache-js-rails/OSVDB-131671.yml b/gems/mustache-js-rails/OSVDB-131671.yml
index 4d48b1b05f..3db90cb79d 100644
--- a/gems/mustache-js-rails/OSVDB-131671.yml
+++ b/gems/mustache-js-rails/OSVDB-131671.yml
@@ -1,17 +1,24 @@
 ---
 gem: mustache-js-rails
 osvdb: 131671
-url: https://blog.srcclr.com/handlebars_vulnerability_research_findings/
+url: https://security.snyk.io/vuln/SNYK-RUBY-MUSTACHEJSRAILS-20242
 title: mustache.js - quoteless attributes in templates can lead to XSS
 date: 2015-11-17
 description: |
-  The upstream 'mustache.js' node.js module was found to not properly escape
-  backtick (`) and equals (=) characters, leading to possible content injection
-  via attributes in templates.
+  The upstream 'mustache.js' node.js module was found to not properly
+  escape backtick (`) and equals (=) characters, leading to possible
+  content injection via attributes in templates.
 
   Example:
   * Template: <a href={{foo}}/>
   * Input: { 'foo' : 'test.com onload=alert(1)'}
   * Rendered result: <a href=test.com onload=alert(1)/>
 patched_versions:
-- '>= 2.0.3'
+  - ">= 2.0.3"
+related:
+  ghsa:
+    - w3w8-37jv-2c58
+  url:
+    - https://github.com/janl/mustache.js/pull/530
+    - https://security.snyk.io/vuln/SNYK-RUBY-MUSTACHEJSRAILS-20242
+    - https://www.veracode.com/blog/research/handlebarsjs-vulnerability-impact-study
diff --git a/gems/mysql-binuuid-rails/CVE-2018-18476.yml b/gems/mysql-binuuid-rails/CVE-2018-18476.yml
index cfdd5c728c..579f17595a 100644
--- a/gems/mysql-binuuid-rails/CVE-2018-18476.yml
+++ b/gems/mysql-binuuid-rails/CVE-2018-18476.yml
@@ -14,7 +14,7 @@ description: |
   string value provided is a valid hex string and doesn’t do any checks on it.
 cvss_v3: 9.8
 patched_versions:
-- ">= 1.1.1"
+  - ">= 1.1.1"
 related:
   url:
-  - https://github.com/nedap/mysql-binuuid-rails/pull/18
+    - https://github.com/nedap/mysql-binuuid-rails/pull/18
diff --git a/gems/narou/CVE-2021-35514.yml b/gems/narou/CVE-2021-35514.yml
index ded5ab911b..8105e55677 100644
--- a/gems/narou/CVE-2021-35514.yml
+++ b/gems/narou/CVE-2021-35514.yml
@@ -5,8 +5,9 @@ ghsa: gwrj-88fp-5m36
 url: https://github.com/advisories/GHSA-gwrj-88fp-5m36
 title: Code injection in Narou
 date: 2021-07-02
-description: Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the
+description: |
+  Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the
   title name or author name of a novel.
 cvss_v3: 8.5
 patched_versions:
-- '>= 3.8.0'
+  - ">= 3.8.0"
diff --git a/gems/net-imap/CVE-2025-25186.yml b/gems/net-imap/CVE-2025-25186.yml
new file mode 100644
index 0000000000..59df1e69ac
--- /dev/null
+++ b/gems/net-imap/CVE-2025-25186.yml
@@ -0,0 +1,159 @@
+---
+gem: net-imap
+cve: 2025-25186
+ghsa: 7fc5-f82f-cx69
+url: https://github.com/ruby/net-imap/security/advisories/GHSA-7fc5-f82f-cx69
+title: Possible DoS by memory exhaustion in net-imap
+date: 2025-02-10
+description: |
+  ### Summary
+
+  There is a possibility for denial of service by memory exhaustion in
+  `net-imap`'s response parser.  At any time while the client is
+  connected, a malicious server can send  can send highly compressed
+  `uid-set` data which is automatically read by the client's receiver
+  thread.  The response parser uses `Range#to_a` to convert the
+  `uid-set` data into arrays of integers, with no limitation on the
+  expanded size of the ranges.
+
+  ### Details
+
+  IMAP's `uid-set` and `sequence-set` formats can compress ranges of
+  numbers, for example: `"1,2,3,4,5"` and `"1:5"` both represent the
+  same set.  When `Net::IMAP::ResponseParser` receives `APPENDUID` or
+  `COPYUID` response codes, it expands each `uid-set` into an array of
+  integers.  On a 64 bit system, these arrays will expand to 8 bytes
+  for each number in the set.  A malicious IMAP server may send
+  specially crafted `APPENDUID` or `COPYUID` responses with very large
+  `uid-set` ranges.
+
+  The `Net::IMAP` client parses each server response in a separate
+  thread, as soon as each responses is received from the server.
+  This attack works even when the client does not handle the
+  `APPENDUID` or `COPYUID` responses.
+
+  Malicious inputs:
+
+  ```ruby
+  # 40 bytes expands to ~1.6GB:
+  "* OK [COPYUID 1 1:99999999 1:99999999]\r\n"
+
+  # Worst *valid* input scenario (using uint32 max),
+  # 44 bytes expands to 64GiB:
+  "* OK [COPYUID 1 1:4294967295 1:4294967295]\r\n"
+
+  # Numbers must be non-zero uint32, but this isn't validated.  Arrays
+  # larger than UINT32_MAX can be created.  For example, the following
+  # would theoretically expand to almost 800 exabytes:
+  "* OK [COPYUID 1 1:99999999999999999999 1:99999999999999999999]\r\n"
+  ```
+
+  Simple way to test this:
+  ```ruby
+  require "net/imap"
+
+  def test(size)
+    input = "A004 OK [COPYUID 1 1:#{size} 1:#{size}] too large?\n"
+    parser = Net::IMAP::ResponseParser.new
+    parser.parse input
+  end
+
+  test(99_999_999)
+  ```
+
+  ### Fixes
+
+  #### Preferred Fix, minor API changes
+
+  Upgrade to v0.4.19, v0.5.6, or higher, and configure:
+
+  ```ruby
+  # globally
+  Net::IMAP.config.parser_use_deprecated_uidplus_data = false
+  # per-client
+  imap = Net::IMAP.new(hostname, ssl: true,
+                                 parser_use_deprecated_uidplus_data: false)
+  imap.config.parser_use_deprecated_uidplus_data = false
+  ```
+
+  This replaces `UIDPlusData` with `AppendUIDData` and `CopyUIDData`.
+  These classes store their UIDs as `Net::IMAP::SequenceSet` objects
+  (_not_ expanded into arrays of integers).  Code that does not handle
+  `APPENDUID` or `COPYUID` responses will not notice any difference.
+  Code that does handle these responses _may_ need to be updated.  See
+  the documentation for
+  [UIDPlusData](https://ruby.github.io/net-imap/Net/IMAP/UIDPlusData.html),
+  [AppendUIDData](https://ruby.github.io/net-imap/Net/IMAP/AppendUIDData.html)
+  and [CopyUIDData](https://ruby.github.io/net-imap/Net/IMAP/CopyUIDData.html).
+
+  For v0.3.8, this option is not available.
+  For v0.4.19, the default value is `true`.
+  For v0.5.6, the default value is `:up_to_max_size`.
+  For v0.6.0, the only allowed value will be `false`  _(`UIDPlusData`
+  will be removed from v0.6)_.
+
+  #### Mitigation, backward compatible API
+
+  Upgrade to v0.3.8, v0.4.19, v0.5.6, or higher.
+
+  For backward compatibility, `uid-set` can still be expanded
+  into an array, but a maximum limit will be applied.
+
+  Assign `config.parser_max_deprecated_uidplus_data_size` to set the
+  maximum `UIDPlusData` UID set size. When
+  `config.parser_use_deprecated_uidplus_data == true`, larger sets will crash.
+  When  `config.parser_use_deprecated_uidplus_data == :up_to_max_size`,
+  larger sets will use `AppendUIDData` or `CopyUIDData`.
+
+  For v0.3,8, this limit is _hard-coded_ to 10,000, and larger sets
+  will always raise `Net::IMAP::ResponseParseError`.
+  For v0.4.19, the limit defaults to 1000.
+  For v0.5.6, the limit defaults to 100.
+  For v0.6.0, the limit will be ignored  _(`UIDPlusData` will be
+  removed from v0.6)_.
+
+  #### Please Note: unhandled responses
+
+  If the client does not add response handlers to prune unhandled
+  responses, a malicious server can still eventually exhaust all
+
+  client memory, by repeatedly sending malicious responses.  However,
+  `net-imap` has always retained unhandled responses, and it has always
+  been necessary for long-lived connections to prune these responses.
+  _This is not significantly different from connecting to a trusted
+  server with a long-lived connection._  To limit the maximum number
+  of retained responses, a simple handler might look something like
+  the following:
+
+  ```ruby
+  limit = 1000
+  imap.add_response_handler do |resp|
+    next unless resp.respond_to?(:name) && resp.respond_to?(:data)
+    name = resp.name
+    code = resp.data.code&.name if resp.data.respond_to?(:code)
+    if Net::IMAP::VERSION > "0.4.0"
+      imap.responses(name) { _1.slice!(0...-limit) }
+      imap.responses(code) { _1.slice!(0...-limit) }
+    else
+      imap.responses(name).slice!(0...-limit)
+      imap.responses(code).slice!(0...-limit)
+    end
+  end
+  ```
+cvss_v3: 6.5
+unaffected_versions:
+  - "< 0.3.2"
+patched_versions:
+  - "~> 0.3.8"
+  - "~> 0.4.19"
+  - ">= 0.5.6"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-25186
+    - https://www.ruby-lang.org/en/news/2025/02/10/dos-net-imap-cve-2025-25186
+    - https://github.com/ruby/net-imap/security/advisories/GHSA-7fc5-f82f-cx69
+    - https://github.com/ruby/net-imap/commit/70e3ddd071a94e450b3238570af482c296380b35
+    - https://github.com/ruby/net-imap/commit/c8c5a643739d2669f0c9a6bb9770d0c045fd74a3
+    - https://github.com/ruby/net-imap/commit/cb92191b1ddce2d978d01b56a0883b6ecf0b1022
+    - https://hackerone.com/reports/2987782
+    - https://github.com/advisories/GHSA-7fc5-f82f-cx69
diff --git a/gems/net-imap/CVE-2025-43857.yml b/gems/net-imap/CVE-2025-43857.yml
new file mode 100644
index 0000000000..589e26a527
--- /dev/null
+++ b/gems/net-imap/CVE-2025-43857.yml
@@ -0,0 +1,124 @@
+---
+gem: net-imap
+cve: 2025-43857
+ghsa: j3g3-5qv5-52mj
+url: https://github.com/ruby/net-imap/security/advisories/GHSA-j3g3-5qv5-52mj
+title: net-imap rubygem vulnerable to possible DoS by memory exhaustion
+date: 2025-04-28
+description: |
+  ### Summary
+
+  There is a possibility for denial of service by memory exhaustion
+  when `net-imap` reads server responses.  At any time while the client
+  is connected, a malicious server can send can send a "literal" byte
+  count, which is automatically read by the client's receiver thread.
+  The response reader immediately allocates memory for the number of
+  bytes indicated by the server response.
+
+  This should not be an issue when securely connecting to trusted IMAP
+  servers that are well-behaved.  It can affect insecure connections
+  and buggy, untrusted, or compromised servers (for example, connecting
+  to a user supplied hostname).
+
+  ### Details
+
+  The IMAP protocol allows "literal" strings to be sent in responses,
+  prefixed with their size in curly braces (e.g. `{1234567890}`).
+  When `Net::IMAP` receives a response containing a literal string,
+  it calls `IO#read` with that size.  When called with a size,
+  `IO#read` immediately allocates memory to buffer the entire string
+  before processing continues.  The server does not need to send any
+  more data.  There is no limit on the size of literals that will be
+  accepted.
+
+  ### Fix
+  #### Upgrade
+  Users should upgrade to `net-imap` 0.5.7 or later.  A configurable
+  `max_response_size` limit has been added to `Net::IMAP`'s response
+  reader.  The `max_response_size` limit has also been backported to
+  `net-imap` 0.2.5, 0.3.9, and 0.4.20.
+
+  To set a global value for `max_response_size`, users must upgrade
+  to `net-imap` ~> 0.4.20, or > 0.5.7.
+
+  #### Configuration
+
+  To avoid backward compatibility issues for secure connections to
+  trusted well-behaved servers, the default `max_response_size` for
+  `net-imap` 0.5.7 is _very high_ (512MiB), and the default
+  `max_response_size` for `net-imap` ~> 0.4.20, ~> 0.3.9, and 0.2.5
+  is `nil` (unlimited).
+
+  When connecting to untrusted servers or using insecure connections,
+  a much lower `max_response_size` should be used.
+  ```ruby
+  # Set the global max_response_size (only ~> v0.4.20, > 0.5.7)
+  Net::IMAP.config.max_response_size = 256 << 10 # 256 KiB
+
+  # Set when creating the connection
+  imap = Net::IMAP.new(hostname, ssl: true,
+                       max_response_size: 16 << 10) # 16 KiB
+
+  # Set after creating the connection
+  imap.max_response_size = 256 << 20 # 256 KiB
+  # flush currently waiting read, to ensure the new setting is loaded
+  imap.noop
+  ```
+
+  _**Please Note:**_ `max_response_size` only limits the size _per
+  response_.  It does not prevent a flood of individual responses
+  and it does not limit how many unhandled responses may be stored
+  on the responses hash.  Users are responsible for adding response
+  handlers to prune excessive unhandled responses.
+
+  #### Compatibility with lower `max_response_size`
+
+  A lower `max_response_size` may cause a few commands which
+  legitimately return very large responses to raise an exception
+  and close the connection.  The `max_response_size` could be
+  temporarily set to a higher value, but paginated or limited
+  versions of commands should be used whenever possible.  For
+  example, to fetch message bodies:
+
+  ```ruby
+  imap.max_response_size = 256 << 20 # 256 KiB
+  imap.noop # flush currently waiting read
+
+  # fetch a message in 252KiB chunks
+  size = imap.uid_fetch(uid, "RFC822.SIZE").first.rfc822_size
+  limit = 252 << 10
+  message = ((0..size)limit).each_with_object("") {|offset, str|
+    str << imap.uid_fetch(uid,
+    "BODY.PEEK[]<#{offset}.#{limit}>").first.message(offset:)
+  }
+
+  imap.max_response_size = 16 << 20 # 16 KiB
+  imap.noop # flush currently waiting read
+  ```
+
+  ### References
+
+  * PR to introduce max_response_size: https://github.com/ruby/net-imap/pull/442
+    * Specific commit: [0ae8576c1 - lib/net/imap/response_reader.rb](https://github.com/ruby/net-imap/pull/444/commits/0ae8576c1a90bcd9573f81bdad4b4b824642d105#diff-53721cb4d9c3fb86b95cc8476ca2df90968ad8c481645220c607034399151462)
+  * Backport to 0.4: https://github.com/ruby/net-imap/pull/445
+  * Backport to 0.3: https://github.com/ruby/net-imap/pull/446
+  * Backport to 0.2: https://github.com/ruby/net-imap/pull/447
+cvss_v4: 6.0
+patched_versions:
+  - "~> 0.2.5"
+  - "~> 0.3.9"
+  - "~> 0.4.20"
+  - ">= 0.5.7"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-43857
+    - https://www.ruby-lang.org/en/news/2025/04/28/dos-net-imap-cve-2025-43857
+    - https://github.com/ruby/net-imap/security/advisories/GHSA-j3g3-5qv5-52mj
+    - https://github.com/ruby/net-imap/pull/442
+    - https://github.com/ruby/net-imap/pull/444/commits/0ae8576c1a90bcd9573f81bdad4b4b824642d105#diff-53721cb4d9c3fb86b95cc8476ca2df90968ad8c481645220c607034399151462
+    - https://github.com/ruby/net-imap/pull/445
+    - https://github.com/ruby/net-imap/pull/446
+    - https://github.com/ruby/net-imap/pull/447
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-43857
+    - https://github.com/advisories/GHSA-j3g3-5qv5-52mj
+    - https://hackerone.com/reports/3108869
diff --git a/gems/net-ldap/CVE-2014-0083.yml b/gems/net-ldap/CVE-2014-0083.yml
index 2e29bf5892..ec59fb1736 100644
--- a/gems/net-ldap/CVE-2014-0083.yml
+++ b/gems/net-ldap/CVE-2014-0083.yml
@@ -2,12 +2,15 @@
 gem: net-ldap
 cve: 2014-0083
 osvdb: 106108
+ghsa: qwgm-mxm4-3q2c
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-0083
 title: 'CVE-2014-0083 rubygem-net-ldap: SSHA passwords generated by the net-ldap Ruby
   gem use a weak salt'
 date: 2014-02-13
-description: The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA
+description: |
+  The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA
   passwords.
 cvss_v2: 1.9
+cvss_v3: 5.5
 patched_versions:
-- '>= 0.6.0'
+  - ">= 0.6.0"
diff --git a/gems/net-ldap/CVE-2017-17718.yml b/gems/net-ldap/CVE-2017-17718.yml
index 65a31fb089..8bfde39f18 100644
--- a/gems/net-ldap/CVE-2017-17718.yml
+++ b/gems/net-ldap/CVE-2017-17718.yml
@@ -11,8 +11,8 @@ description: |
   to match the host it was supposed to be connecting to.
 cvss_v3: 5.9
 patched_versions:
-- ">= 0.16.0"
+  - ">= 0.16.0"
 related:
   url:
-  - https://github.com/ruby-ldap/ruby-net-ldap/pull/279
-  - https://github.com/ruby-ldap/ruby-net-ldap/commit/e4c46a223a19feda78393a793711353aa1febdcd
+    - https://github.com/ruby-ldap/ruby-net-ldap/pull/279
+    - https://github.com/ruby-ldap/ruby-net-ldap/commit/e4c46a223a19feda78393a793711353aa1febdcd
diff --git a/gems/netaddr/CVE-2019-17383.yml b/gems/netaddr/CVE-2019-17383.yml
index b6202bce8f..c1723546ca 100644
--- a/gems/netaddr/CVE-2019-17383.yml
+++ b/gems/netaddr/CVE-2019-17383.yml
@@ -10,4 +10,5 @@ description: |
   such that a gem install may result in 0777 permissions in the target filesystem.
 cvss_v3: 9.8
 patched_versions:
-- '>= 2.0.4'
+  - "~> 1.5.3"
+  - ">= 2.0.4"
diff --git a/gems/newrelic_rpm/CVE-2013-0284.yml b/gems/newrelic_rpm/CVE-2013-0284.yml
index 2bc94fadf6..7224db5c91 100644
--- a/gems/newrelic_rpm/CVE-2013-0284.yml
+++ b/gems/newrelic_rpm/CVE-2013-0284.yml
@@ -2,6 +2,7 @@
 gem: newrelic_rpm
 cve: 2013-0284
 osvdb: 90189
+ghsa: q6cw-2553-7837
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0284
 title: Ruby on Rails newrelic_rpm Gem Discloses Sensitive Information
 date: 2012-12-06
@@ -11,4 +12,4 @@ description: |
   information includes the database IP address, username, and password
 cvss_v2: 5.0
 patched_versions:
-- '>= 3.5.3.25'
+  - ">= 3.5.3.25"
diff --git a/gems/nokogiri/CVE-2012-6685.yml b/gems/nokogiri/CVE-2012-6685.yml
index 85cd027092..5968d55f52 100644
--- a/gems/nokogiri/CVE-2012-6685.yml
+++ b/gems/nokogiri/CVE-2012-6685.yml
@@ -2,10 +2,13 @@
 gem: nokogiri
 cve: 2012-6685
 osvdb: 90946
+ghsa: 6wj9-77wq-jq7p
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-6685
-title: 'CVE-2012-6685 rubygem-nokogiri: XML eXternal Entity (XXE) flaw'
+title: "CVE-2012-6685 rubygem-nokogiri: XML eXternal Entity (XXE) flaw"
 date: 2012-06-08
-description: Nokogiri before 1.5.4 is vulnerable to XXE attacks
+description: |
+  Nokogiri before 1.5.4 is vulnerable to XXE attacks
 cvss_v2: 5.0
+cvss_v3: 7.5
 patched_versions:
-- '>= 1.5.4'
+  - ">= 1.5.4"
diff --git a/gems/nokogiri/CVE-2013-6460.yml b/gems/nokogiri/CVE-2013-6460.yml
index 98cd66b6dc..55f80d3d13 100644
--- a/gems/nokogiri/CVE-2013-6460.yml
+++ b/gems/nokogiri/CVE-2013-6460.yml
@@ -3,12 +3,15 @@ gem: nokogiri
 platform: jruby
 cve: 2013-6460
 osvdb: 101179
+ghsa: 62qp-3fxm-9wxf
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-6460
-title: 'CVE-2013-6460 rubygem-nokogiri: DoS while parsing XML documents'
+title: "CVE-2013-6460 rubygem-nokogiri: DoS while parsing XML documents"
 date: 2013-12-14
-description: Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing
+description: |
+  Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing
   XML documents
 cvss_v2: 4.3
+cvss_v3: 6.5
 patched_versions:
-- ~> 1.5.11
-- '>= 1.6.1'
+  - "~> 1.5.11"
+  - ">= 1.6.1"
diff --git a/gems/nokogiri/CVE-2013-6461.yml b/gems/nokogiri/CVE-2013-6461.yml
index 5b59bf695a..4157a8e118 100644
--- a/gems/nokogiri/CVE-2013-6461.yml
+++ b/gems/nokogiri/CVE-2013-6461.yml
@@ -2,11 +2,14 @@
 gem: nokogiri
 cve: 2013-6461
 osvdb: 101458
+ghsa: jmhh-w7xp-wg39
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-6461
-title: 'CVE-2013-6461 rubygem-nokogiri: DoS while parsing XML entities'
+title: "CVE-2013-6461 rubygem-nokogiri: DoS while parsing XML entities"
 date: 2013-12-14
-description: Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing
+description: |
+  Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing
   to apply limits
+cvss_v3: 6.5
 patched_versions:
-- ~> 1.5.11
-- '>= 1.6.1'
+  - "~> 1.5.11"
+  - ">= 1.6.1"
diff --git a/gems/nokogiri/CVE-2015-1819.yml b/gems/nokogiri/CVE-2015-1819.yml
index fa97201383..a7f6160f69 100644
--- a/gems/nokogiri/CVE-2015-1819.yml
+++ b/gems/nokogiri/CVE-2015-1819.yml
@@ -40,14 +40,14 @@ description: |
   uninitialized value(s)" and unsafe memory access. This issue does not have a
   CVE assigned yet. See related URLs for details. Patched in v1.6.7.rc4.
 patched_versions:
-- ~> 1.6.6.4
-- '>= 1.6.7.rc4'
+  - "~> 1.6.6.4"
+  - ">= 1.6.7.rc4"
 related:
   cve:
-  - 2015-7941
-  - 2015-7942
-  - 2015-7995
-  - 2015-8035
+    - 2015-7941
+    - 2015-7942
+    - 2015-7995
+    - 2015-8035
   url:
-  - https://github.com/sparklemotion/nokogiri/pull/1376
-  - https://github.com/sparklemotion/nokogiri/commit/8f3de6d88d0da11fb62a45daa61b85ce71b4af59
+    - https://github.com/sparklemotion/nokogiri/pull/1376
+    - https://github.com/sparklemotion/nokogiri/commit/8f3de6d88d0da11fb62a45daa61b85ce71b4af59
diff --git a/gems/nokogiri/CVE-2015-5312.yml b/gems/nokogiri/CVE-2015-5312.yml
index 09868e7923..e4ad3465ae 100644
--- a/gems/nokogiri/CVE-2015-5312.yml
+++ b/gems/nokogiri/CVE-2015-5312.yml
@@ -71,18 +71,18 @@ description: |
   out-of-bounds heap read.
 cvss_v2: 7.1
 unaffected_versions:
-- < 1.6.0
+  - "< 1.6.0"
 patched_versions:
-- '>= 1.6.7.1'
+  - ">= 1.6.7.1"
 related:
   cve:
-  - 2015-7497
-  - 2015-7498
-  - 2015-7499
-  - 2015-7500
-  - 2015-8241
-  - 2015-8242
-  - 2015-8317
+    - 2015-7497
+    - 2015-7498
+    - 2015-7499
+    - 2015-7500
+    - 2015-8241
+    - 2015-8242
+    - 2015-8317
   url:
-  - https://github.com/sparklemotion/nokogiri/pull/1378
-  - https://github.com/sparklemotion/nokogiri/commit/4205af1a2a546f79d1b48df2ad8b27299c0099c5
+    - https://github.com/sparklemotion/nokogiri/pull/1378
+    - https://github.com/sparklemotion/nokogiri/commit/4205af1a2a546f79d1b48df2ad8b27299c0099c5
diff --git a/gems/nokogiri/CVE-2015-7499.yml b/gems/nokogiri/CVE-2015-7499.yml
index 2abeab9ae3..3766c03b95 100644
--- a/gems/nokogiri/CVE-2015-7499.yml
+++ b/gems/nokogiri/CVE-2015-7499.yml
@@ -24,9 +24,9 @@ description: |
   possibly cause libxml2 to crash, resulting in a denial of service.
 cvss_v2: 5.0
 unaffected_versions:
-- < 1.6.0
+  - "< 1.6.0"
 patched_versions:
-- '>= 1.6.7.2'
+  - ">= 1.6.7.2"
 related:
   url:
-  - https://github.com/sparklemotion/nokogiri/commit/9eb540e7c905924a42757bf0a34c2c00707d536c
+    - https://github.com/sparklemotion/nokogiri/commit/9eb540e7c905924a42757bf0a34c2c00707d536c
diff --git a/gems/nokogiri/CVE-2015-8806.yml b/gems/nokogiri/CVE-2015-8806.yml
index 7a4e483c2c..84339bb5d6 100644
--- a/gems/nokogiri/CVE-2015-8806.yml
+++ b/gems/nokogiri/CVE-2015-8806.yml
@@ -16,28 +16,28 @@ description: |
   http://www.ubuntu.com/usn/usn-2994-1/
 cvss_v3: 7.5
 unaffected_versions:
-- "< 1.6.0"
+  - "< 1.6.0"
 patched_versions:
-- ">= 1.6.8"
+  - ">= 1.6.8"
 related:
   cve:
-  - 2016-1762
-  - 2016-1833
-  - 2016-1834
-  - 2016-1835
-  - 2016-1836
-  - 2016-1837
-  - 2016-1838
-  - 2016-1839
-  - 2016-1840
-  - 2016-2073
-  - 2016-3627
-  - 2016-3705
-  - 2016-4447
-  - 2016-4449
-  - 2016-4483
+    - 2016-1762
+    - 2016-1833
+    - 2016-1834
+    - 2016-1835
+    - 2016-1836
+    - 2016-1837
+    - 2016-1838
+    - 2016-1839
+    - 2016-1840
+    - 2016-2073
+    - 2016-3627
+    - 2016-3705
+    - 2016-4447
+    - 2016-4449
+    - 2016-4483
   url:
-  - https://github.com/sparklemotion/nokogiri/issues/1473
-  - https://github.com/sparklemotion/nokogiri/commit/03d402212707bd5dfa0a21b7de5e91a7f9d90028
-  - https://mail.gnome.org/archives/xml/2016-May/msg00023.html
-  - http://www.ubuntu.com/usn/usn-2994-1/
+    - https://github.com/sparklemotion/nokogiri/issues/1473
+    - https://github.com/sparklemotion/nokogiri/commit/03d402212707bd5dfa0a21b7de5e91a7f9d90028
+    - https://mail.gnome.org/archives/xml/2016-May/msg00023.html
+    - http://www.ubuntu.com/usn/usn-2994-1/
diff --git a/gems/nokogiri/CVE-2016-4658.yml b/gems/nokogiri/CVE-2016-4658.yml
index 31a44a7d52..e5c5caaae2 100644
--- a/gems/nokogiri/CVE-2016-4658.yml
+++ b/gems/nokogiri/CVE-2016-4658.yml
@@ -24,9 +24,9 @@ description: |
 cvss_v2: 10.0
 cvss_v3: 9.8
 patched_versions:
-- '>= 1.7.1'
+  - ">= 1.7.1"
 related:
   cve:
-  - 2016-5131
+    - 2016-5131
   url:
-  - https://github.com/sparklemotion/nokogiri/issues/1615
+    - https://github.com/sparklemotion/nokogiri/issues/1615
diff --git a/gems/nokogiri/CVE-2017-15412.yml b/gems/nokogiri/CVE-2017-15412.yml
index 49b9d6fbc7..ccb23690a5 100644
--- a/gems/nokogiri/CVE-2017-15412.yml
+++ b/gems/nokogiri/CVE-2017-15412.yml
@@ -1,6 +1,7 @@
 ---
 gem: nokogiri
 cve: 2017-15412
+ghsa: r58r-74gx-6wx3
 url: https://github.com/sparklemotion/nokogiri/issues/1714
 title: Nokogiri gem, via libxml, is affected by DoS vulnerabilities
 date: 2018-01-29
@@ -12,11 +13,12 @@ description: |
   It was discovered that libxml2 incorrecty handled certain files. An attacker
   could use this issue with specially constructed XML data to cause libxml2 to
   consume resources, leading to a denial of service.
+cvss_v3: 8.8
 patched_versions:
-- '>= 1.8.2'
+  - ">= 1.8.2"
 related:
   cve:
-  - 2017-18258
+    - 2017-18258
   url:
-  - https://usn.ubuntu.com/usn/usn-3513-1/
-  - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-15412.html
+    - https://usn.ubuntu.com/usn/usn-3513-1/
+    - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-15412.html
diff --git a/gems/nokogiri/CVE-2017-16932.yml b/gems/nokogiri/CVE-2017-16932.yml
index b80fd523c2..d215c34a60 100644
--- a/gems/nokogiri/CVE-2017-16932.yml
+++ b/gems/nokogiri/CVE-2017-16932.yml
@@ -1,6 +1,7 @@
 ---
 gem: nokogiri
 cve: 2017-16932
+ghsa: x2fm-93ww-ggvx
 url: https://github.com/sparklemotion/nokogiri/issues/1714
 title: Nokogiri gem, via libxml, is affected by DoS vulnerabilities
 date: 2018-01-29
@@ -12,9 +13,10 @@ description: |
   Wei Lei discovered that libxml2 incorrecty handled certain parameter
   entities. An attacker could use this issue with specially constructed XML
   data to cause libxml2 to consume resources, leading to a denial of service.
+cvss_v3: 7.5
 patched_versions:
-- '>= 1.8.1'
+  - ">= 1.8.1"
 related:
   url:
-  - https://usn.ubuntu.com/usn/usn-3504-1/
-  - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-16932.html
+    - https://usn.ubuntu.com/usn/usn-3504-1/
+    - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-16932.html
diff --git a/gems/nokogiri/CVE-2017-18258.yml b/gems/nokogiri/CVE-2017-18258.yml
new file mode 100644
index 0000000000..259afd1e09
--- /dev/null
+++ b/gems/nokogiri/CVE-2017-18258.yml
@@ -0,0 +1,24 @@
+---
+gem: nokogiri
+cve: 2017-18258
+ghsa: 882p-jqgm-f45g
+url: https://git.gnome.org/browse/libxml2/commit/?id=e2a9122b8dde53d320750451e9907a7dcb2ca8bb
+title: Moderate severity vulnerability that affects nokogiri
+date: 2018-04-13
+description: |
+  The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial
+  of service (memory consumption) via a crafted LZMA file, because the decoder functionality does
+  not restrict memory usage to what is required for a legitimate file.
+
+  References:
+    - https://nvd.nist.gov/vuln/detail/CVE-2017-18258
+    - https://git.gnome.org/browse/libxml2/commit/?id=e2a9122b8dde53d320750451e9907a7dcb2ca8bb
+    - https://github.com/advisories/GHSA-882p-jqgm-f45g
+    - https://kc.mcafee.com/corporate/index?page=content&id=SB10284
+    - https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html
+    - https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html
+    - https://security.netapp.com/advisory/ntap-20190719-0001/
+    - https://usn.ubuntu.com/3739-1/
+cvss_v3: 6.5
+patched_versions:
+  - ">= 1.8.2"
diff --git a/gems/nokogiri/CVE-2017-5029.yml b/gems/nokogiri/CVE-2017-5029.yml
index 43560d535d..618768095e 100644
--- a/gems/nokogiri/CVE-2017-5029.yml
+++ b/gems/nokogiri/CVE-2017-5029.yml
@@ -35,11 +35,11 @@ description: |
   * http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-4738.html
 cvss_v3: 8.8
 patched_versions:
-- ">= 1.7.2"
+  - ">= 1.7.2"
 related:
   cve:
-  - 2016-4738
-  - 2017-5029
+    - 2016-4738
+    - 2017-5029
   url:
-  - http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-5029.html
-  - http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-4738.html
+    - http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-5029.html
+    - http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-4738.html
diff --git a/gems/nokogiri/CVE-2017-9050.yml b/gems/nokogiri/CVE-2017-9050.yml
index cecce5153c..300fa04196 100644
--- a/gems/nokogiri/CVE-2017-9050.yml
+++ b/gems/nokogiri/CVE-2017-9050.yml
@@ -40,22 +40,22 @@ description: |
   denial of service. (CVE-2017-9049, CVE-2017-9050)
 cvss_v3: 7.5
 patched_versions:
-- '>= 1.8.1'
+  - ">= 1.8.1"
 related:
   cve:
-  - 2017-0663
-  - 2017-7375
-  - 2017-7376
-  - 2017-9047
-  - 2017-9048
-  - 2017-9049
-  - 2017-9050
+    - 2017-0663
+    - 2017-7375
+    - 2017-7376
+    - 2017-9047
+    - 2017-9048
+    - 2017-9049
+    - 2017-9050
   url:
-  - https://usn.ubuntu.com/usn/usn-3424-1/
-  - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-0663.html
-  - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-7375.html
-  - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-7376.html
-  - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-9047.html
-  - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-9048.html
-  - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-9049.html
-  - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-9050.html
+    - https://usn.ubuntu.com/usn/usn-3424-1/
+    - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-0663.html
+    - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-7375.html
+    - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-7376.html
+    - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-9047.html
+    - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-9048.html
+    - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-9049.html
+    - https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-9050.html
diff --git a/gems/nokogiri/CVE-2018-14404.yml b/gems/nokogiri/CVE-2018-14404.yml
index 12ba0e62a7..39f25ebc37 100644
--- a/gems/nokogiri/CVE-2018-14404.yml
+++ b/gems/nokogiri/CVE-2018-14404.yml
@@ -60,11 +60,11 @@ description: |
   Canonical rates this vulnerability as "Priority: Medium"
 cvss_v3: 7.5
 patched_versions:
-- ">= 1.8.5"
+  - ">= 1.8.5"
 related:
   cve:
-  - 2018-14567
+    - 2018-14567
   url:
-  - https://groups.google.com/forum/#!msg/ruby-security-ann/uVrmO2HjqQw/Fw3ocLI0BQAJ
-  - https://gitlab.gnome.org/GNOME/libxml2/commit/a436374994c47b12d5de1b8b1d191a098fa23594
-  - https://gitlab.gnome.org/GNOME/libxml2/commit/2240fbf5912054af025fb6e01e26375100275e74
+    - https://groups.google.com/forum/#!msg/ruby-security-ann/uVrmO2HjqQw/Fw3ocLI0BQAJ
+    - https://gitlab.gnome.org/GNOME/libxml2/commit/a436374994c47b12d5de1b8b1d191a098fa23594
+    - https://gitlab.gnome.org/GNOME/libxml2/commit/2240fbf5912054af025fb6e01e26375100275e74
diff --git a/gems/nokogiri/CVE-2018-25032.yml b/gems/nokogiri/CVE-2018-25032.yml
new file mode 100644
index 0000000000..cf9bbafcbe
--- /dev/null
+++ b/gems/nokogiri/CVE-2018-25032.yml
@@ -0,0 +1,44 @@
+---
+gem: nokogiri
+cve: 2018-25032
+ghsa: v6gp-9mmm-c6p5
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5
+title: Out-of-bounds Write in zlib affects Nokogiri
+date: 2022-04-11
+description: |
+  ## Summary
+
+  Nokogiri v1.13.4 updates the vendored zlib from 1.2.11
+  to 1.2.12, which addresses [CVE-2018-25032](https://nvd.nist.gov/vuln/detail/CVE-2018-25032).
+  That CVE is scored as CVSS 7.4 "High" on the NVD record as of 2022-04-05.
+
+  Please note that this advisory only applies to the CRuby implementation of
+  Nokogiri `< 1.13.4`, and only if the packaged version of `zlib` is being used.
+  Please see [this document](https://nokogiri.org/LICENSE-DEPENDENCIES.html#default-platform-release-ruby)
+  for a complete description of which platform gems vendor `zlib`. If you've
+  overridden defaults at installation time to use system libraries instead of
+  packaged libraries, you should instead pay attention to your distro's `zlib`
+  release announcements.
+
+  ## Mitigation
+
+  Upgrade to Nokogiri `>= v1.13.4`.
+
+  ## Impact
+
+  ### [CVE-2018-25032](https://nvd.nist.gov/vuln/detail/CVE-2018-25032) in zlib
+
+  - **Severity**: High
+  - **Type**: [CWE-787](https://cwe.mitre.org/data/definitions/787.html)
+    Out of bounds write
+  - **Description**: zlib before 1.2.12 allows memory corruption when
+    deflating (i.e., when compressing) if the input has many distant matches.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 1.13.4"
+related:
+  ghsa:
+    - jc36-42cf-vqwj
+  url:
+    - https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4
+    - https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ
diff --git a/gems/nokogiri/CVE-2018-8048.yml b/gems/nokogiri/CVE-2018-8048.yml
index 9ab8f173dd..18a4da8e62 100644
--- a/gems/nokogiri/CVE-2018-8048.yml
+++ b/gems/nokogiri/CVE-2018-8048.yml
@@ -1,9 +1,10 @@
 ---
 gem: nokogiri
 cve: 2018-8048
-date: 2018-03-29
+ghsa: x7rv-cr6v-4vm4
 url: https://github.com/sparklemotion/nokogiri/pull/1746
 title: Revert libxml2 behavior in Nokogiri gem that could cause XSS
+date: 2018-03-29
 description: |
   [MRI] Behavior in libxml2 has been reverted which caused
   CVE-2018-8048 (loofah gem), CVE-2018-3740 (sanitize gem), and
@@ -24,12 +25,13 @@ description: |
   comment on the upstream bug report here:
 
   https://bugzilla.gnome.org/show_bug.cgi?id=769760
+cvss_v3: 6.1
 patched_versions:
-- '>= 1.8.3'
+  - ">= 1.8.3"
 related:
   cve:
-  - 2018-3740
-  - 2018-3741
+    - 2018-3740
+    - 2018-3741
   url:
-  - https://github.com/GNOME/libxml2/commit/960f0e2
-  - https://bugzilla.gnome.org/show_bug.cgi?id=769760
+    - https://github.com/GNOME/libxml2/commit/960f0e2
+    - https://bugzilla.gnome.org/show_bug.cgi?id=769760
diff --git a/gems/nokogiri/CVE-2019-11068.yml b/gems/nokogiri/CVE-2019-11068.yml
index aced87ebb2..c4c32ec45b 100644
--- a/gems/nokogiri/CVE-2019-11068.yml
+++ b/gems/nokogiri/CVE-2019-11068.yml
@@ -1,9 +1,10 @@
 ---
 gem: nokogiri
 cve: 2019-11068
-date: 2019-04-22
+ghsa: qxcg-xjjg-66mj
 url: https://github.com/sparklemotion/nokogiri/issues/1892
 title: Nokogiri gem, via libxslt, is affected by improper access control vulnerability
+date: 2019-04-22
 description: |
   Nokogiri v1.10.3 has been released.
 
@@ -39,10 +40,10 @@ description: |
   Canonical rates this as "Priority: Medium".
 
   Debian rates this as "NVD Severity: High (attack range: remote)".
+cvss_v3: 9.8
 patched_versions:
-- '>= 1.10.3'
-
+  - ">= 1.10.3"
 related:
   url:
-  - https://groups.google.com/forum/#!msg/ruby-security-ann/_y80o1zZlOs/k4SDX6hoAAAJ
-  - https://gitlab.gnome.org/GNOME/libxslt/commit/e03553605b45c88f0b4b2980adfbbb8f6fca2fd6
+    - https://groups.google.com/forum/#!msg/ruby-security-ann/_y80o1zZlOs/k4SDX6hoAAAJ
+    - https://gitlab.gnome.org/GNOME/libxslt/commit/e03553605b45c88f0b4b2980adfbbb8f6fca2fd6
diff --git a/gems/nokogiri/CVE-2019-13117.yml b/gems/nokogiri/CVE-2019-13117.yml
index b5c6156307..fd1f4fe585 100644
--- a/gems/nokogiri/CVE-2019-13117.yml
+++ b/gems/nokogiri/CVE-2019-13117.yml
@@ -1,9 +1,10 @@
 ---
 gem: nokogiri
 cve: 2019-13117
-date: 2019-10-31
+ghsa: 4hm9-844j-jmxp
 url: https://github.com/sparklemotion/nokogiri/issues/1943
 title: Nokogiri gem, via libxslt, is affected by multiple vulnerabilities
+date: 2019-10-31
 description: |
   Nokogiri v1.10.5 has been released.
 
@@ -65,15 +66,14 @@ description: |
 
   Patched with commit https://gitlab.gnome.org/GNOME/libxslt/commit/2232473733b7313d67de8836ea3b29eec6e8e285
 patched_versions:
-- '>= 1.10.5'
-
+  - ">= 1.10.5"
 related:
-  url:
-  - https://groups.google.com/d/msg/ruby-security-ann/-Wq4aouIA3Q/yc76ZHemBgAJ
-  - https://usn.ubuntu.com/4164-1/
-  - https://gitlab.gnome.org/GNOME/libxslt/commit/c5eb6cf3aba0af048596106ed839b4ae17ecbcb1
-  - https://gitlab.gnome.org/GNOME/libxslt/commit/6ce8de69330783977dd14f6569419489875fb71b
-  - https://gitlab.gnome.org/GNOME/libxslt/commit/2232473733b7313d67de8836ea3b29eec6e8e285
   cve:
-  - 2019-13118
-  - 2019-18197
+    - 2019-13118
+    - 2019-18197
+  url:
+    - https://groups.google.com/d/msg/ruby-security-ann/-Wq4aouIA3Q/yc76ZHemBgAJ
+    - https://usn.ubuntu.com/4164-1/
+    - https://gitlab.gnome.org/GNOME/libxslt/commit/c5eb6cf3aba0af048596106ed839b4ae17ecbcb1
+    - https://gitlab.gnome.org/GNOME/libxslt/commit/6ce8de69330783977dd14f6569419489875fb71b
+    - https://gitlab.gnome.org/GNOME/libxslt/commit/2232473733b7313d67de8836ea3b29eec6e8e285
diff --git a/gems/nokogiri/CVE-2019-13118.yml b/gems/nokogiri/CVE-2019-13118.yml
new file mode 100644
index 0000000000..fe5381f002
--- /dev/null
+++ b/gems/nokogiri/CVE-2019-13118.yml
@@ -0,0 +1,61 @@
+---
+gem: nokogiri
+cve: 2019-13118
+ghsa: cf46-6xxh-pc75
+url: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069
+title: libxslt Type Confusion vulnerability that affects Nokogiri
+date: 2022-05-24
+description: |
+  In `numbers.c` in libxslt 1.1.33, a type holding grouping characters of an `xsl:number` instruction was too narrow and an invalid character/length combination could be passed to `xsltNumberFormatDecimal`, leading to a read of uninitialized stack data.
+
+  Nokogiri prior to version 1.10.5 used a vulnerable version of libxslt. Nokogiri 1.10.5 updated libxslt to version 1.1.34 to address this and other vulnerabilities in libxslt.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 1.10.5"
+related:
+  url:
+    - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15069
+    - https://gitlab.gnome.org/GNOME/libxslt/commit/6ce8de69330783977dd14f6569419489875fb71b
+    - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
+    - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
+    - https://lists.debian.org/debian-lts-announce/2019/07/msg00020.html
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IOYJKXPQCUNBMMQJWYXOR6QRUJZHEDRZ/
+    - https://oss-fuzz.com/testcase-detail/5197371471822848
+    - https://seclists.org/bugtraq/2019/Aug/21
+    - https://seclists.org/bugtraq/2019/Aug/22
+    - https://seclists.org/bugtraq/2019/Aug/23
+    - https://seclists.org/bugtraq/2019/Aug/25
+    - https://seclists.org/bugtraq/2019/Jul/35
+    - https://seclists.org/bugtraq/2019/Jul/36
+    - https://seclists.org/bugtraq/2019/Jul/37
+    - https://seclists.org/bugtraq/2019/Jul/40
+    - https://seclists.org/bugtraq/2019/Jul/41
+    - https://seclists.org/bugtraq/2019/Jul/42
+    - https://security.netapp.com/advisory/ntap-20190806-0004/
+    - https://security.netapp.com/advisory/ntap-20200122-0003/
+    - https://support.apple.com/kb/HT210346
+    - https://support.apple.com/kb/HT210348
+    - https://support.apple.com/kb/HT210351
+    - https://support.apple.com/kb/HT210353
+    - https://support.apple.com/kb/HT210356
+    - https://support.apple.com/kb/HT210357
+    - https://support.apple.com/kb/HT210358
+    - https://usn.ubuntu.com/4164-1/
+    - https://www.oracle.com/security-alerts/cpujan2020.html
+    - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html
+    - http://seclists.org/fulldisclosure/2019/Aug/11
+    - http://seclists.org/fulldisclosure/2019/Aug/13
+    - http://seclists.org/fulldisclosure/2019/Aug/14
+    - http://seclists.org/fulldisclosure/2019/Aug/15
+    - http://seclists.org/fulldisclosure/2019/Jul/22
+    - http://seclists.org/fulldisclosure/2019/Jul/23
+    - http://seclists.org/fulldisclosure/2019/Jul/24
+    - http://seclists.org/fulldisclosure/2019/Jul/26
+    - http://seclists.org/fulldisclosure/2019/Jul/31
+    - http://seclists.org/fulldisclosure/2019/Jul/37
+    - http://seclists.org/fulldisclosure/2019/Jul/38
+    - http://www.openwall.com/lists/oss-security/2019/11/17/2
+    - https://github.com/sparklemotion/nokogiri/issues/1943
+    - https://github.com/sparklemotion/nokogiri/commit/43a175339b47b8c604508813fc75b83f13cd173e
+    - https://github.com/sparklemotion/nokogiri/blob/f7aa3b0b29d6fe5fafe93dacd9b96b6b3d16b7ec/CHANGELOG.md?plain=1#L796
+    - https://github.com/sparklemotion/nokogiri/releases/tag/v1.10.5
diff --git a/gems/nokogiri/CVE-2019-18197.yml b/gems/nokogiri/CVE-2019-18197.yml
new file mode 100644
index 0000000000..0d8217ec88
--- /dev/null
+++ b/gems/nokogiri/CVE-2019-18197.yml
@@ -0,0 +1,43 @@
+---
+gem: nokogiri
+cve: 2019-18197
+ghsa: 242x-7cm6-4w8j
+url: https://github.com/sparklemotion/nokogiri/issues/1943
+title: Nokogiri affected by libxslt Use of Uninitialized Resource/
+  Use After Free vulnerability
+date: 2022-05-24
+description: |
+  In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable
+  isn't reset under certain circumstances. If the relevant memory area
+  happened to be freed and reused in a certain way, a bounds check could
+  fail and memory outside a buffer could be written to, or uninitialized
+  data could be disclosed.
+
+  Nokogiri prior to version 1.10.5 contains a vulnerable version of
+  libxslt. Nokogiri version 1.10.5 upgrades the dependency to
+  libxslt 1.1.34, which contains a patch for this issue.
+cvss_v2: 5.1
+cvss_v3: 7.5
+patched_versions:
+  - ">= 1.10.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2019-18197
+    - https://github.com/sparklemotion/nokogiri/issues/1943
+    - https://github.com/sparklemotion/nokogiri/blob/01ab95f3e37429ed8d3b380a8d2f73902eb325d9/CHANGELOG.md?plain=1#L934
+    - https://access.redhat.com/errata/RHSA-2020:0514
+    - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15746
+    - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15768
+    - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15914
+    - https://gitlab.gnome.org/GNOME/libxslt/commit/2232473733b7313d67de8836ea3b29eec6e8e285
+    - https://lists.debian.org/debian-lts-announce/2019/10/msg00037.html
+    - https://security.netapp.com/advisory/ntap-20191031-0004
+    - https://security.netapp.com/advisory/ntap-20200416-0004
+    - https://usn.ubuntu.com/4164-1
+    - https://www.oracle.com/security-alerts/cpuapr2020.html
+    - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html
+    - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html
+    - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html
+    - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00062.html
+    - http://www.openwall.com/lists/oss-security/2019/11/17/2
+    - https://github.com/advisories/GHSA-242x-7cm6-4w8j
diff --git a/gems/nokogiri/CVE-2019-5477.yml b/gems/nokogiri/CVE-2019-5477.yml
index 33b6dda4c5..7e682d68ce 100644
--- a/gems/nokogiri/CVE-2019-5477.yml
+++ b/gems/nokogiri/CVE-2019-5477.yml
@@ -22,8 +22,8 @@ description: |
 cvss_v2: 7.5
 cvss_v3: 9.8
 patched_versions:
-- '>= 1.10.4'
+  - ">= 1.10.4"
 related:
   url:
-  - https://github.com/tenderlove/rexical/commit/a652474dbc66be350055db3e8f9b3a7b3fd75926
-  - https://groups.google.com/forum/#!msg/ruby-security-ann/YMnKFsASOAE/Fw3ocLI0BQAJ
+    - https://github.com/tenderlove/rexical/commit/a652474dbc66be350055db3e8f9b3a7b3fd75926
+    - https://groups.google.com/forum/#!msg/ruby-security-ann/YMnKFsASOAE/Fw3ocLI0BQAJ
diff --git a/gems/nokogiri/CVE-2019-5815.yml b/gems/nokogiri/CVE-2019-5815.yml
new file mode 100644
index 0000000000..698fb54300
--- /dev/null
+++ b/gems/nokogiri/CVE-2019-5815.yml
@@ -0,0 +1,26 @@
+---
+gem: nokogiri
+cve: 2019-5815
+ghsa: vmfx-gcfq-wvm2
+url: https://github.com/sparklemotion/nokogiri/issues/2630
+title: Nokogiri implementation of libxslt vulnerable to heap corruption
+date: 2022-05-24
+description: |
+  Type confusion in `xsltNumberFormatGetMultipleLevel` prior to
+  libxslt 1.1.33 could allow attackers to potentially exploit heap
+  corruption via crafted XML data.
+
+  Nokogiri prior to version 1.10.5 contains a vulnerable version of
+  libxslt. Nokogiri version 1.10.5 upgrades the dependency to
+  libxslt 1.1.34, which contains a patch for this issue.
+cvss_v2: 5.0
+cvss_v3: 7.5
+patched_versions:
+  - ">= 1.10.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2019-5815
+    - https://github.com/sparklemotion/nokogiri/issues/2630
+    - https://gitlab.gnome.org/GNOME/libxslt/commit/08b62c25871b38d5d573515ca8a065b4b8f64f6b
+    - https://lists.debian.org/debian-lts-announce/2022/09/msg00010.html
+    - https://github.com/advisories/GHSA-vmfx-gcfq-wvm2
diff --git a/gems/nokogiri/CVE-2020-26247.yml b/gems/nokogiri/CVE-2020-26247.yml
index c2a693f380..b68183db65 100644
--- a/gems/nokogiri/CVE-2020-26247.yml
+++ b/gems/nokogiri/CVE-2020-26247.yml
@@ -5,7 +5,7 @@ ghsa: vr8q-g5c7-m54m
 url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-vr8q-g5c7-m54m
 date: 2020-12-30
 title: Nokogiri::XML::Schema trusts input by default, exposing risk of an XXE vulnerability
-description: |-
+description: |
   ### Description
 
   In Nokogiri versions <= 1.11.0.rc3, XML Schemas parsed by `Nokogiri::XML::Schema`
@@ -61,8 +61,8 @@ description: |-
   ```
 cvss_v3: 2.6
 patched_versions:
-- '>= 1.11.0.rc4'
+  - ">= 1.11.0.rc4"
 
 related:
   url:
-  - https://hackerone.com/reports/747489
+    - https://hackerone.com/reports/747489
diff --git a/gems/nokogiri/CVE-2020-7595.yml b/gems/nokogiri/CVE-2020-7595.yml
index e190f602b7..e35cda8e4b 100644
--- a/gems/nokogiri/CVE-2020-7595.yml
+++ b/gems/nokogiri/CVE-2020-7595.yml
@@ -5,7 +5,7 @@ ghsa: 7553-jr98-vx47
 url: https://github.com/sparklemotion/nokogiri/issues/1992
 title: libxml2 2.9.10 has an infinite loop in a certain end-of-file situation
 date: 2020-02-12
-description: |2-
+description: |
 
   Nokogiri has backported the patch for CVE-2020-7595 into its vendored version
   of libxml2, and released this as v1.10.8
@@ -15,4 +15,4 @@ description: |2-
 cvss_v2: 5.0
 cvss_v3: 7.5
 patched_versions:
-- '>= 1.10.8'
+  - ">= 1.10.8"
diff --git a/gems/nokogiri/CVE-2021-30560.yml b/gems/nokogiri/CVE-2021-30560.yml
new file mode 100644
index 0000000000..2375b5e545
--- /dev/null
+++ b/gems/nokogiri/CVE-2021-30560.yml
@@ -0,0 +1,81 @@
+---
+gem: nokogiri
+cve: 2021-30560
+ghsa: fq42-c5rg-92c2
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-fq42-c5rg-92c2
+date: 2022-02-21
+title: Update packaged libxml2 (2.9.12 → 2.9.13) and libxslt (1.1.34 → 1.1.35)
+description: |
+  ## Summary
+
+  Nokogiri v1.13.2 upgrades two of its packaged dependencies:
+
+  * vendored libxml2 from v2.9.12 to v2.9.13
+  * vendored libxslt from v1.1.34 to v1.1.35
+
+  Those library versions address the following upstream CVEs:
+
+  * libxslt: CVE-2021-30560 (CVSS 8.8, High severity)
+  * libxml2: CVE-2022-23308 (Unspecified severity, see more information below)
+
+  Those library versions also address numerous other issues including performance
+  improvements, regression fixes, and bug fixes, as well as memory leaks and other
+  use-after-free issues that were not assigned CVEs.
+
+  Please note that this advisory only applies to the CRuby implementation of
+  Nokogiri < 1.13.2, and only if the packaged libraries are being used. If you've
+  overridden defaults at installation time to use system libraries instead of
+  packaged libraries, you should instead pay attention to your distro's `libxml2`
+  and `libxslt` release announcements.
+
+  ## Mitigation
+
+  Upgrade to Nokogiri >= 1.13.2.
+
+  Users who are unable to upgrade Nokogiri may also choose a more complicated
+  mitigation: compile and link an older version Nokogiri against external libraries
+  libxml2 >= 2.9.13 and libxslt >= 1.1.35, which will also address these same CVEs.
+
+  ## Impact
+
+  * libxslt CVE-2021-30560
+  * CVSS3 score: 8.8 (High)
+
+  Fixed by https://gitlab.gnome.org/GNOME/libxslt/-/commit/50f9c9c
+
+  All versions of libxslt prior to v1.1.35 are affected.
+
+  Applications using untrusted XSL stylesheets to transform XML are vulnerable to
+  a denial-of-service attack and should be upgraded immediately.
+
+  libxml2 CVE-2022-23308
+  * As of the time this security advisory was published, there is no officially
+  published information available about this CVE's severity. The above NIST link
+  does not yet have a published record, and the libxml2 maintainer has declined
+  to provide a severity score.
+  * Fixed by https://gitlab.gnome.org/GNOME/libxml2/-/commit/652dd12
+  * Further explanation is at https://mail.gnome.org/archives/xml/2022-February/msg00015.html
+
+  The upstream commit and the explanation linked above indicate that an application
+  may be vulnerable to a denial of service, memory disclosure, or code execution if
+  it parses an untrusted document with parse options `DTDVALID` set to true, and `NOENT`
+  set to false.
+
+  An analysis of these parse options:
+
+  * While `NOENT` is off by default for Document, DocumentFragment, Reader, and
+  Schema parsing, it is on by default for XSLT (stylesheet) parsing in Nokogiri
+  v1.12.0 and later.
+  * `DTDVALID` is an option that Nokogiri does not set for any operations, and so
+  this CVE applies only to applications setting this option explicitly.
+
+  It seems reasonable to assume that any application explicitly setting the parse
+  option `DTDVALID` when parsing untrusted documents is vulnerable and should be
+  upgraded immediately.
+cvss_v3: 8.8
+patched_versions:
+  - ">= 1.13.2"
+related:
+  cve:
+    - 2021-30560
+    - 2022-23308
diff --git a/gems/nokogiri/CVE-2021-3517.yml b/gems/nokogiri/CVE-2021-3517.yml
new file mode 100644
index 0000000000..5428739e45
--- /dev/null
+++ b/gems/nokogiri/CVE-2021-3517.yml
@@ -0,0 +1,32 @@
+---
+gem: nokogiri
+cve: 2021-3517
+ghsa: jw9f-hh49-cvp9
+url: https://bugzilla.redhat.com/show_bug.cgi?id=1954232
+title: Nokogiri contains libxml Out-of-bounds Write vulnerability
+date: 2022-05-24
+description: |
+  There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.
+
+  Nokogiri prior to version 1.11.4 used a vulnerable version of libxml2. Nokogiri 1.11.4 updated libxml2 to version 2.9.11 to address this and other vulnerabilities in libxml2.
+cvss_v3: 8.6
+patched_versions:
+  - ">= 1.11.4"
+related:
+  url:
+    - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
+    - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
+    - https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/
+    - https://security.gentoo.org/glsa/202107-05
+    - https://security.netapp.com/advisory/ntap-20210625-0002/
+    - https://security.netapp.com/advisory/ntap-20211022-0004/
+    - https://www.oracle.com/security-alerts/cpuapr2022.html
+    - https://www.oracle.com/security-alerts/cpujan2022.html
+    - https://www.oracle.com/security-alerts/cpuoct2021.html
+    - https://www.oracle.com/security-alerts/cpujul2022.html
+    - https://github.com/sparklemotion/nokogiri/issues/2233
+    - https://github.com/sparklemotion/nokogiri/issues/2274
+    - https://github.com/sparklemotion/nokogiri/blob/7c19ef5cc6b7c5c36827dd5495f857c6877ec8cf/CHANGELOG.md?plain=1#L579
+    - https://gitlab.gnome.org/GNOME/libxml2/-/commit/8598060bacada41a0eb09d95c97744ff4e428f8e
diff --git a/gems/nokogiri/CVE-2021-3518.yml b/gems/nokogiri/CVE-2021-3518.yml
new file mode 100644
index 0000000000..918848e8e6
--- /dev/null
+++ b/gems/nokogiri/CVE-2021-3518.yml
@@ -0,0 +1,28 @@
+---
+gem: nokogiri
+cve: 2021-3518
+ghsa: v4f8-2847-rwm7
+url: https://nokogiri.org/CHANGELOG.html#1114-2021-05-14
+title: Nokogiri Implements libxml2 version vulnerable to use-after-free
+date: 2022-05-24
+description: |
+  There's a flaw in libxml2 in versions before 2.9.11. An attacker
+  who is able to submit a crafted file to be processed by an application
+  linked with libxml2 could trigger a use-after-free. The greatest
+  impact from this flaw is to confidentiality, integrity, and availability.
+cvss_v3: 8.8
+patched_versions:
+  - ">= 1.11.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-3518
+    - https://nokogiri.org/CHANGELOG.html#1114-2021-05-14
+    - https://nokogiri.org/CHANGELOG.html#security_8
+    - https://bugzilla.redhat.com/show_bug.cgi?id=1954242
+    - https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/
+    - https://security.gentoo.org/glsa/202107-05
+    - https://security.netapp.com/advisory/ntap-20210625-0002/
+    - https://github.com/sparklemotion/nokogiri/blob/2edbbef95f1dc12c1ddc5ebda71b9159026245fe/CHANGELOG.md?plain=1#L722
+    - https://github.com/advisories/GHSA-v4f8-2847-rwm7
diff --git a/gems/nokogiri/CVE-2021-3537.yml b/gems/nokogiri/CVE-2021-3537.yml
new file mode 100644
index 0000000000..7643c2a394
--- /dev/null
+++ b/gems/nokogiri/CVE-2021-3537.yml
@@ -0,0 +1,35 @@
+---
+gem: nokogiri
+cve: 2021-3537
+ghsa: 286v-pcf5-25rc
+url: https://nokogiri.org/CHANGELOG.html#1114-2021-05-14
+title: Nokogiri Implements libxml2 version vulnerable to
+  null pointer dereferencing
+date: 2022-05-24
+description: |
+  A vulnerability found in libxml2 in versions before 2.9.11 shows
+  that it did not propagate errors while parsing XML mixed content,
+  causing a NULL dereference. If an untrusted XML document was parsed
+  in recovery mode and post-validated, the flaw could be used to crash
+  the application. The highest threat from this vulnerability
+  is to system availability.
+cvss_v2: 4.3
+cvss_v3: 5.9
+patched_versions:
+  - ">= 1.11.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-3537
+    - https://nokogiri.org/CHANGELOG.html#1114-2021-05-14
+    - https://nokogiri.org/CHANGELOG.html#security_8
+    - https://bugzilla.redhat.com/show_bug.cgi?id=1956522
+    - https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/
+    - https://security.gentoo.org/glsa/202107-05
+    - https://security.netapp.com/advisory/ntap-20210625-0002/
+    - https://www.oracle.com/security-alerts/cpuapr2022.html
+    - https://www.oracle.com/security-alerts/cpuoct2021.html
+    - https://www.oracle.com/security-alerts/cpujul2022.html
+    - https://github.com/sparklemotion/nokogiri/blob/2edbbef95f1dc12c1ddc5ebda71b9159026245fe/CHANGELOG.md?plain=1#L722
+    - https://github.com/advisories/GHSA-286v-pcf5-25rc
diff --git a/gems/nokogiri/CVE-2021-41098.yml b/gems/nokogiri/CVE-2021-41098.yml
index 1c76a12793..b91a8cb919 100644
--- a/gems/nokogiri/CVE-2021-41098.yml
+++ b/gems/nokogiri/CVE-2021-41098.yml
@@ -6,7 +6,7 @@ ghsa: 2rr5-8q37-2w7h
 url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-2rr5-8q37-2w7h
 title: Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby
 date: 2021-09-27
-description: |-
+description: |
   ### Severity
 
   The Nokogiri maintainers have evaluated this as [**High Severity** 7.5 (CVSS3.0)](https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C/MAV:N/MAC:L) for JRuby users. (This security advisory does not apply to CRuby users.)
@@ -29,4 +29,4 @@ description: |-
   CRuby users are not affected.
 cvss_v3: 7.5
 patched_versions:
-- ">= 1.12.5"
+  - ">= 1.12.5"
diff --git a/gems/nokogiri/CVE-2022-23437.yml b/gems/nokogiri/CVE-2022-23437.yml
new file mode 100644
index 0000000000..801680eea8
--- /dev/null
+++ b/gems/nokogiri/CVE-2022-23437.yml
@@ -0,0 +1,43 @@
+---
+gem: nokogiri
+platform: jruby
+cve: 2022-23437
+ghsa: xxx9-3xcr-gjj3
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xxx9-3xcr-gjj3
+title: XML Injection in Xerces Java affects Nokogiri
+date: 2022-04-11
+description: |
+  ## Summary
+
+  Nokogiri v1.13.4 updates the vendored `xerces:xercesImpl` from 2.12.0 to
+  2.12.2, which addresses [CVE-2022-23437](https://nvd.nist.gov/vuln/detail/CVE-2022-23437).
+  That CVE is scored as CVSS 6.5 "Medium" on the NVD record.
+
+  Please note that this advisory only applies to the **JRuby** implementation
+  of Nokogiri `< 1.13.4`.
+
+  ## Mitigation
+
+  Upgrade to Nokogiri `>= v1.13.4`.
+
+  ## Impact
+
+  ### [CVE-2022-23437](https://nvd.nist.gov/vuln/detail/CVE-2022-23437) in xerces-J
+
+  - **Severity**: Medium
+  - **Type**: [CWE-91](https://cwe.mitre.org/data/definitions/91.html) XML Injection (aka Blind XPath Injection)
+  - **Description**: There's a vulnerability within the Apache Xerces Java
+    (XercesJ) XML parser when handling specially crafted XML document payloads.
+    This causes, the XercesJ XML parser to wait in an infinite loop, which may
+    sometimes consume system resources for prolonged duration. This vulnerability
+    is present within XercesJ version 2.12.1 and the previous versions.
+  - **See also**: https://github.com/advisories/GHSA-h65f-jvqw-m9fj
+cvss_v3: 6.5
+patched_versions:
+  - ">= 1.13.4"
+related:
+  ghsa:
+    - h65f-jvqw-m9fj
+  url:
+    - https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4
+    - https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ
diff --git a/gems/nokogiri/CVE-2022-23476.yml b/gems/nokogiri/CVE-2022-23476.yml
new file mode 100644
index 0000000000..64a32255fa
--- /dev/null
+++ b/gems/nokogiri/CVE-2022-23476.yml
@@ -0,0 +1,41 @@
+---
+gem: nokogiri
+cve: 2022-23476
+ghsa: qv4q-mr5r-qprj
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-qv4q-mr5r-qprj
+title: "Unchecked return value from xmlTextReaderExpand"
+date: 2022-12-07
+description: |
+  ## Summary
+
+  Nokogiri `1.13.8, 1.13.9` fails to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead to a null pointer exception when invalid markup is being parsed.
+
+  For applications using `XML::Reader` to parse untrusted inputs, this may potentially be a vector for a denial of service attack.
+
+
+  ## Mitigation
+
+  Upgrade to Nokogiri `>= 1.13.10`.
+
+  Users may be able to search their code for calls to either `XML::Reader#attributes` or `XML::Reader#attribute_hash` to determine if they are affected.
+
+
+  ## Severity
+
+  The Nokogiri maintainers have evaluated this as [High Severity 7.5 (CVSS3.1)](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
+
+
+  ## References
+
+  - [CWE - CWE-252: Unchecked Return Value (4.9)](https://cwe.mitre.org/data/definitions/252.html)
+  - [CWE - CWE-476: NULL Pointer Dereference (4.9)](https://cwe.mitre.org/data/definitions/476.html)
+
+
+  ## Credit
+
+  This vulnerability was responsibly reported by @davidwilemski.
+cvss_v3: 7.5
+unaffected_versions:
+  - "<= 1.13.7"
+patched_versions:
+  - ">= 1.13.10"
diff --git a/gems/nokogiri/CVE-2022-24836.yml b/gems/nokogiri/CVE-2022-24836.yml
new file mode 100644
index 0000000000..f1f4b373b0
--- /dev/null
+++ b/gems/nokogiri/CVE-2022-24836.yml
@@ -0,0 +1,25 @@
+---
+gem: nokogiri
+cve: 2022-24836
+ghsa: crjr-9rc5-ghw8
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-crjr-9rc5-ghw8
+title: Inefficient Regular Expression Complexity in Nokogiri
+date: 2022-04-11
+description: |
+  ## Summary
+
+  Nokogiri `< v1.13.4` contains an inefficient regular expression that is
+  susceptible to excessive backtracking when attempting to detect encoding
+  in HTML documents.
+
+  ## Mitigation
+
+  Upgrade to Nokogiri `>= 1.13.4`.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 1.13.4"
+related:
+  url:
+    - https://github.com/sparklemotion/nokogiri/commit/e444525ef1634b675cd1cf52d39f4320ef0aecfd
+    - https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4
+    - https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ
diff --git a/gems/nokogiri/CVE-2022-24839.yml b/gems/nokogiri/CVE-2022-24839.yml
new file mode 100644
index 0000000000..5292cd35d6
--- /dev/null
+++ b/gems/nokogiri/CVE-2022-24839.yml
@@ -0,0 +1,43 @@
+---
+gem: nokogiri
+platform: jruby
+cve: 2022-24839
+ghsa: gx8x-g87m-h5q6
+url: https://github.com/sparklemotion/nekohtml/security/advisories/GHSA-9849-p7jc-9rmv
+title: Denial of Service (DoS) in Nokogiri on JRuby
+date: 2022-04-11
+description: |
+  ## Summary
+
+  Nokogiri `v1.13.4` updates the vendored `org.cyberneko.html` library to
+  `1.9.22.noko2` which addresses [CVE-2022-24839](https://github.com/sparklemotion/nekohtml/security/advisories/GHSA-9849-p7jc-9rmv).
+  That CVE is rated 7.5 (High Severity).
+
+  See [GHSA-9849-p7jc-9rmv](https://github.com/sparklemotion/nekohtml/security/advisories/GHSA-9849-p7jc-9rmv)
+  for more information.
+
+  Please note that this advisory only applies to the **JRuby** implementation of Nokogiri `< 1.13.4`.
+
+  ## Mitigation
+
+  Upgrade to Nokogiri `>= 1.13.4`.
+
+  ## Impact
+
+  ### [CVE-2022-24839](https://github.com/sparklemotion/nekohtml/security/advisories/GHSA-9849-p7jc-9rmv) in nekohtml
+
+  - **Severity**: High 7.5
+  - **Type**: [CWE-400](https://cwe.mitre.org/data/definitions/400.html) Uncontrolled Resource Consumption
+  - **Description**: The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a
+    `java.lang.OutOfMemoryError` exception when parsing ill-formed HTML markup.
+  - **See also**: [GHSA-9849-p7jc-9rmv](https://github.com/sparklemotion/nekohtml/security/advisories/GHSA-9849-p7jc-9rmv)
+cvss_v3: 7.5
+patched_versions:
+  - ">= 1.13.4"
+related:
+  ghsa:
+    - gx8x-g87m-h5q6
+  url:
+    - https://github.com/sparklemotion/nekohtml/commit/a800fce3b079def130ed42a408ff1d09f89e773d
+    - https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4
+    - https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ
diff --git a/gems/nokogiri/CVE-2022-29181.yml b/gems/nokogiri/CVE-2022-29181.yml
new file mode 100644
index 0000000000..4e1fcfc6a4
--- /dev/null
+++ b/gems/nokogiri/CVE-2022-29181.yml
@@ -0,0 +1,36 @@
+---
+gem: nokogiri
+cve: 2022-29181
+ghsa: xh29-r2w5-wx8m
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xh29-r2w5-wx8m
+title: Improper Handling of Unexpected Data Type in Nokogiri
+date: 2022-05-23
+description: |
+  ### Summary
+
+  Nokogiri `< v1.13.6` does not type-check all inputs into the XML and HTML4 SAX parsers.
+  For CRuby users, this may allow specially crafted untrusted inputs to cause illegal
+  memory access errors (segfault) or reads from unrelated memory.
+
+  ### Severity
+
+  The Nokogiri maintainers have evaluated this as **High 8.2** (CVSS3.1).
+
+  ### Mitigation
+
+  CRuby users should upgrade to Nokogiri `>= 1.13.6`.
+
+  JRuby users are not affected.
+
+  ### Workarounds
+
+  To avoid this vulnerability in affected applications, ensure the untrusted input is a
+  `String` by calling `#to_s` or equivalent.
+cvss_v3: 8.2
+patched_versions:
+  - ">= 1.13.6"
+related:
+  url:
+    - https://github.com/sparklemotion/nokogiri/commit/db05ba9a1bd4b90aa6c76742cf6102a7c7297267
+    - https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.6
+    - https://securitylab.github.com/advisories/GHSL-2022-031_GHSL-2022-032_Nokogiri/
diff --git a/gems/nokogiri/GHSA-2qc6-mcvw-92cw.yml b/gems/nokogiri/GHSA-2qc6-mcvw-92cw.yml
new file mode 100644
index 0000000000..96c6d0dd82
--- /dev/null
+++ b/gems/nokogiri/GHSA-2qc6-mcvw-92cw.yml
@@ -0,0 +1,87 @@
+---
+gem: nokogiri
+ghsa: 2qc6-mcvw-92cw
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-2qc6-mcvw-92cw
+title: Update bundled libxml2 to v2.10.3 to resolve multiple CVEs
+date: 2022-10-18
+description: |
+  ### Summary
+
+  Nokogiri v1.13.9 upgrades the packaged version of its dependency libxml2 to
+  [v2.10.3](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.3) from
+  v2.9.14.
+
+  libxml2 v2.10.3 addresses the following known vulnerabilities:
+
+  - [CVE-2022-2309](https://nvd.nist.gov/vuln/detail/CVE-2022-2309)
+  - [CVE-2022-40304](https://nvd.nist.gov/vuln/detail/CVE-2022-40304)
+  - [CVE-2022-40303](https://nvd.nist.gov/vuln/detail/CVE-2022-40303)
+
+  Please note that this advisory only applies to the CRuby implementation of
+  Nokogiri `< 1.13.9`, and only if the _packaged_ libraries are being used. If
+  you've overridden defaults at installation time to use _system_ libraries
+  instead of packaged libraries, you should instead pay attention to your
+  distro's `libxml2` release announcements.
+
+
+  ### Mitigation
+
+  Upgrade to Nokogiri `>= 1.13.9`.
+
+  Users who are unable to upgrade Nokogiri may also choose a more complicated
+  mitigation: compile and link Nokogiri against external libraries libxml2
+  `>= 2.10.3` which will also address these same issues.
+
+
+  ### Impact
+
+  #### libxml2 [CVE-2022-2309](https://nvd.nist.gov/vuln/detail/CVE-2022-2309)
+
+  - **CVSS3 score**: Under evaluation
+  - **Type**: Denial of service
+  - **Description**: NULL Pointer Dereference allows attackers to cause a denial
+  of service (or application crash). This only applies when lxml is used
+  together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not
+  affected. It allows triggering crashes through forged input data, given a
+  vulnerable code sequence in the application. The vulnerability is caused by
+  the iterwalk function (also used by the canonicalize function). Such code
+  shouldn't be in wide-spread use, given that parsing + iterwalk would usually
+  be replaced with the more efficient iterparse function. However, an XML
+  converter that serialises to C14N would also be vulnerable, for example, and
+  there are legitimate use cases for this code sequence. If untrusted input is
+  received (also remotely) and processed via iterwalk function, a crash can be
+  triggered.
+
+  Nokogiri maintainers investigated at #2620 and determined this CVE does not
+  affect Nokogiri users.
+
+
+  #### libxml2 [CVE-2022-40304](https://nvd.nist.gov/vuln/detail/CVE-2022-40304)
+
+  - **CVSS3 score**: Unspecified upstream
+  - **Type**: Data corruption, denial of service
+  - **Description**: When an entity reference cycle is detected, the entity
+  content is cleared by setting its first byte to zero. But the entity content
+  might be allocated from a dict. In this case, the dict entry becomes corrupted
+  leading to all kinds of logic errors, including memory errors like
+  double-frees.
+
+  See https://gitlab.gnome.org/GNOME/libxml2/-/commit/644a89e080bced793295f61f18aac8cfad6bece2
+
+
+  #### libxml2 [CVE-2022-40303](https://nvd.nist.gov/vuln/detail/CVE-2022-40303)
+
+  - **CVSS3 score**: Unspecified upstream
+  - **Type**: Integer overflow
+  - **Description**: Integer overflows with XML_PARSE_HUGE
+
+  See https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0
+patched_versions:
+  - ">= 1.13.9"
+related:
+  url:
+    - https://gitlab.gnome.org/GNOME/libxml2/-/releases
+  cve:
+    - 2022-2309
+    - 2022-40304
+    - 2022-40303
diff --git a/gems/nokogiri/GHSA-353f-x4gh-cqq8.yml b/gems/nokogiri/GHSA-353f-x4gh-cqq8.yml
new file mode 100644
index 0000000000..8dfd88b2ad
--- /dev/null
+++ b/gems/nokogiri/GHSA-353f-x4gh-cqq8.yml
@@ -0,0 +1,106 @@
+---
+gem: nokogiri
+ghsa: 353f-x4gh-cqq8
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-353f-x4gh-cqq8
+title: Nokogiri patches vendored libxml2 to resolve multiple CVEs
+date: 2025-07-21
+description: |
+  ## Summary
+
+  Nokogiri v1.18.9 patches the vendored libxml2 to address
+  CVE-2025-6021, CVE-2025-6170, CVE-2025-49794, CVE-2025-49795,
+  and CVE-2025-49796.
+
+  ## Impact and severity
+
+  ### CVE-2025-6021
+
+  A flaw was found in libxml2's xmlBuildQName function, where integer
+  overflows in buffer size calculations can lead to a stack-based
+  buffer overflow. This issue can result in memory corruption or a
+  denial of service when processing crafted input.
+
+  NVD claims a severity of 7.5 High
+  (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
+
+  Fixed by applying https://gitlab.gnome.org/GNOME/libxml2/-/commit/17d950ae
+
+  ### CVE-2025-6170
+
+  A flaw was found in the interactive shell of the xmllint command-line
+  tool, used for parsing XML files. When a user inputs an overly long
+  command, the program does not check the input size properly, which
+  can cause it to crash. This issue might allow attackers to run
+  harmful code in rare configurations without modern protections.
+
+  NVD claims a severity of 2.5 Low
+  (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)
+
+  Fixed by applying https://gitlab.gnome.org/GNOME/libxml2/-/commit/5e9ec5c1
+
+  ### CVE-2025-49794
+
+  A use-after-free vulnerability was found in libxml2. This issue
+  occurs when parsing XPath elements under certain circumstances when
+  the XML schematron has the <sch:name path="..."/> schema elements.
+  This flaw allows a malicious actor to craft a malicious XML document
+  used as input for libxml, resulting in the program's crash using
+  libxml or other possible undefined behaviors.
+
+  NVD claims a severity of 9.1 Critical
+  (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
+
+  Fixed by applying https://gitlab.gnome.org/GNOME/libxml2/-/commit/81cef8c5
+
+  ### CVE-2025-49795
+
+  A NULL pointer dereference vulnerability was found in libxml2 when
+  processing XPath XML expressions. This flaw allows an attacker to
+  craft a malicious XML input to libxml2, leading to a denial of service.
+
+  NVD claims a severity of 7.5 High
+  (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
+
+  Fixed by applying https://gitlab.gnome.org/GNOME/libxml2/-/commit/62048278
+
+  ### CVE-2025-49796
+
+  A vulnerability was found in libxml2. Processing certain sch:name
+  elements from the input XML file can trigger a memory corruption
+  issue. This flaw allows an attacker to craft a malicious XML input
+  file that can lead libxml to crash, resulting in a denial of service
+  or other possible undefined behavior due to sensitive data being
+  corrupted in memory.
+
+  NVD claims a severity of 9.1 Critical
+  (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
+
+  Fixed by applying https://gitlab.gnome.org/GNOME/libxml2/-/commit/81cef8c5
+
+  ## Affected Versions
+
+  - Nokogiri < 1.18.9 when using CRuby (MRI) with vendored libxml2
+
+  ## Patched Versions
+
+  - Nokogiri >= 1.18.9
+
+  ## Mitigation
+
+  Upgrade to Nokogiri v1.18.9 or later.
+
+  Users who are unable to upgrade Nokogiri may also choose a more
+  complicated mitigation: compile and link Nokogiri against patched
+  external libxml2 libraries which will also address these same issues.
+patched_versions:
+  - ">= 1.18.9"
+related:
+  url:
+    - https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-353f-x4gh-cqq8
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-49794
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-49795
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-49796
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-6021
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-6170
+    - https://github.com/sparklemotion/nokogiri/pull/3526
+    - https://github.com/advisories/GHSA-353f-x4gh-cqq8
diff --git a/gems/nokogiri/GHSA-5w6v-399v-w3cc.yml b/gems/nokogiri/GHSA-5w6v-399v-w3cc.yml
new file mode 100644
index 0000000000..7bb4fa126c
--- /dev/null
+++ b/gems/nokogiri/GHSA-5w6v-399v-w3cc.yml
@@ -0,0 +1,60 @@
+---
+gem: nokogiri
+ghsa: 5w6v-399v-w3cc
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-5w6v-399v-w3cc
+title: Nokogiri updates packaged libxml2 to v2.13.8 to resolve
+  CVE-2025-32414 and CVE-2025-32415
+date: 2025-04-21
+description: |
+  ## Summary
+
+  Nokogiri v1.18.8 upgrades its dependency libxml2 to
+  [v2.13.8](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.8).
+
+  libxml2 v2.13.8 addresses:
+
+  - CVE-2025-32414
+    - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/889
+  - CVE-2025-32415
+    - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/890
+
+  ## Impact
+
+  ### CVE-2025-32414: No impact
+
+  In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds
+  memory access can occur in the Python API (Python bindings) because
+  of an incorrect return value. This occurs in xmlPythonFileRead and
+  xmlPythonFileReadRaw because of a difference between bytes and characters.
+
+  **There is no impact** from this CVE for Nokogiri users.
+
+  ### CVE-2025-32415: Low impact
+
+  In libxml2 before 2.13.8 and 2.14.x before 2.14.2,
+  xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer
+  under-read. To exploit this, a crafted XML document must be validated
+  against an XML schema with certain identity constraints, or a
+  crafted XML schema must be used.
+
+  In the upstream issue, further context is provided by the maintainer:
+
+  > The bug affects validation against untrusted XML Schemas (.xsd)
+  > and validation of untrusted documents against trusted Schemas if
+  > they make use of xsd:keyref in combination with recursively
+  > defined types that have additional identity constraints.
+
+  MITRE has published a severity score of 2.9 LOW
+  (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) for this CVE.
+patched_versions:
+  - ">= 1.18.8"
+related:
+  cve:
+    - CVE-2025-32414
+    - CVE-2025-32415
+  url:
+    - https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-5w6v-399v-w3cc
+    - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.8
+    - https://gitlab.gnome.org/GNOME/libxml2/-/issues/889
+    - https://gitlab.gnome.org/GNOME/libxml2/-/issues/890
+    - https://github.com/advisories/GHSA-5w6v-399v-w3cc
diff --git a/gems/nokogiri/GHSA-7rrm-v45f-jp64.yml b/gems/nokogiri/GHSA-7rrm-v45f-jp64.yml
index 59492f640c..03bdd7afe3 100644
--- a/gems/nokogiri/GHSA-7rrm-v45f-jp64.yml
+++ b/gems/nokogiri/GHSA-7rrm-v45f-jp64.yml
@@ -118,4 +118,14 @@ description: |
   For more details supporting this analysis of this CVE, please visit #2233.
 cvss_v3: 7.5
 patched_versions:
-- '>= 1.11.4'
+  - ">= 1.11.4"
+related:
+  cve:
+    - 2019-20388
+    - 2020-24977
+    - 2020-7595
+    - 2021-3516
+    - 2021-3517
+    - 2021-3518
+    - 2021-3537
+    - 2021-3541
diff --git a/gems/nokogiri/GHSA-cgx6-hpwq-fhv5.yml b/gems/nokogiri/GHSA-cgx6-hpwq-fhv5.yml
new file mode 100644
index 0000000000..961757fda6
--- /dev/null
+++ b/gems/nokogiri/GHSA-cgx6-hpwq-fhv5.yml
@@ -0,0 +1,59 @@
+---
+gem: nokogiri
+ghsa: cgx6-hpwq-fhv5
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-cgx6-hpwq-fhv5
+title: Integer Overflow or Wraparound in libxml2 affects Nokogiri
+date: 2022-05-18
+description: |
+  ### Summary
+
+  Nokogiri v1.13.5 upgrades the packaged version of its dependency libxml2 from
+  v2.9.13 to [v2.9.14](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.9.14).
+
+  libxml2 v2.9.14 addresses [CVE-2022-29824](https://nvd.nist.gov/vuln/detail/CVE-2022-29824).
+  This version also includes several security-related bug fixes for which CVEs were not created,
+  including a potential double-free, potential memory leaks, and integer-overflow.
+
+  Please note that this advisory only applies to the CRuby implementation of Nokogiri
+  `< 1.13.5`, and only if the _packaged_ libraries are being used. If you've overridden
+  defaults at installation time to use _system_ libraries instead of packaged libraries,
+  you should instead pay attention to your distro's `libxml2` and `libxslt` release announcements.
+
+  ### Mitigation
+
+  Upgrade to Nokogiri `>= 1.13.5`.
+
+  Users who are unable to upgrade Nokogiri may also choose a more complicated mitigation:
+  compile and link Nokogiri against external libraries libxml2 `>= 2.9.14` which will also
+  address these same issues.
+
+  ### Impact
+
+  #### libxml2 [CVE-2022-29824](https://nvd.nist.gov/vuln/detail/CVE-2022-29824)
+
+  - **CVSS3 score**:
+    - Unspecified upstream
+    - Nokogiri maintainers evaluate at 8.6 (High) ([CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)). Note that this is different from the CVSS assessed by NVD.
+  - **Type**: Denial of service, information disclosure
+  - **Description**: In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well.
+  - **Fixed**: https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a24
+
+  All versions of libml2 prior to v2.9.14 are affected.
+
+  Applications parsing or serializing multi-gigabyte documents (in excess of INT_MAX bytes) may be vulnerable to an integer overflow bug in buffer handling that could lead to exposure of confidential data, modification of unrelated data, or a segmentation fault resulting in a denial-of-service.
+
+
+  ### References
+
+  - [libxml2 v2.9.14 release notes](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.9.14)
+  - [CVE-2022-29824](https://nvd.nist.gov/vuln/detail/CVE-2022-29824)
+  - [CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer](https://cwe.mitre.org/data/definitions/119.html)
+
+cvss_v3: 8.6
+patched_versions:
+  - ">= 1.13.5"
+related:
+  url:
+    - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.9.14
+  cve:
+    - 2022-29824
diff --git a/gems/nokogiri/GHSA-mrxw-mxhj-p664.yml b/gems/nokogiri/GHSA-mrxw-mxhj-p664.yml
new file mode 100644
index 0000000000..291f878e2b
--- /dev/null
+++ b/gems/nokogiri/GHSA-mrxw-mxhj-p664.yml
@@ -0,0 +1,44 @@
+---
+gem: nokogiri
+ghsa: mrxw-mxhj-p664
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-mrxw-mxhj-p664
+title: Nokogiri updates packaged libxslt to v1.1.43 to resolve multiple CVEs
+date: 2025-03-14
+description: |
+  ## Summary
+
+  Nokogiri v1.18.4 upgrades its dependency libxslt to
+  [v1.1.43](https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.43).
+
+  libxslt v1.1.43 resolves:
+
+  - CVE-2025-24855: Fix use-after-free of XPath context node
+  - CVE-2024-55549: Fix UAF related to excluded namespaces
+
+  ## Impact
+
+  ### CVE-2025-24855
+
+  - "Use-after-free due to xsltEvalXPathStringNs leaking xpathCtxt->node"
+  - MITRE has rated this 7.8 High CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
+  - Upstream report: https://gitlab.gnome.org/GNOME/libxslt/-/issues/128
+  - NVD entry: https://nvd.nist.gov/vuln/detail/CVE-2025-24855
+
+  ### CVE-2024-55549
+
+  - "Use-after-free related to excluded result prefixes"
+  - MITRE has rated this 7.8 High CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
+  - Upstream report: https://gitlab.gnome.org/GNOME/libxslt/-/issues/127
+  - NVD entry: https://nvd.nist.gov/vuln/detail/CVE-2024-55549
+cvss_v3: 7.8
+patched_versions:
+  - ">= 1.18.4"
+related:
+  url:
+    - https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-mrxw-mxhj-p664
+    - https://gitlab.gnome.org/GNOME/libxslt/-/issues/127
+    - https://gitlab.gnome.org/GNOME/libxslt/-/issues/128
+    - https://github.com/advisories/GHSA-mrxw-mxhj-p664
+  cve:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-55549
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-24855
diff --git a/gems/nokogiri/GHSA-pxvg-2qj5-37jq.yml b/gems/nokogiri/GHSA-pxvg-2qj5-37jq.yml
new file mode 100644
index 0000000000..15c57a0ed4
--- /dev/null
+++ b/gems/nokogiri/GHSA-pxvg-2qj5-37jq.yml
@@ -0,0 +1,54 @@
+---
+gem: nokogiri
+ghsa: pxvg-2qj5-37jq
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-pxvg-2qj5-37jq
+title: Update packaged libxml2 to v2.10.4 to resolve multiple CVEs
+date: 2023-04-11
+description: |
+  ### Summary
+
+  Nokogiri v1.14.3 upgrades the packaged version of its dependency libxml2 to
+  [v2.10.4](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4) from v2.10.3.
+
+  libxml2 v2.10.4 addresses the following known vulnerabilities:
+
+  - [CVE-2023-29469](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29469): Hashing of
+    empty dict strings isn't deterministic
+  - [CVE-2023-28484](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28484): Fix null deref
+    in xmlSchemaFixupComplexType
+  - Schemas: Fix null-pointer-deref in xmlSchemaCheckCOSSTDerivedOK
+
+  Please note that this advisory only applies to the CRuby implementation of Nokogiri `< 1.14.3`,
+  and only if the _packaged_ libraries are being used. If you've overridden defaults at installation
+  time to use _system_ libraries instead of packaged libraries, you should instead pay attention to
+  your distro's `libxml2` release announcements.
+
+
+  ### Mitigation
+
+  Upgrade to Nokogiri `>= 1.14.3`.
+
+  Users who are unable to upgrade Nokogiri may also choose a more complicated mitigation: compile
+  and link Nokogiri against external libraries libxml2 `>= 2.10.4` which will also address these
+  same issues.
+
+
+  ### Impact
+
+  No public information has yet been published about the security-related issues other than the
+  upstream commits. Examination of those changesets indicate that the more serious issues relate to
+  libxml2 dereferencing NULL pointers and potentially segfaulting while parsing untrusted inputs.
+
+  The commits can be examined at:
+
+  - [\[CVE-2023-29469\] Hashing of empty dict strings isn't deterministic (09a2dd45)](https://gitlab.gnome.org/GNOME/libxml2/-/commit/09a2dd453007f9c7205274623acdd73747c22d64)
+  - [\[CVE-2023-28484\] Fix null deref in xmlSchemaFixupComplexType (647e072e)](https://gitlab.gnome.org/GNOME/libxml2/-/commit/647e072ea0a2f12687fa05c172f4c4713fdb0c4f)
+  - [schemas: Fix null-pointer-deref in xmlSchemaCheckCOSSTDerivedOK (4c6922f7)](https://gitlab.gnome.org/GNOME/libxml2/-/commit/4c6922f763ad958c48ff66f82823ae21f2e92ee6)
+patched_versions:
+  - ">= 1.14.3"
+related:
+  url:
+    - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4
+  cve:
+    - 2023-29469
+    - 2023-28484
diff --git a/gems/nokogiri/GHSA-r95h-9x8f-r3f7.yml b/gems/nokogiri/GHSA-r95h-9x8f-r3f7.yml
new file mode 100644
index 0000000000..c55e211776
--- /dev/null
+++ b/gems/nokogiri/GHSA-r95h-9x8f-r3f7.yml
@@ -0,0 +1,38 @@
+---
+gem: nokogiri
+ghsa: r95h-9x8f-r3f7
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-r95h-9x8f-r3f7
+title: Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459
+date: 2024-05-13
+description: |
+  ## Summary
+
+  Nokogiri v1.16.5 upgrades its dependency libxml2 to
+  [2.12.7](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.7) from 2.12.6.
+
+  libxml2 v2.12.7 addresses CVE-2024-34459:
+
+  - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/720
+  - patched by https://gitlab.gnome.org/GNOME/libxml2/-/commit/2876ac53
+
+  ## Impact
+
+  There is no impact to Nokogiri users because the issue is present only
+  in libxml2's `xmllint` tool which Nokogiri does not provide or expose.
+
+  ## Timeline
+
+  - 2024-05-13 05:57 EDT, libxml2 2.12.7 release is announced
+  - 2024-05-13 08:30 EDT, nokogiri maintainers begin triage
+  - 2024-05-13 10:05 EDT, nokogiri [v1.16.5 is released](https://github.com/sparklemotion/nokogiri/releases/tag/v1.16.5)
+    and this GHSA made public
+patched_versions:
+  - ">= 1.16.5"
+related:
+  url:
+    - https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-r95h-9x8f-r3f7
+    - https://github.com/sparklemotion/nokogiri/releases/tag/v1.16.5
+    - https://gitlab.gnome.org/GNOME/libxml2/-/commit/2876ac53
+    - https://gitlab.gnome.org/GNOME/libxml2/-/issues/720
+    - https://github.com/advisories/GHSA-r95h-9x8f-r3f7
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-34459
diff --git a/gems/nokogiri/GHSA-vvfq-8hwr-qm4m.yml b/gems/nokogiri/GHSA-vvfq-8hwr-qm4m.yml
new file mode 100644
index 0000000000..05cb3a031c
--- /dev/null
+++ b/gems/nokogiri/GHSA-vvfq-8hwr-qm4m.yml
@@ -0,0 +1,39 @@
+---
+gem: nokogiri
+ghsa: vvfq-8hwr-qm4m
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-vvfq-8hwr-qm4m
+title: Nokogiri updates packaged libxml2 to 2.13.6 to resolve
+  CVE-2025-24928 and CVE-2024-56171
+date: 2025-02-18
+description: |
+  ## Summary
+
+  Nokogiri v1.18.3 upgrades its dependency libxml2 to
+  [v2.13.6](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.6).
+
+  libxml2 v2.13.6 addresses:
+
+  - CVE-2025-24928
+    - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/847
+  - CVE-2024-56171
+     - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/828
+
+  ## Impact
+
+  ### CVE-2025-24928
+
+  Stack-buffer overflow is possible when reporting DTD validation
+  errors if the input contains a long (~3kb) QName prefix.
+
+  ### CVE-2024-56171
+
+  Use-after-free is possible during validation against untrusted
+  XML Schemas (.xsd) and, potentially, validation of untrusted documents
+  against trusted Schemas if they make use of `xsd:keyref` in combination
+  with recursively defined types that have additional identity constraints.
+patched_versions:
+  - ">= 1.18.3"
+related:
+  url:
+    - https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-vvfq-8hwr-qm4m
+    - https://github.com/advisories/GHSA-vvfq-8hwr-qm4m
diff --git a/gems/nokogiri/GHSA-xc9x-jj77-9p9j.yml b/gems/nokogiri/GHSA-xc9x-jj77-9p9j.yml
new file mode 100644
index 0000000000..6a2311faa6
--- /dev/null
+++ b/gems/nokogiri/GHSA-xc9x-jj77-9p9j.yml
@@ -0,0 +1,57 @@
+---
+gem: nokogiri
+ghsa: xc9x-jj77-9p9j
+url: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xc9x-jj77-9p9j
+title: Use-after-free in libxml2 via Nokogiri::XML::Reader
+date: 2024-02-04
+description: |
+  ### Summary
+
+  Nokogiri upgrades its dependency libxml2 as follows:
+  - v1.15.6 upgrades libxml2 to 2.11.7 from 2.11.6
+  - v1.16.2 upgrades libxml2 to 2.12.5 from 2.12.4
+
+  libxml2 v2.11.7 and v2.12.5 address the following vulnerability:
+
+  CVE-2024-25062 / https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25062
+  - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/604
+  - patched by https://gitlab.gnome.org/GNOME/libxml2/-/commit/92721970
+
+  Please note that this advisory only applies to the CRuby implementation of Nokogiri, and only if
+  the packaged libraries are being used. If you've overridden defaults at installation time to use
+  system libraries instead of packaged libraries, you should instead pay attention to your distro's
+  libxml2 release announcements.
+
+  JRuby users are not affected.
+
+  ### Severity
+
+  The Nokogiri maintainers have evaluated this as **Moderate**.
+
+  ### Impact
+
+  From the CVE description, this issue applies to the `xmlTextReader` module (which underlies
+  `Nokogiri::XML::Reader`):
+
+  > When using the XML Reader interface with DTD validation and XInclude expansion enabled,
+  > processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.
+
+  ### Mitigation
+
+  Upgrade to Nokogiri `~> 1.15.6` or `>= 1.16.2`.
+
+  Users who are unable to upgrade Nokogiri may also choose a more complicated mitigation: compile
+  and link Nokogiri against patched external libxml2 libraries which will also address these same
+  issues.
+
+patched_versions:
+  - "~> 1.15.6"
+  - ">= 1.16.2"
+related:
+  cve:
+    - 2024-25062
+  url:
+    - https://github.com/sparklemotion/nokogiri/commit/1b768b797fd42d94de12b9cff4ed0221f5cb92ec
+    - https://github.com/sparklemotion/nokogiri/releases/tag/v1.15.6
+    - https://github.com/sparklemotion/nokogiri/releases/tag/v1.16.2
+    - https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xc9x-jj77-9p9j
diff --git a/gems/nokogiri/OSVDB-118481.yml b/gems/nokogiri/OSVDB-118481.yml
index e42d2401ab..d87b83b34b 100644
--- a/gems/nokogiri/OSVDB-118481.yml
+++ b/gems/nokogiri/OSVDB-118481.yml
@@ -3,13 +3,21 @@ gem: nokogiri
 platform: jruby
 osvdb: 118481
 url: https://github.com/sparklemotion/nokogiri/pull/1087
-title: |
-  Nokogiri Gem for JRuby XML Document Root Element Handling Memory Consumption
-  Remote DoS
+title:
+  Nokogiri Gem for JRuby XML Document Root Element
+  Handling Memory Consumption Remote DoS
 date: 2014-04-30
 description: |
-  Nokogiri Gem for JRuby contains a flaw that is triggered when handling a root
-  element in an XML document. This may allow a remote attacker to cause a
-  consumption of memory resources.
+  Nokogiri Gem for JRuby contains a flaw that is triggered when
+  handling a root element in an XML document. This may allow a
+  remote attacker to cause a consumption of memory resources.
 patched_versions:
-- '>= 1.6.3'
+  - "~> 1.6.2.2"
+  - ">= 1.6.3"
+related:
+  cve:
+    - 2013-6461
+  url:
+    - https://github.com/sparklemotion/nokogiri/pull/1087
+    - https://github.com/sparklemotion/nokogiri/pull/1087/commits/8293bf6fddecb68b688cf025859afde7609f7bff
+    - https://github.com/sparklemotion/nokogiri/commit/a098ddfc9990ea79dbc191407d3e83611e5ff1e6
diff --git a/gems/nori/CVE-2013-0285.yml b/gems/nori/CVE-2013-0285.yml
index 0a082c8901..14bc883959 100644
--- a/gems/nori/CVE-2013-0285.yml
+++ b/gems/nori/CVE-2013-0285.yml
@@ -2,6 +2,7 @@
 gem: nori
 cve: 2013-0285
 osvdb: 90196
+ghsa: 4936-rj25-6wm6
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0285
 title: Ruby Gem nori Parameter Parsing Remote Code Execution
 date: 2013-01-10
@@ -11,6 +12,6 @@ description: |
   during parsing, and is related to CVE-2013-0156.
 cvss_v2: 7.5
 patched_versions:
-- ~> 1.0.3
-- ~> 1.1.4
-- '>= 2.0.2'
+  - "~> 1.0.3"
+  - "~> 1.1.4"
+  - ">= 2.0.2"
diff --git a/gems/oauth/CVE-2016-11086.yml b/gems/oauth/CVE-2016-11086.yml
index 9915639002..631de78a22 100644
--- a/gems/oauth/CVE-2016-11086.yml
+++ b/gems/oauth/CVE-2016-11086.yml
@@ -11,4 +11,4 @@ description: |
   allows man-in-the-middle attackers to spoof servers and obtain sensitive information.
 cvss_v3: 7.4
 patched_versions:
-- '>= 0.5.5'
+  - ">= 0.5.5"
diff --git a/gems/octokit/CVE-2022-31072.yml b/gems/octokit/CVE-2022-31072.yml
new file mode 100644
index 0000000000..b7f7ed4b7e
--- /dev/null
+++ b/gems/octokit/CVE-2022-31072.yml
@@ -0,0 +1,40 @@
+---
+gem: octokit
+cve: 2022-31072
+ghsa: g28x-pgr3-qqx6
+url: https://github.com/octokit/octokit.rb/security/advisories/GHSA-g28x-pgr3-qqx6
+title: Octokit gem published with world-writable files
+date: 2022-06-15
+description: |
+  ### Impact
+
+  Versions [4.23.0](https://rubygems.org/gems/octokit/versions/4.23.0)
+  and [4.24.0](https://rubygems.org/gems/octokit/versions/4.24.0) of the octokit gem
+  were published containing world-writeable files.
+
+  Specifically, the gem was packed
+  with files having their permissions set to `-rw-rw-rw-` (i.e. 0666) instead of `rw-r--r--`
+  (i.e. 0644). This means everyone who is not the owner (Group and Public) with access
+  to the instance where this release had been installed could modify the world-writable
+  files from this gem.
+
+  Malicious code already present and running on your machine,
+  separate from this package, could modify the gem’s files and change its behavior
+  during runtime.
+
+  ### Patches
+
+  * [octokit 4.25.0](https://rubygems.org/gems/octokit/versions/4.25.0)
+
+  ### Workarounds
+  Users can use the previous version of the gem [v4.22.0](https://rubygems.org/gems/octokit/versions/4.22.0).
+  Alternatively, users can modify the file permissions manually until they are able
+  to upgrade to the latest version.
+cvss_v3: 2.5
+unaffected_versions:
+  - "< 4.23.0"
+patched_versions:
+  - ">= 4.25.0"
+related:
+  url:
+    - https://github.com/octokit/octokit.rb/commit/1c8edecc9cf23d1ceb959d91a416a69f55ce7d55
diff --git a/gems/octopoller/CVE-2022-31071.yml b/gems/octopoller/CVE-2022-31071.yml
new file mode 100644
index 0000000000..dcda18b1b7
--- /dev/null
+++ b/gems/octopoller/CVE-2022-31071.yml
@@ -0,0 +1,34 @@
+---
+gem: octopoller
+cve: 2022-31071
+ghsa: 26qj-cr27-r5c4
+url: https://github.com/octokit/octopoller.rb/security/advisories/GHSA-26qj-cr27-r5c4
+title: Octopoller gem published with world-writable files
+date: 2022-06-15
+description: |
+  ### Impact
+
+  Version [0.2.0](https://rubygems.org/gems/octopoller/versions/0.2.0)
+  of the octopoller gem was published containing world-writeable files. Specifically,
+  the gem was packed with files having their permissions set to `-rw-rw-rw-` (i.e.
+  0666) instead of `rw-r--r--` (i.e. 0644).
+
+  This means everyone who is not the owner (Group and Public) with access to the
+  instance where this release had been installed could modify the world-writable
+  files from this gem.
+
+  Malicious code already present and running on your machine, separate from this
+  package, could modify the gem’s files and change its behavior during runtime.
+
+  ### Patches
+  * octopoller v0.3.0
+
+  ### Workarounds
+  Users can use the previous version of the gem [v0.1.0](https://rubygems.org/gems/octopoller/versions/0.1.0).
+  Alternatively, users can modify the file permissions manually until they are able
+  to upgrade to the latest version.
+cvss_v3: 2.5
+unaffected_versions:
+  - "< 0.2.0"
+patched_versions:
+  - ">= 0.3.0"
diff --git a/gems/omniauth-apple/CVE-2020-26254.yml b/gems/omniauth-apple/CVE-2020-26254.yml
index f02fb43a50..c90212cecb 100644
--- a/gems/omniauth-apple/CVE-2020-26254.yml
+++ b/gems/omniauth-apple/CVE-2020-26254.yml
@@ -5,7 +5,7 @@ ghsa: 49r3-2549-3633
 url: https://github.com/nhosoya/omniauth-apple/security/advisories/GHSA-49r3-2549-3633
 date: 2020-12-08
 title: omniauth-apple allows attacker to fake their email address during authentication
-description: |-
+description: |
   ### Impact
 
   This vulnerability impacts applications using the [omniauth-apple](https://github.com/nhosoya/omniauth-apple) strategy of OmniAuth and using the `info.email` field of OmniAuth's [Auth Hash Schema](https://github.com/omniauth/omniauth/wiki/Auth-Hash-Schema) for any kind of identification.  The value of this field may be set to any value of the attacker's choice including email addresses of other users.
@@ -41,4 +41,4 @@ description: |-
   ```
 cvss_v3: 7.7
 patched_versions:
-- '>= 1.0.1'
+  - ">= 1.0.1"
diff --git a/gems/omniauth-auth0/CVE-2020-15240.yml b/gems/omniauth-auth0/CVE-2020-15240.yml
index e3cb82b913..415a662420 100644
--- a/gems/omniauth-auth0/CVE-2020-15240.yml
+++ b/gems/omniauth-auth0/CVE-2020-15240.yml
@@ -5,7 +5,7 @@ ghsa: 58r4-h6v8-jcvm
 url: https://github.com/auth0/omniauth-auth0/security/advisories/GHSA-58r4-h6v8-jcvm
 date: 2020-11-03
 title: Regression in JWT Signature Validation
-description: |-
+description: |
   ### Overview
   Versions after and including `2.3.0` are improperly validating the JWT token signature when
   using the `JWTValidator.verify` method.  Improper validation of the JWT token signature when
@@ -26,7 +26,7 @@ description: |-
   The fix provided in this version will not affect your users.
 cvss_v3: 7.4
 patched_versions:
-- '>= 2.4.1'
+  - ">= 2.4.1"
 
 unaffected_versions:
-- < 2.3.0
+  - "< 2.3.0"
diff --git a/gems/omniauth-facebook/CVE-2013-4562.yml b/gems/omniauth-facebook/CVE-2013-4562.yml
index ede49d183f..29c9cbb3d6 100644
--- a/gems/omniauth-facebook/CVE-2013-4562.yml
+++ b/gems/omniauth-facebook/CVE-2013-4562.yml
@@ -2,6 +2,7 @@
 gem: omniauth-facebook
 cve: 2013-4562
 osvdb: 99693
+ghsa: cf36-985g-v73c
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-4562
 title: omniauth-facebook Gem for Ruby Unspecified CSRF
 date: 2013-11-12
@@ -13,7 +14,7 @@ description: |
   Cross-Site Request Forgery (CSRF / XSRF) attack causing the victim to
   perform an unspecified action.
 cvss_v2: 6.8
-patched_versions:
-- '>= 1.5.0'
 unaffected_versions:
-- <= 1.4.0
+  - "<= 1.4.0"
+patched_versions:
+  - ">= 1.5.0"
diff --git a/gems/omniauth-facebook/CVE-2013-4593.yml b/gems/omniauth-facebook/CVE-2013-4593.yml
index df92b92bc6..8e3dfe92c6 100644
--- a/gems/omniauth-facebook/CVE-2013-4593.yml
+++ b/gems/omniauth-facebook/CVE-2013-4593.yml
@@ -2,6 +2,7 @@
 gem: omniauth-facebook
 cve: 2013-4593
 osvdb: 99888
+ghsa: 33vg-hpx5-pfxg
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-4593
 title: omniauth-facebook Gem for Ruby Insecure Access Token Handling Authentication
   Bypass
@@ -11,5 +12,6 @@ description: |
   supporting passing the access token via the URL. This may allow a remote
   attacker to bypass authentication and authenticate as another user.
 cvss_v2: 6.8
+cvss_v3: 7.5
 patched_versions:
-- '>= 1.5.1'
+  - ">= 1.5.1"
diff --git a/gems/omniauth-microsoft_graph/CVE-2024-21632.yml b/gems/omniauth-microsoft_graph/CVE-2024-21632.yml
new file mode 100644
index 0000000000..9017ef2ff5
--- /dev/null
+++ b/gems/omniauth-microsoft_graph/CVE-2024-21632.yml
@@ -0,0 +1,26 @@
+---
+gem: omniauth-microsoft_graph
+cve: 2024-21632
+ghsa: 5g66-628f-7cvj
+url: https://github.com/synth/omniauth-microsoft_graph/security/advisories/GHSA-5g66-628f-7cvj
+title: Omniauth::MicrosoftGraph Account takeover (nOAuth)
+date: 2024-01-03
+description: |
+
+  ### Summary
+  The implementation did not validate the legitimacy of the `email`
+  attribute of the user nor did it give/document an option to do so,
+  making it susceptible to [nOAuth](https://www.descope.com/blog/post/noauth)
+  misconfiguration in cases when the `email` is used as a trusted
+  user identifier
+cvss_v3: 8.6
+patched_versions:
+  - ">= 2.0.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-21632
+    - https://github.com/synth/omniauth-microsoft_graph/security/advisories/GHSA-5g66-628f-7cvj
+    - https://github.com/synth/omniauth-microsoft_graph/commit/5ffd62690ca0e46978f2fc7d83b18d28edde7795
+    - https://github.com/synth/omniauth-microsoft_graph/commit/f132078389612b797c872b45bd0e0b47382414c1
+    - https://www.descope.com/blog/post/noauth
+    - https://github.com/advisories/GHSA-5g66-628f-7cvj
diff --git a/gems/omniauth-oauth2/CVE-2012-6134.yml b/gems/omniauth-oauth2/CVE-2012-6134.yml
index 8bde780ffd..fe10a8c126 100644
--- a/gems/omniauth-oauth2/CVE-2012-6134.yml
+++ b/gems/omniauth-oauth2/CVE-2012-6134.yml
@@ -2,6 +2,7 @@
 gem: omniauth-oauth2
 cve: 2012-6134
 osvdb: 90264
+ghsa: fgmx-8h93-26fh
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-6134
 title: Ruby on Rails omniauth-oauth2 Gem CSRF vulnerability
 date: 2012-09-08
@@ -10,4 +11,4 @@ description: |
   inject values into a user's session through a CSRF attack.
 cvss_v2: 6.8
 patched_versions:
-- '>= 1.1.1'
+  - ">= 1.1.1"
diff --git a/gems/omniauth-saml/CVE-2017-11430.yml b/gems/omniauth-saml/CVE-2017-11430.yml
index 7ee87393ed..c00bcf94d7 100644
--- a/gems/omniauth-saml/CVE-2017-11430.yml
+++ b/gems/omniauth-saml/CVE-2017-11430.yml
@@ -14,4 +14,4 @@ description: |
 cvss_v2: 7.5
 cvss_v3: 9.8
 patched_versions:
-- '>= 1.10.0'
+  - ">= 1.10.0"
diff --git a/gems/omniauth-saml/CVE-2024-45409.yml b/gems/omniauth-saml/CVE-2024-45409.yml
new file mode 100644
index 0000000000..a01e160ed2
--- /dev/null
+++ b/gems/omniauth-saml/CVE-2024-45409.yml
@@ -0,0 +1,28 @@
+---
+gem: omniauth-saml
+cve: 2024-45409
+ghsa: cvp8-5r8g-fhvq
+url: https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-cvp8-5r8g-fhvq
+title: omniauth-saml vulnerable to Improper Verification of Cryptographic Signature
+date: 2024-09-11
+description: |
+  ruby-saml, the dependent SAML gem of omniauth-saml has a signature
+  wrapping vulnerability in <= v1.12.0 and v1.13.0 to v1.16.0 , see
+  https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-jw9c-mfg7-9rx2
+
+  As a result, omniauth-saml created a
+  [new release](https://github.com/omniauth/omniauth-saml/releases)
+  by upgrading ruby-saml to the patched versions v1.17.
+cvss_v3: 10.0
+patched_versions:
+  - ">= 1.10.5, < 2.0.0"
+  - "~> 2.1.2"
+  - ">= 2.2.1"
+related:
+  ghsa:
+    - https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-cvp8-5r8g-fhvq
+    - https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-jw9c-mfg7-9rx2
+    - https://github.com/advisories/GHSA-cvp8-5r8g-fhvq
+  url:
+    - https://github.com/omniauth/omniauth-saml/commit/4274e9d57e65f2dcaae4aa3b2accf831494f2ddd
+    - https://github.com/omniauth/omniauth-saml/commit/6c681fd082ab3daf271821897a40ab3417382e29
diff --git a/gems/omniauth-saml/GHSA-hw46-3hmr-x9xv.yml b/gems/omniauth-saml/GHSA-hw46-3hmr-x9xv.yml
new file mode 100644
index 0000000000..15823f8d72
--- /dev/null
+++ b/gems/omniauth-saml/GHSA-hw46-3hmr-x9xv.yml
@@ -0,0 +1,31 @@
+---
+gem: omniauth-saml
+ghsa: hw46-3hmr-x9xv
+url: https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv
+title: omniauth-saml has dependency on ruby-saml version with Signature Wrapping Attack
+  issue
+date: 2025-03-12
+description: |-
+  ### Summary
+  There are 2 new Critical Signature Wrapping Vulnerabilities (CVE-2025-25292, CVE-2025-25291) and a potential DDOS Moderated Vulneratiblity (CVE-2025-25293) affecting ruby-saml, a dependency of omniauth-saml.
+
+  The fix will be applied to ruby-saml and released 12 March 2025, under version 1.18.0.
+
+  Please [upgrade](https://github.com/omniauth/omniauth-saml/blob/master/omniauth-saml.gemspec#L16) the ruby-saml requirement to v1.18.0.
+
+  ### Impact
+  Signature Wrapping Vulnerabilities allows an attacker to impersonate a user.
+cvss_v4: 9.3
+patched_versions:
+- "~> 1.10.6"
+- "~> 2.1.3"
+- ">= 2.2.3"
+related:
+  url:
+  - https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv
+  - https://github.com/omniauth/omniauth-saml/commit/0d5eaa0d808acb2ac96deadf5c750ac1cf2d92b5
+  - https://github.com/omniauth/omniauth-saml/commit/2c8a482801808bbcb0188214bde74680b8018a35
+  - https://github.com/omniauth/omniauth-saml/commit/7a348b49083462a566af41a5ae85e9f3af15b985
+  - https://github.com/omniauth/omniauth-saml/blob/master/omniauth-saml.gemspec#L16
+  - https://rubygems.org/gems/omniauth-saml/versions/2.2.3
+  - https://github.com/advisories/GHSA-hw46-3hmr-x9xv
diff --git a/gems/omniauth-weibo-oauth2/CVE-2019-17268.yml b/gems/omniauth-weibo-oauth2/CVE-2019-17268.yml
new file mode 100644
index 0000000000..ed1a798bc6
--- /dev/null
+++ b/gems/omniauth-weibo-oauth2/CVE-2019-17268.yml
@@ -0,0 +1,19 @@
+---
+gem: omniauth-weibo-oauth2
+cve: 2019-17268
+ghsa: vr22-43gj-rx3f
+url: https://github.com/beenhero/omniauth-weibo-oauth2/issues/36
+title: omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third-party
+date: 2022-05-24
+description: |
+  The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org,
+  included a code-execution backdoor inserted by a third party. Versions through 0.4.5,
+  and 0.5.1 and later, are unaffected.
+cvss_v3: 9.8
+unaffected_versions:
+  - "< 0.4.6"
+patched_versions:
+  - ">= 0.5.1"
+related:
+  url:
+    - https://diff.coditsu.io/diffs/09a05c37-1b34-49e1-ac94-d4dda40d1ad1#d2h-971595
diff --git a/gems/omniauth/CVE-2015-9284.yml b/gems/omniauth/CVE-2015-9284.yml
index b3a3bb7d6d..46e666665e 100644
--- a/gems/omniauth/CVE-2015-9284.yml
+++ b/gems/omniauth/CVE-2015-9284.yml
@@ -19,8 +19,8 @@ description: |
 cvss_v2: 6.8
 cvss_v3: 8.8
 patched_versions:
-- '>= 2.0.0'
+  - ">= 2.0.0"
 related:
   url:
-  - https://github.com/omniauth/omniauth/pull/809
-  - https://github.com/cookpad/omniauth-rails_csrf_protection
+    - https://github.com/omniauth/omniauth/pull/809
+    - https://github.com/cookpad/omniauth-rails_csrf_protection
diff --git a/gems/omniauth/CVE-2017-18076.yml b/gems/omniauth/CVE-2017-18076.yml
index d745490ece..6a0cce5004 100644
--- a/gems/omniauth/CVE-2017-18076.yml
+++ b/gems/omniauth/CVE-2017-18076.yml
@@ -12,7 +12,7 @@ description: |
 cvss_v2: 6.8
 cvss_v3: 7.5
 patched_versions:
-- ">= 1.3.2"
+  - ">= 1.3.2"
 related:
   url:
-  - https://nvd.nist.gov/vuln/detail/CVE-2017-18076
+    - https://nvd.nist.gov/vuln/detail/CVE-2017-18076
diff --git a/gems/omniauth/CVE-2020-36599.yml b/gems/omniauth/CVE-2020-36599.yml
new file mode 100644
index 0000000000..41ca72b16a
--- /dev/null
+++ b/gems/omniauth/CVE-2020-36599.yml
@@ -0,0 +1,14 @@
+---
+gem: omniauth
+cve: 2020-36599
+ghsa: pm55-qfxr-h247
+url: https://github.com/omniauth/omniauth/commit/43a396f181ef7d0ed2ec8291c939c95e3ed3ff00#diff-575abda9deb9b1a77bf534e898a923029b9a61e991d626db88dc6e8b34260aa2
+title: OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value
+date: 2022-08-19
+description: |
+  lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before
+  2.0) does not escape the message_key value.
+cvss_v3: 9.8
+patched_versions:
+  - "~> 1.9.2"
+  - ">= 2.0.0"
diff --git a/gems/omniauth_amazon/CVE-2019-15224.yml b/gems/omniauth_amazon/CVE-2019-15224.yml
index 538bcba9cf..04ee4cef73 100644
--- a/gems/omniauth_amazon/CVE-2019-15224.yml
+++ b/gems/omniauth_amazon/CVE-2019-15224.yml
@@ -5,7 +5,7 @@ ghsa: 333g-rpr4-7hxq
 url: https://github.com/rubygems.org/issues/2097
 title: Code execution backdoor in omniauth_amazon
 date: 2019-08-20
-description: |-
+description: |
   The omniauth_amazon gem 1.0.1 for Ruby, as distributed on RubyGems.org, included a
   code-execution backdoor inserted by a third party.
 
@@ -13,8 +13,8 @@ description: |-
   1.0.1.
 cvss_v3: 9.8
 unaffected_versions:
-- "< 1.0.1"
-- "> 1.0.1"
+  - "< 1.0.1"
+  - "> 1.0.1"
 related:
   url:
-  - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
+    - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
diff --git a/gems/open-uri-cached/OSVDB-121701.yml b/gems/open-uri-cached/CVE-2015-3649.yml
similarity index 92%
rename from gems/open-uri-cached/OSVDB-121701.yml
rename to gems/open-uri-cached/CVE-2015-3649.yml
index b41f71577c..f8fa168436 100644
--- a/gems/open-uri-cached/OSVDB-121701.yml
+++ b/gems/open-uri-cached/CVE-2015-3649.yml
@@ -2,6 +2,7 @@
 gem: open-uri-cached
 cve: 2015-3649
 osvdb: 121701
+ghsa: 7m2w-9gw7-c3xp
 url: http://seclists.org/oss-sec/2015/q2/373
 title: open-uri-cached Gem for Ruby Unsafe Temporary File Creation Local Privilege
   Escalation
@@ -10,3 +11,4 @@ description: |
   open-uri-cached Gem for Ruby contains a flaw that is due to the
   program creating temporary files in a predictable, unsafe manner when using
   YAML. This may allow a local attacker to gain elevated privileges.
+cvss_v3: 7.8
diff --git a/gems/openc3-cosmos-tool-iframe/CVE-2025-28382.yml b/gems/openc3-cosmos-tool-iframe/CVE-2025-28382.yml
new file mode 100644
index 0000000000..3091835361
--- /dev/null
+++ b/gems/openc3-cosmos-tool-iframe/CVE-2025-28382.yml
@@ -0,0 +1,21 @@
+---
+gem: openc3-cosmos-tool-iframe
+cve: 2025-28382
+ghsa: cf8v-5mrc-jv7f
+url: https://github.com/advisories/GHSA-cf8v-5mrc-jv7f
+title: OpenC3 COSMOS Vulnerable to Directory Traversal via
+  openc3-api/tables endpoint
+date: 2025-06-13
+description: |
+  An issue in the openc3-api/tables endpoint of OpenC3 COSMOS
+  6.0.0 allows attackers to execute a directory traversal.
+cvss_v3: 7.5
+unaffected_versions:
+  - "< 6.0.0"
+notes: Never patched
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-28382
+    - https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework
+    - https://openc3.com
+    - https://github.com/advisories/GHSA-cf8v-5mrc-jv7f
diff --git a/gems/openc3-cosmos-tool-iframe/CVE-2025-28384.yml b/gems/openc3-cosmos-tool-iframe/CVE-2025-28384.yml
new file mode 100644
index 0000000000..8d900ac248
--- /dev/null
+++ b/gems/openc3-cosmos-tool-iframe/CVE-2025-28384.yml
@@ -0,0 +1,21 @@
+---
+gem: openc3-cosmos-tool-iframe
+cve: 2025-28384
+ghsa: p67j-387g-75wc
+url: https://github.com/advisories/GHSA-p67j-387g-75wc
+title: OpenC3 COSMOS Vulnerable to Directory Traversal via
+  /script-api/scripts/ endpoint
+date: 2025-06-13
+description: |
+  An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS
+  6.0.0 allows attackers to execute a directory traversal.
+cvss_v3: 9.1
+unaffected_versions:
+  - "< 6.0.0"
+notes: Never patched
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-28384
+    - https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework
+    - https://openc3.com
+    - https://github.com/advisories/GHSA-p67j-387g-75wc
diff --git a/gems/openc3/CVE-2024-43795.yml b/gems/openc3/CVE-2024-43795.yml
new file mode 100644
index 0000000000..1940d121ce
--- /dev/null
+++ b/gems/openc3/CVE-2024-43795.yml
@@ -0,0 +1,31 @@
+---
+gem: openc3
+cve: 2024-43795
+ghsa: vfj8-5pj7-2f9g
+url: https://github.com/OpenC3/cosmos/security/advisories/GHSA-vfj8-5pj7-2f9g
+title: OpenC3 Cross-site Scripting in Login functionality (`GHSL-2024-128`)
+date: 2024-10-02
+description: |
+  ### Summary
+
+  The login functionality contains a reflected cross-site scripting
+  (XSS) vulnerability.
+
+  Note: This CVE only affects Open Source Edition, and not
+  OpenC3 COSMOS Enterprise Edition
+
+  ### Impact
+  This issue may lead up to Remote Code Execution (RCE).
+
+  **NOTE:** The complete advisory with much more information is added as
+  [comment](https://github.com/OpenC3/cosmos/security/advisories/GHSA-vfj8-5pj7-2f9g#advisory-comment-104904).
+cvss_v3: 6.1
+cvss_v4: 5.1
+patched_versions:
+  - ">= 5.19.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-43795
+    - https://github.com/OpenC3/cosmos/security/advisories/GHSA-vfj8-5pj7-2f9g
+    - https://github.com/OpenC3/cosmos/commit/762d7e0e93bdc2f340b1e42acccedc78994a576e
+    - https://github.com/advisories/GHSA-vfj8-5pj7-2f9g
diff --git a/gems/openc3/CVE-2024-46977.yml b/gems/openc3/CVE-2024-46977.yml
new file mode 100644
index 0000000000..493fe4c0fd
--- /dev/null
+++ b/gems/openc3/CVE-2024-46977.yml
@@ -0,0 +1,34 @@
+---
+gem: openc3
+cve: 2024-46977
+ghsa: 8jxr-mccc-mwg8
+url: https://github.com/OpenC3/cosmos/security/advisories/GHSA-8jxr-mccc-mwg8
+title: OpenC3 Path Traversal via screen controller (`GHSL-2024-127`)
+date: 2024-10-02
+description: |
+  ### Summary
+
+  A path traversal vulnerability inside of `LocalMode`'s
+  `open_local_file` method allows an authenticated user with
+  adequate permissions to download any `.txt` via the
+  `ScreensController#show` on the web server COSMOS is running
+  on (depending on the file permissions).
+
+  Note: This CVE affects all OpenC3 COSMOS Editions
+
+  ### Impact
+
+  This issue may lead to Information Disclosure.
+
+  **NOTE:** The complete advisory with much more information is added as
+  [comment](https://github.com/OpenC3/cosmos/security/advisories/GHSA-8jxr-mccc-mwg8#advisory-comment-104903).
+cvss_v3: 6.5
+cvss_v4: 5.3
+patched_versions:
+  - ">= 5.19.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-46977
+    - https://github.com/OpenC3/cosmos/security/advisories/GHSA-8jxr-mccc-mwg8
+    - https://github.com/OpenC3/cosmos/commit/a34e61aea5a465f0ab3e57d833ae7ff4cafd710b
+    - https://github.com/advisories/GHSA-8jxr-mccc-mwg8
diff --git a/gems/openc3/CVE-2024-47529.yml b/gems/openc3/CVE-2024-47529.yml
new file mode 100644
index 0000000000..62023def7f
--- /dev/null
+++ b/gems/openc3/CVE-2024-47529.yml
@@ -0,0 +1,33 @@
+---
+gem: openc3
+cve: 2024-47529
+ghsa: 4xqv-47rm-37mm
+url: https://github.com/OpenC3/cosmos/security/advisories/GHSA-4xqv-47rm-37mm
+title: OpenC3 stores passwords in clear text (`GHSL-2024-129`)
+date: 2024-10-02
+description: |
+  ### Summary
+
+  OpenC3 COSMOS stores the password of a user unencrypted in the
+  LocalStorage of a web browser. This makes the user password
+  susceptible to exfiltration via Cross-site scripting (see GHSL-2024-128).
+
+  Note: This CVE only affects Open Source edition, and not
+  OpenC3 COSMOS Enterprise Edition
+
+  ### Impact
+
+  This issue may lead to Information Disclosure.
+
+  **NOTE:** The complete advisory with much more information is added as
+  [comment](https://github.com/OpenC3/cosmos/security/advisories/GHSA-4xqv-47rm-37mm#advisory-comment-104905).
+cvss_v3: 5.9
+cvss_v4: 4.8
+patched_versions:
+  - ">= 5.19.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-47529
+    - https://github.com/OpenC3/cosmos/security/advisories/GHSA-4xqv-47rm-37mm
+    - https://github.com/OpenC3/cosmos/commit/b5ab34fe7fa54c0c8171c4aa3caf4e03d6f63bd7
+    - https://github.com/advisories/GHSA-4xqv-47rm-37mm
diff --git a/gems/opensearch-ruby/CVE-2022-31115.yml b/gems/opensearch-ruby/CVE-2022-31115.yml
new file mode 100644
index 0000000000..54cf9b356f
--- /dev/null
+++ b/gems/opensearch-ruby/CVE-2022-31115.yml
@@ -0,0 +1,24 @@
+---
+gem: opensearch-ruby
+cve: 2022-31115
+ghsa: 977c-63xq-cgw3
+url: https://github.com/opensearch-project/opensearch-ruby/security/advisories/GHSA-977c-63xq-cgw3
+title: Unsafe YAML deserialization in opensearch-ruby
+date: 2022-07-05
+description: |
+  ### Impact
+  A YAML deserialization in opensearch-ruby 2.0.0 can lead to unsafe deserialization using
+  YAML.load if the response is of type YAML.
+
+  ### Patches
+  The problem has been patched in opensearch-ruby gem version 2.0.2.
+
+  ### Workarounds
+  No viable workaround.  Please upgrade to 2.0.2
+cvss_v3: 8.8
+patched_versions:
+  - ">= 2.0.2"
+related:
+  url:
+    - https://github.com/opensearch-project/opensearch-ruby/pull/77
+    - https://staaldraad.github.io/post/2021-01-09-universal-rce-ruby-yaml-load-updated/
diff --git a/gems/openshift-origin-controller/CVE-2013-2095.yml b/gems/openshift-origin-controller/CVE-2013-2095.yml
new file mode 100644
index 0000000000..317c148717
--- /dev/null
+++ b/gems/openshift-origin-controller/CVE-2013-2095.yml
@@ -0,0 +1,21 @@
+---
+gem: openshift-origin-controller
+cve: 2013-2095
+ghsa: 77xq-7c6p-6xp6
+url: https://access.redhat.com/security/cve/cve-2013-2095
+title: RubyGem openshift-origin-controller is vulnerable to command injection
+date: 2022-05-05
+description: |
+  'rubygem-openshift-origin-controller: API can be used to create applications
+  via cartridge_cache.rb URI.prase() to perform command injection'
+cvss_v2: 7.5
+cvss_v3: 9.8
+notes: |
+  - Never patched
+  - Last release is 1.3.4 (Jan.16,2013)
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2013-2095
+    - https://access.redhat.com/security/cve/cve-2013-2095
+    - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2095
+    - https://github.com/advisories/GHSA-77xq-7c6p-6xp6
diff --git a/gems/openshift-origin-node/CVE-2014-0084.yml b/gems/openshift-origin-node/CVE-2014-0084.yml
new file mode 100644
index 0000000000..4117480195
--- /dev/null
+++ b/gems/openshift-origin-node/CVE-2014-0084.yml
@@ -0,0 +1,23 @@
+---
+gem: openshift-origin-node
+cve: 2014-0084
+ghsa: 756m-3qf2-hp58
+url: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0084
+title: openshift-origin-node Improper Input Validation vulnerability
+date: 2022-05-17
+description: |
+  Ruby gem openshift-origin-node before 2014-02-14 does not
+  contain a cronjob timeout which could result in a denial of
+  service in cron.daily and cron.weekly.
+cvss_v2: 2.1
+cvss_v3: 5.5
+notes: "Gem was never patched"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-0084
+    - https://github.com/openshift/origin-server/pull/4764
+    - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0084
+    - https://access.redhat.com/errata/RHBA-2014:0487
+    - https://access.redhat.com/security/cve/CVE-2014-0084
+    - https://bugzilla.redhat.com/show_bug.cgi?id=1065198
+    - https://github.com/advisories/GHSA-756m-3qf2-hp58
diff --git a/gems/openssl/CVE-2016-7798.yml b/gems/openssl/CVE-2016-7798.yml
index 896d590474..8692f18ba5 100644
--- a/gems/openssl/CVE-2016-7798.yml
+++ b/gems/openssl/CVE-2016-7798.yml
@@ -12,4 +12,4 @@ description: |
 cvss_v2: 5.0
 cvss_v3: 7.5
 patched_versions:
-- '>= 2.0.0'
+  - ">= 2.0.0"
diff --git a/gems/openssl/CVE-2017-14033.yml b/gems/openssl/CVE-2017-14033.yml
new file mode 100644
index 0000000000..38938d451a
--- /dev/null
+++ b/gems/openssl/CVE-2017-14033.yml
@@ -0,0 +1,32 @@
+---
+gem: openssl
+cve: 2017-14033
+ghsa: v6rp-3r3v-hf4p
+url: https://www.ruby-lang.org/en/news/2017/09/14/openssl-asn1-buffer-underrun-cve-2017-14033/
+title: Ruby OpenSSL DoS Vulnerability
+date: 2022-05-14
+description: |
+  The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x
+  before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service
+  (interpreter crash) via a crafted string.
+cvss_v2: 5.0
+cvss_v3: 7.5
+patched_versions:
+  - "> 2.0.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2017-14033
+    - https://www.ruby-lang.org/en/news/2017/09/14/openssl-asn1-buffer-underrun-cve-2017-14033/
+    - https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/
+    - https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/
+    - https://access.redhat.com/errata/RHSA-2018:0378
+    - https://access.redhat.com/errata/RHSA-2018:0583
+    - https://access.redhat.com/errata/RHSA-2018:0585
+    - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
+    - https://security.gentoo.org/glsa/201710-18
+    - https://www.debian.org/security/2017/dsa-4031
+    - https://web.archive.org/web/20210509153849/http://www.securityfocus.com/bid/100868
+    - https://web.archive.org/web/20210622181826/http://www.securitytracker.com/id/1042004
+    - https://web.archive.org/web/20210724095519/http://www.securitytracker.com/id/1039363
+    - https://github.com/advisories/GHSA-v6rp-3r3v-hf4p
+notes: "Versions in description: field are ruby versions, not ruby gem"
diff --git a/gems/openssl/CVE-2018-16395.yml b/gems/openssl/CVE-2018-16395.yml
new file mode 100644
index 0000000000..1f429019d8
--- /dev/null
+++ b/gems/openssl/CVE-2018-16395.yml
@@ -0,0 +1,43 @@
+---
+gem: openssl
+cve: 2018-16395
+ghsa: mmrq-6999-72v8
+url: https://www.ruby-lang.org/en/news/2018/10/17/openssl-x509-name-equality-check-does-not-work-correctly-cve-2018-16395/
+title: Incorrect value comparison in Ruby openssl
+date: 2018-10-17
+description: |
+  An issue was discovered in the OpenSSL library in Ruby when two OpenSSL::X509::Name
+  objects are compared using ==, depending on the ordering, non-equal objects may
+  return true. When the first argument is one character longer than the second, or
+  the second argument contains a character that is one less than a character in the
+  same position of the first argument, the result of == will be true. This could be
+  leveraged to create an illegitimate certificate that may be accepted as legitimate
+  and then used in signing or encryption operations.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - ">= 2.1.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-16395
+    - https://www.ruby-lang.org/en/news/2018/10/17/openssl-x509-name-equality-check-does-not-work-correctly-cve-2018-16395/
+    - https://hackerone.com/reports/387250
+    - https://access.redhat.com/errata/RHSA-2018:3729
+    - https://access.redhat.com/errata/RHSA-2018:3730
+    - https://access.redhat.com/errata/RHSA-2018:3731
+    - https://access.redhat.com/errata/RHSA-2018:3738
+    - https://access.redhat.com/errata/RHSA-2019:1948
+    - https://access.redhat.com/errata/RHSA-2019:2565
+    - https://lists.debian.org/debian-lts-announce/2018/10/msg00020.html
+    - https://security.netapp.com/advisory/ntap-20190221-0002/
+    - https://usn.ubuntu.com/3808-1/
+    - https://www.debian.org/security/2018/dsa-4332
+    - https://www.oracle.com/security-alerts/cpujan2020.html
+    - https://www.ruby-lang.org/en/news/2018/10/17/ruby-2-3-8-released/
+    - https://www.ruby-lang.org/en/news/2018/10/17/ruby-2-4-5-released/
+    - https://www.ruby-lang.org/en/news/2018/10/17/ruby-2-5-2-released/
+    - https://www.ruby-lang.org/en/news/2018/11/06/ruby-2-6-0-preview3-released/
+    - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html
+    - http://www.securitytracker.com/id/1042105
+    - https://github.com/ruby/openssl/commit/f653cfa43f0f20e8c440122ea982382b6228e7f5
+    - https://github.com/advisories/GHSA-mmrq-6999-72v8
diff --git a/gems/ox/CVE-2017-15928.yml b/gems/ox/CVE-2017-15928.yml
index 6d80d4ad47..8c4cb4fcd9 100644
--- a/gems/ox/CVE-2017-15928.yml
+++ b/gems/ox/CVE-2017-15928.yml
@@ -12,4 +12,4 @@ description: |
 cvss_v2: 5.0
 cvss_v3: 7.5
 patched_versions:
-- '>= 2.8.1'
+  - ">= 2.8.1"
diff --git a/gems/ox/CVE-2017-16229.yml b/gems/ox/CVE-2017-16229.yml
index 6717801d8b..0b87f696a0 100644
--- a/gems/ox/CVE-2017-16229.yml
+++ b/gems/ox/CVE-2017-16229.yml
@@ -12,4 +12,4 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 5.5
 patched_versions:
-- '>= 2.8.2'
+  - ">= 2.8.2"
diff --git a/gems/oxidized-web/CVE-2019-25088.yml b/gems/oxidized-web/CVE-2019-25088.yml
new file mode 100644
index 0000000000..733fa653ce
--- /dev/null
+++ b/gems/oxidized-web/CVE-2019-25088.yml
@@ -0,0 +1,19 @@
+---
+gem: oxidized-web
+cve: 2019-25088
+ghsa: 8qwh-rm6c-jv96
+url: https://github.com/ytti/oxidized-web/pull/195
+title: Oxidized Web vulnerable to Cross-site Scripting
+date: 2022-12-27
+description: |
+  A vulnerability was found in ytti Oxidized Web. It has been classified
+  as problematic. Affected is an unknown function of the file `lib/oxidized/web/views/conf_search.haml`.
+  The manipulation of the argument `to_research` leads to cross site scripting. It
+  is possible to launch the attack remotely. The name of the patch is 55ab9bdc68b03ebce9280b8746ef31d7fdedcc45.
+  It is recommended to apply a patch to fix this issue. VDB-216870 is the identifier
+  assigned to this vulnerability.
+cvss_v3: 5.4
+related:
+  url:
+    - https://github.com/ytti/oxidized-web/commit/55ab9bdc68b03ebce9280b8746ef31d7fdedcc45
+    - https://vuldb.com/?id.216870
diff --git a/gems/oxidized-web/CVE-2025-27590.yml b/gems/oxidized-web/CVE-2025-27590.yml
new file mode 100644
index 0000000000..6e15621989
--- /dev/null
+++ b/gems/oxidized-web/CVE-2025-27590.yml
@@ -0,0 +1,21 @@
+---
+gem: oxidized-web
+cve: 2025-27590
+ghsa: jx6p-9c26-g373
+url: https://github.com/advisories/GHSA-jx6p-9c26-g373
+title: Oxidized Web RANCID migration page allows unauthenticated
+  user to gain control over Linux user account
+date: 2025-03-03
+description: |
+  In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID
+  migration page allows an unauthenticated user to gain control
+  over the Linux user account that is running oxidized-web.
+cvss_v3: 9.1
+patched_versions:
+  - ">= 0.15.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-27590
+    - https://github.com/ytti/oxidized-web/releases/tag/0.15.0
+    - https://github.com/ytti/oxidized-web/commit/a5220a0ddc57b85cd122bffee228d3ed4901668e
+    - https://github.com/advisories/GHSA-jx6p-9c26-g373
diff --git a/gems/pageflow/GHSA-qcqv-38jg-2r43.yml b/gems/pageflow/GHSA-qcqv-38jg-2r43.yml
new file mode 100644
index 0000000000..14b362322f
--- /dev/null
+++ b/gems/pageflow/GHSA-qcqv-38jg-2r43.yml
@@ -0,0 +1,29 @@
+---
+gem: pageflow
+ghsa: qcqv-38jg-2r43
+url: https://github.com/codevise/pageflow/security/advisories/GHSA-qcqv-38jg-2r43
+title: Pageflow vulnerable to insecure direct object reference in membership update endpoint
+date: 2022-09-15
+description: |
+  ### Impact
+
+  Pageflow has a membership edit feature which allows users to edit the roles of user
+  memberships associated with an account that they have the `manager` role to (including
+  their own). While the `Entity` dropdown select field is greyed out in the UI, an attacker
+  can use tools which allow sending arbitrary HTTP request to craft a request to the
+  `/admin/users/{user_id}/memberships/{membership_id}` endpoint containing an additional
+  `membership[entity_id]` parameter. This parameter is honored when the membership is
+  updated, allowing an attacker to update the membership object associated with their own
+  account (with `manager` role) to be associated with a different attacker-chosen account
+  instead. Since `account_id`s are enumerable, an attacker can compromise all accounts
+  present on the platform.
+
+  ### Mitigation
+
+  Upgrade to version 15.7.1 or 14.5.2 of the `pageflow` gem.
+patched_versions:
+  - "~> 14.5.2"
+  - ">= 15.7.1"
+related:
+  url:
+    - https://github.com/codevise/pageflow/pull/1862
diff --git a/gems/pageflow/GHSA-wrrw-crp8-979q.yml b/gems/pageflow/GHSA-wrrw-crp8-979q.yml
new file mode 100644
index 0000000000..940be81569
--- /dev/null
+++ b/gems/pageflow/GHSA-wrrw-crp8-979q.yml
@@ -0,0 +1,33 @@
+---
+gem: pageflow
+ghsa: wrrw-crp8-979q
+url: https://github.com/codevise/pageflow/security/advisories/GHSA-wrrw-crp8-979q
+title: Pageflow vulnerable to sensitive user data extraction via Ransack query injection
+date: 2022-09-15
+description: |
+  ### Impact
+
+  The attack allows extracting sensitive properties of database objects that are
+  associated with users or entries belonging to an account that the attacker has access
+  to.
+
+  Pageflow uses the `ActiveAdmin` Ruby library to provide some management features to
+  its users. `ActiveAdmin` relies on the `Ransack` library to implement search
+  functionality. In its default configuration, `Ransack` will allow for query conditions
+  based on properties of associated database objects [1]. The `*_starts_with`,
+  `*_ends_with` or `*_contains` search matchers [2] can then be abused to exfiltrate
+  sensitive string values of associated database objects via character-by-character
+  brute-force.
+
+  [1] https://activerecord-hackery.github.io/ransack/going-further/associations/
+  [2] https://activerecord-hackery.github.io/ransack/getting-started/search-matches/
+
+  ### Mitigation
+
+  Upgrade to version 15.7.1 or 14.5.2 of the `pageflow` gem.
+patched_versions:
+  - "~> 14.5.2"
+  - ">= 15.7.1"
+related:
+  url:
+    - https://github.com/codevise/pageflow/pull/1862
diff --git a/gems/paperclip/CVE-2015-2963.yml b/gems/paperclip/CVE-2015-2963.yml
index 91a424ab06..32474ce4d0 100644
--- a/gems/paperclip/CVE-2015-2963.yml
+++ b/gems/paperclip/CVE-2015-2963.yml
@@ -13,4 +13,4 @@ description: |
   passes the spoof check.
 cvss_v2: 4.3
 patched_versions:
-- '>= 4.2.2'
+  - ">= 4.2.2"
diff --git a/gems/paperclip/CVE-2017-0889.yml b/gems/paperclip/CVE-2017-0889.yml
index 6dba2bd8e6..8277f3fa2a 100644
--- a/gems/paperclip/CVE-2017-0889.yml
+++ b/gems/paperclip/CVE-2017-0889.yml
@@ -3,9 +3,10 @@ gem: paperclip
 cve: 2017-0889
 ghsa: 5jcf-c5rg-rmm8
 url: https://github.com/thoughtbot/paperclip/pull/2435
-title: |
-  Paperclip ruby gem suffers from a Server-Side Request Forgery (SSRF) vulnerability
-  in the Paperclip::UriAdapter and Paperclip::HttpUrlProxyAdapter class.
+title:
+  Paperclip ruby gem suffers from a Server-Side Request Forgery (SSRF)
+  vulnerability in the Paperclip::UriAdapter and
+  Paperclip::HttpUrlProxyAdapter class.
 date: 2018-01-23
 description: |
   Paperclip gem provides multiple ways a file can be uploaded to a web server.
@@ -16,9 +17,10 @@ description: |
   against Server Side Request Forgery (SSRF) exploits by default. This may allow
   a remote attacker to access information about internal network resources.
 cvss_v2: 7.5
+cvss_v3: 9.8
 patched_versions:
-- '>= 5.2.0'
+  - ">= 5.2.0"
 related:
   url:
-  - https://nvd.nist.gov/vuln/detail/CVE-2017-0889
-  - https://github.com/thoughtbot/paperclip/commit/4ebedfbd11d20d03ed03a1274ed281eee62715d4
+    - https://nvd.nist.gov/vuln/detail/CVE-2017-0889
+    - https://github.com/thoughtbot/paperclip/commit/4ebedfbd11d20d03ed03a1274ed281eee62715d4
diff --git a/gems/paperclip/OSVDB-103151.yml b/gems/paperclip/OSVDB-103151.yml
index ca98c86718..6a0839791b 100644
--- a/gems/paperclip/OSVDB-103151.yml
+++ b/gems/paperclip/OSVDB-103151.yml
@@ -1,12 +1,19 @@
 ---
 gem: paperclip
 osvdb: 103151
-url: http://osvdb.org/show/osvdb/103151
-title: Paperclip Gem for Ruby contains a flaw
+url: https://security.snyk.io/vuln/SNYK-RUBY-PAPERCLIP-20144
+title: "Paperclip: Access Restriction Bypass"
 date: 2014-01-31
-description: Paperclip Gem for Ruby contains a flaw that is due to the application
+description: |
+  Paperclip Gem for Ruby contains a flaw that is due to the application
   failing to properly validate the file extension, instead only validating the Content-Type
   header during file uploads. This may allow a remote attacker to bypass restrictions
   on file types for uploaded files by spoofing the content-type.
 patched_versions:
-- '>= 4.0.0'
+  - ">= 4.0.0"
+related:
+  url:
+    - https://thoughtbot.com/blog/prevent-spoofing-with-paperclip
+    - https://www.theregister.com/2014/02/09/content_type_spoofing_bug_in_ror_paperclip
+    - https://security.snyk.io/vuln/SNYK-RUBY-PAPERCLIP-20144
+    - http://osvdb.org/show/osvdb/103151
diff --git a/gems/papercrop/CVE-2015-2784.yml b/gems/papercrop/CVE-2015-2784.yml
new file mode 100644
index 0000000000..24089463b0
--- /dev/null
+++ b/gems/papercrop/CVE-2015-2784.yml
@@ -0,0 +1,13 @@
+---
+gem: papercrop
+cve: 2015-2784
+ghsa: m44r-gv6q-9j9r
+url: https://github.com/rsantamaria/papercrop/commit/b4ecd95debaf0a8712bd1d34def83f41fc6b3579
+title: papercrop does not properly handle crop input
+date: 2022-05-24
+description: |
+  The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle
+  crop input.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 0.3.0"
diff --git a/gems/paranoid2/CVE-2019-13589.yml b/gems/paranoid2/CVE-2019-13589.yml
index de9285d998..f02fc12612 100644
--- a/gems/paranoid2/CVE-2019-13589.yml
+++ b/gems/paranoid2/CVE-2019-13589.yml
@@ -12,5 +12,5 @@ description: |
   The current version, without this backdoor, is 1.1.5.
 cvss_v3: 9.8
 unaffected_versions:
-- '> 1.1.6'
-- < 1.1.6
+  - "> 1.1.6"
+  - "< 1.1.6"
diff --git a/gems/paratrooper-newrelic/CVE-2014-1234.yml b/gems/paratrooper-newrelic/CVE-2014-1234.yml
index b8106e8690..0611aefe05 100644
--- a/gems/paratrooper-newrelic/CVE-2014-1234.yml
+++ b/gems/paratrooper-newrelic/CVE-2014-1234.yml
@@ -2,6 +2,7 @@
 gem: paratrooper-newrelic
 cve: 2014-1234
 osvdb: 101839
+ghsa: 959j-5g9v-3fpq
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-1234
 title: Paratrooper-newrelic Gem for Ruby Process Listing API Key Local Disclosure
 date: 2014-01-08
diff --git a/gems/paratrooper-pingdom/CVE-2014-1233.yml b/gems/paratrooper-pingdom/CVE-2014-1233.yml
index ff8c75f23e..8cb3613ea7 100644
--- a/gems/paratrooper-pingdom/CVE-2014-1233.yml
+++ b/gems/paratrooper-pingdom/CVE-2014-1233.yml
@@ -2,6 +2,7 @@
 gem: paratrooper-pingdom
 cve: 2014-1233
 osvdb: 101847
+ghsa: fqrr-rrwg-69pv
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-1233
 title: paratrooper-pingdom Gem for Ruby /lib/paratrooper-pingdom.rb API Login Credentials
   Local Disclosure
diff --git a/gems/passenger/OSVDB-90738.yml b/gems/passenger/CVE-2012-6135.yml
similarity index 76%
rename from gems/passenger/OSVDB-90738.yml
rename to gems/passenger/CVE-2012-6135.yml
index 845cb955cc..e1e1b84aa1 100644
--- a/gems/passenger/OSVDB-90738.yml
+++ b/gems/passenger/CVE-2012-6135.yml
@@ -2,15 +2,18 @@
 gem: passenger
 cve: 2012-6135
 osvdb: 90738
+ghsa: 8mw8-j583-vqfg
 url: http://old.blog.phusion.nl/2013/03/05/phusion-passenger-4-0-beta-1-and-2-arbitrary-file-deletion-vulnerability/
 title: Phusion Passenger Gem for Ruby Arbitrary File Deletion
 date: 2012-02-01
-description: Phusion Passenger Gem for Ruby contains a flaw that is triggered during
+description: |
+  Phusion Passenger Gem for Ruby contains a flaw that is triggered during
   application startup. This issue may allow a local attacker to delete arbitrary files
   via an application process. If the program has completed the start up process this
   vulnerability is no longer exploitable.
 cvss_v2: 2.1
-patched_versions:
-- '>= 4.0.0'
+cvss_v3: 7.5
 unaffected_versions:
-- < 4.0.0
+  - "< 4.0.0.beta"
+patched_versions:
+  - ">= 4.0.0"
diff --git a/gems/passenger/CVE-2013-2119.yml b/gems/passenger/CVE-2013-2119.yml
index 920e41354c..10da3074f3 100644
--- a/gems/passenger/CVE-2013-2119.yml
+++ b/gems/passenger/CVE-2013-2119.yml
@@ -2,14 +2,16 @@
 gem: passenger
 cve: 2013-2119
 osvdb: 93752
+ghsa: 9qj7-jvg4-qr2x
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-2119
-title: 'CVE-2013-2119 rubygem-passenger: incorrect temporary file usage'
+title: "CVE-2013-2119 rubygem-passenger: incorrect temporary file usage"
 date: 2013-05-29
-description: Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows
+description: |
+  Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows
   local users to cause a denial of service (prevent application start) or gain privileges
   by pre-creating a temporary "config" file in a directory with a predictable name
   in /tmp/ before it is used by the gem.
 cvss_v2: 4.6
 patched_versions:
-- ~> 3.0.21
-- '>= 4.0.5'
+  - "~> 3.0.21"
+  - ">= 4.0.5"
diff --git a/gems/passenger/CVE-2013-4136.yml b/gems/passenger/CVE-2013-4136.yml
index 005c6f8fd5..7980a60f55 100644
--- a/gems/passenger/CVE-2013-4136.yml
+++ b/gems/passenger/CVE-2013-4136.yml
@@ -2,14 +2,17 @@
 gem: passenger
 cve: 2013-4136
 osvdb: 94074
+ghsa: w6rc-q387-vpgq
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-4136
-title: 'CVE-2013-4136 rubygem-passenger: insecure temporary directory usage due to
-  reuse of existing server instance directories'
+title:
+  "CVE-2013-4136 rubygem-passenger: insecure temporary directory
+  usage due toreuse of existing server instance directories"
 date: 2013-06-10
-description: ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6
+description: |
+  ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6
   for Ruby allows local users to gain privileges or possibly change the ownership
   of arbitrary directories via a symlink attack on a directory with a predictable
   name in /tmp/.
 cvss_v2: 4.6
 patched_versions:
-- '>= 4.0.8'
+  - ">= 4.0.8"
diff --git a/gems/passenger/CVE-2014-1831.yml b/gems/passenger/CVE-2014-1831.yml
index d3b4a03dcd..de9bea31c7 100644
--- a/gems/passenger/CVE-2014-1831.yml
+++ b/gems/passenger/CVE-2014-1831.yml
@@ -2,12 +2,14 @@
 gem: passenger
 cve: 2014-1831
 osvdb: 102613
+ghsa: c7j7-p5jq-26ff
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-1831
-title: 'CVE-2014-1831 CVE-2014-1832 rubygem-passenger: insecure use of temporary files'
+title: "CVE-2014-1831 CVE-2014-1832 rubygem-passenger: insecure use of temporary files"
 date: 2014-01-28
-description: Phusion Passenger before 4.0.37 allows local users to write to certain
+description: |
+  Phusion Passenger before 4.0.37 allows local users to write to certain
   files and directories via a symlink attack on (1) control_process.pid or a (2) generation-*
   file.
 cvss_v2: 2.1
 patched_versions:
-- '>= 4.0.37'
+  - ">= 4.0.37"
diff --git a/gems/passenger/CVE-2014-1832.yml b/gems/passenger/CVE-2014-1832.yml
index f59a3b65cb..2451282395 100644
--- a/gems/passenger/CVE-2014-1832.yml
+++ b/gems/passenger/CVE-2014-1832.yml
@@ -2,12 +2,14 @@
 gem: passenger
 cve: 2014-1832
 osvdb: 102613
+ghsa: qw8w-2xcp-xg59
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-1832
-title: 'CVE-2014-1831 CVE-2014-1832 rubygem-passenger: insecure use of temporary files'
+title: "CVE-2014-1831 CVE-2014-1832 rubygem-passenger: insecure use of temporary files"
 date: 2014-01-29
-description: 'Phusion Passenger 4.0.37 allows local users to write to certain files
+description: |
+  'Phusion Passenger 4.0.37 allows local users to write to certain files
   and directories via a symlink attack on (1) control_process.pid or a (2) generation-*
   file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831.'
 cvss_v2: 2.1
 patched_versions:
-- '>= 4.0.38'
+  - ">= 4.0.38"
diff --git a/gems/passenger/CVE-2015-7519.yml b/gems/passenger/CVE-2015-7519.yml
index 4d4c18f883..48ba22fb42 100644
--- a/gems/passenger/CVE-2015-7519.yml
+++ b/gems/passenger/CVE-2015-7519.yml
@@ -5,12 +5,13 @@ ghsa: fxwv-953p-7qpf
 url: https://blog.phusion.nl/2015/12/07/cve-2015-7519/
 title: Phusion Passenger Server allows to overwrite headers in some cases
 date: 2015-11-23
-description: It is possible in some cases, for clients to overwrite headers set by
+description: |
+  It is possible in some cases, for clients to overwrite headers set by
   the server, resulting in a medium level security issue. Passenger 5 uses an SCGI-inspired
   format to pass headers to Ruby/Python applications, while Passenger 4 uses an SCGI-inspired
   format to pass headers to all applications. This implies a conversion to UPPER_CASE_WITH_UNDERSCORES
   whereby the difference between characters like '-' and '_' is lost.
 cvss_v3: 3.7
 patched_versions:
-- "~> 4.0.60"
-- ">= 5.0.22"
+  - "~> 4.0.60"
+  - ">= 5.0.22"
diff --git a/gems/passenger/CVE-2016-10345.yml b/gems/passenger/CVE-2016-10345.yml
index fdae97fa7b..8cbe96d2c0 100644
--- a/gems/passenger/CVE-2016-10345.yml
+++ b/gems/passenger/CVE-2016-10345.yml
@@ -5,10 +5,11 @@ ghsa: cqxw-3p7v-p9gr
 url: https://blog.phusion.nl/2017/01/10/passenger-5-1-1/
 title: Predictable tmp File Path Vulnerability in Phusion Passenger
 date: 2016-11-09
-description: In Phusion Passenger before 5.1.0, a known /tmp filename was used during
+description: |
+  In Phusion Passenger before 5.1.0, a known /tmp filename was used during
   passenger-install-nginx-module execution, which could allow local attackers to gain
   the privileges of the passenger user.
 cvss_v2: 4.6
 cvss_v3: 7.8
 patched_versions:
-- '>= 5.1.0'
+  - ">= 5.1.0"
diff --git a/gems/passenger/CVE-2017-16355.yml b/gems/passenger/CVE-2017-16355.yml
new file mode 100644
index 0000000000..91a3d1f8a0
--- /dev/null
+++ b/gems/passenger/CVE-2017-16355.yml
@@ -0,0 +1,21 @@
+---
+gem: passenger
+cve: 2017-16355
+ghsa: cv3f-px9r-54hm
+url: https://github.com/phusion/passenger/commit/4043718264095cde6623c2cbe8c644541036d7bf
+title: Phusion Passenger information disclosure
+date: 2022-05-13
+description: |
+  In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed
+  in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if Passenger is
+  running as root, it is possible to list the contents of arbitrary files on a system
+  by symlinking a file named REVISION from the application root folder to a file of
+  choice and querying passenger-status --show=xml.
+cvss_v3: 4.7
+patched_versions:
+  - ">= 5.1.11"
+related:
+  url:
+    - https://blog.phusion.nl/2017/10/13/passenger-security-advisory-5-1-11/
+    - https://seclists.org/bugtraq/2019/Mar/34
+    - https://www.debian.org/security/2019/dsa-4415
diff --git a/gems/passenger/CVE-2018-12026.yml b/gems/passenger/CVE-2018-12026.yml
index 92124456ed..eb5583a9e8 100644
--- a/gems/passenger/CVE-2018-12026.yml
+++ b/gems/passenger/CVE-2018-12026.yml
@@ -1,10 +1,11 @@
 ---
 gem: passenger
 cve: 2018-12026
+ghsa: 7cv3-gvmc-8mq5
 url: https://blog.phusion.nl/2018/06/12/passenger-5-3-2-various-security-fixes/
 title: SpawningKit exploits
 date: 2018-06-12
-description: >-
+description: |
   During the spawning of a malicious Passenger-managed application, SpawningKit
   in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace
   key files or directories in the spawning communication directory with
@@ -12,13 +13,11 @@ description: >-
   can result in information disclosure and privilege escalation.
 cvss_v2: 7.5
 cvss_v3: 9.8
-patched_versions:
-- '>= 5.3.2'
-
 unaffected_versions:
-- < 5.3.0
-
+  - "< 5.3.0"
+patched_versions:
+  - ">= 5.3.2"
 related:
   cve:
-  - 2018-12027
-  - 2018-12028
+    - 2018-12027
+    - 2018-12028
diff --git a/gems/passenger/CVE-2018-12027.yml b/gems/passenger/CVE-2018-12027.yml
new file mode 100644
index 0000000000..41d7b03629
--- /dev/null
+++ b/gems/passenger/CVE-2018-12027.yml
@@ -0,0 +1,27 @@
+---
+gem: passenger
+cve: 2018-12027
+ghsa: whfx-877c-5p28
+url: https://blog.phusion.nl/passenger-5-3-2
+title: Insecure Permissions in Phusion Passenger
+date: 2018-06-12
+description: |
+  "An Insecure Permissions vulnerability in SpawningKit in Phusion Passenger
+  5.3.x before 5.3.2 causes information disclosure in the following situation: given
+  a Passenger-spawned application process that reports that it listens on a certain
+  Unix domain socket, if any of the parent directories of said socket are writable
+  by a normal user that is not the application''s user, then that non-application
+  user can swap that directory with something else, resulting in traffic being redirected
+  to a non-application user''s process through an alternative Unix domain socket."
+cvss_v2: 6.5
+cvss_v3: 8.8
+unaffected_versions:
+  - "< 5.3.0"
+patched_versions:
+  - ">= 5.3.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-12027
+    - https://blog.phusion.nl/passenger-5-3-2
+    - https://security.gentoo.org/glsa/201807-02
+    - https://github.com/advisories/GHSA-whfx-877c-5p28
diff --git a/gems/passenger/CVE-2018-12028.yml b/gems/passenger/CVE-2018-12028.yml
new file mode 100644
index 0000000000..05e18fe14a
--- /dev/null
+++ b/gems/passenger/CVE-2018-12028.yml
@@ -0,0 +1,25 @@
+---
+gem: passenger
+cve: 2018-12028
+ghsa: jjhj-8gx7-x836
+url: https://blog.phusion.nl/passenger-5-3-2
+title: Incorrect Access Control in Phusion Passenger
+date: 2018-06-12
+description: |
+  An Incorrect Access Control vulnerability in SpawningKit in Phusion Passenger
+  5.3.x before 5.3.2 allows a Passenger-managed malicious application, upon spawning
+  a child process, to report an arbitrary different PID back to Passenger's process
+  manager. If the malicious application then generates an error, it would cause Passenger's
+  process manager to kill said reported arbitrary PID.
+cvss_v2: 6.8
+cvss_v3: 7.8
+unaffected_versions:
+  - "< 5.3.0"
+patched_versions:
+  - ">= 5.3.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-12028
+    - https://blog.phusion.nl/passenger-5-3-2
+    - https://security.gentoo.org/glsa/201807-02
+    - https://github.com/advisories/GHSA-jjhj-8gx7-x836
diff --git a/gems/passenger/CVE-2018-12029.yml b/gems/passenger/CVE-2018-12029.yml
index 8c217054f4..8b61fb46e5 100644
--- a/gems/passenger/CVE-2018-12029.yml
+++ b/gems/passenger/CVE-2018-12029.yml
@@ -1,10 +1,11 @@
 ---
 gem: passenger
 cve: 2018-12029
+ghsa: jjcj-fgfm-9g9r
 url: https://blog.phusion.nl/2018/06/12/passenger-5-3-2-various-security-fixes/
 title: CHMOD race vulnerability
 date: 2018-06-12
-description: >-
+description: |
   The file system access race condition allows for local privilege escalation
   and affects the Nginx module for Passenger versions 5.3.1, all the way back
   to 3.0.0 (the chown command entered the code in 2010).
@@ -18,8 +19,7 @@ description: >-
   root's crontab file, then privilege escalation was possible.
 cvss_v2: 4.4
 cvss_v3: 7.0
-patched_versions:
-- '>= 5.3.2'
-
 unaffected_versions:
-- < 3.0.0
+  - "< 3.0.0"
+patched_versions:
+  - ">= 5.3.2"
diff --git a/gems/passenger/CVE-2018-12615.yml b/gems/passenger/CVE-2018-12615.yml
new file mode 100644
index 0000000000..571042fe3e
--- /dev/null
+++ b/gems/passenger/CVE-2018-12615.yml
@@ -0,0 +1,15 @@
+---
+gem: passenger
+cve: 2018-12615
+ghsa: 4284-jfhc-f854
+url: https://github.com/phusion/passenger/commit/4e97fdb86d0a0141ec9a052c6e691fcd07bb45c8
+title: Phusion Passenger incorrect permission assignment
+date: 2022-05-13
+description: |
+  An issue was discovered in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp
+  in Phusion Passenger before 5.3.2. The set of groups (gidset) is not set correctly,
+  leaving it up to randomness (i.e., uninitialized memory) which supplementary groups
+  are actually being set while lowering privileges.
+cvss_v3: 5.3
+patched_versions:
+  - ">= 5.3.2"
diff --git a/gems/passenger/CVE-2025-26803.yml b/gems/passenger/CVE-2025-26803.yml
new file mode 100644
index 0000000000..82e1a01e44
--- /dev/null
+++ b/gems/passenger/CVE-2025-26803.yml
@@ -0,0 +1,25 @@
+---
+gem: passenger
+cve: 2025-26803
+ghsa: 2cj2-qqxj-5m3r
+url: https://github.com/advisories/GHSA-2cj2-qqxj-5m3r
+title: Phusion Passenger denial of service
+date: 2025-02-24
+description: |
+  The http parser in Phusion Passenger 6.0.21 through 6.0.25
+  before 6.0.26 allows a denial of service during parsing of
+  a request with an invalid HTTP method.
+cvss_v3: 5.3
+unaffected_versions:
+  - "< 6.0.21"
+patched_versions:
+  - ">= 6.0.26"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-26803
+    - https://blog.phusion.nl/2025/02/19/passenger-6-0-26
+    - https://github.com/phusion/passenger/compare/release-6.0.25...release-6.0.26
+    - https://github.com/phusion/passenger/releases/tag/release-6.0.26
+    - https://github.com/phusion/passenger/commit/bb15591646687064ab2d578d5f9660b2a4168017
+    - https://www.phusionpassenger.com/support
+    - https://github.com/advisories/GHSA-2cj2-qqxj-5m3r
diff --git a/gems/pay/CVE-2023-30614.yml b/gems/pay/CVE-2023-30614.yml
new file mode 100644
index 0000000000..f111b63b25
--- /dev/null
+++ b/gems/pay/CVE-2023-30614.yml
@@ -0,0 +1,29 @@
+---
+gem: pay
+cve: 2023-30614
+ghsa: cqf3-vpx7-rxhw
+url: https://github.com/pay-rails/pay/security/advisories/GHSA-cqf3-vpx7-rxhw
+title: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in Pay
+date: 2023-04-20
+description: |
+  Impact
+    A payments info page of Pay is susceptible to reflected Cross-site
+    scripting. An attacker could create a working URL that renders a
+    javascript link to a user on a Rails application that integrates
+    Pay. This URL could be distributed via email to specifically target
+    certain individuals. If the targeted application contains a
+    functionality to submit user-generated content (such as comments)
+    the attacker could even distribute the URL using that functionality.
+  Patches
+    This has been patched in version 6.3.2 and above.
+    Pay will now sanitize the `back` parameter and only permit relative paths.
+cvss_v3: 7.1
+patched_versions:
+  - ">= 6.3.2"
+related:
+  url:
+    - https://github.com/pay-rails/pay/security/advisories/GHSA-cqf3-vpx7-rxhw
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-30614
+    - https://github.com/pay-rails/pay/commit/5d6283a24062bd272a524ec48415f536a67ad57f
+    - https://github.com/pay-rails/pay/commit/c067771d8c7514acde4b948b474caf054bb0e25d
+    - https://github.com/advisories/GHSA-cqf3-vpx7-rxhw
diff --git a/gems/pdf_info/CVE-2022-36231.yml b/gems/pdf_info/CVE-2022-36231.yml
new file mode 100644
index 0000000000..be64e749f1
--- /dev/null
+++ b/gems/pdf_info/CVE-2022-36231.yml
@@ -0,0 +1,17 @@
+---
+gem: pdf_info
+cve: 2022-36231
+ghsa: 9fh3-j99m-f4v7
+url: https://github.com/affix/CVE-2022-36231
+title: Code injection in pdf_info
+date: 2023-02-24
+description: |
+  pdf_info 0.5.3 is vulnerable to Command Execution. An attacker using
+  a specially crafted payload may execute OS commands by using command chaining because
+  during object initalization there is no validation performed and the user provided
+  path is used.
+cvss_v3: 9.8
+related:
+  url:
+    - https://github.com/newspaperclub/pdf_info/issues/16
+    - https://github.com/newspaperclub/pdf_info/pull/15
diff --git a/gems/pdfkit/CVE-2013-1607.yml b/gems/pdfkit/CVE-2013-1607.yml
index a1f24f3883..5219ce6e16 100644
--- a/gems/pdfkit/CVE-2013-1607.yml
+++ b/gems/pdfkit/CVE-2013-1607.yml
@@ -2,12 +2,15 @@
 gem: pdfkit
 cve: 2013-1607
 osvdb: 90867
+ghsa: 39v7-xpq4-8884
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1607
 title: PDFKit Gem for Ruby PDF File Generation Parameter Handling Remote Code Execution
 date: 2013-02-21
-description: PDFKit Gem for Ruby contains a flaw that is due to the program failing
+description: |
+  PDFKit Gem for Ruby contains a flaw that is due to the program failing
   to properly validate input during the handling of parameters when generating PDF
   files. This may allow a remote attacker to potentially execute arbitrary code via
   the pdfkit generation options.
+cvss_v3: 9.8
 patched_versions:
-- '>= 0.5.3'
+  - ">= 0.5.3"
diff --git a/gems/pdfkit/CVE-2022-25765.yml b/gems/pdfkit/CVE-2022-25765.yml
new file mode 100644
index 0000000000..720fd1334f
--- /dev/null
+++ b/gems/pdfkit/CVE-2022-25765.yml
@@ -0,0 +1,17 @@
+---
+gem: pdfkit
+cve: 2022-25765
+ghsa: rhwx-hjx2-x4qr
+url: "https://github.com/pdfkit/pdfkit/blob/46cdf53ec540da1a1a2e4da979e3e5fe2f92a257/lib/pdfkit/pdfkit.rb#L55-L58"
+title: PDFKit vulnerable to Command Injection
+date: 2022-09-10
+description: |
+  The package pdfkit from version 0.0.0 through version 0.8.6 is vulnerable
+  to Command Injection where the URL is not properly sanitized.
+cvss_v3: 9.8
+related:
+  url:
+    - "https://github.com/pdfkit/pdfkit/blob/master/lib/pdfkit/source.rb#L44-L50"
+    - https://security.snyk.io/vuln/SNYK-RUBY-PDFKIT-2869795
+patched_versions:
+  - ">= 0.8.7.2"
diff --git a/gems/personnummer/GHSA-vp9c-fpxx-744v.yml b/gems/personnummer/GHSA-vp9c-fpxx-744v.yml
index 4cb587f3c1..03c491d055 100644
--- a/gems/personnummer/GHSA-vp9c-fpxx-744v.yml
+++ b/gems/personnummer/GHSA-vp9c-fpxx-744v.yml
@@ -15,9 +15,9 @@ description: |
   without upgrading, a check on the last four digits can be made to make sure it's
   not 000x.
 patched_versions:
-- '>= 1.3.1'
+  - ">= 1.3.1"
 
 related:
   url:
-  - https://github.com/personnummer/ruby/issues/9
-  - https://github.com/personnummer/ruby/pull/10
+    - https://github.com/personnummer/ruby/issues/9
+    - https://github.com/personnummer/ruby/pull/10
diff --git a/gems/pghero/CVE-2020-16253.yml b/gems/pghero/CVE-2020-16253.yml
index 44342dd86f..cee409d2fa 100644
--- a/gems/pghero/CVE-2020-16253.yml
+++ b/gems/pghero/CVE-2020-16253.yml
@@ -23,4 +23,4 @@ description: |
   3. Resetting query stats (running `pg_stat_statements_reset()`)
 cvss_v3: 8.1
 patched_versions:
-- ">= 2.7.0"
+  - ">= 2.7.0"
diff --git a/gems/pghero/CVE-2023-22626.yml b/gems/pghero/CVE-2023-22626.yml
new file mode 100644
index 0000000000..adbd53ad6a
--- /dev/null
+++ b/gems/pghero/CVE-2023-22626.yml
@@ -0,0 +1,16 @@
+---
+gem: pghero
+cve: 2023-22626
+ghsa: vf99-xw26-86g5
+url: https://github.com/ankane/pghero/issues/439
+title: Information Disclosure Through EXPLAIN Feature
+date: 2023-01-04
+description: |
+  A malicious PgHero user can use the EXPLAIN functionality to extract data from
+  the database. With certain inputs, a user can get the results of a query to
+  appear in an error message. If the PgHero database user has superuser privileges
+  (not recommended), the user can use file access functions to read files on the
+  database server.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 3.1.0"
diff --git a/gems/pgsync/CVE-2021-31671.yml b/gems/pgsync/CVE-2021-31671.yml
index aa483b7027..c60a2fbcfc 100644
--- a/gems/pgsync/CVE-2021-31671.yml
+++ b/gems/pgsync/CVE-2021-31671.yml
@@ -25,4 +25,4 @@ description: |
   This applies to both the `to` and `from` connections.
 cvss_v3: 7.5
 patched_versions:
-- '>= 0.6.7'
+  - ">= 0.6.7"
diff --git a/gems/phlex/CVE-2024-28199.yml b/gems/phlex/CVE-2024-28199.yml
new file mode 100644
index 0000000000..210c55d7e7
--- /dev/null
+++ b/gems/phlex/CVE-2024-28199.yml
@@ -0,0 +1,85 @@
+---
+gem: phlex
+cve: 2024-28199
+ghsa: 242p-4v39-2v8g
+url: https://github.com/phlex-ruby/phlex/security/advisories/GHSA-242p-4v39-2v8g
+title: Cross-site Scripting (XSS) possible with maliciously
+  formed HTML attribute names and values in Phlex
+date: 2024-03-12
+description: |
+  There is a potential cross-site scripting (XSS) vulnerability that
+  can be exploited via maliciously crafted user data. This was due
+  to improper case-sensitivity in the code that was meant to prevent
+  these attacks.
+
+  ### Impact
+
+  If you render an `<a>` tag with an `href` attribute set to a
+  user-provided link, that link could potentially execute JavaScript
+  when clicked by another user.
+
+  ```ruby
+  a(href: user_profile) { "Profile" }
+  ```
+
+  If you splat user-provided attributes when rendering any HTML or
+  SVG tag, malicious event attributes could be included in the output,
+  executing JavaScript when the events are triggered by another user.
+
+  ```ruby
+  h1(**JSON.parse(user_attributes))
+  ```
+
+  ### Patches
+
+  Patches are [available on RubyGems](https://rubygems.org/gems/phlex)
+  for all `1.x` minor versions. The patched versions are:
+
+  - [1.9.1](https://rubygems.org/gems/phlex/versions/1.9.1)
+  - [1.8.2](https://rubygems.org/gems/phlex/versions/1.8.2)
+  - [1.7.1](https://rubygems.org/gems/phlex/versions/1.7.1)
+  - [1.6.2](https://rubygems.org/gems/phlex/versions/1.6.2)
+  - [1.5.2](https://rubygems.org/gems/phlex/versions/1.5.2)
+  - [1.4.1](https://rubygems.org/gems/phlex/versions/1.4.1)
+  - [1.3.3](https://rubygems.org/gems/phlex/versions/1.3.3)
+  - [1.2.2](https://rubygems.org/gems/phlex/versions/1.2.2)
+  - [1.1.1](https://rubygems.org/gems/phlex/versions/1.1.1)
+  - [1.0.1](https://rubygems.org/gems/phlex/versions/1.0.1)
+
+  If you are on `main`, it has been patched since
+  [`aa50c60`](https://github.com/phlex-ruby/phlex/commit/aa50c604cdee1d0ce7ef068a4c66cbd5d43f96a1)
+
+  ### Workarounds
+
+  Configuring a [Content Security Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy)
+  that does not allow [`unsafe-inline`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#unsafe-inline)
+  would effectively prevent this vulnerability from being exploited.
+
+  ### References
+
+  In addition to upgrading to a patched version of Phlex, we strongly
+  recommend configuring a Content Security Policy header that does not
+  allow `unsafe-inline`. Here’s how you can configure a Content Security
+  Policy header in Rails.
+  https://guides.rubyonrails.org/security.html#content-security-policy-header
+
+cvss_v3: 7.1
+patched_versions:
+  - "~> 1.0.1"
+  - "~> 1.1.1"
+  - "~> 1.2.2"
+  - "~> 1.3.3"
+  - "~> 1.4.1"
+  - "~> 1.5.2"
+  - "~> 1.6.2"
+  - "~> 1.7.1"
+  - "~> 1.8.2"
+  - ">= 1.9.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-28199
+    - https://github.com/phlex-ruby/phlex/security/advisories/GHSA-242p-4v39-2v8g
+    - https://github.com/phlex-ruby/phlex/commit/aa50c604cdee1d0ce7ef068a4c66cbd5d43f96a1
+    - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
+    - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#unsafe-inline
+    - https://github.com/advisories/GHSA-242p-4v39-2v8g
diff --git a/gems/phlex/CVE-2024-32463.yml b/gems/phlex/CVE-2024-32463.yml
new file mode 100644
index 0000000000..9e6c3202cb
--- /dev/null
+++ b/gems/phlex/CVE-2024-32463.yml
@@ -0,0 +1,55 @@
+---
+gem: phlex
+cve: 2024-32463
+ghsa: g7xq-xv8c-h98c
+url: https://github.com/phlex-ruby/phlex/security/advisories/GHSA-g7xq-xv8c-h98c
+title: Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tags
+date: 2024-04-16
+description: |
+  ### Summary
+
+  There is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data.
+
+  Our filter to detect and prevent the use of the `javascript:` URL scheme in the `href` attribute of an `<a>` tag could be bypassed with tab `\t` or newline `\n` characters between the characters of the protocol, e.g. `java\tscript:`.
+
+  ### Impact
+
+  If you render an `<a>` tag with an `href` attribute set to a user-provided link, that link could potentially execute JavaScript when clicked by another user.
+
+  ```ruby
+  a(href: user_profile) { "Profile" }
+  ```
+
+  ### Mitigation
+
+  The best way to mitigate this vulnerability is to update to one of the following versions:
+
+  - [1.10.1](https://rubygems.org/gems/phlex/versions/1.10.1)
+  - [1.9.2](https://rubygems.org/gems/phlex/versions/1.9.2)
+  - [1.8.3](https://rubygems.org/gems/phlex/versions/1.8.3)
+  - [1.7.2](https://rubygems.org/gems/phlex/versions/1.7.2)
+  - [1.6.3](https://rubygems.org/gems/phlex/versions/1.6.3)
+  - [1.5.3](https://rubygems.org/gems/phlex/versions/1.5.3)
+  - [1.4.2](https://rubygems.org/gems/phlex/versions/1.4.2)
+
+  ### Workarounds
+
+  Configuring a [Content Security Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy) that does not allow [`unsafe-inline`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#unsafe-inline) would effectively prevent this vulnerability from being exploited.
+
+cvss_v3: 7.1
+patched_versions:
+  - "~> 1.4.2"
+  - "~> 1.5.3"
+  - "~> 1.6.3"
+  - "~> 1.7.2"
+  - "~> 1.8.3"
+  - "~> 1.9.2"
+  - ">= 1.10.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-28199
+    - https://github.com/phlex-ruby/phlex/security/advisories/GHSA-g7xq-xv8c-h98c
+    - https://github.com/phlex-ruby/phlex/commit/9e3f5b980655817993682e409cbda72956d865cb
+    - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
+    - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#unsafe-inline
+    - https://github.com/advisories/GHSA-g7xq-xv8c-h98c
diff --git a/gems/phlex/CVE-2024-32970.yml b/gems/phlex/CVE-2024-32970.yml
new file mode 100644
index 0000000000..9812ce9fb4
--- /dev/null
+++ b/gems/phlex/CVE-2024-32970.yml
@@ -0,0 +1,75 @@
+---
+gem: phlex
+cve: 2024-32970
+ghsa: 9p57-h987-4vgx
+url: https://github.com/phlex-ruby/phlex/security/advisories/GHSA-9p57-h987-4vgx
+title: Phlex vulnerable to Cross-site Scripting (XSS) via maliciously
+  formed HTML attribute names and values
+date: 2024-05-01
+description: |
+  There is a potential cross-site scripting (XSS) vulnerability that
+  can be exploited via maliciously crafted user data.
+
+  The reason these issues were not detected before is the escapes were
+  working as designed. However, their design didn't take into account
+  just how recklessly permissive browser are when it comes to executing
+  unsafe JavaScript via HTML attributes.
+
+  ### Impact
+
+  If you render an `<a>` tag with an `href` attribute set to an
+  user-provided link, that link could potentially execute JavaScript
+  when clicked by another user.
+
+  ```ruby
+  a(href: user_profile) { "Profile" }
+  ```
+
+  If you splat user-provided attributes when rendering any HTML or SVG
+  tag, malicious event attributes could be included in the output,
+  executing JavaScript when the events are triggered by another user.
+
+  ```ruby
+  h1(**JSON.parse(user_attributes))
+  ```
+
+  ### Patches
+
+  Patches are [available on RubyGems](https://rubygems.org/gems/phlex)
+  for all minor versions released in the last year.
+
+  - [1.10.2](https://rubygems.org/gems/phlex/versions/1.10.2)
+  - [1.9.3](https://rubygems.org/gems/phlex/versions/1.9.3)
+
+  If you are on `main`, it has been patched since
+  [`da8f943`](https://github.com/phlex-ruby/phlex/commit/da8f94342a84cff9d78c98bcc3b3604ee2e577d2)
+
+  ### Workarounds
+
+  Configuring a [Content Security Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy)
+  that does not allow [`unsafe-inline`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#unsafe-inline)
+  would effectively prevent this vulnerability from being exploited.
+
+  ### References
+
+  In addition to upgrading to a patched version of Phlex, we strongly
+  recommend configuring a Content Security Policy header that does
+  not allow `unsafe-inline`. Here’s how you can configure a Content
+  Security Policy header in Rails.
+  https://guides.rubyonrails.org/security.html#content-security-policy-header
+cvss_v3: 7.1
+patched_versions:
+  - "~> 1.9.3"
+  - ">= 1.10.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-32970
+    - https://github.com/phlex-ruby/phlex/security/advisories/GHSA-9p57-h987-4vgx
+    - https://github.com/phlex-ruby/phlex/commit/da8f94342a84cff9d78c98bcc3b3604ee2e577d2
+    - https://rubygems.org/gems/phlex
+    - https://rubygems.org/gems/phlex/versions/1.10.2
+    - https://rubygems.org/gems/phlex/versions/1.9.3
+    - https://github.com/payloadbox/xss-payload-list
+    - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
+    - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#unsafe-inline
+    - https://github.com/advisories/GHSA-9p57-h987-4vgx
diff --git a/gems/pitchfork/CVE-2025-30221.yml b/gems/pitchfork/CVE-2025-30221.yml
new file mode 100644
index 0000000000..e891d1ed8e
--- /dev/null
+++ b/gems/pitchfork/CVE-2025-30221.yml
@@ -0,0 +1,26 @@
+---
+gem: pitchfork
+cve: 2025-30221
+ghsa: pfqj-w6r6-g86v
+url: https://github.com/Shopify/pitchfork/security/advisories/GHSA-pfqj-w6r6-g86v
+title: Pitchfork HTTP Request/Response Splitting vulnerability
+date: 2025-03-27
+description: |
+  ### Impact
+  HTTP Response Header Injection in Pitchfork Versions < 0.11.0
+  when used in conjunction with Rack 3
+
+  ### Patches
+  The issue was fixed in Pitchfork release 0.11.0
+
+  ### Workarounds
+  There are no known work arounds. Users must upgrade.
+cvss_v3: 4.3
+patched_versions:
+  - ">= 0.11.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-30221
+    - https://github.com/Shopify/pitchfork/security/advisories/GHSA-pfqj-w6r6-g86v
+    - https://github.com/Shopify/pitchfork/commit/17ed9b61bf9f58957065f7405b66102daf86bf55
+    - https://github.com/advisories/GHSA-pfqj-w6r6-g86v
diff --git a/gems/point-cli/CVE-2014-4997.yml b/gems/point-cli/CVE-2014-4997.yml
index 62a70f1c35..cad7004e8f 100644
--- a/gems/point-cli/CVE-2014-4997.yml
+++ b/gems/point-cli/CVE-2014-4997.yml
@@ -2,10 +2,13 @@
 gem: point-cli
 cve: 2014-4997
 osvdb: 108577
+ghsa: mc8m-x6hf-cw2g
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-4997
 title: point-cli Gem for Ruby /lib/commands/setup.rb Process Table Local Plaintext
   Credential Disclosure
 date: 2014-06-30
-description: point-cli Gem for Ruby contains a flaw in /lib/commands/setup.rb that
+description: |
+  point-cli Gem for Ruby contains a flaw in /lib/commands/setup.rb that
   is due to the application exposing credential information in plaintext in the process
   table. This may allow a local attacker to gain access to credential information.
+cvss_v3: 7.8
diff --git a/gems/private_address_check/CVE-2017-0904.yml b/gems/private_address_check/CVE-2017-0904.yml
index 1dcbefa4e2..6ec554fc62 100644
--- a/gems/private_address_check/CVE-2017-0904.yml
+++ b/gems/private_address_check/CVE-2017-0904.yml
@@ -13,4 +13,4 @@ description: |
 cvss_v2: 6.8
 cvss_v3: 8.1
 patched_versions:
-- '>= 0.4.0'
+  - ">= 0.4.0"
diff --git a/gems/private_address_check/CVE-2017-0909.yml b/gems/private_address_check/CVE-2017-0909.yml
index 8004466b4c..a59350d3f3 100644
--- a/gems/private_address_check/CVE-2017-0909.yml
+++ b/gems/private_address_check/CVE-2017-0909.yml
@@ -11,4 +11,4 @@ description: |
 cvss_v2: 7.5
 cvss_v3: 9.8
 patched_versions:
-- '>= 0.4.1'
+  - ">= 0.4.1"
diff --git a/gems/private_address_check/CVE-2018-3759.yml b/gems/private_address_check/CVE-2018-3759.yml
index ec7f92c8b9..6745fe20d6 100644
--- a/gems/private_address_check/CVE-2018-3759.yml
+++ b/gems/private_address_check/CVE-2018-3759.yml
@@ -11,4 +11,4 @@ description: |
   can trigger this case where the initial resolution is a public address by the subsequent
   resolution is a private address.
 patched_versions:
-- '>= 0.5.0'
+  - ">= 0.5.0"
diff --git a/gems/protocol-http1/CVE-2023-38697.yml b/gems/protocol-http1/CVE-2023-38697.yml
new file mode 100644
index 0000000000..58679a66dd
--- /dev/null
+++ b/gems/protocol-http1/CVE-2023-38697.yml
@@ -0,0 +1,58 @@
+---
+gem: protocol-http1
+cve: 2023-38697
+ghsa: 6jwc-qr2q-7xwj
+url: https://github.com/socketry/protocol-http1/security/advisories/GHSA-6jwc-qr2q-7xwj
+title: protocol-http1 HTTP Request/Response Smuggling vulnerability
+date: 2023-08-03
+description: |
+  ### Impact
+
+  [RFC 9112 Section 7.1](https://www.rfc-editor.org/rfc/rfc9112#name-chunked-transfer-coding)
+  defined the format of chunk size, chunk data and chunk
+  extension (detailed ABNF is in Appendix section).
+
+  In summary:
+
+  - The value of Content-Length header should be a string of 0-9 digits.
+  - The chunk size should be a string of hex digits and should split
+     from chunk data using CRLF.
+  - The chunk extension shouldn't contain any invisible character.
+
+  However, we found that Falcon has following behaviors while
+  disobey the corresponding RFCs.
+
+  - Falcon accepts Content-Length header values that have "+" prefix.
+  - Falcon accepts Content-Length header values that written in
+    hexadecimal with "0x" prefix.
+  - Falcon accepts "0x" and "+" prefixed chunk size.
+  - Falcon accepts LF in chunk extension.
+
+  This behavior can lead to desync when forwarding through multiple
+  HTTP parsers, potentially results in HTTP request smuggling and
+  firewall bypassing. Note that while these issues were reproduced
+  in Falcon (the server), the issue is with `protocol-http1` which
+  implements the HTTP/1 protocol parser. We have not yet been advised
+  of any real world exploit or practical attack.
+
+  ### Patches
+
+  Fixed in `protocol-http1` v0.15.1+.
+
+  ### Workarounds
+
+  No.
+
+  ### References
+
+  https://github.com/socketry/protocol-http1/pull/20
+cvss_v3: 5.8
+patched_versions:
+  - ">= 0.15.1"
+related:
+  url:
+    - https://github.com/socketry/protocol-http1/security/advisories/GHSA-6jwc-qr2q-7xwj
+    - https://github.com/socketry/protocol-http1/pull/20
+    - https://github.com/socketry/protocol-http1/commit/e11fc164fd2b36f7b7e785e69fa8859eb06bcedd
+    - https://github.com/advisories/GHSA-6jwc-qr2q-7xwj
+notes: "CVE-2023-38697 not yet published"
diff --git a/gems/publify_core/CVE-2014-3211.yml b/gems/publify_core/CVE-2014-3211.yml
new file mode 100644
index 0000000000..0e850afc0d
--- /dev/null
+++ b/gems/publify_core/CVE-2014-3211.yml
@@ -0,0 +1,25 @@
+---
+gem: publify_core
+cve: 2014-3211
+ghsa: vq74-9583-hrm4
+url: https://github.com/publify/publify/releases/tag/v8.0.2
+title: Publify vulnerable to DoS attack
+date: 2020-01-09
+description: |
+  Publify before 8.0.2 is vulnerable to a Denial of Service attack
+cvss_v2: 5.0
+cvss_v3: 7.5
+patched_versions:
+  - ">= 8.0.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-3211
+    - https://cve.report/CVE-2014-3211
+    - https://github.com/publify/publify/releases/tag/v8.0.2
+    - https://publify.github.io
+    - https://rubygems.org/gems/publify_core
+    - https://rubygems.org/gems/typo
+    - https://github.com/advisories/GHSA-vq74-9583-hrm4
+notes: |
+  Found "Formerly known as Typo" at https://github.com/publify/publify
+  FYI: Gem publify_core oldest release is 9.0.0.pre1 (11/13/2016);
diff --git a/gems/publify-core/CVE-2021-25973.yml b/gems/publify_core/CVE-2021-25973.yml
similarity index 50%
rename from gems/publify-core/CVE-2021-25973.yml
rename to gems/publify_core/CVE-2021-25973.yml
index 392233c5e2..e4510e7c67 100644
--- a/gems/publify-core/CVE-2021-25973.yml
+++ b/gems/publify_core/CVE-2021-25973.yml
@@ -1,16 +1,19 @@
 ---
-gem: publify-core
+gem: publify_core
 cve: 2021-25973
 ghsa: x24j-87x9-jvv5
-url: https://github.com/advisories/GHSA-x24j-87x9-jvv5
+url: https://github.com/publify/publify/commit/3447e0241e921b65f6eb1090453d8ea73e98387e
 title: Improper Authorization in Publify
 date: 2021-11-03
 description: |
   In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control.
-  `guest` role users can self-register even when the admin does not allow. This happens
-  due to front-end restriction only.
+  `guest` role users can self-register even when the admin does not allow.
+  This happens due to front-end restriction only.
 cvss_v3: 6.5
 unaffected_versions:
-- "< 9.0.0.pre1"
+  - "< 9.0.0.pre1"
 patched_versions:
-- ">= 9.2.5"
+  - ">= 9.2.5"
+related:
+  url:
+    - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25973
diff --git a/gems/publify_core/CVE-2021-25974.yml b/gems/publify_core/CVE-2021-25974.yml
new file mode 100644
index 0000000000..8e5ca6b1a8
--- /dev/null
+++ b/gems/publify_core/CVE-2021-25974.yml
@@ -0,0 +1,19 @@
+---
+gem: publify_core
+cve: 2021-25974
+ghsa: wmh9-x28j-c6gr
+url: https://github.com/publify/publify/commit/fefd5f76302adcc425b2b6e7e7d23587cfc0083e
+title: Cross site scripting in publify
+date: 2022-05-24
+description: |
+  In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS. A user
+  with a 'publisher' role is able to inject and execute arbitrary JavaScript code
+  while creating a page/article.
+cvss_v3: 5.4
+unaffected_versions:
+  - "< 8.0"
+patched_versions:
+  - ">= 9.2.5"
+related:
+  url:
+    - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25974
diff --git a/gems/publify_core/CVE-2021-25975.yml b/gems/publify_core/CVE-2021-25975.yml
new file mode 100644
index 0000000000..db288a5081
--- /dev/null
+++ b/gems/publify_core/CVE-2021-25975.yml
@@ -0,0 +1,19 @@
+---
+gem: publify_core
+cve: 2021-25975
+ghsa: 3h7v-wqw7-ff28
+url: https://github.com/publify/publify/commit/d99c0870d3dbbfde7febdc6cad33199b84770101
+title: Cross site scripting in publify
+date: 2022-05-24
+description: |
+  In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a
+  result of an unrestricted file upload. This issue allows a user with 'publisher'
+  role to inject malicious JavaScript via the uploaded html file.
+cvss_v3: 5.4
+unaffected_versions:
+  - "< 8.0"
+patched_versions:
+  - ">= 9.2.5"
+related:
+  url:
+    - https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25974
diff --git a/gems/publify_core/CVE-2022-0524.yml b/gems/publify_core/CVE-2022-0524.yml
index f079a23ba9..e935742699 100644
--- a/gems/publify_core/CVE-2022-0524.yml
+++ b/gems/publify_core/CVE-2022-0524.yml
@@ -10,8 +10,8 @@ description: |
   to business logic errors.
 cvss_v3: 6.5
 patched_versions:
-- ">= 9.2.7"
+  - ">= 9.2.7"
 related:
   url:
-  - https://huntr.dev/bounties/bfffae58-b3cd-4e0e-b1f2-3db387a22c3d
-  - https://github.com/publify/publify/releases/tag/v9.2.7
+    - https://huntr.dev/bounties/bfffae58-b3cd-4e0e-b1f2-3db387a22c3d
+    - https://github.com/publify/publify/releases/tag/v9.2.7
diff --git a/gems/publify_core/CVE-2022-0574.yml b/gems/publify_core/CVE-2022-0574.yml
new file mode 100644
index 0000000000..a216340032
--- /dev/null
+++ b/gems/publify_core/CVE-2022-0574.yml
@@ -0,0 +1,17 @@
+---
+gem: publify_core
+cve: 2022-0574
+ghsa: 79m3-q3wh-c3qm
+url: https://github.com/publify/publify/commit/0e6c66ac2002136517662399bca9d838c80d9739
+title: Incorrect Authorization in publify
+date: 2022-05-17
+description: |
+  Improper Access Control in GitHub repository publify/publify prior to
+  9.2.8. Anonymous users can't view but can leave comments on an article in draft
+  mode.
+cvss_v3: 6.5
+patched_versions:
+  - ">= 9.2.8"
+related:
+  url:
+    - https://huntr.dev/bounties/6f322c84-9e20-4df6-97e8-92bc271ede3f
diff --git a/gems/publify_core/CVE-2022-0578.yml b/gems/publify_core/CVE-2022-0578.yml
new file mode 100644
index 0000000000..a86b6731e3
--- /dev/null
+++ b/gems/publify_core/CVE-2022-0578.yml
@@ -0,0 +1,15 @@
+---
+gem: publify_core
+cve: 2022-0578
+ghsa: w78q-4w34-jrjx
+url: https://github.com/publify/publify/commit/b50df050c593cc532b2c516792989bcfce2d73f7
+title: Code injection in publify
+date: 2022-05-17
+description: |
+  Code Injection in GitHub repository publify/publify prior to 9.2.8.
+cvss_v3: 6.5
+patched_versions:
+  - ">= 9.2.8"
+related:
+  url:
+    - https://huntr.dev/bounties/02c81928-eb47-476f-8000-e93dc796dbcc
diff --git a/gems/publify_core/CVE-2022-1553.yml b/gems/publify_core/CVE-2022-1553.yml
new file mode 100644
index 0000000000..b06500b372
--- /dev/null
+++ b/gems/publify_core/CVE-2022-1553.yml
@@ -0,0 +1,18 @@
+---
+gem: publify_core
+cve: 2022-1553
+ghsa: 5jm7-g527-m694
+url: https://github.com/publify/publify/commit/1a78f16f460847274265a12a9555b3524892d7db
+title: Article metadata exposure in publify
+date: 2022-05-17
+description: |
+  Leaking password protected articles content due to improper access control
+  in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this
+  vulnerability to view the contents of any password-protected article present on
+  the publify website, compromising confidentiality and integrity of users.
+cvss_v3: 4.9
+patched_versions:
+  - ">= 9.2.8"
+related:
+  url:
+    - https://huntr.dev/bounties/b398e4c9-6cdf-4973-ad86-da796cde221f
diff --git a/gems/publify_core/CVE-2022-1810.yml b/gems/publify_core/CVE-2022-1810.yml
new file mode 100644
index 0000000000..143c392237
--- /dev/null
+++ b/gems/publify_core/CVE-2022-1810.yml
@@ -0,0 +1,16 @@
+---
+gem: publify_core
+cve: 2022-1810
+ghsa: c273-c6vg-4pv5
+url: https://github.com/publify/publify/commit/c0aba87844d1e47da50c0d99a3465164a4d244ce
+title: Improper Access Control in publify
+date: 2022-05-24
+description: |
+  A low-privileged user can modify and delete admin articles just by changing
+  the value of the article[id] parameter prior to 9.2.9.
+cvss_v3: 4.3
+patched_versions:
+  - ">= 9.2.9"
+related:
+  url:
+    - https://huntr.dev/bounties/9b2d7579-032e-42da-b736-4b10a868eacb
diff --git a/gems/publify_core/CVE-2022-1811.yml b/gems/publify_core/CVE-2022-1811.yml
new file mode 100644
index 0000000000..63385d193f
--- /dev/null
+++ b/gems/publify_core/CVE-2022-1811.yml
@@ -0,0 +1,16 @@
+---
+gem: publify_core
+cve: 2022-1811
+ghsa: 3hwx-c6cp-q972
+url: https://github.com/publify/publify/commit/0fb6b027fbaf17f6a6551f2148482a03eac12927
+title: Cross site scripting in publify
+date: 2022-05-24
+description: |
+  Unrestricted file upload allowed the attacker to manipulate the request
+  and bypass the protection of HTML files using a text file. Stored XSS may be obtained.
+cvss_v3: 9.1
+patched_versions:
+  - ">= 9.2.9"
+related:
+  url:
+    - https://huntr.dev/bounties/4d97f665-c9f1-4c38-b774-692255a7c44c
diff --git a/gems/publify_core/CVE-2022-1812.yml b/gems/publify_core/CVE-2022-1812.yml
new file mode 100644
index 0000000000..2f9304f521
--- /dev/null
+++ b/gems/publify_core/CVE-2022-1812.yml
@@ -0,0 +1,16 @@
+---
+gem: publify_core
+cve: 2022-1812
+ghsa: rc42-jghf-vr8f
+url: https://github.com/publify/publify/commit/29a5837c29620e33857d7a5afce01384e3f8e41a
+title: Integer overflow in publify_core
+date: 2023-01-14
+description: |
+  Integer Overflow or Wraparound in GitHub repository publify/publify prior
+  to 9.2.10 due to an unlimited length user name field.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 9.2.10"
+related:
+  url:
+    - https://huntr.dev/bounties/17d86a50-265c-4ec8-9592-0bd909ddc8f3
diff --git a/gems/publify_core/CVE-2022-2815.yml b/gems/publify_core/CVE-2022-2815.yml
new file mode 100644
index 0000000000..f1bc3a1c94
--- /dev/null
+++ b/gems/publify_core/CVE-2022-2815.yml
@@ -0,0 +1,17 @@
+---
+gem: publify_core
+cve: 2022-2815
+ghsa: 79wq-g4v9-gfj4
+url: https://github.com/publify/publify/commit/af69097d349f4c00f244c51cd3c3e937fd3387cd
+title: Publify Core does not strip metadata from images
+date: 2023-01-14
+description: |
+  Insecure Storage of Sensitive Information in GitHub repository publify/publify
+  prior to 9.2.10.
+cvss_v3: 6.5
+patched_versions:
+  - ">= 9.2.10"
+related:
+  url:
+    - https://huntr.dev/bounties/22fdcc39-8c1a-4e4c-8eae-be3fd764f8b4
+    - https://github.com/publify/publify_core/commit/33f897c12b6efdcdfd8cf9df924deba0f878b71e
diff --git a/gems/publify_core/CVE-2023-0299.yml b/gems/publify_core/CVE-2023-0299.yml
new file mode 100644
index 0000000000..4ccb281f03
--- /dev/null
+++ b/gems/publify_core/CVE-2023-0299.yml
@@ -0,0 +1,17 @@
+---
+gem: publify_core
+cve: 2023-0299
+ghsa: q3rm-f527-ghxj
+url: https://github.com/publify/publify/commit/ca46da283572b4f8c0b5aa245008756c8a5fd1b1
+title: Publify Improper Input Validation vulnerability
+date: 2023-01-14
+description: |
+  Improper Input Validation in GitHub repository publify/publify prior
+  to 9.2.10.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 9.2.10"
+related:
+  url:
+    - https://huntr.dev/bounties/0049774b-1857-46dc-a834-f1fb15138c53
+    - https://github.com/publify/publify_core/commit/34f6e9c98e0e3b3f9896f9676b3d6442220e2b4e
diff --git a/gems/publify_core/CVE-2023-0569.yml b/gems/publify_core/CVE-2023-0569.yml
new file mode 100644
index 0000000000..a93a61059f
--- /dev/null
+++ b/gems/publify_core/CVE-2023-0569.yml
@@ -0,0 +1,16 @@
+---
+gem: publify_core
+cve: 2023-0569
+ghsa: g7gf-2rqw-5rwx
+url: https://github.com/publify/publify/commit/8905e4e639cf03b758da558568a86c9816253b2d
+title: Publify contains Weak Password Requirements
+date: 2023-01-29
+description: |
+  Weak Password Requirements in GitHub repository publify/publify prior
+  to 9.2.10.
+cvss_v3: 6.5
+patched_versions:
+  - ">= 9.2.10"
+related:
+  url:
+    - https://huntr.dev/bounties/81b1e1da-10dd-435e-94ae-4bdd41df6df9
diff --git a/gems/publify_core/CVE-2024-39311.yml b/gems/publify_core/CVE-2024-39311.yml
new file mode 100644
index 0000000000..a91a3e369a
--- /dev/null
+++ b/gems/publify_core/CVE-2024-39311.yml
@@ -0,0 +1,42 @@
+---
+gem: publify_core
+cve: 2024-39311
+ghsa: 8fm5-gg2f-f66q
+url: https://github.com/publify/publify/security/advisories/GHSA-8fm5-gg2f-f66q
+title: Publify Vulnerable To Cross-Site Scripting (XSS) Via
+  Redirects Requiring User Interaction
+date: 2025-03-28
+description: |
+  ### Summary
+
+  A publisher on a `publify` application is able to perform a cross-site
+  scripting attack on an administrator using the redirect functionality.
+
+  ### Details
+
+  A publisher on a `publify` application is able to perform a cross-site
+  scripting attack on an administrator using the redirect functionality.
+  The exploitation of this XSS vulnerability requires the administrator
+  to click a malicious link.
+
+  We can create a redirect to a `javascript:alert()` URL. Whilst the
+  redirect itself doesn't work, on the administrative panel, an a tag
+  is created with the payload as the URI. Upon clicking this link,
+  the XSS is triggered.
+
+  An attack could attempt to hide their payload by using HTML, or
+  other encodings, as to not make it obvious to an administrator
+  that this is a malicious link.
+
+  ### Impact
+
+  A publisher may attempt to use this vulnerability to escalate their
+  privileges and become an administrator."
+cvss_v4: 1.8
+patched_versions:
+  - ">= 10.0.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-39311
+    - https://github.com/publify/publify/security/advisories/GHSA-8fm5-gg2f-f66q
+    - https://github.com/advisories/GHSA-8fm5-gg2f-f66q
diff --git a/gems/pubnub/CVE-2023-26154.yml b/gems/pubnub/CVE-2023-26154.yml
new file mode 100644
index 0000000000..feac23f653
--- /dev/null
+++ b/gems/pubnub/CVE-2023-26154.yml
@@ -0,0 +1,53 @@
+---
+gem: pubnub
+cve: 2023-26154
+ghsa: 5844-q3fc-56rh
+url: https://github.com/advisories/GHSA-5844-q3fc-56rh
+title: pubnub Insufficient Entropy vulnerability
+date: 2023-12-06
+description: |
+  Versions of the package pubnub before 7.4.0; all versions of the
+  package com.pubnub:pubnub; versions of the package pubnub before
+  6.19.0; all versions of the package github.com/pubnub/go; versions
+  of the package github.com/pubnub/go/v7 before 7.2.0; versions of
+  the package pubnub before 7.3.0; versions of the package pubnub/pubnub
+  before 6.1.0; versions of the package pubnub before 5.3.0; versions
+  of the package pubnub before 0.4.0; versions of the package pubnub/c-core
+  before 4.5.0; versions of the package com.pubnub:pubnub-kotlin before
+  7.7.0; versions of the package pubnub/swift before 6.2.0; versions
+  of the package pubnub before 5.2.0; versions of the package pubnub
+  before 4.3.0 are vulnerable to Insufficient Entropy via the getKey
+  function, due to inefficient implementation of the AES-256-CBC
+  cryptographic algorithm. The provided encrypt function is less secure
+  when hex encoding and trimming are applied, leaving half of the bits
+  in the key always the same for every encoded message or file.
+
+  **Note:**
+
+  In order to exploit this vulnerability, the attacker needs to invest
+  resources in preparing the attack and brute-force the encryption.
+cvss_v3: 5.9
+patched_versions:
+  - ">= 5.3.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-26154
+    - https://github.com/pubnub/ruby/releases/tag/v5.3.0
+    - https://github.com/pubnub/javascript/commit/fb6cd0417cbb4ba87ea2d5d86a9c94774447e119
+    - https://gist.github.com/vargad/20237094fce7a0a28f0723d7ce395bb0
+    - https://github.com/pubnub/javascript/blob/master/src/crypto/modules/web.js#L70
+    - https://security.snyk.io/vuln/SNYK-COCOAPODS-PUBNUB-6098384
+    - https://security.snyk.io/vuln/SNYK-DOTNET-PUBNUB-6098372
+    - https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGO-6098373
+    - https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGOV7-6098374
+    - https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098371
+    - https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098380
+    - https://security.snyk.io/vuln/SNYK-JS-PUBNUB-5840690
+    - https://security.snyk.io/vuln/SNYK-PHP-PUBNUBPUBNUB-6098376
+    - https://security.snyk.io/vuln/SNYK-PUB-PUBNUB-6098385
+    - https://security.snyk.io/vuln/SNYK-PYTHON-PUBNUB-6098375
+    - https://security.snyk.io/vuln/SNYK-RUBY-PUBNUB-6098377
+    - https://security.snyk.io/vuln/SNYK-RUST-PUBNUB-6098378
+    - https://security.snyk.io/vuln/SNYK-SWIFT-PUBNUBSWIFT-6098381
+    - https://security.snyk.io/vuln/SNYK-UNMANAGED-PUBNUBCCORE-6098379
+    - https://github.com/advisories/GHSA-5844-q3fc-56rh
diff --git a/gems/puma/CVE-2019-16770.yml b/gems/puma/CVE-2019-16770.yml
index 15697ec5d6..760e418c75 100644
--- a/gems/puma/CVE-2019-16770.yml
+++ b/gems/puma/CVE-2019-16770.yml
@@ -15,5 +15,5 @@ description: |
 cvss_v3: 8.8
 cvss_v2: 6.8
 patched_versions:
-- ~> 3.12.2
-- '>= 4.3.1'
+  - "~> 3.12.2"
+  - ">= 4.3.1"
diff --git a/gems/puma/CVE-2020-11076.yml b/gems/puma/CVE-2020-11076.yml
index aa0ea21b92..d104eedba7 100644
--- a/gems/puma/CVE-2020-11076.yml
+++ b/gems/puma/CVE-2020-11076.yml
@@ -5,7 +5,7 @@ ghsa: x7jg-6pwg-fx5h
 url: https://github.com/puma/puma/security/advisories/GHSA-x7jg-6pwg-fx5h
 date: 2020-05-22
 title: HTTP Smuggling via Transfer-Encoding Header in Puma
-description: |-
+description: |
   ### Impact
 
   By using an invalid transfer-encoding header, an attacker could
@@ -16,5 +16,5 @@ description: |-
   The problem has been fixed in Puma 3.12.5 and Puma 4.3.4.
 cvss_v3: 7.5
 patched_versions:
-- ~> 3.12.5
-- '>= 4.3.4'
+  - "~> 3.12.5"
+  - ">= 4.3.4"
diff --git a/gems/puma/CVE-2020-11077.yml b/gems/puma/CVE-2020-11077.yml
index cb4e129e00..cc79bc698f 100644
--- a/gems/puma/CVE-2020-11077.yml
+++ b/gems/puma/CVE-2020-11077.yml
@@ -5,7 +5,7 @@ ghsa: w64w-qqph-5gxm
 url: https://github.com/puma/puma/security/advisories/GHSA-w64w-qqph-5gxm
 date: 2020-05-22
 title: HTTP Smuggling via Transfer-Encoding Header in Puma
-description: |-
+description: |
   ### Impact
 
   This is a similar but different vulnerability to the one patched in 3.12.5 and 4.3.4.
@@ -25,5 +25,5 @@ description: |-
   The problem has been fixed in Puma 3.12.6 and Puma 4.3.5.
 cvss_v3: 6.8
 patched_versions:
-- ~> 3.12.6
-- '>= 4.3.5'
+  - "~> 3.12.6"
+  - ">= 4.3.5"
diff --git a/gems/puma/CVE-2020-5247.yml b/gems/puma/CVE-2020-5247.yml
index bb017ff0d9..669a298e3c 100644
--- a/gems/puma/CVE-2020-5247.yml
+++ b/gems/puma/CVE-2020-5247.yml
@@ -5,7 +5,7 @@ ghsa: 84j7-475p-hp8v
 url: https://github.com/puma/puma/security/advisories/GHSA-84j7-475p-hp8v
 date: 2020-02-27
 title: HTTP Response Splitting vulnerability in puma
-description: |-
+description: |
   If an application using Puma allows untrusted input in a response header,
   an attacker can use newline characters (i.e. CR, LF) to end the header and
   inject malicious content, such as additional headers or an entirely new
@@ -15,9 +15,9 @@ description: |-
   other attacks, such as cross-site scripting (XSS).
 cvss_v3: 6.5
 patched_versions:
-- ~> 3.12.4
-- '>= 4.3.3'
+  - "~> 3.12.4"
+  - ">= 4.3.3"
 
 related:
   cve:
-  - 2019-16254
+    - 2019-16254
diff --git a/gems/puma/CVE-2020-5249.yml b/gems/puma/CVE-2020-5249.yml
index 44c8051463..7411cda2ab 100644
--- a/gems/puma/CVE-2020-5249.yml
+++ b/gems/puma/CVE-2020-5249.yml
@@ -5,7 +5,7 @@ ghsa: 33vf-4xgg-9r58
 url: https://github.com/puma/puma/security/advisories/GHSA-33vf-4xgg-9r58
 date: 2020-03-03
 title: HTTP Response Splitting (Early Hints) in Puma
-description: |-
+description: |
   ### Impact
   If an application using Puma allows untrusted input in an early-hints header,
   an attacker can use a carriage return character to end the header and inject
@@ -26,9 +26,9 @@ description: |-
   Users can not allow untrusted/user input in the Early Hints response header.
 cvss_v3: 6.5
 patched_versions:
-- ~> 3.12.4
-- '>= 4.3.3'
+  - "~> 3.12.4"
+  - ">= 4.3.3"
 
 related:
   cve:
-  - 2020-5247
+    - 2020-5247
diff --git a/gems/puma/CVE-2021-29509.yml b/gems/puma/CVE-2021-29509.yml
index b726326750..f7243f6a08 100644
--- a/gems/puma/CVE-2021-29509.yml
+++ b/gems/puma/CVE-2021-29509.yml
@@ -5,7 +5,7 @@ ghsa: q28m-8xjw-8vr5
 url: https://github.com/puma/puma/security/advisories/GHSA-q28m-8xjw-8vr5
 date: 2021-05-11
 title: Keepalive Connections Causing Denial Of Service in puma
-description: |-
+description: |
   ### Impact
 
   The fix for CVE-2019-16770 was incomplete. The original fix only protected
@@ -37,9 +37,9 @@ description: |-
   [3]: https://github.com/puma/puma/security/policy#supported-versions
 cvss_v3: 7.5
 patched_versions:
-- ~> 4.3.8
-- '>= 5.3.1'
+  - "~> 4.3.8"
+  - ">= 5.3.1"
 
 related:
   cve:
-  - 2019-16770
+    - 2019-16770
diff --git a/gems/puma/CVE-2021-41136.yml b/gems/puma/CVE-2021-41136.yml
index 7ba7efe44c..423956f1c9 100644
--- a/gems/puma/CVE-2021-41136.yml
+++ b/gems/puma/CVE-2021-41136.yml
@@ -41,5 +41,5 @@ description: |
   * [HTTP Request Smuggling](https://portswigger.net/web-security/request-smuggling)
 cvss_v3: 3.7
 patched_versions:
-- "~> 4.3.9"
-- ">= 5.5.1"
+  - "~> 4.3.9"
+  - ">= 5.5.1"
diff --git a/gems/puma/CVE-2022-23634.yml b/gems/puma/CVE-2022-23634.yml
index a147e9c035..b039781ff5 100644
--- a/gems/puma/CVE-2022-23634.yml
+++ b/gems/puma/CVE-2022-23634.yml
@@ -44,12 +44,12 @@ description: |
   includes a middleware that can be used instead.
 cvss_v3: 8.0
 patched_versions:
-- "~> 4.3.11"
-- ">= 5.6.2"
+  - "~> 4.3.11"
+  - ">= 5.6.2"
 related:
   cve:
-  - 2022-23633
+    - 2022-23633
   ghsa:
-  - wh98-p28r-vrc9
+    - wh98-p28r-vrc9
   url:
-  - https://github.com/puma/puma/commit/b70f451fe8abc0cff192c065d549778452e155bb
+    - https://github.com/puma/puma/commit/b70f451fe8abc0cff192c065d549778452e155bb
diff --git a/gems/puma/CVE-2022-24790.yml b/gems/puma/CVE-2022-24790.yml
new file mode 100644
index 0000000000..c557bf0fe8
--- /dev/null
+++ b/gems/puma/CVE-2022-24790.yml
@@ -0,0 +1,55 @@
+---
+gem: puma
+cve: 2022-24790
+ghsa: h99w-9q5r-gjq9
+url: https://github.com/puma/puma/security/advisories/GHSA-h99w-9q5r-gjq9
+title: HTTP Request Smuggling in puma
+date: 2022-03-30
+description: |
+  ### Impact
+
+  When using Puma behind a proxy that does not properly validate that the
+  incoming HTTP request matches the RFC7230 standard, Puma and the frontend
+  proxy may disagree on where a request starts and ends. This would allow
+  requests to be smuggled via the front-end proxy to Puma.
+
+  The following vulnerabilities are addressed by this advisory:
+  - Lenient parsing of `Transfer-Encoding` headers, when unsupported encodings
+    should be rejected and the final encoding must be `chunked`.
+  - Lenient parsing of malformed `Content-Length` headers and chunk sizes, when
+    only digits and hex digits should be allowed.
+  - Lenient parsing of duplicate `Content-Length` headers, when they should be
+    rejected.
+  - Lenient parsing of the ending of chunked segments, when they should end
+    with `\r\n`.
+
+  ### Patches
+
+  The vulnerability has been fixed in 5.6.4 and 4.3.12.
+
+  ### Workarounds
+
+  When deploying a proxy in front of Puma, turning on any and all functionality
+  to make sure that the request matches the RFC7230 standard.
+
+  These proxy servers are known to have "good" behavior re: this standard and
+  upgrading Puma may not be necessary. Users are encouraged to validate for
+  themselves.
+
+  - Nginx (latest)
+  - Apache (latest)
+  - Haproxy 2.5+
+  - Caddy (latest)
+  - Traefik (latest)
+
+  ### References
+
+  [HTTP Request Smuggling](https://portswigger.net/web-security/request-smuggling)
+
+cvss_v3: 9.1
+patched_versions:
+  - "~> 4.3.12"
+  - ">= 5.6.4"
+related:
+  url:
+    - https://github.com/puma/puma/commit/5bb7d202e24dec00a898dca4aa11db391d7787a5
diff --git a/gems/puma/CVE-2023-40175.yml b/gems/puma/CVE-2023-40175.yml
new file mode 100644
index 0000000000..e2c058c345
--- /dev/null
+++ b/gems/puma/CVE-2023-40175.yml
@@ -0,0 +1,39 @@
+---
+gem: puma
+cve: 2023-40175
+ghsa: 68xg-gqqm-vgj8
+url: https://github.com/puma/puma/security/advisories/GHSA-68xg-gqqm-vgj8
+title: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in puma
+date: 2023-08-18
+description: |
+  ### Impact
+
+  Prior to version 6.3.1, puma exhibited incorrect behavior when parsing chunked transfer encoding bodies and zero-length Content-Length headers in a way that allowed HTTP request smuggling.
+
+  The following vulnerabilities are addressed by this advisory:
+  - Incorrect parsing of trailing fields in chunked transfer encoding bodies
+  - Parsing of blank/zero-length Content-Length headers`\r\n`
+
+  ### Patches
+
+  The vulnerability has been fixed in 6.3.1 and 5.6.7.
+
+  ### Workarounds
+
+  No known workarounds.
+
+  ### References
+
+  [HTTP Request Smuggling](https://portswigger.net/web-security/request-smuggling)
+
+cvss_v3: 6.5
+patched_versions:
+  - '~> 5.6.7'
+  - '>= 6.3.1'
+related:
+  url:
+    - https://github.com/puma/puma/releases/tag/v5.6.7
+    - https://github.com/puma/puma/releases/tag/v6.3.1
+    - https://github.com/puma/puma/commit/690155e7d644b80eeef0a6094f9826ee41f1080a
+    - https://github.com/puma/puma/commit/ed0f2f94b56982c687452504b95d5f1fbbe3eed1
+    - https://github.com/advisories/GHSA-68xg-gqqm-vgj8
diff --git a/gems/puma/CVE-2024-21647.yml b/gems/puma/CVE-2024-21647.yml
new file mode 100644
index 0000000000..a1c103f2b9
--- /dev/null
+++ b/gems/puma/CVE-2024-21647.yml
@@ -0,0 +1,43 @@
+---
+gem: puma
+cve: 2024-21647
+ghsa: c2f4-cvqm-65w2
+url: https://github.com/puma/puma/security/advisories/GHSA-c2f4-cvqm-65w2
+title: Puma HTTP Request/Response Smuggling vulnerability
+date: 2024-01-08
+description: |
+
+  ### Impact
+  Prior to versions 6.4.2 and 5.6.8, puma exhibited incorrect
+  behavior when parsing chunked transfer encoding bodies in a
+  way that allowed HTTP request smuggling.
+
+  Fixed versions limit the size of chunk extensions. Without this
+  limit, an attacker could cause unbounded resource (CPU, network
+  bandwidth) consumption.
+
+  ### Patches
+
+  The vulnerability has been fixed in 6.4.2 and 5.6.8.
+
+  ### Workarounds
+
+  No known workarounds.
+
+  ### References
+
+  * [HTTP Request Smuggling](https://portswigger.net/web-security/request-smuggling)
+  * Open an issue in [Puma](https://github.com/puma/puma)
+  * See our [security policy](https://github.com/puma/puma/security/policy)
+cvss_v3: 5.9
+patched_versions:
+  - "~> 5.6.8"
+  - ">= 6.4.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-21647
+    - https://github.com/puma/puma/security/advisories/GHSA-c2f4-cvqm-65w2
+    - https://github.com/puma/puma/commit/5fc43d73b6ff193325e657a24ed76dec79133e93
+    - https://github.com/puma/puma/commit/60d5ee3734adc8cee85c3f0561af392448fe19b7
+    - https://github.com/puma/puma/commit/bbb880ffb6debbfdea535b4b3eb2204d49ae151d
+    - https://github.com/advisories/GHSA-c2f4-cvqm-65w2
diff --git a/gems/puma/CVE-2024-45614.yml b/gems/puma/CVE-2024-45614.yml
new file mode 100644
index 0000000000..5f8d94ca63
--- /dev/null
+++ b/gems/puma/CVE-2024-45614.yml
@@ -0,0 +1,43 @@
+---
+gem: puma
+cve: 2024-45614
+ghsa: 9hf4-67fc-4vf4
+url: https://github.com/puma/puma/security/advisories/GHSA-9hf4-67fc-4vf4
+title: Puma's header normalization allows for client to clobber proxy set headers
+date: 2024-09-20
+description: |
+  ### Impact
+
+  Clients could clobber values set by intermediate proxies (such as
+  X-Forwarded-For) by providing a underscore version of the same
+  header (X-Forwarded_For).
+
+  Any users trusting headers set by their proxy may be affected.
+  Attackers may be able to downgrade connections to HTTP (non-SSL)
+  or redirect responses, which could cause confidentiality leaks
+  if combined with a separate MITM attack.
+
+  ### Patches
+  v6.4.3/v5.6.9 now discards any headers using underscores if the
+  non-underscore version also exists.  Effectively, allowing the
+  proxy defined headers to always win.
+
+  ### Workarounds
+  Nginx has a [underscores_in_headers](https://nginx.org/en/docs/http/ngx_http_core_module.html#underscores_in_headers)
+  configuration variable to discard these headers at the proxy level.
+
+  Any users that are implicitly trusting the proxy defined headers
+  for security or availability should immediately cease doing so
+  until upgraded to the fixed versions.
+cvss_v3: 5.4
+patched_versions:
+  - "~> 5.6.9"
+  - ">= 6.4.3"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-45614
+    - https://github.com/puma/puma/security/advisories/GHSA-9hf4-67fc-4vf4
+    - https://github.com/puma/puma/commit/cac3fd18cf29ed43719ff5d52d9cfec215f0a043
+    - https://github.com/puma/puma/commit/f196b23be24712fb8fb16051cc124798cc84f70e
+    - https://nginx.org/en/docs/http/ngx_http_core_module.html#underscores_in_headers
+    - https://github.com/advisories/GHSA-9hf4-67fc-4vf4
diff --git a/gems/puppet/CVE-2010-0156.yml b/gems/puppet/CVE-2010-0156.yml
new file mode 100644
index 0000000000..1be4964650
--- /dev/null
+++ b/gems/puppet/CVE-2010-0156.yml
@@ -0,0 +1,34 @@
+---
+gem: puppet
+cve: 2010-0156
+ghsa: vrh7-99jh-3fmm
+url: https://puppet.com/security/cve/cve-2010-0156
+title: Puppet arbitrary files overwrite via a symlink attack
+date: 2022-05-02
+description: |
+  Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local
+  users to overwrite arbitrary files via a symlink attack on the
+  (1) /tmp/daemonout,
+  (2) /tmp/puppetdoc.txt,
+  (3) /tmp/puppetdoc.tex, or
+  (4) /tmp/puppetdoc.aux temporary file.
+cvss_v2: 3.3
+unaffected_versions:
+  - "< 0.24.0"
+patched_versions:
+  - "~> 0.24.9"
+  - ">= 0.25.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-0156
+    - https://puppet.com/security/cve/cve-2010-0156
+    - https://github.com/puppetlabs/puppet/commit/0aae57f91dc69b22fb674f8de3a13c22edd07128
+    - https://github.com/puppetlabs/puppet/commit/6111ba80f2c6f6d1541af971f565119e6e03d77d
+    - https://bugzilla.redhat.com/show_bug.cgi?id=502881
+    - http://groups.google.com/group/puppet-announce/browse_thread/thread/4401823f6cbf6087
+    - http://groups.google.com/group/puppet-announce/browse_thread/thread/73cd1b2896d986c2
+    - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036083.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036166.html
+    - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
+    - https://web.archive.org/web/20100316113904/http://secunia.com/advisories/38766
+    - https://github.com/advisories/GHSA-vrh7-99jh-3fmm
diff --git a/gems/puppet/CVE-2011-0528.yml b/gems/puppet/CVE-2011-0528.yml
new file mode 100644
index 0000000000..5472c9113b
--- /dev/null
+++ b/gems/puppet/CVE-2011-0528.yml
@@ -0,0 +1,25 @@
+---
+gem: puppet
+cve: 2011-0528
+ghsa: 9pvx-fwwh-w289
+url: https://github.com/advisories/GHSA-9pvx-fwwh-w289
+title: Puppet does not properly restrict access to node resources
+date: 2022-05-14
+description: |
+  Puppet 2.6.0 through 2.6.3 does not properly restrict access to node
+  resources, which allows remote authenticated Puppet nodes to read
+  or modify the resources of other nodes via unspecified vectors.
+cvss_v2: 5.5
+unaffected_versions:
+  - "< 2.6.0"
+patched_versions:
+  - ">= 2.6.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-0528
+    - https://github.com/puppetlabs/puppet/commit/eee1a9cdaa5cab6222c8e6ab087d319f976fa4e3
+    - https://www.mail-archive.com/puppet-users@googlegroups.com/msg16429.html
+    - http://www.openwall.com/lists/oss-security/2011/01/27/6
+    - http://www.openwall.com/lists/oss-security/2011/01/31/5
+    - http://www.ubuntu.com/usn/USN-1365-1
+    - https://github.com/advisories/GHSA-9pvx-fwwh-w289
diff --git a/gems/puppet/CVE-2011-3869.yml b/gems/puppet/CVE-2011-3869.yml
new file mode 100644
index 0000000000..b73c258255
--- /dev/null
+++ b/gems/puppet/CVE-2011-3869.yml
@@ -0,0 +1,28 @@
+---
+gem: puppet
+cve: 2011-3869
+ghsa: 8c56-v25w-f89c
+url: https://puppet.com/security/cve/cve-2011-3869
+title: Puppet arbitrary file overwrite
+date: 2022-05-14
+description: |
+  Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows
+  local users to overwrite arbitrary files via a symlink attack
+  on the .k5login file.
+patched_versions:
+  - "~> 2.6.11"
+  - ">= 2.7.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-3869
+    - https://puppet.com/security/cve/cve-2011-3869
+    - http://groups.google.com/group/puppet-announce/browse_thread/thread/91e3b46d2328a1cb
+    - https://github.com/puppetlabs/puppet/commit/2775c21ae48e189950dbea5e7b4d1d9fa2aca41c
+    - https://github.com/puppetlabs/puppet/commit/7d4c169df84fc7bbeb2941bf995a63470f71bdbd
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068053.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068061.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068093.html
+    - http://www.debian.org/security/2011/dsa-2314
+    - http://www.ubuntu.com/usn/USN-1223-1
+    - http://www.ubuntu.com/usn/USN-1223-2
+    - https://github.com/advisories/GHSA-8c56-v25w-f89c
diff --git a/gems/puppet/CVE-2011-3870.yml b/gems/puppet/CVE-2011-3870.yml
new file mode 100644
index 0000000000..494f57828d
--- /dev/null
+++ b/gems/puppet/CVE-2011-3870.yml
@@ -0,0 +1,29 @@
+---
+gem: puppet
+cve: 2011-3870
+ghsa: qh3g-27jf-3j54
+url: https://puppet.com/security/cve/cve-2011-3870
+title: Puppet allows local users to modify the permissions of arbitrary files
+date: 2011-10-27
+description: |
+  Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x
+  allows local users to modify the permissions of arbitrary
+  files via a symlink attack on the SSH authorized_keys file.
+cvss_v2: 6.3
+patched_versions:
+  - "~> 2.6.11"
+  - ">= 2.7.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-3870
+    - https://puppet.com/security/cve/cve-2011-3870
+    - https://github.com/puppetlabs/puppet/commit/88512e880bd2a03694b5fef42540dc7b3da05d30
+    - https://github.com/puppetlabs/puppet/commit/b29b1785d543a3cea961fffa9b3c15f14ab7cce0
+    - http://groups.google.com/group/puppet-announce/browse_thread/thread/91e3b46d2328a1cb
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068053.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068061.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068093.html
+    - http://www.debian.org/security/2011/dsa-2314
+    - http://www.ubuntu.com/usn/USN-1223-1
+    - http://www.ubuntu.com/usn/USN-1223-2
+    - https://github.com/advisories/GHSA-qh3g-27jf-3j54
diff --git a/gems/puppet/CVE-2011-3871.yml b/gems/puppet/CVE-2011-3871.yml
new file mode 100644
index 0000000000..5bee7c8fab
--- /dev/null
+++ b/gems/puppet/CVE-2011-3871.yml
@@ -0,0 +1,30 @@
+---
+gem: puppet
+cve: 2011-3871
+ghsa: mpmx-gm5v-q789
+url: https://puppet.com/security/cve/cve-2011-3871
+title: Puppet uses predictable filenames, allowing arbitrary file overwrite
+date: 2011-10-27
+description: |
+  Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x,
+  when running in `--edit` mode, uses a predictable file name, which
+  allows local users to run arbitrary Puppet code or trick a user
+  into editing arbitrary files.
+cvss_v2: 6.2
+patched_versions:
+  - "~> 2.6.11"
+  - ">= 2.7.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-3871
+    - https://puppet.com/security/cve/cve-2011-3871
+    - https://github.com/puppetlabs/puppet/commit/343c7bd381b63e042d437111718918f951d9b30d
+    - https://github.com/puppetlabs/puppet/commit/d76c30935460ded953792dfe49f72b8c5158e899
+    - http://groups.google.com/group/puppet-announce/browse_thread/thread/91e3b46d2328a1cb
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068053.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068061.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068093.html
+    - http://www.debian.org/security/2011/dsa-2314
+    - http://www.ubuntu.com/usn/USN-1223-1
+    - http://www.ubuntu.com/usn/USN-1223-2
+    - https://github.com/advisories/GHSA-mpmx-gm5v-q789
diff --git a/gems/puppet/CVE-2012-1053.yml b/gems/puppet/CVE-2012-1053.yml
new file mode 100644
index 0000000000..22180e52b0
--- /dev/null
+++ b/gems/puppet/CVE-2012-1053.yml
@@ -0,0 +1,37 @@
+---
+gem: puppet
+cve: 2012-1053
+ghsa: 77hg-g8cc-5r37
+url: https://web.archive.org/web/20120504011717/http://puppetlabs.com/security/cve/cve-2012-1053
+title: Puppet Privilege Escallation
+date: 2012-05-29
+description: |
+  The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb)
+  in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE)
+  Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges,
+  which allows local users to gain privileges via vectors related to (1) the change_user
+  not dropping supplementary groups in certain conditions, (2) changes to the eguid
+  without associated changes to the egid, or (3) the addition of the real gid to supplementary
+  groups.
+cvss_v2: 6.5
+unaffected_versions:
+  - "< 2.6"
+patched_versions:
+  - "~> 2.6.14"
+  - ">= 2.7.11"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-1053
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/73445
+    - https://hermes.opensuse.org/messages/15087408
+    - https://github.com/puppetlabs/puppet/commit/76d0749f0a9a496b70e7dc7e6d6d6ff692224e36
+    - https://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html
+    - https://ubuntu.com/usn/usn-1372-1
+    - https://web.archive.org/web/20120504011717/http://puppetlabs.com/security/cve/cve-2012-1053
+    - https://web.archive.org/web/20120513215447/http://projects.puppetlabs.com/issues/12458
+    - https://web.archive.org/web/20120513215653/http://projects.puppetlabs.com/issues/12457
+    - https://web.archive.org/web/20120513223437/http://projects.puppetlabs.com/issues/12459
+    - https://web.archive.org/web/20120527071855/http://www.securityfocus.com/bid/52158
+    - https://web.archive.org/web/20120816020421/http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.14
+    - https://www.debian.org/security/2012/dsa-2419
+    - https://github.com/advisories/GHSA-77hg-g8cc-5r37
diff --git a/gems/puppet/CVE-2012-1906.yml b/gems/puppet/CVE-2012-1906.yml
new file mode 100644
index 0000000000..453f788bc3
--- /dev/null
+++ b/gems/puppet/CVE-2012-1906.yml
@@ -0,0 +1,28 @@
+---
+gem: puppet
+cve: 2012-1906
+ghsa: c4mc-49hq-q275
+url: https://exchange.xforce.ibmcloud.com/vulnerabilities/74793
+title: Puppet uses predictable filenames, allowing arbitrary file overwrite
+date: 2012-05-29
+description: |
+  Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise
+  (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file
+  names when installing Mac OS X packages from a remote source, which allows local
+  users to overwrite arbitrary files or install arbitrary packages via a symlink attack
+  on a temporary file in /tmp.
+cvss_v2: 3.3
+unaffected_versions:
+  - "< 2.6"
+patched_versions:
+  - "~> 2.6.15"
+  - ">= 2.7.13"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-1906
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/74793
+    - https://github.com/puppetlabs/puppet/commit/f7829ec1f1b2c3def8e0eda09c22c3c1fed3a27f
+    - https://ubuntu.com/usn/usn-1419-1
+    - https://web.archive.org/web/20120415105345/http://www.securityfocus.com/bid/52975
+    - https://www.debian.org/security/2012/dsa-2451
+    - https://github.com/advisories/GHSA-c4mc-49hq-q275
diff --git a/gems/puppet/CVE-2012-1987.yml b/gems/puppet/CVE-2012-1987.yml
new file mode 100644
index 0000000000..fb34d58849
--- /dev/null
+++ b/gems/puppet/CVE-2012-1987.yml
@@ -0,0 +1,41 @@
+---
+gem: puppet
+cve: 2012-1987
+ghsa: v58w-6xc2-w799
+url: https://github.com/advisories/GHSA-v58w-6xc2-w799
+title: Puppet Denial of Service and Arbitrary File Write
+date: 2022-05-14
+description: |
+  A vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13,
+  and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1
+  allows remote authenticated users with agent SSL keys to **(1)** cause a denial
+  of service (memory consumption) via a REST request to a stream that triggers a thread
+  block, as demonstrated using CVE-2012-1986 and `/dev/random`; or **(2)** cause a
+  denial of service (filesystem consumption) via crafted REST requests that use "a
+  marshaled form of a `Puppet::FileBucket::File object`" to write to arbitrary file
+  locations.
+cvss_v2: 3.5
+unaffected_versions:
+  - "< 2.6.0"
+patched_versions:
+  - "~> 2.6.15"
+  - ">= 2.7.13"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-1987
+    - https://web.archive.org/web/20160808163232/https://puppet.com/security/cve/cve-2012-1987
+    - https://web.archive.org/web/20120513213318/http://projects.puppetlabs.com/issues/13553
+    - https://web.archive.org/web/20120513224202/http://projects.puppetlabs.com/issues/13552
+    - https://web.archive.org/web/20121005145241/http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15
+    - https://web.archive.org/web/20120415105345/http://www.securityfocus.com/bid/52975
+    - https://github.com/puppetlabs/puppet/commit/0d6d29933e613fe177e9235415919a5428db67bc
+    - https://github.com/puppetlabs/puppet/commit/568ded50ec6cc498ad32ff7f086d9f73b5d24c14
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/74794
+    - https://hermes.opensuse.org/messages/14523305
+    - https://hermes.opensuse.org/messages/15087408
+    - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html
+    - http://ubuntu.com/usn/usn-1419-1
+    - http://www.debian.org/security/2012/dsa-2451
+    - https://github.com/advisories/GHSA-v58w-6xc2-w799
diff --git a/gems/puppet/CVE-2012-1988.yml b/gems/puppet/CVE-2012-1988.yml
new file mode 100644
index 0000000000..43f9916aad
--- /dev/null
+++ b/gems/puppet/CVE-2012-1988.yml
@@ -0,0 +1,37 @@
+---
+gem: puppet
+cve: 2012-1988
+ghsa: 6xxq-j39w-g3f6
+url: https://github.com/advisories/GHSA-6xxq-j39w-g3f6
+title: Puppet Arbitrary Command Execution
+date: 2022-05-14
+description: |
+  Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise
+  (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated
+  users with agent SSL keys and file-creation permissions on the puppet master to
+  execute arbitrary commands by creating a file whose full pathname contains shell
+  metacharacters, then performing a filebucket request.
+cvss_v2: 6.0
+unaffected_versions:
+  - "< 2.6.0"
+patched_versions:
+  - "~> 2.6.15"
+  - ">= 2.7.13"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-1988
+    - https://web.archive.org/web/20121013181707/http://puppetlabs.com/security/cve/cve-2012-1988
+    - https://web.archive.org/web/20120513213112/http://projects.puppetlabs.com/issues/13518
+    - https://web.archive.org/web/20120816020421/http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15
+    - https://web.archive.org/web/20120415105345/http://www.securityfocus.com/bid/52975
+    - https://github.com/puppetlabs/puppet/commit/0d6d29933e613fe177e9235415919a5428db67bc
+    - https://github.com/puppetlabs/puppet/commit/568ded50ec6cc498ad32ff7f086d9f73b5d24c14
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/74796
+    - https://hermes.opensuse.org/messages/14523305
+    - https://hermes.opensuse.org/messages/15087408
+    - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html
+    - http://ubuntu.com/usn/usn-1419-1
+    - http://www.debian.org/security/2012/dsa-2451
+    - https://github.com/advisories/GHSA-6xxq-j39w-g3f6
diff --git a/gems/puppet/CVE-2012-1989.yml b/gems/puppet/CVE-2012-1989.yml
new file mode 100644
index 0000000000..e031e75b59
--- /dev/null
+++ b/gems/puppet/CVE-2012-1989.yml
@@ -0,0 +1,31 @@
+---
+gem: puppet
+cve: 2012-1989
+ghsa: c5qq-g673-5p49
+url: https://www.puppet.com/security/cve/cve-2012-1989-arbitrary-file-write-access
+title: Arbitrary File Write Access in Puppet
+date: 2017-10-24
+description: |
+  telnet.rb in Puppet 2.7.x before 2.7.13 and Puppet Enterprise
+  (PE) 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows local users
+  to overwrite arbitrary files via a symlink attack on the
+  NET::Telnet connection log (/tmp/out.log).
+cvss_v2: 3.6
+unaffected_versions:
+  - "< 2.7.1"
+patched_versions:
+  - "~> 2.5.1"
+  - ">= 2.7.13"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-1989
+    - https://www.puppet.com/security/cve/cve-2012-1989-arbitrary-file-write-access
+    - https://github.com/advisories/GHSA-c5qq-g673-5p49
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/74797
+    - https://security.gentoo.org/glsa/201208-02
+    - http://ubuntu.com/usn/usn-1419-1
+    - http://lists.opensuse.org/opensuse-updates/2012-05/msg00012.html
+    - https://web.archive.org/web/20210121211512/http://www.securityfocus.com/bid/52975
+    - https://web.archive.org/web/20111225083933/http://secunia.com/advisories/49136
+    - https://web.archive.org/web/20111225083933/http://secunia.com/advisories/48748
+    - https://web.archive.org/web/20121025194938/http://secunia.com/advisories/48743
diff --git a/gems/puppet/CVE-2012-3408.yml b/gems/puppet/CVE-2012-3408.yml
new file mode 100644
index 0000000000..39b9629d16
--- /dev/null
+++ b/gems/puppet/CVE-2012-3408.yml
@@ -0,0 +1,23 @@
+---
+gem: puppet
+cve: 2012-3408
+ghsa: vxf6-w9mp-95hm
+url: https://www.puppet.com/security/cve/cve-2012-3408-agent-impersonation
+title: Agent Imprersonation in Puppet
+date: 2017-10-24
+description: |
+  lib/puppet/network/authstore.rb in Puppet before 2.7.18, and
+  Puppet Enterprise before 2.5.2, supports use of IP addresses in
+  certnames without warning of potential risks, which might allow
+  remote attackers to spoof an agent by acquiring a previously
+  used IP address.
+cvss_v2: 2.6
+patched_versions:
+  - ">= 2.7.18"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-3408
+    - https://www.puppet.com/security/cve/cve-2012-3408-agent-impersonation
+    - https://github.com/puppetlabs/puppet/commit/ab9150baa1b738467a33b01df1d90e076253fbbd
+    - https://github.com/advisories/GHSA-vxf6-w9mp-95hm
+    - https://bugzilla.redhat.com/show_bug.cgi?id=839166
diff --git a/gems/puppet/CVE-2012-3865.yml b/gems/puppet/CVE-2012-3865.yml
new file mode 100644
index 0000000000..b3833874b8
--- /dev/null
+++ b/gems/puppet/CVE-2012-3865.yml
@@ -0,0 +1,28 @@
+---
+gem: puppet
+cve: 2012-3865
+ghsa: g89m-3wjw-h857
+url: https://www.puppet.com/security/cve/overview-cve-2012-3865-arbitrary-file-delete/dos-puppet-master
+title: Arbitrary file delete/D.O.S on Puppet Master
+date: 2017-10-24
+description: |
+  Directory traversal vulnerability in lib/puppet/reports/store.rb
+  in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet
+  Enterprise before 2.5.2, when Delete is enabled in auth.conf,
+  allows remote authenticated users to delete arbitrary files on
+  the puppet master server via a .. (dot dot) in a node name.
+cvss_v2: 3.5
+patched_versions:
+  - "~> 2.6.17"
+  - ">= 2.7.18"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-3865
+    - https://www.puppet.com/security/cve/overview-cve-2012-3865-arbitrary-file-delete/dos-puppet-master
+    - https://github.com/puppetlabs/puppet/commit/554eefc55f57ed2b76e5ee04d8f194d36f6ee67f
+    - https://github.com/puppetlabs/puppet/commit/d80478208d79a3e6d6cb1fbc525e24817fe8c4c6
+    - https://github.com/advisories/GHSA-g89m-3wjw-h857
+    - https://bugzilla.redhat.com/show_bug.cgi?id=839131
+    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html
+    - http://www.debian.org/security/2012/dsa-2511
+    - http://www.ubuntu.com/usn/USN-1506-1
diff --git a/gems/puppet/CVE-2012-3866.yml b/gems/puppet/CVE-2012-3866.yml
new file mode 100644
index 0000000000..c69134f87a
--- /dev/null
+++ b/gems/puppet/CVE-2012-3866.yml
@@ -0,0 +1,26 @@
+---
+gem: puppet
+cve: 2012-3866
+ghsa: 8jxj-9r5f-w3m2
+url: https://www.puppet.com/security/cve/cve-2012-3866-lastrunreportyaml-world-readable
+title: last_run_report.yaml is world readable
+date: 2017-10-24
+description: |
+  lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet
+  Enterprise before 2.5.2, uses 0644 permissions for last_run_report.yaml,
+  which allows local users to obtain sensitive configuration information
+  by leveraging access to the puppet master server to read this file.
+unaffected_versions:
+  - "< 2.7.0"
+patched_versions:
+  - ">= 2.7.18"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-3866
+    - https://www.puppet.com/security/cve/cve-2012-3866-lastrunreportyaml-world-readable
+    - https://github.com/puppetlabs/puppet/commit/fd44bf5e6d0d360f6a493d663b653c121fa83c3f
+    - https://github.com/advisories/GHSA-8jxj-9r5f-w3m2
+    - https://bugzilla.redhat.com/show_bug.cgi?id=839135
+    - http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html
+    - http://www.debian.org/security/2012/dsa-2511
+    - http://www.ubuntu.com/usn/USN-1506-1
diff --git a/gems/puppet/CVE-2012-3867.yml b/gems/puppet/CVE-2012-3867.yml
new file mode 100644
index 0000000000..838c548125
--- /dev/null
+++ b/gems/puppet/CVE-2012-3867.yml
@@ -0,0 +1,30 @@
+---
+gem: puppet
+cve: 2012-3867
+ghsa: q44r-f2hm-v76v
+url: https://www.puppet.com/security/cve/cve-2012-3867-insufficient-input-validation
+title: Insufficient input validation
+date: 2017-10-24
+description: |
+  lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and
+  2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not
+  properly restrict the characters in the Common Name field of a
+  Certificate Signing Request (CSR), which makes it easier for
+  user-assisted remote attackers to trick administrators into
+  signing a crafted agent certificate via ANSI control sequences.
+cvss_v2: 4.3
+patched_versions:
+  - "~> 2.6.17"
+  - ">= 2.7.18"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-3867
+    - https://www.puppet.com/security/cve/cve-2012-3867-insufficient-input-validation
+    - https://github.com/puppetlabs/puppet/commit/dfedaa5fa841ccf335245a748b347b7c7c236640
+    - https://github.com/puppetlabs/puppet/commit/f3419620b42080dad3b0be14470b20a972f13c50
+    - https://github.com/advisories/GHSA-q44r-f2hm-v76v
+    - https://bugzilla.redhat.com/show_bug.cgi?id=839158
+    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html
+    - http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html
+    - http://www.debian.org/security/2012/dsa-2511
+    - http://www.ubuntu.com/usn/USN-1506-1
diff --git a/gems/puppet/CVE-2013-1655.yml b/gems/puppet/CVE-2013-1655.yml
new file mode 100644
index 0000000000..8d2da4f2b4
--- /dev/null
+++ b/gems/puppet/CVE-2013-1655.yml
@@ -0,0 +1,28 @@
+---
+gem: puppet
+cve: 2013-1655
+ghsa: 574q-fxfj-wv6h
+url: https://www.puppet.com/security/cve/cve-2013-1655-unauthenticated-remote-code-execution-vulnerability
+title: Unauthenticated Remote Code Execution Vulnerability
+date: 2017-10-24
+description: |
+  Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, when running
+  Ruby 1.9.3 or later, allows remote attackers to execute arbitrary
+  code via vectors related to "serialized attributes."
+cvss_v2: 7.5
+unaffected_versions:
+  - "< 2.7.0"
+patched_versions:
+  - "~> 2.7.21"
+  - ">= 3.1.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2013-1655
+    - https://www.puppet.com/security/cve/cve-2013-1655-unauthenticated-remote-code-execution-vulnerability
+    - https://github.com/advisories/GHSA-574q-fxfj-wv6h
+    - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.html
+    - http://lists.opensuse.org/opensuse-updates/2013-04/msg00056.html
+    - http://ubuntu.com/usn/usn-1759-1
+    - http://www.debian.org/security/2013/dsa-2643
+    - https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2013-1655
+    - https://web.archive.org/web/20210509162357/https://www.securityfocus.com/bid/46291
diff --git a/gems/puppet/CVE-2013-3567.yml b/gems/puppet/CVE-2013-3567.yml
new file mode 100644
index 0000000000..f110b0bad7
--- /dev/null
+++ b/gems/puppet/CVE-2013-3567.yml
@@ -0,0 +1,27 @@
+---
+gem: puppet
+cve: 2013-3567
+ghsa: f7p5-w2cr-7cp7
+url: https://www.puppet.com/security/cve/cve-2013-3567-unauthenticated-remote-code-execution-vulnerability
+title: Unauthenticated Remote Code Execution Vulnerability
+date: 2017-10-24
+description: |
+  Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet
+  Enterprise before 2.8.2, deserializes untrusted YAML, which allows
+  remote attackers to instantiate arbitrary Ruby classes and execute
+  arbitrary code via a crafted REST API call.
+cvss_v2: 7.5
+patched_versions:
+  - "~> 2.7.22"
+  - ">= 3.2.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2013-3567
+    - https://www.puppet.com/security/cve/cve-2013-3567-unauthenticated-remote-code-execution-vulnerability
+    - https://github.com/advisories/GHSA-f7p5-w2cr-7cp7
+    - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00002.html
+    - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00019.html
+    - http://rhn.redhat.com/errata/RHSA-2013-1283.html
+    - http://rhn.redhat.com/errata/RHSA-2013-1284.html
+    - http://www.debian.org/security/2013/dsa-2715
+    - http://www.ubuntu.com/usn/USN-1886-1
diff --git a/gems/puppet/CVE-2013-4761.yml b/gems/puppet/CVE-2013-4761.yml
new file mode 100644
index 0000000000..531297fd3d
--- /dev/null
+++ b/gems/puppet/CVE-2013-4761.yml
@@ -0,0 +1,31 @@
+---
+gem: puppet
+cve: 2013-4761
+ghsa: cj43-9h3w-v976
+url: https://www.puppet.com/security/cve/cve-2013-4761-resourcetype-remote-code-execution-vulnerability
+title: Puppet `resource_type` Remote Code Execution Vulnerability
+date: 2017-10-24
+description: |
+  Unspecified vulnerability in Puppet 2.7.x before 2.7.23 and
+  3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before
+  2.8.3 and 3.0.x before 3.0.1, allows remote attackers to execute
+  arbitrary Ruby programs from the master via the resource_type
+  service.
+
+  NOTE: this vulnerability can only be exploited using unspecified
+  "local file system access" to the Puppet Master.
+cvss_v2: 5.1
+unaffected_versions:
+  - "< 2.7.0"
+patched_versions:
+  - "~> 2.7.23"
+  - ">= 3.2.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2013-4761
+    - https://www.puppet.com/security/cve/cve-2013-4761-resourcetype-remote-code-execution-vulnerability
+    - https://github.com/advisories/GHSA-cj43-9h3w-v976
+    - http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00009.html
+    - http://rhn.redhat.com/errata/RHSA-2013-1283.html
+    - http://rhn.redhat.com/errata/RHSA-2013-1284.html
+    - http://www.debian.org/security/2013/dsa-2761
diff --git a/gems/puppet/CVE-2014-3248.yml b/gems/puppet/CVE-2014-3248.yml
new file mode 100644
index 0000000000..c9a29db64d
--- /dev/null
+++ b/gems/puppet/CVE-2014-3248.yml
@@ -0,0 +1,30 @@
+---
+gem: puppet
+cve: 2014-3248
+ghsa: 92v7-pq4h-58j5
+url: https://github.com/advisories/GHSA-92v7-pq4h-58j5
+title: Moderate severity vulnerability that affects facter, hiera, mcollective-client, and puppet
+date: 2017-10-24
+description: |
+  Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7,
+  Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera
+  before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier,
+  allows local users to gain privileges via a Trojan horse file in the current working
+  directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2)
+  Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so;
+  or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so
+  in puppet/confine.
+patched_versions:
+  - "~> 2.7.26"
+  - ">= 3.6.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-3248
+    - https://github.com/advisories/GHSA-92v7-pq4h-58j5
+    - http://puppetlabs.com/security/cve/cve-2014-3248
+    - http://rowediness.com/2014/06/13/cve-2014-3248-a-little-problem-with-puppet/
+    - http://secunia.com/advisories/59197
+    - http://secunia.com/advisories/59200
+    - http://www.securityfocus.com/bid/68035
+    - https://github.com/rubysec/ruby-advisory-db/issues/238
+    - https://sca.analysiscenter.veracode.com/vulnerability-database/security/elevation-privileges-untrusted-search/ruby/sid-1586/summary
diff --git a/gems/puppet/CVE-2016-2785.yml b/gems/puppet/CVE-2016-2785.yml
new file mode 100644
index 0000000000..68a60a1c00
--- /dev/null
+++ b/gems/puppet/CVE-2016-2785.yml
@@ -0,0 +1,25 @@
+---
+gem: puppet
+cve: 2016-2785
+ghsa: pqj5-7r86-64fv
+url: https://www.puppet.com/security/cve/cve-2016-2785-incorrect-url-decoding
+title: Puppet Improper Access Control
+date: 2016-04-26
+description: |
+  Puppet Server before 2.3.2 and
+  Ruby puppetmaster in Puppet 4.x before 4.4.2 and in
+  Puppet Agent before 1.4.2
+  might allow remote attackers to bypass intended auth.conf
+  access restrictions by leveraging incorrect URL decoding.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - ">= 4.4.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2016-2785
+    - https://www.puppet.com/security/cve/cve-2016-2785-incorrect-url-decoding
+    - https://github.com/puppetlabs/puppet/pull/4921
+    - https://github.com/puppetlabs/puppet/pull/4921/commits/8d2ce797db265720f0a20d1d46ee2757b4e4f6b2
+    - https://security.gentoo.org/glsa/201606-02
+    - https://github.com/advisories/GHSA-pqj5-7r86-64fv
diff --git a/gems/puppet/CVE-2017-10689.yml b/gems/puppet/CVE-2017-10689.yml
new file mode 100644
index 0000000000..896ec3a5f8
--- /dev/null
+++ b/gems/puppet/CVE-2017-10689.yml
@@ -0,0 +1,25 @@
+---
+gem: puppet
+cve: 2017-10689
+ghsa: vw22-465p-8j5w
+url: https://puppet.com/security/cve/CVE-2017-10689
+title: Tarball permission preservation in puppet
+date: 2022-05-13
+description: |
+  When installing a module using the system tar, the PMT will filter filesystem
+  permissions to a sane value. This may just be based on the user's umask.
+
+  When using minitar, files are unpacked with whatever permissions are in the
+  tarball. This is potentially unsafe, as tarballs can be easily created with
+  weird permissions.
+cvss_v3: 5.5
+patched_versions:
+  - "~> 4.10.10"
+  - ">= 5.3.4"
+related:
+  url:
+    - https://access.redhat.com/errata/RHSA-2018:2927
+    - https://usn.ubuntu.com/3567-1/
+    - https://github.com/puppetlabs/puppet/commit/17d9e02da3882e44c1876e2805cf9708481715ee
+    - https://github.com/puppetlabs/puppet/commit/2f1047f85e22cde139a421bc25d371f2ffc92cb1
+    - https://tickets.puppetlabs.com/browse/PUP-7866
diff --git a/gems/puppet/CVE-2020-7942.yml b/gems/puppet/CVE-2020-7942.yml
index 952c425f2a..7598e08b12 100644
--- a/gems/puppet/CVE-2020-7942.yml
+++ b/gems/puppet/CVE-2020-7942.yml
@@ -18,5 +18,5 @@ description: |
   behavior.
 cvss_v3: 6.5
 patched_versions:
-- ~> 5.5.19
-- '>= 6.13.0'
+  - "~> 5.5.19"
+  - ">= 6.13.0"
diff --git a/gems/puppet/CVE-2021-27023.yml b/gems/puppet/CVE-2021-27023.yml
index 17e9a9bacf..1dc742f2f5 100644
--- a/gems/puppet/CVE-2021-27023.yml
+++ b/gems/puppet/CVE-2021-27023.yml
@@ -11,8 +11,8 @@ description: |
   This is similar to CVE-2018-1000007
 cvss_v3: 6.5
 patched_versions:
-- "~> 6.25.1"
-- ">= 7.12.1"
+  - "~> 6.25.1"
+  - ">= 7.12.1"
 related:
   cve:
-  - 2018-1000007
+    - 2018-1000007
diff --git a/gems/puppet/CVE-2021-27025.yml b/gems/puppet/CVE-2021-27025.yml
index 0857a28bcf..bb8c1b8581 100644
--- a/gems/puppet/CVE-2021-27025.yml
+++ b/gems/puppet/CVE-2021-27025.yml
@@ -11,5 +11,5 @@ description: |
   first 'pluginsync'.
 cvss_v3: 6.5
 patched_versions:
-- "~> 6.25.1"
-- ">= 7.12.1"
+  - "~> 6.25.1"
+  - ">= 7.12.1"
diff --git a/gems/pwpush/CVE-2024-52796.yml b/gems/pwpush/CVE-2024-52796.yml
new file mode 100644
index 0000000000..3b31406e96
--- /dev/null
+++ b/gems/pwpush/CVE-2024-52796.yml
@@ -0,0 +1,48 @@
+---
+gem: pwpush
+cve: 2024-52796
+ghsa: ffp2-8p2h-4m5j
+url: https://github.com/pglombardo/PasswordPusher/security/advisories/GHSA-ffp2-8p2h-4m5j
+title: Password Pusher rate limiter can be bypassed by forging proxy headers
+date: 2024-11-20
+description: |
+  ### Impact
+
+  Password Pusher comes with a configurable rate limiter.
+  In versions prior to [v1.49.0], the rate limiter could be bypassed by forging
+  proxy headers allowing bad actors to send unlimited traffic to the site
+  potentially causing a denial of service.
+
+  ### Patches
+
+  In [v1.49.0], a fix was implemented to only authorize proxies on local IPs which
+  resolves this issue.
+
+  If you are running a remote proxy, please see
+  [this documentation](https://docs.pwpush.com/docs/proxies/#trusted-proxies)
+  on how to authorize the IP address of your remote proxy.
+
+  ### Workarounds
+
+  It is highly suggested to upgrade to at least [v1.49.0] to mitigate this risk.
+
+  If for some reason you cannot immediately upgrade, the alternative
+  is that you can add rules to your proxy and/or firewall to not
+  accept external proxy headers such as `X-Forwarded-*` from clients.
+
+  ### References
+
+  The new settings are [configurable to authorize remote proxies][1].
+
+  [v1.49.0]: https://github.com/pglombardo/PasswordPusher/releases/tag/v1.49.0
+  [1]: https://docs.pwpush.com/docs/proxies/#trusted-proxies
+cvss_v3: 5.3
+patched_versions:
+  - ">= 1.49.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-52796
+    - https://github.com/pglombardo/PasswordPusher/releases/tag/v1.49.0
+    - https://github.com/pglombardo/PasswordPusher/security/advisories/GHSA-ffp2-8p2h-4m5j
+    - https://docs.pwpush.com/docs/proxies/#trusted-proxies
+    - https://github.com/advisories/GHSA-ffp2-8p2h-4m5j
diff --git a/gems/pwpush/CVE-2024-56733.yml b/gems/pwpush/CVE-2024-56733.yml
new file mode 100644
index 0000000000..5e6f429ef7
--- /dev/null
+++ b/gems/pwpush/CVE-2024-56733.yml
@@ -0,0 +1,76 @@
+---
+gem: pwpush
+cve: 2024-56733
+ghsa: 4fwj-m62q-pp47
+url: https://github.com/pglombardo/PasswordPusher/security/advisories/GHSA-4fwj-m62q-pp47
+title: Password Pusher Allows Session Token Interception Leading
+  to Potential Hijacking
+date: 2024-12-30
+description: |
+  ### Impact
+
+  A vulnerability has been reported in Password Pusher where an
+  attacker can copy the session cookie before a user logs out,
+  potentially allowing session hijacking.
+
+  Although the session token is replaced and invalidated upon logout,
+  if an attacker manages to capture the session cookie before this
+  process, they can use the token to gain unauthorized access to the
+  user's session until the token expires or is manually cleared.
+
+  This vulnerability hinges on the attacker's ability to access the
+  session cookie during an active session, either through a
+  man-in-the-middle attack, by exploiting another vulnerability like
+  XSS, or via direct access to the victim's device.
+
+  ### Patches
+
+  Although there is no direct resolution to this vulnerability, it is
+  recommended to always use the latest version of Password Pusher to
+  best mitigate risk.
+
+  ### Workarounds
+
+  If self-hosting, ensure Password Pusher is hosted exclusively over
+  SSL connections to encrypt traffic and prevent session cookies from
+  being intercepted in transit. Additionally, implement best practices
+  in local security to safeguard user systems, browsers, and data
+  against unauthorized access.
+
+  To further mitigate session hijacking risks, Password Pusher
+  implements the following security measures:
+
+  1. **Automatic Session Expiration**: Sessions are automatically
+     expired after 2 hours of inactivity, reducing the window for
+     potential exploitation.
+
+  2. **Session Reset on Login and Logout**: Sessions are fully reset
+     both when a user logs in and logs out, ensuring that session
+     tokens are not reusable post-logout. This practice invalidates
+     old session tokens and issues new ones, minimizing the risk of
+     session hijacking.
+
+  3. **Encrypted Cookies**: Cookies are encrypted using the value of
+     SECRET_KEY_BASE from the application's configuration. This
+     encryption adds a layer of protection against tampering or reading
+     the session cookie's contents if intercepted, although it doesn't
+     prevent the cookie from being used if stolen.
+
+  **Note**: While these measures significantly enhance security, they
+  are part of a broader security strategy.
+
+  ### References
+
+  * https://edgeguides.rubyonrails.org/security.html#session-hijacking
+
+  ### Credits
+
+  Thank you to [Positive Technologies](https://www.ptsecurity.com/ww-en/)
+  for reporting and working with me to bring this CVE to the community.
+
+cvss_v3: 5.7
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-56733
+    - https://github.com/pglombardo/PasswordPusher/security/advisories/GHSA-4fwj-m62q-pp47
+    - https://github.com/advisories/GHSA-4fwj-m62q-pp47
diff --git a/gems/qiita-markdown/CVE-2021-28796.yml b/gems/qiita-markdown/CVE-2021-28796.yml
index a82327d232..fce1884504 100644
--- a/gems/qiita-markdown/CVE-2021-28796.yml
+++ b/gems/qiita-markdown/CVE-2021-28796.yml
@@ -5,6 +5,8 @@ ghsa: f2c9-5jqw-3xh3
 url: https://github.com/advisories/GHSA-f2c9-5jqw-3xh3
 title: Cross-Site Scripting in Qiita::Markdown
 date: 2021-08-02
-description: Increments Qiita::Markdown before 0.33.0 allows XSS in transformers.
+description: |
+  Increments Qiita::Markdown before 0.33.0 allows XSS in transformers.
+cvss_v3: 6.1
 patched_versions:
-- '>= 0.33.0'
+  - ">= 0.33.0"
diff --git a/gems/qiita-markdown/CVE-2021-28833.yml b/gems/qiita-markdown/CVE-2021-28833.yml
index ab531554d3..eb3a5d6b21 100644
--- a/gems/qiita-markdown/CVE-2021-28833.yml
+++ b/gems/qiita-markdown/CVE-2021-28833.yml
@@ -10,4 +10,4 @@ description: |
   link, a different vulnerability than CVE-2021-28796.
 cvss_v3: 6.1
 patched_versions:
-- '>= 0.34.0'
+  - ">= 0.34.0"
diff --git a/gems/quick_magick/OSVDB-106954.yml b/gems/quick_magick/OSVDB-106954.yml
index 435e00d1da..9776522a99 100644
--- a/gems/quick_magick/OSVDB-106954.yml
+++ b/gems/quick_magick/OSVDB-106954.yml
@@ -1,10 +1,16 @@
 ---
 gem: quick_magick
 osvdb: 106954
-url: http://osvdb.org/show/osvdb/106954
-title: quick_magick Gem for Ruby QuickMagick::Image.read Function Crafted String Handling
-  Remote Command Injection
+url: https://security.snyk.io/vuln/SNYK-RUBY-QUICKMAGICK-20012
+title: quick_magick Gem for Ruby QuickMagick::Image.read Function
+  Crafted String Handling Remote Command Injection
 date: 2011-01-12
-description: quick_magick Gem for Ruby contains a flaw in the QuickMagick::Image.read
-  function. The issue is triggered when handling a specially crafted string. This
-  may allow a remote attacker to inject arbitrary commands.
+description: |
+  quick_magick Gem for Ruby contains a flaw in the QuickMagick::Image.read
+  function. The issue is triggered when handling a specially crafted string.
+  This may allow a remote attacker to inject arbitrary commands.
+notes: "Never patched"
+related:
+  url:
+    - https://security.snyk.io/vuln/SNYK-RUBY-QUICKMAGICK-20012
+    - http://osvdb.org/show/osvdb/106954
diff --git a/gems/rack-attack/OSVDB-132234.yml b/gems/rack-attack/OSVDB-132234.yml
index 287f40f1f3..c558a709b9 100644
--- a/gems/rack-attack/OSVDB-132234.yml
+++ b/gems/rack-attack/OSVDB-132234.yml
@@ -2,7 +2,7 @@
 gem: rack-attack
 osvdb: 132234
 url: https://github.com/kickstarter/rack-attack/releases/tag/v4.3.1
-title: |
+title:
   rack-attack Gem for Ruby missing normalization before request path
   processing
 date: 2015-12-18
@@ -23,4 +23,10 @@ description: |
   would not match a request to '/login/', though Rails would route
   '/login/' to the same '/login' action.
 patched_versions:
-- '>= 4.3.1'
+  - ">= 4.3.1"
+related:
+  url:
+    - https://github.com/kickstarter/rack-attack/releases/tag/v4.3.1
+    - https://github.com/rack/rack-attack/commit/76c2e3143099d938883ae5654527b47e9e6a8977
+    - https://security.snyk.io/vuln/SNYK-RUBY-RACKATTACK-20246
+    - https://github.com/rack/rack-attack/blob/main/CHANGELOG.md
diff --git a/gems/rack-cache/CVE-2012-2671.yml b/gems/rack-cache/CVE-2012-2671.yml
index d34f9e6de4..99270489b7 100644
--- a/gems/rack-cache/CVE-2012-2671.yml
+++ b/gems/rack-cache/CVE-2012-2671.yml
@@ -2,6 +2,7 @@
 gem: rack-cache
 cve: 2012-2671
 osvdb: 83077
+ghsa: hrp6-w4v2-8737
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-2671
 title: rack-cache Rubygem Sensitive HTTP Header Caching Weakness
 date: 2012-06-06
@@ -12,4 +13,4 @@ description: |
   crafted header.
 cvss_v2: 7.5
 patched_versions:
-- '>= 1.2'
+  - ">= 1.2"
diff --git a/gems/rack-contrib/CVE-2024-35231.yml b/gems/rack-contrib/CVE-2024-35231.yml
new file mode 100644
index 0000000000..bae3795872
--- /dev/null
+++ b/gems/rack-contrib/CVE-2024-35231.yml
@@ -0,0 +1,38 @@
+---
+gem: rack-contrib
+cve: 2024-35231
+ghsa: 8c8q-2xw3-j869
+url: https://nvd.nist.gov/vuln/detail/CVE-2024-35231
+title: Denial of Service in rack-contrib via "profiler_runs" parameter
+date: 2024-05-27
+description: |
+  rack-contrib prior to version 2.5.0 is vulnerable to a Denial of Service
+  via the `profiler_runs` HTTP request parameter.
+
+  Versions Affected: < 2.5.0
+  Fixed Versions: >= 2.5.0
+
+  # Impact
+
+  An attacker can trigger a Denial of Service by sending an HTTP request with
+  an overly large `profiler_runs` parameter.
+
+  ```shell
+  curl  "http://127.0.0.1:9292/?profiler_runs=9999999999&profile=process_time"
+  ```
+
+  # Releases
+
+  The fixed releases are available at the normal locations.
+
+  # Workarounds
+
+  There are no feasible workarounds for this issue.
+
+cvss_v3: 8.6
+patched_versions:
+  - ">= 2.5.0"
+related:
+  url:
+    - https://github.com/rack/rack-contrib/commit/0eec2a9836329051c6742549e65a94a4c24fe6f7
+    - https://github.com/advisories/GHSA-8c8q-2xw3-j869
diff --git a/gems/rack-cors/CVE-2017-11173.yml b/gems/rack-cors/CVE-2017-11173.yml
index 78e7820f7b..ba227ab243 100644
--- a/gems/rack-cors/CVE-2017-11173.yml
+++ b/gems/rack-cors/CVE-2017-11173.yml
@@ -15,8 +15,8 @@ description: |
 cvss_v2: 6.8
 cvss_v3: 8.8
 patched_versions:
-- ">= 0.4.1"
+  - ">= 0.4.1"
 related:
   url:
-  - https://github.com/cyu/rack-cors/issues/86
-  - http://seclists.org/fulldisclosure/2017/Jul/22
+    - https://github.com/cyu/rack-cors/issues/86
+    - http://seclists.org/fulldisclosure/2017/Jul/22
diff --git a/gems/rack-cors/CVE-2019-18978.yml b/gems/rack-cors/CVE-2019-18978.yml
index 95d9078dbe..bf8e594e6a 100644
--- a/gems/rack-cors/CVE-2019-18978.yml
+++ b/gems/rack-cors/CVE-2019-18978.yml
@@ -11,4 +11,4 @@ description: |
   because resource matching does not ensure that pathnames are in a canonical format.
 cvss_v3: 5.3
 patched_versions:
-- ">= 1.0.4"
+  - ">= 1.0.4"
diff --git a/gems/rack-cors/CVE-2024-27456.yml b/gems/rack-cors/CVE-2024-27456.yml
new file mode 100644
index 0000000000..00f2ee7834
--- /dev/null
+++ b/gems/rack-cors/CVE-2024-27456.yml
@@ -0,0 +1,19 @@
+---
+gem: rack-cors
+cve: 2024-27456
+ghsa: 785g-282q-pwvx
+url: https://github.com/advisories/GHSA-785g-282q-pwvx
+title: Rack CORS Middleware has Insecure File Permissions
+date: 2024-02-26
+description: |
+  rack-cors (aka Rack CORS Middleware) 2.0.1 has 0666 permissions
+  for the .rb files.
+unaffected_versions:
+  - "< 2.0.1"
+patched_versions:
+  - ">= 2.0.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-27456
+    - https://github.com/cyu/rack-cors/issues/274
+    - https://github.com/advisories/GHSA-785g-282q-pwvx
diff --git a/gems/rack-mini-profiler/CVE-2016-4442.yml b/gems/rack-mini-profiler/CVE-2016-4442.yml
index 859842ea3e..e1713b52e0 100644
--- a/gems/rack-mini-profiler/CVE-2016-4442.yml
+++ b/gems/rack-mini-profiler/CVE-2016-4442.yml
@@ -5,11 +5,12 @@ ghsa: j5hj-fhc9-g24m
 url: https://github.com/MiniProfiler/rack-mini-profiler/commit/4273771d65f1a7411e3ef5843329308d0e2d257c
 title: rack-mini-profiler may disclose information to unauthorized users
 date: 2016-05-18
-description: Carefully crafted requests can expose information about strings and objects
+description: |
+  Carefully crafted requests can expose information about strings and objects
   allocated during the request for unauthorised users.
 cvss_v3: 5.3
 patched_versions:
-- ">= 0.10.1"
+  - ">= 0.10.1"
 related:
   url:
-  - http://seclists.org/oss-sec/2016/q2/516
+    - http://seclists.org/oss-sec/2016/q2/516
diff --git a/gems/rack-protection/CVE-2018-1000119.yml b/gems/rack-protection/CVE-2018-1000119.yml
index 4c22dbf0aa..73736757d4 100644
--- a/gems/rack-protection/CVE-2018-1000119.yml
+++ b/gems/rack-protection/CVE-2018-1000119.yml
@@ -13,5 +13,5 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 5.9
 patched_versions:
-- ~> 1.5.5
-- '>= 2.0.0'
+  - "~> 1.5.5"
+  - ">= 2.0.0"
diff --git a/gems/rack-protection/CVE-2018-7212.yml b/gems/rack-protection/CVE-2018-7212.yml
index d4f97c56cb..afc51242d8 100644
--- a/gems/rack-protection/CVE-2018-7212.yml
+++ b/gems/rack-protection/CVE-2018-7212.yml
@@ -8,5 +8,5 @@ description: |
   An issue was discovered in rack-protection 2.x before 2.0.1 on Windows. Path traversal
   is possible via backslash characters.
 patched_versions:
-- '>= 2.0.1'
-- ~> 1.5.4
+  - ">= 2.0.1"
+  - "~> 1.5.4"
diff --git a/gems/rack-session/CVE-2025-46336.yml b/gems/rack-session/CVE-2025-46336.yml
new file mode 100644
index 0000000000..207161a400
--- /dev/null
+++ b/gems/rack-session/CVE-2025-46336.yml
@@ -0,0 +1,58 @@
+---
+gem: rack-session
+cve: 2025-46336
+ghsa: 9j94-67jr-4cqj
+url: https://github.com/rack/rack-session/security/advisories/GHSA-9j94-67jr-4cqj
+title: Rack session gets restored after deletion
+date: 2025-05-08
+description: |
+  ## Summary
+
+  When using the `Rack::Session::Pool` middleware, simultaneous rack
+  requests can restore a deleted rack session, which allows the
+  unauthenticated user to occupy that session.
+
+  ## Details
+
+  [Rack session middleware](https://github.com/rack/rack-session/blob/v2.1.0/lib/rack/session/abstract/id.rb#L271-L278)
+  prepares the session at the beginning of request, then saves is back
+  to the store with possible changes applied by host rack application.
+  This way the session becomes to be a subject of race conditions in
+  general sense over concurrent rack requests.
+
+  ## Impact
+
+  When using the `Rack::Session::Pool` middleware, and provided the
+  attacker can acquire a session cookie (already a major issue), the
+  session may be restored if the attacker can trigger a long running
+  request (within that same session) adjacent to the user logging out,
+  in order to retain illicit access even after a user has attempted to logout.
+
+  ## Mitigation
+
+  - Update to the latest version of `rack-session`, or
+  - Ensure your application invalidates sessions atomically by marking
+    them as logged out e.g., using a `logged_out` flag, instead of
+    deleting them, and check this flag on every request to prevent reuse, or
+  - Implement a custom session store that tracks session invalidation
+    timestamps and refuses to accept session data if the session was
+    invalidated after the request began.
+
+  ## Related
+
+  This code was previously part of `rack` in Rack < 3, see
+  <https://github.com/rack/rack/security/advisories/GHSA-vpfw-47h7-xj4g>
+  for the equivalent advisory in `rack` (affecting Rack < 3 only).
+cvss_v3: 4.2
+unaffected_versions:
+  - "< 2.0.0"
+patched_versions:
+  - ">= 2.1.1"
+related:
+  ghsa:
+    - https://github.com/rack/rack/security/advisories/GHSA-vpfw-47h7-xj4g
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-46336
+    - https://github.com/rack/rack-session/commit/c28c4a8c1861d814e09f2ae48264ac4c40be2d3b
+    - https://github.com/rack/rack-session/security/advisories/GHSA-9j94-67jr-4cqj
+    - https://github.com/advisories/GHSA-9j94-67jr-4cqj
diff --git a/gems/rack-ssl/CVE-2014-2538.yml b/gems/rack-ssl/CVE-2014-2538.yml
index 912734ffb4..d83e249d94 100644
--- a/gems/rack-ssl/CVE-2014-2538.yml
+++ b/gems/rack-ssl/CVE-2014-2538.yml
@@ -2,13 +2,15 @@
 gem: rack-ssl
 cve: 2014-2538
 osvdb: 104734
+ghsa: v3rr-cph9-2g2q
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-2538
-title: 'CVE-2014-2538 rubygem rack-ssl: URL error display XSS'
+title: "CVE-2014-2538 rubygem rack-ssl: URL error display XSS"
 date: 2013-07-09
-description: Cross-site scripting (XSS) vulnerability in lib/rack/ssl.rb in the rack-ssl
+description: |
+  Cross-site scripting (XSS) vulnerability in lib/rack/ssl.rb in the rack-ssl
   gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script
   or HTML via a URI, which might not be properly handled by third-party adapters such
   as JRuby-Rack.
 cvss_v2: 4.3
 patched_versions:
-- '>= 1.3.4'
+  - ">= 1.3.4"
diff --git a/gems/rack/CVE-2011-5036.yml b/gems/rack/CVE-2011-5036.yml
index dee827486c..ce630c7e50 100644
--- a/gems/rack/CVE-2011-5036.yml
+++ b/gems/rack/CVE-2011-5036.yml
@@ -2,16 +2,18 @@
 gem: rack
 cve: 2011-5036
 osvdb: 78121
+ghsa: v6j3-7jrw-hq2p
 url: https://nvd.nist.gov/vuln/detail/CVE-2011-5036
-title: 'CVE-2011-5036 rubygem-rack: hash table collisions DoS (oCERT-2011-003)'
+title: "CVE-2011-5036 rubygem-rack: hash table collisions DoS (oCERT-2011-003)"
 date: 2011-12-28
-description: Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes
+description: |
+  Rack before 1.1.3, 1.2.x before 1.2.5, and 1.3.x before 1.3.6 computes
   hash values for form parameters without restricting the ability to trigger hash
   collisions predictably, which allows remote attackers to cause a denial of service
   (CPU consumption) by sending many crafted parameters.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.1.3
-- ~> 1.2.5
-- ~> 1.3.6
-- '>= 1.4.0'
+  - "~> 1.1.3"
+  - "~> 1.2.5"
+  - "~> 1.3.6"
+  - ">= 1.4.0"
diff --git a/gems/rack/CVE-2012-6109.yml b/gems/rack/CVE-2012-6109.yml
index e98781f3c5..6b06be86fd 100644
--- a/gems/rack/CVE-2012-6109.yml
+++ b/gems/rack/CVE-2012-6109.yml
@@ -2,16 +2,18 @@
 gem: rack
 cve: 2012-6109
 osvdb: 89317
+ghsa: h77x-m5q8-c29h
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-6109
-title: 'CVE-2012-6109 rubygem-rack: parsing Content-Disposition header DoS'
+title: "CVE-2012-6109 rubygem-rack: parsing Content-Disposition header DoS"
 date: 2012-05-04
-description: lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x
+description: |
+  lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x
   before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which
   allows remote attackers to cause a denial of service (infinite loop) via a crafted
   Content-Disposion header.
 cvss_v2: 4.3
 patched_versions:
-- ~> 1.1.4
-- ~> 1.2.6
-- ~> 1.3.7
-- '>= 1.4.2'
+  - "~> 1.1.4"
+  - "~> 1.2.6"
+  - "~> 1.3.7"
+  - ">= 1.4.2"
diff --git a/gems/rack/CVE-2013-0183.yml b/gems/rack/CVE-2013-0183.yml
index 1df7cebdd2..699090593a 100644
--- a/gems/rack/CVE-2013-0183.yml
+++ b/gems/rack/CVE-2013-0183.yml
@@ -2,14 +2,16 @@
 gem: rack
 cve: 2013-0183
 osvdb: 89320
+ghsa: 3pxh-h8hw-mj8w
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0183
-title: 'CVE-2013-0183 rubygem-rack: receiving excessively long lines triggers out-of-memory
-  error'
+title:
+  "CVE-2013-0183 rubygem-rack: receiving excessively long lines triggers out-of-memory error"
 date: 2013-01-07
-description: multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3
+description: |
+  multipart/parser.rb in Rack 1.3.x before 1.3.8 and 1.4.x before 1.4.3
   allows remote attackers to cause a denial of service (memory consumption and out-of-memory
   error) via a long string in a Multipart HTTP packet.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.3.8
-- '>= 1.4.3'
+  - "~> 1.3.8"
+  - ">= 1.4.3"
diff --git a/gems/rack/CVE-2013-0184.yml b/gems/rack/CVE-2013-0184.yml
index 6e6625fa79..1619527537 100644
--- a/gems/rack/CVE-2013-0184.yml
+++ b/gems/rack/CVE-2013-0184.yml
@@ -2,16 +2,18 @@
 gem: rack
 cve: 2013-0184
 osvdb: 89327
+ghsa: v882-ccj6-jc48
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0184
-title: 'CVE-2013-0184 rubygem-rack: Rack::Auth::AbstractRequest DoS'
+title: "CVE-2013-0184 rubygem-rack: Rack::Auth::AbstractRequest DoS"
 date: 2013-01-13
-description: Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x
+description: |
+  Unspecified vulnerability in Rack::Auth::AbstractRequest in Rack 1.1.x
   before 1.1.5, 1.2.x before 1.2.7, 1.3.x before 1.3.9, and 1.4.x before 1.4.4 allows
   remote attackers to cause a denial of service via unknown vectors related to "symbolized
   arbitrary strings."
 cvss_v2: 4.3
 patched_versions:
-- ~> 1.1.5
-- ~> 1.2.7
-- ~> 1.3.9
-- '>= 1.4.4'
+  - "~> 1.1.5"
+  - "~> 1.2.7"
+  - "~> 1.3.9"
+  - ">= 1.4.4"
diff --git a/gems/rack/CVE-2013-0262.yml b/gems/rack/CVE-2013-0262.yml
index 171989125d..2b2493cef3 100644
--- a/gems/rack/CVE-2013-0262.yml
+++ b/gems/rack/CVE-2013-0262.yml
@@ -2,14 +2,16 @@
 gem: rack
 cve: 2013-0262
 osvdb: 89938
+ghsa: 85r7-w5mv-c849
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0262
-title: 'CVE-2013-0262 rubygem-rack: Path sanitization information disclosure'
+title: "CVE-2013-0262 rubygem-rack: Path sanitization information disclosure"
 date: 2013-02-07
-description: rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before
+description: |
+  rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before
   1.4.5 allows attackers to access arbitrary files outside the intended root directory
   via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability
   that is remotely exploitable, aka "symlink path traversals."
 cvss_v2: 4.3
 patched_versions:
-- ~> 1.4.5
-- '>= 1.5.2'
+  - "~> 1.4.5"
+  - ">= 1.5.2"
diff --git a/gems/rack/CVE-2013-0263.yml b/gems/rack/CVE-2013-0263.yml
index 971195e27e..d7f8a2838c 100644
--- a/gems/rack/CVE-2013-0263.yml
+++ b/gems/rack/CVE-2013-0263.yml
@@ -2,17 +2,19 @@
 gem: rack
 cve: 2013-0263
 osvdb: 89939
+ghsa: xc85-32mf-xpv8
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0263
-title: 'CVE-2013-0263 rubygem-rack: Timing attack in cookie sessions'
+title: "CVE-2013-0263 rubygem-rack: Timing attack in cookie sessions"
 date: 2013-02-07
-description: Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5,
+description: |
+  Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5,
   1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers
   to guess the session cookie, gain privileges, and execute arbitrary code via a timing
   attack involving an HMAC comparison function that does not run in constant time.
 cvss_v2: 5.1
 patched_versions:
-- ~> 1.1.6
-- ~> 1.2.8
-- ~> 1.3.10
-- ~> 1.4.5
-- '>= 1.5.2'
+  - "~> 1.1.6"
+  - "~> 1.2.8"
+  - "~> 1.3.10"
+  - "~> 1.4.5"
+  - ">= 1.5.2"
diff --git a/gems/rack/CVE-2015-3225.yml b/gems/rack/CVE-2015-3225.yml
index d6bd8b8554..c91a72f427 100644
--- a/gems/rack/CVE-2015-3225.yml
+++ b/gems/rack/CVE-2015-3225.yml
@@ -11,6 +11,6 @@ description: |
 
   All users running an affected release should upgrade.
 patched_versions:
-- '>= 1.6.2'
-- ~> 1.5.4
-- ~> 1.4.6
+  - ">= 1.6.2"
+  - "~> 1.5.4"
+  - "~> 1.4.6"
diff --git a/gems/rack/CVE-2018-16470.yml b/gems/rack/CVE-2018-16470.yml
index 67bd754158..30fb43b9c8 100644
--- a/gems/rack/CVE-2018-16470.yml
+++ b/gems/rack/CVE-2018-16470.yml
@@ -48,7 +48,8 @@ description: |
   Rack::Multipart::Parser.send :remove_const, :BUFSIZE
   Rack::Multipart::Parser.const_set :BUFSIZE, 16384
   ```
+cvss_v3: 7.5
 unaffected_versions:
-- <= 2.0.3
+  - "<= 2.0.3"
 patched_versions:
-- '>= 2.0.6'
+  - ">= 2.0.6"
diff --git a/gems/rack/CVE-2018-16471.yml b/gems/rack/CVE-2018-16471.yml
index 9c6cb05ac8..25ea5efc5c 100644
--- a/gems/rack/CVE-2018-16471.yml
+++ b/gems/rack/CVE-2018-16471.yml
@@ -74,6 +74,7 @@ description: |
   end
   end
   ```
+cvss_v3: 6.1
 patched_versions:
-- ~> 1.6.11
-- '>= 2.0.6'
+  - "~> 1.6.11"
+  - ">= 2.0.6"
diff --git a/gems/rack/CVE-2019-16782.yml b/gems/rack/CVE-2019-16782.yml
index 2f9bcc077a..fb67351669 100644
--- a/gems/rack/CVE-2019-16782.yml
+++ b/gems/rack/CVE-2019-16782.yml
@@ -5,7 +5,7 @@ ghsa: hrqr-hxpp-chr3
 url: https://github.com/rack/rack/security/advisories/GHSA-hrqr-hxpp-chr3
 date: 2019-12-18
 title: Possible information leak / session hijack vulnerability
-description: |-
+description: |
   There's a possible information leak / session hijack vulnerability in Rack.
 
   Attackers may be able to find and hijack sessions by using timing attacks
@@ -28,5 +28,5 @@ description: |-
   and hijack that session.
 cvss_v3: 6.3
 patched_versions:
-- ~> 1.6.12
-- '>= 2.0.8'
+  - "~> 1.6.12"
+  - ">= 2.0.8"
diff --git a/gems/rack/CVE-2020-8161.yml b/gems/rack/CVE-2020-8161.yml
index 046c02be9c..787139d4cf 100644
--- a/gems/rack/CVE-2020-8161.yml
+++ b/gems/rack/CVE-2020-8161.yml
@@ -27,6 +27,7 @@ description: |
   Until such time as the patch is applied or their Rack version is upgraded,
   we recommend that developers do not use Rack::Directory in their
   applications.
+cvss_v3: 8.6
 patched_versions:
-- ~> 2.1.3
-- '>= 2.2.0'
+  - "~> 2.1.3"
+  - ">= 2.2.0"
diff --git a/gems/rack/CVE-2020-8184.yml b/gems/rack/CVE-2020-8184.yml
index 2369e215f0..d93e081a20 100644
--- a/gems/rack/CVE-2020-8184.yml
+++ b/gems/rack/CVE-2020-8184.yml
@@ -44,6 +44,7 @@ description: |
     end
   end
   ```
+cvss_v3: 7.5
 patched_versions:
-- ~> 2.1.4
-- '>= 2.2.3'
+  - "~> 2.1.4"
+  - ">= 2.2.3"
diff --git a/gems/rack/CVE-2022-30122.yml b/gems/rack/CVE-2022-30122.yml
new file mode 100644
index 0000000000..f2674fd1d9
--- /dev/null
+++ b/gems/rack/CVE-2022-30122.yml
@@ -0,0 +1,47 @@
+---
+gem: rack
+cve: 2022-30122
+ghsa: hxqx-xwvh-44m2
+url: https://groups.google.com/g/ruby-security-ann/c/L2Axto442qk
+title: Denial of Service Vulnerability in Rack Multipart Parsing
+date: 2022-06-27
+description: |
+  There is a possible denial of service vulnerability in the multipart parsing
+  component of Rack.  This vulnerability has been assigned the CVE identifier
+  CVE-2022-30122.
+
+  Versions Affected:  >= 1.2
+  Not affected:       < 1.2
+  Fixed Versions:     2.0.9.1, 2.1.4.1, 2.2.3.1
+
+  ## Impact
+  Carefully crafted multipart POST requests can cause Rack's multipart parser to
+  take much longer than expected, leading to a possible denial of service
+  vulnerability.
+
+  Impacted code will use Rack's multipart parser to parse multipart posts.  This
+  includes directly using the multipart parser like this:
+
+  ```
+  params = Rack::Multipart.parse_multipart(env)
+  ```
+
+  But it also includes reading POST data from a Rack request object like this:
+
+  ```
+  p request.POST # read POST data
+  p request.params # reads both query params and POST data
+  ```
+
+  All users running an affected release should either upgrade or use one of the
+  workarounds immediately.
+
+  ## Workarounds
+  There are no feasible workarounds for this issue.
+cvss_v3: 7.5
+unaffected_versions:
+  - "< 1.2"
+patched_versions:
+  - "~> 2.0.9, >= 2.0.9.1"
+  - "~> 2.1.4, >= 2.1.4.1"
+  - ">= 2.2.3.1"
diff --git a/gems/rack/CVE-2022-30123.yml b/gems/rack/CVE-2022-30123.yml
new file mode 100644
index 0000000000..639b61f26e
--- /dev/null
+++ b/gems/rack/CVE-2022-30123.yml
@@ -0,0 +1,45 @@
+---
+gem: rack
+cve: 2022-30123
+ghsa: wq4h-7r42-5hrr
+url: https://groups.google.com/g/ruby-security-ann/c/LWB10kWzag8
+title: Possible shell escape sequence injection vulnerability in Rack
+date: 2022-06-27
+description: |
+  There is a possible shell escape sequence injection vulnerability in the Lint
+  and CommonLogger components of Rack.  This vulnerability has been assigned the
+  CVE identifier CVE-2022-30123.
+
+  Versions Affected:  All.
+  Not affected:       None
+  Fixed Versions:     2.0.9.1, 2.1.4.1, 2.2.3.1
+
+  ## Impact
+  Carefully crafted requests can cause shell escape sequences to be written to
+  the terminal via Rack's Lint middleware and CommonLogger middleware.  These
+  escape sequences can be leveraged to possibly execute commands in the victim's
+  terminal.
+
+  Impacted applications will have either of these middleware installed, and
+  vulnerable apps may have something like this:
+
+  ```
+  use Rack::Lint
+  ```
+
+  Or
+
+  ```
+  use Rack::CommonLogger
+  ```
+
+  All users running an affected release should either upgrade or use one of the
+  workarounds immediately.
+
+  ## Workarounds
+  Remove these middleware from your application
+cvss_v3: 10.0
+patched_versions:
+  - "~> 2.0.9, >= 2.0.9.1"
+  - "~> 2.1.4, >= 2.1.4.1"
+  - ">= 2.2.3.1"
diff --git a/gems/rack/CVE-2022-44570.yml b/gems/rack/CVE-2022-44570.yml
new file mode 100644
index 0000000000..51d58be910
--- /dev/null
+++ b/gems/rack/CVE-2022-44570.yml
@@ -0,0 +1,32 @@
+---
+gem: rack
+cve: 2022-44570
+ghsa: 65f5-mfpf-vfhj
+url: https://github.com/rack/rack/releases/tag/v3.0.4.1
+title: Denial of service via header parsing in Rack
+date: 2023-01-18
+description: |
+  There is a possible denial of service vulnerability in the Range header
+  parsing component of Rack. This vulnerability has been assigned the CVE
+  identifier CVE-2022-44570.
+
+  Versions Affected: >= 1.5.0
+  Not affected: None.
+  Fixed Versions: 2.0.9.2, 2.1.4.2, 2.2.6.2, 3.0.4.1
+
+  # Impact
+
+  Carefully crafted input can cause the Range header parsing component in Rack
+  to take an unexpected amount of time, possibly resulting in a denial of
+  service attack vector. Any applications that deal with Range requests (such
+  as streaming applications, or applications that serve files) may be impacted.
+
+  # Workarounds
+
+  There are no feasible workarounds for this issue.
+cvss_v3: 7.5
+patched_versions:
+  - "~> 2.0.9, >= 2.0.9.2"
+  - "~> 2.1.4, >= 2.1.4.2"
+  - "~> 2.2.6, >= 2.2.6.2"
+  - ">= 3.0.4.1"
diff --git a/gems/rack/CVE-2022-44571.yml b/gems/rack/CVE-2022-44571.yml
new file mode 100644
index 0000000000..c880b27df0
--- /dev/null
+++ b/gems/rack/CVE-2022-44571.yml
@@ -0,0 +1,32 @@
+---
+gem: rack
+cve: 2022-44571
+ghsa: 93pm-5p5f-3ghx
+url: https://github.com/rack/rack/releases/tag/v3.0.4.1
+title: Denial of Service Vulnerability in Rack Content-Disposition parsing
+date: 2023-01-18
+description: |
+  There is a denial of service vulnerability in the Content-Disposition parsing
+  component of Rack. This vulnerability has been assigned the CVE identifier
+  CVE-2022-44571.
+
+  Versions Affected: >= 2.0.0
+  Not affected: None.
+  Fixed Versions: 2.0.9.2, 2.1.4.2, 2.2.6.1, 3.0.4.1
+
+  # Impact
+
+  Carefully crafted input can cause Content-Disposition header parsing in Rack
+  to take an unexpected amount of time, possibly resulting in a denial of
+  service attack vector. This header is used typically used in multipart
+  parsing. Any applications that parse multipart posts using Rack (virtually
+  all Rails applications) are impacted.
+
+  # Workarounds
+
+  There are no feasible workarounds for this issue.
+patched_versions:
+  - "~> 2.0.9, >= 2.0.9.2"
+  - "~> 2.1.4, >= 2.1.4.2"
+  - "~> 2.2.6, >= 2.2.6.1"
+  - ">= 3.0.4.1"
diff --git a/gems/rack/CVE-2022-44572.yml b/gems/rack/CVE-2022-44572.yml
new file mode 100644
index 0000000000..e244b82540
--- /dev/null
+++ b/gems/rack/CVE-2022-44572.yml
@@ -0,0 +1,31 @@
+---
+gem: rack
+cve: 2022-44572
+ghsa: rqv2-275x-2jq5
+url: https://github.com/rack/rack/releases/tag/v3.0.4.1
+title: Denial of service via multipart parsing in Rack
+date: 2023-01-18
+description: |
+  There is a denial of service vulnerability in the multipart parsing component
+  of Rack. This vulnerability has been assigned the CVE identifier
+  CVE-2022-44572.
+
+  Versions Affected: >= 2.0.0
+  Not affected: None.
+  Fixed Versions: 2.0.9.2, 2.1.4.2, 2.2.6.1, 3.0.4.1
+
+  # Impact
+
+  Carefully crafted input can cause RFC2183 multipart boundary parsing in Rack
+  to take an unexpected amount of time, possibly resulting in a denial of
+  service attack vector. Any applications that parse multipart posts using
+  Rack (virtually all Rails applications) are impacted.
+
+  # Workarounds
+
+  There are no feasible workarounds for this issue.
+patched_versions:
+  - "~> 2.0.9, >= 2.0.9.2"
+  - "~> 2.1.4, >= 2.1.4.2"
+  - "~> 2.2.6, >= 2.2.6.1"
+  - ">= 3.0.4.1"
diff --git a/gems/rack/CVE-2023-27530.yml b/gems/rack/CVE-2023-27530.yml
new file mode 100644
index 0000000000..f1916a402f
--- /dev/null
+++ b/gems/rack/CVE-2023-27530.yml
@@ -0,0 +1,25 @@
+---
+gem: rack
+cve: 2023-27530
+ghsa: 3h57-hmj3-gj3p
+url: https://discuss.rubyonrails.org/t/cve-2023-27530-possible-dos-vulnerability-in-multipart-mime-parsing/82388
+title: Possible DoS Vulnerability in Multipart MIME parsing
+date: 2023-03-03
+description: |
+  There is a possible DoS vulnerability in the Multipart MIME parsing code in Rack. This vulnerability has been assigned the CVE identifier CVE-2023-27530.
+
+  Versions Affected: All. Not affected: None Fixed Versions: 3.0.4.2, 2.2.6.3, 2.1.4.3, 2.0.9.3
+
+  # Impact
+  The Multipart MIME parsing code in Rack limits the number of file parts, but does not limit the total number of parts that can be uploaded. Carefully crafted requests can abuse this and cause multipart parsing to take longer than expected.
+
+  All users running an affected release should either upgrade or use one of the workarounds immediately.
+
+  # Workarounds
+  A proxy can be configured to limit the POST body size which will mitigate this issue.
+cvss_v3: 7.5
+patched_versions:
+  - "~> 2.0.9, >= 2.0.9.3"
+  - "~> 2.1.4, >= 2.1.4.3"
+  - "~> 2.2.6, >= 2.2.6.3"
+  - ">= 3.0.4.2"
diff --git a/gems/rack/CVE-2023-27539.yml b/gems/rack/CVE-2023-27539.yml
new file mode 100644
index 0000000000..69807a4852
--- /dev/null
+++ b/gems/rack/CVE-2023-27539.yml
@@ -0,0 +1,20 @@
+---
+gem: rack
+cve: 2023-27539
+ghsa: c6qg-cjj8-47qp
+url: https://discuss.rubyonrails.org/t/cve-2023-27539-possible-denial-of-service-vulnerability-in-racks-header-parsing/82466
+title: Possible Denial of Service Vulnerability in Rack’s header parsing
+date: 2023-03-13
+description: |
+  There is a denial of service vulnerability in the header parsing component of Rack. This vulnerability has been assigned the CVE identifier CVE-2023-27539.
+
+  Versions Affected: >= 2.0.0 Not affected: None. Fixed Versions: 2.2.6.4, 3.0.6.1
+
+  # Impact
+  Carefully crafted input can cause header parsing in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that parse headers using Rack (virtually all Rails applications) are impacted.
+
+  # Workarounds
+  Setting Regexp.timeout in Ruby 3.2 is a possible workaround.
+patched_versions:
+  - "~> 2.0, >= 2.2.6.4"
+  - ">= 3.0.6.1"
diff --git a/gems/rack/CVE-2024-25126.yml b/gems/rack/CVE-2024-25126.yml
new file mode 100644
index 0000000000..d4f0d2b36b
--- /dev/null
+++ b/gems/rack/CVE-2024-25126.yml
@@ -0,0 +1,59 @@
+---
+gem: rack
+cve: 2024-25126
+ghsa: 22f2-v57c-j9cx
+url: https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941
+title: Denial of Service Vulnerability in Rack Content-Type Parsing
+date: 2024-02-21
+description: |
+  There is a possible denial of service vulnerability in the content type
+  parsing component of Rack. This vulnerability has been assigned the CVE
+  identifier CVE-2024-25126.
+
+  Versions Affected: >= 0.4 Not affected: < 0.4 Fixed Versions: 3.0.9.1, 2.2.8.1
+
+  # Impact
+
+  Carefully crafted content type headers can cause Rack’s media type parser to
+  take much longer than expected, leading to a possible denial of service
+  vulnerability.
+
+  Impacted code will use Rack’s media type parser to parse content type headers.
+  This code will look like below:
+
+  ```
+  request.media_type
+
+  ## OR
+  request.media_type_params
+
+  ## OR
+  Rack::MediaType.type(content_type)
+  ```
+
+  Some frameworks (including Rails) call this code internally, so upgrading is
+  recommended!
+
+  All users running an affected release should either upgrade or use one of the
+  workarounds immediately.
+
+  # Releases
+
+  The fixed releases are available at the normal locations.
+
+  # Workarounds
+
+  There are no feasible workarounds for this issue.
+cvss_v3: 5.3
+unaffected_versions:
+  - "< 0.4"
+patched_versions:
+  - "~> 2.2.8, >= 2.2.8.1"
+  - ">= 3.0.9.1"
+related:
+  url:
+    - https://github.com/rack/rack/releases/tag/v3.0.9.1
+    - https://github.com/rack/rack/releases/tag/v2.2.8.1
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-25126
+    - https://access.redhat.com/security/cve/cve-2024-25126
+    - https://ubuntu.com/security/CVE-2024-25126
diff --git a/gems/rack/CVE-2024-26141.yml b/gems/rack/CVE-2024-26141.yml
new file mode 100644
index 0000000000..ea34ecd9b2
--- /dev/null
+++ b/gems/rack/CVE-2024-26141.yml
@@ -0,0 +1,41 @@
+---
+gem: rack
+cve: 2024-26141
+ghsa: xj5v-6v4g-jfw6
+url: https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944
+title: Possible DoS Vulnerability with Range Header in Rack
+date: 2024-02-21
+description: |
+  There is a possible DoS vulnerability relating to the Range request header in
+  Rack. This vulnerability has been assigned the CVE identifier CVE-2024-26141.
+
+  Versions Affected: >= 1.3.0. Not affected: < 1.3.0 Fixed Versions: 3.0.9.1, 2.2.8.1
+
+  # Impact
+
+  Carefully crafted Range headers can cause a server to respond with an
+  unexpectedly large response. Responding with such large responses could lead
+  to a denial of service issue.
+
+  Vulnerable applications will use the `Rack::File` middleware or the
+  `Rack::Utils.byte_ranges` methods (this includes Rails applications).
+
+  # Releases
+
+  The fixed releases are available at the normal locations.
+
+  # Workarounds
+
+  There are no feasible workarounds for this issue.
+unaffected_versions:
+  - "< 1.3.0"
+patched_versions:
+  - "~> 2.2.8, >= 2.2.8.1"
+  - ">= 3.0.9.1"
+related:
+  url:
+    - https://github.com/rack/rack/releases/tag/v3.0.9.1
+    - https://github.com/rack/rack/releases/tag/v2.2.8.1
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-25141
+    - https://access.redhat.com/security/cve/cve-2024-26141
+    - https://ubuntu.com/security/CVE-2024-26141
diff --git a/gems/rack/CVE-2024-26146.yml b/gems/rack/CVE-2024-26146.yml
new file mode 100644
index 0000000000..6aa0896c5a
--- /dev/null
+++ b/gems/rack/CVE-2024-26146.yml
@@ -0,0 +1,42 @@
+---
+gem: rack
+cve: 2024-26146
+ghsa: 54rr-7fvw-6x8f
+url: https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942
+title: Possible Denial of Service Vulnerability in Rack Header Parsing
+date: 2024-02-21
+description: |
+  There is a possible denial of service vulnerability in the header parsing
+  routines in Rack. This vulnerability has been assigned the CVE identifier
+  CVE-2024-26146.
+
+  Versions Affected: All. Not affected: None Fixed Versions: 2.0.9.4, 2.1.4.4, 2.2.8.1, 3.0.9.1
+
+  # Impact
+
+  Carefully crafted headers can cause header parsing in Rack to take longer than
+  expected resulting in a possible denial of service issue. `Accept` and
+  `Forwarded` headers are impacted.
+
+  Ruby 3.2 has mitigations for this problem, so Rack applications using
+  Ruby 3.2 or newer are unaffected.
+
+  # Releases
+
+  The fixed releases are available at the normal locations.
+
+  # Workarounds
+
+  There are no feasible workarounds for this issue.
+patched_versions:
+  - "~> 2.0.9, >= 2.0.9.4"
+  - "~> 2.1.4, >= 2.1.4.4"
+  - "~> 2.2.8, >= 2.2.8.1"
+  - ">= 3.0.9.1"
+related:
+  url:
+    - https://github.com/rack/rack/releases/tag/v3.0.9.1
+    - https://github.com/rack/rack/releases/tag/v2.2.8.1
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-26146
+    - https://access.redhat.com/security/cve/cve-2024-26146
+    - https://ubuntu.com/security/CVE-2024-26146
diff --git a/gems/rack/CVE-2024-39316.yml b/gems/rack/CVE-2024-39316.yml
new file mode 100644
index 0000000000..36ceaf08e8
--- /dev/null
+++ b/gems/rack/CVE-2024-39316.yml
@@ -0,0 +1,34 @@
+---
+gem: rack
+cve: 2024-39316
+ghsa: cj83-2ww7-mvq7
+url: https://github.com/rack/rack/security/advisories/GHSA-cj83-2ww7-mvq7
+title: Rack ReDoS Vulnerability in HTTP Accept Headers Parsing
+date: 2024-07-03
+description: |
+  ### Summary
+
+  A Regular Expression Denial of Service (ReDoS) vulnerability exists
+  in the `Rack::Request::Helpers` module when parsing HTTP Accept headers.
+  This vulnerability can be exploited by an attacker sending specially
+  crafted `Accept-Encoding` or `Accept-Language` headers, causing the
+  server to spend excessive time processing the request and leading
+  to a Denial of Service (DoS).
+
+  ### Details
+
+  The fix for https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f
+  was not applied to the main branch and thus while the issue was fixed
+  for the Rack v3.0 release series, it was not fixed in the v3.1
+  release series until v3.1.5.
+cvss_v3: 6.5
+unaffected_versions:
+  - "< 3.1.0"
+patched_versions:
+  - ">= 3.1.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-39316
+    - https://github.com/rack/rack/security/advisories/GHSA-cj83-2ww7-mvq7
+    - https://github.com/rack/rack/commit/412c980450ca729ee37f90a2661f166a9665e058
+    - https://github.com/advisories/GHSA-cj83-2ww7-mvq7
diff --git a/gems/rack/CVE-2025-25184.yml b/gems/rack/CVE-2025-25184.yml
new file mode 100644
index 0000000000..88d8728eed
--- /dev/null
+++ b/gems/rack/CVE-2025-25184.yml
@@ -0,0 +1,48 @@
+---
+gem: rack
+cve: 2025-25184
+ghsa: 7g2v-jj9q-g3rg
+url: https://github.com/rack/rack/security/advisories/GHSA-7g2v-jj9q-g3rg
+title: Possible Log Injection in Rack::CommonLogger
+date: 2025-02-12
+description: |
+  ## Summary
+
+  `Rack::CommonLogger` can be exploited by crafting input that includes
+  newline characters to manipulate log entries. The supplied
+  proof-of-concept demonstrates injecting malicious content into logs.
+
+  ## Details
+
+  When a user provides the authorization credentials via
+  `Rack::Auth::Basic`, if success, the username will be put in
+  `env['REMOTE_USER']` and later be used by `Rack::CommonLogger`
+  for logging purposes.
+
+  The issue occurs when a server intentionally or unintentionally
+  allows a user creation with the username contain CRLF and white
+  space characters, or the server just want to log every login
+  attempts. If an attacker enters a username with CRLF character,
+  the logger will log the malicious username with CRLF characters
+  into the logfile.
+
+  ## Impact
+
+  Attackers can break log formats or insert fraudulent entries,
+  potentially obscuring real activity or injecting malicious data
+  into log files.
+
+  ## Mitigation
+
+  - Update to the latest version of Rack.
+cvss_v4: 5.7
+patched_versions:
+  - "~> 2.2.11"
+  - "~> 3.0.12"
+  - ">= 3.1.10"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-25184
+    - https://github.com/rack/rack/security/advisories/GHSA-7g2v-jj9q-g3rg
+    - https://github.com/rack/rack/commit/074ae244430cda05c27ca91cda699709cfb3ad8e
+    - https://github.com/advisories/GHSA-7g2v-jj9q-g3rg
diff --git a/gems/rack/CVE-2025-27111.yml b/gems/rack/CVE-2025-27111.yml
new file mode 100644
index 0000000000..d55d1e496b
--- /dev/null
+++ b/gems/rack/CVE-2025-27111.yml
@@ -0,0 +1,43 @@
+---
+gem: rack
+cve: 2025-27111
+ghsa: 8cgq-6mh2-7j6v
+url: https://github.com/rack/rack/security/advisories/GHSA-8cgq-6mh2-7j6v
+title: Escape Sequence Injection vulnerability in
+  Rack lead to Possible Log Injection
+date: 2025-03-04
+description: |
+  ## Summary
+
+  `Rack::Sendfile` can be exploited by crafting input that
+  includes newline characters to manipulate log entries.
+
+  ## Details
+
+  The `Rack::Sendfile` middleware logs unsanitized header values from
+  the `X-Sendfile-Type` header. An attacker can exploit this by
+  injecting escape sequences (such as newline characters) into the
+  header, resulting in log injection.
+
+  ## Impact
+
+  This vulnerability can distort log files, obscure
+  attack traces, and complicate security auditing.
+
+  ## Mitigation
+
+  - Update to the latest version of Rack, or
+  - Remove usage of `Rack::Sendfile`.
+cvss_v4: 6.9
+patched_versions:
+  - "~> 2.2.12"
+  - "~> 3.0.13"
+  - ">= 3.1.11"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-27111
+    - https://github.com/rack/rack/security/advisories/GHSA-8cgq-6mh2-7j6v
+    - https://github.com/rack/rack/commit/803aa221e8302719715e224f4476e438f2531a53
+    - https://github.com/rack/rack/commit/aeac570bb8080ca7b53b7f2e2f67498be7ebd30b
+    - https://github.com/rack/rack/commit/b13bc6bfc7506aca3478dc5ac1c2ec6fc53f82a3
+    - https://github.com/advisories/GHSA-8cgq-6mh2-7j6v
diff --git a/gems/rack/CVE-2025-27610.yml b/gems/rack/CVE-2025-27610.yml
new file mode 100644
index 0000000000..4615bc93ca
--- /dev/null
+++ b/gems/rack/CVE-2025-27610.yml
@@ -0,0 +1,37 @@
+---
+gem: rack
+cve: 2025-27610
+ghsa: 7wqh-767x-r66v
+url: https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v
+title: Local File Inclusion in Rack::Static
+date: 2025-03-10
+description: |-
+  ## Summary
+
+  `Rack::Static` can serve files under the specified `root:` even if `urls:` are provided, which may expose other files under the specified `root:` unexpectedly.
+
+  ## Details
+
+  The vulnerability occurs because `Rack::Static` does not properly sanitize user-supplied paths before serving files. Specifically, encoded path traversal sequences are not correctly validated, allowing attackers to access files outside the designated static file directory.
+
+  ## Impact
+
+  By exploiting this vulnerability, an attacker can gain access to all files under the specified `root:` directory, provided they are able to determine then path of the file.
+
+  ## Mitigation
+
+  - Update to the latest version of Rack, or
+  - Remove usage of `Rack::Static`, or
+  - Ensure that `root:` points at a directory path which only contains files which should be accessed publicly.
+
+  It is likely that a CDN or similar static file server would also mitigate the issue.
+cvss_v3: 7.5
+patched_versions:
+- "~> 2.2.13"
+- "~> 3.0.14"
+- ">= 3.1.12"
+related:
+  url:
+  - https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v
+  - https://github.com/rack/rack/commit/50caab74fa01ee8f5dbdee7bb2782126d20c6583
+  - https://github.com/advisories/GHSA-7wqh-767x-r66v
diff --git a/gems/rack/CVE-2025-32441.yml b/gems/rack/CVE-2025-32441.yml
new file mode 100644
index 0000000000..c7c7615f20
--- /dev/null
+++ b/gems/rack/CVE-2025-32441.yml
@@ -0,0 +1,57 @@
+---
+gem: rack
+cve: 2025-32441
+ghsa: vpfw-47h7-xj4g
+url: https://github.com/rack/rack-session/security/advisories/GHSA-9j94-67jr-4cqj
+title: Rack session gets restored after deletion
+date: 2025-05-08
+description: |
+  ### Summary
+
+  When using the `Rack::Session::Pool` middleware, simultaneous rack
+  requests can restore a deleted rack session, which allows the
+  unauthenticated user to occupy that session.
+
+  ### Details
+
+  [Rack session middleware](https://github.com/rack/rack/blob/v2.2.13/lib/rack/session/abstract/id.rb#L263-L270)
+  prepares the session at the beginning of request, then saves is back
+  to the store with possible changes applied by host rack application.
+  This way the session becomes to be a subject of race conditions in
+  general sense over concurrent rack requests.
+
+  ### Impact
+
+  When using the `Rack::Session::Pool` middleware, and provided the
+  attacker can acquire a session cookie (already a major issue), the
+  session may be restored if the attacker can trigger a long running
+  request (within that same session) adjacent to the user logging out,
+  in order to retain illicit access even after a user has attempted to logout.
+
+  ## Mitigation
+
+  - Update to the latest version of `rack`, or
+  - Ensure your application invalidates sessions atomically by marking
+    them as logged out e.g., using a `logged_out` flag, instead of
+    deleting them, and check this flag on every request to prevent reuse, or
+  - Implement a custom session store that tracks session invalidation
+    timestamps and refuses to accept session data if the session was
+    invalidated after the request began.
+
+  ### Related
+
+  As this code was moved to `rack-session` in Rack 3+, see
+  <https://github.com/rack/rack-session/security/advisories/GHSA-9j94-67jr-4cqj>
+  for the equivalent advisory in `rack-session` (affecting Rack 3+ only).
+cvss_v3: 4.2
+patched_versions:
+  - ">= 2.2.14"
+related:
+  ghsa:
+    - https://github.com/rack/rack-session/security/advisories/GHSA-9j94-67jr-4cqj
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-32441
+    - https://github.com/rack/rack/security/advisories/GHSA-vpfw-47h7-xj4g
+    - https://github.com/rack/rack/commit/c48e52f7c57e99e1e1bf54c8760d4f082cd1c89d
+    - https://github.com/rack/rack/blob/v2.2.13/lib/rack/session/abstract/id.rb#L263-L270
+    - https://github.com/advisories/GHSA-vpfw-47h7-xj4g
diff --git a/gems/rack/CVE-2025-46727.yml b/gems/rack/CVE-2025-46727.yml
new file mode 100644
index 0000000000..bc30a52735
--- /dev/null
+++ b/gems/rack/CVE-2025-46727.yml
@@ -0,0 +1,53 @@
+---
+gem: rack
+cve: 2025-46727
+ghsa: gjh7-p2fx-99vx
+url: https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx
+title: Rack has an Unbounded-Parameter DoS in Rack::QueryParser
+date: 2025-05-08
+description: |
+  ## Summary
+
+  `Rack::QueryParser` parses query strings and
+  `application/x-www-form-urlencoded` bodies into Ruby data structures
+  without imposing any limit on the number of parameters, allowing
+  attackers to send requests with extremely large numbers of parameters.
+
+  ## Details
+
+  The vulnerability arises because `Rack::QueryParser` iterates over
+  each `&`-separated key-value pair and adds it to a Hash without
+  enforcing an upper bound on the total number of parameters. This
+  allows an attacker to send a single request containing hundreds of
+  thousands (or more) of parameters, which consumes excessive memory
+  and CPU during parsing.
+
+  ## Impact
+
+  An attacker can trigger denial of service by sending specifically
+  crafted HTTP requests, which can cause memory exhaustion or pin CPU
+  resources, stalling or crashing the Rack server. This results in
+  full service disruption until the affected worker is restarted.
+
+  ## Mitigation
+
+  - Update to a version of Rack that limits the number of parameters parsed, or
+  - Use middleware to enforce a maximum query string size or parameter count, or
+  - Employ a reverse proxy (such as Nginx) to limit request sizes and
+    reject oversized query strings or bodies.
+
+  Limiting request body sizes and query string lengths at the web
+  server or CDN level is an effective mitigation.
+cvss_v3: 7.5
+patched_versions:
+  - "~> 2.2.14"
+  - "~> 3.0.16"
+  - ">= 3.1.14"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-46727
+    - https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx
+    - https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712
+    - https://github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3
+    - https://github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74
+    - https://github.com/advisories/GHSA-gjh7-p2fx-99vx
diff --git a/gems/rack/CVE-2025-49007.yml b/gems/rack/CVE-2025-49007.yml
new file mode 100644
index 0000000000..e1a23c1cd6
--- /dev/null
+++ b/gems/rack/CVE-2025-49007.yml
@@ -0,0 +1,39 @@
+---
+gem: rack
+cve: 2025-49007
+ghsa: 47m2-26rw-j2jw
+url: https://github.com/rack/rack/security/advisories/GHSA-47m2-26rw-j2jw
+title: ReDoS Vulnerability in Rack::Multipart handle_mime_head
+date: 2025-06-05
+description: |
+  ### Summary
+
+  There is a denial of service vulnerability in the
+  Content-Disposition parsing component of Rack. This is very
+  similar to the previous security issue CVE-2022-44571.
+
+  ### Details
+
+  Carefully crafted input can cause Content-Disposition header
+  parsing in Rack to take an unexpected amount of time, possibly
+  resulting in a denial of service attack vector. This header is
+  used typically used in multipart parsing. Any applications that
+  parse multipart posts using Rack (virtually all Rails applications)
+  are impacted.
+
+  ### Credits
+
+  Thanks to [scyoon](https://hackerone.com/scyoon) for reporting
+  this to the Rails security team
+cvss_v4: 6.6
+unaffected_versions:
+  - "< 3.1.0"
+patched_versions:
+  - ">= 3.1.16"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-49007
+    - https://github.com/rack/rack/security/advisories/GHSA-47m2-26rw-j2jw
+    - https://github.com/rack/rack/commit/4795831a0a310c2d31102749e551b38faab6401f
+    - https://github.com/rack/rack/commit/aed514df37e33907df3c971ed3ca9a0a20ac2901
+    - https://github.com/advisories/GHSA-47m2-26rw-j2jw
diff --git a/gems/rails-html-sanitizer/CVE-2015-7578.yml b/gems/rails-html-sanitizer/CVE-2015-7578.yml
index e86db5d8ff..1e325476b5 100644
--- a/gems/rails-html-sanitizer/CVE-2015-7578.yml
+++ b/gems/rails-html-sanitizer/CVE-2015-7578.yml
@@ -43,4 +43,4 @@ description: |
   Thanks to Ben Murphy and Marien for reporting this.
 cvss_v3: 6.1
 patched_versions:
-- ">= 1.0.3"
+  - ">= 1.0.3"
diff --git a/gems/rails-html-sanitizer/CVE-2015-7579.yml b/gems/rails-html-sanitizer/CVE-2015-7579.yml
index 9bbdca2e22..e2ace6604f 100644
--- a/gems/rails-html-sanitizer/CVE-2015-7579.yml
+++ b/gems/rails-html-sanitizer/CVE-2015-7579.yml
@@ -67,7 +67,7 @@ description: |
   reporting the problem and working with us to fix it.
 cvss_v3: 6.1
 unaffected_versions:
-- "~> 1.0.0"
-- "~> 1.0.1"
+  - "~> 1.0.0"
+  - "~> 1.0.1"
 patched_versions:
-- ">= 1.0.3"
+  - ">= 1.0.3"
diff --git a/gems/rails-html-sanitizer/CVE-2015-7580.yml b/gems/rails-html-sanitizer/CVE-2015-7580.yml
index 63e01ab4e5..ac0b52f16d 100644
--- a/gems/rails-html-sanitizer/CVE-2015-7580.yml
+++ b/gems/rails-html-sanitizer/CVE-2015-7580.yml
@@ -66,4 +66,4 @@ description: |
   Thanks to Arnaud Germis, Nate Clark, and John Colvin for reporting this issue.
 cvss_v3: 6.1
 patched_versions:
-- ">= 1.0.3"
+  - ">= 1.0.3"
diff --git a/gems/rails-html-sanitizer/CVE-2018-3741.yml b/gems/rails-html-sanitizer/CVE-2018-3741.yml
index 001943ff36..a916f455a7 100644
--- a/gems/rails-html-sanitizer/CVE-2018-3741.yml
+++ b/gems/rails-html-sanitizer/CVE-2018-3741.yml
@@ -12,10 +12,11 @@ description: |
   on target applications.
 
   This issue is similar to CVE-2018-8048 in Loofah.
+cvss_v3: 6.1
 patched_versions:
-- '>= 1.0.4'
+  - ">= 1.0.4"
 related:
   cve:
-  - 2018-8048
+    - 2018-8048
   url:
-  - https://github.com/rails/rails-html-sanitizer/commit/f3ba1a839a35f2ba7f941c15e239a1cb379d56ae
+    - https://github.com/rails/rails-html-sanitizer/commit/f3ba1a839a35f2ba7f941c15e239a1cb379d56ae
diff --git a/gems/rails-html-sanitizer/CVE-2022-23517.yml b/gems/rails-html-sanitizer/CVE-2022-23517.yml
new file mode 100644
index 0000000000..c0df40182d
--- /dev/null
+++ b/gems/rails-html-sanitizer/CVE-2022-23517.yml
@@ -0,0 +1,22 @@
+---
+gem: rails-html-sanitizer
+cve: 2022-23517
+ghsa: 5x79-w82f-gw8w
+url: https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-5x79-w82f-gw8w
+title: "Inefficient Regular Expression Complexity in rails-html-sanitizer"
+date: 2022-12-13
+description: |
+  ## Summary
+
+  Certain configurations of rails-html-sanitizer `< 1.4.4` use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption.
+
+  ## Mitigation
+
+  Upgrade to rails-html-sanitizer `>= 1.4.4`.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 1.4.4"
+related:
+  url:
+    - https://cwe.mitre.org/data/definitions/1333.html
+    - https://hackerone.com/reports/1684163
diff --git a/gems/rails-html-sanitizer/CVE-2022-23518.yml b/gems/rails-html-sanitizer/CVE-2022-23518.yml
new file mode 100644
index 0000000000..f8484ec51a
--- /dev/null
+++ b/gems/rails-html-sanitizer/CVE-2022-23518.yml
@@ -0,0 +1,26 @@
+---
+gem: rails-html-sanitizer
+cve: 2022-23518
+ghsa: mcvf-2q2m-x72m
+url: https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-mcvf-2q2m-x72m
+title: "Improper neutralization of data URIs may allow XSS in rails-html-sanitizer"
+date: 2022-12-13
+description: |
+  ## Summary
+
+  rails-html-sanitizer `>= 1.0.3, < 1.4.4` is vulnerable to cross-site scripting via data URIs when used in combination with Loofah `>= 2.1.0`.
+
+  ## Mitigation
+
+  Upgrade to rails-html-sanitizer `>= 1.4.4`.
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 1.0.3"
+patched_versions:
+  - ">= 1.4.4"
+related:
+  url:
+    - https://cwe.mitre.org/data/definitions/79.html
+    - https://github.com/w3c/svgwg/issues/266
+    - https://github.com/rails/rails-html-sanitizer/issues/135
+    - https://hackerone.com/reports/1694173
diff --git a/gems/rails-html-sanitizer/CVE-2022-23519.yml b/gems/rails-html-sanitizer/CVE-2022-23519.yml
new file mode 100644
index 0000000000..2194fbb61c
--- /dev/null
+++ b/gems/rails-html-sanitizer/CVE-2022-23519.yml
@@ -0,0 +1,76 @@
+---
+gem: rails-html-sanitizer
+cve: 2022-23519
+ghsa: 9h9g-93gc-623h
+url: https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-9h9g-93gc-623h
+title: Possible XSS vulnerability with certain configurations of rails-html-sanitizer
+date: 2022-12-13
+description: |
+  ## Summary
+
+  There is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer.
+
+  - Versions affected: ALL
+  - Not affected: NONE
+  - Fixed versions: 1.4.4
+
+  ## Impact
+
+  A possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags in either of the following ways:
+
+  - allow both "math" and "style" elements,
+  - or allow both "svg" and "style" elements
+
+  Code is only impacted if allowed tags are being overridden. Applications may be doing this in four different ways:
+
+  1. using application configuration:
+
+    ```ruby
+    # In config/application.rb
+    config.action_view.sanitized_allowed_tags = ["math", "style"]
+    # or
+    config.action_view.sanitized_allowed_tags = ["svg", "style"]
+    ```
+
+    see https://guides.rubyonrails.org/configuring.html#configuring-action-view
+
+  2. using a `:tags` option to the Action View helper `sanitize`:
+
+    ```
+    <%= sanitize @comment.body, tags: ["math", "style"] %>
+    <%# or %>
+    <%= sanitize @comment.body, tags: ["svg", "style"] %>
+    ```
+
+    see https://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-sanitize
+
+  3. using Rails::Html::SafeListSanitizer class method `allowed_tags=`:
+
+    ```ruby
+    # class-level option
+    Rails::Html::SafeListSanitizer.allowed_tags = ["math", "style"]
+    # or
+    Rails::Html::SafeListSanitizer.allowed_tags = ["svg", "style"]
+    ```
+
+  4. using a `:tags` options to the Rails::Html::SafeListSanitizer instance method `sanitize`:
+
+    ```ruby
+    # instance-level option
+    Rails::Html::SafeListSanitizer.new.sanitize(@article.body, tags: ["math", "style"])
+    # or
+    Rails::Html::SafeListSanitizer.new.sanitize(@article.body, tags: ["svg", "style"])
+    ```
+
+  All users overriding the allowed tags by any of the above mechanisms to include (("math" or "svg") and "style") should either upgrade or use one of the workarounds immediately.
+
+  ## Workarounds
+
+  Remove "style" from the overridden allowed tags, or remove "math" and "svg" from the overridden allowed tags.
+cvss_v3: 6.1
+patched_versions:
+  - ">= 1.4.4"
+related:
+  url:
+    - https://cwe.mitre.org/data/definitions/79.html
+    - https://hackerone.com/reports/1656627
diff --git a/gems/rails-html-sanitizer/CVE-2022-23520.yml b/gems/rails-html-sanitizer/CVE-2022-23520.yml
new file mode 100644
index 0000000000..42fb7564e3
--- /dev/null
+++ b/gems/rails-html-sanitizer/CVE-2022-23520.yml
@@ -0,0 +1,57 @@
+---
+gem: rails-html-sanitizer
+cve: 2022-23520
+ghsa: rrfc-7g8p-99q8
+url: https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-rrfc-7g8p-99q8
+title: Possible XSS vulnerability with certain configurations of rails-html-sanitizer
+date: 2022-12-13
+description: |
+  ## Summary
+
+  There is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. This is due to an incomplete fix of CVE-2022-32209.
+
+  - Versions affected: ALL
+  - Not affected: NONE
+  - Fixed versions: 1.4.4
+
+  ## Impact
+
+  A possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags to allow both "select" and "style" elements.
+
+  Code is only impacted if allowed tags are being overridden using either of the following two mechanisms:
+
+  1. Using the Rails configuration `config.action_view.sanitized_allow_tags=`:
+
+    ```ruby
+    # In config/application.rb
+    config.action_view.sanitized_allowed_tags = ["select", "style"]
+    ```
+
+    (see https://guides.rubyonrails.org/configuring.html#configuring-action-view)
+
+  2. Using the class method `Rails::Html::SafeListSanitizer.allowed_tags=`:
+
+    ```ruby
+    # class-level option
+    Rails::Html::SafeListSanitizer.allowed_tags = ["select", "style"]
+    ```
+
+  All users overriding the allowed tags by either of the above mechanisms to include both "select" and "style" should either upgrade or use one of the workarounds immediately.
+
+  NOTE: Code is _not_ impacted if allowed tags are overridden using either of the following mechanisms:
+
+  - the `:tags` option to the Action View helper method `sanitize`.
+  - the `:tags` option to the instance method `SafeListSanitizer#sanitize`.
+
+  ## Workarounds
+
+  Remove either "select" or "style" from the overridden allowed tags.
+cvss_v3: 6.1
+patched_versions:
+  - ">= 1.4.4"
+related:
+  cve:
+    - 2022-32209
+  url:
+    - https://cwe.mitre.org/data/definitions/79.html
+    - https://hackerone.com/reports/1654310
diff --git a/gems/rails-html-sanitizer/CVE-2022-32209.yml b/gems/rails-html-sanitizer/CVE-2022-32209.yml
new file mode 100644
index 0000000000..a5fae36a52
--- /dev/null
+++ b/gems/rails-html-sanitizer/CVE-2022-32209.yml
@@ -0,0 +1,62 @@
+---
+gem: rails-html-sanitizer
+cve: 2022-32209
+ghsa: pg8v-g4xq-hww9
+url: https://groups.google.com/g/rubyonrails-security/c/ce9PhUANQ6s
+title: Possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer
+date: 2022-06-09
+description: |
+  There is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer.
+  This vulnerability has been assigned the CVE identifier CVE-2022-32209.
+
+  Versions Affected: ALL
+  Not affected: NONE
+  Fixed Versions: v1.4.3
+
+  ## Impact
+
+  A possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer
+  may allow an attacker to inject content if the application developer has overridden
+  the sanitizer's allowed tags to allow both `select` and `style` elements.
+
+  Code is only impacted if allowed tags are being overridden. This may be done via
+  application configuration:
+
+  ```ruby
+  # In config/application.rb
+  config.action_view.sanitized_allowed_tags = ["select", "style"]
+  ```
+
+  see https://guides.rubyonrails.org/configuring.html#configuring-action-view
+
+  Or it may be done with a `:tags` option to the Action View helper `sanitize`:
+
+  ```
+  <%= sanitize @comment.body, tags: ["select", "style"] %>
+  ```
+
+  see https://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-sanitize
+
+  Or it may be done with Rails::Html::SafeListSanitizer directly:
+
+  ```ruby
+  # class-level option
+  Rails::Html::SafeListSanitizer.allowed_tags = ["select", "style"]
+  ```
+
+  or
+
+  ```ruby
+  # instance-level option
+  Rails::Html::SafeListSanitizer.new.sanitize(@article.body, tags: ["select", "style"])
+  ```
+
+  All users overriding the allowed tags by any of the above mechanisms to include
+  both "select" and "style" should either upgrade or use one of the workarounds immediately.
+
+  ## Workarounds
+
+  Remove either `select` or `style` from the overridden allowed tags.
+cvss_v3: 6.1
+patched_versions:
+  - ">= 1.4.3"
diff --git a/gems/rails-html-sanitizer/CVE-2024-53985.yml b/gems/rails-html-sanitizer/CVE-2024-53985.yml
new file mode 100644
index 0000000000..15548d8083
--- /dev/null
+++ b/gems/rails-html-sanitizer/CVE-2024-53985.yml
@@ -0,0 +1,132 @@
+---
+gem: rails-html-sanitizer
+framework: rails
+cve: 2024-53985
+ghsa: w8gc-x259-rc7x
+url: https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-w8gc-x259-rc7x
+title: rails-html-sanitizer has XSS vulnerability with certain configurations
+date: 2024-12-02
+description: |
+  ## Summary
+
+  There is a possible XSS vulnerability with certain configurations of
+  Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0 and
+  Nokogiri < 1.15.7, or 1.16.x < 1.16.8.
+
+  * Versions affected: 1.6.0
+  * Not affected: < 1.6.0
+  * Fixed versions: 1.6.1
+
+  Please note that the fix in v1.6.1 is to update the dependency on
+  Nokogiri to 1.15.7 or >= 1.16.8.
+
+  ## Impact
+
+  A possible XSS vulnerability with certain configurations of
+  Rails::HTML::Sanitizer may allow an attacker to inject content if
+  HTML5 sanitization is enabled and the application developer has
+  overridden the sanitizer's allowed tags in either of the following ways:
+
+  * allow both "math" and "style" elements
+  * or allow both "svg" and "style" elements
+
+  Code is only impacted if Rails is configured to use HTML5 sanitization,
+  please see documentation for
+  [`config.action_view.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-view-sanitizer-vendor)
+  and [`config.action_text.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-text-sanitizer-vendor)
+  for more information on these configuration options.
+
+  Code is only impacted if allowed tags are being overridden.
+  Applications may be doing this in a few different ways:
+
+  1. using application configuration to configure Action View
+     sanitizers' allowed tags:
+
+    ```ruby
+    # In config/application.rb
+    config.action_view.sanitized_allowed_tags = ["math", "style"]
+    # or
+    config.action_view.sanitized_allowed_tags = ["svg", "style"]
+    ```
+
+    see https://guides.rubyonrails.org/configuring.html#configuring-action-view
+
+  2. using a `:tags` option to the Action View helper `sanitize`:
+
+    ```
+    <= sanitize @comment.body, tags: ["math", "style"] >
+    <# or>
+    <= sanitize @comment.body, tags: ["svg", "style"] >
+    ```
+
+    see https://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-sanitize
+
+  3. setting Rails::HTML5::SafeListSanitizer class attribute `allowed_tags`:
+
+    ```ruby
+    # class-level option
+    Rails::HTML5::SafeListSanitizer.allowed_tags = ["math", "style"]
+    # or
+    Rails::HTML5::SafeListSanitizer.allowed_tags = ["svg", "style"]
+    ```
+
+    (note that this class may also be referenced as
+    `Rails::Html::SafeListSanitizer`)
+
+  4. using a `:tags` options to the Rails::HTML5::SafeListSanitizer
+     instance method `sanitize`:
+
+    ```ruby
+    # instance-level option
+    Rails::HTML5::SafeListSanitizer.new.sanitize(@article.body, tags: ["math", "style"])
+    # or
+    Rails::HTML5::SafeListSanitizer.new.sanitize(@article.body, tags: ["svg", "style"])
+    ```
+    (note that this class may also be referenced as `Rails::Html::SafeListSanitizer`)
+
+  5. setting ActionText::ContentHelper module attribute `allowed_tags`:
+
+    ```ruby
+    ActionText::ContentHelper.allowed_tags = ["math", "style"]
+    # or
+    ActionText::ContentHelper.allowed_tags = ["svg", "style"]
+    ```
+
+  All users overriding the allowed tags by any of the above mechanisms
+  to include (("math" or "svg") and "style") should either upgrade or
+  use one of the workarounds.
+
+  ## Workarounds
+
+  Any one of the following actions will work around this issue:
+
+  - Remove "style" from the overridden allowed tags,
+  - Or, remove "math" and "svg" from the overridden allowed tags,
+  - Or, downgrade sanitization to HTML4 (see documentation for
+    [`config.action_view.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-view-sanitizer-vendor)
+    and [`config.action_text.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-text-sanitizer-vendor)
+    for more information)
+  - Or, independently upgrade Nokogiri to v1.15.7 or >= 1.16.8.
+
+  ## References
+
+  - [CWE - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (4.9)](https://cwe.mitre.org/data/definitions/79.html)
+  - Original report: https://hackerone.com/reports/2503220
+
+  ## Credit
+
+  This vulnerability was responsibly reported by HackerOne user
+  [@taise](https://hackerone.com/taise?type=user).
+cvss_v4: 2.3
+unaffected_versions:
+  - "< 1.6.0"
+patched_versions:
+  - ">= 1.6.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-53985
+    - https://github.com/rails/rails-html-sanitizer/blob/v1.6.1/CHANGELOG.md
+    - https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-w8gc-x259-rc7x
+    - https://github.com/rails/rails-html-sanitizer/commit/b0220b8850d52199a15f83c472d175a4122dd7b1
+    - https://github.com/rails/rails-html-sanitizer/commit/cd18b0ef00aad1d4a9e1c5d860cd23f80f63c505
+    - https://github.com/advisories/GHSA-w8gc-x259-rc7x
diff --git a/gems/rails-html-sanitizer/CVE-2024-53986.yml b/gems/rails-html-sanitizer/CVE-2024-53986.yml
new file mode 100644
index 0000000000..0d31354c29
--- /dev/null
+++ b/gems/rails-html-sanitizer/CVE-2024-53986.yml
@@ -0,0 +1,117 @@
+---
+gem: rails-html-sanitizer
+framework: rails
+cve: 2024-53986
+ghsa: 638j-pmjw-jq48
+url: https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-638j-pmjw-jq48
+title: rails-html-sanitizer has XSS vulnerability with certain configurations
+date: 2024-12-02
+description: |
+  ## Summary
+
+  There is a possible XSS vulnerability with certain configurations of
+  Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0.
+
+  * Versions affected: 1.6.0
+  * Not affected: < 1.6.0
+  * Fixed versions: 1.6.1
+
+  ## Impact
+
+  A possible XSS vulnerability with certain configurations of
+  Rails::HTML::Sanitizer may allow an attacker to inject content if
+  HTML5 sanitization is enabled and the application developer has
+  overridden the sanitizer's allowed tags in the following way:
+
+  - the "math" and "style" elements are both explicitly allowed
+
+  Code is only impacted if Rails is configured to use HTML5 sanitization,
+  please see documentation for
+  [`config.action_view.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-view-sanitizer-vendor)
+  and [`config.action_text.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-text-sanitizer-vendor)
+  for more information on these configuration options.
+
+  The default configuration is to disallow these elements. Code is only
+  impacted if allowed tags are being overridden. Applications may be
+  doing this in a few different ways:
+
+  1. using application configuration to configure Action View sanitizers'
+     allowed tags:
+
+    ```ruby
+    # In config/application.rb
+    config.action_view.sanitized_allowed_tags = ["math", "style"]
+    ```
+
+    see https://guides.rubyonrails.org/configuring.html#configuring-action-view
+
+  2. using a `:tags` option to the Action View helper `sanitize`:
+
+    ```
+    <= sanitize @comment.body, tags: ["math", "style"]>
+    ```
+
+    see https://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-sanitize
+
+  3. setting Rails::HTML5::SafeListSanitizer class attribute `allowed_tags`:
+
+    ```ruby
+    # class-level option
+    Rails::HTML5::SafeListSanitizer.allowed_tags = ["math", "style"]
+    ```
+
+    (note that this class may also be referenced as
+    `Rails::Html::SafeListSanitizer`)
+
+  4. using a `:tags` options to the Rails::HTML5::SafeListSanitizer
+     instance method `sanitize`:
+
+    ```ruby
+    # instance-level option
+    Rails::HTML5::SafeListSanitizer.new.sanitize(@article.body, tags: ["math", "style"])
+    ```
+
+    (note that this class may also be referenced as
+     `Rails::Html::SafeListSanitizer`)
+
+  5. setting ActionText::ContentHelper module attribute `allowed_tags`:
+
+    ```ruby
+    ActionText::ContentHelper.allowed_tags = ["math", "style"]
+    ```
+
+  All users overriding the allowed tags by any of the above mechanisms
+  to include both "math" and "style" should either upgrade or use one
+  of the workarounds.
+
+  ## Workarounds
+
+  Any one of the following actions will work around this issue:
+
+  - Remove "math" or "style" from the overridden allowed tags,
+  - Or, downgrade sanitization to HTML4 (see documentation for
+    [`config.action_view.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-view-sanitizer-vendor)
+    and [`config.action_text.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-text-sanitizer-vendor)
+    for more information).
+
+  ## References
+
+  - [CWE - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (4.9)](https://cwe.mitre.org/data/definitions/79.html)
+  - Original report: https://hackerone.com/reports/2519941
+
+  ## Credit
+
+  This vulnerability was responsibly reported by So Sakaguchi (mokusou).
+cvss_v4: 2.3
+unaffected_versions:
+  - "< 1.6.0"
+patched_versions:
+  - ">= 1.6.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-53986
+    - https://hackerone.com/reports/2931636
+    - https://github.com/rails/rails-html-sanitizer/blob/v1.6.1/CHANGELOG.md
+    - https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-638j-pmjw-jq48
+    - https://github.com/rails/rails-html-sanitizer/commit/f02ffbb8465e73920b6de0da940f5530f855965e
+    - https://github.com/advisories/GHSA-638j-pmjw-jq48
diff --git a/gems/rails-html-sanitizer/CVE-2024-53987.yml b/gems/rails-html-sanitizer/CVE-2024-53987.yml
new file mode 100644
index 0000000000..a5596fbaad
--- /dev/null
+++ b/gems/rails-html-sanitizer/CVE-2024-53987.yml
@@ -0,0 +1,116 @@
+---
+gem: rails-html-sanitizer
+framework: rails
+cve: 2024-53987
+ghsa: 2x5m-9ch4-qgrr
+url: https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-2x5m-9ch4-qgrr
+title: rails-html-sanitizer has XSS vulnerability with certain configurations
+date: 2024-12-02
+description: |
+  ## Summary
+
+  There is a possible XSS vulnerability with certain configurations of
+  Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0.
+
+  * Versions affected: 1.6.0
+  * Not affected: < 1.6.0
+  * Fixed versions: 1.6.1
+
+  ## Impact
+
+  A possible XSS vulnerability with certain configurations of
+  Rails::HTML::Sanitizer may allow an attacker to inject content if
+  HTML5 sanitization is enabled and the application developer has
+  overridden the sanitizer's allowed tags in the following way:
+
+  - the "style" element is explicitly allowed
+  - the "svg" or "math" element is not allowed
+
+  Code is only impacted if Rails is configured to use HTML5 sanitization,
+  please see documentation for [`config.action_view.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-view-sanitizer-vendor)
+  and [`config.action_text.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-text-sanitizer-vendor)
+  for more information on these configuration options.
+
+  The default configuration is to disallow all of these elements. Code
+  is only impacted if allowed tags are being overridden. Applications
+  may be doing this in a few different ways:
+
+  1. using application configuration to configure Action View sanitizers'
+     allowed tags:
+
+    ```ruby
+    # In config/application.rb
+    config.action_view.sanitized_allowed_tags = ["style"]
+    ```
+
+    see https://guides.rubyonrails.org/configuring.html#configuring-action-view
+
+  2. using a `:tags` option to the Action View helper `sanitize`:
+
+    ```
+    <= sanitize @comment.body, tags: ["style"] >
+    ```
+
+    see https://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-sanitize
+
+  3. setting Rails::HTML5::SafeListSanitizer class attribute `allowed_tags`:
+
+    ```ruby
+    # class-level option
+    Rails::HTML5::SafeListSanitizer.allowed_tags = ["style"]
+    ```
+
+    (note that this class may also be referenced as
+    `Rails::Html::SafeListSanitizer`)
+
+  4. using a `:tags` options to the Rails::HTML5::SafeListSanitizer instance method `sanitize`:
+
+    ```ruby
+    # instance-level option
+    Rails::HTML5::SafeListSanitizer.new.sanitize(@article.body, tags: ["style"])
+    ```
+
+    (note that this class may also be referenced as
+    `Rails::Html::SafeListSanitizer`)
+
+  5. setting ActionText::ContentHelper module attribute `allowed_tags`:
+
+    ```ruby
+    ActionText::ContentHelper.allowed_tags = ["style"]
+    ```
+
+  All users overriding the allowed tags by any of the above mechanisms
+  to include "style" and omit "svg" or "math" should either upgrade
+  or use one of the workarounds.
+
+  ## Workarounds
+
+  Any one of the following actions will work around this issue:
+
+  - Remove "style" from the overridden allowed tags,
+  - Or, downgrade sanitization to HTML4 (see documentation for
+    [`config.action_view.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-view-sanitizer-vendor)
+    and [`config.action_text.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-text-sanitizer-vendor)
+    for more information).
+
+  ## References
+
+  - [CWE - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (4.9)](https://cwe.mitre.org/data/definitions/79.html)
+  - Original report: https://hackerone.com/reports/2519936
+
+  ## Credit
+
+  This vulnerability was responsibly reported by So Sakaguchi (mnokusou).
+cvss_v4: 2.3
+unaffected_versions:
+  - "< 1.6.0"
+patched_versions:
+  - ">= 1.6.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-53987
+    - https://hackerone.com/reports/2931639
+    - https://hackerone.com/reports/2931688
+    - https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-2x5m-9ch4-qgrr
+    - https://github.com/rails/rails-html-sanitizer/commit/f02ffbb8465e73920b6de0da940f5530f855965e
+    - https://github.com/advisories/GHSA-2x5m-9ch4-qgrr
diff --git a/gems/rails-html-sanitizer/CVE-2024-53988.yml b/gems/rails-html-sanitizer/CVE-2024-53988.yml
new file mode 100644
index 0000000000..3f155ae580
--- /dev/null
+++ b/gems/rails-html-sanitizer/CVE-2024-53988.yml
@@ -0,0 +1,125 @@
+---
+gem: rails-html-sanitizer
+framework: rails
+cve: 2024-53988
+ghsa: cfjx-w229-hgx5
+url: https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-cfjx-w229-hgx5
+title: rails-html-sanitizer has XSS vulnerability with certain configurations
+date: 2024-12-02
+description: |
+  ## Summary
+
+  There is a possible XSS vulnerability with certain configurations of
+  Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0.
+
+  * Versions affected: 1.6.0
+  * Not affected: < 1.6.0
+  * Fixed versions: 1.6.1
+
+  ## Impact
+
+  A possible XSS vulnerability with certain configurations of
+  Rails::HTML::Sanitizer may allow an attacker to inject content
+  if HTML5 sanitization is enabled and the application developer
+  has overridden the sanitizer's allowed tags in the following way:
+
+  - the "math", "mtext", "table", and "style" elements are allowed
+  - and either "mglyph" or "malignmark" are allowed
+
+  Code is only impacted if Rails is configured to use HTML5 sanitization,
+  please see documentation for [`config.action_view.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-view-sanitizer-vendor)
+  and [`config.action_text.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-text-sanitizer-vendor)
+  for more information on these configuration options.
+
+  The default configuration is to disallow all of these elements
+  except for "table". Code is only impacted if allowed tags are being
+  overridden. Applications may be doing this in a few different ways:
+
+  1. using application configuration to configure Action View sanitizers'
+     allowed tags:
+
+    ```ruby
+    # In config/application.rb
+    config.action_view.sanitized_allowed_tags = ["math", "mtext", "table", "style", "mglyph"]
+    # or
+    config.action_view.sanitized_allowed_tags = ["math", "mtext", "table", "style", "malignmark"]
+    ```
+
+    see https://guides.rubyonrails.org/configuring.html#configuring-action-view
+
+  2. using a `:tags` option to the Action View helper `sanitize`:
+
+    ```
+    <= sanitize @comment.body, tags: ["math", "mtext", "table", "style", "mglyph"] >
+    <# or >
+    <= sanitize @comment.body, tags: ["math", "mtext", "table", "style", "malignmark"] >
+    ```
+
+    see https://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-sanitize
+
+  3. setting Rails::HTML5::SafeListSanitizer class attribute `allowed_tags`:
+
+    ```ruby
+    # class-level option
+    Rails::HTML5::SafeListSanitizer.allowed_tags = ["math", "mtext", "table", "style", "mglyph"]
+    # or
+    Rails::HTML5::SafeListSanitizer.allowed_tags = ["math", "mtext", "table", "style", "malignmark"]
+    ```
+
+    (note that this class may also be referenced as
+    `Rails::Html::SafeListSanitizer`)
+
+  4. using a `:tags` options to the Rails::HTML5::SafeListSanitizer
+     instance method `sanitize`:
+
+    ```ruby
+    # instance-level option
+    Rails::HTML5::SafeListSanitizer.new.sanitize(@article.body, tags: ["math", "mtext", "table", "style", "mglyph"])
+    # or
+    Rails::HTML5::SafeListSanitizer.new.sanitize(@article.body, tags: ["math", "mtext", "table", "style", "malignmark"])
+    ```
+
+    (note that this class may also be referenced as
+    `Rails::Html::SafeListSanitizer`)
+
+  5. setting ActionText::ContentHelper module attribute `allowed_tags`:
+
+    ```ruby
+    ActionText::ContentHelper.allowed_tags = ["math", "mtext", "table", "style", "mglyph"]
+    # or
+    ActionText::ContentHelper.allowed_tags = ["math", "mtext", "table", "style", "malignmark"]
+    ```
+
+  All users overriding the allowed tags by any of the above mechanisms
+  to include ("math" and "mtext" and "table" and "style" and ("mglyph"
+  or "malignmark")) should either upgrade or use one of the workarounds.
+
+  ## Workarounds
+
+  Any one of the following actions will work around this issue:
+
+  - Remove "mglyph" and "malignmark" from the overridden allowed tags,
+  - Or, downgrade sanitization to HTML4 (see documentation for [`config.action_view.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-view-sanitizer-vendor)
+    and [`config.action_text.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-text-sanitizer-vendor)
+    for more information).
+
+  ## References
+
+  - [CWE - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (4.9)](https://cwe.mitre.org/data/definitions/79.html)
+  - Original report: https://hackerone.com/reports/2519936
+
+  ## Credit
+
+  This vulnerability was responsibly reported by So Sakaguchi (mokusou).
+cvss_v4: 2.3
+unaffected_versions:
+  - "< 1.6.0"
+patched_versions:
+  - ">= 1.6.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-53988
+    - https://hackerone.com/reports/2931710
+    - https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-cfjx-w229-hgx5
+    - https://github.com/rails/rails-html-sanitizer/commit/a0a3e8b76b696446ffc6bffcff3bc7b7c6393c72
+    - https://github.com/advisories/GHSA-cfjx-w229-hgx5
diff --git a/gems/rails-html-sanitizer/CVE-2024-53989.yml b/gems/rails-html-sanitizer/CVE-2024-53989.yml
new file mode 100644
index 0000000000..f73816b885
--- /dev/null
+++ b/gems/rails-html-sanitizer/CVE-2024-53989.yml
@@ -0,0 +1,115 @@
+---
+gem: rails-html-sanitizer
+framework: rails
+cve: 2024-53989
+ghsa: rxv5-gxqc-xx8g
+url: https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-rxv5-gxqc-xx8g
+title: rails-html-sanitizer has XSS vulnerability with certain configurations
+date: 2024-12-02
+description: |+
+  ## Summary
+
+  There is a possible XSS vulnerability with certain configurations of
+  Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0.
+
+  * Versions affected: 1.6.0
+  * Not affected: < 1.6.0
+  * Fixed versions: 1.6.1
+
+  ## Impact
+
+  A possible XSS vulnerability with certain configurations of
+  Rails::HTML::Sanitizer may allow an attacker to inject content if
+  HTML5 sanitization is enabled and the application developer has
+  overridden the sanitizer's allowed tags in the following way:
+
+  - the "noscript" element is explicitly allowed
+
+  Code is only impacted if Rails is configured to use HTML5 sanitization,
+  please see documentation for [`config.action_view.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-view-sanitizer-vendor)
+  and [`config.action_text.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-text-sanitizer-vendor)
+  for more information on these configuration options.
+
+  The default configuration is to disallow all of these elements. Code
+  is only impacted if allowed tags are being overridden. Applications
+  may be doing this in a few different ways:
+
+  1. using application configuration to configure Action View sanitizers'
+     allowed tags:
+
+    ```ruby
+    # In config/application.rb
+    config.action_view.sanitized_allowed_tags = ["noscript"]
+    ```
+
+    see https://guides.rubyonrails.org/configuring.html#configuring-action-view
+
+  2. using a `:tags` option to the Action View helper `sanitize`:
+
+    ```
+    <= sanitize @comment.body, tags: ["noscript"] >
+    ```
+
+    see https://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-sanitize
+
+  3. setting Rails::HTML5::SafeListSanitizer class attribute `allowed_tags`:
+
+    ```ruby
+    # class-level option
+    Rails::HTML5::SafeListSanitizer.allowed_tags = ["noscript"]
+    ```
+
+    (note that this class may also be referenced as
+    `Rails::Html::SafeListSanitizer`)
+
+  4. using a `:tags` options to the Rails::HTML5::SafeListSanitizer instance method `sanitize`:
+
+    ```ruby
+    # instance-level option
+    Rails::HTML5::SafeListSanitizer.new.sanitize(@article.body, tags: ["noscript"])
+    ```
+
+    (note that this class may also be referenced as
+    `Rails::Html::SafeListSanitizer`)
+
+  5. setting ActionText::ContentHelper module attribute `allowed_tags`:
+
+    ```ruby
+    ActionText::ContentHelper.allowed_tags = ["noscript"]
+    ```
+
+  All users overriding the allowed tags by any of the above
+  mechanisms to include "noscript" should either upgrade or use
+  one of the workarounds.
+
+  ## Workarounds
+
+  Any one of the following actions will work around this issue:
+
+  - Remove "noscript" from the overridden allowed tags,
+  - Or, downgrade sanitization to HTML4 (see documentation for
+    [`config.action_view.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-view-sanitizer-vendor)
+    and [`config.action_text.sanitizer_vendor`](https://guides.rubyonrails.org/configuring.html#config-action-text-sanitizer-vendor)
+    for more information).
+
+  ## References
+
+  - [CWE - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (4.9)](https://cwe.mitre.org/data/definitions/79.html)
+  - Original report: https://hackerone.com/reports/2509647
+
+  ## Credit
+
+  This vulnerability was responsibly reported by HackerOne user
+  [@taise](https://hackerone.com/taise?type=user).
+cvss_v4: 2.3
+unaffected_versions:
+  - "< 1.6.0"
+patched_versions:
+  - ">= 1.6.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-53989
+    - https://hackerone.com/reports/2931691
+    - https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-rxv5-gxqc-xx8g
+    - https://github.com/rails/rails-html-sanitizer/commit/16251735e36ebdc302e2f90f2a39cad56879414f
+    - https://github.com/advisories/GHSA-rxv5-gxqc-xx8g
diff --git a/gems/rails/CVE-2006-4111.yml b/gems/rails/CVE-2006-4111.yml
new file mode 100644
index 0000000000..23d910bc5a
--- /dev/null
+++ b/gems/rails/CVE-2006-4111.yml
@@ -0,0 +1,25 @@
+---
+gem: rails
+cve: 2006-4111
+ghsa: rvpq-5xqx-pfpp
+url: https://github.com/presidentbeef/rails-security-history/blob/master/vulnerabilities.md
+title: High severity vulnerability that affects rails
+date: 2017-10-24
+description: |
+  Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code
+  with "severe" or "serious" impact via a File Upload request with an HTTP header
+  that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.
+cvss_v2: 7.5
+unaffected_versions:
+  - "< 1.1.0"
+patched_versions:
+  - ">= 1.1.6"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2006-4111
+    - https://github.com/presidentbeef/rails-security-history/blob/master/vulnerabilities.md
+    - https://blog.evanweaver.com/2006/08/12/anatomy-of-an-attack-against-1-1-4
+    - https://rubyonrails.org/2006/8/10/rails-1-1-6-backports-and-full-disclosure
+    - http://weblog.rubyonrails.org/2006/8/9/rails-1-1-5-mandatory-security-patch-and-other-tidbits
+    - https://github.com/advisories/GHSA-rvpq-5xqx-pfpp
+    - http://www.gentoo.org/security/en/glsa/glsa-200608-20.xml
diff --git a/gems/rails/CVE-2006-4112.yml b/gems/rails/CVE-2006-4112.yml
new file mode 100644
index 0000000000..8d87450826
--- /dev/null
+++ b/gems/rails/CVE-2006-4112.yml
@@ -0,0 +1,30 @@
+---
+gem: rails
+framework: rails
+cve: 2006-4112
+ghsa: 9wrq-xvmp-xjc8
+url: https://exchange.xforce.ibmcloud.com/vulnerabilities/28364
+title: High severity vulnerability that affects rails.
+date: 2017-10-24
+description: |
+  Unspecified vulnerability in the "dependency resolution mechanism" in
+  Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby
+  code via a URL that is not properly handled in the routing code, which leads to
+  a denial of service (application hang) or "data loss," a different vulnerability
+  than CVE-2006-4111.
+cvss_v2: 7.5
+unaffected_versions:
+  - "< 1.1.0"
+patched_versions:
+  - ">= 1.1.6"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2006-4112
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/28364
+    - https://github.com/advisories/GHSA-9wrq-xvmp-xjc8
+    - http://weblog.rubyonrails.org/2006/8/10/rails-1-1-6-backports-and-full-disclosure
+    - https://github.com/presidentbeef/rails-security-history/blob/master/vulnerabilities.md
+    - https://blog.evanweaver.com/2006/08/12/anatomy-of-an-attack-against-1-1-4
+    - http://weblog.rubyonrails.org/2006/8/9/rails-1-1-5-mandatory-security-patch-and-other-tidbits
+    - http://www.gentoo.org/security/en/glsa/glsa-200608-20.xml
+    - http://www.kb.cert.org/vuls/id/699540
diff --git a/gems/rails/CVE-2007-3227.yml b/gems/rails/CVE-2007-3227.yml
new file mode 100644
index 0000000000..e057c7d52c
--- /dev/null
+++ b/gems/rails/CVE-2007-3227.yml
@@ -0,0 +1,25 @@
+---
+gem: rails
+framework: rails
+cve: 2007-3227
+ghsa: gm25-fpmr-43fj
+osvdb: 36378
+url: http://weblog.rubyonrails.org/2007/10/12/rails-1-2-5-maintenance-release
+title: Moderate severity vulnerability that affects rails
+date: 2017-10-24
+description: |
+  Cross-site scripting (XSS) vulnerability in the to_json (ActiveRecord::Base#to_json)
+  function in Ruby on Rails before edge 9606 allows remote attackers to inject arbitrary
+  web script via the input values.
+cvss_v2: 4.3
+patched_versions:
+  - ">= 1.2.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2007-3227
+    - http://weblog.rubyonrails.org/2007/10/12/rails-1-2-5-maintenance-release
+    - http://weblog.rubyonrails.org/2007/10/5/rails-1-2-4-maintenance-release
+    - https://github.com/advisories/GHSA-gm25-fpmr-43fj
+    - http://bugs.gentoo.org/show_bug.cgi?id=195315
+    - http://osvdb.org/36378
+    - http://security.gentoo.org/glsa/glsa-200711-17.xml
diff --git a/gems/rails/CVE-2007-5379.yml b/gems/rails/CVE-2007-5379.yml
new file mode 100644
index 0000000000..701cca79ac
--- /dev/null
+++ b/gems/rails/CVE-2007-5379.yml
@@ -0,0 +1,26 @@
+---
+gem: rails
+framework: rails
+cve: 2007-5379
+osvdb: 40717
+ghsa: fjfg-q662-gm6j
+url: http://weblog.rubyonrails.org/2007/10/5/rails-1-2-4-maintenance-release
+title: Moderate severity vulnerability that affects rails
+date: 2017-10-24
+description: |
+  Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers
+  and ActiveResource servers to determine the existence of arbitrary files and read
+  arbitrary XML files via the Hash.from_xml (Hash#from_xml) method, which uses XmlSimple
+  (XML::Simple) unsafely, as demonstrated by reading passwords from the Pidgin (Gaim)
+  .purple/accounts.xml file.
+cvss_v2: 5.0
+patched_versions:
+  - ">= 1.2.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2007-5379
+    - http://weblog.rubyonrails.org/2007/10/5/rails-1-2-4-maintenance-release
+    - https://github.com/advisories/GHSA-fjfg-q662-gm6j
+    - http://bugs.gentoo.org/show_bug.cgi?id=195315
+    - http://osvdb.org/40717
+    - http://security.gentoo.org/glsa/glsa-200711-17.xml
diff --git a/gems/rails/CVE-2007-5380.yml b/gems/rails/CVE-2007-5380.yml
new file mode 100644
index 0000000000..08fbc628d6
--- /dev/null
+++ b/gems/rails/CVE-2007-5380.yml
@@ -0,0 +1,22 @@
+---
+gem: rails
+framework: rails
+cve: 2007-5380
+ghsa: jwhv-rgqc-fqj5
+url: http://weblog.rubyonrails.org/2007/10/5/rails-1-2-4-maintenance-release
+title: Moderate severity vulnerability that affects rails
+date: 2017-10-24
+description: |
+  Session fixation vulnerability in Rails before 1.2.4, as used for Ruby
+  on Rails, allows remote attackers to hijack web sessions via unspecified vectors
+  related to "URL-based sessions."
+cvss_v2: 6.8
+patched_versions:
+  - ">= 1.2.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2007-5380
+    - http://weblog.rubyonrails.org/2007/10/5/rails-1-2-4-maintenance-release
+    - https://github.com/advisories/GHSA-jwhv-rgqc-fqj5
+    - http://bugs.gentoo.org/show_bug.cgi?id=195315
+    - http://security.gentoo.org/glsa/glsa-200711-17.xml
diff --git a/gems/rails/CVE-2007-6077.yml b/gems/rails/CVE-2007-6077.yml
new file mode 100644
index 0000000000..a3134121d1
--- /dev/null
+++ b/gems/rails/CVE-2007-6077.yml
@@ -0,0 +1,26 @@
+---
+gem: rails
+framework: rails
+cve: 2007-6077
+ghsa: p4c6-77gc-694x
+url: https://rubyonrails.org/2007/11/24/ruby-on-rails-1-2-6-security-and-maintenance-release
+title: Moderate severity vulnerability that affects rails
+date: 2017-10-24
+description: |
+  The session fixation protection mechanism in cgi_process.rb in
+  Rails 1.2.4, as used in Ruby on Rails, removes the :cookie_only
+  attribute from the DEFAULT_SESSION_OPTIONS constant, which
+  effectively causes cookie_only to be applied only to the first
+  instantiation of CgiRequest, which allows remote attackers to
+  conduct session fixation attacks.
+
+  NOTE: this is due to an incomplete fix for CVE-2007-5380.
+cvss_v2: 6.8
+patched_versions:
+  - ">= 1.2.6"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2007-6077
+    - http://weblog.rubyonrails.org/2007/11/24/ruby-on-rails-1-2-6-security-and-maintenance-release
+    - https://github.com/advisories/GHSA-p4c6-77gc-694x
+    - https://ubuntu.com/security/CVE-2007-6077
diff --git a/gems/rails/CVE-2008-5189.yml b/gems/rails/CVE-2008-5189.yml
new file mode 100644
index 0000000000..266e4e21b0
--- /dev/null
+++ b/gems/rails/CVE-2008-5189.yml
@@ -0,0 +1,23 @@
+---
+gem: rails
+framework: rails
+cve: 2008-5189
+ghsa: jmgf-p46x-982h
+url: http://weblog.rubyonrails.org/2008/10/19/rails-2-0-5-redirect_to-and-offset-limit-sanitizing
+title: Moderate severity vulnerability that affects rails
+date: 2017-10-24
+description: |
+  CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote
+  attackers to inject arbitrary HTTP headers and conduct HTTP response
+  splitting attacks via a crafted URL to the redirect_to function.
+cvss_v2: 5.0
+patched_versions:
+  - ">= 2.0.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2008-5189
+    - http://weblog.rubyonrails.org/2008/10/19/rails-2-0-5-redirect_to-and-offset-limit-sanitizing
+    - http://github.com/rails/rails/commit/7282ed863ca7e6f928bae9162c9a63a98775a19d
+    - http://weblog.rubyonrails.org/2008/10/19/response-splitting-risk
+    - http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html
+    - https://github.com/advisories/GHSA-jmgf-p46x-982h
diff --git a/gems/rails/CVE-2009-2422.yml b/gems/rails/CVE-2009-2422.yml
new file mode 100644
index 0000000000..94860f8d72
--- /dev/null
+++ b/gems/rails/CVE-2009-2422.yml
@@ -0,0 +1,29 @@
+---
+gem: rails
+framework: rails
+cve: 2009-2422
+ghsa: rxq3-gm4p-5fj4
+url: http://weblog.rubyonrails.org/2009/6/3/security-problem-with-authenticate_with_http_digest
+title: High Security Vulnerability with authenticate_with_http_digest of Rails
+date: 2009-07-10
+description: |
+  The example code for the digest authentication functionality
+  (http_authentication.rb) in Ruby on Rails before 2.3.3 defines
+  an authenticate_or_request_with_http_digest block that returns
+  nil instead of false when the user does not exist, which allows
+  context-dependent attackers to bypass authentication for
+  applications that are derived from this example by sending an
+  invalid username without a password.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - ">= 2.3.3"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2009-2422
+    - http://weblog.rubyonrails.org/2009/6/3/security-problem-with-authenticate_with_http_digest
+    - https://lists.apple.com/archives/security-announce/2010/Mar/msg00001.html
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/51528
+    - http://support.apple.com/kb/HT4077
+    - http://n8.tumblr.com/post/117477059/security-hole-found-in-rails-2-3s
+    - https://github.com/advisories/GHSA-rxq3-gm4p-5fj4
diff --git a/gems/rails/CVE-2009-4214.yml b/gems/rails/CVE-2009-4214.yml
new file mode 100644
index 0000000000..50a5dfdf17
--- /dev/null
+++ b/gems/rails/CVE-2009-4214.yml
@@ -0,0 +1,32 @@
+---
+gem: rails
+framework: rails
+cve: 2009-4214
+ghsa: 9p3v-wf2w-v29c
+url: http://weblog.rubyonrails.org/2009/11/30/ruby-on-rails-2-3-5-released
+title: Moderate severity XSS vulnerability that affects rails
+date: 2017-10-24
+description: |
+  Cross-site scripting (XSS) vulnerability in the strip_tags function
+  in Ruby on Rails before 2.2.s, and 2.3.x before 2.3.5, allows remote
+  attackers to inject arbitrary web script or HTML via vectors involving
+  non-printing ASCII characters,related to HTML::Tokenizer and
+  actionpack/lib/action_controller/vendor/html-scanner/html/node.rb.
+cvss_v2: 4.3
+patched_versions:
+  - "~> 2.2.2"
+  - ">= 2.3.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2009-4214
+    - http://weblog.rubyonrails.org/2009/11/30/ruby-on-rails-2-3-5-released
+    - https://groups.google.com/g/rubyonrails-security/c/TU9x8q70wKs
+    - http://github.com/rails/rails/commit/bfe032858077bb2946abe25e95e485ba6da86bd5
+    - https://github.com/advisories/GHSA-9p3v-wf2w-v29c
+    - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
+    - http://support.apple.com/kb/HT4077
+    - http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.htm
+    - http://www.debian.org/security/2011/dsa-2260
+    - http://www.debian.org/security/2011/dsa-2301
+    - http://www.openwall.com/lists/oss-security/2009/11/27/2
+    - http://www.openwall.com/lists/oss-security/2009/12/08/3
diff --git a/gems/rails/CVE-2014-0081.yml b/gems/rails/CVE-2014-0081.yml
new file mode 100644
index 0000000000..b7c6c8de47
--- /dev/null
+++ b/gems/rails/CVE-2014-0081.yml
@@ -0,0 +1,31 @@
+---
+gem: rails
+cve: 2014-0081
+ghsa: m46p-ggm5-5j83
+url: https://github.com/rails/rails/commit/08d0a11a3f62718d601d39e617c834759cf59bbb
+title: Rails vulnerable to Cross-site Scripting
+date: 2017-10-24
+description: |
+  Multiple cross-site scripting (XSS) vulnerabilities in
+  "actionview/lib/action_view/helpers/number_helper.rb"
+  in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2
+  allow remote attackers to inject arbitrary web script or HTML via the
+  (1) format, (2) negative_format, or (3) units parameter to the
+  (a) number_to_currency, (b) number_to_percentage, or (c) number_to_human helper.
+cvss_v2: 4.3
+patched_versions:
+  - "~> 3.2.17"
+  - "~> 4.0.3"
+  - "~> 4.1.0.beta2"
+  - ">= 4.1.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-0081
+    - http://lists.opensuse.org/opensuse-updates/2014-02/msg00081.html
+    - http://openwall.com/lists/oss-security/2014/02/18/8
+    - http://rhn.redhat.com/errata/RHSA-2014-0215.html
+    - http://rhn.redhat.com/errata/RHSA-2014-0306.html
+    - https://web.archive.org/web/20140911141416/http://www.securitytracker.com/id/1029782
+    - https://web.archive.org/web/20170307202606/http://www.securityfocus.com/bid/65647
+    - https://github.com/advisories/GHSA-m46p-ggm5-5j83
+    - https://github.com/rails/rails/commit/08d0a11a3f62718d601d39e617c834759cf59bbb
diff --git a/gems/rails_admin/CVE-2016-10522.yml b/gems/rails_admin/CVE-2016-10522.yml
index 599c9ed71f..c879c4a2b6 100644
--- a/gems/rails_admin/CVE-2016-10522.yml
+++ b/gems/rails_admin/CVE-2016-10522.yml
@@ -11,11 +11,12 @@ description: |
   an attacker could hypothetically gain access to the application administrative
   endpoints exposed by the gem.
 cvss_v2: 5.5
+cvss_v3: 8.8
 unaffected_versions:
-- < 1.0.0
+  - "< 1.0.0"
 patched_versions:
-- '>= 1.1.1'
+  - ">= 1.1.1"
 related:
   url:
-  - https://www.sourceclear.com/registry/security/cross-site-request-forgery-csrf-/ruby/sid-3173
-  - https://github.com/sferik/rails_admin/commit/b13e879eb93b661204e9fb5e55f7afa4f397537a
+    - https://www.sourceclear.com/registry/security/cross-site-request-forgery-csrf-/ruby/sid-3173
+    - https://github.com/sferik/rails_admin/commit/b13e879eb93b661204e9fb5e55f7afa4f397537a
diff --git a/gems/rails_admin/CVE-2017-12098.yml b/gems/rails_admin/CVE-2017-12098.yml
index 4013d9766b..a6eb8e6d8b 100644
--- a/gems/rails_admin/CVE-2017-12098.yml
+++ b/gems/rails_admin/CVE-2017-12098.yml
@@ -14,7 +14,7 @@ description: |
 cvss_v2: 4.3
 cvss_v3: 6.1
 patched_versions:
-- '>= 1.3.0'
+  - ">= 1.3.0"
 related:
   url:
-  - https://github.com/sferik/rails_admin/issues/2985
+    - https://github.com/sferik/rails_admin/issues/2985
diff --git a/gems/rails_admin/CVE-2020-36190.yml b/gems/rails_admin/CVE-2020-36190.yml
index e30d328e40..6f08c90351 100644
--- a/gems/rails_admin/CVE-2020-36190.yml
+++ b/gems/rails_admin/CVE-2020-36190.yml
@@ -10,5 +10,5 @@ description: |
   XSS via nested forms.
 cvss_v3: 6.1
 patched_versions:
-- ~> 1.4.3
-- '>= 2.0.2'
+  - "~> 1.4.3"
+  - ">= 2.0.2"
diff --git a/gems/rails_admin/CVE-2024-39308.yml b/gems/rails_admin/CVE-2024-39308.yml
new file mode 100644
index 0000000000..8c09c58c58
--- /dev/null
+++ b/gems/rails_admin/CVE-2024-39308.yml
@@ -0,0 +1,47 @@
+---
+gem: rails_admin
+cve: 2024-39308
+ghsa: 8qgm-g2vv-vwvc
+url: https://github.com/railsadminteam/rails_admin/security/advisories/GHSA-8qgm-g2vv-vwvc
+title: RailsAdmin Cross-site Scripting vulnerability in the list view
+date: 2024-07-08
+description: |
+  ### Impact
+  RailsAdmin list view has the XSS vulnerability, caused by
+  improperly-escaped HTML title attribute. The issue was originally
+  reported in https://github.com/railsadminteam/rails_admin/issues/3686.
+
+  ### Patches
+  Upgrade to [3.1.3](https://rubygems.org/gems/rails_admin/versions/3.1.3)
+  or [2.3.0](https://rubygems.org/gems/rails_admin/versions/2.3.0).
+
+  ### Workarounds
+  1. Copy the index view (located under the path
+     `app/views/rails_admin/main/index.html.erb`) from the RailsAdmin
+     version you use, and place it into your application by using
+     the same path.
+
+  2. Open the view file by an editor, and remove `strip_tags` from
+     the title attribute (as shown in GHSA advisory below).
+
+  **Note:** The view file created by this needs to be removed after
+  upgrading RailsAdmin afterwards, unless this old view continue to
+  be used. Only do this if you can't upgrade RailsAdmin now for a reason.
+
+  ### References
+  https://owasp.org/www-community/attacks/xss/
+  https://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-strip_tags
+cvss_v3: 6.8
+patched_versions:
+  - "~> 2.3.0"
+  - ">= 3.1.3"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-39308
+    - https://github.com/railsadminteam/rails_admin/security/advisories/GHSA-8qgm-g2vv-vwvc
+    - https://github.com/railsadminteam/rails_admin/issues/3686
+    - https://github.com/railsadminteam/rails_admin/commit/b5a287d82e2cbd1737a1a01e11ede2911cce7fef
+    - https://github.com/railsadminteam/rails_admin/commit/d84b39884059c4ed50197cec8522cca029a17673
+    - https://rubygems.org/gems/rails_admin/versions/2.3.0
+    - https://rubygems.org/gems/rails_admin/versions/3.1.3
+    - https://github.com/advisories/GHSA-8qgm-g2vv-vwvc
diff --git a/gems/rails_multisite/CVE-2021-41263.yml b/gems/rails_multisite/CVE-2021-41263.yml
index cb3e78b3d7..fb390e0f89 100644
--- a/gems/rails_multisite/CVE-2021-41263.yml
+++ b/gems/rails_multisite/CVE-2021-41263.yml
@@ -5,7 +5,7 @@ ghsa: 844m-cpr9-jcmh
 url: https://github.com/discourse/rails_multisite/security/advisories/GHSA-844m-cpr9-jcmh
 title: Secure/signed cookies share secrets between sites in a multi-site application
 date: 2021-11-15
-description: |-
+description: |
   ### Impact
   This vulnerability impacts any Rails applications using `rails_multisite` alongside Rails' signed/encrypted cookies. Depending on how the application makes use of these cookies, it may be possible for an attacker to re-use cookies on different 'sites' within a multi-site Rails application.
 
@@ -13,4 +13,4 @@ description: |-
   The issue has been patched in v4 of the `rails_multisite` gem. Note that this upgrade will invalidate all previous signed/encrypted cookies. The impact of this invalidation will vary based on the application architecture.
 cvss_v3: 6.2
 patched_versions:
-- ">= 4.0.0"
+  - ">= 4.0.0"
diff --git a/gems/railties/CVE-2019-5420.yml b/gems/railties/CVE-2019-5420.yml
index 599707451c..a2823f8134 100644
--- a/gems/railties/CVE-2019-5420.yml
+++ b/gems/railties/CVE-2019-5420.yml
@@ -41,7 +41,7 @@ description: |
   Thanks to ooooooo_q
 cvss_v3: 9.8
 unaffected_versions:
-- < 5.2.0
+  - "< 5.2.0"
 patched_versions:
-- ~> 5.2.2, >= 5.2.2.1
-- '>= 6.0.0.beta3'
+  - "~> 5.2.2, >= 5.2.2.1"
+  - ">= 6.0.0.beta3"
diff --git a/gems/rake/CVE-2020-8130.yml b/gems/rake/CVE-2020-8130.yml
index 208d874b44..a5d521c0b7 100644
--- a/gems/rake/CVE-2020-8130.yml
+++ b/gems/rake/CVE-2020-8130.yml
@@ -12,4 +12,4 @@ description: |
 cvss_v2: 9.3
 cvss_v3: 8.1
 patched_versions:
-- '>= 12.3.3'
+  - ">= 12.3.3"
diff --git a/gems/random_password_generator/CVE-2019-25061.yml b/gems/random_password_generator/CVE-2019-25061.yml
new file mode 100644
index 0000000000..c0182da4d1
--- /dev/null
+++ b/gems/random_password_generator/CVE-2019-25061.yml
@@ -0,0 +1,17 @@
+---
+gem: random_password_generator
+cve: 2019-25061
+ghsa: ggfx-h9xj-5v9c
+url: https://github.com/bvsatyaram/random_password_generator/pull/1
+title: Insecure PRNG use in random_password_generator
+date: 2022-05-19
+description: |
+  The random_password_generator (aka RandomPasswordGenerator) gem through
+  1.0.0 for Ruby uses Kernel#rand to generate passwords, which, due to its cyclic
+  nature, can facilitate password prediction.
+cvss_v3: 7.5
+related:
+  url:
+    - https://github.com/bvsatyaram/random_password_generator/blob/2855e8d7d8803dbb580ddd6cf13846394eb4530e/lib/random_password_generator.rb#L23
+    - https://ruby-doc.org/core-3.1.2/Random.html
+    - https://stackoverflow.com/questions/42170239/security-of-rand-in-ruby-compared-to-other-methods/42170560
diff --git a/gems/rbovirt/CVE-2014-0036.yml b/gems/rbovirt/CVE-2014-0036.yml
index 660f72003f..811874ef5f 100644
--- a/gems/rbovirt/CVE-2014-0036.yml
+++ b/gems/rbovirt/CVE-2014-0036.yml
@@ -2,12 +2,14 @@
 gem: rbovirt
 cve: 2014-0036
 osvdb: 104080
+ghsa: ww79-8xwv-932x
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-0036
-title: 'CVE-2014-0036 rubygem-rbovirt: unsafe use of rest-client'
+title: "CVE-2014-0036 rubygem-rbovirt: unsafe use of rest-client"
 date: 2014-03-05
-description: The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with
+description: |
+  The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with
   SSL verification disabled, which allows remote attackers to conduct man-in-the-middle
   attacks via unspecified vectors.
 cvss_v2: 6.8
 patched_versions:
-- '>= 0.0.24'
+  - ">= 0.0.24"
diff --git a/gems/rdoc/CVE-2013-0256.yml b/gems/rdoc/CVE-2013-0256.yml
index f492f6bc98..ce1cab9049 100644
--- a/gems/rdoc/CVE-2013-0256.yml
+++ b/gems/rdoc/CVE-2013-0256.yml
@@ -2,15 +2,17 @@
 gem: rdoc
 cve: 2013-0256
 osvdb: 90004
+ghsa: v2r9-c84j-v7xm
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0256
-title: 'CVE-2013-0256 rubygem-rdoc: Cross-site scripting in the documentation created
-  by Darkfish Rdoc HTML generator / template'
+title: "CVE-2013-0256 rubygem-rdoc: Cross-site scripting in the
+  documentation created by Darkfish Rdoc HTML generator / template"
 date: 2013-02-06
-description: darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1,
+description: |
+  darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1,
   as used in Ruby, does not properly generate documents, which allows remote attackers
   to conduct cross-site scripting (XSS) attacks via a crafted URL.
 cvss_v2: 4.3
 patched_versions:
-- ~> 3.9.5
-- ~> 3.12.1
-- '>= 4.0'
+  - "~> 3.9.5"
+  - "~> 3.12.1"
+  - ">= 4.0"
diff --git a/gems/rdoc/CVE-2021-31799.yml b/gems/rdoc/CVE-2021-31799.yml
index 1225795545..b6e478fdb0 100644
--- a/gems/rdoc/CVE-2021-31799.yml
+++ b/gems/rdoc/CVE-2021-31799.yml
@@ -12,5 +12,9 @@ description: |
   run an arbitrary command execution against a user who attempts to run `rdoc`
   command.
 cvss_v3: 7.0
+unaffected_versions:
+  - "< 3.11.0"
 patched_versions:
-- ">= 6.3.1"
+  - "~> 6.1.2.1"
+  - "~> 6.2.1.1"
+  - ">= 6.3.1"
diff --git a/gems/rdoc/CVE-2024-27281.yml b/gems/rdoc/CVE-2024-27281.yml
new file mode 100644
index 0000000000..e6512ce32b
--- /dev/null
+++ b/gems/rdoc/CVE-2024-27281.yml
@@ -0,0 +1,36 @@
+---
+gem: rdoc
+cve: 2024-27281
+ghsa: 592j-995h-p23j
+url: https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/
+title: RCE vulnerability with .rdoc_options in RDoc
+date: 2024-03-21
+description: |
+  An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby
+  3.x through 3.3.0.
+
+  When parsing `.rdoc_options` (used for configuration in RDoc) as a YAML file,
+  object injection and resultant remote code execution are possible because
+  there are no restrictions on the classes that can be restored.
+
+  When loading the documentation cache, object injection and resultant remote
+  code execution are also possible if there were a crafted cache.
+
+  We recommend to update the RDoc gem to version 6.6.3.1 or later. In order to
+  ensure compatibility with bundled version in older Ruby series, you may
+  update as follows instead:
+
+  * For Ruby 3.0 users: Update to `rdoc` 6.3.4.1
+  * For Ruby 3.1 users: Update to `rdoc` 6.4.1.1
+  * For Ruby 3.2 users: Update to `rdoc` 6.5.1.1
+
+  You can use `gem update rdoc` to update it. If you are using bundler, please
+  add `gem "rdoc", ">= 6.6.3.1"` to your `Gemfile`.
+
+  Note: 6.3.4, 6.4.1, 6.5.1 and 6.6.3 have a incorrect fix. We recommend to
+  upgrade 6.3.4.1, 6.4.1.1, 6.5.1.1 and 6.6.3.1 instead of them.
+cvss_v3: 4.5
+patched_versions:
+  - "~> 6.3.4, >= 6.3.4.1"
+  - "~> 6.4.1, >= 6.4.1.1"
+  - ">=  6.5.1.1"
diff --git a/gems/recurly/CVE-2017-0905.yml b/gems/recurly/CVE-2017-0905.yml
index 326d6b5bc3..087848c408 100644
--- a/gems/recurly/CVE-2017-0905.yml
+++ b/gems/recurly/CVE-2017-0905.yml
@@ -16,16 +16,16 @@ description: |
   version of the client.
 cvss_v3: 9.8
 patched_versions:
-- "~> 2.0.13"
-- "~> 2.1.11"
-- "~> 2.2.5"
-- "~> 2.3.10"
-- "~> 2.4.11"
-- "~> 2.5.3"
-- "~> 2.6.3"
-- "~> 2.7.8"
-- "~> 2.8.2"
-- "~> 2.9.2"
-- "~> 2.10.4"
-- "~> 2.11.3"
-- ">= 2.12.0"
+  - "~> 2.0.13"
+  - "~> 2.1.11"
+  - "~> 2.2.5"
+  - "~> 2.3.10"
+  - "~> 2.4.11"
+  - "~> 2.5.3"
+  - "~> 2.6.3"
+  - "~> 2.7.8"
+  - "~> 2.8.2"
+  - "~> 2.9.2"
+  - "~> 2.10.4"
+  - "~> 2.11.3"
+  - ">= 2.12.0"
diff --git a/gems/red-arrow/CVE-2019-12408.yml b/gems/red-arrow/CVE-2019-12408.yml
new file mode 100644
index 0000000000..f4ea2c557b
--- /dev/null
+++ b/gems/red-arrow/CVE-2019-12408.yml
@@ -0,0 +1,22 @@
+---
+gem: red-arrow
+cve: 2019-12408
+ghsa: 8cw2-jv5c-c825
+url: https://lists.apache.org/thread.html/49f067b1c5fb7493d952580f0d2d032819ba351f7a78743c21126269@%3Cdev.arrow.apache.org%3E
+title: Missing Initialization of Resource in Apache Arrow
+date: 2022-05-24
+description: |
+  It was discovered that the C++ implementation (which underlies the R,
+  Python and Ruby implementations) of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized
+  memory bug when building arrays with null values in some cases. This can lead to
+  uninitialized memory being unintentionally shared if Arrow Arrays are transmitted
+  over the wire (for instance with Flight) or persisted in the streaming IPC and file
+  formats.
+cvss_v3: 7.5
+unaffected_versions:
+  - "< 0.14.0"
+patched_versions:
+  - ">= 0.15.1"
+related:
+  url:
+    - https://lists.apache.org/thread.html/efd8bbf57427d3c303b5316d208a335f8d0c0dbe0dc4c87cfa995073@%3Cannounce.apache.org%3E
diff --git a/gems/red-arrow/CVE-2019-12410.yml b/gems/red-arrow/CVE-2019-12410.yml
new file mode 100644
index 0000000000..4d0e054ab2
--- /dev/null
+++ b/gems/red-arrow/CVE-2019-12410.yml
@@ -0,0 +1,23 @@
+---
+gem: red-arrow
+cve: 2019-12410
+ghsa: cjw4-2w9r-r8mv
+url: https://lists.apache.org/thread.html/49f067b1c5fb7493d952580f0d2d032819ba351f7a78743c21126269@%3Cdev.arrow.apache.org%3E
+title: Missing Initialization of Resource in Apache Arrow
+date: 2022-05-24
+description: |
+  While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365
+  it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data
+  uninitialized when reading RLE null data from parquet. This affected the C++, Python,
+  Ruby and R implementations. The uninitialized memory could potentially be shared
+  if are transmitted over the wire (for instance with Flight) or persisted in the
+  streaming IPC and file formats.
+cvss_v3: 7.5
+unaffected_versions:
+  - "< 0.12.0"
+patched_versions:
+  - ">= 0.15.1"
+related:
+  url:
+    - https://lists.apache.org/thread.html/efd8bbf57427d3c303b5316d208a335f8d0c0dbe0dc4c87cfa995073@%3Cannounce.apache.org%3E
+    - http://www.openwall.com/lists/oss-security/2019/11/08/1
diff --git a/gems/redcarpet/CVE-2015-5147.yml b/gems/redcarpet/CVE-2015-5147.yml
index 70958b573c..4a1994867f 100644
--- a/gems/redcarpet/CVE-2015-5147.yml
+++ b/gems/redcarpet/CVE-2015-5147.yml
@@ -13,6 +13,6 @@ description: |
   allow a remote attacker to execute arbitrary code.
 cvss_v2: 7.5
 unaffected_versions:
-- < 3.3.0
+  - "< 3.3.0"
 patched_versions:
-- '>= 3.3.2'
+  - ">= 3.3.2"
diff --git a/gems/redcarpet/CVE-2020-26298.yml b/gems/redcarpet/CVE-2020-26298.yml
index 97503fb2b5..146074b7d1 100644
--- a/gems/redcarpet/CVE-2020-26298.yml
+++ b/gems/redcarpet/CVE-2020-26298.yml
@@ -12,8 +12,8 @@ description: |
   processing quotes. This applies even when the `:escape_html` option was being used.
 cvss_v3: 6.8
 patched_versions:
-- '>= 3.5.1'
+  - ">= 3.5.1"
 
 related:
   url:
-  - https://github.com/vmg/redcarpet/blob/master/CHANGELOG.md#version-351-security
+    - https://github.com/vmg/redcarpet/blob/master/CHANGELOG.md#version-351-security
diff --git a/gems/redcarpet/OSVDB-120415.yml b/gems/redcarpet/OSVDB-120415.yml
index 5487a83704..9e95f7c0a8 100644
--- a/gems/redcarpet/OSVDB-120415.yml
+++ b/gems/redcarpet/OSVDB-120415.yml
@@ -12,4 +12,14 @@ description: |
   execute arbitrary script code in a user's browser session within the trust
   relationship between their browser and the server.
 patched_versions:
-- '>= 3.2.3'
+  - ">= 3.2.3"
+related:
+  url:
+    - https://github.com/vmg/redcarpet/releases/tag/v3.2.3
+    - http://danlec.com/blog/bug-in-sundown-and-redcarpet
+    - https://hackerone.com/reports/46916
+    - https://github.com/vmg/redcarpet/blob/master/ext/redcarpet/markdown.c
+    - https://github.com/Homebrew/brew.sh/issues/75
+    - https://git.revreso.de/gigadoc2/diaspora/-/tags/v0.4.1.3
+    - https://www.rapid7.com/db/vulnerabilities/freebsd-vid-c368155a-fa83-11e4-bc58-001e67150279
+    - https://www.mend.io/vulnerability-database/WS-2015-0038
diff --git a/gems/redis-namespace/OSVDB-96425.yml b/gems/redis-namespace/OSVDB-96425.yml
index 6bc44c1711..f99787692d 100644
--- a/gems/redis-namespace/OSVDB-96425.yml
+++ b/gems/redis-namespace/OSVDB-96425.yml
@@ -9,7 +9,13 @@ description: |
   The issue is triggered when handling exec commands called via send(). This may allow a
   remote attacker to execute arbitrary commands.
 patched_versions:
-- '>= 1.3.1'
-- ~> 1.2.2
-- ~> 1.1.1
-- ~> 1.0.4
+  - "~> 1.0.4"
+  - "~> 1.1.1"
+  - "~> 1.2.2"
+  - ">= 1.3.1"
+related:
+  url:
+    - http://blog.steveklabnik.com/posts/2013-08-03-redis-namespace-1-3-1--security-release
+    - https://github.com/resque/redis-namespace/issues/65
+    - https://github.com/resque/redis-namespace/commit/6d839515e8a3fdc17b5fb391500fda3f919689d6
+    - https://security.snyk.io/vuln/SNYK-RUBY-REDISNAMESPACE-20105
diff --git a/gems/redis-store/CVE-2017-1000248.yml b/gems/redis-store/CVE-2017-1000248.yml
index 5253e256b8..cb1cac12ae 100644
--- a/gems/redis-store/CVE-2017-1000248.yml
+++ b/gems/redis-store/CVE-2017-1000248.yml
@@ -10,4 +10,4 @@ description: |
   use of the Marshal serializer.
 cvss_v3: 9.8
 patched_versions:
-- ">= 1.4.0"
+  - ">= 1.4.0"
diff --git a/gems/refile/OSVDB-120857.yml b/gems/refile/OSVDB-120857.yml
index 8aa5136cc4..378cad44a3 100644
--- a/gems/refile/OSVDB-120857.yml
+++ b/gems/refile/OSVDB-120857.yml
@@ -1,7 +1,7 @@
 ---
 gem: refile
 osvdb: 120857
-url: https://groups.google.com/forum/#!topic/ruby-security-ann/VIfMO2LvzNs
+url: https://groups.google.com/g/ruby-security-ann/c/VIfMO2LvzNs
 title: refile Gem for Ruby contains a remote code execution vulnerability
 date: 2015-04-15
 description: |
@@ -10,6 +10,9 @@ description: |
   'image' is the name of the attachment. This may allow a remote attacker
   to execute arbitrary shell commands.
 unaffected_versions:
-- < 0.5.0
+  - "< 0.5.0"
 patched_versions:
-- '>= 0.5.4'
+  - ">= 0.5.4"
+related:
+  url:
+    - https://groups.google.com/g/ruby-security-ann/c/VIfMO2LvzNs
diff --git a/gems/request_store/CVE-2024-43791.yml b/gems/request_store/CVE-2024-43791.yml
new file mode 100644
index 0000000000..345391e0e4
--- /dev/null
+++ b/gems/request_store/CVE-2024-43791.yml
@@ -0,0 +1,39 @@
+---
+gem: request_store
+cve: 2024-43791
+ghsa: frp2-5qfc-7r8m
+url: https://github.com/steveklabnik/request_store/security/advisories/GHSA-frp2-5qfc-7r8m
+title: request_store has Incorrect Default Permissions
+date: 2024-08-23
+description: |
+  ### Impact
+
+  The files published as part of request_store 1.3.2 have 0666
+  permissions, meaning that they are world-writable, which allows
+  local users to execute arbitrary code.
+
+  This version was published in 2017, and most production environments
+  do not allow access for local users, so the chances of this being
+  exploited are very low, given that the vast majority of users will
+  have upgraded, and those that have not, if any, are not likely to
+  be exposed.
+
+  ### Patches
+
+  I am not aware of any other version of the gem with incorrect
+  permissions, so simply upgrading should fix the issue.
+
+  ### Workarounds
+
+  You could chmod the files yourself, I guess.
+cvss_v3: 7.8
+unaffected_versions:
+  - "< 1.3.2"
+patched_versions:
+  - ">= 1.4.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-43791
+    - https://github.com/steveklabnik/request_store/security/advisories/GHSA-frp2-5qfc-7r8m
+    - https://cwe.mitre.org/data/definitions/276.html
+    - https://github.com/advisories/GHSA-frp2-5qfc-7r8m
diff --git a/gems/resolv/CVE-2025-24294.yml b/gems/resolv/CVE-2025-24294.yml
new file mode 100644
index 0000000000..ebb338cdd5
--- /dev/null
+++ b/gems/resolv/CVE-2025-24294.yml
@@ -0,0 +1,51 @@
+---
+gem: resolv
+cve: 2025-24294
+ghsa: xh69-987w-hrp8
+url: https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294
+title: Possible Denial of Service in resolv gem
+date: 2025-07-09
+description: |
+  A denial of service vulnerability has been discovered in the
+  resolv gem bundled with Ruby.
+  This vulnerability has been assigned the CVE identifier
+  CVE-2025-24294. We recommend upgrading the resolv gem.
+
+  ## Details
+  The vulnerability is caused by an insufficient check on the
+  length of a decompressed domain name within a DNS packet.
+
+  An attacker can craft a malicious DNS packet containing a highly
+  compressed domain name. When the resolv library parses such a
+  packet, the name decompression process consumes a large amount
+  of CPU resources, as the library does not limit the resulting
+  length of the name.
+
+  This resource consumption can cause the application thread to
+  become unresponsive, resulting in a Denial of Service condition.
+
+  ## Affected Version
+  The vulnerability affects the resolv gem bundled with the
+  following Ruby series:
+  * Ruby 3.2 series: resolv version 0.2.2 and earlier
+  * Ruby 3.3 series: resolv version 0.3.0
+  * Ruby 3.4 series: resolv version 0.6.1 and earlier
+
+  ## Credits
+  Thanks to Manu for discovering this issue.
+
+  ## History
+  Originally published at 2025-07-08 07:00:00 (UTC)
+cvss_v3: 7.5
+patched_versions:
+  - "~> 0.2.2"
+  - "~> 0.3.0"
+  - ">= 0.6.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-24294
+    - https://www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294
+    - https://rubygems.org/gems/resolv
+    - https://www.cve.org/CVERecord?id=CVE-2025-24294
+    - https://www.vuxml.org/freebsd/eed1a411-699b-11f0-91fe-000c295725e4.html
+    - https://github.com/advisories/GHSA-xh69-987w-hrp8
diff --git a/gems/resque-scheduler/CVE-2022-44303.yml b/gems/resque-scheduler/CVE-2022-44303.yml
new file mode 100644
index 0000000000..bc1e06cb2c
--- /dev/null
+++ b/gems/resque-scheduler/CVE-2022-44303.yml
@@ -0,0 +1,44 @@
+---
+gem: resque-scheduler
+cve: 2022-44303
+ghsa: 9hmq-fm33-x4xx
+url: https://github.com/resque/resque-scheduler/security/advisories/GHSA-9hmq-fm33-x4xx
+title: Resque Scheduler Reflected XSS In Delayed Jobs View
+date: 2023-12-18
+description: |
+
+  ### Impact
+
+  Resque Scheduler version 1.27.4 and above are affected by a cross-site
+  scripting vulnerability. A remote attacker can inject javascript code
+  to the "{schedule_job}" or "args" parameter in
+  /resque/delayed/jobs/{schedule_job}?args={args_id} to execute
+   javascript at client side.
+
+  ### Patches
+
+  Fixed in v4.10.2
+
+  ### Workarounds
+
+  No known workarounds at this time. It is recommended to not click on
+  3rd party or untrusted links to the resque-web interface until you
+  have patched your application.
+
+  ### References
+  * https://nvd.nist.gov/vuln/detail/CVE-2022-44303
+  * https://github.com/resque/resque-scheduler/issues/761
+  * https://github.com/resque/resque/issues/1885
+  * https://github.com/resque/resque-scheduler/pull/780
+  * https://github.com/resque/resque-scheduler/pull/783
+cvss_v3: 6.3
+unaffected_versions:
+  - "< 1.27.4"
+patched_versions:
+  - ">= 4.10.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-44303
+    - https://github.com/resque/resque-scheduler/security/advisories/GHSA-9hmq-fm33-x4xx
+    - https://trungvm.gitbook.io/cves/resque/resque-1.27.4-multiple-reflected-xss-in-resque-schedule-job
+    - https://github.com/advisories/GHSA-9hmq-fm33-x4xx
diff --git a/gems/resque/CVE-2023-50724.yml b/gems/resque/CVE-2023-50724.yml
new file mode 100644
index 0000000000..fc165361e0
--- /dev/null
+++ b/gems/resque/CVE-2023-50724.yml
@@ -0,0 +1,37 @@
+---
+gem: resque
+cve: 2023-50724
+ghsa: r8xx-8vm8-x6wj
+url: https://github.com/resque/resque/security/advisories/GHSA-r8xx-8vm8-x6wj
+title: Resque vulnerable to Reflected Cross Site Scripting through pathnames
+date: 2023-12-18
+description: |
+  ### Impact
+
+  resque-web in resque versions before 2.1.0 is vulnerable to reflected
+  XSS through the current_queue parameter in the path of the queues endpoint.
+
+  ### Patches
+
+  v2.1.0
+
+  ### Workarounds
+
+  No known workarounds at this time. It is recommended to not click
+  on 3rd party or untrusted links to the resque-web interface until
+  you have patched your application.
+
+  ### References
+
+  https://github.com/resque/resque/issues/1679
+  https://github.com/resque/resque/pull/1687
+cvss_v3: 6.3
+patched_versions:
+  - ">= 2.1.0"
+related:
+  url:
+    - https://github.com/resque/resque/security/advisories/GHSA-r8xx-8vm8-x6wj
+    - https://github.com/resque/resque/issues/1679
+    - https://github.com/resque/resque/pull/1687
+    - https://github.com/resque/resque/commit/e8e2367fff6990d13109ec2483a456a05fbf9811
+    - https://github.com/advisories/GHSA-r8xx-8vm8-x6wj
diff --git a/gems/resque/CVE-2023-50725.yml b/gems/resque/CVE-2023-50725.yml
new file mode 100644
index 0000000000..215eb91f32
--- /dev/null
+++ b/gems/resque/CVE-2023-50725.yml
@@ -0,0 +1,40 @@
+---
+gem: resque
+cve: 2023-50725
+ghsa: gc3j-vvwf-4rp8
+url: https://github.com/resque/resque/security/advisories/GHSA-gc3j-vvwf-4rp8
+title: Resque vulnerable to reflected XSS in resque-web failed and queues lists
+date: 2023-12-18
+description: |
+  ### Impact
+
+  The following paths in resque-web have been found to be
+  vulnerable to reflected XSS:
+
+  ```
+  /failed/?class=<script>alert(document.cookie)</script>
+  /queues/><img src=a onerror=alert(document.cookie)>
+  ```
+
+  ### Patches
+
+  v2.2.1
+
+  ### Workarounds
+
+  No known workarounds at this time. It is recommended to not click
+  on 3rd party or untrusted links to the resque-web interface until
+  you have patched your application.
+
+  ### References
+
+  https://github.com/resque/resque/pull/1790
+cvss_v3: 6.3
+patched_versions:
+  - ">= 2.2.1"
+related:
+  url:
+    - https://github.com/resque/resque/security/advisories/GHSA-gc3j-vvwf-4rp8
+    - https://github.com/resque/resque/pull/1790
+    - https://github.com/resque/resque/commit/ee99d2ed6cc75d9d384483b70c2d96d312115f07
+    - https://github.com/advisories/GHSA-gc3j-vvwf-4rp8
diff --git a/gems/resque/CVE-2023-50727.yml b/gems/resque/CVE-2023-50727.yml
new file mode 100644
index 0000000000..53143517dd
--- /dev/null
+++ b/gems/resque/CVE-2023-50727.yml
@@ -0,0 +1,35 @@
+---
+gem: resque
+cve: 2023-50727
+ghsa: r9mq-m72x-257g
+url: https://github.com/resque/resque/security/advisories/GHSA-r9mq-m72x-257g
+title: Resque vulnerable to reflected XSS in Queue Endpoint
+date: 2023-12-18
+description: |
+  ### Impact
+
+  Reflected XSS can be performed using the current_queue portion of
+  the path on the /queues endpoint of resque-web.
+
+  ### Patches
+
+  v2.6.0
+
+  ### Workarounds
+
+  No known workarounds at this time. It is recommended to not click
+  on 3rd party or untrusted links to the resque-web interface until
+  you have patched your application.
+
+  ### References
+
+  https://github.com/resque/resque/pull/1865
+cvss_v3: 6.3
+patched_versions:
+  - ">= 2.6.0"
+related:
+  url:
+    - https://github.com/resque/resque/security/advisories/GHSA-r9mq-m72x-257g
+    - https://github.com/resque/resque/pull/1865
+    - https://github.com/resque/resque/commit/7623b8dfbdd0a07eb04b19fb25b16a8d6f087f9a
+    - https://github.com/advisories/GHSA-r9mq-m72x-257g
diff --git a/gems/rest-client/CVE-2015-1820.yml b/gems/rest-client/CVE-2015-1820.yml
index 5a7e4a057c..16fce3ef48 100644
--- a/gems/rest-client/CVE-2015-1820.yml
+++ b/gems/rest-client/CVE-2015-1820.yml
@@ -7,11 +7,12 @@ url: https://github.com/rest-client/rest-client/issues/369
 title: 'CVE-2015-1820 rubygem-rest-client: session fixation vulnerability Set-Cookie
   headers present in an HTTP 30x redirection responses'
 date: 2015-03-24
-description: REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers
+description: |
+  REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers
   to conduct session fixation attacks or obtain sensitive cookie information by leveraging
   passage of cookies set in a response to a redirect.
 cvss_v3: 9.8
 unaffected_versions:
-- "<= 1.6.0"
+  - "<= 1.6.0"
 patched_versions:
-- ">= 1.8.0"
+  - ">= 1.8.0"
diff --git a/gems/rest-client/CVE-2015-3448.yml b/gems/rest-client/CVE-2015-3448.yml
index 41d3c16edb..d724a2170d 100644
--- a/gems/rest-client/CVE-2015-3448.yml
+++ b/gems/rest-client/CVE-2015-3448.yml
@@ -11,4 +11,4 @@ description: |
   log.
 cvss_v2: 2.1
 patched_versions:
-- '>= 1.7.3'
+  - ">= 1.7.3"
diff --git a/gems/rest-client/CVE-2019-15224.yml b/gems/rest-client/CVE-2019-15224.yml
index ab0fca8e5d..85619df709 100644
--- a/gems/rest-client/CVE-2019-15224.yml
+++ b/gems/rest-client/CVE-2019-15224.yml
@@ -10,5 +10,5 @@ description: |
   included a code-execution backdoor inserted by a third party.
 cvss_v3: 9.8
 unaffected_versions:
-- "<= 1.6.9"
-- ">= 1.6.14"
+  - "<= 1.6.9"
+  - ">= 1.6.14"
diff --git a/gems/restforce/CVE-2018-3777.yml b/gems/restforce/CVE-2018-3777.yml
index 99d6e4e52f..c050fb00bf 100644
--- a/gems/restforce/CVE-2018-3777.yml
+++ b/gems/restforce/CVE-2018-3777.yml
@@ -32,6 +32,7 @@ description: |
   If possible, applications should track salesforce IDs internally, rather than
   passing user-supplied IDs to salesforce. Such practice mitigates this
   vulnerability, and in general is desirable for ensuring strong access control.
+cvss_v3: 9.8
 patched_versions:
-- ~> 2.5.4
-- '>= 3.0.0'
+  - "~> 2.5.4"
+  - ">= 3.0.0"
diff --git a/gems/rexical/CVE-2019-5477.yml b/gems/rexical/CVE-2019-5477.yml
index 558290d838..7ca4d1d0b4 100644
--- a/gems/rexical/CVE-2019-5477.yml
+++ b/gems/rexical/CVE-2019-5477.yml
@@ -12,8 +12,8 @@ description: |
 cvss_v2: 7.5
 cvss_v3: 9.8
 patched_versions:
-- '>= 1.0.7'
+  - ">= 1.0.7"
 related:
   url:
-  - https://github.com/tenderlove/rexical/blob/master/CHANGELOG.rdoc#107--2019-08-06
-  - https://groups.google.com/forum/#!msg/ruby-security-ann/YMnKFsASOAE/Fw3ocLI0BQAJ
+    - https://github.com/tenderlove/rexical/blob/master/CHANGELOG.rdoc#107--2019-08-06
+    - https://groups.google.com/forum/#!msg/ruby-security-ann/YMnKFsASOAE/Fw3ocLI0BQAJ
diff --git a/gems/rexml/CVE-2021-28965.yml b/gems/rexml/CVE-2021-28965.yml
index f440dc608e..f5749e887c 100644
--- a/gems/rexml/CVE-2021-28965.yml
+++ b/gems/rexml/CVE-2021-28965.yml
@@ -9,5 +9,8 @@ description: |
   When parsing and serializing a crafted XML document, REXML gem (including
   the one bundled with Ruby) can create a wrong XML document whose structure
   is different from the original one.
+cvss_v3: 7.5
 patched_versions:
-- '>= 3.2.5'
+  - "~> 3.1.9.1"
+  - "~> 3.2.3.1"
+  - ">= 3.2.5"
diff --git a/gems/rexml/CVE-2024-35176.yml b/gems/rexml/CVE-2024-35176.yml
new file mode 100644
index 0000000000..e89e29677a
--- /dev/null
+++ b/gems/rexml/CVE-2024-35176.yml
@@ -0,0 +1,38 @@
+---
+gem: rexml
+cve: 2024-35176
+ghsa: vg3r-rm7w-2xgh
+url: https://github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh
+title: REXML contains a denial of service vulnerability
+date: 2024-05-16
+description: |
+  ### Impact
+
+  The REXML gem before 3.2.6 has a DoS vulnerability when it
+  parses an XML that has many `<`s in an attribute value.
+
+  If you need to parse untrusted XMLs, you many be impacted
+  to this vulnerability.
+
+  ### Patches
+
+  The REXML gem 3.2.7 or later include the patch to fix this
+  vulnerability.
+
+  ### Workarounds
+
+  Don't parse untrusted XMLs.
+
+  ### References
+
+  * https://www.ruby-lang.org/en/news/2024/05/16/dos-rexml-cve-2024-35176/
+cvss_v3: 5.3
+patched_versions:
+  - ">= 3.2.7"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-35176
+    - https://www.ruby-lang.org/en/news/2024/05/16/dos-rexml-cve-2024-35176
+    - https://github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh
+    - https://github.com/ruby/rexml/commit/4325835f92f3f142ebd91a3fdba4e1f1ab7f1cfb
+    - https://github.com/advisories/GHSA-vg3r-rm7w-2xgh
diff --git a/gems/rexml/CVE-2024-39908.yml b/gems/rexml/CVE-2024-39908.yml
new file mode 100644
index 0000000000..1f98919311
--- /dev/null
+++ b/gems/rexml/CVE-2024-39908.yml
@@ -0,0 +1,39 @@
+---
+gem: rexml
+cve: 2024-39908
+ghsa: 4xqq-m2hx-25v8
+url: https://github.com/ruby/rexml/security/advisories/GHSA-4xqq-m2hx-25v8
+title: DoS in REXML
+date: 2024-07-16
+description: |
+  There is a DoS vulnerability in REXML gem. This vulnerability has
+  been assigned the CVE identifier CVE-2024-39908. We strongly
+  recommend upgrading the REXML gem.
+
+  ## Details
+
+  When it parses an XML that has many specific characters such as
+  <, 0 and %>. REXML gem may take long time.
+
+  Please update REXML gem to version 3.3.2 or later.
+
+  ## Affected versions
+
+  REXML gem 3.3.2 or prior
+
+  ## Credits
+
+  Thanks to mprogrammer for discovering this issue.
+
+  ## History
+
+  Originally published at 2024-07-16 03:00:00 (UTC)
+cvss_v3: 4.3
+patched_versions:
+  - ">= 3.3.2"
+related:
+  ghsa:
+    - https://github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh
+  url:
+    - https://www.ruby-lang.org/en/news/2024/07/16/dos-rexml-cve-2024-39908
+    - https://github.com/ruby/rexml/security/advisories/GHSA-4xqq-m2hx-25v8
diff --git a/gems/rexml/CVE-2024-41123.yml b/gems/rexml/CVE-2024-41123.yml
new file mode 100644
index 0000000000..3388166435
--- /dev/null
+++ b/gems/rexml/CVE-2024-41123.yml
@@ -0,0 +1,36 @@
+---
+gem: rexml
+cve: 2024-41123
+ghsa: r55c-59qm-vjw6
+url: https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41123
+title: DoS vulnerabilities in REXML
+date: 2024-08-01
+description: |
+  There are some DoS vulnerabilities in REXML gem.
+  These vulnerabilities have been assigned the CVE identifier
+  CVE-2024-41123. We strongly recommend upgrading the REXML gem.
+
+  ## Details
+
+  When parsing an XML document that has many specific characters such
+  as whitespace character, >] and ]>, REXML gem may take long time.
+
+  Please update REXML gem to version 3.3.3 or later.
+
+  ## Affected versions
+
+  * REXML gem 3.3.2 or prior
+
+  ## Credits
+
+  Thanks to mprogrammer and scyoon for discovering these issues.
+
+  ## History
+
+  Originally published at 2024-08-01 03:00:00 (UTC)
+cvss_v3: 5.3
+patched_versions:
+  - ">= 3.3.3"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41123
diff --git a/gems/rexml/CVE-2024-41946.yml b/gems/rexml/CVE-2024-41946.yml
new file mode 100644
index 0000000000..151b96df22
--- /dev/null
+++ b/gems/rexml/CVE-2024-41946.yml
@@ -0,0 +1,36 @@
+---
+gem: rexml
+cve: 2024-41946
+ghsa: 5866-49gr-22v4
+url: https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946
+title: DoS vulnerabilities in REXML
+date: 2024-08-01
+description: |
+  There is a DoS vulnerability in REXML gem.
+  This vulnerability has been assigned the CVE identifier
+  CVE-2024-41946. We strongly recommend upgrading the REXML gem.
+
+  ## Details
+
+  When parsing an XML that has many entity expansions with SAX2 or
+  pull parser API, REXML gem may take long time.
+
+  Please update REXML gem to version 3.3.3 or later.
+
+  ## Affected versions
+
+  * REXML gem 3.3.2 or prior
+
+  ## Credits
+
+  Thanks to NAITOH Jun for discovering and fixing this issue.
+
+  ## History
+
+  Originally published at 2024-08-01 03:00:00 (UTC)
+cvss_v3: 5.3
+patched_versions:
+  - ">= 3.3.3"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2024/08/01/dos-rexml-cve-2024-41946
diff --git a/gems/rexml/CVE-2024-43398.yml b/gems/rexml/CVE-2024-43398.yml
new file mode 100644
index 0000000000..a5aecc4dcd
--- /dev/null
+++ b/gems/rexml/CVE-2024-43398.yml
@@ -0,0 +1,54 @@
+---
+gem: rexml
+cve: 2024-43398
+ghsa: vmwr-mc7x-5vc3
+url: https://github.com/ruby/rexml/security/advisories/GHSA-vmwr-mc7x-5vc3
+title: REXML denial of service vulnerability
+date: 2024-08-22
+description: |
+  ### Impact
+
+  The REXML gem before 3.3.6 has a DoS vulnerability when it parses an
+  XML that has many deep elements that have same local name attributes.
+
+  If you need to parse untrusted XMLs with tree parser API like
+  `REXML::Document.new`, you may be impacted to this vulnerability.
+  If you use other parser APIs such as stream parser API and SAX2
+  parser API, this vulnerability is not affected.
+
+  This vulnerability has been assigned the CVE identifier CVE-2024-43398.
+  We strongly recommend upgrading the REXML gem.
+
+  ### Patches
+
+  The REXML gem 3.3.6 or later include the patch to fix the
+  vulnerability.
+
+  ### Workarounds
+
+  Don't parse untrusted XMLs with tree parser API.
+
+  ## Affected versions
+
+  REXML gem 3.3.5 or prior
+
+  ## Credits
+
+  Thanks to l33thaxor for discovering this issue.
+
+  ## History
+
+  Originally published at 2024-08-22 03:00:00 (UTC)
+cvss_v3: 5.9
+patched_versions:
+  - ">= 3.3.6"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-43398
+    - https://www.ruby-lang.org/en/news/2024/08/22/dos-rexml-cve-2024-43398
+    - https://github.com/ruby/rexml/security/advisories/GHSA-vmwr-mc7x-5vc3
+    - https://github.com/ruby/rexml/commit/7cb5eaeb221c322b9912f724183294d8ce96bae3
+    - https://github.com/ruby/rexml/releases/tag/v3.3.6
+    - https://hackerone.com/reports/3002543
+    - https://hackerone.com/reports/2666849
+    - https://github.com/advisories/GHSA-vmwr-mc7x-5vc3
diff --git a/gems/rexml/CVE-2024-49761.yml b/gems/rexml/CVE-2024-49761.yml
new file mode 100644
index 0000000000..dc33d486d1
--- /dev/null
+++ b/gems/rexml/CVE-2024-49761.yml
@@ -0,0 +1,42 @@
+---
+gem: rexml
+cve: 2024-49761
+ghsa: 2rxp-v6pw-ch6m
+url: https://github.com/ruby/rexml/security/advisories/GHSA-2rxp-v6pw-ch6m
+title: REXML ReDoS vulnerability
+date: 2024-10-28
+description: |
+  ## Impact
+
+  The REXML gem before 3.3.9 has a ReDoS vulnerability when it
+  parses an XML that has many digits between `&#` and `x...;`
+  in a hex numeric character reference (`&#x...;`).
+
+  This does not happen with Ruby 3.2 or later. Ruby 3.1 is the only
+  affected maintained Ruby. Note that Ruby 3.1 will reach EOL on 2025-03.
+
+  ## Patches
+
+  The REXML gem 3.3.9 or later include the patch to fix the vulnerability.
+
+  ## Workarounds
+
+  Use Ruby 3.2 or later instead of Ruby 3.1.
+
+  ## References
+
+  * https://www.ruby-lang.org/en/news/2024/10/28/redos-rexml-cve-2024-49761
+    * Announced on www.ruby-lang.org.
+cvss_v3: 7.5
+cvss_v4: 6.6
+patched_versions:
+  - ">= 3.3.9"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-49761
+    - https://github.com/ruby/rexml/releases/tag/v3.3.9
+    - https://github.com/ruby/rexml/security/advisories/GHSA-2rxp-v6pw-ch6m
+    - https://github.com/ruby/rexml/commit/ce59f2eb1aeb371fe1643414f06618dbe031979f
+    - https://www.ruby-lang.org/en/news/2024/10/28/redos-rexml-cve-2024-49761
+    - https://hackerone.com/reports/2807139
+    - https://github.com/advisories/GHSA-2rxp-v6pw-ch6m
diff --git a/gems/rgpg/CVE-2013-4203.yml b/gems/rgpg/CVE-2013-4203.yml
index 6c14d4e2fa..c62acfd539 100644
--- a/gems/rgpg/CVE-2013-4203.yml
+++ b/gems/rgpg/CVE-2013-4203.yml
@@ -2,6 +2,7 @@
 gem: rgpg
 cve: 2013-4203
 osvdb: 95948
+ghsa: jg4m-q6w8-vrjp
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-4203
 title: rgpg Gem for Ruby lib/rgpg/gpg_helper.rb Remote Command Execution
 date: 2013-08-02
@@ -12,4 +13,4 @@ description: |
   execution. This may allow a remote attacker to execute arbitrary commands.
 cvss_v2: 7.5
 patched_versions:
-- '>= 0.2.3'
+  - ">= 0.2.3"
diff --git a/gems/rmagick/CVE-2023-5349.yml b/gems/rmagick/CVE-2023-5349.yml
new file mode 100644
index 0000000000..11c149bc0b
--- /dev/null
+++ b/gems/rmagick/CVE-2023-5349.yml
@@ -0,0 +1,26 @@
+---
+gem: rmagick
+cve: 2023-5349
+ghsa: frgf-8jr5-j2jv
+url: https://github.com/advisories/GHSA-frgf-8jr5-j2jv
+title: memory leak flaw was found in ruby-magick
+date: 2023-10-30
+description: |
+  A memory leak flaw was found in ruby-magick, an interface between
+  Ruby and ImageMagick. This issue can lead to a denial of service
+  (DOS) by memory exhaustion.
+cvss_v3: 5.3
+patched_versions:
+  - ">= 5.3.0"
+related:
+  ghsa:
+    - https://github.com/advisories/GHSA-j6x7-7g72-8ww2
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-5349
+    - https://github.com/rmagick/rmagick/issues/1401
+    - https://github.com/rmagick/rmagick/pull/1406
+    - https://github.com/rmagick/rmagick/commit/02f37ca0d6c2b8fff316e0668efa690f5c90a429
+    - https://github.com/rmagick/rmagick/commit/fec7a7e639ae565386f7615155dbcf49b957b64a
+    - https://bugzilla.redhat.com/show_bug.cgi?id=2247064
+    - https://access.redhat.com/security/cve/CVE-2023-5349
+    - https://github.com/advisories/GHSA-frgf-8jr5-j2jv
diff --git a/gems/rotp/CVE-2024-28862.yml b/gems/rotp/CVE-2024-28862.yml
new file mode 100644
index 0000000000..7640b71022
--- /dev/null
+++ b/gems/rotp/CVE-2024-28862.yml
@@ -0,0 +1,23 @@
+---
+gem: rotp
+cve: 2024-28862
+ghsa: x2h8-qmj4-g62f
+url: https://github.com/mdp/rotp/security/advisories/GHSA-x2h8-qmj4-g62f
+title: ROTP 6.2.2 and 6.2.1 has 0666 permissions for the .rb files.
+date: 2024-03-18
+description: |
+  The Ruby One Time Password library (ROTP) is an open source library
+  for generating and validating one time passwords. Affected versions
+  had overly permissive default permissions. Users should patch to
+  version 6.3.0. Users unable to patch may correct file permissions
+  after installation.
+cvss_v3: 5.3
+unaffected_versions:
+  - "< 6.2.1"
+patched_versions:
+  - ">= 6.3.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-28862
+    - https://github.com/mdp/rotp/security/advisories/GHSA-x2h8-qmj4-g62f
+    - https://github.com/advisories/GHSA-x2h8-qmj4-g62f
diff --git a/gems/rswag/CVE-2023-38337.yml b/gems/rswag/CVE-2023-38337.yml
new file mode 100644
index 0000000000..da588ea696
--- /dev/null
+++ b/gems/rswag/CVE-2023-38337.yml
@@ -0,0 +1,20 @@
+---
+gem: rswag
+cve: 2023-38337
+ghsa: vc79-65pr-q82v
+url: https://github.com/rswag/rswag/issues/653
+title: rswag vulnerable to arbitrary JSON and YAML file read via directory traversal
+date: 2023-07-15
+description: |
+  rswag before 2.10.1 allows remote attackers to read arbitrary JSON and
+  YAML files via directory traversal, because rswag-api can expose a file that is
+  not the OpenAPI (or Swagger) specification file of a project.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 2.10.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-38337
+    - https://github.com/rswag/rswag/issues/653
+    - https://github.com/rswag/rswag/compare/2.9.0...2.10.1
+    - https://github.com/advisories/GHSA-vc79-65pr-q82v
diff --git a/gems/rubocop/CVE-2017-8418.yml b/gems/rubocop/CVE-2017-8418.yml
index 2aea42b764..33f5015d91 100644
--- a/gems/rubocop/CVE-2017-8418.yml
+++ b/gems/rubocop/CVE-2017-8418.yml
@@ -11,7 +11,7 @@ description: |
 cvss_v2: 2.1
 cvss_v3: 3.3
 patched_versions:
-- ">= 0.49.0"
+  - ">= 0.49.0"
 related:
   url:
-  - http://www.openwall.com/lists/oss-security/2017/05/01/14
+    - http://www.openwall.com/lists/oss-security/2017/05/01/14
diff --git a/gems/ruby-jss/CVE-2021-33575.yml b/gems/ruby-jss/CVE-2021-33575.yml
index 1e01d542df..57c9382656 100644
--- a/gems/ruby-jss/CVE-2021-33575.yml
+++ b/gems/ruby-jss/CVE-2021-33575.yml
@@ -11,4 +11,4 @@ description: |
   during XML document processing.
 cvss_v3: 9.8
 patched_versions:
-- ">= 1.6.0"
+  - ">= 1.6.0"
diff --git a/gems/ruby-mysql/CVE-2021-3779.yml b/gems/ruby-mysql/CVE-2021-3779.yml
new file mode 100644
index 0000000000..da9a6b9fd3
--- /dev/null
+++ b/gems/ruby-mysql/CVE-2021-3779.yml
@@ -0,0 +1,18 @@
+---
+gem: ruby-mysql
+cve: 2021-3779
+ghsa: 73pr-g6jj-5hc9
+url: https://www.rapid7.com/blog/post/2022/06/28/cve-2021-3779-ruby-mysql-gem-client-file-read-fixed/
+title: ruby-mysql Client File Read
+date: 2022-06-28
+description: |
+  A malicious MySQL server can request local file content from a client using ruby-mysql prior to version
+  2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and
+  later.
+cvss_v3: 6.5
+patched_versions:
+  - ">= 2.10.0"
+related:
+  url:
+    - https://github.com/rubysec/ruby-advisory-db/issues/507
+    - https://my.diffend.io/gems/ruby-mysql/2.9.14/2.10.0#d2h-806753-331
diff --git a/gems/ruby-openid/CVE-2013-1812.yml b/gems/ruby-openid/CVE-2013-1812.yml
new file mode 100644
index 0000000000..4be273ad04
--- /dev/null
+++ b/gems/ruby-openid/CVE-2013-1812.yml
@@ -0,0 +1,26 @@
+---
+gem: ruby-openid
+cve: 2013-1812
+ghsa: 6c8p-qphv-668v
+url: https://github.com/openid/ruby-openid/blob/master/CHANGELOG.md
+title: Vulnerable to XIE DoS attacks
+date: 2017-10-24
+description: |
+  The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID
+  providers to cause a denial of service (CPU consumption) via
+  (1) a large XRDS document or
+  (2) an XML Entity Expansion (XEE) attack.
+cvss_v2: 4.3
+patched_versions:
+  - ">= 2.2.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2013-1812
+    - https://github.com/openid/ruby-openid/blob/master/CHANGELOG.md
+    - https://github.com/openid/ruby-openid/pull/43
+    - https://github.com/openid/ruby-openid/commit/a3693cef06049563f5b4e4824f4d3211288508ed
+    - https://github.com/advisories/GHSA-6c8p-qphv-668v
+    - https://bugzilla.redhat.com/show_bug.cgi?id=918134
+    - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120204.html
+    - http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120361.html
+    - http://www.openwall.com/lists/oss-security/2013/03/03/8
diff --git a/gems/ruby-openid/CVE-2019-11027.yml b/gems/ruby-openid/CVE-2019-11027.yml
index 9278462ce6..800d12c74d 100644
--- a/gems/ruby-openid/CVE-2019-11027.yml
+++ b/gems/ruby-openid/CVE-2019-11027.yml
@@ -13,4 +13,4 @@ description: |
   heavily on the "example app" provided by the project are at highest risk.
 cvss_v3: 9.8
 patched_versions:
-- '>= 2.9.0'
+  - ">= 2.9.0"
diff --git a/gems/ruby-saml/CVE-2015-20108.yml b/gems/ruby-saml/CVE-2015-20108.yml
new file mode 100644
index 0000000000..749b253ed5
--- /dev/null
+++ b/gems/ruby-saml/CVE-2015-20108.yml
@@ -0,0 +1,28 @@
+---
+gem: ruby-saml
+osvdb: 124991
+cve: 2015-20108
+ghsa: r364-2pj4-pf7f
+url: https://security.snyk.io/vuln/SNYK-RUBY-RUBYSAML-20217
+title: ruby-saml gem is vulnerable to XPath injection
+date: 2015-04-29
+description: |
+  xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby
+  allows XPath injection and code execution because prepared
+  statements are not used.
+
+  The lack of prepared statements allows for possibly command
+  injection, leading to arbitrary code execution.
+cvss_v2: 6.7
+cvss_v3: 9.8
+patched_versions:
+  - ">= 1.0.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2015-20108
+    - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.0.0
+    - https://github.com/SAML-Toolkits/ruby-saml/pull/225
+    - https://github.com/SAML-Toolkits/ruby-saml/commit/9853651b96b99653ea8627d757d46bfe62ab6448
+    - https://security.snyk.io/vuln/SNYK-RUBY-RUBYSAML-20217
+    - https://www.mend.io/vulnerability-database/WS-2015-0036
+    - https://github.com/advisories/GHSA-r364-2pj4-pf7f
diff --git a/gems/ruby-saml/CVE-2016-5697.yml b/gems/ruby-saml/CVE-2016-5697.yml
index 348ae183a5..89fea40ff1 100644
--- a/gems/ruby-saml/CVE-2016-5697.yml
+++ b/gems/ruby-saml/CVE-2016-5697.yml
@@ -16,4 +16,4 @@ description: |
 cvss_v2: 5.0
 cvss_v3: 7.5
 patched_versions:
-- '>= 1.3.0'
+  - ">= 1.3.0"
diff --git a/gems/ruby-saml/CVE-2017-11428.yml b/gems/ruby-saml/CVE-2017-11428.yml
index 7e131b1809..6c36451d17 100644
--- a/gems/ruby-saml/CVE-2017-11428.yml
+++ b/gems/ruby-saml/CVE-2017-11428.yml
@@ -19,8 +19,8 @@ description: |
 cvss_v2: 6.3
 cvss_v3: 7.7
 patched_versions:
-- '>= 1.7.0'
+  - ">= 1.7.0"
 related:
   url:
-  - https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations
-  - https://www.kb.cert.org/vuls/id/475445
+    - https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations
+    - https://www.kb.cert.org/vuls/id/475445
diff --git a/gems/ruby-saml/CVE-2024-45409.yml b/gems/ruby-saml/CVE-2024-45409.yml
new file mode 100644
index 0000000000..b4cd7e7705
--- /dev/null
+++ b/gems/ruby-saml/CVE-2024-45409.yml
@@ -0,0 +1,16 @@
+---
+gem: ruby-saml
+cve: 2024-45409
+ghsa: jw9c-mfg7-9rx2
+url: https://github.com/SAML-Toolkits/ruby-saml/commit/1ec5392bc506fe43a02dbb66b68741051c5ffeae
+title: SAML authentication bypass via Incorrect XPath selector
+date: 2024-08-28
+description: |
+  Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response.
+  An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML
+  Response/Assertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within
+  the vulnerable system.
+cvss_v3: 10.0
+patched_versions:
+  - "~> 1.12.3"
+  - ">= 1.17.0"
diff --git a/gems/ruby-saml/CVE-2025-25291.yml b/gems/ruby-saml/CVE-2025-25291.yml
new file mode 100644
index 0000000000..f535b38d73
--- /dev/null
+++ b/gems/ruby-saml/CVE-2025-25291.yml
@@ -0,0 +1,32 @@
+---
+gem: ruby-saml
+cve: 2025-25291
+ghsa: 4vc4-m8qh-g8jm
+url: https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-4vc4-m8qh-g8jm
+title: Ruby SAML allows a SAML authentication bypass due to DOCTYPE handling (parser differential)
+date: 2025-03-12
+description: |-
+  ### Summary
+  An authentication bypass vulnerability was found in ruby-saml due to a parser differential.
+  ReXML and Nokogiri parse XML differently, the parsers can generate entirely
+  different document structures from the same XML input. That allows an attacker
+  to be able to execute a Signature Wrapping attack.
+
+  ### Impact
+  This issue may lead to authentication bypass.
+cvss_v4: 8.8
+patched_versions:
+  - "~> 1.12.4"
+  - ">= 1.18.0"
+related:
+  url:
+    - https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-4vc4-m8qh-g8jm
+    - https://github.com/SAML-Toolkits/ruby-saml/commit/e9c1cdbd0f9afa467b585de279db0cbd0fb8ae97
+    - https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-25291
+    - https://github.com/SAML-Toolkits/ruby-saml/commit/e76c5b36bac40aedbf1ba7ffaaf495be63328cd9
+    - https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released
+    - https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials
+    - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4
+    - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0
+    - https://github.com/advisories/GHSA-4vc4-m8qh-g8jm
diff --git a/gems/ruby-saml/CVE-2025-25292.yml b/gems/ruby-saml/CVE-2025-25292.yml
new file mode 100644
index 0000000000..0368114424
--- /dev/null
+++ b/gems/ruby-saml/CVE-2025-25292.yml
@@ -0,0 +1,32 @@
+---
+gem: ruby-saml
+cve: 2025-25292
+ghsa: 754f-8gm6-c4r2
+url: https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-754f-8gm6-c4r2
+title: Ruby SAML allows a SAML authentication bypass due to namespace handling (parser differential)
+date: 2025-03-12
+description: |-
+  ### Summary
+  An authentication bypass vulnerability was found in ruby-saml due to a parser differential.
+  ReXML and Nokogiri parse XML differently, the parsers can generate entirely
+  different document structures from the same XML input. That allows an
+  attacker to be able to execute a Signature Wrapping attack.
+
+  ### Impact
+  This issue may lead to authentication bypass.
+cvss_v4: 8.8
+patched_versions:
+  - "~> 1.12.4"
+  - ">= 1.18.0"
+related:
+  url:
+    - https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-754f-8gm6-c4r2
+    - https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv
+    - https://github.com/SAML-Toolkits/ruby-saml/commit/e76c5b36bac40aedbf1ba7ffaaf495be63328cd9
+    - https://github.com/SAML-Toolkits/ruby-saml/commit/e9c1cdbd0f9afa467b585de279db0cbd0fb8ae97
+    - https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released
+    - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4
+    - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-25292
+    - https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials
+    - https://github.com/advisories/GHSA-754f-8gm6-c4r2
diff --git a/gems/ruby-saml/CVE-2025-25293.yml b/gems/ruby-saml/CVE-2025-25293.yml
new file mode 100644
index 0000000000..1e695a7979
--- /dev/null
+++ b/gems/ruby-saml/CVE-2025-25293.yml
@@ -0,0 +1,33 @@
+---
+gem: ruby-saml
+cve: 2025-25293
+ghsa: 92rq-c8cf-prrq
+url: https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-92rq-c8cf-prrq
+title: Ruby SAML allows remote Denial of Service (DoS) with compressed SAML responses
+date: 2025-03-12
+description: |-
+  ### Summary
+  ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses.
+
+  Ruby-saml uses zlib to decompress SAML responses in case they're compressed.
+  It is possible to bypass the message size check with a compressed assertion
+  since the message size is checked before inflation and not after.
+
+  ### Impact
+  This issue may lead to remote Denial of Service (DoS).
+cvss_v4: 8.8
+patched_versions:
+  - "~> 1.12.4"
+  - ">= 1.18.0"
+related:
+  url:
+    - https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-92rq-c8cf-prrq
+    - https://github.com/SAML-Toolkits/ruby-saml/commit/acac9e9cc0b9a507882c614f25d41f8b47be349a
+    - https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-25293
+    - https://github.com/SAML-Toolkits/ruby-saml/commit/e2da4c6dae7dc01a4d9cd221395140a67e2b3eb1
+    - https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released
+    - https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials
+    - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4
+    - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0
+    - https://github.com/advisories/GHSA-92rq-c8cf-prrq
diff --git a/gems/ruby-saml/CVE-2025-54572.yml b/gems/ruby-saml/CVE-2025-54572.yml
new file mode 100644
index 0000000000..8852b01fb5
--- /dev/null
+++ b/gems/ruby-saml/CVE-2025-54572.yml
@@ -0,0 +1,89 @@
+---
+gem: ruby-saml
+cve: 2025-54572
+ghsa: rrqh-93c8-j966
+url: https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-rrqh-93c8-j966
+title: Ruby SAML DOS vulnerability with large SAML response
+date: 2025-07-30
+description: |
+  ### Summary
+
+  A denial-of-service vulnerability exists in ruby-saml even with the
+  message_max_bytesize setting configured. The vulnerability occurs
+  because the SAML response is validated for Base64 format prior to
+  checking the message size,  leading to potential resource exhaustion.
+
+  ### Details
+
+  `ruby-saml` includes a `message_max_bytesize` setting intended to
+  prevent DOS attacks and decompression bombs. However, this protection
+  is ineffective in some cases due to the order of operations in the code:
+
+  https://github.com/SAML-Toolkits/ruby-saml/blob/fbbedc978300deb9355a8e505849666974ef2e67/lib/onelogin/ruby-saml/saml_message.rb
+
+  ```ruby
+       def decode_raw_saml(saml, settings = nil)
+          return saml unless base64_encoded?(saml)
+  # <--- Issue here. Should be moved after next code block.
+
+          settings =  OneLogin::RubySaml::Settings.new if settings.nil?
+          if saml.bytesize > settings.message_max_bytesize
+             raise ValidationError.new(\"Encoded SAML Message exceeds \" +
+             settings.message_max_bytesize.to_s +
+             \" bytes, so was rejected\")
+          end
+          decoded = decode(saml)
+        ...
+        end
+  ```
+
+  The vulnerability is in the execution order. Prior to checking
+  bytesize the `base64_encoded?` function performs regex matching
+  on the entire input string:
+
+  ```ruby
+  !!string.gsub(/[\\r\]|\\\\r|\\\|\\s/, \"\").match(BASE64_FORMAT)
+  ```
+
+  ### Impact
+
+  _What kind of vulnerability is it? Who is impacted?_
+
+  When successfully  exploited, this vulnerability can lead to:
+  - Excessive memory consumption
+  - High CPU utilization
+  - Application slowdown or unresponsiveness
+  - Complete application crash in severe cases
+  - Potential denial of service for legitimate users
+
+  All applications using `ruby-saml` with SAML configured and
+  enabled are vulnerable.
+
+  ###   Potential Solution
+
+  Reorder the validation steps to ensure max bytesize is checked first
+
+  ```ruby
+  def decode_raw_saml(saml, settings = nil)
+    settings = OneLogin::RubySaml::Settings.new
+  if settings.nil?
+    if saml.bytesize > settings.message_max_bytesize
+      raise  ValidationError.new(\"Encoded SAML Message exceeds \" +
+      settings.message_max_bytesize.to_s  + \" bytes, so was rejected\")
+    end
+    return saml unless base64_encoded?(saml)
+    decoded = decode(saml)
+    ...
+  end
+  ```
+cvss_v4: 6.9
+patched_versions:
+  - ">= 1.18.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-54572
+    - https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-rrqh-93c8-j966
+    - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.1
+    - https://github.com/SAML-Toolkits/ruby-saml/pull/770
+    - https://github.com/SAML-Toolkits/ruby-saml/commit/38ef5dd1ce17514e202431f569c4f5633e6c2709
+    - https://github.com/advisories/GHSA-rrqh-93c8-j966
diff --git a/gems/ruby-saml/OSVDB-117903.yml b/gems/ruby-saml/OSVDB-117903.yml
index 9ff6533252..155c179c82 100644
--- a/gems/ruby-saml/OSVDB-117903.yml
+++ b/gems/ruby-saml/OSVDB-117903.yml
@@ -1,12 +1,21 @@
 ---
 gem: ruby-saml
 osvdb: 117903
-url: http://www.osvdb.org/show/osvdb/117903
+url: https://advisories.dxw.com/advisories/publicly-exploitable-command-injection-in-ruby-saml-0-7-2-library-can-root-the-host
 title: Ruby-Saml Gem is vulnerable to arbitrary code execution
 date: 2015-02-03
 description: |
-  ruby-saml contains a flaw that is triggered as the URI value of a SAML response is
-  not properly sanitized through a prepared statement. This may allow a remote
-  attacker to execute arbitrary shell commands on the host machine.
+  ruby-saml contains a flaw that is triggered as the URI value of a
+  SAML response is not properly sanitized through a prepared statement.
+  This may allow a remote attacker to execute arbitrary shell commands
+  on the host machine.
 patched_versions:
-- '>= 0.8.2'
+  - ">= 0.8.2"
+related:
+  url:
+    - https://advisories.dxw.com/advisories/publicly-exploitable-command-injection-in-ruby-saml-0-7-2-library-can-root-the-host
+    - https://seclists.org/oss-sec/2015/q3/282
+    - https://github.com/SAML-Toolkits/ruby-saml/pull/225#issuecomment-120084288
+    - https://github.com/SAML-Toolkits/ruby-saml/commit/1b4e3dd6d2d44efa629144b2180842456bfb2a0f#diff-661b9d9743a3ff77661f224c6191165cL242
+    - https://www.mend.io/vulnerability-database/WS-2015-0040
+    - http://www.osvdb.org/show/osvdb/117903
diff --git a/gems/ruby-saml/OSVDB-124383.yml b/gems/ruby-saml/OSVDB-124383.yml
index 9acde546a2..dc0ea9d45e 100644
--- a/gems/ruby-saml/OSVDB-124383.yml
+++ b/gems/ruby-saml/OSVDB-124383.yml
@@ -1,11 +1,17 @@
 ---
 gem: ruby-saml
 osvdb: 124383
-url: https://github.com/onelogin/ruby-saml/pull/247
+url: https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.0.0
 title: Ruby-Saml Gem is vulnerable to entity expansion attacks
 date: 2015-06-30
 description: |
   ruby-saml before 1.0.0 is vulnerable to entity expansion attacks.
 cvss_v2: 3.9
 patched_versions:
-- '>= 1.0.0'
+  - ">= 1.0.0"
+related:
+  url:
+    - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.0.0
+    - https://github.com/SAML-Toolkits/ruby-saml/pull/247
+    - https://security.snyk.io/vuln/SNYK-RUBY-RUBYSAML-20232
+    - https://github.com/onelogin/ruby-saml/pull/247
diff --git a/gems/ruby-saml/OSVDB-124991.yml b/gems/ruby-saml/OSVDB-124991.yml
deleted file mode 100644
index 6f1ef64472..0000000000
--- a/gems/ruby-saml/OSVDB-124991.yml
+++ /dev/null
@@ -1,13 +0,0 @@
----
-gem: ruby-saml
-osvdb: 124991
-url: https://github.com/onelogin/ruby-saml/pull/225
-title: Ruby-Saml Gem is vulnerable to XPath Injection
-date: 2015-04-29
-description: |
-  ruby-saml before 1.0.0 is vulnerable to XPath injection on xml_security.rb. The
-  lack of prepared statements allows for possibly command injection, leading to
-  arbitrary code execution
-cvss_v2: 6.7
-patched_versions:
-- '>= 1.0.0'
diff --git a/gems/ruby_parser/CVE-2013-0162.yml b/gems/ruby_parser/CVE-2013-0162.yml
index 04a5c5111c..454aa66f28 100644
--- a/gems/ruby_parser/CVE-2013-0162.yml
+++ b/gems/ruby_parser/CVE-2013-0162.yml
@@ -2,12 +2,14 @@
 gem: ruby_parser
 cve: 2013-0162
 osvdb: 90561
+ghsa: 8mvw-22r7-w6fq
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-0162
-title: 'CVE-2013-0162 rubygem-ruby_parser: incorrect temporary file usage'
+title: "CVE-2013-0162 rubygem-ruby_parser: incorrect temporary file usage"
 date: 2013-02-21
-description: The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser
+description: |
+  The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser
   gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via
   a symlink attack on a temporary file with a predictable name in /tmp.
 cvss_v2: 2.1
 patched_versions:
-- '>= 3.1.2'
+  - ">= 3.1.2"
diff --git a/gems/rubygems-update/CVE-2007-0469.yml b/gems/rubygems-update/CVE-2007-0469.yml
index d713a69cbf..752ef183cd 100644
--- a/gems/rubygems-update/CVE-2007-0469.yml
+++ b/gems/rubygems-update/CVE-2007-0469.yml
@@ -3,14 +3,15 @@ gem: rubygems-update
 library: rubygems
 cve: 2007-0469
 osvdb: 33561
+ghsa: 95vx-q4c2-64gr
 url: https://nvd.nist.gov/vuln/detail/CVE-2007-0469
-title: 'CVE-2007-0469 RubyGems: Specially-crafted Gem archive can overwrite system
-  files'
+title: "CVE-2007-0469 RubyGems: Specially-crafted Gem archive can overwrite system files"
 date: 2007-01-22
-description: The extract_files function in installer.rb in RubyGems before 0.9.1 does
+description: |
+  The extract_files function in installer.rb in RubyGems before 0.9.1 does
   not check whether files exist before overwriting them, which allows user-assisted
   remote attackers to overwrite arbitrary files, cause a denial of service, or execute
   arbitrary code via crafted GEM packages.
 cvss_v2: 9.3
 patched_versions:
-- '>= 0.9.1'
+  - ">= 0.9.1"
diff --git a/gems/rubygems-update/CVE-2012-2125.yml b/gems/rubygems-update/CVE-2012-2125.yml
index 397c8932d7..9f78dc66ae 100644
--- a/gems/rubygems-update/CVE-2012-2125.yml
+++ b/gems/rubygems-update/CVE-2012-2125.yml
@@ -3,12 +3,14 @@ gem: rubygems-update
 library: rubygems
 cve: 2012-2125
 osvdb: 85809
+ghsa: 228f-g3h7-3fj3
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-2125
-title: 'CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23'
+title: "CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23"
 date: 2012-09-25
-description: RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which
-  makes it easier for remote attackers to observe or modify a gem during installation
-  via a man-in-the-middle attack.
+description: |
+  RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which
+  makes it easier for remote attackers to observe or modify a gem during
+  installation via a man-in-the-middle attack.
 cvss_v2: 5.8
 patched_versions:
-- '>= 1.8.23'
+  - ">= 1.8.23"
diff --git a/gems/rubygems-update/CVE-2012-2126.yml b/gems/rubygems-update/CVE-2012-2126.yml
index 1218955034..f4011afa64 100644
--- a/gems/rubygems-update/CVE-2012-2126.yml
+++ b/gems/rubygems-update/CVE-2012-2126.yml
@@ -3,11 +3,13 @@ gem: rubygems-update
 library: rubygems
 cve: 2012-2126
 osvdb: 81444
+ghsa: 5mgj-mvv8-46mw
 url: https://nvd.nist.gov/vuln/detail/CVE-2012-2126
-title: 'CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23'
+title: "CVE-2012-2125 CVE-2012-2126 rubygems: Two security fixes in v1.8.23"
 date: 2012-04-20
-description: RubyGems before 1.8.23 does not verify an SSL certificate, which allows
+description: |
+  RubyGems before 1.8.23 does not verify an SSL certificate, which allows
   remote attackers to modify a gem during installation via a man-in-the-middle attack.
 cvss_v2: 4.3
 patched_versions:
-- '>= 1.8.23'
+  - ">= 1.8.23"
diff --git a/gems/rubygems-update/CVE-2013-4287.yml b/gems/rubygems-update/CVE-2013-4287.yml
index 13890f6aca..8de0a60e84 100644
--- a/gems/rubygems-update/CVE-2013-4287.yml
+++ b/gems/rubygems-update/CVE-2013-4287.yml
@@ -3,17 +3,19 @@ gem: rubygems-update
 library: rubygems
 cve: 2013-4287
 osvdb: 97163
+ghsa: 9j7m-rjqx-48vh
 url: http://blog.rubygems.org/2013/09/09/CVE-2013-4287.html
-title: 'CVE-2013-4287 rubygems: version regex algorithmic complexity vulnerability'
+title: "CVE-2013-4287 rubygems: version regex algorithmic complexity vulnerability"
 date: 2013-09-09
-description: Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN
+description: |
+  Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN
   in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x
   before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows
   remote attackers to cause a denial of service (CPU consumption) via a crafted gem
   version that triggers a large amount of backtracking in a regular expression.
 cvss_v2: 4.3
 patched_versions:
-- ~> 1.8.23.1
-- ~> 1.8.26
-- ~> 2.0.8
-- '>= 2.1.0'
+  - "~> 1.8.23.1"
+  - "~> 1.8.26"
+  - "~> 2.0.8"
+  - ">= 2.1.0"
diff --git a/gems/rubygems-update/CVE-2013-4363.yml b/gems/rubygems-update/CVE-2013-4363.yml
index 2533ea8459..3f22730dc3 100644
--- a/gems/rubygems-update/CVE-2013-4363.yml
+++ b/gems/rubygems-update/CVE-2013-4363.yml
@@ -3,11 +3,14 @@ gem: rubygems-update
 library: rubygems
 cve: 2013-4363
 osvdb: 97163
+ghsa: 9qvm-2vhf-q649
 url: http://blog.rubygems.org/2013/09/24/CVE-2013-4363.html
-title: 'CVE-2013-4363 rubygems: version regex algorithmic complexity vulnerability,
-  incomplete CVE-2013-4287 fix'
+title:
+  "CVE-2013-4363 rubygems: version regex algorithmic complexity
+  vulnerability, incomplete CVE-2013-4287 fix"
 date: 2013-09-24
-description: 'Algorithmic complexity vulnerability in Gem::Version::ANCHORED_VERSION_PATTERN
+description: |
+  'Algorithmic complexity vulnerability in Gem::Version::ANCHORED_VERSION_PATTERN
   in lib/rubygems/version.rb in RubyGems before 1.8.23.2, 1.8.24 through 1.8.26, 2.0.x
   before 2.0.10, and 2.1.x before 2.1.5, as used in Ruby 1.9.0 through 2.0.0p247,
   allows remote attackers to cause a denial of service (CPU consumption) via a crafted
@@ -15,7 +18,7 @@ description: 'Algorithmic complexity vulnerability in Gem::Version::ANCHORED_VER
   this issue is due to an incomplete fix for CVE-2013-4287.'
 cvss_v2: 4.3
 patched_versions:
-- ~> 1.8.23.2
-- ~> 1.8.27
-- ~> 2.0.10
-- '>= 2.1.5'
+  - "~> 1.8.23.2"
+  - "~> 1.8.27"
+  - "~> 2.0.10"
+  - ">= 2.1.5"
diff --git a/gems/rubygems-update/CVE-2015-3900.yml b/gems/rubygems-update/CVE-2015-3900.yml
index 1e13dccb17..cb541412c1 100644
--- a/gems/rubygems-update/CVE-2015-3900.yml
+++ b/gems/rubygems-update/CVE-2015-3900.yml
@@ -3,10 +3,12 @@ gem: rubygems-update
 library: rubygems
 cve: 2015-3900
 osvdb: 122162
+ghsa: wp3j-rvfp-624h
 url: https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-007/?fid=6356
-title: 'CVE-2015-3900 rubygems: DNS hijacking vulnerability in api_endpoint()'
+title: "CVE-2015-3900 rubygems: DNS hijacking vulnerability in api_endpoint()"
 date: 2015-05-14
-description: RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7
+description: |
+  RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7
   does not validate the hostname when fetching gems or making API requests, which
   allows remote attackers to redirect requests to arbitrary domains via a crafted
   DNS SRV record, aka a "DNS hijack attack." A flaw was found in a way rubygems verified
@@ -15,6 +17,6 @@ description: RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before
   domain.
 cvss_v2: 5.0
 patched_versions:
-- ~> 2.0.16
-- ~> 2.2.4
-- '>= 2.4.7'
+  - "~> 2.0.16"
+  - "~> 2.2.4"
+  - ">= 2.4.7"
diff --git a/gems/rubygems-update/CVE-2015-4020.yml b/gems/rubygems-update/CVE-2015-4020.yml
index 9ff9c0b34b..41435c2169 100644
--- a/gems/rubygems-update/CVE-2015-4020.yml
+++ b/gems/rubygems-update/CVE-2015-4020.yml
@@ -2,10 +2,10 @@
 gem: rubygems-update
 library: rubygems
 cve: 2015-4020
+ghsa: qv62-xfj6-32xm
 url: https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-009/?fid=6478
-title: |
-  RubyGems remote_fetcher.rb api_endpoint() Function Missing SRV Record
-  Hostname Validation Request Hijacking
+title: RubyGems remote_fetcher.rb api_endpoint() Function Missing SRV Record Hostname
+  Validation Request Hijacking
 date: 2015-06-08
 description: |
   RubyGems contains a flaw in the api_endpoint() function in remote_fetcher.rb
@@ -15,6 +15,6 @@ description: |
   which allowed redirection to an arbitrary gem server in any security domain.
 cvss_v2: 5.0
 patched_versions:
-- ~> 2.0.17
-- ~> 2.2.5
-- '>= 2.4.8'
+  - "~> 2.0.17"
+  - "~> 2.2.5"
+  - ">= 2.4.8"
diff --git a/gems/rubygems-update/CVE-2017-0899.yml b/gems/rubygems-update/CVE-2017-0899.yml
index f5263c2fe6..5232a40cb4 100644
--- a/gems/rubygems-update/CVE-2017-0899.yml
+++ b/gems/rubygems-update/CVE-2017-0899.yml
@@ -2,7 +2,8 @@
 gem: rubygems-update
 library: rubygems
 cve: 2017-0899
-url: http://blog.rubygems.org/2017/08/27/2.6.13-released.html
+ghsa: 7gcp-2gmq-w3xh
+url: https://blog.rubygems.org/2017/08/27/2.6.13-released.html
 title: RubyGems ANSI escape sequence vulnerability
 date: 2017-08-29
 description: |
@@ -10,7 +11,8 @@ description: |
   specifications that include terminal escape characters. Printing the gem
   specification would execute terminal escape sequences.
 cvss_v2: 7.5
+cvss_v3: 9.8
 patched_versions:
-- '>= 2.4.5.3'
-- '>= 2.5.2.1'
-- '>= 2.6.13'
+  - ">= 2.4.5.3"
+  - ">= 2.5.2.1"
+  - ">= 2.6.13"
diff --git a/gems/rubygems-update/CVE-2017-0900.yml b/gems/rubygems-update/CVE-2017-0900.yml
index 58b31f2372..d2984352c8 100644
--- a/gems/rubygems-update/CVE-2017-0900.yml
+++ b/gems/rubygems-update/CVE-2017-0900.yml
@@ -2,7 +2,8 @@
 gem: rubygems-update
 library: rubygems
 cve: 2017-0900
-url: http://blog.rubygems.org/2017/08/27/2.6.13-released.html
+ghsa: p7f2-rr42-m9xm
+url: https://blog.rubygems.org/2017/08/27/2.6.13-released.html
 title: RubyGems DoS vulnerability in the query command
 date: 2017-08-29
 description: |
@@ -10,7 +11,8 @@ description: |
   specifications to cause a denial of service attack against RubyGems clients
   who have issued a `query` command.
 cvss_v2: 5.0
+cvss_v3: 7.5
 patched_versions:
-- '>= 2.4.5.3'
-- '>= 2.5.2.1'
-- '>= 2.6.13'
+  - ">= 2.4.5.3"
+  - ">= 2.5.2.1"
+  - ">= 2.6.13"
diff --git a/gems/rubygems-update/CVE-2017-0901.yml b/gems/rubygems-update/CVE-2017-0901.yml
index 2265314033..e32a72cbbd 100644
--- a/gems/rubygems-update/CVE-2017-0901.yml
+++ b/gems/rubygems-update/CVE-2017-0901.yml
@@ -2,16 +2,17 @@
 gem: rubygems-update
 library: rubygems
 cve: 2017-0901
-url: http://blog.rubygems.org/2017/08/27/2.6.13-released.html
-title: RubyGems vulnerability in the gem installer that allowed a malicious gem to
-  overwrite arbitrary files
+ghsa: pm9x-4392-2c2p
+url: https://blog.rubygems.org/2017/08/27/2.6.13-released.html
+title: RubyGems vulnerability in the gem installer that allowed a malicious gem to overwrite arbitrary files
 date: 2017-08-29
 description: |
   RubyGems version 2.6.12 and earlier fails to validate specification names,
   allowing a maliciously crafted gem to potentially overwrite any file on the
   filesystem.
 cvss_v2: 6.4
+cvss_v3: 7.5
 patched_versions:
-- '>= 2.4.5.3'
-- '>= 2.5.2.1'
-- '>= 2.6.13'
+  - ">= 2.4.5.3"
+  - ">= 2.5.2.1"
+  - ">= 2.6.13"
diff --git a/gems/rubygems-update/CVE-2017-0902.yml b/gems/rubygems-update/CVE-2017-0902.yml
index 888702ab1f..f592c80270 100644
--- a/gems/rubygems-update/CVE-2017-0902.yml
+++ b/gems/rubygems-update/CVE-2017-0902.yml
@@ -2,7 +2,8 @@
 gem: rubygems-update
 library: rubygems
 cve: 2017-0902
-url: http://blog.rubygems.org/2017/08/27/2.6.13-released.html
+ghsa: 73w7-6w9g-gc8w
+url: https://blog.rubygems.org/2017/08/27/2.6.13-released.html
 title: RubyGems DNS request hijacking vulnerability
 date: 2017-08-29
 description: |
@@ -10,7 +11,8 @@ description: |
   vulnerability that allows a MITM attacker to force the RubyGems client to
   down load and install gems from a server that the attacker controls.
 cvss_v2: 6.8
+cvss_v3: 8.1
 patched_versions:
-- '>= 2.4.5.3'
-- '>= 2.5.2.1'
-- '>= 2.6.13'
+  - ">= 2.4.5.3"
+  - ">= 2.5.2.1"
+  - ">= 2.6.13"
diff --git a/gems/rubygems-update/CVE-2017-0903.yml b/gems/rubygems-update/CVE-2017-0903.yml
index 7ee21ebf58..736028cc9f 100644
--- a/gems/rubygems-update/CVE-2017-0903.yml
+++ b/gems/rubygems-update/CVE-2017-0903.yml
@@ -2,6 +2,7 @@
 gem: rubygems-update
 library: rubygems
 cve: 2017-0903
+ghsa: mqwr-4qf2-2hcv
 url: https://blog.rubygems.org/2017/10/09/unsafe-object-deserialization-vulnerability.html
 title: Unsafe Object Deserialization Vulnerability in RubyGems
 date: 2017-10-09
@@ -11,7 +12,8 @@ description: |
   white lists. Specially crafted serialized objects can possibly be used to
   escalate to remote code execution.
 cvss_v2: 7.5
+cvss_v3: 9.8
 unaffected_versions:
-- < 2.0.0
+  - "< 2.0.0"
 patched_versions:
-- '>= 2.6.14'
+  - ">= 2.6.14"
diff --git a/gems/rubygems-update/CVE-2018-1000073.yml b/gems/rubygems-update/CVE-2018-1000073.yml
new file mode 100644
index 0000000000..d47805cb22
--- /dev/null
+++ b/gems/rubygems-update/CVE-2018-1000073.yml
@@ -0,0 +1,35 @@
+---
+gem: rubygems-update
+cve: 2018-1000073
+ghsa: gx69-6cp4-hxrj
+url: https://github.com/rubygems/rubygems/commit/1b931fc03b819b9a0214be3eaca844ef534175e2
+title: RubyGems Link Following vulnerability
+date: 2022-05-13
+description: |
+  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series:
+  2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and
+  earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability
+  in `install_location` function of `package.rb` that can result in path traversal
+  when writing to a symlinked basedir outside of the root. This vulnerability appears
+  to have been fixed in 2.7.6.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 2.7.6"
+related:
+  url:
+    - https://access.redhat.com/errata/RHSA-2018:3729
+    - https://access.redhat.com/errata/RHSA-2018:3730
+    - https://access.redhat.com/errata/RHSA-2018:3731
+    - https://access.redhat.com/errata/RHSA-2019:2028
+    - https://access.redhat.com/errata/RHSA-2020:0542
+    - https://access.redhat.com/errata/RHSA-2020:0591
+    - https://access.redhat.com/errata/RHSA-2020:0663
+    - https://lists.debian.org/debian-lts-announce/2018/08/msg00028.html
+    - https://usn.ubuntu.com/3621-1/
+    - https://www.debian.org/security/2018/dsa-4219
+    - https://www.debian.org/security/2018/dsa-4259
+    - http://blog.rubygems.org/2018/02/15/2.7.6-released.html
+    - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html
+    - https://github.com/jruby/jruby/commit/0b06b48ab4432237ce5fc1bef47f2c6bcf7843f7
+    - https://github.com/rubygems/rubygems/commit/666ef793cad42eed96f7aee1cdf77865db921099
+    - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=925986
diff --git a/gems/rubygems-update/CVE-2018-1000074.yml b/gems/rubygems-update/CVE-2018-1000074.yml
new file mode 100644
index 0000000000..5e114d52e0
--- /dev/null
+++ b/gems/rubygems-update/CVE-2018-1000074.yml
@@ -0,0 +1,38 @@
+---
+gem: rubygems-update
+cve: 2018-1000074
+ghsa: qj2w-mw2r-pv39
+url: https://github.com/rubygems/rubygems/commit/254e3d0ee873c008c0b74e8b8abcbdab4caa0a6d
+title: RubyGems Deserialization of Untrusted Data vulnerability
+date: 2022-05-14
+description: |
+  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series:
+  2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and
+  earlier, prior to trunk revision 62422 contains a Deserialization of Untrusted Data
+  vulnerability in owner command that can result in code execution. This attack requires
+  the victim to run the `gem owner` command on a gem with a specially crafted YAML
+  file. This vulnerability is fixed in 2.7.6.
+cvss_v3: 7.8
+patched_versions:
+  - ">= 2.7.6"
+related:
+  url:
+    - https://access.redhat.com/errata/RHSA-2018:3729
+    - https://access.redhat.com/errata/RHSA-2018:3730
+    - https://access.redhat.com/errata/RHSA-2018:3731
+    - https://access.redhat.com/errata/RHSA-2019:2028
+    - https://access.redhat.com/errata/RHSA-2020:0542
+    - https://access.redhat.com/errata/RHSA-2020:0591
+    - https://access.redhat.com/errata/RHSA-2020:0663
+    - https://lists.debian.org/debian-lts-announce/2018/04/msg00017.html
+    - https://lists.debian.org/debian-lts-announce/2018/08/msg00028.html
+    - https://lists.debian.org/debian-lts-announce/2019/05/msg00028.html
+    - https://usn.ubuntu.com/3621-1/
+    - https://usn.ubuntu.com/3621-2/
+    - https://usn.ubuntu.com/3685-1/
+    - https://www.debian.org/security/2018/dsa-4219
+    - https://www.debian.org/security/2018/dsa-4259
+    - http://blog.rubygems.org/2018/02/15/2.7.6-released.html
+    - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html
+    - https://github.com/jruby/jruby/commit/0b06b48ab4432237ce5fc1bef47f2c6bcf7843f7
+    - https://github.com/rubygems/rubygems/commit/5971b486d4dbb2bad5d3445b3801c456eb0ce183
diff --git a/gems/rubygems-update/CVE-2018-1000075.yml b/gems/rubygems-update/CVE-2018-1000075.yml
new file mode 100644
index 0000000000..93db50902e
--- /dev/null
+++ b/gems/rubygems-update/CVE-2018-1000075.yml
@@ -0,0 +1,38 @@
+---
+gem: rubygems-update
+cve: 2018-1000075
+ghsa: 74pv-v9gh-h25p
+url: https://github.com/rubygems/rubygems/commit/92e98bf8f810bd812f919120d4832df51bc25d83
+title: RubyGems Infinite Loop vulnerability
+date: 2022-05-13
+description: |
+  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series:
+  2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and
+  earlier, prior to trunk revision 62422 contains a infinite loop caused by negative
+  size vulnerability in ruby gem package tar header that can result in a negative
+  size could cause an infinite loop.. This vulnerability appears to have been fixed
+  in 2.7.6.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 2.7.6"
+related:
+  url:
+    - https://access.redhat.com/errata/RHSA-2018:3729
+    - https://access.redhat.com/errata/RHSA-2018:3730
+    - https://access.redhat.com/errata/RHSA-2018:3731
+    - https://access.redhat.com/errata/RHSA-2019:2028
+    - https://access.redhat.com/errata/RHSA-2020:0542
+    - https://access.redhat.com/errata/RHSA-2020:0591
+    - https://access.redhat.com/errata/RHSA-2020:0663
+    - https://lists.debian.org/debian-lts-announce/2018/04/msg00000.html
+    - https://lists.debian.org/debian-lts-announce/2018/04/msg00001.html
+    - https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html
+    - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
+    - https://lists.debian.org/debian-lts-announce/2019/05/msg00028.html
+    - https://usn.ubuntu.com/3621-1/
+    - https://www.debian.org/security/2018/dsa-4219
+    - https://www.debian.org/security/2018/dsa-4259
+    - http://blog.rubygems.org/2018/02/15/2.7.6-released.html
+    - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html
+    - https://github.com/jruby/jruby/commit/0b06b48ab4432237ce5fc1bef47f2c6bcf7843f7
+    - https://github.com/rubygems/rubygems/commit/5971b486d4dbb2bad5d3445b3801c456eb0ce183
diff --git a/gems/rubygems-update/CVE-2018-1000076.yml b/gems/rubygems-update/CVE-2018-1000076.yml
new file mode 100644
index 0000000000..5106ae67e1
--- /dev/null
+++ b/gems/rubygems-update/CVE-2018-1000076.yml
@@ -0,0 +1,39 @@
+---
+gem: rubygems-update
+cve: 2018-1000076
+ghsa: mc6j-h948-v2p6
+url: https://github.com/rubygems/rubygems/commit/f5042b879259b1f1ce95a0c5082622c646376693
+title: RubyGems Improper Verification of Cryptographic Signature vulnerability
+date: 2022-05-14
+description: |
+  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series:
+  2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, and Ruby 2.5 series: 2.5.0
+  and earlier, prior to trunk revision 62422 contain an Improper Verification of Cryptographic
+  Signature vulnerability in package.rb. This can result in a mis-signed gem being
+  installed, as the tarball would contain multiple gem signatures. This vulnerability
+  has been fixed in 2.7.6.
+cvss_v3: 9.8
+unaffected_versions:
+  - "< 2.2.0"
+patched_versions:
+  - ">= 2.7.6"
+related:
+  url:
+    - https://access.redhat.com/errata/RHSA-2018:3729
+    - https://access.redhat.com/errata/RHSA-2018:3730
+    - https://access.redhat.com/errata/RHSA-2018:3731
+    - https://access.redhat.com/errata/RHSA-2019:2028
+    - https://access.redhat.com/errata/RHSA-2020:0542
+    - https://access.redhat.com/errata/RHSA-2020:0591
+    - https://access.redhat.com/errata/RHSA-2020:0663
+    - https://lists.debian.org/debian-lts-announce/2018/04/msg00000.html
+    - https://lists.debian.org/debian-lts-announce/2018/04/msg00001.html
+    - https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html
+    - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
+    - https://lists.debian.org/debian-lts-announce/2019/05/msg00028.html
+    - https://usn.ubuntu.com/3621-1/
+    - https://www.debian.org/security/2018/dsa-4219
+    - https://www.debian.org/security/2018/dsa-4259
+    - http://blog.rubygems.org/2018/02/15/2.7.6-released.html
+    - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html
+    - https://github.com/jruby/jruby/commit/0b06b48ab4432237ce5fc1bef47f2c6bcf7843f7
diff --git a/gems/rubygems-update/CVE-2018-1000077.yml b/gems/rubygems-update/CVE-2018-1000077.yml
new file mode 100644
index 0000000000..1d241d8205
--- /dev/null
+++ b/gems/rubygems-update/CVE-2018-1000077.yml
@@ -0,0 +1,37 @@
+---
+gem: rubygems-update
+cve: 2018-1000077
+ghsa: gv86-43rv-79m2
+url: https://github.com/rubygems/rubygems/commit/feadefc2d351dcb95d6492f5ad17ebca546eb964
+title: RubyGems Improper Input Validation vulnerability
+date: 2022-05-14
+description: |
+  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series:
+  2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and
+  earlier, prior to trunk revision 62422 contains a Improper Input Validation vulnerability
+  in ruby gems specification homepage attribute that can result in a malicious gem
+  setting an invalid homepage URL. This vulnerability is fixed in 2.7.6.
+cvss_v3: 5.3
+patched_versions:
+  - ">= 2.7.6"
+related:
+  url:
+    - https://access.redhat.com/errata/RHSA-2018:3729
+    - https://access.redhat.com/errata/RHSA-2018:3730
+    - https://access.redhat.com/errata/RHSA-2018:3731
+    - https://access.redhat.com/errata/RHSA-2019:2028
+    - https://access.redhat.com/errata/RHSA-2020:0542
+    - https://access.redhat.com/errata/RHSA-2020:0591
+    - https://access.redhat.com/errata/RHSA-2020:0663
+    - https://lists.debian.org/debian-lts-announce/2018/04/msg00000.html
+    - https://lists.debian.org/debian-lts-announce/2018/04/msg00001.html
+    - https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html
+    - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
+    - https://lists.debian.org/debian-lts-announce/2019/05/msg00028.html
+    - https://usn.ubuntu.com/3621-1/
+    - https://www.debian.org/security/2018/dsa-4219
+    - https://www.debian.org/security/2018/dsa-4259
+    - http://blog.rubygems.org/2018/02/15/2.7.6-released.html
+    - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html
+    - https://github.com/jruby/jruby/commit/0b06b48ab4432237ce5fc1bef47f2c6bcf7843f7
+    - https://github.com/rubygems/rubygems/commit/5971b486d4dbb2bad5d3445b3801c456eb0ce183
diff --git a/gems/rubygems-update/CVE-2018-1000078.yml b/gems/rubygems-update/CVE-2018-1000078.yml
new file mode 100644
index 0000000000..e11a269e2d
--- /dev/null
+++ b/gems/rubygems-update/CVE-2018-1000078.yml
@@ -0,0 +1,38 @@
+---
+gem: rubygems-update
+cve: 2018-1000078
+ghsa: 87qx-g5wg-mwmj
+url: https://github.com/rubygems/rubygems/commit/66a28b9275551384fdab45f3591a82d6b59952cb
+title: RubyGems Cross-site Scripting vulnerability
+date: 2022-05-14
+description: |
+  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series:
+  2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and
+  earlier, prior to trunk revision 62422 contains a Cross Site Scripting (XSS) vulnerability
+  in gem server display of homepage attribute that can result in XSS. This attack
+  requires the victim to browse to a malicious gem on a vulnerable gem server. This
+  vulnerability is fixed in 2.7.6.
+cvss_v3: 6.1
+patched_versions:
+  - ">= 2.7.6"
+related:
+  url:
+    - https://access.redhat.com/errata/RHSA-2018:3729
+    - https://access.redhat.com/errata/RHSA-2018:3730
+    - https://access.redhat.com/errata/RHSA-2018:3731
+    - https://access.redhat.com/errata/RHSA-2019:2028
+    - https://access.redhat.com/errata/RHSA-2020:0542
+    - https://access.redhat.com/errata/RHSA-2020:0591
+    - https://access.redhat.com/errata/RHSA-2020:0663
+    - https://lists.debian.org/debian-lts-announce/2018/04/msg00000.html
+    - https://lists.debian.org/debian-lts-announce/2018/04/msg00001.html
+    - https://lists.debian.org/debian-lts-announce/2018/04/msg00023.html
+    - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
+    - https://lists.debian.org/debian-lts-announce/2019/05/msg00028.html
+    - https://usn.ubuntu.com/3621-1/
+    - https://www.debian.org/security/2018/dsa-4219
+    - https://www.debian.org/security/2018/dsa-4259
+    - http://blog.rubygems.org/2018/02/15/2.7.6-released.html
+    - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html
+    - https://github.com/jruby/jruby/commit/0b06b48ab4432237ce5fc1bef47f2c6bcf7843f7
+    - https://github.com/rubygems/rubygems/commit/5971b486d4dbb2bad5d3445b3801c456eb0ce183
diff --git a/gems/rubygems-update/CVE-2018-1000079.yml b/gems/rubygems-update/CVE-2018-1000079.yml
new file mode 100644
index 0000000000..63ccde4f23
--- /dev/null
+++ b/gems/rubygems-update/CVE-2018-1000079.yml
@@ -0,0 +1,37 @@
+---
+gem: rubygems-update
+cve: 2018-1000079
+ghsa: 8qxg-mff5-j3wc
+url: https://github.com/rubygems/rubygems/commit/666ef793cad42eed96f7aee1cdf77865db921099
+title: RubyGems Path Traversal vulnerability
+date: 2022-05-14
+description: |
+  RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series:
+  2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and
+  earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability
+  in gem installation that can result in the gem writing to arbitrary filesystem locations
+  during installation. This attack appears to be exploitable via installation of a
+  malicious gem. This vulnerability is fixed in 2.7.6.
+cvss_v3: 5.5
+patched_versions:
+  - ">= 2.7.6"
+related:
+  url:
+    - https://github.com/rubygems/rubygems/commit/f83f911e19e27cbac1ccce7471d96642241dd759
+    - https://access.redhat.com/errata/RHSA-2018:3729
+    - https://access.redhat.com/errata/RHSA-2018:3730
+    - https://access.redhat.com/errata/RHSA-2018:3731
+    - https://access.redhat.com/errata/RHSA-2019:2028
+    - https://access.redhat.com/errata/RHSA-2020:0542
+    - https://access.redhat.com/errata/RHSA-2020:0591
+    - https://access.redhat.com/errata/RHSA-2020:0663
+    - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
+    - https://usn.ubuntu.com/3621-1/
+    - https://www.debian.org/security/2018/dsa-4219
+    - https://www.debian.org/security/2018/dsa-4259
+    - http://blog.rubygems.org/2018/02/15/2.7.6-released.html
+    - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html
+    - https://github.com/jruby/jruby/commit/0b06b48ab4432237ce5fc1bef47f2c6bcf7843f7
+    - https://github.com/rubygems/rubygems/commit/5971b486d4dbb2bad5d3445b3801c456eb0ce183
+    - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=895778
+    - https://security-tracker.debian.org/tracker/CVE-2018-1000079
diff --git a/gems/rubygems-update/CVE-2019-8320.yml b/gems/rubygems-update/CVE-2019-8320.yml
index 3192cd1e24..a24ee1c22f 100644
--- a/gems/rubygems-update/CVE-2019-8320.yml
+++ b/gems/rubygems-update/CVE-2019-8320.yml
@@ -17,7 +17,7 @@ description: |
   likely lead to data loss or an unusable system.
 cvss_v3: 7.4
 unaffected_versions:
-- "< 2.7.6"
+  - "< 2.7.6"
 patched_versions:
-- ">= 3.0.3"
-- "~> 2.7.9"
+  - ">= 3.0.3"
+  - "~> 2.7.9"
diff --git a/gems/rubygems-update/CVE-2019-8321.yml b/gems/rubygems-update/CVE-2019-8321.yml
index 2174457dc7..bcf1bd8a08 100644
--- a/gems/rubygems-update/CVE-2019-8321.yml
+++ b/gems/rubygems-update/CVE-2019-8321.yml
@@ -12,7 +12,7 @@ description: |
   injection is possible.
 cvss_v3: 7.5
 unaffected_versions:
-- "< 2.6"
+  - "< 2.6"
 patched_versions:
-- ">= 3.0.3"
-- "~> 2.7.9"
+  - ">= 3.0.3"
+  - "~> 2.7.9"
diff --git a/gems/rubygems-update/CVE-2019-8322.yml b/gems/rubygems-update/CVE-2019-8322.yml
index 02f2ceeef9..95c02ca563 100644
--- a/gems/rubygems-update/CVE-2019-8322.yml
+++ b/gems/rubygems-update/CVE-2019-8322.yml
@@ -10,8 +10,9 @@ description: |
   An issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem
   owner command outputs the contents of the API response directly to stdout.
   Therefore, if the response is crafted, escape sequence injection may occur.
+cvss_v3: 7.5
 unaffected_versions:
-- < 2.6
+  - "< 2.6"
 patched_versions:
-- '>= 3.0.3'
-- ~> 2.7.9
+  - "~> 2.7.9"
+  - ">= 3.0.3"
diff --git a/gems/rubygems-update/CVE-2019-8323.yml b/gems/rubygems-update/CVE-2019-8323.yml
index 74efc93a87..d3c696ad37 100644
--- a/gems/rubygems-update/CVE-2019-8323.yml
+++ b/gems/rubygems-update/CVE-2019-8323.yml
@@ -13,7 +13,7 @@ description: |
   injection may occur.
 cvss_v3: 7.5
 unaffected_versions:
-- "< 2.6"
+  - "< 2.6"
 patched_versions:
-- ">= 3.0.3"
-- "~> 2.7.9"
+  - ">= 3.0.3"
+  - "~> 2.7.9"
diff --git a/gems/rubygems-update/CVE-2019-8324.yml b/gems/rubygems-update/CVE-2019-8324.yml
index b926d4df3f..d6f60d8e76 100644
--- a/gems/rubygems-update/CVE-2019-8324.yml
+++ b/gems/rubygems-update/CVE-2019-8324.yml
@@ -13,7 +13,7 @@ description: |
   code in ensure_loadable_spec during the preinstall check.
 cvss_v3: 8.8
 unaffected_versions:
-- "< 2.6"
+  - "< 2.6"
 patched_versions:
-- ">= 3.0.3"
-- "~> 2.7.9"
+  - ">= 3.0.3"
+  - "~> 2.7.9"
diff --git a/gems/rubygems-update/CVE-2019-8325.yml b/gems/rubygems-update/CVE-2019-8325.yml
index 7b04ba3cbb..79e28cdd9c 100644
--- a/gems/rubygems-update/CVE-2019-8325.yml
+++ b/gems/rubygems-update/CVE-2019-8325.yml
@@ -12,7 +12,7 @@ description: |
   injection is possible. (There are many ways to cause an error.)
 cvss_v3: 7.5
 unaffected_versions:
-- "< 2.6"
+  - "< 2.6"
 patched_versions:
-- ">= 3.0.3"
-- "~> 2.7.9"
+  - ">= 3.0.3"
+  - "~> 2.7.9"
diff --git a/gems/rubyzip/CVE-2017-5946.yml b/gems/rubyzip/CVE-2017-5946.yml
index ef91ed4c82..5917d2006e 100644
--- a/gems/rubyzip/CVE-2017-5946.yml
+++ b/gems/rubyzip/CVE-2017-5946.yml
@@ -13,4 +13,4 @@ description: |
 cvss_v2: 7.5
 cvss_v3: 9.8
 patched_versions:
-- '>= 1.2.1'
+  - ">= 1.2.1"
diff --git a/gems/rubyzip/CVE-2018-1000544.yml b/gems/rubyzip/CVE-2018-1000544.yml
index 8a3bd8216f..7fc4698ddf 100644
--- a/gems/rubyzip/CVE-2018-1000544.yml
+++ b/gems/rubyzip/CVE-2018-1000544.yml
@@ -13,9 +13,9 @@ description: |
   files to the filesystem.
 cvss_v3: 9.8
 patched_versions:
-- ">= 1.2.2"
+  - ">= 1.2.2"
 related:
   cve:
-  - 2017-5946
+    - 2017-5946
   url:
-  - https://security-tracker.debian.org/tracker/CVE-2018-1000544
+    - https://security-tracker.debian.org/tracker/CVE-2018-1000544
diff --git a/gems/rubyzip/CVE-2019-16892.yml b/gems/rubyzip/CVE-2019-16892.yml
index 147f6a2966..bed0b7b5ab 100644
--- a/gems/rubyzip/CVE-2019-16892.yml
+++ b/gems/rubyzip/CVE-2019-16892.yml
@@ -12,4 +12,4 @@ description: |
   (disk consumption).
 cvss_v3: 5.5
 patched_versions:
-- ">= 1.3.0"
+  - ">= 1.3.0"
diff --git a/gems/rwiki/CVE-2006-2581.yml b/gems/rwiki/CVE-2006-2581.yml
new file mode 100644
index 0000000000..1c49c38b31
--- /dev/null
+++ b/gems/rwiki/CVE-2006-2581.yml
@@ -0,0 +1,39 @@
+---
+gem: rwiki
+cve: 2006-2581
+ghsa: gvhx-gj42-m28v
+url: https://web.archive.org/web/20090501134922/http://www2a.biglobe.ne.jp/~seki/ruby/rwiki.html
+title: RWiki before 2.1.1 has cross-site scripting vulnerability
+date: 2006-05-14
+description: |
+  Cross-site scripting (XSS) vulnerability in Wiki content in
+  RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to inject
+  arbitrary web script or HTML via unknown attack vectors.
+cvss_v2: 4.3
+unaffected_versions:
+  - "< 2.1.0pre1"
+patched_versions:
+  - ">= 2.1.1"
+related:
+  cve:
+    - 2006-2582
+  ghsa:
+    - wwmf-6p58-6vj2
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2006-2581
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/26664
+    - https://github.com/advisories/GHSA-wwmf-6p58-6vj2
+    - https://github.com/advisories/GHSA-gvhx-gj42-m28v
+    - https://rubygems.org/gems/rwiki
+    - https://web.archive.org/web/20090501134922/http://www2a.biglobe.ne.jp/~seki/ruby/rwiki.html
+    - https://web.archive.org/web/20090504061152/http://pub.cozmixng.org/~the-rwiki/rw-cgi.rb?cmd=view;name=top
+    - https://web.archive.org/web/20081201080215/http://secunia.com/advisories/20264
+    - https://web.archive.org/web/20090524010623/http://www.vupen.com/english/advisories/2006/1949
+notes: |
+  - Best references are in Japanese.
+  - Source code link on rubygems.org goes to
+    lucassus/rwiki (last version 0.2.5, not 2.1.1).
+  - Found two other repos:
+    - https://github.com/rwiki/rwiki
+    - https://github.com/ytakhs/rwiki
+  - CWE: [NVD-CWE-Other] MODERATE
diff --git a/gems/rwiki/CVE-2006-2582.yml b/gems/rwiki/CVE-2006-2582.yml
new file mode 100644
index 0000000000..9b695ea951
--- /dev/null
+++ b/gems/rwiki/CVE-2006-2582.yml
@@ -0,0 +1,38 @@
+---
+gem: rwiki
+cve: 2006-2582
+ghsa: wwmf-6p58-6vj2
+url: https://web.archive.org/web/20090501134922/http://www2a.biglobe.ne.jp/~seki/ruby/rwiki.html
+title: High severity vulnerability that affects rwiki
+date: 2006-05-14
+description: |
+  The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote
+  attackers to execute arbitrary Ruby code via unknown attack vectors.
+cvss_v2: 7.5
+unaffected_versions:
+  - "< 2.1.0pre1"
+patched_versions:
+  - ">= 2.1.1"
+related:
+  cve:
+    - 2006-2581
+  ghsa:
+    - gvhx-gj42-m28v
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2006-2582
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/26664
+    - https://github.com/advisories/GHSA-wwmf-6p58-6vj2
+    - https://github.com/advisories/GHSA-gvhx-gj42-m28v
+    - https://rubygems.org/gems/rwiki
+    - https://web.archive.org/web/20090501134922/http://www2a.biglobe.ne.jp/~seki/ruby/rwiki.html
+    - https://web.archive.org/web/20090504061152/http://pub.cozmixng.org/~the-rwiki/rw-cgi.rb?cmd=view;name=top
+    - https://web.archive.org/web/20081201080215/http://secunia.com/advisories/20264
+    - https://web.archive.org/web/20090524010623/http://www.vupen.com/english/advisories/2006/1949
+notes: |
+  - Best references are in Japanese.
+  - Source code link on rubygems.org goes to
+    lucassus/rwiki (last version 0.2.5, not 2.1.1).
+  - Found two other repos:
+    - https://github.com/rwiki/rwiki
+    - https://github.com/ytakhs/rwiki
+  - CWE: [NVD-CWE-Other] MODERATE
diff --git a/gems/safemode/CVE-2016-3693.yml b/gems/safemode/CVE-2016-3693.yml
index b39d1e779b..c04fcc3d73 100644
--- a/gems/safemode/CVE-2016-3693.yml
+++ b/gems/safemode/CVE-2016-3693.yml
@@ -12,4 +12,4 @@ description: |
   including routes, secret tokens, caches and so on.
 cvss_v3: 8.1
 patched_versions:
-- ">= 1.2.4"
+  - ">= 1.2.4"
diff --git a/gems/safemode/CVE-2017-7540.yml b/gems/safemode/CVE-2017-7540.yml
index f6dfaa5ce7..0d0e543b6b 100644
--- a/gems/safemode/CVE-2017-7540.yml
+++ b/gems/safemode/CVE-2017-7540.yml
@@ -10,8 +10,9 @@ description: |
   to bypassing safe mode limitations via special Ruby syntax. This can
   lead to deletion of objects for which the user does not have delete
   permissions or possibly to privilege escalation.
+cvss_v3: 9.8
 patched_versions:
-- '>= 1.3.3'
+  - ">= 1.3.3"
 related:
   url:
-  - https://github.com/svenfuchs/safemode/pull/23
+    - https://github.com/svenfuchs/safemode/pull/23
diff --git a/gems/samlr/CVE-2018-20857.yml b/gems/samlr/CVE-2018-20857.yml
index 5733768f3a..399141a1d8 100644
--- a/gems/samlr/CVE-2018-20857.yml
+++ b/gems/samlr/CVE-2018-20857.yml
@@ -11,4 +11,4 @@ description: |
   domain name.
 cvss_v3: 7.5
 patched_versions:
-- '>= 2.6.2'
+  - ">= 2.6.2"
diff --git a/gems/sanitize/CVE-2018-3740.yml b/gems/sanitize/CVE-2018-3740.yml
index 7890e4b0a3..1bed488fa0 100644
--- a/gems/sanitize/CVE-2018-3740.yml
+++ b/gems/sanitize/CVE-2018-3740.yml
@@ -13,11 +13,12 @@ description: |
 
   This can allow HTML and JavaScript injection, which could result in XSS
   if Sanitize's output is served to browsers.
+cvss_v3: 7.5
 unaffected_versions:
-- < 1.1.0
+  - "< 1.1.0"
 patched_versions:
-- ~> 2.1.1
-- '>= 4.6.3'
+  - "~> 2.1.1"
+  - ">= 4.6.3"
 related:
   url:
-  - https://github.com/rgrove/sanitize/commit/01629a162e448a83d901456d0ba8b65f3b03d46e
+    - https://github.com/rgrove/sanitize/commit/01629a162e448a83d901456d0ba8b65f3b03d46e
diff --git a/gems/sanitize/CVE-2020-4054.yml b/gems/sanitize/CVE-2020-4054.yml
index 94c768f2d0..085095cf37 100644
--- a/gems/sanitize/CVE-2020-4054.yml
+++ b/gems/sanitize/CVE-2020-4054.yml
@@ -5,7 +5,7 @@ ghsa: p4x4-rw2p-8j8m
 url: https://github.com/rgrove/sanitize/security/advisories/GHSA-p4x4-rw2p-8j8m
 date: 2020-06-16
 title: Cross-site scripting vulnerability via `<math>` or `<svg>` element in Sanitize
-description: |-
+description: |
   When HTML is sanitized using Sanitize's "relaxed" config or a custom config that allows certain
   elements, some content in a `<math>` or `<svg>` element may not be sanitized correctly even if
   `math` and `svg` are not in the allowlist.
@@ -58,7 +58,7 @@ description: |-
   You would then pass this custom config to Sanitize when sanitizing HTML.
 cvss_v3: 7.3
 patched_versions:
-- '>= 5.2.1'
+  - ">= 5.2.1"
 
 unaffected_versions:
-- < 3.0.0
+  - "< 3.0.0"
diff --git a/gems/sanitize/CVE-2023-23627.yml b/gems/sanitize/CVE-2023-23627.yml
new file mode 100644
index 0000000000..a9ca5778d7
--- /dev/null
+++ b/gems/sanitize/CVE-2023-23627.yml
@@ -0,0 +1,34 @@
+---
+gem: sanitize
+cve: 2023-23627
+ghsa: fw3g-2h3j-qmm7
+url: https://github.com/rgrove/sanitize/security/advisories/GHSA-fw3g-2h3j-qmm7
+title: Improper neutralization of `noscript` element content may allow XSS in Sanitize
+date: 2023-01-28
+description: |
+  ### Impact
+
+  Using carefully crafted input, an attacker may be able to sneak arbitrary HTML through Sanitize `>= 5.0.0, < 6.0.1` when Sanitize is configured with a custom allowlist that allows `noscript` elements. This could result in XSS (cross-site scripting) or other undesired behavior when that HTML is rendered in a browser.
+
+  Sanitize's default configs don't allow `noscript` elements and are not vulnerable. This issue only affects users who are using a custom config that adds `noscript` to the element allowlist.
+
+  ### Patches
+
+  Sanitize `>= 6.0.1` always removes `noscript` elements and their contents, even when `noscript` is in the allowlist.
+
+  ### Workarounds
+
+  Users who are unable to upgrade can prevent this issue by using one of Sanitize's default configs or by ensuring that their custom config does not include `noscript` in the element allowlist.
+
+  ### Details
+
+  The root cause of this issue is that HTML parsing rules treat the contents of a `noscript` element differently depending on whether scripting is enabled in the user agent. Nokogiri (the HTML parser Sanitize uses) doesn't support scripting so it follows the "scripting disabled" rules, but a web browser with scripting enabled will follow the "scripting enabled" rules. This means that Sanitize can't reliably make the contents of a `noscript` element safe for scripting enabled browsers. The safest thing to do is to remove the element and its contents entirely, which is now what Sanitize does in version 6.0.1 and later.
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 5.0.0"
+patched_versions:
+  - ">= 6.0.1"
+related:
+  url:
+    - https://github.com/rgrove/sanitize/commit/ec14265e530dc3fe31ce2ef773594d3a97778d22
+    - https://github.com/rgrove/sanitize/releases/tag/v6.0.1
diff --git a/gems/sanitize/CVE-2023-36823.yml b/gems/sanitize/CVE-2023-36823.yml
new file mode 100644
index 0000000000..46388a9a93
--- /dev/null
+++ b/gems/sanitize/CVE-2023-36823.yml
@@ -0,0 +1,48 @@
+---
+gem: sanitize
+cve: 2023-36823
+ghsa: f5ww-cq3m-q3g7
+url: https://github.com/rgrove/sanitize/releases/tag/v6.0.2
+title: Sanitize vulnerable to Cross-site Scripting via insufficient
+  neutralization  of `style` element content
+date: 2023-07-06
+description: |
+  ### Impact
+
+  Using carefully crafted input, an attacker may be able to sneak
+  arbitrary HTML and CSS through Sanitize `>= 3.0.0, < 6.0.2` when
+  Sanitize is configured to use the built-in "relaxed" config or
+  when using a custom config that allows `style` elements and one
+  or more CSS at-rules. This could result in XSS (cross-site scripting)
+  or other undesired behavior when the malicious HTML and CSS are
+  rendered in a browser.
+
+  ### Patches
+
+  Sanitize `>= 6.0.2` performs additional escaping of CSS in `style`
+  element content, which fixes this issue.
+
+  ### Workarounds
+
+  Users who are unable to upgrade can prevent this issue by using a
+  Sanitize config that doesn't allow `style` elements, using a Sanitize
+  config that doesn't allow CSS at-rules, or by manually escaping the
+  character sequence `</` as `<\/` in `style` element content.
+
+  ### Credit
+
+  This issue was found by @cure53 during an audit of a project that
+  uses Sanitize and was reported by one of that project's maintainers.
+  Thank you!
+
+cvss_v3: 7.1
+unaffected_versions:
+  - "< 3.0.0"
+patched_versions:
+  - ">= 6.0.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-36823
+    - https://github.com/rgrove/sanitize/releases/tag/v6.0.2
+    - https://github.com/rgrove/sanitize/commit/76ed46e6dc70820f38efe27de8dabd54dddb5220
+    - https://github.com/advisories/GHSA-f5ww-cq3m-q3g7
diff --git a/gems/screen_capture/OSVDB-107783.yml b/gems/screen_capture/OSVDB-107783.yml
index 20fd8ea9a3..cc6683b73e 100644
--- a/gems/screen_capture/OSVDB-107783.yml
+++ b/gems/screen_capture/OSVDB-107783.yml
@@ -1,10 +1,16 @@
 ---
 gem: screen_capture
 osvdb: 107783
-url: http://osvdb.org/show/osvdb/107783
-title: Screen Capture Gem for Ruby screen_capture.rb URL Handling Arbitrary Command
-  Execution
+url: https://github.com/jamster/screen_capture/blob/master/lib/screen_capture.rb
+title: Screen Capture Gem for Ruby screen_capture.rb
+  URL Handling Arbitrary Command Execution
 date: 2014-06-07
-description: Screen Capture Gem for Ruby contains a flaw in screen_capture.rb that
-  is triggered when handling input passed via the URL. This may allow a context-dependent
-  attacker to execute arbitrary commands.
+description: |
+  Screen Capture Gem for Ruby contains a flaw in screen_capture.rb that
+  is triggered when handling input passed via the URL. This may allow
+  a context-dependent attacker to execute arbitrary commands.
+notes: "Never patched"
+related:
+  url:
+    - https://github.com/jamster/screen_capture/blob/master/lib/screen_capture.rb
+    - http://osvdb.org/show/osvdb/107783
diff --git a/gems/secure_headers/CVE-2020-5216.yml b/gems/secure_headers/CVE-2020-5216.yml
index e35f2b08dc..040f3ba9f2 100644
--- a/gems/secure_headers/CVE-2020-5216.yml
+++ b/gems/secure_headers/CVE-2020-5216.yml
@@ -5,7 +5,7 @@ ghsa: w978-rmpf-qmwg
 url: https://github.com/twitter/secure_headers/security/advisories/GHSA-w978-rmpf-qmwg
 date: 2020-01-23
 title: secure_headers header injection due to newline
-description: |-
+description: |
   If user-supplied input was passed into append/override_content_security_policy_directives,
   a newline could be injected leading to limited header injection.
 
@@ -45,6 +45,6 @@ description: |-
   ```
 cvss_v3: 4.4
 patched_versions:
-- ~> 3.9
-- ~> 5.2
-- '>= 6.3.0'
+  - "~> 3.9"
+  - "~> 5.2"
+  - ">= 6.3.0"
diff --git a/gems/secure_headers/CVE-2020-5217.yml b/gems/secure_headers/CVE-2020-5217.yml
index 633e301c01..4238da53e4 100644
--- a/gems/secure_headers/CVE-2020-5217.yml
+++ b/gems/secure_headers/CVE-2020-5217.yml
@@ -5,7 +5,7 @@ ghsa: xq52-rv6w-397c
 url: https://github.com/twitter/secure_headers/security/advisories/GHSA-xq52-rv6w-397c
 date: 2020-01-23
 title: secure_headers directive injection using semicolon
-description: |-
+description: |
   If user-supplied input was passed into append/override_content_security_policy_directives,
   a semicolon could be injected leading to directive injection.
 
@@ -35,6 +35,6 @@ description: |-
   ```
 cvss_v3: 4.4
 patched_versions:
-- ~> 3.8
-- ~> 5.1
-- '>= 6.2.0'
+  - "~> 3.8"
+  - "~> 5.1"
+  - ">= 6.2.0"
diff --git a/gems/sentry-raven/CVE-2014-9490.yml b/gems/sentry-raven/CVE-2014-9490.yml
index 340ef89fbe..75e3fd7510 100644
--- a/gems/sentry-raven/CVE-2014-9490.yml
+++ b/gems/sentry-raven/CVE-2014-9490.yml
@@ -2,13 +2,15 @@
 gem: sentry-raven
 cve: 2014-9490
 osvdb: 115654
+ghsa: c9c5-9fpr-m882
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-9490
 title: sentry-raven Gem for Ruby contains a flaw that can result in a denial of service
 date: 2014-12-08
-description: Sentry raven-ruby contains a flaw in the lib/raven/okjson.rb script that
+description: |
+  Sentry raven-ruby contains a flaw in the lib/raven/okjson.rb script that
   is triggered when large numeric values are stored as an exponent or in scientific
   notation. With a specially crafted request, an attacker can cause the software to
   consume excessive resources resulting in a denial of service.
 cvss_v2: 5.0
 patched_versions:
-- '>= 0.12.2'
+  - ">= 0.12.2"
diff --git a/gems/sequenceserver/CVE-2024-42360.yml b/gems/sequenceserver/CVE-2024-42360.yml
new file mode 100644
index 0000000000..ce8bd59341
--- /dev/null
+++ b/gems/sequenceserver/CVE-2024-42360.yml
@@ -0,0 +1,29 @@
+---
+gem: sequenceserver
+cve: 2024-42360
+ghsa: qv32-5wm2-p32h
+url: https://github.com/wurmlab/sequenceserver/security/advisories/GHSA-qv32-5wm2-p32h
+title: Command Injection in sequenceserver gem
+date: 2024-08-13
+description: |
+  ### Impact
+
+  Several HTTP endpoints did not properly sanitize user input
+  and/or query parameters. This could be exploited to inject
+  and run unwanted shell commands
+
+  ### Patches
+
+  Fixed in 3.1.2
+
+  ### Workarounds
+
+  No known workarounds
+cvss_v3: 9.8
+patched_versions:
+  - ">= 3.1.2"
+related:
+  url:
+    - https://github.com/wurmlab/sequenceserver/security/advisories/GHSA-qv32-5wm2-p32h
+    - https://github.com/wurmlab/sequenceserver/commit/457e52709f7f9ed2fceed59b3db564cb50785dba
+    - https://github.com/advisories/GHSA-qv32-5wm2-p32h
diff --git a/gems/sfpagent/CVE-2014-2888.yml b/gems/sfpagent/CVE-2014-2888.yml
index 875f84ad59..51158fb7fb 100644
--- a/gems/sfpagent/CVE-2014-2888.yml
+++ b/gems/sfpagent/CVE-2014-2888.yml
@@ -2,6 +2,7 @@
 gem: sfpagent
 cve: 2014-2888
 osvdb: 105971
+ghsa: vm28-mrm7-fpjq
 url: https://nvd.nist.gov/vuln/detail/CVE-2014-2888
 title: sfpagent Gem for Ruby JSON[body] Module Name Remote Command Execution
 date: 2014-04-16
@@ -12,4 +13,4 @@ description: |
   arbitrary commands.
 cvss_v2: 7.5
 patched_versions:
-- '>= 0.4.15'
+  - ">= 0.4.15"
diff --git a/gems/sha3/CVE-2022-37454.yml b/gems/sha3/CVE-2022-37454.yml
new file mode 100644
index 0000000000..86956d0889
--- /dev/null
+++ b/gems/sha3/CVE-2022-37454.yml
@@ -0,0 +1,48 @@
+---
+gem: sha3
+cve: 2022-37454
+ghsa: 6w4m-2xhg-2658
+url: https://github.com/XKCP/XKCP/security/advisories/GHSA-6w4m-2xhg-2658
+title: Buffer overflow in sponge queue functions
+date: 2023-04-26
+description: |
+  Impact
+    The Keccak sponge function interface accepts partial inputs to be
+    absorbed and partial outputs to be squeezed. A buffer can overflow
+    when partial data with some specific sizes are queued, where at
+    least one of them has a length of 2^32 - 200 bytes or more.
+  Patches
+    Yes, see commit [fdc6fef0](https://github.com/XKCP/XKCP/commit/fdc6fef075f4e81d6b1bc38364248975e08e340a).
+  Workarounds
+    The problem can be avoided by limiting the size of the partial
+    input data (or partial output digest) below 2^32 - 200 bytes.
+    Multiple calls to the queue system can be chained at a higher
+    level to retain the original functionality. Alternatively, one
+    can process the entire input (or produce the entire output) at
+    once, avoiding the queuing functions altogether.
+  References
+    See [issue #105](https://github.com/XKCP/XKCP/issues/105) for more details.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 1.0.5"
+related:
+  url:
+    - https://github.com/XKCP/XKCP/security/advisories/GHSA-6w4m-2xhg-2658
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-37454
+    - https://github.com/XKCP/XKCP/issues/105
+    - https://github.com/johanns/sha3/issues/17
+    - https://github.com/tiran/pysha3/issues/29
+    - https://github.com/XKCP/XKCP/commit/fdc6fef075f4e81d6b1bc38364248975e08e340a
+    - https://github.com/johanns/sha3/commit/5f2e8118a62831911703c8753ff2435c3b5d7312
+    - https://csrc.nist.gov/projects/hash-functions/sha-3-project
+    - https://eprint.iacr.org/2023/331
+    - https://lists.debian.org/debian-lts-announce/2022/10/msg00041.html
+    - https://lists.debian.org/debian-lts-announce/2022/11/msg00000.html
+    - https://mouha.be/sha-3-buffer-overflow/
+    - https://www.debian.org/security/2022/dsa-5267
+    - https://www.debian.org/security/2022/dsa-5269
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ALQ6BDDPX5HU5YBQOBMDVAA2TSGDKIJ
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMIEXLMTW5GO36HTFFWIPB3OHZXCT3G4/
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMIEXLMTW5GO36HTFFWIPB3OHZXCT3G4
+    - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ALQ6BDDPX5HU5YBQOBMDVAA2TSGDKIJ
+    - https://github.com/advisories/GHSA-6w4m-2xhg-2658
diff --git a/gems/show_in_browser/CVE-2013-2105.yml b/gems/show_in_browser/CVE-2013-2105.yml
index 2d6e8304cc..dc63050711 100644
--- a/gems/show_in_browser/CVE-2013-2105.yml
+++ b/gems/show_in_browser/CVE-2013-2105.yml
@@ -2,10 +2,12 @@
 gem: show_in_browser
 cve: 2013-2105
 osvdb: 93490
+ghsa: 9hx9-w2j6-rw76
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-2105
 title: Show In Browser Gem for Ruby /tmp/browser.html Arbitrary Script Injection
 date: 2013-05-17
-description: Show In Browser Gem for Ruby contains a flaw that is triggered when the
+description: |
+  Show In Browser Gem for Ruby contains a flaw that is triggered when the
   application does not validate input passed via the /tmp/browser.html file. This
   may allow a local attacker to create a specially crafted request that would execute
   arbitrary script code in a user's browser.
diff --git a/gems/shrine/CVE-2020-15237.yml b/gems/shrine/CVE-2020-15237.yml
index 9aebbcbaed..c20f32849f 100644
--- a/gems/shrine/CVE-2020-15237.yml
+++ b/gems/shrine/CVE-2020-15237.yml
@@ -5,7 +5,7 @@ ghsa: 5jjv-x4fq-qjwp
 url: https://github.com/shrinerb/shrine/security/advisories/GHSA-5jjv-x4fq-qjwp
 date: 2020-10-05
 title: Possible timing attack in derivation_endpoint
-description: |-
+description: |
   ### Impact
 
   When using the `derivation_endpoint` plugin, it's possible for the attacker to use a timing attack
@@ -40,4 +40,4 @@ description: |-
   You can read more about timing attacks [here](https://en.wikipedia.org/wiki/Timing_attack).
 cvss_v3: 5.9
 patched_versions:
-- '>= 3.3.0'
+  - ">= 3.3.0"
diff --git a/gems/sidekiq-pro/OSVDB-126329.yml b/gems/sidekiq-pro/OSVDB-126329.yml
index f8cbc5dd0f..fb4ede76c6 100644
--- a/gems/sidekiq-pro/OSVDB-126329.yml
+++ b/gems/sidekiq-pro/OSVDB-126329.yml
@@ -1,12 +1,18 @@
 ---
 gem: sidekiq-pro
 osvdb: 126329
-url: https://github.com/mperham/sidekiq/commit/a695ff347ae50f641dfc35189131b232ea0aa1db
-title: |
-  Sidekiq Pro Gem for Ruby web/views/batch.erb Class and ErrorMessage Elements
-  Reflected XSS
+url: https://github.com/sidekiq/sidekiq/blob/main/Pro-Changes.md#202
+title:
+  Sidekiq Pro Gem for Ruby web/views/batch.erb Class and
+  ErrorMessage Elements Reflected XSS
 date: 2015-05-11
 description: |
   XSS via batch failure error_class and error_message in Sidekiq::Web
 patched_versions:
-- '>= 2.0.2'
+  - ">= 2.0.2"
+related:
+  url:
+    - https://github.com/sidekiq/sidekiq/blob/main/Pro-Changes.md#202
+    - https://github.com/mperham/sidekiq/commit/a695ff347ae50f641dfc35189131b232ea0aa1db
+    - https://github.com/sidekiq/sidekiq/issues/2467
+    - https://security.snyk.io/vuln/SNYK-RUBY-SIDEKIQPRO-20219
diff --git a/gems/sidekiq-pro/OSVDB-126330.yml b/gems/sidekiq-pro/OSVDB-126330.yml
index 572e574295..cc783e86ad 100644
--- a/gems/sidekiq-pro/OSVDB-126330.yml
+++ b/gems/sidekiq-pro/OSVDB-126330.yml
@@ -1,10 +1,14 @@
 ---
 gem: sidekiq-pro
 osvdb: 126330
-url: https://github.com/mperham/sidekiq/commit/99b12fb50fe244c5a317f03f1bed9b333ec56ebe
-title: |
-  Sidekiq Pro Gem for Ruby web/views/batch{,es}.erb Description Element XSS
+url: https://security.snyk.io/vuln/SNYK-RUBY-SIDEKIQPRO-20197
+title: Sidekiq Pro Gem for Ruby web/views/batch{,es}.erb Description Element XSS
 date: 2014-10-13
-description: XSS via batch description in Sidekiq::Web
+description: |
+  XSS via batch description in Sidekiq::Web
 patched_versions:
-- '>= 1.9.1'
+  - ">= 1.9.1"
+related:
+  url:
+    - https://github.com/mperham/sidekiq/commit/99b12fb50fe244c5a317f03f1bed9b333ec56ebe
+    - https://security.snyk.io/vuln/SNYK-RUBY-SIDEKIQPRO-20197
diff --git a/gems/sidekiq-pro/OSVDB-126331.yml b/gems/sidekiq-pro/OSVDB-126331.yml
index 7faf8e86f4..353593e0f2 100644
--- a/gems/sidekiq-pro/OSVDB-126331.yml
+++ b/gems/sidekiq-pro/OSVDB-126331.yml
@@ -1,14 +1,21 @@
 ---
 gem: sidekiq-pro
 osvdb: 126331
-url: https://github.com/mperham/sidekiq/commit/651400ed8f237118346895c99dc28ca94f3169d3
+url: https://github.com/sidekiq/sidekiq/blob/main/Pro-Changes.md#206-193
 title: Sidekiq Pro Gem for Ruby CSRF in Job Filtering
 date: 2015-07-17
 description: |
-  Sidekiq::Web job filtering lacks CSRF protection. This issue
-  is related to OSVDB-125675.
+  Sidekiq::Web job filtering lacks CSRF protection.
+  This issue is related to OSVDB-125675.
 patched_versions:
-- '>= 2.0.6'
+  - "~> 1.9.3"
+  - ">= 2.0.6"
 related:
   osvdb:
-  - 125675
+    - 125675
+  url:
+    - https://github.com/sidekiq/sidekiq/blob/main/Pro-Changes.md#206-193
+    - https://github.com/sidekiq/sidekiq/issues/2442
+    - https://github.com/sidekiq/sidekiq/issues/2467
+    - https://github.com/rubysec/ruby-advisory-db/pull/201
+    - https://security.snyk.io/vuln/SNYK-RUBY-SIDEKIQPRO-20234
diff --git a/gems/sidekiq-unique-jobs/CVE-2023-46950.yml b/gems/sidekiq-unique-jobs/CVE-2023-46950.yml
new file mode 100644
index 0000000000..b44d439540
--- /dev/null
+++ b/gems/sidekiq-unique-jobs/CVE-2023-46950.yml
@@ -0,0 +1,25 @@
+---
+gem: sidekiq-unique-jobs
+cve: 2023-46950
+ghsa: fhx8-5c23-x7x5
+url: https://github.com/mhenrixon/sidekiq-unique-jobs/security/advisories/GHSA-cmh9-rx85-xj38
+title: Cross Site Scripting vulnerability in Contribsys Sidekiq
+date: 2024-03-01
+description: |
+  Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8
+  allows a remote attacker to obtain sensitive information via a
+  crafted URL to the filter functions.
+cvss_v3: 6.1
+patched_versions:
+  - "~> 7.1.33"
+  - ">= 8.0.7"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-46950
+    - https://github.com/mhenrixon/sidekiq-unique-jobs/security/advisories/GHSA-cmh9-rx85-xj38
+    - https://github.com/mhenrixon/sidekiq-unique-jobs/releases/tag/v8.0.7
+    - https://www.mgm-sp.com/cve/sidekiq-unique-jobs-reflected-xss-cve-2023-46950-cve-2023-46951
+    - https://github.com/mhenrixon/sidekiq-unique-jobs/pull/829
+    - https://github.com/mhenrixon/sidekiq-unique-jobs/commit/cd09ba6108f98973b6649a6149790c3d4502b4cc
+    - https://github.com/mhenrixon/sidekiq-unique-jobs/commit/ec3afd920c1b55843c72f748a87baac7f8be82ed
+    - https://github.com/advisories/GHSA-fhx8-5c23-x7x5
diff --git a/gems/sidekiq-unique-jobs/CVE-2024-25122.yml b/gems/sidekiq-unique-jobs/CVE-2024-25122.yml
new file mode 100644
index 0000000000..694d42d880
--- /dev/null
+++ b/gems/sidekiq-unique-jobs/CVE-2024-25122.yml
@@ -0,0 +1,46 @@
+---
+gem: sidekiq-unique-jobs
+cve: 2024-25122
+ghsa: cmh9-rx85-xj38
+url: https://github.com/mhenrixon/sidekiq-unique-jobs/security/advisories/GHSA-cmh9-rx85-xj38
+title: sidekiq-unique-jobs UI server vulnerable to XSS & RCE in Redis
+date: 2024-02-13
+description: |
+  Cross site scripting (XSS) potentially exposing cookies / sessions / localStorage, fixed by sidekiq-unique-jobs v8.0.7.
+
+  ### Details
+
+  Specially crafted URL query parameters handled by any of the following endpoints of sidekiq-unique-jobs' "admin" web UI,
+  allow a super-user attacker, or an unwitting, but authorized, victim, who has received a disguised / crafted link,
+  to successfully execute malicious code, which could potentially steal cookies, session data,
+  or local storage data from the app the sidekiq-unique-jobs web UI is mounted in.
+
+  If your sidekiq-unique-jobs web UI is mounted at `/sidekiq`, the vulnerable paths and query parameters are:
+
+  * `/sidekiq/changelogs`
+    * `filter`
+    * `count`
+  * `/sidekiq/locks`
+    * `filter`
+    * `count`
+  * `/sidekiq/expiring_locks`
+    * `filter`
+
+  ### Impact
+
+  This is a vulnerability of critical severity, which impacts many thousands of sites, since sidekiq-unique-jobs is widely deployed across the industry, with multiple attack vectors.
+
+  ### Patches
+
+  The fix for the XSS vulnerability was released in sidekiq-unique-jobs v8.0.7.
+cvss_v3: 7.1
+patched_versions:
+  - "~> 7.1.33"
+  - ">= 8.0.7"
+related:
+  url:
+    - https://github.com/mhenrixon/sidekiq-unique-jobs/security/advisories/GHSA-cmh9-rx85-xj38
+    - https://github.com/mhenrixon/sidekiq-unique-jobs/commit/cd09ba6108f98973b6649a6149790c3d4502b4cc
+    - https://github.com/mhenrixon/sidekiq-unique-jobs/commit/ec3afd920c1b55843c72f748a87baac7f8be82ed
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-25122
+    - https://github.com/advisories/GHSA-cmh9-rx85-xj38
diff --git a/gems/sidekiq/CVE-2021-30151.yml b/gems/sidekiq/CVE-2021-30151.yml
index da98154cd2..09f693a8b3 100644
--- a/gems/sidekiq/CVE-2021-30151.yml
+++ b/gems/sidekiq/CVE-2021-30151.yml
@@ -10,5 +10,5 @@ description: |
   name of the live-poll feature when Internet Explorer is used.
 cvss_v3: 6.1
 patched_versions:
-- "~> 5.2.0"
-- ">= 6.2.1"
+  - "~> 5.2.0"
+  - ">= 6.2.1"
diff --git a/gems/sidekiq/CVE-2022-23837.yml b/gems/sidekiq/CVE-2022-23837.yml
index 07e91260cf..a1f563a1a8 100644
--- a/gems/sidekiq/CVE-2022-23837.yml
+++ b/gems/sidekiq/CVE-2022-23837.yml
@@ -12,8 +12,8 @@ description: |
 cvss_v2: 5.0
 cvss_v3: 7.5
 patched_versions:
-- ">= 6.4.0"
-- "~> 5.2.10"
+  - ">= 6.4.0"
+  - "~> 5.2.10"
 related:
   url:
-  - https://github.com/TUTUMSPACE/exploits/blob/main/sidekiq.md
+    - https://github.com/TUTUMSPACE/exploits/blob/main/sidekiq.md
diff --git a/gems/sidekiq/CVE-2023-1892.yml b/gems/sidekiq/CVE-2023-1892.yml
new file mode 100644
index 0000000000..d4ae1f2967
--- /dev/null
+++ b/gems/sidekiq/CVE-2023-1892.yml
@@ -0,0 +1,22 @@
+---
+gem: sidekiq
+cve: 2023-1892
+ghsa: h3r8-h5qw-4r35
+url: https://github.com/sidekiq/sidekiq/commit/458fdf74176a9881478c48dc5cf0269107b22214
+title: sidekiq vulnerable to cross-site scripting
+date: 2023-04-21
+description: |
+  sidekiq from 7.0.4 to 7.0.7 is vulnerable to reflected cross-site scripting.
+  A fix was released in version 7.0.8.
+cvss_v3: 8.3
+unaffected_versions:
+  - "< 7.0.4"
+patched_versions:
+  - ">= 7.0.8"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-1892
+    - https://github.com/sidekiq/sidekiq/commit/458fdf74176a9881478c48dc5cf0269107b22214
+    - https://huntr.dev/bounties/e35e5653-c429-4fb8-94a3-cbc123ae4777
+    - https://github.com/sidekiq/sidekiq/blob/main/Changes.md#708
+    - https://github.com/advisories/GHSA-h3r8-h5qw-4r35
diff --git a/gems/sidekiq/CVE-2023-26141.yml b/gems/sidekiq/CVE-2023-26141.yml
new file mode 100644
index 0000000000..a1df1de64f
--- /dev/null
+++ b/gems/sidekiq/CVE-2023-26141.yml
@@ -0,0 +1,25 @@
+---
+gem: sidekiq
+cve: 2023-26141
+ghsa: 3qc2-v3hp-6cv8
+url: https://nvd.nist.gov/vuln/detail/CVE-2023-26141
+title: sidekiq Denial of Service vulnerability
+date: 2023-09-14
+description: |
+  Versions of the package sidekiq before 7.1.3 are vulnerable to Denial
+  of Service (DoS) due to insufficient checks in the dashboard-charts.js
+  file. An attacker can exploit this vulnerability by manipulating the
+  localStorage value which will cause excessive polling requests.
+cvss_v3: 4.9
+patched_versions:
+  - "~> 6.5.10"
+  - ">= 7.1.3"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-26141
+    - https://github.com/sidekiq/sidekiq/blob/main/Changes.md#713
+    - https://github.com/sidekiq/sidekiq/commit/62c90d7c5a7d8a378d79909859d87c2e0702bf89
+    - https://gist.github.com/keeganparr1/1dffd3c017339b7ed5371ed3d81e6b2a
+    - https://security.snyk.io/vuln/SNYK-RUBY-SIDEKIQ-5885107
+    - https://github.com/sidekiq/sidekiq/blob/6-x/web/assets/javascripts/dashboard.js#L6
+    - https://github.com/advisories/GHSA-3qc2-v3hp-6cv8
diff --git a/gems/sidekiq/CVE-2024-32887.yml b/gems/sidekiq/CVE-2024-32887.yml
new file mode 100644
index 0000000000..4f2876376d
--- /dev/null
+++ b/gems/sidekiq/CVE-2024-32887.yml
@@ -0,0 +1,22 @@
+---
+gem: sidekiq
+cve: 2024-32887
+ghsa: GHSA-q655-3pj8-9fxq
+url: https://github.com/sidekiq/sidekiq/security/advisories/GHSA-q655-3pj8-9fxq
+title: Reflected XSS in Metrics Web Page
+date: 2024-04-26
+description: |
+  Reflected XSS in Sidekiq Web UI via the `/metrics` HTTP end-point and the
+  `substr` query param:
+
+      https://{host}/sidekiq/metrics?substr=foot%22%3E%3Cscript%20src=%22{payload}%22%20/%3E
+
+cvss_v3: 5.5
+unaffected_versions:
+  - "< 7.2.0"
+patched_versions:
+  - ">= 7.2.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-32887
+    - https://github.com/sidekiq/sidekiq/commit/30786e082c70349ab27ffa9eccc42fb0c696164d
diff --git a/gems/sidekiq/OSVDB-125675.yml b/gems/sidekiq/OSVDB-125675.yml
index 99f0cc6263..3e73ee2321 100644
--- a/gems/sidekiq/OSVDB-125675.yml
+++ b/gems/sidekiq/OSVDB-125675.yml
@@ -1,9 +1,16 @@
 ---
 gem: sidekiq
 osvdb: 125675
-url: https://github.com/mperham/sidekiq/pull/2422
+url: https://seclists.org/oss-sec/2015/q3/267
 title: Sidekiq Gem for Ruby Multiple Unspecified CSRF
 date: 2015-07-06
-description: Sidekiq::Web lacks CSRF protection
+description: |
+  Sidekiq::Web lacks CSRF protection
 patched_versions:
-- '>= 3.4.2'
+  - ">= 3.4.2"
+related:
+  url:
+    - https://seclists.org/oss-sec/2015/q3/267
+    - https://github.com/mperham/sidekiq/pull/2422
+    - https://github.com/sidekiq/sidekiq/commit/cf3c43b2410c4573e05ac119494e41115f4140ad
+    - https://security.snyk.io/vuln/SNYK-RUBY-SIDEKIQ-20233
diff --git a/gems/sidekiq/OSVDB-125676.yml b/gems/sidekiq/OSVDB-125676.yml
index b049ca5a9b..1b9da395a0 100644
--- a/gems/sidekiq/OSVDB-125676.yml
+++ b/gems/sidekiq/OSVDB-125676.yml
@@ -1,14 +1,21 @@
 ---
 gem: sidekiq
 osvdb: 125676
-url: https://github.com/mperham/sidekiq/issues/2330
-title: |
-  Sidekiq Gem for Ruby web/views/queue.erb CurrentMessagesInQueue Element
-  Reflected XSS
+url: https://seclists.org/oss-sec/2015/q3/267
+title:
+  Sidekiq Gem for Ruby web/views/queue.erb Element Reflected XSS
 date: 2015-06-04
-description: XSS via queue name in Sidekiq::Web
+description: |
+  Sidekiq Gem for Ruby web/views/queue.erb [CurrentMessagesInQueue,
+  AreYouSureDeleteQueue] Element Reflected XSS
 patched_versions:
-- '>= 3.4.0'
+  - ">= 3.4.0"
 related:
   osvdb:
-  - 125677
+    - 125677
+  url:
+    - https://seclists.org/oss-sec/2015/q3/267
+    - https://github.com/mperham/sidekiq/issues/2330
+    - https://github.com/sidekiq/sidekiq/commit/2178d66b6686fbf4430223c34c184a64c9906828
+    - https://github.com/rubysec/ruby-advisory-db/pull/196
+    - https://github.com/rubysec/ruby-advisory-db/commit/19a8fc075a6cc0702f978219c88d97c666fecdbd
diff --git a/gems/sidekiq/OSVDB-125678.yml b/gems/sidekiq/OSVDB-125678.yml
index c6cdd1fdac..ef02ee6417 100644
--- a/gems/sidekiq/OSVDB-125678.yml
+++ b/gems/sidekiq/OSVDB-125678.yml
@@ -1,9 +1,15 @@
 ---
 gem: sidekiq
 osvdb: 125678
-url: https://github.com/mperham/sidekiq/pull/2309
+url: https://seclists.org/oss-sec/2015/q3/267
 title: Sidekiq Gem for Ruby web/views/queue.erb msg.display_class Element XSS
 date: 2015-04-21
-description: XSS via job arguments display class in Sidekiq::Web
+description: |
+  XSS via job arguments display class in Sidekiq::Web
 patched_versions:
-- '>= 3.4.0'
+  - ">= 3.4.0"
+related:
+  url:
+    - https://seclists.org/oss-sec/2015/q3/267
+    - https://github.com/mperham/sidekiq/pull/2309
+    - https://github.com/sidekiq/sidekiq/commit/54766f336620ca0ce3b0b87a7a56382496e64b61
diff --git a/gems/simple_captcha2/CVE-2019-14282.yml b/gems/simple_captcha2/CVE-2019-14282.yml
index 01ab0621e1..11eda92021 100644
--- a/gems/simple_captcha2/CVE-2019-14282.yml
+++ b/gems/simple_captcha2/CVE-2019-14282.yml
@@ -10,5 +10,5 @@ description: |
   included a code-execution backdoor inserted by a third party.
 cvss_v3: 9.8
 unaffected_versions:
-- < 0.2.3
-- '> 0.2.3'
+  - "< 0.2.3"
+  - "> 0.2.3"
diff --git a/gems/simple_form/CVE-2019-16676.yml b/gems/simple_form/CVE-2019-16676.yml
index c715edb0ed..0f97dd6fa0 100644
--- a/gems/simple_form/CVE-2019-16676.yml
+++ b/gems/simple_form/CVE-2019-16676.yml
@@ -12,4 +12,4 @@ description: |
   This only happens for pages that build forms based on user input.
 cvss_v3: 9.8
 patched_versions:
-- ">= 5.0"
+  - ">= 5.0"
diff --git a/gems/sinatra/CVE-2018-11627.yml b/gems/sinatra/CVE-2018-11627.yml
index 39c2130ae1..2adf09f726 100644
--- a/gems/sinatra/CVE-2018-11627.yml
+++ b/gems/sinatra/CVE-2018-11627.yml
@@ -10,7 +10,7 @@ description: |
   upon a params parser exception.
 cvss_v3: 6.1
 unaffected_versions:
-- < 2.0.0.beta1
-- 2.0.0-alpha
+  - "< 2.0.0.beta1"
+  - "= 2.0.0-alpha"
 patched_versions:
-- '>= 2.0.2'
+  - ">= 2.0.2"
diff --git a/gems/sinatra/CVE-2018-7212.yml b/gems/sinatra/CVE-2018-7212.yml
index eeab86bfcf..d33e69b754 100644
--- a/gems/sinatra/CVE-2018-7212.yml
+++ b/gems/sinatra/CVE-2018-7212.yml
@@ -12,6 +12,6 @@ description: |
 cvss_v2: 5.0
 cvss_v3: 5.3
 unaffected_versions:
-- < 2.0.0
+  - "< 2.0.0"
 patched_versions:
-- '>= 2.0.1'
+  - ">= 2.0.1"
diff --git a/gems/sinatra/CVE-2022-29970.yml b/gems/sinatra/CVE-2022-29970.yml
new file mode 100644
index 0000000000..a4fede6ee4
--- /dev/null
+++ b/gems/sinatra/CVE-2022-29970.yml
@@ -0,0 +1,14 @@
+---
+gem: sinatra
+cve: 2022-29970
+ghsa: qp49-3pvw-x4m5
+url: https://github.com/sinatra/sinatra/pull/1683
+title: sinatra does not validate expanded path matches
+date: 2022-05-03
+description: |
+  Sinatra before 2.2.0 does not validate that the expanded path matches
+  public_dir when serving static files.
+cvss_v2: 5.0
+cvss_v3: 7.5
+patched_versions:
+  - ">= 2.2.0"
diff --git a/gems/sinatra/CVE-2022-45442.yml b/gems/sinatra/CVE-2022-45442.yml
new file mode 100644
index 0000000000..be284da77c
--- /dev/null
+++ b/gems/sinatra/CVE-2022-45442.yml
@@ -0,0 +1,22 @@
+---
+gem: sinatra
+cve: 2022-45442
+ghsa: 2x8x-jmrp-phxw
+url: https://github.com/sinatra/sinatra/security/advisories/GHSA-2x8x-jmrp-phxw
+title: Sinatra vulnerable to Reflected File Download attack
+date: 2022-11-30
+description: |
+  An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4.
+  An application is vulnerable to a reflected file download (RFD) attack that
+  sets the Content-Disposition header of a response when the filename is
+  derived from user-supplied input.
+cvss_v3: 8.8
+patched_versions:
+  - "~> 2.2.3"
+  - ">= 3.0.4"
+related:
+  url:
+    - https://www.blackhat.com/docs/eu-14/materials/eu-14-Hafif-Reflected-File-Download-A-New-Web-Attack-Vector.pdf
+    - https://github.com/sinatra/sinatra/commit/ea8fc9495a350f7551b39e3025bfcd06f49f363b
+  ghsa:
+    - 8x94-hmjh-97hq
diff --git a/gems/sinatra/CVE-2024-21510.yml b/gems/sinatra/CVE-2024-21510.yml
new file mode 100644
index 0000000000..e224a05565
--- /dev/null
+++ b/gems/sinatra/CVE-2024-21510.yml
@@ -0,0 +1,32 @@
+---
+gem: sinatra
+cve: 2024-21510
+ghsa: hxx2-7vcw-mqr3
+url: https://github.com/advisories/GHSA-hxx2-7vcw-mqr3
+title: Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision
+date: 2024-11-01
+description: |
+  Versions of the package sinatra from 0.0.0 are vulnerable to
+  Reliance on Untrusted Inputs in a Security Decision via the
+  X-Forwarded-Host (XFH) header.
+
+  When making a request to a method with redirect applied, it is
+  possible to trigger an Open Redirect Attack by inserting an
+  arbitrary address into this header. If used for caching purposes,
+  such as with servers like Nginx, or as a reverse proxy, without
+  handling the X-Forwarded-Host header, attackers can potentially
+  exploit Cache Poisoning or Routing-based SSRF.
+cvss_v3: 5.4
+patched_versions:
+  - ">= 4.1.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-21510
+    - https://security.snyk.io/vuln/SNYK-RUBY-SINATRA-6483832
+    - https://github.com/advisories/GHSA-hxx2-7vcw-mqr3
+    - https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb#L319
+    - https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb#L323C1-L343C17
+    - https://github.com/sinatra/sinatra/issues/2052
+    - https://github.com/sinatra/sinatra/pull/2010
+    - https://github.com/sinatra/sinatra/pull/2053
+    - https://github.com/sinatra/sinatra/commit/cd3e00de20ddaff34ea30f7a74a7b9dad189d1d8
diff --git a/gems/sisimai/CVE-2022-4891.yml b/gems/sisimai/CVE-2022-4891.yml
new file mode 100644
index 0000000000..1f1fb42853
--- /dev/null
+++ b/gems/sisimai/CVE-2022-4891.yml
@@ -0,0 +1,22 @@
+---
+gem: sisimai
+cve: 2022-4891
+ghsa: vm74-j4wq-82xj
+url: https://github.com/sisimai/rb-sisimai/pull/244
+title: Sisimai Inefficient Regular Expression Complexity vulnerability
+date: 2023-01-17
+description: |
+  A vulnerability has been found in Sisimai up to 4.25.14p11 and classified
+  as problematic. This vulnerability affects the function `to_plain` of the file `lib/sisimai/string.rb`.
+  The manipulation leads to inefficient regular expression complexity. The exploit
+  has been disclosed to the public and may be used. Upgrading to version 4.25.14p12
+  is able to address this issue. The name of the patch is 51fe2e6521c9c02b421b383943dc9e4bbbe65d4e.
+  It is recommended to upgrade the affected component.
+patched_versions:
+  - ">= 4.25.14p12"
+related:
+  url:
+    - https://github.com/sisimai/rb-sisimai/commit/51fe2e6521c9c02b421b383943dc9e4bbbe65d4e
+    - https://gist.githubusercontent.com/gmcabrita/e5dc0332473fc2e3a7a407434c8d21c7/raw/00b12035e5e1b685469f143b94301a50306376ba/example.html
+    - https://github.com/sisimai/rb-sisimai/releases/tag/v4.25.14p12
+    - https://vuldb.com/?id.218452
diff --git a/gems/slanger/CVE-2019-1010306.yml b/gems/slanger/CVE-2019-1010306.yml
index 7ae75e97b6..91a4673e39 100644
--- a/gems/slanger/CVE-2019-1010306.yml
+++ b/gems/slanger/CVE-2019-1010306.yml
@@ -12,5 +12,5 @@ description: |
 
   Note that `slanger` is no longer maintained.
 patched_versions:
-- '>= 0.6.1'
+  - ">= 0.6.1"
 cvss_v3: 9.8
diff --git a/gems/smalruby-editor/CVE-2017-2096.yml b/gems/smalruby-editor/CVE-2017-2096.yml
new file mode 100644
index 0000000000..9f7ff0cf4e
--- /dev/null
+++ b/gems/smalruby-editor/CVE-2017-2096.yml
@@ -0,0 +1,17 @@
+---
+gem: smalruby-editor
+cve: 2017-2096
+ghsa: f489-655r-x6gr
+url: http://jvn.jp/en/jp/JVN50197114/index.html
+title: smalruby and smalruby-editor vulnerable to OS Command Injection
+date: 2022-05-13
+description: |
+  smalruby-editor prior to 0.4.1 and smalruby prior to 0.1.11 allows remote
+  attackers to execute arbitrary OS commands via unspecified vectors.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 0.4.1"
+related:
+  url:
+    - http://smalruby.jp/blog/2017/01/14/smalruby-editor-0-4-1-has-been-released-english.html
+    - https://web.archive.org/web/20200227194312/http://www.securityfocus.com/bid/95775
diff --git a/gems/smalruby/CVE-2017-2096.yml b/gems/smalruby/CVE-2017-2096.yml
new file mode 100644
index 0000000000..cbc7905136
--- /dev/null
+++ b/gems/smalruby/CVE-2017-2096.yml
@@ -0,0 +1,17 @@
+---
+gem: smalruby
+cve: 2017-2096
+ghsa: f489-655r-x6gr
+url: http://jvn.jp/en/jp/JVN50197114/index.html
+title: smalruby and smalruby-editor vulnerable to OS Command Injection
+date: 2022-05-13
+description: |
+  smalruby-editor prior to 0.4.1 and smalruby prior to 0.1.11 allows remote
+  attackers to execute arbitrary OS commands via unspecified vectors.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 0.1.11"
+related:
+  url:
+    - http://smalruby.jp/blog/2017/01/14/smalruby-editor-0-4-1-has-been-released-english.html
+    - https://web.archive.org/web/20200227194312/http://www.securityfocus.com/bid/95775
diff --git a/gems/smart_proxy_dynflow/CVE-2018-14643.yml b/gems/smart_proxy_dynflow/CVE-2018-14643.yml
index 297e91092e..86219996b3 100644
--- a/gems/smart_proxy_dynflow/CVE-2018-14643.yml
+++ b/gems/smart_proxy_dynflow/CVE-2018-14643.yml
@@ -13,5 +13,5 @@ description: |
 cvss_v2: 10.0
 cvss_v3: 9.8
 patched_versions:
-- ~> 0.1.11
-- '>= 0.2.1'
+  - "~> 0.1.11"
+  - ">= 0.2.1"
diff --git a/gems/smashing/CVE-2021-35440.yml b/gems/smashing/CVE-2021-35440.yml
new file mode 100644
index 0000000000..cd655dd0e5
--- /dev/null
+++ b/gems/smashing/CVE-2021-35440.yml
@@ -0,0 +1,19 @@
+---
+gem: smashing
+cve: 2021-35440
+ghsa: 254j-mmc5-qhpx
+url: https://github.com/Smashing/smashing/pull/186
+title: Smashing Cross-site Scripting vulnerability
+date: 2022-05-24
+description: |
+  Smashing 1.3.4 is vulnerable to Cross Site Scripting (XSS). A URL for
+  a widget can be crafted and used to execute JavaScript on the victim's computer.
+  The JavaScript code can then steal data available in the session/cookies depending
+  on the user environment (e.g. if re-using internal URL's for deploying, or cookies
+  that are very permissive) private information may be retrieved by the attacker.
+cvss_v3: 6.1
+patched_versions:
+  - ">= 1.3.5"
+related:
+  url:
+    - https://github.com/Smashing/smashing/blob/ad7325f159f89854ca4e7d94e7be9bee507b6d46/CHANGELOG.md
diff --git a/gems/solidus_api/CVE-2020-15109.yml b/gems/solidus_api/CVE-2020-15109.yml
index 3b53da078e..5934a5553f 100644
--- a/gems/solidus_api/CVE-2020-15109.yml
+++ b/gems/solidus_api/CVE-2020-15109.yml
@@ -63,6 +63,6 @@ description: |
   https://gist.github.com/kennyadsl/4618cd9797984cb64f7700a81bda889d
 cvss_v3: 5.3
 patched_versions:
-- ~> 2.8.6
-- ~> 2.9.6
-- '>= 2.10.2'
+  - "~> 2.8.6"
+  - "~> 2.9.6"
+  - ">= 2.10.2"
diff --git a/gems/solidus_auth_devise/CVE-2021-41274.yml b/gems/solidus_auth_devise/CVE-2021-41274.yml
index b77fd382c9..9f65a66494 100644
--- a/gems/solidus_auth_devise/CVE-2021-41274.yml
+++ b/gems/solidus_auth_devise/CVE-2021-41274.yml
@@ -55,6 +55,6 @@ description: |
   - [Solidus security](https://solidus.io/security/)
 cvss_v3: 9.3
 unaffected_versions:
-- "< 1.0.0"
+  - "< 1.0.0"
 patched_versions:
-- ">= 2.5.4"
+  - ">= 2.5.4"
diff --git a/gems/solidus_backend/CVE-2022-31000.yml b/gems/solidus_backend/CVE-2022-31000.yml
new file mode 100644
index 0000000000..4eea1c3209
--- /dev/null
+++ b/gems/solidus_backend/CVE-2022-31000.yml
@@ -0,0 +1,36 @@
+---
+gem: solidus_backend
+cve: 2022-31000
+ghsa: 8639-qx56-r428
+url: https://github.com/solidusio/solidus/security/advisories/GHSA-8639-qx56-r428
+title: CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend
+date: 2022-06-01
+description: |
+  ### Impact
+  CSRF vulnerability allowing attackers to change the state of an order's adjustments
+  if they hold its number, and the execution happens on a store administrator's computer.
+
+  Reproduction steps:
+  - Take an order's number.
+  - Log in as an administrator.
+  - Visit that order's adjustments section (_Orders -> {Click on number} -> Adjustments_) and check that its adjustments are finalized (closed padlock under the **State** column).
+  - On another tab, visit `{your_site_url}/admin/orders/{order_number}/adjustments/unfinalize`.
+  - Notice how the adjustments are unfinalized (open padlock), even if the previous was a `GET` request which could have been linked from any other site.
+  - Visit `{your_site_url}/admin/orders/{order_number}/adjustments/finalize`.
+  - Notice how the adjustments are again finalized.
+
+  That happened because both routes were handled as `GET` requests, which are skipped by Rails anti-forgery protection.
+
+  ### Patches
+  Users should upgrade to solidus_backend v3.1.6, v3.0.6, or v2.11.16, depending on the major and minor versions in use.
+
+  ### References
+  - [Rails CSRF protection](https://api.rubyonrails.org/classes/ActionController/RequestForgeryProtection.html).
+cvss_v3: 2.3
+patched_versions:
+  - "~> 2.11.16"
+  - "~> 3.0.6"
+  - ">= 3.1.6"
+related:
+  url:
+    - https://github.com/solidusio/solidus/commit/de796a2e0be7f154cae48b46e267501559d9716c
diff --git a/gems/solidus_core/CVE-2021-43805.yml b/gems/solidus_core/CVE-2021-43805.yml
index 05becd8090..a491fe7788 100644
--- a/gems/solidus_core/CVE-2021-43805.yml
+++ b/gems/solidus_core/CVE-2021-43805.yml
@@ -54,11 +54,11 @@ description: |
   ```
 cvss_v3: 7.5
 patched_versions:
-- "~> 2.11.13"
-- "~> 3.0.4"
-- ">= 3.1.4"
+  - "~> 2.11.13"
+  - "~> 3.0.4"
+  - ">= 3.1.4"
 related:
   url:
-  - https://github.com/solidusio/solidus/commit/6be174c955fad84017ca67589c676526bc5ade71
-  - https://en.wikipedia.org/wiki/ReDoS
-  - https://snyk.io/blog/redos-and-catastrophic-backtracking/
+    - https://github.com/solidusio/solidus/commit/6be174c955fad84017ca67589c676526bc5ade71
+    - https://en.wikipedia.org/wiki/ReDoS
+    - https://snyk.io/blog/redos-and-catastrophic-backtracking/
diff --git a/gems/solidus-core/GHSA-5629-8855-gf4g.yml b/gems/solidus_core/GHSA-5629-8855-gf4g.yml
similarity index 74%
rename from gems/solidus-core/GHSA-5629-8855-gf4g.yml
rename to gems/solidus_core/GHSA-5629-8855-gf4g.yml
index be5cdd380d..961fc0d3e1 100644
--- a/gems/solidus-core/GHSA-5629-8855-gf4g.yml
+++ b/gems/solidus_core/GHSA-5629-8855-gf4g.yml
@@ -1,5 +1,5 @@
 ---
-gem: solidus-core
+gem: solidus_core
 ghsa: 5629-8855-gf4g
 url: https://github.com/solidusio/solidus/security/advisories/GHSA-5629-8855-gf4g
 title: Authentication Bypass by CSRF Weakness
@@ -10,21 +10,22 @@ description: |
   [GHSA-xm34-v85h-9pg2](https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2)
   for details.
 
-  The security advisory here exists to provide an extra layer of security in the
-  form of a monkey patch for users who don't update `solidus_auth_devise`. For
-  this reason, it has been marked as low impact on this end.
+  The security advisory here exists to provide an extra layer of security in
+  the form of a monkey patch for users who don't update `solidus_auth_devise`.
+  For this reason, it has been marked as low impact on this end.
 
   ### Patches
-  For extra security, update `solidus_core` to versions `3.1.3`, `3.0.3` or `2.11.12`.
+  For extra security, update `solidus_core` to versions `3.1.3`, `3.0.3`, or
+  `2.11.12`.
 
   ### Workarounds
   Look at the workarounds described at
   [GHSA-xm34-v85h-9pg2](https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2).
 cvss_v3: 9.3
 patched_versions:
-- ">= 3.1.3"
-- "~> 3.0.3"
-- "~> 2.11.12"
+  - ">= 3.1.3"
+  - "~> 3.0.3"
+  - "~> 2.11.12"
 related:
   ghsa:
-  - xm34-v85h-9pg2
+    - xm34-v85h-9pg2
diff --git a/gems/solidus_frontend/CVE-2020-15109.yml b/gems/solidus_frontend/CVE-2020-15109.yml
index e01ae9b7ad..0a58915c99 100644
--- a/gems/solidus_frontend/CVE-2020-15109.yml
+++ b/gems/solidus_frontend/CVE-2020-15109.yml
@@ -63,6 +63,6 @@ description: |
   https://gist.github.com/kennyadsl/4618cd9797984cb64f7700a81bda889d
 cvss_v3: 5.3
 patched_versions:
-- ~> 2.8.6
-- ~> 2.9.6
-- '>= 2.10.2'
+  - "~> 2.8.6"
+  - "~> 2.9.6"
+  - ">= 2.10.2"
diff --git a/gems/solidus_frontend/CVE-2021-43846.yml b/gems/solidus_frontend/CVE-2021-43846.yml
index ba4a8675e2..e4a41f9fe2 100644
--- a/gems/solidus_frontend/CVE-2021-43846.yml
+++ b/gems/solidus_frontend/CVE-2021-43846.yml
@@ -323,10 +323,10 @@ description: |
   - [Solidus security](https://solidus.io/security/)
 cvss_v3: 5.3
 patched_versions:
-- ">= 3.1.5"
-- "~> 3.0.5"
-- "~> 2.11.14"
+  - ">= 3.1.5"
+  - "~> 3.0.5"
+  - "~> 2.11.14"
 related:
   url:
-  - https://github.com/solidusio/solidus/commit/4d17cacf066d9492fc04eb3a0b16084b47376d81
-  - https://github.com/solidusio/solidus/commit/a1b9bf7f24f9b8684fc4d943eacb02b1926c77c6
+    - https://github.com/solidusio/solidus/commit/4d17cacf066d9492fc04eb3a0b16084b47376d81
+    - https://github.com/solidusio/solidus/commit/a1b9bf7f24f9b8684fc4d943eacb02b1926c77c6
diff --git a/gems/sorcery/CVE-2020-11052.yml b/gems/sorcery/CVE-2020-11052.yml
index f90f3ced31..198120b98e 100644
--- a/gems/sorcery/CVE-2020-11052.yml
+++ b/gems/sorcery/CVE-2020-11052.yml
@@ -5,7 +5,7 @@ ghsa: jc8m-cxhj-668x
 url: https://github.com/Sorcery/sorcery/security/advisories/GHSA-jc8m-cxhj-668x
 date: 2020-05-07
 title: Improper Restriction of Excessive Authentication Attempts in Sorcery
-description: |-
+description: |
   ### Impact
   Brute force vulnerability when using password authentication via Sorcery.
   The brute force protection submodule will prevent a brute force attack for
@@ -22,4 +22,4 @@ description: |-
   provided by Sorcery or upgrading to version `0.15.0`.
 cvss_v3: 8.3
 patched_versions:
-- '>= 0.15.0'
+  - ">= 0.15.0"
diff --git a/gems/sounder/CVE-2013-5647.yml b/gems/sounder/CVE-2013-5647.yml
index d0c549f831..0179203467 100644
--- a/gems/sounder/CVE-2013-5647.yml
+++ b/gems/sounder/CVE-2013-5647.yml
@@ -2,6 +2,7 @@
 gem: sounder
 cve: 2013-5647
 osvdb: 96278
+ghsa: rfmf-rx8w-935w
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-5647
 title: Sounder Gem for Ruby File Name Handling Arbitrary Command Execution
 date: 2013-08-14
@@ -11,4 +12,4 @@ description: |
   arbitrary commands.
 cvss_v2: 7.5
 patched_versions:
-- '>= 1.0.2'
+  - ">= 1.0.2"
diff --git a/gems/spina/CVE-2015-4619.yml b/gems/spina/CVE-2015-4619.yml
index 3980e3ace9..de1d62b3f4 100644
--- a/gems/spina/CVE-2015-4619.yml
+++ b/gems/spina/CVE-2015-4619.yml
@@ -5,9 +5,14 @@ ghsa: 2hxv-mx8x-mcj9
 url: http://www.openwall.com/lists/oss-security/2015/06/16/11
 title: Cross-site request forgery (CSRF) vulnerability in Spina gem
 date: 2015-06-16
-description: "`Spina::ApplicationController` actions didn't have CSRF protection.
+description: |
+  "`Spina::ApplicationController` actions didn't have CSRF protection.
   This causes a CSRF vulnerability across the entire engine which includes administrative
   functionality such as creating users, changing passwords, and media management."
 cvss_v3: 8.8
 patched_versions:
-- ">= 0.6.29"
+  - ">= 0.6.29"
+related:
+  url:
+    - https://sca.analysiscenter.veracode.com/vulnerability-database/security/cross-site-request-forgery-csrf/ruby/sid-1686/summary
+    - https://github.com/rubysec/ruby-advisory-db/issues/238
diff --git a/gems/spina/CVE-2023-3445.yml b/gems/spina/CVE-2023-3445.yml
new file mode 100644
index 0000000000..25a79ef913
--- /dev/null
+++ b/gems/spina/CVE-2023-3445.yml
@@ -0,0 +1,19 @@
+---
+gem: spina
+cve: 2023-3445
+ghsa: 97wh-6hmj-g8j9
+url: https://huntr.dev/bounties/18a74a9d-4a2d-4bf8-ae62-56a909427070
+title: Spina Cross-site Scripting vulnerability
+date: 2023-06-28
+description: |
+  Cross-site Scripting (XSS) - Stored in GitHub
+  repository spinacms/spina prior to 2.15.1.
+cvss_v3: 3.5
+patched_versions:
+  - ">= 2.15.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-3445
+    - https://huntr.dev/bounties/18a74a9d-4a2d-4bf8-ae62-56a909427070
+    - https://github.com/spinacms/spina/commit/9adfe7b4807b3cc10dbb7351a26cc32f5d8c14a3
+    - https://github.com/advisories/GHSA-97wh-6hmj-g8j9
diff --git a/gems/spina/CVE-2024-7106.yml b/gems/spina/CVE-2024-7106.yml
new file mode 100644
index 0000000000..feb3f3c01e
--- /dev/null
+++ b/gems/spina/CVE-2024-7106.yml
@@ -0,0 +1,35 @@
+---
+gem: spina
+cve: 2024-7106
+ghsa: wqw3-p83g-r24v
+url: https://github.com/advisories/GHSA-wqw3-p83g-r24v
+title: Cross-Site Request Forgery in Spina
+date: 2024-07-25
+description: |
+  A vulnerability classified as problematic was found in
+  Spina CMS 2.18.0.
+
+  Affected by this vulnerability is an unknown functionality
+  of the file /admin/media_folders.
+
+  The manipulation leads to cross-site request forgery.
+  The attack can be launched remotely.
+
+  The exploit has been disclosed to the public and may be used.
+
+  The associated identifier of this vulnerability is VDB-272431.
+
+  NOTE: The vendor was contacted early about this disclosure
+  but did not respond in any way.
+cvss_v2: 5.0
+cvss_v3: 4.3
+cvss_v4: 6.9
+notes: Never patched
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-7106
+    - https://github.com/topsky979/Security-Collections/blob/main/cve3/README.md
+    - https://vuldb.com/?ctiid.272431
+    - https://vuldb.com/?id.272431
+    - https://vuldb.com/?submit.376769
+    - https://github.com/advisories/GHSA-wqw3-p83g-r24v
diff --git a/gems/spree/OSVDB-81505.yml b/gems/spree/CVE-2008-7310.yml
similarity index 90%
rename from gems/spree/OSVDB-81505.yml
rename to gems/spree/CVE-2008-7310.yml
index db95863856..fe4abd3572 100644
--- a/gems/spree/OSVDB-81505.yml
+++ b/gems/spree/CVE-2008-7310.yml
@@ -2,8 +2,9 @@
 gem: spree
 cve: 2008-7310
 osvdb: 81505
+ghsa: 7h48-m3rw-vr27
 url: https://spreecommerce.com/blog/security-vulnerability-mass-assignment
-title: |
+title:
   Spree Hash Restriction Weakness URL Parsing Order State Value Manipulation
 date: 2008-09-22
 description: |
@@ -11,4 +12,4 @@ description: |
   modified URL. This may allow an attacker to manipulate order state values.
 cvss_v2: 5.0
 patched_versions:
-- '>= 0.3.0'
+  - ">= 0.3.0"
diff --git a/gems/spree/OSVDB-81506.yml b/gems/spree/CVE-2008-7311.yml
similarity index 91%
rename from gems/spree/OSVDB-81506.yml
rename to gems/spree/CVE-2008-7311.yml
index 26e823c2ce..598a291329 100644
--- a/gems/spree/OSVDB-81506.yml
+++ b/gems/spree/CVE-2008-7311.yml
@@ -2,8 +2,9 @@
 gem: spree
 cve: 2008-7311
 osvdb: 81506
+ghsa: g466-57gh-cqfw
 url: https://spreecommerce.com/blog/security-vulernability-session-cookie-store
-title: |
+title:
   Spree Hardcoded config.action_controller_session Hash Value Cryptographic
   Protection Weakness
 date: 2008-08-12
@@ -13,4 +14,4 @@ description: |
   more easily bypass cryptographic protection.
 cvss_v2: 5.0
 patched_versions:
-- '>= 0.3.0'
+  - ">= 0.3.0"
diff --git a/gems/spree/OSVDB-69098.yml b/gems/spree/CVE-2010-3978.yml
similarity index 90%
rename from gems/spree/OSVDB-69098.yml
rename to gems/spree/CVE-2010-3978.yml
index 9c5e0d7878..769b27ea5f 100644
--- a/gems/spree/OSVDB-69098.yml
+++ b/gems/spree/CVE-2010-3978.yml
@@ -2,8 +2,9 @@
 gem: spree
 cve: 2010-3978
 osvdb: 69098
+ghsa: hwrx-wc75-mgh7
 url: https://spreecommerce.com/blog/json-hijacking-vulnerability
-title: |
+title:
   Spree Multiple Script JSON Request Validation Weakness Remote Information
   Disclosure
 date: 2010-11-02
@@ -15,5 +16,5 @@ description: |
   user visits a crafted website.
 cvss_v2: 5.0
 patched_versions:
-- ~> 0.11.2
-- '>= 0.30.0'
+  - "~> 0.11.2"
+  - ">= 0.30.0"
diff --git a/gems/spree/CVE-2013-1656.yml b/gems/spree/CVE-2013-1656.yml
new file mode 100644
index 0000000000..0fee275cb9
--- /dev/null
+++ b/gems/spree/CVE-2013-1656.yml
@@ -0,0 +1,29 @@
+---
+gem: spree
+cve: 2013-1656
+ghsa: jxx8-v83v-rhw3
+url: https://github.com/advisories/GHSA-jxx8-v83v-rhw3
+title: Spree controller Parameter Arbitrary Ruby Object Instantiation Command Execution
+date: 2013-02-21
+description: |
+  Spree Commerce 1.0.x before 2.0.0.rc1 allows remote authenticated
+  administrators to instantiate arbitrary Ruby objects and executd
+  arbitrary commands via the
+  (1) payment_method parameter to core/app/controllers/spree/admin/
+      payment_methods_controller.rb; and the
+  (2) promotion_action parameter to promotion_actions_controller.rb,
+  (3) promotion_rule parameter to promotion_rules_controller.rb, and
+  (4) calculator_type parameter to promotions_controller.rb in
+      promo/app/controllers/spree/admin/, related to unsafe use
+      of the constantize function.
+cvss_v2: 4.3
+patched_versions:
+  - ">= 2.0.0.rc1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2013-1656
+    - https://github.com/spree/spree/commit/70092eb55b8be8fe5d21a7658b62da658612fba7
+    - https://web.archive.org/web/20130907044454/https://www.conviso.com.br/advisories/CVE-2013-1656.txt
+    - https://web.archive.org/web/20140329142330/http://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
+    - https://web.archive.org/web/20140618100330/http://blog.conviso.com.br/2013/03/spree-commerce-multiple-unsafe.html
+    - https://github.com/advisories/GHSA-jxx8-v83v-rhw3
diff --git a/gems/spree/OSVDB-90865.yml b/gems/spree/CVE-2013-2506.yml
similarity index 92%
rename from gems/spree/OSVDB-90865.yml
rename to gems/spree/CVE-2013-2506.yml
index d758a94457..0352dd3f66 100644
--- a/gems/spree/OSVDB-90865.yml
+++ b/gems/spree/CVE-2013-2506.yml
@@ -3,7 +3,7 @@ gem: spree
 cve: 2013-2506
 osvdb: 90865
 url: https://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
-title: |
+title:
   Spree app/models/spree/user.rb Mass Role Assignment Remote Privilege
   Escalation
 date: 2013-02-21
@@ -15,6 +15,6 @@ description: |
   elevated administrative privileges.
 cvss_v2: 4.0
 patched_versions:
-- ~> 1.1.6
-- ~> 1.2.0
-- '>= 1.3.0'
+  - "~> 1.1.6"
+  - "~> 1.2.0"
+  - ">= 1.3.0"
diff --git a/gems/spree/CVE-2020-15269.yml b/gems/spree/CVE-2020-15269.yml
index c476887d6f..4bc0021775 100644
--- a/gems/spree/CVE-2020-15269.yml
+++ b/gems/spree/CVE-2020-15269.yml
@@ -17,9 +17,9 @@ description: |
   Please upgrade to 3.7.11, 4.0.4, or 4.1.11 depending on your used Spree version.
 cvss_v3: 7.4
 patched_versions:
-- ~> 3.7.11
-- ~> 4.0.4
-- '>= 4.1.11'
+  - "~> 3.7.11"
+  - "~> 4.0.4"
+  - ">= 4.1.11"
 
 unaffected_versions:
-- < 3.7.0
+  - "< 3.7.0"
diff --git a/gems/spree/OSVDB-119205.yml b/gems/spree/OSVDB-119205.yml
index e0b71f132c..c0406382ae 100644
--- a/gems/spree/OSVDB-119205.yml
+++ b/gems/spree/OSVDB-119205.yml
@@ -1,18 +1,26 @@
 ---
 gem: spree
 osvdb: 119205
-url: https://spreecommerce.com/blog/security-updates-2015-3-3
+url: https://web.archive.org/web/20150920092934/https://spreecommerce.com/blog/security-updates-2015-3-3
 title: Spree API Information Disclosure CSRF
 date: 2015-03-05
 description: |
-  Spree contains a flaw in the API as HTTP requests do not require multiple
-  steps, explicit confirmation, or a unique token when performing certain
-  sensitive actions. By tricking a user into following a specially crafted
-  link, a context-dependent attacker can perform a Cross-Site Request Forgery
-  (CSRF / XSRF) attack causing the victim to disclose potentially sensitive
-  information to attackers.
+  Spree contains a flaw in the API as HTTP requests do not require
+  multiple steps, explicit confirmation, or a unique token when
+  performing certain sensitive actions. By tricking a user into
+  following a specially crafted link, a context-dependent attacker
+  can perform a Cross-Site Request Forgery (CSRF / XSRF) attack
+  causing the victim to disclose potentially sensitive information
+  to attackers.
 patched_versions:
-- ~> 2.2.10
-- ~> 2.3.8
-- ~> 2.4.5
-- '>= 3.0.0.rc4'
+  - "~> 2.2.10"
+  - "~> 2.3.8"
+  - "~> 2.4.5"
+  - ">= 3.0.0.rc4"
+related:
+  url:
+    - https://web.archive.org/web/20150920092934/https://spreecommerce.com/blog/security-updates-2015-3-3
+    - https://seclists.org/oss-sec/2015/q3/275
+    - https://github.com/spree/spree/commit/bfb5f907219d6f8f879ca940882befe89b58a1a4
+    - https://security.snyk.io/vuln/SNYK-RUBY-SPREE-20360
+    - https://github.com/rubysec/bundler-audit/issues/106
diff --git a/gems/spree/OSVDB-125699.yml b/gems/spree/OSVDB-125699.yml
index c8191f49a4..78894753f4 100644
--- a/gems/spree/OSVDB-125699.yml
+++ b/gems/spree/OSVDB-125699.yml
@@ -1,18 +1,24 @@
 ---
 gem: spree
 osvdb: 125699
-url: https://spreecommerce.com/blog/security-updates-2015-7-28
-title: |
-  Spree RABL templates rendering allows Arbitrary Code Execution and File
-  Disclosure
+url: https://web.archive.org/web/20160331133641/spreecommerce.com/blog/security-updates-2015-7-28
+title:
+  Spree RABL templates rendering allows Arbitrary Code Execution
+  and File Disclosure
 date: 2015-07-28
 description: |
-  Spree contains a flaw where the rendering of arbitrary RABL templates allows
-  for execution arbitrary files on the host system, as well as disclosing the
-  existence of files on the system. This is a different issue than
-  OSVDB-125701.
+  Spree contains a flaw where the rendering of arbitrary RABL templates
+  allows for execution arbitrary files on the host system, as well as
+  disclosing the existence of files on the system.
+  This is a different issue than OSVDB-125701.
 patched_versions:
-- ~> 2.2.13
-- ~> 2.3.12
-- ~> 2.4.9
-- '>= 3.0.3'
+  - "~> 2.2.13"
+  - "~> 2.3.12"
+  - "~> 2.4.9"
+  - ">= 3.0.3"
+related:
+  osvdb:
+    - 125701
+  url:
+    - https://github.com/rubysec/bundler-audit/issues/106
+    - https://security.snyk.io/vuln/SNYK-RUBY-SPREE-20237
diff --git a/gems/spree/OSVDB-125701.yml b/gems/spree/OSVDB-125701.yml
index c5e263e079..67534ba332 100644
--- a/gems/spree/OSVDB-125701.yml
+++ b/gems/spree/OSVDB-125701.yml
@@ -1,17 +1,21 @@
 ---
 gem: spree
 osvdb: 125701
-url: https://spreecommerce.com/blog/security-updates-2015-7-20
-title: |
-  Spree RABL templates rendering allows Arbitrary Code Execution and File
-  Disclosure
+url: https://web.archive.org/web/20160331140223/https://spreecommerce.com/blog/security-updates-2015-7-20
+title:
+  Spree RABL templates rendering allows Arbitrary Code Execution
+  and File Disclosure
 date: 2015-07-20
 description: |
-  Spree contains a flaw where the rendering of arbitrary RABL templates allows
-  for execution arbitrary files on the host system, as well as disclosing the
-  existence of files on the system.
+  Spree contains a flaw where the rendering of arbitrary RABL templates
+  allows for execution arbitrary files on the host system, as well as
+  disclosing the existence of files on the system.
 patched_versions:
-- ~> 2.2.12
-- ~> 2.3.11
-- ~> 2.4.8
-- '>= 3.0.2'
+  - "~> 2.2.12"
+  - "~> 2.3.11"
+  - "~> 2.4.8"
+  - ">= 3.0.2"
+related:
+  url:
+    - https://web.archive.org/web/20160331140223/https://spreecommerce.com/blog/security-updates-2015-7-20
+    - https://github.com/rubysec/bundler-audit/issues/106
diff --git a/gems/spree/OSVDB-125712.yml b/gems/spree/OSVDB-125712.yml
index 1be122ee29..bf7e4d2ec5 100644
--- a/gems/spree/OSVDB-125712.yml
+++ b/gems/spree/OSVDB-125712.yml
@@ -1,16 +1,19 @@
 ---
 gem: spree
 osvdb: 125712
-url: https://spreecommerce.com/blog/security-issue-all-versions
-title: |
-  Product Scopes could allow for unauthenticated remote command execution
+url: https://web.archive.org/web/20121126005814/https://spreecommerce.com/blog/security-issue-all-versions
+title: Product Scopes could allow for unauthenticated remote command execution
 date: 2012-07-02
 description: |
   Product Scopes could allow for unauthenticated remote command execution.
   This was corrected by removing conditions_any scope and use ARel query
   building instead.
 patched_versions:
-- ~> 0.11.4
-- ~> 0.70.6
-- ~> 1.0.5
-- '>= 1.1.2'
+  - "~> 0.11.4"
+  - "~> 0.70.6"
+  - "~> 1.0.5"
+  - ">= 1.1.2"
+related:
+  url:
+    - https://web.archive.org/web/20121126005814/https://spreecommerce.com/blog/security-issue-all-versions
+    - https://security.snyk.io/vuln/SNYK-RUBY-SPREE-20034
diff --git a/gems/spree/OSVDB-125713.yml b/gems/spree/OSVDB-125713.yml
index 884fc94a5c..13d751de33 100644
--- a/gems/spree/OSVDB-125713.yml
+++ b/gems/spree/OSVDB-125713.yml
@@ -1,15 +1,17 @@
 ---
 gem: spree
 osvdb: 125713
-url: https://spreecommerce.com/blog/security-issue-all-versions
-title: |
-  Potential XSS vulnerability related to the analytics dashboard
+url: https://web.archive.org/web/20121126005814/https://spreecommerce.com/blog/security-issue-all-versions
+title: Potential XSS vulnerability related to the analytics dashboard
 date: 2012-07-02
 description: |
-  Spree has a flaw in its analytics dashboard where keywords are not escaped,
-  leading to potential XSS.
+  Spree has a flaw in its analytics dashboard where
+  keywords are not escaped, leading to potential XSS.
 patched_versions:
-- ~> 0.11.4
-- ~> 0.70.6
-- ~> 1.0.5
-- '>= 1.1.2'
+  - "~> 0.11.4"
+  - "~> 0.70.6"
+  - "~> 1.0.5"
+  - ">= 1.1.2"
+related:
+  url:
+    - https://web.archive.org/web/20121126005814/https://spreecommerce.com/blog/security-issue-all-versions
diff --git a/gems/spree/OSVDB-73751.yml b/gems/spree/OSVDB-73751.yml
index 96d59a643e..f22982cd1c 100644
--- a/gems/spree/OSVDB-73751.yml
+++ b/gems/spree/OSVDB-73751.yml
@@ -1,11 +1,16 @@
 ---
 gem: spree
 osvdb: 73751
-url: https://spreecommerce.com/blog/security-fixes
+url: https://web.archive.org/web/20160331142302/https://spreecommerce.com/blog/security-fixes
 title: Spree Content Controller Unspecified Arbitrary File Disclosure
 date: 2011-04-19
 description: |
   Spree Gem for Ruby would allow a user to request a specially crafted URL and
   expose arbitrary files on the server
 patched_versions:
-- '>= 0.50.1'
+  - ">= 0.50.1"
+related:
+  url:
+    - https://web.archive.org/web/20160331142302/https://spreecommerce.com/blog/security-fixes
+    - https://seclists.org/oss-sec/2015/q3/275
+    - https://github.com/spree/spree/commit/0a2ee5fc68b22b8257e8a6cf1811598293416d33
diff --git a/gems/spree/OSVDB-76011.yml b/gems/spree/OSVDB-76011.yml
index 3341778ed9..54e4d45a06 100644
--- a/gems/spree/OSVDB-76011.yml
+++ b/gems/spree/OSVDB-76011.yml
@@ -1,8 +1,8 @@
 ---
 gem: spree
 osvdb: 76011
-url: https://spreecommerce.com/blog/remote-command-product-group
-title: |
+url: https://web.archive.org/web/20121124215359/https://spreecommerce.com/blog/remote-command-product-group
+title:
   Spree Search ProductScope Class search[send][] Parameter Arbitrary Command
   Execution
 date: 2011-10-05
@@ -12,4 +12,7 @@ description: |
   specially crafted request, a remote attacker can potentially cause arbitrary
   command execution.
 patched_versions:
-- '>= 0.60.2'
+  - ">= 0.60.2"
+related:
+  url:
+    - https://web.archive.org/web/20121124215359/https://spreecommerce.com/blog/remote-command-product-group
diff --git a/gems/spree/OSVDB-91216.yml b/gems/spree/OSVDB-91216.yml
deleted file mode 100644
index 32251a91e1..0000000000
--- a/gems/spree/OSVDB-91216.yml
+++ /dev/null
@@ -1,17 +0,0 @@
----
-gem: spree
-cve: 2013-1656
-osvdb: 91216
-url: https://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
-title: |
-  Spree promotion_actions_controller.rb promotion_action Parameter Arbitrary
-  Ruby Object Instantiation Command Execution
-date: 2013-02-21
-description: |
-  Spree contains a flaw that is triggered when handling input passed via the
-  'promotion_action' parameter to promotion_actions_controller.rb. This may
-  allow a remote authenticated attacker to instantiate arbitrary Ruby objects
-  and potentially execute arbitrary commands.
-cvss_v2: 4.3
-patched_versions:
-- '>= 2.0.0'
diff --git a/gems/spree/OSVDB-91217.yml b/gems/spree/OSVDB-91217.yml
deleted file mode 100644
index 5290c229a7..0000000000
--- a/gems/spree/OSVDB-91217.yml
+++ /dev/null
@@ -1,17 +0,0 @@
----
-gem: spree
-cve: 2013-1656
-osvdb: 91217
-url: https://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
-title: |
-  Spree payment_methods_controller.rb payment_method Parameter Arbitrary Ruby
-  Object Instantiation Command Execution
-date: 2013-02-21
-description: |
-  Spree contains a flaw that is triggered when handling input passed via the
-  'payment_method' parameter to payment_methods_controller.rb. This may allow
-  a remote authenticated attacker to instantiate arbitrary Ruby objects and
-  potentially execute arbitrary commands.
-cvss_v2: 4.3
-patched_versions:
-- '>= 2.0.0'
diff --git a/gems/spree/OSVDB-91218.yml b/gems/spree/OSVDB-91218.yml
deleted file mode 100644
index f8b8266e73..0000000000
--- a/gems/spree/OSVDB-91218.yml
+++ /dev/null
@@ -1,17 +0,0 @@
----
-gem: spree
-cve: 2013-1656
-osvdb: 91218
-url: https://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
-title: |
-  Spree promotions_controller.rb calculator_type Parameter Arbitrary Ruby
-  Object Instantiation Command Execution
-date: 2013-02-21
-description: |
-  Spree contains a flaw that is triggered when handling input passed via the
-  'calculator_type' parameter to promotions_controller.rb. This may allow a
-  remote authenticated attacker to instantiate arbitrary Ruby objects and
-  potentially execute arbitrary commands.
-cvss_v2: 4.3
-patched_versions:
-- '>= 2.0.0'
diff --git a/gems/spree/OSVDB-91219.yml b/gems/spree/OSVDB-91219.yml
deleted file mode 100644
index 839a2eab94..0000000000
--- a/gems/spree/OSVDB-91219.yml
+++ /dev/null
@@ -1,17 +0,0 @@
----
-gem: spree
-cve: 2013-1656
-osvdb: 91219
-url: https://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
-title: |
-  Spree promotion_rules_controller.rb promotion_rule Parameter Arbitrary Ruby
-  Object Instantiation Command Execution
-date: 2013-02-21
-description: |
-  Spree contains a flaw that is triggered when handling input passed via the
-  'promotion_rule' parameter to promotion_rules_controller.rb. This may allow
-  a remote authenticated attacker to instantiate arbitrary Ruby objects and
-  potentially execute arbitrary commands.
-cvss_v2: 4.3
-patched_versions:
-- '>= 2.0.0'
diff --git a/gems/spree_api/CVE-2020-26223.yml b/gems/spree_api/CVE-2020-26223.yml
index cb8fd58d65..c9799a1d05 100644
--- a/gems/spree_api/CVE-2020-26223.yml
+++ b/gems/spree_api/CVE-2020-26223.yml
@@ -5,7 +5,7 @@ ghsa: m2jr-hmc3-qmpr
 url: https://github.com/spree/spree/security/advisories/GHSA-m2jr-hmc3-qmpr
 date: 2020-11-13
 title: Authorization bypass in Spree
-description: |-
+description: |
   ### Impact
   The perpetrator could query the [API v2 Order Status]
   (https://guides.spreecommerce.org/api/v2/storefront#tag/Order-Status) endpoint
@@ -16,13 +16,13 @@ description: |-
   Users of Spree < 3.7 are not affected.
 cvss_v3: 7.7
 patched_versions:
-- ~> 3.7.11
-- ~> 4.0.4
-- '>= 4.1.11'
+  - "~> 3.7.11"
+  - "~> 4.0.4"
+  - ">= 4.1.11"
 
 unaffected_versions:
-- < 3.7.0
+  - "< 3.7.0"
 
 related:
   url:
-  - https://github.com/spree/spree/pull/10573
+    - https://github.com/spree/spree/pull/10573
diff --git a/gems/spree_auth/OSVDB-90865.yml b/gems/spree_auth/CVE-2013-2506.yml
similarity index 98%
rename from gems/spree_auth/OSVDB-90865.yml
rename to gems/spree_auth/CVE-2013-2506.yml
index b9898e2c53..d25bdd8327 100644
--- a/gems/spree_auth/OSVDB-90865.yml
+++ b/gems/spree_auth/CVE-2013-2506.yml
@@ -3,7 +3,7 @@ gem: spree_auth
 cve: 2013-2506
 osvdb: 90865
 url: https://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
-title: |
+title:
   Spree app/models/spree/user.rb Mass Role Assignment Remote Privilege
   Escalation
 date: 2013-02-21
diff --git a/gems/spree_auth_devise/OSVDB-90865.yml b/gems/spree_auth_devise/CVE-2013-2506.yml
similarity index 90%
rename from gems/spree_auth_devise/OSVDB-90865.yml
rename to gems/spree_auth_devise/CVE-2013-2506.yml
index 5dd5f242ae..df7ddb4596 100644
--- a/gems/spree_auth_devise/OSVDB-90865.yml
+++ b/gems/spree_auth_devise/CVE-2013-2506.yml
@@ -2,6 +2,7 @@
 gem: spree_auth_devise
 cve: 2013-2506
 osvdb: 90865
+ghsa: jp57-9j37-5476
 url: https://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
 title: Spree app/models/spree/user.rb Mass Role Assignment Remote Privilege Escalation
 date: 2013-02-21
@@ -13,6 +14,6 @@ description: |
   elevated administrative privileges.
 cvss_v2: 4.0
 patched_versions:
-- ~> 1.1.6
-- ~> 1.2.0
-- '>= 1.3.0'
+  - "~> 1.1.6"
+  - "~> 1.2.0"
+  - ">= 1.3.0"
diff --git a/gems/spree_auth_devise/CVE-2021-41275.yml b/gems/spree_auth_devise/CVE-2021-41275.yml
index d3f3a40438..550cdd743f 100644
--- a/gems/spree_auth_devise/CVE-2021-41275.yml
+++ b/gems/spree_auth_devise/CVE-2021-41275.yml
@@ -52,15 +52,15 @@ description: |
   ```
 cvss_v3: 9.3
 patched_versions:
-- "~> 4.0.1"
-- "~> 4.1.1"
-- "~> 4.2.1"
-- ">= 4.4.1"
+  - "~> 4.0.1"
+  - "~> 4.1.1"
+  - "~> 4.2.1"
+  - ">= 4.4.1"
 related:
   ghsa:
-  - xm34-v85h-9pg2
-  - gpqc-4pp7-5954
-  - 8xfw-5q82-3652
-  - 6mqr-q86q-6gwr
+    - xm34-v85h-9pg2
+    - gpqc-4pp7-5954
+    - 8xfw-5q82-3652
+    - 6mqr-q86q-6gwr
   url:
-  - https://github.com/spree/spree_auth_devise/commit/adf6ed4cd94d66091776b5febd4ff3767362de63
+    - https://github.com/spree/spree_auth_devise/commit/adf6ed4cd94d66091776b5febd4ff3767362de63
diff --git a/gems/sprockets/CVE-2014-7819.yml b/gems/sprockets/CVE-2014-7819.yml
index c8a855de7b..5627603af3 100644
--- a/gems/sprockets/CVE-2014-7819.yml
+++ b/gems/sprockets/CVE-2014-7819.yml
@@ -2,10 +2,12 @@
 gem: sprockets
 cve: 2014-7819
 osvdb: 113965
+ghsa: 33pp-3763-mrfp
 url: https://groups.google.com/forum/#!topic/rubyonrails-security/doAVp0YaTqY
-title: 'CVE-2014-7819 rubygem-sprockets: arbitrary file existence disclosure'
+title: "CVE-2014-7819 rubygem-sprockets: arbitrary file existence disclosure"
 date: 2014-10-30
-description: Multiple directory traversal vulnerabilities in server.rb in Sprockets
+description: |
+  Multiple directory traversal vulnerabilities in server.rb in Sprockets
   before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x
   before 2.4.6, 2.5.x before 2.5.1, 2.6.x and 2.7.x before 2.7.1, 2.8.x before 2.8.3,
   2.9.x before 2.9.4, 2.10.x before 2.10.2, 2.11.x before 2.11.3, 2.12.x before 2.12.3,
@@ -14,16 +16,16 @@ description: Multiple directory traversal vulnerabilities in server.rb in Sprock
   via a ../ (dot dot slash) sequence with (1) double slashes or (2) URL encoding.
 cvss_v2: 5.0
 patched_versions:
-- ~> 2.0.5
-- ~> 2.1.4
-- ~> 2.2.3
-- ~> 2.3.3
-- ~> 2.4.6
-- ~> 2.5.1
-- ~> 2.7.1
-- ~> 2.8.3
-- ~> 2.9.4
-- ~> 2.10.2
-- ~> 2.11.3
-- ~> 2.12.3
-- '>= 3.0.0.beta.3'
+  - "~> 2.0.5"
+  - "~> 2.1.4"
+  - "~> 2.2.3"
+  - "~> 2.3.3"
+  - "~> 2.4.6"
+  - "~> 2.5.1"
+  - "~> 2.7.1"
+  - "~> 2.8.3"
+  - "~> 2.9.4"
+  - "~> 2.10.2"
+  - "~> 2.11.3"
+  - "~> 2.12.3"
+  - ">= 3.0.0.beta.3"
diff --git a/gems/sprockets/CVE-2018-3760.yml b/gems/sprockets/CVE-2018-3760.yml
index c5f9209f5a..2728d41cd8 100644
--- a/gems/sprockets/CVE-2018-3760.yml
+++ b/gems/sprockets/CVE-2018-3760.yml
@@ -19,6 +19,6 @@ description: |
    This work around will not be possible in all hosting environments and upgrading is advised.
 cvss_v3: 7.5
 patched_versions:
-- ">= 2.12.5, < 3.0.0"
-- ">= 3.7.2, < 4.0.0"
-- ">= 4.0.0.beta8"
+  - ">= 2.12.5, < 3.0.0"
+  - ">= 3.7.2, < 4.0.0"
+  - ">= 4.0.0.beta8"
diff --git a/gems/sprout/CVE-2013-6421.yml b/gems/sprout/CVE-2013-6421.yml
index 8c7226491e..4cad36fca2 100644
--- a/gems/sprout/CVE-2013-6421.yml
+++ b/gems/sprout/CVE-2013-6421.yml
@@ -2,6 +2,7 @@
 gem: sprout
 cve: 2013-6421
 osvdb: 100598
+ghsa: 229r-pqp6-8w6g
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-6421
 title: sprout Gem for Ruby archive_unpacker.rb unpack_zip() Function Multiple Parameter
   Arbitrary Code Execution
@@ -14,4 +15,4 @@ description: |
   code.
 cvss_v2: 7.5
 unaffected_versions:
-- < 0.7.246
+  - "< 0.7.246"
diff --git a/gems/sqlite-vec/CVE-2024-46488.yml b/gems/sqlite-vec/CVE-2024-46488.yml
new file mode 100644
index 0000000000..6bbebfffe6
--- /dev/null
+++ b/gems/sqlite-vec/CVE-2024-46488.yml
@@ -0,0 +1,22 @@
+---
+gem: sqlite-vec
+cve: 2024-46488
+ghsa: vrcx-gx3g-j3h8
+url: https://github.com/advisories/GHSA-vrcx-gx3g-j3h8
+title: Heap-based Buffer Overflow in sqlite-vec
+date: 2024-09-25
+description: |
+  sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow
+  via the npy_token_next function. This vulnerability allows attackers
+  to cause a Denial of Service (DoS) via a crafted file.
+
+  Workaround for CVE in release 0.1.3.
+cvss_v3: 9.1
+patched_versions:
+  - ">= 0.1.3"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-46488
+    - https://github.com/asg017/sqlite-vec/releases/tag/v0.1.3
+    - https://github.com/VulnSphere/LLMVulnSphere/blob/main/VectorDB/sqlite-vec/OOBR_2.md
+    - https://github.com/advisories/GHSA-vrcx-gx3g-j3h8
diff --git a/gems/sqlite3-ruby/CVE-2011-0995.yml b/gems/sqlite3-ruby/CVE-2011-0995.yml
new file mode 100644
index 0000000000..c3636cee81
--- /dev/null
+++ b/gems/sqlite3-ruby/CVE-2011-0995.yml
@@ -0,0 +1,25 @@
+---
+gem: sqlite3-ruby
+cve: 2011-0995
+ghsa: 6x46-7rrv-m4h8
+osvdb: 72180
+url: https://www.suse.com/security/cve/CVE-2011-0995.html
+title: rubygem-sqlite3 gem uses weak file permissions
+date: 2011-05-13
+description: |
+  The sqlite3-ruby gem in the rubygem-sqlite3 package before
+  1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak
+  permissions for unspecified files, which allows local users
+  to gain privileges via unknown vectors.
+cvss_v2: 2.1
+patched_versions:
+  - ">= 1.2.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-0995
+    - https://www.suse.com/security/cve/CVE-2011-0995.html
+    - http://www.osvdb.org/72180
+    - https://github.com/advisories/GHSA-6x46-7rrv-m4h8
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/67263
+    - https://ubuntu.com/security/CVE-2011-0995
+    - https://cve.circl.lu/cve/CVE-2011-0995
diff --git a/gems/sqlite3/GHSA-mgvv-5mxp-xq67.yml b/gems/sqlite3/GHSA-mgvv-5mxp-xq67.yml
new file mode 100644
index 0000000000..e2261989d3
--- /dev/null
+++ b/gems/sqlite3/GHSA-mgvv-5mxp-xq67.yml
@@ -0,0 +1,54 @@
+---
+gem: sqlite3
+ghsa: mgvv-5mxp-xq67
+url: https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-mgvv-5mxp-xq67
+title: SQLite3 addresses vulnerability in packaged version of libsqlite
+date: 2022-10-03
+description: |
+  ### Summary
+
+  The rubygem sqlite3 v1.5.1 upgrades the packaged version of libsqlite from
+  v3.39.3 to [v3.39.4](https://sqlite.org/releaselog/3_39_4.html).
+
+  libsqlite v3.39.4 addresses a vulnerability described as follows in the
+  release notification:
+
+  > Version 3.39.4 is a minimal patch against the prior release that addresses
+  > issues found since the prior release. In particular, a potential
+  > vulnerability in the FTS3 extension has been fixed, so this should be
+  > considered a security update.
+  >
+  > In order to exploit the vulnerability, an attacker must have full SQL access
+  > and must be able to construct a corrupt database with over 2GB of FTS3
+  > content. The problem arises from a 32-bit signed integer overflow.
+
+  This vulnerability has not been assigned a CVE and does not have a severity
+  declared.
+
+  Please note that this advisory only applies to the sqlite3 gem v1.5.0, and
+  only if the packaged libsqlite is being used. If you've overridden defaults at
+  installation time to use system libraries instead of packaged libraries, you
+  should instead pay attention to your distro's libsqlite release announcements.
+
+
+  ### Mitigation
+
+  Upgrade to the rubygem sqlite3 v1.5.1 or later.
+
+  Users who are unable to upgrade the sqlite3 gem may also choose a more
+  complicated mitigation: compile and link sqlite3 against external libsqlite >=
+  3.39.4 which will also address these same issues.
+
+
+  ### References
+
+  - Upstream release notes: https://sqlite.org/releaselog/3_39_4.html
+  - Instructions for compiling against system libraries:
+    https://github.com/sparklemotion/sqlite3-ruby
+unaffected_versions:
+  - "< 1.5.0"
+patched_versions:
+  - ">= 1.5.1"
+related:
+  url:
+    - https://github.com/sparklemotion/sqlite3-ruby/releases/tag/v1.5.1
diff --git a/gems/stimulus_reflex/CVE-2024-28121.yml b/gems/stimulus_reflex/CVE-2024-28121.yml
new file mode 100644
index 0000000000..7b4c181c67
--- /dev/null
+++ b/gems/stimulus_reflex/CVE-2024-28121.yml
@@ -0,0 +1,93 @@
+---
+gem: stimulus_reflex
+cve: 2024-28121
+ghsa: f78j-4w3g-4q65
+url: https://github.com/stimulusreflex/stimulus_reflex/security/advisories/GHSA-f78j-4w3g-4q65
+title: StimulusReflex arbitrary method call
+date: 2024-03-12
+description: |
+  ### Summary
+
+  More methods than expected can be called on reflex instances.
+  Being able to call some of them has security implications.
+
+  ### Details
+
+  To invoke a reflex a websocket message of the following shape is sent:
+
+  ```json
+  {
+    "target": "[class_name]#[method_name]",
+    "args": []
+  }
+  ```
+
+  The server will proceed to instantiate `reflex` using the provided `class_name` as long as it extends `StimulusReflex::Reflex`. It then attempts to call `method_name` on the instance with the provided arguments [ref]:
+
+  [ref]: https://github.com/stimulusreflex/stimulus_reflex/blob/0211cad7d60fe96838587f159d657e44cee51b9b/app/channels/stimulus_reflex/channel.rb#L83
+
+  ```ruby
+  method = reflex.method method_name
+  required_params = method.parameters.select { |(kind, _)| kind == :req }
+  optional_params = method.parameters.select { |(kind, _)| kind == :opt }
+
+  if arguments.size >= required_params.size && arguments.size <= required_params.size + optional_params.size
+    reflex.public_send(method_name, *arguments)
+  end
+  ```
+
+  This is problematic as `reflex.method(method_name)` can be more methods than those explicitly specified by the developer in their reflex class. A good example is the `instance_variable_set` method.
+
+  ```json
+  {
+    "target": "StimulusReflex::Reflex#render_collection",
+    "args": [
+      { "inline":  "<% system('[command here]') %>" }
+    ]
+  }
+  ```
+
+  ### Patches
+
+  Patches are available on [RubyGems] and on [NPM].
+
+  [RubyGems]: https://rubygems.org/gems/stimulus_reflex
+  [NPM]: https://npmjs.org/package/stimulus_reflex
+
+  The patched versions are:
+  - [`3.4.2`](https://github.com/stimulusreflex/stimulus_reflex/releases/tag/v3.4.2)
+  - [`3.5.0.rc4`](https://github.com/stimulusreflex/stimulus_reflex/releases/tag/v3.5.0.rc4)
+
+  ### Workaround
+
+  You can add this guard to mitigate the issue if running an unpatched
+  version of the library.
+  1.) Make sure all your reflexes inherit from the `ApplicationReflex`
+      class
+  2.) Add this `before_reflex` callback to your `app/reflexes/application_reflex.rb` file:
+
+  ```ruby
+  class ApplicationReflex < StimulusReflex::Reflex
+    before_reflex do
+      ancestors = self.class.ancestors[0..self.class.ancestors.index(StimulusReflex::Reflex) - 1]
+      allowed = ancestors.any? { |a| a.public_instance_methods(false).any?(method_name.to_sym) }
+
+      raise ArgumentError.new("Reflex method '#{method_name}' is not defined on class '#{self.class.name}' or on any of its ancestors") if !allowed
+    end
+  end
+  ```
+cvss_v3: 8.8
+patched_versions:
+  - "~> 3.4.2"
+  - ">= 3.5.0.rc4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-28121
+    - http://seclists.org/fulldisclosure/2024/Mar/16
+    - https://github.com/stimulusreflex/stimulus_reflex/releases/tag/v3.4.2
+    - https://github.com/stimulusreflex/stimulus_reflex/releases/tag/v3.5.0.rc4
+    - https://github.com/stimulusreflex/stimulus_reflex/security/advisories/GHSA-f78j-4w3g-4q65
+    - https://github.com/stimulusreflex/stimulus_reflex/commit/538582d240439aab76066c72335ea92096cd0c7f
+    - https://github.com/stimulusreflex/stimulus_reflex/commit/d823d7348f9ca42eb6df25574f11974e4f5bc88c
+    - https://github.com/stimulusreflex/stimulus_reflex/blob/0211cad7d60fe96838587f159d657e44cee51b9b/app/channels/stimulus_reflex/channel.rb#L83
+    - https://github.com/advisories/GHSA-f78j-4w3g-4q65
diff --git a/gems/stringio/CVE-2024-27280.yml b/gems/stringio/CVE-2024-27280.yml
new file mode 100644
index 0000000000..56a095dcbc
--- /dev/null
+++ b/gems/stringio/CVE-2024-27280.yml
@@ -0,0 +1,29 @@
+---
+gem: stringio
+cve: 2024-27280
+ghsa: v5h6-c2hv-hv3r
+url: https://www.ruby-lang.org/en/news/2024/03/21/buffer-overread-cve-2024-27280/
+title: Buffer overread vulnerability in StringIO
+date: 2024-03-21
+description: |
+  An issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x
+  through 3.0.6 and 3.1.x through 3.1.4.
+
+  The `ungetbyte` and `ungetc` methods on a StringIO can read past the end of a
+  string, and a subsequent call to `StringIO.gets` may return the memory value.
+
+  This vulnerability is not affected StringIO 3.0.3 and later, and Ruby 3.2.x
+  and later.
+
+  We recommend to update the StringIO gem to version 3.0.3 or later. In order to
+  ensure compatibility with bundled version in older Ruby series, you may update
+  as follows instead:
+
+  * For Ruby 3.0 users: Update to `stringio` 3.0.1.1
+  * For Ruby 3.1 users: Update to `stringio` 3.0.1.2
+
+  You can use `gem update stringio` to update it. If you are using bundler,
+  please add `gem "stringio", ">= 3.0.1.2"` to your `Gemfile`.
+cvss_v3: 9.8
+patched_versions:
+  - ">= 3.0.1.1"
diff --git a/gems/strong_password/CVE-2019-13354.yml b/gems/strong_password/CVE-2019-13354.yml
index e45845f87d..22975ab965 100644
--- a/gems/strong_password/CVE-2019-13354.yml
+++ b/gems/strong_password/CVE-2019-13354.yml
@@ -13,6 +13,6 @@ description: |
   Upgrade `strong_password` to v0.0.8 to ensure no malicious code execution is possible.
 cvss_v3: 9.8
 unaffected_versions:
-- "!= 0.0.7"
+  - "< 0.0.7"
 patched_versions:
-- ">= 0.0.8"
+  - ">= 0.0.8"
diff --git a/gems/sup/CVE-2013-4478.yml b/gems/sup/CVE-2013-4478.yml
index a801147327..fdd26a8a73 100644
--- a/gems/sup/CVE-2013-4478.yml
+++ b/gems/sup/CVE-2013-4478.yml
@@ -2,12 +2,29 @@
 gem: sup
 cve: 2013-4478
 osvdb: 99074
-url: http://www.phenoelit.org/stuff/whatsup.txt
-title: Sup MUA Email Attachment Content Type Handling Arbitrary Command Execution
+ghsa: 5f2p-6vjv-2q2m
+url: https://web.archive.org/web/20140524012714/http://rubyforge.org/pipermail/sup-talk/2013-August/004993.html
+title: Sup wrongly handled the filename of attachments
 date: 2013-10-29
-description: Sup MUA contains a flaw that is triggered when handling email attachment
+description: |
+  Sup MUA contains a flaw that is triggered when handling email attachment
   content. This may allow a context-dependent attacker to execute arbitrary commands.
 cvss_v2: 6.8
 patched_versions:
-- ~> 0.13.2.1
-- '>= 0.14.1.1'
+  - "~> 0.13.2.1"
+  - ">= 0.14.1.1"
+related:
+  cve:
+    - 2013-4479
+  ghsa:
+    - hh2x-7mf9-78fr
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2013-4478
+    - https://github.com/sup-heliotrope/sup/blob/develop/History.txt
+    - https://www.openwall.com/lists/oss-security/2013/10/30/2
+    - https://web.archive.org/web/20140524012714/http://rubyforge.org/pipermail/sup-talk/2013-August/004993.html
+    - https://github.com/sup-heliotrope/sup/commit/8b46cdbfc14e07ca07d403aa28b0e7bc1c544785
+    - https://www.mend.io/vulnerability-database/CVE-2013-4478
+    - https://security-tracker.debian.org/tracker/CVE-2013-4478
+    - https://lwn.net/Articles/575351
+    - https://github.com/advisories/GHSA-5f2p-6vjv-2q2m
diff --git a/gems/sup/CVE-2013-4479.yml b/gems/sup/CVE-2013-4479.yml
index c7ae4ffe84..285c35bf13 100644
--- a/gems/sup/CVE-2013-4479.yml
+++ b/gems/sup/CVE-2013-4479.yml
@@ -2,12 +2,29 @@
 gem: sup
 cve: 2013-4479
 osvdb: 99074
-url: http://www.phenoelit.org/stuff/whatsup.txt
-title: Sup MUA Email Attachment Content Type Handling Arbitrary Command Execution
+ghsa: hh2x-7mf9-78fr
+url: https://web.archive.org/web/20140524005344/http://rubyforge.org/pipermail/sup-talk/2013-October/004996.html
+title: Sup did not sanitize the content-type of attachments
 date: 2013-10-29
-description: Sup MUA contains a flaw that is triggered when handling email attachment
+description: |
+  Sup MUA contains a flaw that is triggered when handling email attachment
   content. This may allow a context-dependent attacker to execute arbitrary commands.
 cvss_v2: 6.8
 patched_versions:
-- ~> 0.13.2.1
-- '>= 0.14.1.1'
+  - "~> 0.13.2.1"
+  - ">= 0.14.1.1"
+related:
+  cve:
+    - 2013-4478
+  ghsa:
+    - 5f2p-6vjv-2q2m
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2013-4479
+    - https://web.archive.org/web/20140524005344/http://rubyforge.org/pipermail/sup-talk/2013-October/004996.html
+    - https://seclists.org/fulldisclosure/2013/Oct/272
+    - https://seclists.org/fulldisclosure/2013/Oct/att-272/whatsup.txt
+    - https://www.openwall.com/lists/oss-security/2013/10/30/2
+    - https://github.com/sup-heliotrope/sup/commit/ca0302e0c716682d2de22e9136400c704cc93e42
+    - https://security-tracker.debian.org/tracker/CVE-2013-4479
+    - https://lwn.net/Articles/575351
+    - https://github.com/advisories/GHSA-hh2x-7mf9-78fr
diff --git a/gems/svg_optimizer/CVE-2023-46035.yml b/gems/svg_optimizer/CVE-2023-46035.yml
new file mode 100644
index 0000000000..8e11584585
--- /dev/null
+++ b/gems/svg_optimizer/CVE-2023-46035.yml
@@ -0,0 +1,12 @@
+---
+gem: svg_optimizer
+cve: 2023-46035
+ghsa: 6hvg-62q8-95v7
+url: https://github.com/fnando/svg_optimizer/pull/17
+title: External XML entity (XXE) vulnerability in svg_optimizer rubygem
+date: 2023-10-19
+description: |
+  An issue in Fnando svg_optimizer v.0.2.6 allows a remote attacker to escalate privileges when
+  optimizing untrusted SVG content.
+patched_versions:
+  - ">= 0.3.0"
diff --git a/gems/text_helpers/CVE-2020-36624.yml b/gems/text_helpers/CVE-2020-36624.yml
new file mode 100644
index 0000000000..7c4bb3a1ef
--- /dev/null
+++ b/gems/text_helpers/CVE-2020-36624.yml
@@ -0,0 +1,25 @@
+---
+gem: text_helpers
+cve: 2020-36624
+ghsa: 74hc-57m5-83ch
+url: https://github.com/ahorner/text-helpers/pull/19
+title: text_helpers uses web link to untrusted target with window.opener access
+date: 2022-12-22
+description: |
+  A vulnerability was found in ahorner text-helpers 1.1.0/1.1.1. It has
+  been declared as critical. This vulnerability affects unknown code of the file
+  lib/text_helpers/translation.rb. The manipulation of the argument link leads to
+  use of web link to untrusted target with window.opener access. The attack can be
+  initiated remotely. Upgrading to version 1.2.0 can address this issue. The name
+  of the patch is 184b60ded0e43c985788582aca2d1e746f9405a3. It is recommended to
+  upgrade the affected component. The identifier of this vulnerability is VDB-216520.
+cvss_v3: 6.1
+unaffected_versions:
+  - "< 1.1.0"
+patched_versions:
+  - ">= 1.2.0"
+related:
+  url:
+    - https://github.com/ahorner/text-helpers/commit/184b60ded0e43c985788582aca2d1e746f9405a3
+    - https://github.com/ahorner/text-helpers/releases/tag/v1.2.0
+    - https://vuldb.com/?id.216520
diff --git a/gems/thin/CVE-2009-3287.yml b/gems/thin/CVE-2009-3287.yml
new file mode 100644
index 0000000000..0c3c60db64
--- /dev/null
+++ b/gems/thin/CVE-2009-3287.yml
@@ -0,0 +1,22 @@
+---
+gem: thin
+cve: 2009-3287
+ghsa: j24p-r6wx-r79w
+url: http://github.com/macournoyer/thin/blob/master/CHANGELOG
+title: High severity vulnerability that affects thin
+date: 2017-10-24
+description: |
+  lib/thin/connection.rb in Thin web server before 1.2.4 relies on the
+  X-Forwarded-For header to determine the IP address of the client,
+  which allows remote attackers to spoof the IP address and hide
+  activities via a modified X-Forwarded-For header.
+cvss_v2: 7.5
+patched_versions:
+  - ">= 1.2.4"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2009-3287
+    - http://github.com/macournoyer/thin/blob/master/CHANGELOG
+    - http://github.com/macournoyer/thin/commit/7bd027914c5ffd36bb408ef47dc749de3b6e063a
+    - https://github.com/advisories/GHSA-j24p-r6wx-r79w
+    - http://www.openwall.com/lists/oss-security/2009/09/12/1
diff --git a/gems/thor/CVE-2025-54314.yml b/gems/thor/CVE-2025-54314.yml
new file mode 100644
index 0000000000..f6dcdcd0d0
--- /dev/null
+++ b/gems/thor/CVE-2025-54314.yml
@@ -0,0 +1,21 @@
+---
+gem: thor
+cve: 2025-54314
+ghsa: mqcp-p2hv-vw6x
+url: https://github.com/advisories/GHSA-mqcp-p2hv-vw6x
+title: Thor can construct an unsafe shell command from library input.
+date: 2025-07-20
+description: |
+  Thor before 1.4.0 can construct an unsafe shell command
+  from library input.
+cvss_v3: 2.8
+patched_versions:
+  - ">= 1.4.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-54314
+    - https://github.com/rails/thor/releases/tag/v1.4.0
+    - https://github.com/rails/thor/pull/897
+    - https://github.com/rails/thor/commit/536b79036a0efb765c1899233412e7b1ca94abfa
+    - https://hackerone.com/reports/3260153
+    - https://github.com/advisories/GHSA-mqcp-p2hv-vw6x
diff --git a/gems/thumbshooter/CVE-2013-1898.yml b/gems/thumbshooter/CVE-2013-1898.yml
index 688b6d92ba..9de18f8885 100644
--- a/gems/thumbshooter/CVE-2013-1898.yml
+++ b/gems/thumbshooter/CVE-2013-1898.yml
@@ -2,11 +2,13 @@
 gem: thumbshooter
 cve: 2013-1898
 osvdb: 91839
+ghsa: 7fqj-cg79-f2pv
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-1898
 title: Thumbshooter Gem for Ruby thumbshooter.rb URL Shell Metacharacter Injection
   Arbitrary Command Execution
 date: 2013-03-26
-description: Thumbshooter Gem for Ruby contains a flaw that is due to the program
+description: |
+  Thumbshooter Gem for Ruby contains a flaw that is due to the program
   failing to properly sanitize input passed to thumbshooter.rb. With a specially crafted
   URL that contains shell metacharacters, a context-dependent attacker can execute
   arbitrary commands.
diff --git a/gems/time/CVE-2023-28756.yml b/gems/time/CVE-2023-28756.yml
new file mode 100644
index 0000000000..2791ce253f
--- /dev/null
+++ b/gems/time/CVE-2023-28756.yml
@@ -0,0 +1,19 @@
+---
+gem: time
+cve: 2023-28756
+ghsa: fg7x-g82r-94qc
+url: https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/
+title: Ruby Time component ReDos issue
+date: 2023-03-31
+description: |
+  A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby
+  through 3.2.1. The Time parser mishandles invalid URLs that have specific characters.
+  It causes an increase in execution time for parsing strings to Time objects. The
+  fixed versions are 0.1.1 and 0.2.2.
+cvss_v3: 7.5
+patched_versions:
+  - "~> 0.1.1"
+  - ">= 0.2.2"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2022/12/25/ruby-3-2-0-released/
diff --git a/gems/tmpdir/CVE-2021-28966.yml b/gems/tmpdir/CVE-2021-28966.yml
index e248181e8b..3265ad68fc 100644
--- a/gems/tmpdir/CVE-2021-28966.yml
+++ b/gems/tmpdir/CVE-2021-28966.yml
@@ -12,9 +12,9 @@ description: |
   because it uses tmpdir internally.
 cvss_v3: 7.5
 patched_versions:
-- ">= 0.1.2"
+  - ">= 0.1.2"
 related:
   cve:
-  - 2018-6914
+    - 2018-6914
   url:
-  - https://www.ruby-lang.org/en/news/2018/03/28/unintentional-file-and-directory-creation-with-directory-traversal-cve-2018-6914/
+    - https://www.ruby-lang.org/en/news/2018/03/28/unintentional-file-and-directory-creation-with-directory-traversal-cve-2018-6914/
diff --git a/gems/trestle-auth/CVE-2021-29435.yml b/gems/trestle-auth/CVE-2021-29435.yml
index 37db6db43a..f951ec3696 100644
--- a/gems/trestle-auth/CVE-2021-29435.yml
+++ b/gems/trestle-auth/CVE-2021-29435.yml
@@ -19,7 +19,7 @@ description: |
   The vulnerability has been fixed in trestle-auth 0.4.2 released to RubyGems.
 cvss_v3: 8.1
 patched_versions:
-- '>= 0.4.2'
+  - ">= 0.4.2"
 
 unaffected_versions:
-- < 0.4.0
+  - "< 0.4.0"
diff --git a/gems/trilogy/CVE-2022-31026.yml b/gems/trilogy/CVE-2022-31026.yml
new file mode 100644
index 0000000000..9c476a943b
--- /dev/null
+++ b/gems/trilogy/CVE-2022-31026.yml
@@ -0,0 +1,27 @@
+---
+gem: trilogy
+cve: 2022-31026
+ghsa: 5g4r-2qhx-vqfm
+url: https://github.com/github/trilogy/security/advisories/GHSA-5g4r-2qhx-vqfm
+title: Use of Uninitialized Variable in trilogy
+date: 2022-06-06
+description: |
+  ### Impact
+
+  When authenticating, a malicious server could return a specially crafted authentication
+  packet, causing the client to read and return up to 12 bytes of data from an
+  uninitialized variable in stack memory.
+
+  ### Patches
+
+  Users of the trilogy gem should upgrade to version 2.1.1
+
+  ### Workarounds
+
+  This issue can be avoided by only connecting to trusted servers.
+cvss_v3: 5.9
+patched_versions:
+  - ">= 2.1.1"
+related:
+  url:
+    - https://github.com/github/trilogy/commit/6bed62789eaf119902b0fe247d2a91d56c31a962
diff --git a/gems/turbo_boost-commands/CVE-2024-28181.yml b/gems/turbo_boost-commands/CVE-2024-28181.yml
new file mode 100644
index 0000000000..4593c9eeab
--- /dev/null
+++ b/gems/turbo_boost-commands/CVE-2024-28181.yml
@@ -0,0 +1,61 @@
+---
+gem: turbo_boost-commands
+cve: 2024-28181
+ghsa: mp76-7w5v-pr75
+url: https://github.com/hopsoft/turbo_boost-commands/security/advisories/GHSA-mp76-7w5v-pr75
+title: TurboBoost Commands vulnerable to arbitrary method invocation
+date: 2024-03-15
+description: |
+  ### Impact
+
+  TurboBoost Commands has existing protections in place to
+  guarantee that only public methods on Command classes can be invoked; however, the
+  existing checks aren't as robust as they should be. It's possible for a sophisticated
+  attacker to invoke more methods than should be permitted depending on the the strictness
+  of authorization checks that individual applications enforce. Being able to call
+  some of these methods can have security implications.
+
+  #### Details
+
+  Commands verify that the class must be a `Command` and that the method requested is
+  defined as a public method; however, this isn't robust enough to guard against all
+  unwanted code execution. The library should more strictly enforce which methods are
+  considered safe before allowing them to be executed.
+
+  ### Patches
+
+  Patched in the following versions.
+  - 0.1.3
+    - [NPM Package](https://www.npmjs.com/package/@turbo-boost/commands/v/0.1.3)
+    - [Ruby GEM](https://rubygems.org/gems/turbo_boost-commands/versions/0.1.3)
+  - 0.2.2
+    - [NPM Package](https://www.npmjs.com/package/@turbo-boost/commands/v/0.2.2)
+    - [Ruby GEM](https://rubygems.org/gems/turbo_boost-commands/versions/0.2.2)
+
+  ### Workarounds
+
+  You can add this guard to mitigate the issue if running an unpatched
+  version of the library.
+
+  ```ruby
+  class ApplicationCommand < TurboBoost::Commands::Command
+    before_command do
+      method_name = params[:name].include?(\"#\") ? params[:name].split(\"#\").last : :perform
+      ancestors = self.class.ancestors[0..self.class.ancestors.index(TurboBoost::Commands::Command) - 1]
+      allowed = ancestors.any? { |a| a.public_instance_methods(false).any? method_name.to_sym }
+      throw :abort unless allowed # ← blocks invocation
+      # raise \"Invalid Command\" unless allowed # ← blocks invocation
+    end
+  end
+  ```
+cvss_v3: 8.1
+patched_versions:
+  - "~> 0.1.3"
+  - ">= 0.2.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-28181
+    - https://github.com/hopsoft/turbo_boost-commands/security/advisories/GHSA-mp76-7w5v-pr75
+    - https://github.com/hopsoft/turbo_boost-commands/commit/337cda7d9222f1f449905454a7374222017a7477
+    - https://github.com/hopsoft/turbo_boost-commands/commit/88af4fc0ac39cc1799d16c49fab52f6dfbcec9ba
+    - https://github.com/advisories/GHSA-mp76-7w5v-pr75
diff --git a/gems/twitter-bootstrap-rails/OSVDB-109206.yml b/gems/twitter-bootstrap-rails/CVE-2014-4920.yml
similarity index 95%
rename from gems/twitter-bootstrap-rails/OSVDB-109206.yml
rename to gems/twitter-bootstrap-rails/CVE-2014-4920.yml
index 802d31c477..f584540ceb 100644
--- a/gems/twitter-bootstrap-rails/OSVDB-109206.yml
+++ b/gems/twitter-bootstrap-rails/CVE-2014-4920.yml
@@ -3,6 +3,7 @@ gem: twitter-bootstrap-rails
 framework: rails
 cve: 2014-4920
 osvdb: 109206
+ghsa: vpqv-mqvc-pcx2
 url: https://nvisium.com/blog/2014/03/28/reflected-xss-vulnerability-in-twitter
 title: Reflective XSS Vulnerability in twitter-bootstrap-rails
 date: 2014-03-25
@@ -15,4 +16,4 @@ description: |
   script code in a user's browser session within the trust relationship between
   their browser and the server.
 patched_versions:
-- '>= 3.2.0'
+  - ">= 3.2.0"
diff --git a/gems/twitter-bootstrap-rails/CVE-2019-8331.yml b/gems/twitter-bootstrap-rails/CVE-2019-8331.yml
new file mode 100644
index 0000000000..9362ca4109
--- /dev/null
+++ b/gems/twitter-bootstrap-rails/CVE-2019-8331.yml
@@ -0,0 +1,28 @@
+---
+gem: twitter-bootstrap-rails
+cve: 2019-8331
+ghsa: 9v3m-8fp8-mj99
+url: https://blog.getbootstrap.com/2019/02/13/bootstrap-4-3-1-and-3-4-1/
+title: twitter-bootstrap-rails vulnerable to Cross-Site Scripting (XSS)
+date: 2019-02-15
+description: |
+  The seyhunak/twitter-bootstrap-rails gem includes a vendored version of
+  the Bootstrap JavaScript library.
+
+  In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible
+  in the tooltip or popover data-template attribute.
+
+  The most recent version of this gem, 5.0.0, includes Bootstrap v 3.3.6.
+  All versions of Bootstrap before v 3.4.1 are affected by this vulnerability.
+  All versions of this gem are affected.
+
+  # Workarounds
+  Until this gem is updated to use Bootstrap v3.4.1, users can replace it
+  with the official Twitter-maintained gems, `bootstrap-sass` (version 3.4.1)
+  or `bootstrap` (bootstrap 4 and 5).
+
+cvss_v2: 4.3
+cvss_v3: 6.1
+related:
+  url:
+    - https://github.com/twbs/bootstrap-sass/releases/tag/v3.4.1
diff --git a/gems/tzinfo/CVE-2022-31163.yml b/gems/tzinfo/CVE-2022-31163.yml
new file mode 100644
index 0000000000..091a395cab
--- /dev/null
+++ b/gems/tzinfo/CVE-2022-31163.yml
@@ -0,0 +1,77 @@
+---
+gem: tzinfo
+cve: 2022-31163
+ghsa: 5cm2-9h8c-rvfx
+url: https://github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx
+title: TZInfo relative path traversal vulnerability allows loading of arbitrary files
+date: 2022-07-21
+description: |
+  # Impact
+
+  ## Affected versions
+
+  - 0.3.60 and earlier.
+  - 1.0.0 to 1.2.9 when used with the Ruby data source (tzinfo-data).
+
+  ## Vulnerability
+
+  With the Ruby data source (the tzinfo-data gem for tzinfo version 1.0.0 and
+  later and built-in to earlier versions), time zones are defined in Ruby files.
+  There is one file per time zone. Time zone files are loaded with `require` on
+  demand. In the affected versions, `TZInfo::Timezone.get` fails to validate
+  time zone identifiers correctly, allowing a new line character within the
+  identifier. With Ruby version 1.9.3 and later, `TZInfo::Timezone.get` can be
+  made to load unintended files with `require`, executing them within the Ruby
+  process.
+
+  For example, with version 1.2.9, you can run the following to load a file with
+  path `/tmp/payload.rb`:
+
+  ```ruby
+  TZInfo::Timezone.get(\"foo\
+  /../../../../../../../../../../../../../../../../tmp/payload\")
+  ```
+
+  The exact number of parent directory traversals needed will vary depending on
+  the location of the tzinfo-data gem.
+
+  TZInfo versions 1.2.6 to 1.2.9 can be made to load files from outside of the
+  Ruby load path. Versions up to and including 1.2.5 can only be made to load
+  files from directories within the load path.
+
+  This could be exploited in, for example, a Ruby on Rails application using
+  tzinfo version 1.2.9, that allows file uploads and has a time zone selector
+  that accepts arbitrary time zone identifiers.
+  The CVSS score and severity have been set on this basis.
+
+  Versions 2.0.0 and later are not vulnerable.
+
+  # Patches
+
+  Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone
+  identifiers.
+
+  Note that version 0.3.61 can still load arbitrary files from the Ruby load
+  path if their name follows the rules for a valid time zone identifier and the
+  file has a prefix of `tzinfo/definition` within a directory in the load path.
+  For example if `/tmp/upload` was in the load path, then
+  `TZInfo::Timezone.get('foo')` could load a file with path
+  `/tmp/upload/tzinfo/definition/foo.rb`. Applications should ensure that
+  untrusted files are not placed in a directory on the load path.
+
+  # Workarounds
+
+  As a workaround, the time zone identifier can be validated before passing to
+  `TZInfo::Timezone.get` by ensuring it matches the regular expression
+  `\\A[A-Za-z0-9+\\-_]+(?:\\/[A-Za-z0-9+\\-_]+)*\\z`.
+cvss_v3: 7.5
+unaffected_versions:
+  - ">= 2.0.0"
+patched_versions:
+  - "~> 0.3.61"
+  - ">= 1.2.10"
+related:
+  url:
+    - https://github.com/tzinfo/tzinfo/commit/ca29f349856d62cb2b2edb3257d9ddd2f97b3c27
+    - https://github.com/tzinfo/tzinfo/releases/tag/v0.3.61
+    - https://github.com/tzinfo/tzinfo/releases/tag/v1.2.10
diff --git a/gems/uglifier/OSVDB-126747.yml b/gems/uglifier/CVE-2015-8857.yml
similarity index 53%
rename from gems/uglifier/OSVDB-126747.yml
rename to gems/uglifier/CVE-2015-8857.yml
index 318ea1ba8a..fc580c91e5 100644
--- a/gems/uglifier/OSVDB-126747.yml
+++ b/gems/uglifier/CVE-2015-8857.yml
@@ -1,11 +1,12 @@
 ---
 gem: uglifier
+cve: 2015-8857
 osvdb: 126747
+ghsa: 34r7-q49f-h37c
 url: https://github.com/mishoo/UglifyJS2/issues/751
 title: uglifier incorrectly handles non-boolean comparisons during minification
 date: 2015-07-21
-description: |2
-
+description: |
   The upstream library for the Ruby uglifier gem, UglifyJS, is
   affected by a vulnerability that allows a specially crafted
   Javascript file to have altered functionality after minification.
@@ -14,6 +15,19 @@ description: |2
   to allow potentially malicious code to be hidden within secure code,
   and activated by the minification process.
 
-  For more information, consult: https://zyan.scripts.mit.edu/blog/backdooring-js/
+  For more information, consult:
+  * https://zyan.scripts.mit.edu/blog/backdooring-js
+
+  * CWE: 254 - 7PK - Security Features
+
+cvss_v2: 7.5
+cvss_v3: 9.8
 patched_versions:
-- '>= 2.7.2'
+  - ">= 2.7.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2015-8857
+    - https://github.com/mishoo/UglifyJS/issues/751
+    - https://blog.azuki.vip/backdooring-js
+    - https://www.openwall.com/lists/oss-security/2016/04/20/11
+    - https://github.com/advisories/GHSA-34r7-q49f-h37c
diff --git a/gems/unpoly-rails/CVE-2023-28846.yml b/gems/unpoly-rails/CVE-2023-28846.yml
new file mode 100644
index 0000000000..1701cb62d0
--- /dev/null
+++ b/gems/unpoly-rails/CVE-2023-28846.yml
@@ -0,0 +1,67 @@
+---
+gem: unpoly-rails
+cve: 2023-28846
+ghsa: m875-3xf6-mf78
+url: https://github.com/unpoly/unpoly-rails/security/advisories/GHSA-m875-3xf6-mf78
+title: unpoly-rails Denial of Service vulnerability
+date: 2023-03-30
+description: |
+  There is a possible Denial of Service (DoS) vulnerability in the unpoly-rails
+  gem that implements the [Unpoly server protocol](https://unpoly.com/up.protocol)
+  for Rails applications.
+
+  ### Impact
+
+  This issues affects Rails applications
+  that operate as an upstream of a load balancer's that uses [passive health
+  checks](https://docs.nginx.com/nginx/admin-guide/load-balancer/http-health-check/#passive-health-checks).
+
+  The [unpoly-rails](https://github.com/unpoly/unpoly-rails/) gem echoes the request URL
+  as an `X-Up-Location` response header. By making a request with exceedingly long
+  URLs (paths or query string), an attacker can cause unpoly-rails to write a exceedingly
+  large response header.
+
+  If the response header is too large to be parsed by a load balancer downstream
+  of the Rails application, it may cause the load balancer to remove the upstream
+  from a load balancing group. This causes that application instance to become
+  unavailable until a configured timeout is reached or until an active healthcheck
+  succeeds.
+
+  ### Workarounds
+
+  If you cannot upgrade to a fixed release, several workarounds are available:
+
+  - Configure your load balancer to
+    use active health checks, e.g. by periodically requesting a route with a known response
+    that indicates healthiness.
+  - Configure your load balancer so the [maximum size
+    of response headers](https://makandracards.com/operations/537537-nginx-proxy-buffer-tuning)
+    is at least twice the [maximum size of a URL](https://tryhexadecimal.com/guides/http/414-request-uri-too-long).
+  - Instead of changing your server configuration you may also configure your Rails
+    application to delete redundant `X-Up-Location` headers set by unpoly-rails:
+
+    ```ruby
+    class ApplicationController < ActionController::Base
+
+      after_action :remove_redundant_up_location_header
+
+      private
+
+      def remove_redundant_up_location_header
+        if request.original_url == response.headers['X-Up-Location']
+          response.headers.delete('X-Up-Location')
+        end
+      end
+
+    end
+  ```
+cvss_v3: 5.9
+patched_versions:
+  - ">= 2.7.2.2"
+related:
+  url:
+    - https://github.com/unpoly/unpoly-rails/commit/cd9ad0007daceeb3b2354fdcab4f88350427bf16
+    - https://docs.nginx.com/nginx/admin-guide/load-balancer/http-health-check/#passive-health-checks
+    - https://makandracards.com/operations/537537-nginx-proxy-buffer-tuning
+    - https://tryhexadecimal.com/guides/http/414-request-uri-too-long
+    - https://unpoly.com/up.protocol
diff --git a/gems/update_by_case/CVE-2022-35956.yml b/gems/update_by_case/CVE-2022-35956.yml
new file mode 100644
index 0000000000..1da152d37e
--- /dev/null
+++ b/gems/update_by_case/CVE-2022-35956.yml
@@ -0,0 +1,15 @@
+---
+gem: update_by_case
+cve: 2022-35956
+ghsa: 33wh-w4m7-c6r8
+url: https://github.com/camilova/activerecord-update-by-case/security/advisories/GHSA-33wh-w4m7-c6r8
+title: update_by_case before 0.1.3 can be vulnerable to sql injection
+date: 2022-08-11
+description: |
+  Before version 0.1.3 `update_by_case` gem used custom sql strings, and
+  it was not sanitized, making it vulnerable to sql injection. Upgrade to version
+  >= 0.1.3 that uses `Arel` instead to construct the resulting sql statement, with
+  sanitized sql.
+cvss_v3: 5.8
+patched_versions:
+  - ">= 0.1.3"
diff --git a/gems/uri/CVE-2023-28755.yml b/gems/uri/CVE-2023-28755.yml
new file mode 100644
index 0000000000..5e634a645d
--- /dev/null
+++ b/gems/uri/CVE-2023-28755.yml
@@ -0,0 +1,19 @@
+---
+gem: uri
+cve: 2023-28755
+ghsa: hv5j-3h9f-99c2
+url: https://github.com/advisories/GHSA-hv5j-3h9f-99c2
+title: Ruby URI component ReDoS issue
+date: 2023-03-31
+description: |
+  A ReDoS issue was discovered in the URI component through 0.12.0 in
+  Ruby through 3.2.1. The URI parser mishandles invalid URLs that have
+  specific characters. It causes an increase in execution time for parsing
+  strings to URI objects. The fixed versions are 0.12.1, 0.11.1,
+  0.10.2 and 0.10.0.1.
+cvss_v3: 7.5
+patched_versions:
+  - "~> 0.10.0.1"
+  - "~> 0.10.2"
+  - "~> 0.11.1"
+  - ">= 0.12.1"
diff --git a/gems/uri/CVE-2023-36617.yml b/gems/uri/CVE-2023-36617.yml
new file mode 100644
index 0000000000..8f56b2178b
--- /dev/null
+++ b/gems/uri/CVE-2023-36617.yml
@@ -0,0 +1,54 @@
+---
+gem: uri
+cve: 2023-36617
+ghsa: hww2-5g85-429m
+url: https://www.ruby-lang.org/en/news/2023/06/29/redos-in-uri-CVE-2023-36617
+title: ReDoS vulnerability in URI
+date: 2023-06-29
+description: |
+  We have released the uri gem version 0.12.2, 0.10.3 that has a
+  security fix for a ReDoS vulnerability. This vulnerability has
+  been assigned the CVE identifier CVE-2023-36617.
+
+  Details
+
+  A ReDoS issue was discovered in the URI component through 0.12.1
+  for Ruby. The URI parser mishandles invalid URLs that have specific
+  characters. There is an increase in execution time for parsing
+  strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb.
+
+  NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755.
+
+  The uri gem version 0.12.1 and all versions prior 0.12.1 are
+  vulnerable for this vulnerability.
+
+  Recommended action
+
+  We recommend to update the uri gem to 0.12.2.
+  In order to ensure compatibility with bundled version in older
+  Ruby series, you may update as follows instead:
+
+  * For Ruby 3.0: Update to uri 0.10.3
+  * For Ruby 3.1 and 3.2: Update to uri 0.12.2
+    You can use gem update uri to update it. If you are using bundler,
+    please add gem "uri", ">= 0.12.2" (or other version mentioned
+    above) to your Gemfile.
+
+  * Affected versions: uri gem 0.12.1 or before
+cvss_v3: 5.3
+patched_versions:
+  - "~> 0.10.0.3"
+  - "~> 0.10.3"
+  - "~> 0.11.2"
+  - ">= 0.12.2"
+related:
+  cve:
+    - 2023-28755
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-36617
+    - https://www.ruby-lang.org/en/news/2023/06/29/redos-in-uri-CVE-2023-36617
+    - https://rubygems.org/gems/uri/versions/0.12.2
+    - https://rubygems.org/gems/uri/versions/0.11.2
+    - https://rubygems.org/gems/uri/versions/0.10.3
+    - https://rubygems.org/gems/uri/versions/0.10.0.3
+    - https://github.com/advisories/GHSA-hww2-5g85-429m
diff --git a/gems/uri/CVE-2025-27221.yml b/gems/uri/CVE-2025-27221.yml
new file mode 100644
index 0000000000..c15293a21e
--- /dev/null
+++ b/gems/uri/CVE-2025-27221.yml
@@ -0,0 +1,42 @@
+---
+gem: uri
+cve: 2025-27221
+ghsa: 22h5-pq3x-2gf2
+url: https://www.cve.org/CVERecord?id=CVE-2025-27221
+title: CVE-2025-27221 - userinfo leakage in URI#join, URI#merge and URI#+.
+date: 2025-02-26
+description: |
+
+  There is a possibility for userinfo leakage by in the uri gem.
+  This vulnerability has been assigned the CVE identifier
+  CVE-2025-27221. We recommend upgrading the uri gem.
+
+  ## Details
+
+  The methods URI#join, URI#merge, and URI#+ retained userinfo, such
+  as user:password, even after the host is replaced. When generating
+  a URL to a malicious host from a URL containing secret userinfo
+  using these methods, and having someone access that URL, an
+  unintended userinfo leak could occur.
+
+  Please update URI gem to version 0.11.3, 0.12.4, 0.13.2, 1.0.3 or later.
+
+  ## Affected versions
+
+  uri gem versions < 0.11.3, 0.12.0 to 0.12.3, 0.13.0, 0.13.1 and
+  1.0.0 to 1.0.2.
+
+  ## Credits
+
+  Thanks to Tsubasa Irisawa (lambdasawa) for discovering this issue.
+  Also thanks to nobu for additional fixes of this vulnerability.
+cvss_v3: 3.2
+patched_versions:
+  - "~> 0.11.3"
+  - "~> 0.12.4"
+  - "~> 0.13.2"
+  - ">= 1.0.3"
+related:
+  url:
+    - https://www.cve.org/CVERecord?id=CVE-2025-27221
+    - https://www.ruby-lang.org/en/news/2025/02/26/security-advisories
diff --git a/gems/user_agent_parser/CVE-2020-5243.yml b/gems/user_agent_parser/CVE-2020-5243.yml
index bd930ec2dd..887a44d940 100644
--- a/gems/user_agent_parser/CVE-2020-5243.yml
+++ b/gems/user_agent_parser/CVE-2020-5243.yml
@@ -5,7 +5,7 @@ ghsa: pcqq-5962-hvcw
 url: https://github.com/ua-parser/uap-ruby/security/advisories/GHSA-pcqq-5962-hvcw
 date: 2020-03-10
 title: Denial of Service in uap-core when processing crafted User-Agent strings
-description: |-
+description: |
   ### Impact
   Some regexes are vulnerable to regular expression denial of service (REDoS) due to
   overlapping capture groups. This allows remote attackers to overload a server by
@@ -13,14 +13,18 @@ description: |-
   strings.
 
   ### Patches
-  Please update `uap-ruby` to &gt;= v2.6.0
+  Please update `uap-ruby` to >= v2.6.0
 
   ### For more information
   https://github.com/ua-parser/uap-core/security/advisories/GHSA-cmcx-xhr8-3w9p
 cvss_v3: 5.7
 patched_versions:
-- '>= 2.6.0'
+  - ">= 2.6.0"
 
 related:
   ghsa:
-  - cmcx-xhr8-3w9p
+    - cmcx-xhr8-3w9p
+  url:
+    - https://github.com/ua-parser/uap-ruby/security/advisories/GHSA-pcqq-5962-hvcw
+    - https://github.com/ua-parser/uap-ruby/commit/2bb18268f4c5ba7d4ba0e21c296bf6437063da3a
+    - https://github.com/advisories/GHSA-pcqq-5962-hvcw
diff --git a/gems/vagrant/CVE-2025-34075.yml b/gems/vagrant/CVE-2025-34075.yml
new file mode 100644
index 0000000000..a20fdac0ac
--- /dev/null
+++ b/gems/vagrant/CVE-2025-34075.yml
@@ -0,0 +1,41 @@
+---
+gem: vagrant
+cve: 2025-34075
+ghsa: hqp6-mjw3-f586
+url: https://github.com/advisories/GHSA-hqp6-mjw3-f586
+title: HashiCorp Vagrant has code injection vulnerability
+  through default synced folders
+date: 2025-07-02
+description: |
+  An authenticated virtual machine escape vulnerability exists in
+  HashiCorp Vagrant versions 2.4.6 and below when using the default
+  synced folder configuration. By design, Vagrant automatically mounts
+  the host system’s project directory into the guest VM under /vagrant
+  (or C:\vagrant on Windows). This includes the Vagrantfile configuration
+  file, which is a Ruby script evaluated by the host every time a vagrant
+  command is executed in the project directory. If a low-privileged
+  attacker obtains shell access to the guest VM, they can append
+  arbitrary Ruby code to the mounted Vagrantfile. When a user on the
+  host later runs any vagrant command, the injected code is executed
+  on the host with that user’s privileges.
+
+  While this shared-folder behavior is well-documented by Vagrant, the
+  security implications of Vagrantfile execution from guest-writable
+  storage are not explicitly addressed. This effectively enables
+  guest-to-host code execution in multi-tenant or adversarial VM scenarios.
+cvss_v4: 5.4
+unaffected_versions:
+  - "< 2.2.10"
+patched_versions:
+  - ">= 2.4.7"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-34075
+    - https://developer.hashicorp.com/vagrant
+    - https://developer.hashicorp.com/vagrant/docs/synced-folders/basic_usage
+    - https://developer.hashicorp.com/vagrant/docs/vagrantfile
+    - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/local/vagrant_synced_folder_vagrantfile_breakout.rb
+    - https://vulncheck.com/advisories/hashicorp-vagrant-synced-folder-vagrantfile-breakout
+    - https://github.com/hashicorp/vagrant/issues/13688
+    - https://github.com/hashicorp/vagrant/commit/abe87b2fdc124ef426c016d44d2f6f4792f0cbe3
+    - https://github.com/advisories/GHSA-hqp6-mjw3-f586
diff --git a/gems/view_component/CVE-2022-24722.yml b/gems/view_component/CVE-2022-24722.yml
new file mode 100644
index 0000000000..1b1822dc22
--- /dev/null
+++ b/gems/view_component/CVE-2022-24722.yml
@@ -0,0 +1,26 @@
+---
+gem: view_component
+cve: 2022-24722
+ghsa: cm9w-c4rj-r2cf
+url: https://github.com/github/view_component/security/advisories/GHSA-cm9w-c4rj-r2cf
+title: XSS via `translate` method of `ViewComponent::Translatable` in view_component gem
+date: 2022-03-02
+description: |
+  This is an XSS vulnerability that has the potential to impact anyone using
+  translations with the view_component gem. Data received via user input and
+  passed as an interpolation argument to the `translate` method is not properly
+  sanitized before display.
+
+  Versions 2.31.2 and 2.49.1 have been released and fully mitigate the vulnerability.
+
+  Avoid passing user input to the `translate` function, or sanitize the inputs
+  before passing them.
+cvss_v3: 8.1
+unaffected_versions:
+  - "< 2.31.0"
+patched_versions:
+  - ">= 2.49.1"
+  - "~> 2.31.2"
+related:
+  url:
+    - https://github.com/github/view_component/commit/3f82a6e62578ff6f361aba24a1feb2caccf83ff9
diff --git a/gems/view_component/CVE-2024-21636.yml b/gems/view_component/CVE-2024-21636.yml
new file mode 100644
index 0000000000..874251fcfe
--- /dev/null
+++ b/gems/view_component/CVE-2024-21636.yml
@@ -0,0 +1,66 @@
+---
+gem: view_component
+cve: 2024-21636
+ghsa: wf2x-8w6j-qw37
+url: https://github.com/ViewComponent/view_component/security/advisories/GHSA-wf2x-8w6j-qw37
+title: view_component Cross-site Scripting vulnerability
+date: 2024-01-04
+description: |
+
+  ### Impact
+  _What kind of vulnerability is it? Who is impacted?_
+
+  This is an XSS vulnerability that has the potential to impact
+  anyone rendering a component directly from a controller with the
+  view_component gem. Note that only components that define a
+  [`#call` method](https://viewcomponent.org/guide/templates.html#call)
+  (i.e. instead of using a sidecar template) are affected. The return
+  value of the `#call` method is not sanitized and can include
+  user-defined content.
+
+  In addition, the return value of the
+  [`#output_postamble` method](https://viewcomponent.org/api.html#output_postamble--string)
+  is not sanitized, which can also lead to XSS issues.
+
+  ### Patches
+  _Has the problem been patched? What versions should users upgrade to?_
+
+  Versions 3.9.0 has been released and fully mitigates both the
+  `#call` and the `#output_postamble` vulnerabilities.
+
+  ### Workarounds
+  _Is there a way for users to fix or remediate the vulnerability
+  without upgrading?_
+
+  Sanitize the return value of `#call`, eg:
+
+  ```ruby
+  class MyComponent < ApplicationComponent
+    def call
+      html_escape("<div>#{user_input}</div>")
+    end
+  end
+  ```
+
+  ### References
+  _Are there any links users can visit to find out more?_
+
+  https://github.com/ViewComponent/view_component/pull/1950
+
+  ### For more information
+
+  If you have any questions or comments about this advisory:
+
+  Open an issue in the
+  [github/view_component](https://github.com/github/view_component) project.
+cvss_v3: 6.1
+patched_versions:
+  - "~> 2.83.0"
+  - ">= 3.9.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-21636
+    - https://github.com/ViewComponent/view_component/security/advisories/GHSA-wf2x-8w6j-qw37
+    - https://github.com/ViewComponent/view_component/pull/1950
+    - https://github.com/ViewComponent/view_component/commit/0d26944a8d2730ea40e60eae23d70684483e5017
+    - https://github.com/advisories/GHSA-wf2x-8w6j-qw37
diff --git a/gems/web-console/CVE-2015-3224.yml b/gems/web-console/CVE-2015-3224.yml
index d37ba504cd..4133af049e 100644
--- a/gems/web-console/CVE-2015-3224.yml
+++ b/gems/web-console/CVE-2015-3224.yml
@@ -14,4 +14,4 @@ description: |
 
   To work around this issue, turn off web-console in all environments, by removing/commenting it from the application's Gemfile.
 patched_versions:
-- '>= 2.1.3'
+  - ">= 2.1.3"
diff --git a/gems/web-console/OSVDB-112346.yml b/gems/web-console/OSVDB-112346.yml
index 785250e912..ea5070b747 100644
--- a/gems/web-console/OSVDB-112346.yml
+++ b/gems/web-console/OSVDB-112346.yml
@@ -1,11 +1,18 @@
 ---
 gem: web-console
 osvdb: 112346
-url: http://www.osvdb.org/show/osvdb/112346
+url: https://my.diffend.io/gems/web-console/versions/2.0.0.beta3
 title: Web Console Gem for Ruby contains an unspecified flaw
 date: 2014-09-29
-description: The Web Console Gem for Ruby on Rails contains an unspecified flaw that
-  may allow an attacker to have an unspecified impact. No further details have been
-  provided by the vendor.
+description: |
+  The Web Console Gem for Ruby on Rails contains an unspecified
+  flaw that may allow an attacker to have an unspecified impact.
+  No further details have been provided by the vendor.
 patched_versions:
-- '>= 2.0.0.beta4'
+  - ">= 2.0.0.beta4"
+related:
+  url:
+    - https://github.com/rails/web-console/compare/v2.0.0.beta3...v2.0.0.beta4
+    - https://my.diffend.io/gems/web-console/versions/2.0.0.beta3
+    - https://github.com/slowmistio/dawnscanner-analysis-security-scanner-for-ruby-/blob/master/Roadmap.md
+    - http://www.osvdb.org/show/osvdb/112346
diff --git a/gems/webbynode/CVE-2013-7086.yml b/gems/webbynode/CVE-2013-7086.yml
index 59f58f8536..0f45af3a3b 100644
--- a/gems/webbynode/CVE-2013-7086.yml
+++ b/gems/webbynode/CVE-2013-7086.yml
@@ -2,6 +2,7 @@
 gem: webbynode
 cve: 2013-7086
 osvdb: 100920
+ghsa: p65m-qr5x-rrqq
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-7086
 title: Webbynode Gem for Ruby notify.rb growlnotify Message Handling Arbitrary Command
   Execution
diff --git a/gems/webrick/CVE-2008-4310.yml b/gems/webrick/CVE-2008-4310.yml
new file mode 100644
index 0000000000..d266d29ccc
--- /dev/null
+++ b/gems/webrick/CVE-2008-4310.yml
@@ -0,0 +1,26 @@
+---
+gem: webrick
+cve: 2008-4310
+ghsa: wfrc-r6c6-7j9r
+url: https://bugzilla.redhat.com/show_bug.cgi?id=470252
+title: WEBrick Denial of Service Vulnerability
+date: 2008-12-08
+description: |
+  httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat
+  Enterprise Linux 4 and 5, allows remote attackers to cause a
+  denial of service (CPU consumption) via a crafted HTTP request.
+
+  NOTE: This issue exists because of an incomplete fix for CVE-2008-3656.
+cvss_v2: 7.8
+patched_versions:
+  - ">= 1.3.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2008-4310
+    - https://github.com/ruby/webrick/commit/b2ccd5ff7ddd67a4548299e110dcc5a4728a5534
+    - http://www.openwall.com/lists/oss-security/2008/12/04/2
+    - https://bugzilla.redhat.com/show_bug.cgi?id=470252
+    - https://oval.cisecurity.org/repository/search/definition/oval
+    - http://www.redhat.com/support/errata/RHSA-2008-0981.html
+    - https://web.archive.org/web/20111230125610/http://secunia.com/advisories/33013
+    - https://github.com/advisories/GHSA-wfrc-r6c6-7j9r
diff --git a/gems/webrick/CVE-2009-4492.yml b/gems/webrick/CVE-2009-4492.yml
new file mode 100644
index 0000000000..2bac49f55e
--- /dev/null
+++ b/gems/webrick/CVE-2009-4492.yml
@@ -0,0 +1,29 @@
+---
+gem: webrick
+cve: 2009-4492
+ghsa: 6mq2-37j5-w6r6
+url: https://github.com/advisories/GHSA-6mq2-37j5-w6r6
+title: WEBrick Improper Input Validation vulnerability
+date: 2017-10-24
+description: |
+  WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel
+  248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file
+  without sanitizing non-printable characters, which might allow remote attackers
+  to modify a window's title, or possibly execute arbitrary commands or overwrite
+  files, via an HTTP request containing an escape sequence for a terminal emulator.
+cvss_v2: 7.5
+patched_versions:
+- ">= 1.4.0"
+related:
+  url:
+  - https://nvd.nist.gov/vuln/detail/CVE-2009-4492
+  - https://github.com/advisories/GHSA-6mq2-37j5-w6r6
+  - http://www.redhat.com/support/errata/RHSA-2011-0908.html
+  - http://www.redhat.com/support/errata/RHSA-2011-0909.html
+  - http://www.ruby-lang.org/en/news/2010/01/10/webrick-escape-sequence-injection
+  - http://www.ush.it/team/ush/hack_httpd_escape/adv.txt
+  - https://web.archive.org/web/20100113155532/http://www.vupen.com/english/advisories/2010/0089
+  - https://web.archive.org/web/20100815010948/http://secunia.com/advisories/37949
+  - https://web.archive.org/web/20170402100552/http://securitytracker.com/id?1023429
+  - https://web.archive.org/web/20170908140655/http://www.securityfocus.com/archive/1/508830/100/0/threaded
+  - https://web.archive.org/web/20200228145937/http://www.securityfocus.com/bid/37710
diff --git a/gems/webrick/CVE-2017-10784.yml b/gems/webrick/CVE-2017-10784.yml
new file mode 100644
index 0000000000..4b603586f4
--- /dev/null
+++ b/gems/webrick/CVE-2017-10784.yml
@@ -0,0 +1,39 @@
+---
+gem: webrick
+cve: 2017-10784
+ghsa: 369m-2gv6-mw28
+url: https://access.redhat.com/errata/RHSA-2017:3485
+title: WEBrick RCE Vulnerability
+date: 2022-05-14
+description: |
+  The Basic authentication code in WEBrick library in Ruby before 2.2.8,
+  2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal
+  emulator escape sequences into its log and possibly execute arbitrary commands via
+  a crafted user name.
+cvss_v2: 9.3
+cvss_v3: 8.8
+patched_versions:
+  - ">= 1.4.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2017-10784
+    - https://access.redhat.com/errata/RHSA-2017:3485
+    - https://access.redhat.com/errata/RHSA-2018:0378
+    - https://access.redhat.com/errata/RHSA-2018:0583
+    - https://access.redhat.com/errata/RHSA-2018:0585
+    - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
+    - https://security.gentoo.org/glsa/201710-18
+    - https://usn.ubuntu.com/3528-1/
+    - https://usn.ubuntu.com/3685-1/
+    - https://www.debian.org/security/2017/dsa-4031
+    - https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/
+    - https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/
+    - https://www.ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784/
+    - https://web.archive.org/web/20210621131814/http://www.securityfocus.com/bid/100853
+    - https://web.archive.org/web/20210919031115/http://www.securitytracker.com/id/1042004
+    - https://web.archive.org/web/20211025092552/http://www.securitytracker.com/id/1039363
+    - https://github.com/ruby/ruby/commit/6617c41292
+    - https://github.com/ruby/webrick/commit/4ac0f3843ab82d1c31e1cfc719409208adef7813
+    - https://hackerone.com/reports/223363
+    - https://github.com/advisories/GHSA-369m-2gv6-mw28
+notes: "Versions in description: field are ruby versions, not ruby gem"
diff --git a/gems/webrick/CVE-2020-25613.yml b/gems/webrick/CVE-2020-25613.yml
index a5bfe3301d..595eafdae0 100644
--- a/gems/webrick/CVE-2020-25613.yml
+++ b/gems/webrick/CVE-2020-25613.yml
@@ -1,6 +1,7 @@
 ---
 gem: webrick
 cve: 2020-25613
+ghsa: gwfg-cqmg-cf8f
 url: https://www.ruby-lang.org/en/news/2020/09/29/http-request-smuggling-cve-2020-25613/
 title: Potential HTTP Request Smuggling Vulnerability in WEBrick
 date: 2020-09-29
@@ -8,5 +9,6 @@ description: |
   WEBrick was too tolerant against an invalid Transfer-Encoding header. This may lead to
   inconsistent interpretation between WEBrick and some HTTP proxy servers, which may
   allow the attacker to "smuggle" a request. See CWE-444 in detail.
+cvss_v3: 7.5
 patched_versions:
-- '>= 1.6.1'
+  - ">= 1.6.1"
diff --git a/gems/webrick/CVE-2024-47220.yml b/gems/webrick/CVE-2024-47220.yml
new file mode 100644
index 0000000000..a979c9204b
--- /dev/null
+++ b/gems/webrick/CVE-2024-47220.yml
@@ -0,0 +1,25 @@
+---
+gem: webrick
+cve: 2024-47220
+ghsa: 6f62-3596-g6w7
+url: https://github.com/advisories/GHSA-6f62-3596-g6w7
+title: HTTP Request Smuggling in ruby webrick
+date: 2024-09-22
+description: |
+  An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby.
+  It allows HTTP request smuggling by providing both a Content-Length
+  header and a Transfer-Encoding header, e.g.,
+  "GET /admin HTTP/1.1\r\n" inside of a "POST /user HTTP/1.1\r\n"
+  request.
+
+  NOTE: the supplier''s position is "Webrick should not be used in production."
+cvss_v3: 7.5
+patched_versions:
+  - ">= 1.8.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-47220
+    - https://github.com/ruby/webrick/issues/145
+    - https://github.com/ruby/webrick/pull/146/commits/d88321da45dcd230ac2b4585cad4833d6d5e8841
+    - https://github.com/ruby/webrick/commit/f5faca9222541591e1a7c3c97552ebb0c92733c7
+    - https://github.com/advisories/GHSA-6f62-3596-g6w7
diff --git a/gems/webrick/CVE-2025-6442.yml b/gems/webrick/CVE-2025-6442.yml
new file mode 100644
index 0000000000..621b0dc53d
--- /dev/null
+++ b/gems/webrick/CVE-2025-6442.yml
@@ -0,0 +1,29 @@
+---
+gem: webrick
+cve: 2025-6442
+ghsa: r995-q44h-hr64
+url: https://github.com/advisories/GHSA-r995-q44h-hr64
+title: Ruby WEBrick read_headers method can lead to
+  HTTP Request/Response Smuggling
+date: 2025-06-26
+description: |
+  Ruby WEBrick read_header HTTP Request Smuggling Vulnerability
+
+  This vulnerability allows remote attackers to smuggle arbitrary HTTP
+  requests on affected installations of Ruby WEBrick. This issue is
+  exploitable when the product is deployed behind an HTTP proxy that
+  fulfills specific conditions.
+
+  The specific flaw exists within the read_headers method. The issue
+  results from the inconsistent parsing of terminators of HTTP headers.
+  An attacker can leverage this vulnerability to smuggle arbitrary
+  HTTP requests. Was ZDI-CAN-21876.
+cvss_v3: 6.5
+patched_versions:
+  - ">= 1.8.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2025-6442
+    - https://github.com/ruby/webrick/commit/ee60354bcb84ec33b9245e1d1aa6e1f7e8132101#diff-ad02984d873efb089aa51551bc6b7d307a53e0ba1ac439e91d69c2e58a478864
+    - https://www.zerodayinitiative.com/advisories/ZDI-25-414
+    - https://github.com/advisories/GHSA-r995-q44h-hr64
diff --git a/gems/websocket-extensions/CVE-2020-7663.yml b/gems/websocket-extensions/CVE-2020-7663.yml
index 6d2c66eb6b..e146ea4655 100644
--- a/gems/websocket-extensions/CVE-2020-7663.yml
+++ b/gems/websocket-extensions/CVE-2020-7663.yml
@@ -5,7 +5,7 @@ ghsa: g6wq-qcwm-j5g2
 url: https://github.com/faye/websocket-extensions-ruby/security/advisories/GHSA-g6wq-qcwm-j5g2
 date: 2020-06-05
 title: Regular Expression Denial of Service in websocket-extensions (RubyGem)
-description: |-
+description: |
   ### Impact
 
   The ReDoS flaw allows an attacker to exhaust the server's capacity to process
@@ -26,8 +26,8 @@ description: |-
   There are no known work-arounds other than disabling any public-facing WebSocket functionality you are operating.
 cvss_v3: 7.5
 patched_versions:
-- '>= 0.1.5'
+  - ">= 0.1.5"
 
 related:
   url:
-  - https://blog.jcoglan.com/2020/06/02/redos-vulnerability-in-websocket-extensions/
+    - https://blog.jcoglan.com/2020/06/02/redos-vulnerability-in-websocket-extensions/
diff --git a/gems/wicked/CVE-2013-4413.yml b/gems/wicked/CVE-2013-4413.yml
index 7c72be4f73..4c5ae798f4 100644
--- a/gems/wicked/CVE-2013-4413.yml
+++ b/gems/wicked/CVE-2013-4413.yml
@@ -2,13 +2,15 @@
 gem: wicked
 cve: 2013-4413
 osvdb: 98270
+ghsa: rprj-g6xc-p5gq
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-4413
 title: Wicked Gem for Ruby contains a flaw
 date: 2013-10-08
-description: Wicked Gem for Ruby contains a flaw that is due to the program failing
+description: |
+  Wicked Gem for Ruby contains a flaw that is due to the program failing
   to properly sanitize input passed via the 'the_step' parameter upon submission to
   the render_redirect.rb script. This may allow a remote attacker to gain access to
   arbitrary files.
 cvss_v2: 5.0
 patched_versions:
-- '>= 1.0.1'
+  - ">= 1.0.1"
diff --git a/gems/will_paginate/CVE-2013-6459.yml b/gems/will_paginate/CVE-2013-6459.yml
index 5e0658ddb2..1263088e55 100644
--- a/gems/will_paginate/CVE-2013-6459.yml
+++ b/gems/will_paginate/CVE-2013-6459.yml
@@ -2,10 +2,12 @@
 gem: will_paginate
 cve: 2013-6459
 osvdb: 101138
+ghsa: 8r6h-7x9g-xmw9
 url: https://nvd.nist.gov/vuln/detail/CVE-2013-6459
-title: 'CVE-2013-6459 rubygem-will_paginate: XSS vulnerabilities'
+title: "CVE-2013-6459 rubygem-will_paginate: XSS vulnerabilities"
 date: 2013-09-19
-description: Cross-site scripting (XSS) vulnerability in the will_paginate gem before
+description: |
+  Cross-site scripting (XSS) vulnerability in the will_paginate gem before
   3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via
   vectors involving generated pagination links. It was found that ruby will_paginate
   is vulnerable to a XSS via malformed input that cause pagination to occur on an
@@ -14,4 +16,4 @@ description: Cross-site scripting (XSS) vulnerability in the will_paginate gem b
   the web interface.
 cvss_v2: 4.3
 patched_versions:
-- '>= 3.0.5'
+  - ">= 3.0.5"
diff --git a/gems/xapian-core/CVE-2018-0499.yml b/gems/xapian-core/CVE-2018-0499.yml
new file mode 100644
index 0000000000..383fbbfb77
--- /dev/null
+++ b/gems/xapian-core/CVE-2018-0499.yml
@@ -0,0 +1,17 @@
+---
+gem: xapian-core
+cve: 2018-0499
+ghsa: 7qw4-w7hf-22q3
+url: https://lists.xapian.org/pipermail/xapian-discuss/2018-July/009652.html
+title: xapian-core Cross-site Scripting vulnerability
+date: 2022-05-14
+description: |
+  A cross-site scripting vulnerability in `queryparser/termgenerator_internal.cc`
+  in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by `Xapian::MSet::snippet()`.
+cvss_v3: 6.1
+patched_versions:
+  - ">= 1.4.6"
+related:
+  url:
+    - https://trac.xapian.org/wiki/SecurityFixes/2018-07-02
+    - https://usn.ubuntu.com/3709-1/
diff --git a/gems/xaviershay-dm-rails/CVE-2015-2179.yml b/gems/xaviershay-dm-rails/CVE-2015-2179.yml
index f9f378c887..c32642d008 100644
--- a/gems/xaviershay-dm-rails/CVE-2015-2179.yml
+++ b/gems/xaviershay-dm-rails/CVE-2015-2179.yml
@@ -2,12 +2,13 @@
 gem: xaviershay-dm-rails
 cve: 2015-2179
 osvdb: 118579
+ghsa: 88p8-4vv5-82j7
 url: https://nvd.nist.gov/vuln/detail/CVE-2015-2179
-title: |
-  xaviershay-dm-rails Gem for Ruby exposes sensitive information via the process table
+title: xaviershay-dm-rails Gem for Ruby exposes sensitive information via the process table
 date: 2015-02-17
 description: |
   xaviershay-dm-rails Gem for Ruby contains a flaw in the execute() function
   in /datamapper/dm-rails/blob/master/lib/dm-rails/storage.rb. The issue is
   due to the function exposing sensitive information via the process table.
   This may allow a local attack to gain access to MySQL credential information.
+cvss_v3: 5.5
diff --git a/gems/yajl-ruby/CVE-2017-16516.yml b/gems/yajl-ruby/CVE-2017-16516.yml
index 7c9f0ff920..a93103a3cf 100644
--- a/gems/yajl-ruby/CVE-2017-16516.yml
+++ b/gems/yajl-ruby/CVE-2017-16516.yml
@@ -12,7 +12,7 @@ description: |
   process terminating and potentially a denial of service.
 cvss_v3: 7.5
 patched_versions:
-- ">= 1.3.1"
+  - ">= 1.3.1"
 related:
   url:
-  - https://github.com/brianmario/yajl-ruby/issues/176
+    - https://github.com/brianmario/yajl-ruby/issues/176
diff --git a/gems/yajl-ruby/CVE-2022-24795.yml b/gems/yajl-ruby/CVE-2022-24795.yml
new file mode 100644
index 0000000000..391462559f
--- /dev/null
+++ b/gems/yajl-ruby/CVE-2022-24795.yml
@@ -0,0 +1,46 @@
+---
+gem: yajl-ruby
+cve: 2022-24795
+ghsa: jj47-x69x-mxrm
+url: https://github.com/brianmario/yajl-ruby/security/advisories/GHSA-jj47-x69x-mxrm
+title: Reallocation bug can trigger heap memory corruption
+date: 2022-04-05
+description: |
+  The 1.x branch and the 2.x branch of [yajl](https://github.com/lloyd/yajl)
+  contain an integer overflow which leads to subsequent heap memory corruption
+  when dealing with large (~2GB) inputs.
+
+  ### Details
+
+  The [reallocation logic at yajl_buf.c#L64](https://github.com/brianmario/yajl-ruby/blob/7168bd79b888900aa94523301126f968a93eb3a6/ext/yajl/yajl_buf.c#L64)
+  may result in the `need` 32bit integer wrapping to 0 when `need` approaches
+  a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation
+  of buf->alloc into a small heap chunk.
+
+  These integers are declared as `size_t` in the 2.x branch of `yajl`, which
+  practically prevents the issue from triggering on 64bit platforms, however
+  this does not preclude this issue triggering on 32bit builds on which
+  `size_t` is a 32bit integer.
+
+  Subsequent population of this under-allocated heap chunk is based on the
+  original buffer size, leading to heap memory corruption.
+
+  ### Impact
+
+  We rate this as a moderate severity vulnerability which mostly impacts
+  process availability as we believe exploitation for arbitrary code
+  execution to be unlikely.
+
+  ### Patches
+
+  Patched in yajl-ruby 1.4.2
+
+  ### Workarounds
+
+  Avoid passing large inputs to YAJL
+cvss_v3: 5.9
+patched_versions:
+  - ">= 1.4.2"
+related:
+  url:
+    - https://github.com/brianmario/yajl-ruby/blob/7168bd79b888900aa94523301126f968a93eb3a6/ext/yajl/yajl_buf.c#L64
diff --git a/gems/yard/CVE-2017-17042.yml b/gems/yard/CVE-2017-17042.yml
index 907b53b439..574c953bd9 100644
--- a/gems/yard/CVE-2017-17042.yml
+++ b/gems/yard/CVE-2017-17042.yml
@@ -12,4 +12,4 @@ description: |
 cvss_v2: 5.0
 cvss_v3: 7.5
 patched_versions:
-- '>= 0.9.11'
+  - ">= 0.9.11"
diff --git a/gems/yard/CVE-2019-1020001.yml b/gems/yard/CVE-2019-1020001.yml
index 8be089937c..95c1b2c30d 100644
--- a/gems/yard/CVE-2019-1020001.yml
+++ b/gems/yard/CVE-2019-1020001.yml
@@ -12,6 +12,11 @@ description: |
   certain conditions.
 
   The issue is resolved in v0.9.20 and later.
+cvss_v2: 5.0
+cvss_v3: 7.5
 patched_versions:
-- '>= 0.9.20'
-cvss_v3: 7.3
+  - ">= 0.9.20"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2019-1020001
+    - https://github.com/lsegal/yard/security/advisories/GHSA-xfhh-rx56-rxcr
diff --git a/gems/yard/CVE-2024-27285.yml b/gems/yard/CVE-2024-27285.yml
new file mode 100644
index 0000000000..827f5a7ec3
--- /dev/null
+++ b/gems/yard/CVE-2024-27285.yml
@@ -0,0 +1,69 @@
+---
+gem: yard
+cve: 2024-27285
+ghsa: 8mq4-9jjh-9xrc
+url: https://github.com/advisories/GHSA-8mq4-9jjh-9xrc
+title: YARD's default template vulnerable to Cross-site Scripting
+  in generated frames.html
+date: 2024-02-28
+description: |
+
+  ### Summary
+
+  The "frames.html" file within the Yard Doc's generated documentation
+  is vulnerable to Cross-Site Scripting (XSS) attacks due to inadequate
+  sanitization of user input within the JavaScript segment of the
+  "frames.erb" template file.
+
+  ### Details
+
+  The vulnerability stems from mishandling user-controlled data retrieved
+  from the URL hash in the embedded JavaScript code within the "frames.erb"
+  template file. Specifically, the script lacks proper sanitization of
+  the hash data before utilizing it to establish the top-level window's
+  location. This oversight permits an attacker to inject malicious
+  JavaScript payloads through carefully crafted URLs.
+
+  Snippet from "frames.erb":
+  (v0.9.34)
+  ```erb
+  <script type="text/javascript">
+    var match = unescape(window.location.hash).match(/^#!(.+)/);
+    var name = match ? match[1] : '<%= url_for_main %>';
+    name = name.replace(/^(\w+):\/\//, '').replace(/^\/\//, '');
+    window.top.location = name;
+  </script>
+  ```
+
+  (v0.9.35)
+  ```erb
+  <script type="text/javascript">
+    var match = decodeURIComponent(window.location.hash).match(/^#!(.+)/);
+    var name = match ? match[1] : '<%= url_for_main %>';
+    name = name.replace(/^((\w*):)?[\/\\]*/gm, '').trim();
+    window.top.location.replace(name)
+  </script>
+  ```
+
+  ### Impact
+
+  This XSS vulnerability presents a substantial threat by enabling
+  an attacker to execute arbitrary JavaScript code within the user's
+  session context. Potential ramifications include session hijacking,
+  theft of sensitive data, unauthorized access to user accounts, and
+  defacement of websites. Any user visiting the compromised page is
+  susceptible to exploitation. It is critical to promptly address
+  this vulnerability to mitigate potential harm to users and preserve
+  the application's integrity.
+cvss_v3: 5.4
+patched_versions:
+  - ">= 0.9.36"
+related:
+  url:
+    - https://github.com/lsegal/yard/security/advisories/GHSA-8mq4-9jjh-9xrc
+    - https://github.com/lsegal/yard/commit/2069e2bf08293bda2fcc78f7d0698af6354054be
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-27285
+    - https://github.com/advisories/GHSA-8mq4-9jjh-9xrc
+    - https://github.com/rubysec/ruby-advisory-db/blob/master/gems/yard/CVE-2024-27285.yml
+    - https://github.com/lsegal/yard/pull/1538
+    - https://github.com/lsegal/yard/commit/1fcb2d8b316caf8779cfdcf910715e9ab583f0aa
diff --git a/gems/yard/GHSA-xfhh-rx56-rxcr.yml b/gems/yard/GHSA-xfhh-rx56-rxcr.yml
deleted file mode 100644
index 28897308f9..0000000000
--- a/gems/yard/GHSA-xfhh-rx56-rxcr.yml
+++ /dev/null
@@ -1,12 +0,0 @@
----
-gem: yard
-ghsa: xfhh-rx56-rxcr
-date: 2019-07-02
-url: https://github.com/lsegal/yard/security/advisories/GHSA-xfhh-rx56-rxcr
-title: Possible arbitrary path traversal and file access via `yard server`
-description: A path traversal vulnerability was discovered in YARD <= 0.9.19 when
-  using `yard server` to serve documentation. This bug would allow unsanitized HTTP
-  requests to access arbitrary files on the machine of a yard server host under certain
-  conditions.
-patched_versions:
-- '>= 0.9.20'
diff --git a/lib/github_advisory_sync.rb b/lib/github_advisory_sync.rb
index da5455ce75..22046d78e5 100644
--- a/lib/github_advisory_sync.rb
+++ b/lib/github_advisory_sync.rb
@@ -3,6 +3,7 @@
 require "date"
 require "faraday"
 require "json"
+require 'fileutils'
 require "yaml"
 require "open-uri"
 
@@ -15,8 +16,8 @@ class GitHubAdvisorySync
     # The min_year argument specifies the earliest year CVE to sync.
     # It is more important to sync the newer ones, so this allows the user to
     # control how old of CVEs the sync should pull over
-    def self.sync(min_year: 2015)
-      gh_advisories = GraphQLAPIClient.new.all_rubygem_advisories
+    def self.sync(min_year: 2000, gem_name: nil)
+      gh_advisories = GraphQLAPIClient.new.all_rubygem_advisories(gem_name: gem_name)
 
       # Filter out advisories with a CVE year that is before the min_year
       gh_advisories.select! { |v| v.cve_after_year?(min_year) }
@@ -89,10 +90,10 @@ def github_graphql_query(graphql_query_name, graphql_variables = {})
       body_obj
     end
 
-    def all_rubygem_advisories
+    def all_rubygem_advisories(gem_name: nil)
       advisories = {}
 
-      retrieve_all_rubygem_vulnerabilities.each do |vulnerability|
+      retrieve_all_rubygem_vulnerabilities(gem_name: gem_name).each do |vulnerability|
         advisory = GitHubAdvisory.new(vulnerability["advisory"])
 
         next if advisory.withdrawn?
@@ -105,9 +106,9 @@ def all_rubygem_advisories
       advisories.values
     end
 
-    def retrieve_all_rubygem_vulnerabilities(max_pages = 1000, page_size = 100)
+    def retrieve_all_rubygem_vulnerabilities(max_pages = 1000, page_size = 100, gem_name: nil)
       all_vulnerabilities = []
-      variables = { "first" => page_size }
+      variables = { "first" => page_size, "gem_name" => gem_name }
       max_pages.times do |page_num|
         puts "Getting page #{page_num + 1} of GitHub Vulnerabilities"
 
@@ -126,8 +127,8 @@ def retrieve_all_rubygem_vulnerabilities(max_pages = 1000, page_size = 100)
 
     module GraphQLQueries
       RUBYGEM_VULNERABILITIES_WITH_GITHUB_ADVISORIES = <<-GRAPHQL.freeze
-        query($first: Int, $after: String) {
-          securityVulnerabilities(first: $first, after: $after, ecosystem:RUBYGEMS) {
+        query($first: Int, $after: String, $gem_name: String) {
+          securityVulnerabilities(first: $first, after: $after, ecosystem:RUBYGEMS, package: $gem_name) {
             pageInfo {
               endCursor
               hasNextPage
@@ -200,12 +201,11 @@ def filename
 
       def framework
         case name
-        when %w[
-          actioncable actionmailbox actionmailer actionpack actiontext
-          actionview activejob activemodel activerecord activestorage
-          activesupport railties
-        ]
-          "rails"
+        when
+          "actioncable",  "actionmailbox", "actionmailer",  "actionpack",
+          "actiontext",   "actionview",    "activejob",     "activemodel",
+          "activerecord", "activestorage", "activesupport", "railties",
+          "rails", "jquery-rails"
         end
       end
 
@@ -230,7 +230,7 @@ def merge_data(saved_data)
 
       KEYS = %w[
         gem library framework platform cve osvdb ghsa url title date description
-        cvss_v2 cvss_v3 unaffected_versions patched_versions related notes
+        cvss_v2 cvss_v3 cvss_v4 unaffected_versions patched_versions related notes
       ].freeze
     end
 
@@ -302,13 +302,13 @@ def packages
 
     def to_h
       {
-        "cve" => (cve_id[4..20] if cve_id),
-        "date" => published_day,
-        "ghsa" => ghsa_id[5..],
-        "url" => external_reference,
-        "title" => advisory["summary"],
+        "cve"         => (cve_id[4..20] if cve_id),
+        "date"        => published_day,
+        "ghsa"        => ghsa_id[5..],
+        "url"         => external_reference,
+        "title"       => advisory["summary"],
         "description" => advisory["description"],
-        "cvss_v3" => cvss,
+        "cvss_v3"     => cvss,
       }.compact
     end
 
@@ -337,17 +337,87 @@ def update(package)
       package.filename
     end
 
+    def vulnerable_version_ranges_for(package)
+      vulnerabilities.select { |v|
+        v['package']['name'] == package.name
+      }.map { |v|
+        v['vulnerableVersionRange'].split(', ',2).map do |version_range|
+          version_range.split(' ',2)
+        end
+      }.sort_by { |((lower_op,lower_version),(upper_op,upper_version))|
+        lower_version
+      }
+    end
+
+    def unaffected_versions_for(package)
+      if (version_range = vulnerable_version_ranges_for(package).first)
+        lower_version_range = version_range[0]
+        operator, version   = lower_version_range
+
+        case operator
+        when '>'
+          ["<= #{version}"]
+        when '>=', '='
+          ["< #{version}"]
+        end
+      end
+    end
+
+    def first_patched_versions_for(package)
+      first_patched_versions = []
+
+      vulnerabilities.each do |v|
+        if v['package']['name'] == package.name &&
+           v['firstPatchedVersion'] &&
+           v['firstPatchedVersion']['identifier']
+          first_patched_versions << v['firstPatchedVersion']['identifier']
+        end
+      end
+
+      first_patched_versions.sort
+    end
+
+    def patched_versions_for(package)
+      first_patched_versions = first_patched_versions_for(package)
+      patched_versions       = []
+
+      if !first_patched_versions.empty?
+        first_patched_versions[0..-2].each do |version|
+          patched_versions << "~> #{version}"
+        end
+
+        patched_versions << ">= #{first_patched_versions.last}"
+      end
+
+      return patched_versions
+    end
+
     def create(package)
       filename_to_write = package.filename
 
-      new_data = package.merge_data({
-        "cvss_v3": ("<FILL IN IF AVAILABLE>" unless cvss),
-        "patched_versions" => [ "<FILL IN SEE BELOW>" ],
-        "unaffected_versions" => [ "<OPTIONAL: FILL IN SEE BELOW>" ]
-      })
+      new_data = package.merge_data(
+        "cvss_v3"             => ("<FILL IN IF AVAILABLE>" unless cvss),
+        "cvss_v4"             => "<FILL IN IF AVAILABLE>"
+      )
+
+      if (unaffected_versions = unaffected_versions_for(package))
+        new_data['unaffected_versions'] = unaffected_versions
+      end
+
+      patched_versions = patched_versions_for(package)
+
+      if !patched_versions.empty?
+        new_data['patched_versions'] = patched_versions
+      else
+        new_data['notes'] = "Never patched"
+      end
+
+      # populate the related information
+      new_data["related"] = {
+        "url" => advisory["references"]
+      }
 
-      dir_to_write = File.dirname(filename_to_write)
-      Dir.mkdir dir_to_write unless Dir.exist?(dir_to_write)
+      FileUtils.mkdir_p(File.dirname(filename_to_write))
       File.open(filename_to_write, "w") do |file|
         # create an automatically generated advisory yaml file
         file.write new_data.to_yaml
@@ -368,9 +438,9 @@ def create(package)
         # The second block of yaml in a .yaml file is ignored (after the second "---" line)
         # This effectively makes this data a large comment
         # Still it should be removed before the data goes into rubysec
-        file.write "\n\n# GitHub advisory data below - **Remove this data before committing**\n"
+        file.write "# GitHub advisory data below - **Remove this data before committing**\n"
         file.write "# Use this data to write patched_versions (and potentially unaffected_versions) above\n"
-        file.write advisory.merge({ "vulnerabilities" => vulnerabilities }).to_yaml
+        file.write advisory.merge("vulnerabilities" => vulnerabilities).to_yaml
       end
       puts "Wrote: #{filename_to_write}"
       filename_to_write
diff --git a/rubies/jruby/CVE-2010-1330.yml b/rubies/jruby/CVE-2010-1330.yml
index 78e0dfdd9b..79a6aa92bc 100644
--- a/rubies/jruby/CVE-2010-1330.yml
+++ b/rubies/jruby/CVE-2010-1330.yml
@@ -6,10 +6,11 @@ url: http://jruby.org/2010/04/26/jruby-1-4-1-xss-vulnerability
 title: 'CVE-2010-1330 jruby: XSS in the regular expression engine when processing
   invalid UTF-8 byte sequences'
 date: 2010-04-26
-description: The regular expression engine in JRuby before 1.4.1, when $KCODE is set
+description: |
+  The regular expression engine in JRuby before 1.4.1, when $KCODE is set
   to 'u', does not properly handle characters immediately after a UTF-8 character,
   which allows remote attackers to conduct cross-site scripting (XSS) attacks via
   a crafted string.
 cvss_v2: 4.3
 patched_versions:
-- '>= 1.4.1'
+  - ">= 1.4.1"
diff --git a/rubies/jruby/CVE-2011-4838.yml b/rubies/jruby/CVE-2011-4838.yml
index fcf12801cb..9e6182f3e6 100644
--- a/rubies/jruby/CVE-2011-4838.yml
+++ b/rubies/jruby/CVE-2011-4838.yml
@@ -3,12 +3,13 @@ engine: jruby
 cve: 2011-4838
 osvdb: 78116
 url: http://jruby.org/2011/12/27/jruby-1-6-5-1
-title: 'CVE-2011-4838 jruby: hash table collisions DoS (oCERT-2011-003)'
+title: "CVE-2011-4838 jruby: hash table collisions DoS (oCERT-2011-003)"
 date: 2011-12-27
-description: JRuby before 1.6.5.1 computes hash values without restricting the ability
+description: |
+  JRuby before 1.6.5.1 computes hash values without restricting the ability
   to trigger hash collisions predictably, which allows context-dependent attackers
   to cause a denial of service (CPU consumption) via crafted input to an application
   that maintains a hash table.
 cvss_v2: 7.8
 patched_versions:
-- '>= 1.6.5.1'
+  - ">= 1.6.5.1"
diff --git a/rubies/jruby/CVE-2012-5370.yml b/rubies/jruby/CVE-2012-5370.yml
index 5407d9ef78..422ffc8a5e 100644
--- a/rubies/jruby/CVE-2012-5370.yml
+++ b/rubies/jruby/CVE-2012-5370.yml
@@ -3,13 +3,14 @@ engine: jruby
 cve: 2012-5370
 osvdb: 87864
 url: http://jruby.org/2012/12/03/jruby-1-7-1
-title: 'CVE-2012-5370 jruby: Murmur hash function collisions (oCERT-2012-001)'
+title: "CVE-2012-5370 jruby: Murmur hash function collisions (oCERT-2012-001)"
 date: 2012-11-23
-description: JRuby computes hash values without properly restricting the ability to
+description: |
+  JRuby computes hash values without properly restricting the ability to
   trigger hash collisions predictably, which allows context-dependent attackers to
   cause a denial of service (CPU consumption) via crafted input to an application
   that maintains a hash table, as demonstrated by a universal multicollision attack
   against the MurmurHash2 algorithm, a different vulnerability than CVE-2011-4838.
 cvss_v2: 5.0
 patched_versions:
-- '>= 1.7.1'
+  - ">= 1.7.1"
diff --git a/rubies/jruby/CVE-2022-25857.yml b/rubies/jruby/CVE-2022-25857.yml
new file mode 100644
index 0000000000..53182285ee
--- /dev/null
+++ b/rubies/jruby/CVE-2022-25857.yml
@@ -0,0 +1,12 @@
+---
+engine: jruby
+cve: 2022-25857
+url: https://github.com/jruby/jruby/issues/7342
+title: "CVE-2022-25857 jruby/psych/snakeyaml: Denial of Service (DoS) due missing to nested depth limitation for collections"
+date: 2022-02-24
+description: |
+  The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
+  This package is bundled into Psych which is in turn bundled into jruby.
+cvss_v3: 7.5
+patched_versions:
+  - ">= 9.3.8.0"
diff --git a/rubies/jruby/OSVDB-94644.yml b/rubies/jruby/OSVDB-94644.yml
index 6421707815..759d39e4c0 100644
--- a/rubies/jruby/OSVDB-94644.yml
+++ b/rubies/jruby/OSVDB-94644.yml
@@ -1,7 +1,7 @@
 ---
 engine: jruby
 osvdb: 94644
-url: http://www.osvdb.org/show/osvdb/94644
+url: https://www.jruby.org/2011/05/24/jruby-1-6-2.html
 title: JRuby Null Byte Request Arbitrary File Access
 date: 2010-05-26
 description: |
@@ -9,4 +9,8 @@ description: |
   for null byte requests in certain file operations. This may allow a remote
   attacker to gain access to arbitrary files. No further details are available.
 patched_versions:
-- '>= 1.6.2'
+  - ">= 1.6.2"
+related:
+  url:
+    - https://www.jruby.org/2011/05/24/jruby-1-6-2.html
+    - http://www.osvdb.org/show/osvdb/94644
diff --git a/rubies/mruby/CVE-2017-9527.yml b/rubies/mruby/CVE-2017-9527.yml
new file mode 100644
index 0000000000..d8bb4d13a5
--- /dev/null
+++ b/rubies/mruby/CVE-2017-9527.yml
@@ -0,0 +1,24 @@
+---
+engine: mruby
+cve: 2017-9527
+url: https://github.com/mruby/mruby/issues/3486
+title: Heap use-after-free in mark_context_stack
+date: 2017-06-11
+description: |
+  The mark_context_stack function in gc.c in mruby through 1.2.0
+  allows attackers to cause a denial of service (heap-based
+  use-after-free and application crash) or possibly have unspecified
+  other impact via a crafted .rb file.
+cvss_v2: 7.0
+cvss_v3: 7.8
+patched_versions:
+  - ">= 1.3.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2017-9527
+    - https://github.com/mruby/mruby/issues/3486
+    - https://github.com/mruby/mruby/commit/5c114c91d4ff31859fcd84cf8bf349b737b90d99
+    - https://github.com/advisories/GHSA-fxr6-v647-jgmq
+    - https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html
+    - https://ubuntu.com/security/CVE-2017-9527 (google search)
+    - https://www.rapid7.com/db/vulnerabilities/debian-cve-2017-9527 (google search)
diff --git a/rubies/mruby/CVE-2018-10191.yml b/rubies/mruby/CVE-2018-10191.yml
new file mode 100644
index 0000000000..ac69948f8e
--- /dev/null
+++ b/rubies/mruby/CVE-2018-10191.yml
@@ -0,0 +1,23 @@
+---
+engine: mruby
+cve: 2018-10191
+url: https://github.com/mruby/mruby/issues/3995
+title: Use after free caused by integer overflow in environment stack
+date: 2018-04-17
+description: |
+  In versions of mruby up to and including 1.4.0, an integer overflow
+  exists in src/vm.c::mrb_vm_exec() when handling OP_GETUPVAR in the
+  presence of deep scope nesting, resulting in a use-after-free.
+  An attacker that can cause Ruby code to be run can use this to
+  possibly execute arbitrary code.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - ">= 1.4.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-10191
+    - https://github.com/mruby/mruby/issues/3995
+    - https://github.com/mruby/mruby/commit/1905091634a6a2925c911484434448e568330626
+    - https://github.com/advisories/GHSA-444w-xm89-r2p5
+    - https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html
diff --git a/rubies/mruby/CVE-2018-10199.yml b/rubies/mruby/CVE-2018-10199.yml
new file mode 100644
index 0000000000..311d82b5c4
--- /dev/null
+++ b/rubies/mruby/CVE-2018-10199.yml
@@ -0,0 +1,21 @@
+---
+engine: mruby
+cve: 2018-10199
+url: https://github.com/mruby/mruby/issues/4001
+title: Use after free in File#initilialize_copy
+date: 2018-04-18
+description: |
+  In versions of mruby up to and including 1.4.0, a use-after-free
+  vulnerability exists in src/io.c::File#initilialize_copy(). An
+  attacker that can cause Ruby code to be run can possibly use
+  this to execute arbitrary code.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - ">= 1.4.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-10199
+    - https://github.com/mruby/mruby/issues/4001
+    - https://github.com/mruby/mruby/commit/b51b21fc63c9805862322551387d9036f2b63433
+    - https://github.com/advisories/GHSA-xpq9-m45f-g29q.json
diff --git a/rubies/mruby/CVE-2018-11743.yml b/rubies/mruby/CVE-2018-11743.yml
new file mode 100644
index 0000000000..035e50e607
--- /dev/null
+++ b/rubies/mruby/CVE-2018-11743.yml
@@ -0,0 +1,22 @@
+---
+engine: mruby
+cve: 2018-11743
+url: https://github.com/mruby/mruby/issues/4027
+title: Use of uninitialized pointer in mrb_hash_keys
+date: 2018-06-05
+description: |
+  The init_copy function in kernel.c in mruby 1.4.1 makes
+  initialize_copy calls for TT_ICLASS objects, which allows attackers
+  to cause a denial of service (mrb_hash_keys uninitialized pointer
+  and application crash) or possibly have unspecified other impact.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - ">= 2.0.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-11743
+    - https://github.com/mruby/mruby/issues/4027
+    - https://github.com/mruby/mruby/commit/b64ce17852b180dfeea81cf458660be41a78974d
+    - https://github.com/advisories/GHSA-7w9j-h3hj-wc9g
+    - https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html
diff --git a/rubies/mruby/CVE-2018-12247.yml b/rubies/mruby/CVE-2018-12247.yml
new file mode 100644
index 0000000000..e8a29389b8
--- /dev/null
+++ b/rubies/mruby/CVE-2018-12247.yml
@@ -0,0 +1,21 @@
+---
+engine: mruby
+cve: 2018-12247
+url: https://github.com/mruby/mruby/issues/4036
+title: Null pointer dereference in mrb_class
+date: 2018-06-12
+description: |
+  An issue was discovered in mruby 1.4.1. There is a NULL pointer
+  dereference in mrb_class, related to certain .clone usage, because
+  mrb_obj_clone in kernel.c copies flags other than the
+  MRB_FLAG_IS_FROZEN flag (e.g., the embedded flag).
+cvss_v2: 5.0
+cvss_v3: 7.5
+patched_versions:
+  - ">= 2.0.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-12247
+    - https://github.com/mruby/mruby/issues/4036
+    - https://github.com/mruby/mruby/commit/55edae0226409de25e59922807cb09acb45731a2
+    - https://github.com/advisories/GHSA-8j6c-c99j-fh4c
diff --git a/rubies/mruby/CVE-2018-12248.yml b/rubies/mruby/CVE-2018-12248.yml
new file mode 100644
index 0000000000..ebc87a2c7a
--- /dev/null
+++ b/rubies/mruby/CVE-2018-12248.yml
@@ -0,0 +1,21 @@
+---
+engine: mruby
+cve: 2018-12248
+url: https://github.com/mruby/mruby/issues/4038
+title: Heap buffer overflow in OP_ENTER
+date: 2018-06-12
+description: |
+  An issue was discovered in mruby 1.4.1. There is a
+  heap-based buffer over-read associated with OP_ENTER because
+  a heap-based mrbgems/mruby-fiber/src/fiber.c does not extend
+  the stack in cases of many arguments to fiber.
+cvss_v2: 5.0
+cvss_v3: 7.5
+patched_versions:
+  - ">= 2.0.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-12248
+    - https://github.com/mruby/mruby/issues/4038
+    - https://github.com/mruby/mruby/commit/778500563a9f7ceba996937dc886bd8cde29b42b
+    - https://github.com/advisories/GHSA-96p2-24jg-gc5w
diff --git a/rubies/mruby/CVE-2018-12249.yml b/rubies/mruby/CVE-2018-12249.yml
new file mode 100644
index 0000000000..0b1d050dfc
--- /dev/null
+++ b/rubies/mruby/CVE-2018-12249.yml
@@ -0,0 +1,21 @@
+---
+engine: mruby
+cve: 2018-12249
+url: https://github.com/mruby/mruby/issues/4037
+title: Null pointer dereference in mrb_class_real
+date: 2018-06-12
+description: |
+  An issue was discovered in mruby 1.4.1. There is a NULL pointer
+  dereference in mrb_class_real because "class BasicObject" is
+  not properly supported in class.c.
+cvss_v2: 5.0
+cvss_v3: 7.5
+patched_versions:
+  - ">= 2.0.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-12249
+    - https://github.com/mruby/mruby/issues/4037
+    - https://github.com/mruby/mruby/commit/faa4eaf6803bd11669bc324b4c34e7162286bfa3
+    - https://github.com/advisories/GHSA-3h2j-h4g8-5pmr
+    - https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html
diff --git a/rubies/mruby/CVE-2018-14337.yml b/rubies/mruby/CVE-2018-14337.yml
new file mode 100644
index 0000000000..c2bfc604a5
--- /dev/null
+++ b/rubies/mruby/CVE-2018-14337.yml
@@ -0,0 +1,22 @@
+---
+engine: mruby
+cve: 2018-14337
+url: https://github.com/mruby/mruby/issues/4062
+title: Signed integer overflow in mrb_str_format
+date: 2018-07-17
+description: |
+  The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby
+  1.4.1 contains a signed integer overflow, possibly leading to
+  out-of-bounds memory access because the mrb_str_resize function
+  in string.c does not check for a negative length.
+cvss_v2: 5.0
+cvss_v3: 7.5
+patched_versions:
+  - ">= 2.0.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2018-14337
+    - https://github.com/mruby/mruby/issues/4062
+    - https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html
+    - https://github.com/advisories/GHSA-hrqc-789v-hchf
+    - https://github.com/mruby/mruby/commit/180f39bf4c5246ff77ef71011a75e7669019afab
diff --git a/rubies/mruby/CVE-2020-15866.yml b/rubies/mruby/CVE-2020-15866.yml
new file mode 100644
index 0000000000..6956a652c5
--- /dev/null
+++ b/rubies/mruby/CVE-2020-15866.yml
@@ -0,0 +1,22 @@
+---
+engine: mruby
+cve: 2020-15866
+url: https://github.com/mruby/mruby/issues/5042
+title: Heap buffer overflow in mruby interpreter
+date: 2020-07-21
+description: |
+  muby through 2.1.2-rc has a heap-based buffer overflow in the
+  mrb_yield_with_class function in vm.c because of incorrect VM
+  stack handling. It can be triggered via the stack_copy function.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - "~> 3.0.0-preview"
+  - ">= 3.0.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-15866
+    - https://github.com/mruby/mruby/issues/5042
+    - https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html
+    - https://github.com/advisories/GHSA-4f9x-p86g-x88m
+    - https://github.com/mruby/mruby/commit/6334949ba69363cb909a57d6871895bd6d98bb6b
diff --git a/rubies/mruby/CVE-2020-6838.yml b/rubies/mruby/CVE-2020-6838.yml
new file mode 100644
index 0000000000..2f1aa3a528
--- /dev/null
+++ b/rubies/mruby/CVE-2020-6838.yml
@@ -0,0 +1,21 @@
+---
+engine: mruby
+cve: 2020-6838
+url: https://github.com/mruby/mruby/issues/4926
+title: heap use after free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c
+date: 2020-01-11
+description: |
+  In mruby 2.1.0, there is a use-after-free in hash_values_at in
+  mrbgems/mruby-hash-ext/src/hash-ext.c.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - "~> 2.1.1-rc"
+  - ">= 2.1.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-6838
+    - https://github.com/mruby/mruby/issues/4926
+    - https://github.com/advisories/GHSA-97qv-pm76-mg98
+    - https://github.com/mruby/mruby/issues/5004
+    - https://github.com/mruby/mruby/commit/70e574689664c10ed2c47581999cc2ce3e3c5afb
diff --git a/rubies/mruby/CVE-2020-6839.yml b/rubies/mruby/CVE-2020-6839.yml
new file mode 100644
index 0000000000..2e9697b853
--- /dev/null
+++ b/rubies/mruby/CVE-2020-6839.yml
@@ -0,0 +1,20 @@
+---
+engine: mruby
+cve: 2020-6839
+url: https://github.com/mruby/mruby/issues/4929
+title: stack overflow in mrb_str_len_to_dbl in src/string.c
+date: 2020-01-11
+description: |
+  In mruby 2.1.0, there is a stack-based buffer overflow in
+   mrb_str_len_to_dbl in string.c.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - "~> 2.1.1-rc"
+  - ">= 2.1.2"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-6839
+    - https://github.com/mruby/mruby/issues/4929
+    - https://github.com/advisories/GHSA-24vp-v896-cq3c
+    - https://github.com/mruby/mruby/commit/2124b9b4c95e66e63b1eb26a8dab49753b82fd6c
diff --git a/rubies/mruby/CVE-2020-6840.yml b/rubies/mruby/CVE-2020-6840.yml
new file mode 100644
index 0000000000..e39f8cf81d
--- /dev/null
+++ b/rubies/mruby/CVE-2020-6840.yml
@@ -0,0 +1,21 @@
+---
+engine: mruby
+cve: 2020-6840
+url: https://github.com/mruby/mruby/issues/4927
+title: heap use after free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c
+date: 2020-01-11
+description: |
+  In mruby 2.1.0, there is a use-after-free in hash_slice in
+  mrbgems/mruby-hash-ext/src/hash-ext.c.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - "~> 2.1.1-rc"
+  - ">= 2.1.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-6840
+    - https://github.com/mruby/mruby/issues/4927
+    - https://github.com/advisories/GHSA-4v2f-5xhv-8ff4
+    - https://github.com/mruby/mruby/issues/5004
+    - https://github.com/mruby/mruby/commit/70e574689664c10ed2c47581999cc2ce3e3c5afb
diff --git a/rubies/mruby/CVE-2021-4110.yml b/rubies/mruby/CVE-2021-4110.yml
new file mode 100644
index 0000000000..26cb61bc9c
--- /dev/null
+++ b/rubies/mruby/CVE-2021-4110.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2021-4110
+url: https://huntr.dev/bounties/4ce5dc47-2512-4c87-8609-453adc8cad20
+title: NULL Pointer Dereference in mruby/mruby
+date: 2021-12-15
+description: |
+  mruby is vulnerable to NULL Pointer Dereference
+cvss_v2: 5.0
+cvss_v3: 7.5
+patched_versions:
+  - "~> 3.1.0-rc"
+  - ">= 3.1.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-4110
+    - https://github.com/mruby/mruby/commit/f5e10c5a79a17939af763b1dcf5232ce47e24a34
+    - https://huntr.dev/bounties/4ce5dc47-2512-4c87-8609-453adc8cad20
+    - https://github.com/advisories/GHSA-xvhr-qprg-rjpw
diff --git a/rubies/mruby/CVE-2021-4188.yml b/rubies/mruby/CVE-2021-4188.yml
new file mode 100644
index 0000000000..e5cf72830e
--- /dev/null
+++ b/rubies/mruby/CVE-2021-4188.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2021-4188
+url: https://huntr.dev/bounties/78533fb9-f3e0-47c2-86dc-d1f96d5bea28
+title: NULL Pointer Dereference in mruby/mruby
+date: 2021-12-30
+description: |
+  mruby is vulnerable to NULL Pointer Dereference
+cvss_v2: 5.0
+cvss_v3: 7.5
+patched_versions:
+  - "~> 3.1.0-rc"
+  - ">= 3.1.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-4188
+    - https://github.com/mruby/mruby/commit/27d1e0132a0804581dca28df042e7047fd27eaa8
+    - https://huntr.dev/bounties/78533fb9-f3e0-47c2-86dc-d1f96d5bea28
+    - https://github.com/advisories/GHSA-wc43-284g-pqr5
diff --git a/rubies/mruby/CVE-2021-46023.yml b/rubies/mruby/CVE-2021-46023.yml
new file mode 100644
index 0000000000..a53ef3f9fc
--- /dev/null
+++ b/rubies/mruby/CVE-2021-46023.yml
@@ -0,0 +1,21 @@
+---
+engine: mruby
+cve: 2021-46023
+url: https://nvd.nist.gov/vuln/detail/CVE-2021-46023
+title: https://github.com/mruby/mruby/issues/5613
+date: 2023-02-14
+description: |
+  An Untrusted Pointer Dereference was discovered in function
+  mrb_vm_exec in mruby before 3.1.0-rc. The vulnerability causes
+  a segmentation fault and application crash.
+cvss_v3: 7.5
+patched_versions:
+  - "~> 3.1.0-rc"
+  - ">= 3.1.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-46023
+    - https://github.com/mruby/mruby/issues/5613
+    - https://github.com/advisories/GHSA-4g9q-c75g-jq7q
+    - https://github.com/mruby/mruby/pull/5619
+    - https://github.com/mruby/mruby/pull/5620
diff --git a/rubies/mruby/CVE-2022-0080.yml b/rubies/mruby/CVE-2022-0080.yml
new file mode 100644
index 0000000000..78eb7f1c14
--- /dev/null
+++ b/rubies/mruby/CVE-2022-0080.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-0080
+url: https://huntr.dev/bounties/59a70392-4864-4ce3-8e35-6ac2111d1e2e
+title: Heap-based Buffer Overflow in mruby/mruby
+date: 2022-01-02
+description: |
+  mruby is vulnerable to Heap-based Buffer Overflow
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - "~> 3.1.0-rc"
+  - ">= 3.1.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-0080
+    - https://github.com/mruby/mruby/commit/28ccc664e5dcd3f9d55173e9afde77c4705a9ab6
+    - https://huntr.dev/bounties/59a70392-4864-4ce3-8e35-6ac2111d1e2e
+    - https://github.com/advisories/GHSA-8vcc-hrhr-q8hf
diff --git a/rubies/mruby/CVE-2022-0240.yml b/rubies/mruby/CVE-2022-0240.yml
new file mode 100644
index 0000000000..bc6e0e4e63
--- /dev/null
+++ b/rubies/mruby/CVE-2022-0240.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-0240
+url: https://huntr.dev/bounties/5857eced-aad9-417d-864e-0bdf17226cbb
+title: NULL Pointer Dereference in mruby/mruby
+date: 2022-01-17
+description: |
+  mruby is vulnerable to NULL Pointer Dereference
+cvss_v2: 5.0
+cvss_v3: 7.5
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-0240
+    - https://github.com/mruby/mruby/commit/31fa3304049fc406a201a72293cce140f0557dca
+    - https://huntr.dev/bounties/5857eced-aad9-417d-864e-0bdf17226cbb
+    - https://github.com/advisories/GHSA-r744-r36f-363j
diff --git a/rubies/mruby/CVE-2022-0326.yml b/rubies/mruby/CVE-2022-0326.yml
new file mode 100644
index 0000000000..0029033488
--- /dev/null
+++ b/rubies/mruby/CVE-2022-0326.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-0326
+url: https://huntr.dev/bounties/795dcbd9-1695-44bb-8c59-ad327c97c976
+title: NULL Pointer Dereference in mruby/mruby
+date: 2022-01-21
+description: |
+  NULL Pointer Dereference in Homebrew mruby prior to 3.2.
+cvss_v2: 4.3
+cvss_v3: 5.5
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-0326
+    - https://github.com/mruby/mruby/commit/b611c43a5de061ec21b343967e1b64c45c373d7e
+    - https://huntr.dev/bounties/795dcbd9-1695-44bb-8c59-ad327c97c976
+    - https://github.com/advisories/GHSA-54p3-947h-6fpr
diff --git a/rubies/mruby/CVE-2022-0481.yml b/rubies/mruby/CVE-2022-0481.yml
new file mode 100644
index 0000000000..4ca525d876
--- /dev/null
+++ b/rubies/mruby/CVE-2022-0481.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-0481
+url: https://huntr.dev/bounties/54725c8c-87f4-41b6-878c-01d8e0ee7027
+title: NULL Pointer Dereference in mruby/mruby
+date: 2022-02-04
+description: |
+  NULL Pointer Dereference in Homebrew mruby prior to 3.2.
+cvss_v2: 7.8
+cvss_v3: 7.5
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-0481
+    - https://github.com/mruby/mruby/commit/ae3c99767a27f5c6c584162e2adc6a5d0eb2c54e
+    - https://huntr.dev/bounties/54725c8c-87f4-41b6-878c-01d8e0ee7027
+    - https://github.com/advisories/GHSA-h8gw-f6pq-8cg5
diff --git a/rubies/mruby/CVE-2022-0525.yml b/rubies/mruby/CVE-2022-0525.yml
new file mode 100644
index 0000000000..77b6a0c4b3
--- /dev/null
+++ b/rubies/mruby/CVE-2022-0525.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-0525
+url: https://huntr.dev/bounties/e19e109f-acf0-4048-8ee8-1b10a870f1e9
+title: Out-of-bounds Read in mruby/mruby
+date: 2022-02-09
+description: |
+  Out-of-bounds Read in Homebrew mruby prior to 3.2.
+cvss_v2: 6.4
+cvss_v3: 9.1
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-0525
+    - https://github.com/mruby/mruby/commit/0849a2885f81cfd82134992c06df3ccd59052ac7
+    - https://huntr.dev/bounties/e19e109f-acf0-4048-8ee8-1b10a870f1e9
+    - https://github.com/advisories/GHSA-6cpj-3r2r-v2m4
diff --git a/rubies/mruby/CVE-2022-0570.yml b/rubies/mruby/CVE-2022-0570.yml
new file mode 100644
index 0000000000..3b59017653
--- /dev/null
+++ b/rubies/mruby/CVE-2022-0570.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-0570
+url: https://huntr.dev/bounties/65a7632e-f95b-4836-b1a7-9cb95e5124f1
+title: Heap-based Buffer Overflow in mruby/mruby
+date: 2022-02-14
+description: |
+  Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-0570
+    - https://github.com/mruby/mruby/commit/38b164ace7d6ae1c367883a3d67d7f559783faad
+    - https://huntr.dev/bounties/65a7632e-f95b-4836-b1a7-9cb95e5124f1
+    - https://github.com/advisories/GHSA-69j8-4j47-xjj7
diff --git a/rubies/mruby/CVE-2022-0614.yml b/rubies/mruby/CVE-2022-0614.yml
new file mode 100644
index 0000000000..a135e5f7b2
--- /dev/null
+++ b/rubies/mruby/CVE-2022-0614.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-0614
+url: https://huntr.dev/bounties/a980ce4d-c359-4425-92c4-e844c0055879
+title: Use of Out-of-range Pointer Offset in mruby/mruby
+date: 2022-02-16
+description: |
+  Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.
+cvss_v2: 4.3
+cvss_v3: 5.5
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-0614
+    - https://github.com/mruby/mruby/commit/ff3a5ebed6ffbe3e70481531cfb969b497aa73ad
+    - https://huntr.dev/bounties/a980ce4d-c359-4425-92c4-e844c0055879
+    - https://github.com/advisories/GHSA-rr79-wxqv-v9vq
diff --git a/rubies/mruby/CVE-2022-0623.yml b/rubies/mruby/CVE-2022-0623.yml
new file mode 100644
index 0000000000..c633a630b4
--- /dev/null
+++ b/rubies/mruby/CVE-2022-0623.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-0623
+url: https://huntr.dev/bounties/5b908ac7-d8f1-4fcd-9355-85df565f7580
+title: Out-of-bounds Read in mruby/mruby
+date: 2022-02-17
+description: |
+  Out-of-bounds Read in Homebrew mruby prior to 3.2.
+cvss_v2: 6.4
+cvss_v3: 9.1
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-0623
+    - https://github.com/mruby/mruby/commit/ff3a5ebed6ffbe3e70481531cfb969b497aa73ad
+    - https://huntr.dev/bounties/5b908ac7-d8f1-4fcd-9355-85df565f7580
+    - https://github.com/advisories/GHSA-ff35-7f56-3w6p
diff --git a/rubies/mruby/CVE-2022-0630.yml b/rubies/mruby/CVE-2022-0630.yml
new file mode 100644
index 0000000000..db623b9611
--- /dev/null
+++ b/rubies/mruby/CVE-2022-0630.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-0630
+url: https://huntr.dev/bounties/f7cdd680-1a7f-4992-b4b8-44b5e4ba3e32
+title: Out-of-bounds Read in mruby/mruby
+date: 2022-02-19
+description: |
+  Out-of-bounds Read in Homebrew mruby prior to 3.2.
+cvss_v2: 5.6
+cvss_v3: 7.1
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-0630
+    - https://github.com/mruby/mruby/commit/ff3a5ebed6ffbe3e70481531cfb969b497aa73ad
+    - https://huntr.dev/bounties/f7cdd680-1a7f-4992-b4b8-44b5e4ba3e32
+    - https://github.com/advisories/GHSA-f46c-4g24-cvr4
diff --git a/rubies/mruby/CVE-2022-0631.yml b/rubies/mruby/CVE-2022-0631.yml
new file mode 100644
index 0000000000..e1afe08a11
--- /dev/null
+++ b/rubies/mruby/CVE-2022-0631.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-0631
+url: https://huntr.dev/bounties/9bdc49ca-6697-4adc-a785-081e1961bf40
+title: Heap-based Buffer Overflow in mruby/mruby
+date: 2022-02-18
+description: |
+  Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-0631
+    - https://github.com/mruby/mruby/commit/47068ae07a5fa3aa9a1879cdfe98a9ce0f339299
+    - https://huntr.dev/bounties/9bdc49ca-6697-4adc-a785-081e1961bf40
+    - https://github.com/advisories/GHSA-hv83-f8w5-chhv
diff --git a/rubies/mruby/CVE-2022-0632.yml b/rubies/mruby/CVE-2022-0632.yml
new file mode 100644
index 0000000000..801747e52d
--- /dev/null
+++ b/rubies/mruby/CVE-2022-0632.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-0632
+url: https://huntr.dev/bounties/3e5bb8f6-30fd-4553-86dd-761e9459ce1b
+title: NULL Pointer Dereference in mruby/mruby
+date: 2022-02-19
+description: |
+  NULL Pointer Dereference in Homebrew mruby prior to 3.2.
+cvss_v2: 4.3
+cvss_v3: 5.5
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-0632
+    - https://github.com/mruby/mruby/commit/44f591aa8f7091e6ca6cb418e428ae6d4ceaf77d
+    - https://huntr.dev/bounties/3e5bb8f6-30fd-4553-86dd-761e9459ce1b
+    - https://github.com/advisories/GHSA-3xxj-pcr2-rvh7
diff --git a/rubies/mruby/CVE-2022-0717.yml b/rubies/mruby/CVE-2022-0717.yml
new file mode 100644
index 0000000000..e3dedcabee
--- /dev/null
+++ b/rubies/mruby/CVE-2022-0717.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-0717
+url: https://huntr.dev/bounties/27a851a5-7ebf-409b-854f-b2614771e8f9
+title: Out-of-bounds Read in mruby/mruby
+date: 2022-02-23
+description: |
+  Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2.
+cvss_v2: 6.4
+cvss_v3: 9.1
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-0717
+    - https://github.com/mruby/mruby/commit/f72315575f78a9a773adbce0ee7d3ec33434cb76
+    - https://huntr.dev/bounties/27a851a5-7ebf-409b-854f-b2614771e8f9
+    - https://github.com/advisories/GHSA-9543-hpcg-326v
diff --git a/rubies/mruby/CVE-2022-0890.yml b/rubies/mruby/CVE-2022-0890.yml
new file mode 100644
index 0000000000..15c3944e53
--- /dev/null
+++ b/rubies/mruby/CVE-2022-0890.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-0890
+url: https://huntr.dev/bounties/68e09ec1-6cc7-48b8-981d-30f478c70276
+title: NULL Pointer Dereference in mruby/mruby
+date: 2022-03-10
+description: |
+  NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2.
+cvss_v2: 7.1
+cvss_v3: 5.5
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-0890
+    - https://github.com/mruby/mruby/commit/da48e7dbb20024c198493b8724adae1b842083aa
+    - https://huntr.dev/bounties/68e09ec1-6cc7-48b8-981d-30f478c70276
+    - https://github.com/advisories/GHSA-j279-7379-x7mj
diff --git a/rubies/mruby/CVE-2022-1071.yml b/rubies/mruby/CVE-2022-1071.yml
new file mode 100644
index 0000000000..88b7b4757f
--- /dev/null
+++ b/rubies/mruby/CVE-2022-1071.yml
@@ -0,0 +1,20 @@
+---
+engine: mruby
+cve: 2022-1071
+url: https://huntr.dev/bounties/6597ece9-07af-415b-809b-919ce0a17cf3
+title: User after free in mrb_vm_exec in mruby/mruby
+date: 2022-03-26
+description: |
+  User after free in mrb_vm_exec in GitHub repository mruby/mruby
+  prior to 3.2.
+cvss_v2: 6.8
+cvss_v3: 8.2
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-1071
+    - https://github.com/mruby/mruby/commit/aaa28a508903041dd7399d4159a8ace9766b022f
+    - https://huntr.dev/bounties/6597ece9-07af-415b-809b-919ce0a17cf3
+    - https://github.com/advisories/GHSA-pv86-xgr9-75fj
diff --git a/rubies/mruby/CVE-2022-1106.yml b/rubies/mruby/CVE-2022-1106.yml
new file mode 100644
index 0000000000..6ee2794fc7
--- /dev/null
+++ b/rubies/mruby/CVE-2022-1106.yml
@@ -0,0 +1,20 @@
+---
+engine: mruby
+cve: 2022-1106
+url: https://huntr.dev/bounties/16b9d0ea-71ed-41bc-8a88-2deb4c20be8f
+title: Use after free in mrb_vm_exec in mruby/mruby
+date: 2022-03-27
+description: |
+  Use after free in mrb_vm_exec in GitHub repository mruby/mruby
+  prior to 3.2.
+cvss_v2: 6.4
+cvss_v3: 9.1
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-1106
+    - https://github.com/mruby/mruby/commit/7f5a490d09f4d56801ac3a3e4e39e03e1471b44c
+    - https://huntr.dev/bounties/16b9d0ea-71ed-41bc-8a88-2deb4c20be8f
+    - https://github.com/advisories/GHSA-r2j8-v967-j6h6
diff --git a/rubies/mruby/CVE-2022-1201.yml b/rubies/mruby/CVE-2022-1201.yml
new file mode 100644
index 0000000000..4c03a7ff26
--- /dev/null
+++ b/rubies/mruby/CVE-2022-1201.yml
@@ -0,0 +1,22 @@
+---
+engine: mruby
+cve: 2022-1201
+url: https://huntr.dev/bounties/6f930add-c9d8-4870-ae56-d4bd8354703b
+title: NULL Pointer Dereference in mrb_vm_exec with super in mruby/mruby
+date: 2022-04-02
+description: |
+  NULL Pointer Dereference in mrb_vm_exec with super in GitHub
+  repository mruby/mruby prior to 3.2. This vulnerability is capable
+  of making the mruby interpreter crash, thus affecting the
+  availability of the system.
+cvss_v2: 4.9
+cvss_v3: 6.5
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-1201
+    - https://github.com/mruby/mruby/commit/00acae117da1b45b318dc36531a7b0021b8097ae
+    - https://huntr.dev/bounties/6f930add-c9d8-4870-ae56-d4bd8354703b
+    - https://github.com/advisories/GHSA-p2wj-9vfc-2xj7
diff --git a/rubies/mruby/CVE-2022-1212.yml b/rubies/mruby/CVE-2022-1212.yml
new file mode 100644
index 0000000000..63f3d0a255
--- /dev/null
+++ b/rubies/mruby/CVE-2022-1212.yml
@@ -0,0 +1,21 @@
+---
+engine: mruby
+cve: 2022-1212
+url: https://huntr.dev/bounties/9fcc06d0-08e4-49c8-afda-2cae40946abe
+title: Use-After-Free in str_escape in mruby/mruby in mruby/mruby
+date: 2022-04-05
+description: |
+  Use-After-Free in str_escape in mruby/mruby in GitHub repository
+  mruby/mruby prior to 3.2. Possible arbitrary code execution if
+  being exploited.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-1212
+    - https://github.com/mruby/mruby/commit/3cf291f72224715942beaf8553e42ba8891ab3c6
+    - https://huntr.dev/bounties/9fcc06d0-08e4-49c8-afda-2cae40946abe
+    - https://github.com/advisories/GHSA-xh66-6mj6-94rg
diff --git a/rubies/mruby/CVE-2022-1276.yml b/rubies/mruby/CVE-2022-1276.yml
new file mode 100644
index 0000000000..f7be3d344a
--- /dev/null
+++ b/rubies/mruby/CVE-2022-1276.yml
@@ -0,0 +1,20 @@
+---
+engine: mruby
+cve: 2022-1276
+url: https://huntr.dev/bounties/6ea041d1-e2aa-472c-bf3e-da5fa8726c25
+title: Out-of-bounds Read in mrb_get_args in mruby/mruby
+date: 2022-04-10
+description: |
+  Out-of-bounds Read in mrb_get_args in GitHub repository mruby/mruby
+  prior to 3.2. Possible arbitrary code execution if being exploited.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-1276
+    - https://github.com/mruby/mruby/commit/c8c083cb750606b2da81582cd8e43b442bb143e6
+    - https://huntr.dev/bounties/6ea041d1-e2aa-472c-bf3e-da5fa8726c25
+    - https://github.com/advisories/GHSA-66hc-pc5r-hwjr
diff --git a/rubies/mruby/CVE-2022-1286.yml b/rubies/mruby/CVE-2022-1286.yml
new file mode 100644
index 0000000000..3110241b61
--- /dev/null
+++ b/rubies/mruby/CVE-2022-1286.yml
@@ -0,0 +1,21 @@
+---
+engine: mruby
+cve: 2022-1286
+url: https://huntr.dev/bounties/f918376e-b488-4113-963d-ffe8716e4189
+title: heap-buffer-overflow in mrb_vm_exec in mruby/mruby in mruby/mruby
+date: 2022-04-10
+description: |
+  heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub
+  repository mruby/mruby prior to 3.2. Possible arbitrary code
+  execution if being exploited.
+cvss_v2: 7.5
+cvss_v3: 9.8
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-1286
+    - https://github.com/mruby/mruby/commit/b1d0296a937fe278239bdfac840a3fd0e93b3ee9
+    - https://huntr.dev/bounties/f918376e-b488-4113-963d-ffe8716e4189
+    - https://github.com/advisories/GHSA-6c7w-5xfj-j2mc
diff --git a/rubies/mruby/CVE-2022-1427.yml b/rubies/mruby/CVE-2022-1427.yml
new file mode 100644
index 0000000000..f5d9b5c8f6
--- /dev/null
+++ b/rubies/mruby/CVE-2022-1427.yml
@@ -0,0 +1,21 @@
+---
+engine: mruby
+cve: 2022-1427
+url: https://huntr.dev/bounties/23b6f0a9-64f5-421e-a55f-b5b7a671f301
+title: Out-of-bounds Read in mrb_obj_is_kind_of in in mruby/mruby
+date: 2022-04-23
+description: |
+  Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository
+  mruby/mruby prior to 3.2. # Impact: Possible arbitrary code
+  execution if being exploited.
+cvss_v2: 4.6
+cvss_v3: 7.8
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-1427
+    - https://github.com/mruby/mruby/commit/a4d97934d51cb88954cc49161dc1d151f64afb6b
+    - https://huntr.dev/bounties/23b6f0a9-64f5-421e-a55f-b5b7a671f301
+    - https://github.com/advisories/GHSA-45gc-6g92-9g2j
diff --git a/rubies/mruby/CVE-2022-1934.yml b/rubies/mruby/CVE-2022-1934.yml
new file mode 100644
index 0000000000..a6d11f35ed
--- /dev/null
+++ b/rubies/mruby/CVE-2022-1934.yml
@@ -0,0 +1,19 @@
+---
+engine: mruby
+cve: 2022-1934
+url: https://huntr.dev/bounties/99e6df06-b9f7-4c53-a722-6bb89fbfb51f
+title: Use-After-Free in function hash_new_from_values in mruby/mruby
+date: 2022-05-31
+description: |
+  Use After Free in GitHub repository mruby/mruby prior to 3.2.
+cvss_v2: 4.6
+cvss_v3: 7.8
+patched_versions:
+  - "~> 3.2.0-rc"
+  - ">= 3.2.0"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2022-1934
+    - https://github.com/mruby/mruby/commit/aa7f98dedb68d735a1665d3a289036c88b0c47ce
+    - https://huntr.dev/bounties/99e6df06-b9f7-4c53-a722-6bb89fbfb51f
+    - https://github.com/advisories/GHSA-hp4r-26gw-f2r8.json
diff --git a/rubies/rbx/CVE-2012-5372.yml b/rubies/rbx/CVE-2012-5372.yml
index c052fef52c..966e3df205 100644
--- a/rubies/rbx/CVE-2012-5372.yml
+++ b/rubies/rbx/CVE-2012-5372.yml
@@ -2,7 +2,8 @@
 engine: rbx
 cve: 2012-5372
 osvdb: 87861
-url: http://www.osvdb.org/show/osvdb/87861
+ghsa: 9f35-5wj4-v27g
+url: http://www.ocert.org/advisories/ocert-2012-001.html
 title: Rubinius MurmurHash3 Implementation Hash Collision Remote DoS
 date: 2012-11-23
 description: |
@@ -14,4 +15,17 @@ description: |
   This will result in a loss of availability for the program.
 cvss_v2: 5.0
 patched_versions:
-- '>= 1.3.1'
+  - ">= 1.3.1"
+related:
+  osvdb:
+    - 78119
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-5372
+    - https://github.com/rubinius/rubinius/commit/a9a40fc6a1256bcf6382631b710430105c5dd868
+    - https://github.com/advisories/GHSA-GHSA-9f35-5wj4-v27g
+    - http://2012.appsec-forum.ch/conferences/#c17
+    - http://www.ocert.org/advisories/ocert-2012-001.html
+    - https://web.archive.org/web/20200229110821/http://www.securityfocus.com/bid/56670
+    - https://web.archive.org/web/20121223202152/https://www.131002.net/data/talks/appsec12_slides.pdf
+    - http://www.osvdb.org/show/osvdb/87861
+    - http://www.osvdb.org/show/osvdb/78119
diff --git a/rubies/rbx/OSVDB-78119.yml b/rubies/rbx/OSVDB-78119.yml
deleted file mode 100644
index 346506c809..0000000000
--- a/rubies/rbx/OSVDB-78119.yml
+++ /dev/null
@@ -1,13 +0,0 @@
----
-engine: rbx
-osvdb: 78119
-url: http://www.osvdb.org/show/osvdb/78119
-title: Rubinius Hash Collision Form Parameter Parsing Remote DoS
-date: 2011-12-28
-description: |
-  Rubinius contains a flaw that may allow a remote denial of service. The issue
-  is triggered when an attacker sends multiple crafted parameters which trigger
-  hash collisions, and will result in loss of availability for the program via
-  CPU consumption.
-patched_versions:
-- '>= 1.3.1'
diff --git a/rubies/ruby/CVE-2006-3694.yml b/rubies/ruby/CVE-2006-3694.yml
new file mode 100644
index 0000000000..74e94a11ab
--- /dev/null
+++ b/rubies/ruby/CVE-2006-3694.yml
@@ -0,0 +1,40 @@
+---
+engine: ruby
+cve: 2006-3694
+ghsa: rx2v-jmvm-3c4h
+url: http://www.ubuntu.com/usn/usn-325-1
+title: ruby1.8 vulnerability
+date: 2006-07-21
+description: |
+  Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow
+  remote attackers to bypass safe level checks via unspecified
+  vectors involving (1) the alias function and
+  (2) directory operations.
+cvss_v2: 6.4
+unaffected_versions:
+  - "< 1.8.2"
+patched_versions:
+  - ">= 1.8.5"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2006-3694
+    - https://exchange.xforce.ibmcloud.com/vulnerabilities/27725
+    - http://jvn.jp/jp/JVN%2313947696/index.html
+    - http://jvn.jp/jp/JVN%2383768862/index.html
+    - http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003907.html
+    - http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003915.html
+    - http://www.debian.org/security/2006/dsa-1139
+    - http://www.debian.org/security/2006/dsa-1157
+    - http://www.osvdb.org/27144
+    - http://www.osvdb.org/27145
+    - http://www.ubuntu.com/usn/usn-325-1
+    - https://access.redhat.com/errata/RHSA-2006:0604
+    - https://web.archive.org/web/20111224164224/http://secunia.com/advisories/21009
+    - https://web.archive.org/web/20130417170234/http://secunia.com/advisories/21233
+    - https://web.archive.org/web/20130417170234/http://secunia.com/advisories/21236
+    - https://web.archive.org/web/20060814000449/http://secunia.com/advisories/21272
+    - https://web.archive.org/web/20060813235659/http://secunia.com/advisories/21337
+    - https://web.archive.org/web/20060916180623/http://secunia.com/advisories/21598
+    - https://web.archive.org/web/20070501082523/http://secunia.com/advisories/21657
+    - https://web.archive.org/web/20070911143211/http://secunia.com/advisories/21749
+    - https://web.archive.org/web/20101223093859/http://www.securityfocus.com/bid/18944
diff --git a/rubies/ruby/CVE-2007-5162.yml b/rubies/ruby/CVE-2007-5162.yml
index 440224ed2a..68c5c49985 100644
--- a/rubies/ruby/CVE-2007-5162.yml
+++ b/rubies/ruby/CVE-2007-5162.yml
@@ -12,5 +12,5 @@ description: |
   a man-in-the-middle attack or spoofed web site.
 cvss_v2: 4.3
 patched_versions:
-- ~> 1.8.5.114
-- '>= 1.8.6.111'
+  - "~> 1.8.5.114"
+  - ">= 1.8.6.111"
diff --git a/rubies/ruby/CVE-2007-5770.yml b/rubies/ruby/CVE-2007-5770.yml
index fcb1c372b3..da10d9033e 100644
--- a/rubies/ruby/CVE-2007-5770.yml
+++ b/rubies/ruby/CVE-2007-5770.yml
@@ -13,5 +13,5 @@ description: |
   site, different components than CVE-2007-5162.
 cvss_v2: 4.3
 patched_versions:
-- ~> 1.8.6.230
-- '>= 1.8.7'
+  - "~> 1.8.6.230"
+  - ">= 1.8.7"
diff --git a/rubies/ruby/CVE-2008-1447.yml b/rubies/ruby/CVE-2008-1447.yml
index 78adf03d5b..a778de55c9 100644
--- a/rubies/ruby/CVE-2008-1447.yml
+++ b/rubies/ruby/CVE-2008-1447.yml
@@ -10,6 +10,6 @@ description: |
   resolv.rb is fixed to randomize them.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.8.6.287
-- ~> 1.8.7.72
-- '>= 1.9.0'
+  - "~> 1.8.6.287"
+  - "~> 1.8.7.72"
+  - ">= 1.9.0"
diff --git a/rubies/ruby/CVE-2008-1891.yml b/rubies/ruby/CVE-2008-1891.yml
index b05f160a6f..ec589251e5 100644
--- a/rubies/ruby/CVE-2008-1891.yml
+++ b/rubies/ruby/CVE-2008-1891.yml
@@ -15,7 +15,7 @@ description: |
   and the :DocumentRoot option.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.8.5.231
-- ~> 1.8.6.230
-- ~> 1.8.7.22
-- '>= 1.9.0.2'
+  - "~> 1.8.5.231"
+  - "~> 1.8.6.230"
+  - "~> 1.8.7.22"
+  - ">= 1.9.0.2"
diff --git a/rubies/ruby/CVE-2008-2376.yml b/rubies/ruby/CVE-2008-2376.yml
index 938926ec2e..9bcb46cad2 100644
--- a/rubies/ruby/CVE-2008-2376.yml
+++ b/rubies/ruby/CVE-2008-2376.yml
@@ -13,6 +13,6 @@ description: |
   related integer overflows.
 cvss_v2: 7.5
 patched_versions:
-- ~> 1.8.6.286
-- ~> 1.8.7.71
-- '>= 1.9.0'
+  - "~> 1.8.6.286"
+  - "~> 1.8.7.71"
+  - ">= 1.9.0"
diff --git a/rubies/ruby/CVE-2008-2662.yml b/rubies/ruby/CVE-2008-2662.yml
index d9853a4538..f10cf9ce87 100644
--- a/rubies/ruby/CVE-2008-2662.yml
+++ b/rubies/ruby/CVE-2008-2662.yml
@@ -2,20 +2,31 @@
 engine: ruby
 cve: 2008-2662
 osvdb: 46550
-url: http://www.osvdb.org/show/osvdb/46550
-title: 'CVE-2008-2662 ruby: Integer overflows in rb_str_buf_append()'
+ghsa: 6wwf-x53r-5qqq
+url: https://rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities
+title: "CVE-2008-2662 ruby: Integer overflows in rb_str_buf_append()"
 date: 2008-06-20
-description: 'Multiple integer overflows in the rb_str_buf_append function in Ruby
-  1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before
-  1.8.7-p22, and 1.9.0 before 1.9.0-2 allow context-dependent attackers to execute
-  arbitrary code or cause a denial of service via unknown vectors that trigger memory
-  corruption, a different issue than CVE-2008-2663, CVE-2008-2664, and CVE-2008-2725.  NOTE:
-  as of 20080624, there has been inconsistent usage of multiple CVE identifiers related
-  to Ruby. This CVE description should be regarded as authoritative, although it is
-  likely to change.'
+description: |
+  Multiple integer overflows in the rb_str_buf_append function in Ruby
+  1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230,
+  1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allow context-dependent
+  attackers to execute arbitrary code or cause a denial of service via
+  unknown vectors that trigger memory corruption, a different issue
+  than CVE-2008-2663, CVE-2008-2664, and CVE-2008-2725.
+
+  NOTE: As of 20080624, there has been inconsistent usage of multiple
+  CVE identifiers related to Ruby. This CVE description should be
+  regarded as authoritative, although it is likely to change.
 cvss_v2: 10.0
 patched_versions:
-- ~> 1.8.5.231
-- ~> 1.8.6.230
-- ~> 1.8.7.22
-- '>= 1.9.0.2'
+  - "~> 1.8.5.231"
+  - "~> 1.8.6.230"
+  - "~> 1.8.7.22"
+  - ">= 1.9.0.2"
+related:
+  url:
+    - https://rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities
+    - https://nvd.nist.gov/vuln/detail/CVE-2008-2662
+    - https://github.com/advisories/GHSA-6wwf-x53r-5qqq
+    - https://github.com/advisories/GHSA-c4h6-p7gp-39x2
+    - http://www.osvdb.org/show/osvdb/46550
diff --git a/rubies/ruby/CVE-2008-2663.yml b/rubies/ruby/CVE-2008-2663.yml
index 378e59d67b..77c655a5ef 100644
--- a/rubies/ruby/CVE-2008-2663.yml
+++ b/rubies/ruby/CVE-2008-2663.yml
@@ -2,19 +2,30 @@
 engine: ruby
 cve: 2008-2663
 osvdb: 46551
-url: http://www.osvdb.org/show/osvdb/46551
-title: 'CVE-2008-2663 ruby: Integer overflows in rb_ary_store()'
+ghsa: 8rh4-h2wx-5jpx
+url: https://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities
+title: "CVE-2008-2663 ruby: Integer overflows in rb_ary_store()"
 date: 2008-06-20
-description: 'Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4
-  and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before
-  1.8.7-p22 allow context-dependent attackers to execute arbitrary code or cause a
-  denial of service via unknown vectors, a different issue than CVE-2008-2662, CVE-2008-2664,
-  and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple
-  CVE identifiers related to Ruby. The CVE description should be regarded as authoritative,
-  although it is likely to change.'
+description: |
+  Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4
+  and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and
+  1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute
+  arbitrary code or cause a denial of service via unknown vectors, a
+  different issue than CVE-2008-2662, CVE-2008-2664, and CVE-2008-2725.
+
+  NOTE: As of 20080624, there has been inconsistent usage of multiple
+  CVE identifiers related to Ruby. The CVE description should be
+  regarded as authoritative, although it is likely to change.'
 cvss_v2: 10.0
 patched_versions:
-- ~> 1.8.5.231
-- ~> 1.8.6.230
-- ~> 1.8.7.22
-- '>= 1.9.0.2'
+  - "~> 1.8.5.231"
+  - "~> 1.8.6.230"
+  - "~> 1.8.7.22"
+  - ">= 1.9.0.2"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities
+    - https://nvd.nist.gov/vuln/detail/CVE-2008-2663
+    - https://github.com/advisories/GHSA-8rh4-h2wx-5jpx
+    - https://github.com/advisories/GHSA-c4h6-p7gp-39x2
+    - http://www.osvdb.org/show/osvdb/46551
diff --git a/rubies/ruby/CVE-2008-2664.yml b/rubies/ruby/CVE-2008-2664.yml
index 7f2b966be9..400f024cbf 100644
--- a/rubies/ruby/CVE-2008-2664.yml
+++ b/rubies/ruby/CVE-2008-2664.yml
@@ -1,20 +1,32 @@
 ---
 engine: ruby
 cve: 2008-2664
+ghsa: c4h6-p7gp-39x2
 osvdb: 46552
-url: http://www.osvdb.org/show/osvdb/46552
-title: 'CVE-2008-2664 ruby: Unsafe use of alloca in rb_str_format()'
+url: https://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities
+title: "CVE-2008-2664 ruby: Unsafe use of alloca in rb_str_format()"
 date: 2008-06-20
-description: 'The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231,
-  1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows
-  context-dependent attackers to trigger memory corruption via unspecified vectors
-  related to alloca, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2725.  NOTE:
-  as of 20080624, there has been inconsistent usage of multiple CVE identifiers related
-  to Ruby. The CVE description should be regarded as authoritative, although it is
-  likely to change.'
+description: |
+  The rb_str_format function in Ruby 1.8.4 and earlier,
+  1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230,
+  1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows
+  context-dependent attackers to trigger memory corruption via
+  unspecified vectors related to alloca, a different issue than
+  CVE-2008-2662, CVE-2008-2663, and CVE-2008-2725.
+
+  NOTE: As of 20080624, there has been inconsistent usage of
+  multiple CVE identifiers related to Ruby. The CVE description
+  should be regarded as authoritative, although it is likely to change.
 cvss_v2: 7.8
 patched_versions:
-- ~> 1.8.5.231
-- ~> 1.8.6.230
-- ~> 1.8.7.22
-- '>= 1.9.0.2'
+  - "~> 1.8.5.231"
+  - "~> 1.8.6.230"
+  - "~> 1.8.7.22"
+  - ">= 1.9.0.2"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities
+    - https://rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities
+    - https://nvd.nist.gov/vuln/detail/CVE-2008-2664
+    - https://github.com/advisories/GHSA-c4h6-p7gp-39x2
+    - http://www.osvdb.org/show/osvdb/46552
diff --git a/rubies/ruby/CVE-2008-2725.yml b/rubies/ruby/CVE-2008-2725.yml
index 4994ab8843..93268814b3 100644
--- a/rubies/ruby/CVE-2008-2725.yml
+++ b/rubies/ruby/CVE-2008-2725.yml
@@ -1,21 +1,32 @@
 ---
 engine: ruby
 cve: 2008-2725
+ghsa: 924x-9756-qq8p
 osvdb: 46553
-url: http://www.osvdb.org/show/osvdb/46553
-title: 'CVE-2008-2725 ruby: integer overflow in rb_ary_splice/update/replace() - REALLOC_N'
+url: https://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities
+title: "CVE-2008-2725 ruby: integer overflow in rb_ary_splice/update/replace() - REALLOC_N"
 date: 2008-06-20
-description: 'Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and
-  earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22;
-  and (2) the rb_ary_replace function in 1.6.x allows context-dependent attackers
-  to trigger memory corruption via unspecified vectors, aka the "REALLOC_N" variant,
-  a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2664.  NOTE: as
-  of 20080624, there has been inconsistent usage of multiple CVE identifiers related
-  to Ruby. The CVE description should be regarded as authoritative, although it is
-  likely to change.'
+description: |
+  Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4
+  and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230,
+  and 1.8.7 before 1.8.7-p22; and (2) the rb_ary_replace function
+  in 1.6.x allows context-dependent attackers to trigger memory
+  corruption via unspecified vectors, aka the "REALLOC_N" variant,
+  a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2664.
+
+  NOTE: As  of 20080624, there has been inconsistent usage of multiple
+  CVE identifiers related to Ruby. The CVE description should be
+  regarded as authoritative, although it is likely to change.
 cvss_v2: 7.8
 patched_versions:
-- ~> 1.8.5.231
-- ~> 1.8.6.230
-- ~> 1.8.7.22
-- '>= 1.9.0.2'
+  - "~> 1.8.5.231"
+  - "~> 1.8.6.230"
+  - "~> 1.8.7.22"
+  - ">= 1.9.0.2"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities
+    - https://rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities
+    - https://github.com/advisories/GHSA-924x-9756-qq8p
+    - https://github.com/advisories/GHSA-c4h6-p7gp-39x2
+    - http://www.osvdb.org/show/osvdb/46553
diff --git a/rubies/ruby/CVE-2008-2726.yml b/rubies/ruby/CVE-2008-2726.yml
index 586f662dba..cdb968f0de 100644
--- a/rubies/ruby/CVE-2008-2726.yml
+++ b/rubies/ruby/CVE-2008-2726.yml
@@ -1,21 +1,31 @@
 ---
 engine: ruby
 cve: 2008-2726
+ghsa: v2mw-g73g-923h
 osvdb: 46554
-url: http://www.osvdb.org/show/osvdb/46554
-title: 'CVE-2008-2726 ruby: integer overflow in rb_ary_splice/update/replace() - beg
-  + rlen'
+url: https://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities
+title: "CVE-2008-2726 ruby: integer overflow in rb_ary_splice/update/replace() - beg + rlen"
 date: 2008-06-20
-description: 'Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and
-  earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22,
-  and 1.9.0 before 1.9.0-2; and (2) the rb_ary_replace function in 1.6.x allows context-dependent
-  attackers to trigger memory corruption, aka the "beg + rlen" issue.  NOTE: as of
-  20080624, there has been inconsistent usage of multiple CVE identifiers related
-  to Ruby. The CVE description should be regarded as authoritative, although it is
-  likely to change.'
+description: |
+  Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4
+  and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230,
+  1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2; and (2) the
+  rb_ary_replace function in 1.6.x allows context-dependent
+  attackers to trigger memory corruption, aka the "beg + rlen" issue.
+
+  NOTE: As of 20080624, there has been inconsistent usage of multiple
+  CVE identifiers related to Ruby. The CVE description should be
+  regarded as authoritative, although it is likely to change.
 cvss_v2: 7.8
 patched_versions:
-- ~> 1.8.5.231
-- ~> 1.8.6.230
-- ~> 1.8.7.22
-- '>= 1.9.0.2'
+  - "~> 1.8.5.231"
+  - "~> 1.8.6.230"
+  - "~> 1.8.7.22"
+  - ">= 1.9.0.2"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities
+    - https://rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities
+    - https://nvd.nist.gov/vuln/detail/CVE-2008-2726
+    - https://github.com/advisories/GHSA-v2mw-g73g-923h
+    - http://www.osvdb.org/show/osvdb/46554
diff --git a/rubies/ruby/CVE-2008-3443.yml b/rubies/ruby/CVE-2008-3443.yml
index e06724e501..c344e854ec 100644
--- a/rubies/ruby/CVE-2008-3443.yml
+++ b/rubies/ruby/CVE-2008-3443.yml
@@ -12,6 +12,6 @@ description: |
   failure, and as demonstrated against Webrick.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.8.6.287
-- ~> 1.8.7.72
-- '>= 1.9.0'
+  - "~> 1.8.6.287"
+  - "~> 1.8.7.72"
+  - ">= 1.9.0"
diff --git a/rubies/ruby/CVE-2008-3655.yml b/rubies/ruby/CVE-2008-3655.yml
index 3877d760bc..8bf59396f0 100644
--- a/rubies/ruby/CVE-2008-3655.yml
+++ b/rubies/ruby/CVE-2008-3655.yml
@@ -13,6 +13,6 @@ description: |
   safe levels 1 through 3.
 cvss_v2: 7.5
 patched_versions:
-- ~> 1.8.6.287
-- ~> 1.8.7.72
-- '>= 1.9.0'
+  - "~> 1.8.6.287"
+  - "~> 1.8.7.72"
+  - ">= 1.9.0"
diff --git a/rubies/ruby/CVE-2008-3656.yml b/rubies/ruby/CVE-2008-3656.yml
index 49cdb97a61..0278b61a33 100644
--- a/rubies/ruby/CVE-2008-3656.yml
+++ b/rubies/ruby/CVE-2008-3656.yml
@@ -14,6 +14,6 @@ description: |
   expression.
 cvss_v2: 7.8
 patched_versions:
-- ~> 1.8.6.287
-- ~> 1.8.7.72
-- '>= 1.9.0'
+  - "~> 1.8.6.287"
+  - "~> 1.8.7.72"
+  - ">= 1.9.0"
diff --git a/rubies/ruby/CVE-2008-3657.yml b/rubies/ruby/CVE-2008-3657.yml
index 9cc6cf7ae8..997b08e70e 100644
--- a/rubies/ruby/CVE-2008-3657.yml
+++ b/rubies/ruby/CVE-2008-3657.yml
@@ -11,6 +11,6 @@ description: |
   execute dangerous functions by accessing a library using DL.dlopen.
 cvss_v2: 7.5
 patched_versions:
-- ~> 1.8.6.287
-- ~> 1.8.7.72
-- '>= 1.9.0'
+  - "~> 1.8.6.287"
+  - "~> 1.8.7.72"
+  - ">= 1.9.0"
diff --git a/rubies/ruby/CVE-2008-3790.yml b/rubies/ruby/CVE-2008-3790.yml
index 73f839221a..42ec625e7a 100644
--- a/rubies/ruby/CVE-2008-3790.yml
+++ b/rubies/ruby/CVE-2008-3790.yml
@@ -1,14 +1,24 @@
 ---
 engine: ruby
 cve: 2008-3790
+ghsa: 96jc-f6m3-pf2w
 osvdb: 47753
-url: http://www.osvdb.org/show/osvdb/47753
-title: 'CVE-2008-3790 ruby: DoS vulnerability in the REXML module'
+url: https://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml
+title: "CVE-2008-3790 ruby: DoS vulnerability in the REXML module"
 date: 2008-08-25
-description: The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72,
-  and 1.9 allows context-dependent attackers to cause a denial of service (CPU consumption)
-  via an XML document with recursively nested entities, aka an "XML entity explosion."
+description: |
+  The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through
+  1.8.7-p72, and 1.9 allows context-dependent attackers to cause
+  a denial of service (CPU consumption) via an XML document with
+  recursively nested entities, aka an "XML entity explosion.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.8.7.160
-- '>= 1.9.1'
+  - "~> 1.8.7.160"
+  - ">= 1.9.1"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml
+    - https://groups.google.com/g/comp.lang.ruby/c/GfaeiggfwNE
+    - https://nvd.nist.gov/vuln/detail/CVE-2008-3790
+    - https://github.com/advisories/GHSA-96jc-f6m3-pf2w
+    - http://www.osvdb.org/show/osvdb/47753
diff --git a/rubies/ruby/CVE-2008-3905.yml b/rubies/ruby/CVE-2008-3905.yml
index 8d23731f8f..1edf523e61 100644
--- a/rubies/ruby/CVE-2008-3905.yml
+++ b/rubies/ruby/CVE-2008-3905.yml
@@ -12,6 +12,6 @@ description: |
   CVE-2008-1447.
 cvss_v2: 5.8
 patched_versions:
-- ~> 1.8.6.287
-- ~> 1.8.7.72
-- '>= 1.9.0'
+  - "~> 1.8.6.287"
+  - "~> 1.8.7.72"
+  - ">= 1.9.0"
diff --git a/rubies/ruby/CVE-2009-0642.yml b/rubies/ruby/CVE-2009-0642.yml
index 4a3fe1f829..4d75791891 100644
--- a/rubies/ruby/CVE-2009-0642.yml
+++ b/rubies/ruby/CVE-2009-0642.yml
@@ -11,7 +11,7 @@ description: |
   involving a revoked certificate.
 cvss_v2: 6.8
 patched_versions:
-- ~> 1.8.6.369
-- ~> 1.8.7.173
-- ~> 1.9.1.129
-- '>= 1.9.2.preview.1'
+  - "~> 1.8.6.369"
+  - "~> 1.8.7.173"
+  - "~> 1.9.1.129"
+  - ">= 1.9.2.preview.1"
diff --git a/rubies/ruby/CVE-2009-1904.yml b/rubies/ruby/CVE-2009-1904.yml
index b9e595da96..89e0fff5b3 100644
--- a/rubies/ruby/CVE-2009-1904.yml
+++ b/rubies/ruby/CVE-2009-1904.yml
@@ -1,15 +1,23 @@
 ---
 engine: ruby
 cve: 2009-1904
+ghsa: v74x-h8vc-p3j5
 osvdb: 55031
-url: http://www.osvdb.org/show/osvdb/55031
-title: 'CVE-2009-1904 ruby: DoS vulnerability in BigDecimal'
+url: https://www.ruby-lang.org/en/news/2009/06/09/dos-vulnerability-in-bigdecimal
+title: "CVE-2009-1904 ruby: DoS vulnerability in BigDecimal"
 date: 2009-06-10
-description: The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173
-  allows context-dependent attackers to cause a denial of service (application crash)
-  via a string argument that represents a large number, as demonstrated by an attempted
-  conversion to the Float data type.
+description: |
+  The BigDecimal library in Ruby 1.8.6 before p369 and 1.8.7 before p173
+  allows context-dependent attackers to cause a denial of service
+  (application crash) via a string argument that represents a large
+  number, as demonstrated by an attempted conversion to the Float data type.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.8.6.369
-- '>= 1.8.7.174'
+  - "~> 1.8.6.369"
+  - ">= 1.8.7.174"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2009/06/09/dos-vulnerability-in-bigdecimal
+    - https://nvd.nist.gov/vuln/detail/CVE-2009-1904
+    - https://github.com/advisories/GHSA-v74x-h8vc-p3j5
+    - http://www.osvdb.org/show/osvdb/55031
diff --git a/rubies/ruby/CVE-2009-4124.yml b/rubies/ruby/CVE-2009-4124.yml
index dc84baf072..d16b42d8ca 100644
--- a/rubies/ruby/CVE-2009-4124.yml
+++ b/rubies/ruby/CVE-2009-4124.yml
@@ -1,15 +1,25 @@
 ---
 engine: ruby
 cve: 2009-4124
+ghsa: 9mvm-2xp2-9wmw
 osvdb: 60880
-url: http://www.osvdb.org/show/osvdb/60880
-title: 'CVE-2009-4124 ruby: Heap-based buffer overflow in the rb_str_justify() function'
+url: https://www.ruby-lang.org/en/news/2009/12/07/heap-overflow-in-string
+title: "CVE-2009-4124 ruby: Heap-based buffer overflow in the rb_str_justify() function"
 date: 2009-12-07
-description: 'Heap-based buffer overflow in the rb_str_justify function in string.c
-  in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent attackers to execute arbitrary
-  code via unspecified vectors involving (1) String#ljust, (2) String#center, or (3)
-  String#rjust.  NOTE: some of these details are obtained from third party information.'
+description: |
+  Heap-based buffer overflow in the rb_str_justify function in
+  string.c in Ruby 1.9.1 before 1.9.1-p376 allows context-dependent
+  attackers to execute arbitrary code via unspecified vectors involving
+  (1) String#ljust, (2) String#center, or (3) String#rjust.
+
+  NOTE: some of these details are obtained from third party information.
 cvss_v2: 10.0
 patched_versions:
-- ~> 1.8.0
-- '>= 1.9.1.376'
+  - "~> 1.8.0"
+  - ">= 1.9.1.376"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2009/12/07/heap-overflow-in-string
+    - https://nvd.nist.gov/vuln/detail/CVE-2009-4124
+    - https://github.com/advisories/GHSA-9mvm-2xp2-9wmw
+    - http://www.osvdb.org/show/osvdb/60880
diff --git a/rubies/ruby/CVE-2009-4492.yml b/rubies/ruby/CVE-2009-4492.yml
index 16243c81ab..6ecf5619a4 100644
--- a/rubies/ruby/CVE-2009-4492.yml
+++ b/rubies/ruby/CVE-2009-4492.yml
@@ -2,16 +2,25 @@
 engine: ruby
 cve: 2009-4492
 osvdb: 61774
-url: http://www.osvdb.org/show/osvdb/61774
+url: http://www.ruby-lang.org/en/news/2010/01/10/webrick-escape-sequence-injection
 title: CVE-2009-4492 ruby WEBrick log escape sequence
 date: 2010-01-10
-description: WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel
+description: |
+  WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel
   248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file
   without sanitizing non-printable characters, which might allow remote attackers
   to modify a window's title, or possibly execute arbitrary commands or overwrite
   files, via an HTTP request containing an escape sequence for a terminal emulator.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.8.6.388
-- ~> 1.8.7.249
-- '>= 1.9.1.378'
+  - "~> 1.8.6.388"
+  - "~> 1.8.7.249"
+  - ">= 1.9.1.378"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2009-4492
+    - http://www.ruby-lang.org/en/news/2010/01/10/webrick-escape-sequence-injection
+    - https://access.redhat.com/errata/RHSA-2011:0909
+    - https://access.redhat.com/errata/RHSA-2011:0909
+    - http://www.ush.it/team/ush/hack_httpd_escape/adv.txt
+    - http://www.osvdb.org/show/osvdb/61774
diff --git a/rubies/ruby/CVE-2009-5147.yml b/rubies/ruby/CVE-2009-5147.yml
index 20725b15b7..39165e605f 100644
--- a/rubies/ruby/CVE-2009-5147.yml
+++ b/rubies/ruby/CVE-2009-5147.yml
@@ -8,7 +8,7 @@ date: 2009-05-12
 description: |
   DL::dlopen could open a library with tainted library name even if $SAFE > 0
 unaffected_versions:
-- < 1.9.1
-- '>= 1.9.2'
+  - "< 1.9.1"
+  - ">= 1.9.2"
 patched_versions:
-- ~> 1.9.1.129
+  - "~> 1.9.1.129"
diff --git a/rubies/ruby/CVE-2010-0541.yml b/rubies/ruby/CVE-2010-0541.yml
index 45eb45ec71..73e33c8202 100644
--- a/rubies/ruby/CVE-2010-0541.yml
+++ b/rubies/ruby/CVE-2010-0541.yml
@@ -1,16 +1,24 @@
 ---
 engine: ruby
 cve: 2010-0541
+ghsa: h9r2-943c-qg8v
 osvdb: 65556
-url: http://www.osvdb.org/show/osvdb/65556
+url: https://support.apple.com/en-us/HT4188
 title: CVE-2010-0541 Ruby WEBrick javascript injection flaw
 date: 2010-06-15
-description: Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in
-  Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to
-  inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error
-  page.
+description: |
+  Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server
+  in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows
+  remote attackers to inject arbitrary web script or HTML via a
+  crafted URI that triggers a UTF-7 error page.
 cvss_v2: 4.3
 patched_versions:
-- ~> 1.8.6.420
-- ~> 1.8.7.302
-- '>= 1.9.1.430'
+  - "~> 1.8.6.420"
+  - "~> 1.8.7.302"
+  - ">= 1.9.1.430"
+related:
+  url:
+    - https://support.apple.com/en-us/HT4188
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-0541
+    - https://github.com/advisories/GHSA-h9r2-943c-qg8v
+    - http://www.osvdb.org/show/osvdb/65556
diff --git a/rubies/ruby/CVE-2010-2489.yml b/rubies/ruby/CVE-2010-2489.yml
index 709e74a4a3..c155e25b5c 100644
--- a/rubies/ruby/CVE-2010-2489.yml
+++ b/rubies/ruby/CVE-2010-2489.yml
@@ -1,17 +1,26 @@
 ---
 engine: ruby
 cve: 2010-2489
+ghsa: pj28-mx3m-9668
 osvdb: 66040
-url: http://www.osvdb.org/show/osvdb/66040
+url: https://www.ruby-lang.org/en/news/2010/07/02/ruby-1-9-1-p429-is-released
 title: Ruby on Windows ARGF.inplace_mode Variable Local Overflow
 date: 2010-07-02
 description: |
-  Buffer overflow in Ruby 1.9.x before 1.9.1-p429
-  on Windows might allow local users to gain privileges via a crafted ARGF.inplace_mode
-  value that is not properly handled when constructing the filenames of the backup
-  files.
+  Buffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might
+  allow local users to gain privileges via a crafted ARGF.inplace_mode
+  value that is not properly handled when constructing the filenames
+  of the backup files.
 cvss_v2: 7.2
 patched_versions:
-- ~> 1.8.7
-- ~> 1.9.1.429
-- '>= 1.9.2'
+  - "~> 1.8.7"
+  - "~> 1.9.1.429"
+  - ">= 1.9.2"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2010/07/02/ruby-1-9-1-p429-is-released
+    - https://www.openwall.com/lists/oss-security/2010/07/02/1
+    - https://www.openwall.com/lists/oss-security/2010/07/02/10
+    - https://github.com/advisories/GHSA-pj28-mx3m-9668
+    - https://nvd.nist.gov/vuln/detail/cve-2010-2489
+    - http://www.osvdb.org/show/osvdb/66040
diff --git a/rubies/ruby/CVE-2011-0188.yml b/rubies/ruby/CVE-2011-0188.yml
index 7d918e2aa0..e4066823b8 100644
--- a/rubies/ruby/CVE-2011-0188.yml
+++ b/rubies/ruby/CVE-2011-0188.yml
@@ -13,5 +13,5 @@ description: |
   64-bit process, related to an "integer truncation issue."
 cvss_v2: 6.8
 patched_versions:
-- ~> 1.8.7.370
-- '>= 1.9.3.preview.1'
+  - "~> 1.8.7.370"
+  - ">= 1.9.3.preview.1"
diff --git a/rubies/ruby/CVE-2011-1004.yml b/rubies/ruby/CVE-2011-1004.yml
index 6cf7675fff..7f3f0c9843 100644
--- a/rubies/ruby/CVE-2011-1004.yml
+++ b/rubies/ruby/CVE-2011-1004.yml
@@ -1,16 +1,25 @@
 ---
 engine: ruby
 cve: 2011-1004
+ghsa: 45wv-gc6w-fq7m
 osvdb: 70958
-url: http://www.osvdb.org/show/osvdb/70958
-title: 'CVE-2011-1004 Ruby: Symlink race condition by removing directory trees in
-  fileutils module'
+url: https://www.ruby-lang.org/en/news/2011/02/18/fileutils-is-vulnerable-to-symlink-race-attacks
+title: "CVE-2011-1004 Ruby: Symlink race condition by removing
+  directory trees in fileutils module"
 date: 2011-02-19
-description: The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420,
-  1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136,
-  and 1.9.3dev allows local users to delete arbitrary files via a symlink attack.
+description: |
+  The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420,
+  1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430,
+  1.9.2 through 1.9.2-136, and 1.9.3dev allows local users
+  to delete arbitrary files via a symlink attack.
 cvss_v2: 6.3
 patched_versions:
-- ~> 1.8.7.334
-- ~> 1.9.1.431
-- '>= 1.9.2.180'
+  - "~> 1.8.7.334"
+  - "~> 1.9.1.431"
+  - ">= 1.9.2.180"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2011/02/18/fileutils-is-vulnerable-to-symlink-race-attacks
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-1004
+    - https://github.com/advisories/GHSA-45wv-gc6w-fq7m
+    - http://www.osvdb.org/show/osvdb/70958
diff --git a/rubies/ruby/CVE-2011-1005.yml b/rubies/ruby/CVE-2011-1005.yml
index a4957e5839..9c04cf9f94 100644
--- a/rubies/ruby/CVE-2011-1005.yml
+++ b/rubies/ruby/CVE-2011-1005.yml
@@ -1,13 +1,23 @@
 ---
 engine: ruby
 cve: 2011-1005
+ghsa: h2rc-3ppq-6pjg
 osvdb: 70957
-url: http://www.osvdb.org/show/osvdb/70957
-title: 'CVE-2011-1005 Ruby: Untrusted codes able to modify arbitrary strings'
+url: https://www.ruby-lang.org/en/news/2011/02/18/exception-methods-can-bypass-safe
+title: "CVE-2011-1005 Ruby: Untrusted codes able to modify arbitrary strings"
 date: 2011-02-18
-description: The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through
-  1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via
-  the Exception#to_s method, as demonstrated by changing an intended pathname.
-cvss_v2: 4.3
+description: |
+  The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through
+  1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify
+  strings via the Exception#to_s method, as demonstrated by changing
+  an intended pathname.
+cvss_v2: 5.0
 patched_versions:
-- '>= 1.8.7.334'
+  - ">= 1.8.7.334"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2011/02/18/exception-methods-can-bypass-safe
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-1005
+    - https://github.com/advisories/GHSA-h2rc-3ppq-6pjg
+    - http://www.osvdb.org/show/osvdb/70957
+notes: "Changed cvss_v2 per NVD url"
diff --git a/rubies/ruby/CVE-2011-2686.yml b/rubies/ruby/CVE-2011-2686.yml
index 8718d81a03..6d19137e4f 100644
--- a/rubies/ruby/CVE-2011-2686.yml
+++ b/rubies/ruby/CVE-2011-2686.yml
@@ -12,6 +12,6 @@ description: |
   exists because of a regression during Ruby 1.8.6 development.
 cvss_v2: 5.0
 unaffected_versions:
-- < 1.8.6.399
+  - "< 1.8.6.399"
 patched_versions:
-- '>= 1.8.7.352'
+  - ">= 1.8.7.352"
diff --git a/rubies/ruby/CVE-2011-2705.yml b/rubies/ruby/CVE-2011-2705.yml
index 33a79dea04..a7a03d9e81 100644
--- a/rubies/ruby/CVE-2011-2705.yml
+++ b/rubies/ruby/CVE-2011-2705.yml
@@ -12,5 +12,5 @@ description: |
   in an earlier process with the same PID.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.8.7.352
-- '>= 1.9.2.290'
+  - "~> 1.8.7.352"
+  - ">= 1.9.2.290"
diff --git a/rubies/ruby/CVE-2011-3009.yml b/rubies/ruby/CVE-2011-3009.yml
index 8eed14a3f7..65670e4846 100644
--- a/rubies/ruby/CVE-2011-3009.yml
+++ b/rubies/ruby/CVE-2011-3009.yml
@@ -2,7 +2,7 @@
 engine: ruby
 cve: 2011-3009
 url: https://osdir.com/ml/lang-ruby-core/2011-01/msg00917.html
-title: |
+title:
   Ruby Properly initialize the random number generator when forking new process
 date: 2011-07-02
 description: |
@@ -12,6 +12,6 @@ description: |
   different child process, a related issue to CVE-2003-0900.
 cvss_v2: 5.0
 unaffected_versions:
-- '>= 1.9.2'
+  - ">= 1.9.2"
 patched_versions:
-- '>= 1.8.6.114'
+  - ">= 1.8.6.114"
diff --git a/rubies/ruby/CVE-2011-3389.yml b/rubies/ruby/CVE-2011-3389.yml
deleted file mode 100644
index 78a07d192c..0000000000
--- a/rubies/ruby/CVE-2011-3389.yml
+++ /dev/null
@@ -1,17 +0,0 @@
----
-engine: ruby
-cve: 2011-3389
-osvdb: 74829
-url: http://www.osvdb.org/show/osvdb/74829
-title: 'CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)'
-date: 2011-08-31
-description: The SSL protocol, as used in certain configurations in Microsoft Windows
-  and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other
-  products, encrypts data by using CBC mode with chained initialization vectors, which
-  allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise
-  chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript
-  code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3)
-  the Silverlight WebClient API, aka a "BEAST" attack.
-cvss_v2: 10.0
-patched_versions:
-- '>= 1.8.7.358'
diff --git a/rubies/ruby/CVE-2011-4815.yml b/rubies/ruby/CVE-2011-4815.yml
index c3d5372276..17e5ec4fef 100644
--- a/rubies/ruby/CVE-2011-4815.yml
+++ b/rubies/ruby/CVE-2011-4815.yml
@@ -1,14 +1,24 @@
 ---
 engine: ruby
 cve: 2011-4815
+ghsa: xpr8-vpc7-7vfc
 osvdb: 78118
-url: http://www.osvdb.org/show/osvdb/78118
-title: 'CVE-2011-4815 ruby: hash table collisions CPU usage DoS (oCERT-2011-003)'
+url: https://www.ruby-lang.org/en/news/2011/12/28/denial-of-service-attack-was-found-for-rubys-hash-algorithm-cve-2011-4815
+title: "CVE-2011-4815 ruby: hash table collisions CPU usage DoS (oCERT-2011-003)"
 date: 2011-12-28
-description: Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting
-  the ability to trigger hash collisions predictably, which allows context-dependent
-  attackers to cause a denial of service (CPU consumption) via crafted input to an
-  application that maintains a hash table.
+description: |
+  Ruby (aka CRuby) before 1.8.7-p357 computes hash values without
+  restricting the ability to trigger hash collisions predictably,
+  which allows context-dependent attackers to cause a denial of
+  service (CPU consumption) via crafted input to an application
+  that maintains a hash table.
 cvss_v2: 7.8
 patched_versions:
-- '>= 1.8.7.357'
+  - ">= 1.8.7.357"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2011/12/28/denial-of-service-attack-was-found-for-rubys-hash-algorithm-cve-2011-4815
+    - https://ocert.org/advisories/ocert-2011-003.html
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-4815
+    - https://github.com/advisories/GHSA-xpr8-vpc7-7vfc
+    - http://www.osvdb.org/show/osvdb/78118
diff --git a/rubies/ruby/CVE-2012-4464.yml b/rubies/ruby/CVE-2012-4464.yml
index 839f42af57..7a3352ea92 100644
--- a/rubies/ruby/CVE-2012-4464.yml
+++ b/rubies/ruby/CVE-2012-4464.yml
@@ -13,5 +13,5 @@ description: |
   regression.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.8.7.371
-- '>= 1.9.3.286'
+  - "~> 1.8.7.371"
+  - ">= 1.9.3.286"
diff --git a/rubies/ruby/CVE-2012-4466.yml b/rubies/ruby/CVE-2012-4466.yml
index 80446c457e..1c3ac05838 100644
--- a/rubies/ruby/CVE-2012-4466.yml
+++ b/rubies/ruby/CVE-2012-4466.yml
@@ -12,5 +12,5 @@ description: |
   CVE-2011-1005.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.8.7.371
-- '>= 1.9.3.286'
+  - "~> 1.8.7.371"
+  - ">= 1.9.3.286"
diff --git a/rubies/ruby/CVE-2012-4481.yml b/rubies/ruby/CVE-2012-4481.yml
index f4d3babd8e..5cf07899ba 100644
--- a/rubies/ruby/CVE-2012-4481.yml
+++ b/rubies/ruby/CVE-2012-4481.yml
@@ -2,7 +2,7 @@
 engine: ruby
 cve: 2012-4481
 url: http://www.openwall.com/lists/oss-security/2012/10/05/2
-title: |
+title:
   Ruby incomplete fix for CVE-2011-1005 for NameError#to_s method when used on
   objects
 date: 2012-10-05
@@ -12,4 +12,4 @@ description: |
   NOTE: this issue is due to an incomplete fix for CVE-2011-1005.
 cvss_v2: 4.3
 patched_versions:
-- '>= 1.8.7.371'
+  - ">= 1.8.7.371"
diff --git a/rubies/ruby/CVE-2012-4522.yml b/rubies/ruby/CVE-2012-4522.yml
index 1be59df7b2..42f8522bb1 100644
--- a/rubies/ruby/CVE-2012-4522.yml
+++ b/rubies/ruby/CVE-2012-4522.yml
@@ -1,15 +1,24 @@
 ---
 engine: ruby
 cve: 2012-4522
+ghsa: 6mch-f8jc-rpmr
 osvdb: 87917
-url: http://www.osvdb.org/show/osvdb/87917
-title: 'CVE-2012-4522 ruby: unintentional file creation caused by inserting an illegal
-  NUL character'
+url: https://www.ruby-lang.org/en/news/2012/10/12/poisoned-NUL-byte-vulnerability
+title: "CVE-2012-4522 ruby: unintentional file creation caused
+  by inserting an illegal NUL character"
 date: 2012-10-12
-description: The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel
-  286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files
-  in unexpected locations or with unexpected names via a NUL byte in a file path.
+description: |
+  The rb_get_path_check function in file.c in Ruby 1.9.3 before
+  patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent
+  attackers to create files in unexpected locations or with unexpected
+  names via a NUL byte in a file path.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.9.3.286
-- '>= 2.0.0'
+  - "~> 1.9.3.286"
+  - ">= 2.0.0"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2012/10/12/poisoned-NUL-byte-vulnerability
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-4522
+    - https://github.com/advisories/GHSA-6mch-f8jc-rpmr
+    - http://www.osvdb.org/show/osvdb/87917
diff --git a/rubies/ruby/CVE-2012-5371.yml b/rubies/ruby/CVE-2012-5371.yml
index f75996280a..b8adb0cf05 100644
--- a/rubies/ruby/CVE-2012-5371.yml
+++ b/rubies/ruby/CVE-2012-5371.yml
@@ -1,17 +1,28 @@
 ---
 engine: ruby
 cve: 2012-5371
+ghsa: phrv-cj28-9h57
 osvdb: 87863
-url: http://www.osvdb.org/show/osvdb/87863
-title: 'CVE-2012-5371 ruby: Murmur hash-flooding DoS flaw in ruby 1.9 (oCERT-2012-001)'
+url: https://www.ruby-lang.org/en/news/2012/11/09/ruby19-hashdos-cve-2012-5371
+title: "CVE-2012-5371 ruby: Murmur hash-flooding DoS flaw in ruby 1.9 (oCERT-2012-001)"
 date: 2012-11-23
-description: Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes
-  hash values without properly restricting the ability to trigger hash collisions
-  predictably, which allows context-dependent attackers to cause a denial of service
-  (CPU consumption) via crafted input to an application that maintains a hash table,
-  as demonstrated by a universal multicollision attack against a variant of the MurmurHash2
+description: |
+  Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes
+  hash values without properly restricting the ability to trigger hash
+  collisions predictably, which allows context-dependent attackers to
+  cause a denial of service (CPU consumption) via crafted input to an
+  application that maintains a hash table, as demonstrated by a universal
+  multicollision attack against a variant of the MurmurHash2
   algorithm, a different vulnerability than CVE-2011-4815.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.9.3.327
-- '>= 2.0.0'
+  - "~> 1.9.3.327"
+  - ">= 2.0.0"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2012/11/09/ruby19-hashdos-cve-2012-5371
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-5371
+    - http://ocert.org/advisories/ocert-2012-001.html
+    - https://seclists.org/oss-sec/2012/q4/352
+    - https://github.com/advisories/GHSA-phrv-cj28-9h57
+    - http://www.osvdb.org/show/osvdb/87863
diff --git a/rubies/ruby/CVE-2013-1821.yml b/rubies/ruby/CVE-2013-1821.yml
index 19b0038b31..d4c0c19292 100644
--- a/rubies/ruby/CVE-2013-1821.yml
+++ b/rubies/ruby/CVE-2013-1821.yml
@@ -1,14 +1,23 @@
 ---
 engine: ruby
 cve: 2013-1821
+ghsa: hgg7-cghq-xhf4
 osvdb: 90587
-url: http://www.osvdb.org/show/osvdb/90587
-title: 'CVE-2013-1821 ruby: entity expansion DoS vulnerability in REXML'
+url: https://www.ruby-lang.org/en/news/2013/02/22/rexml-dos-2013-02-22
+title: "CVE-2013-1821 ruby: entity expansion DoS vulnerability in REXML"
 date: 2013-02-22
-description: lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows
-  remote attackers to cause a denial of service (memory consumption and crash) via
-  crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.
+description: |
+  lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392
+  allows remote attackers to cause a denial of service (memory
+  consumption and crash) via crafted text nodes in an XML document,
+  aka an XML Entity Expansion (XEE) attack.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.9.3.392
-- '>= 2.0.0.0'
+  - "~> 1.9.3.392"
+  - ">= 2.0.0.0"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2013/02/22/rexml-dos-2013-02-22
+    - https://nvd.nist.gov/vuln/detail/CVE-2013-1821
+    - https://github.com/advisories/GHSA-hgg7-cghq-xhf4
+    - http://www.osvdb.org/show/osvdb/90587
diff --git a/rubies/ruby/CVE-2013-2065.yml b/rubies/ruby/CVE-2013-2065.yml
index 9208d873f5..8f9e90204a 100644
--- a/rubies/ruby/CVE-2013-2065.yml
+++ b/rubies/ruby/CVE-2013-2065.yml
@@ -1,16 +1,25 @@
 ---
 engine: ruby
 cve: 2013-2065
+ghsa: wh77-3w5g-7q6x
 osvdb: 93414
-url: http://www.osvdb.org/show/osvdb/93414
-title: 'CVE-2013-2065 Ruby: Object taint bypassing in DL and Fiddle'
+url: https://www.ruby-lang.org/en/news/2013/05/14/taint-bypass-dl-fiddle-cve-2013-2065
+title: "CVE-2013-2065 Ruby: Object taint bypassing in DL and Fiddle"
 date: 2013-05-14
-description: (1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0
-  before 2.0.0 patchlevel 195, do not perform taint checking for native functions,
-  which allows context-dependent attackers to bypass intended $SAFE level restrictions.
+description: |
+  (1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and
+  2.0 before 2.0.0 patchlevel 195, do not perform taint checking for
+  native functions, which allows context-dependent attackers to bypass
+  intended $SAFE level restrictions.
 cvss_v2: 6.4
 unaffected_versions:
-- ~> 1.8.0
+  - "~> 1.8.0"
 patched_versions:
-- ~> 1.9.3.426
-- '>= 2.0.0.195'
+  - "~> 1.9.3.426"
+  - ">= 2.0.0.195"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2013/05/14/taint-bypass-dl-fiddle-cve-2013-2065
+    - https://nvd.nist.gov/vuln/detail/CVE-2013-2065
+    - https://github.com/advisories/GHSA-wh77-3w5g-7q6x
+    - http://www.osvdb.org/show/osvdb/93414
diff --git a/rubies/ruby/CVE-2013-4073.yml b/rubies/ruby/CVE-2013-4073.yml
index efac2cee95..b40165d4d7 100644
--- a/rubies/ruby/CVE-2013-4073.yml
+++ b/rubies/ruby/CVE-2013-4073.yml
@@ -1,18 +1,29 @@
 ---
 engine: ruby
 cve: 2013-4073
+ghsa: 3gpq-xx45-4rr9
 osvdb: 94628
-url: http://www.osvdb.org/show/osvdb/94628
-title: 'CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client'
+url: https://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulnerability-in-openssl-client-cve-2013-4073
+title: "CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client"
 date: 2013-06-27
-description: The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb
-  in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247
-  does not properly handle a '\0' character in a domain name in the Subject Alternative
-  Name field of an X.509 certificate, which allows man-in-the-middle attackers to
-  spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification
+description: |
+  The OpenSSL::SSL.verify_certificate_identity function in
+  lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374,
+  1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247
+  does not properly handle a '\0' character in a domain name in
+  the Subject Alternative Name field of an X.509 certificate, which
+  allows man-in-the-middle attackers to spoof arbitrary SSL servers
+  via a crafted certificate issued by a legitimate Certification
   Authority, a related issue to CVE-2009-2408.
 cvss_v2: 6.8
 patched_versions:
-- ~> 1.8.7.373
-- ~> 1.9.3.447
-- '>= 2.0.0.246'
+  - "~> 1.8.7.374"
+  - "~> 1.9.3.448"
+  - ">= 2.0.0.247"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulnerability-in-openssl-client-cve-2013-4073
+    - https://nvd.nist.gov/vuln/detail/CVE-2013-4073
+    - https://github.com/advisories/GHSA-3gpq-xx45-4rr9
+    - http://www.osvdb.org/show/osvdb/94628
+notes: "Changed patched_versions per ruby-lang URL"
diff --git a/rubies/ruby/CVE-2013-4164.yml b/rubies/ruby/CVE-2013-4164.yml
index 31c29b54e5..efc912d0c3 100644
--- a/rubies/ruby/CVE-2013-4164.yml
+++ b/rubies/ruby/CVE-2013-4164.yml
@@ -1,17 +1,27 @@
 ---
 engine: ruby
 cve: 2013-4164
+ghsa: j98q-m2w8-57rc
 osvdb: 100113
-url: http://www.osvdb.org/show/osvdb/100113
-title: 'CVE-2013-4164 ruby: heap overflow in floating point parsing'
+url: https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164
+title: "CVE-2013-4164 ruby: heap overflow in floating point parsing"
 date: 2013-11-22
-description: Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before
-  2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 43780 allows context-dependent
-  attackers to cause a denial of service (segmentation fault) and possibly execute
-  arbitrary code via a string that is converted to a floating point value, as demonstrated
-  using (1) the to_f method or (2) JSON.parse.
+description: |
+  Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484,
+  2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before
+  revision 43780 allows context-dependent attackers to cause a denial
+  of service (segmentation fault) and possibly execute arbitrary code
+  via a string that is converted to a floating point value, as
+  demonstrated using (1) the to_f method or (2) JSON.parse.
 cvss_v2: 6.8
 patched_versions:
-- ~> 1.9.3.484
-- ~> 2.0.0.353
-- '>= 2.1.0.preview.2'
+  - "~> 1.9.3.484"
+  - "~> 2.0.0.353"
+  - "~> 2.1.0.preview.2"
+  - ">= 2.1.0"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164
+    - https://nvd.nist.gov/vuln/detail/CVE-2013-4164
+    - https://github.com/advisories/GHSA-j98q-m2w8-57rc
+    - http://www.osvdb.org/show/osvdb/100113
diff --git a/rubies/ruby/CVE-2014-2525.yml b/rubies/ruby/CVE-2014-2525.yml
index 71e22e1206..5de74ca573 100644
--- a/rubies/ruby/CVE-2014-2525.yml
+++ b/rubies/ruby/CVE-2014-2525.yml
@@ -1,14 +1,24 @@
 ---
 engine: ruby
 cve: 2014-2525
+ghsa: rffm-7xqq-h2v6
 osvdb: 105027
-url: http://www.osvdb.org/show/osvdb/105027
-title: 'CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs'
+url: https://www.ruby-lang.org/en/news/2014/03/29/heap-overflow-in-yaml-uri-escape-parsing-cve-2014-2525
+title: "CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs"
 date: 2014-03-26
-description: Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function
-  in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary
-  code via a long sequence of percent-encoded characters in a URI in a YAML file.
+description: |
+  Heap-based buffer overflow in the yaml_parser_scan_uri_escapes
+  function in LibYAML before 0.1.6 allows context-dependent attackers
+  to execute arbitrary code via a long sequence of percent-encoded
+  characters in a URI in a YAML file.
 cvss_v2: 6.8
 patched_versions:
-- ~> 2.0.0.481
-- '>= 2.1.2'
+  - "~> 2.0.0.481"
+  - ">= 2.1.2"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2014/03/29/heap-overflow-in-yaml-uri-escape-parsing-cve-2014-2525
+    - http://ocert.org/advisories/ocert-2014-003.html
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-2525
+    - https://github.com/advisories/GHSA-rffm-7xqq-h2v6
+    - http://www.osvdb.org/show/osvdb/105027
diff --git a/rubies/ruby/CVE-2014-3916.yml b/rubies/ruby/CVE-2014-3916.yml
index 18f4b92e98..08bd17899f 100644
--- a/rubies/ruby/CVE-2014-3916.yml
+++ b/rubies/ruby/CVE-2014-3916.yml
@@ -1,15 +1,25 @@
 ---
 engine: ruby
 cve: 2014-3916
+ghsa: 252h-69rw-g2rp
 osvdb: 107478
-url: http://www.osvdb.org/show/osvdb/107478
-title: 'CVE-2014-3916 ruby: DoS via long string in str_buf_cat()'
+url: https://vulners.com/rubygems/RUBY:RUBY-2014-3916-107478
+title: "CVE-2014-3916 ruby: DoS via long string in str_buf_cat()"
 date: 2014-04-07
-description: The str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows
-  context-dependent attackers to cause a denial of service (segmentation fault and
-  crash) via a long string.
+description: |
+  The str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and
+  2.1 allows context-dependent attackers to cause a denial of
+  service (segmentation fault and crash) via a long string.
 cvss_v2: 5.0
 patched_versions:
-- ~> 2.0.0.576
-- ~> 2.1.3
-- '>= 2.2.0.preview.1'
+  - "~> 2.0.0.576"
+  - "~> 2.1.3"
+  - "~> 2.2.0.preview.1"
+  - ">= 2.2.0"
+related:
+  url:
+    - https://vulners.com/rubygems/RUBY:RUBY-2014-3916-107478
+    - https://bugs.ruby-lang.org/issues/9709
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-3916
+    - https://github.com/advisories/GHSA-252h-69rw-g2rp
+    - http://www.osvdb.org/show/osvdb/107478
diff --git a/rubies/ruby/CVE-2014-4975.yml b/rubies/ruby/CVE-2014-4975.yml
index a36e17ddcc..73e406422f 100644
--- a/rubies/ruby/CVE-2014-4975.yml
+++ b/rubies/ruby/CVE-2014-4975.yml
@@ -1,16 +1,27 @@
 ---
 engine: ruby
 cve: 2014-4975
+ghsa: gxj7-mcpg-jpr6
 osvdb: 108971
-url: http://www.osvdb.org/show/osvdb/108971
-title: 'CVE-2014-4975 ruby: off-by-one stack-based buffer overflow in the encodes()
-  function'
+url: https://bugs.ruby-lang.org/issues/10019
+title: "CVE-2014-4975 ruby: off-by-one stack-based buffer overflow
+  in the encodes() function"
 date: 2014-07-09
-description: Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and
-  earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows
-  context-dependent attackers to cause a denial of service (segmentation fault) via
-  vectors that trigger a stack-based buffer overflow.
+description: |
+  Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and
+  earlier, and 2.x through 2.1.2, when using certain format string
+  specifiers, allows context-dependent attackers to cause a denial of
+  service (segmentation fault) via vectors that trigger a stack-based
+  buffer overflow.
 cvss_v2: 5.0
 patched_versions:
-- ~> 2.1.3
-- '>= 2.2.0.preview.1'
+  - "~> 2.1.3"
+  - "~> 2.2.0.preview.1"
+  - ">= 2.2.0"
+related:
+  url:
+    - https://bugs.ruby-lang.org/issues/10019
+    - https://www.vulnerabilitycenter.com/#!vul=47400
+    - https://github.com/advisories/GHSA-gxj7-mcpg-jpr6
+    - http://www.osvdb.org/show/osvdb/108971
+notes: "Did not find announcement URL"
diff --git a/rubies/ruby/CVE-2014-8080.yml b/rubies/ruby/CVE-2014-8080.yml
index 1a9d81017d..6d2387f1e1 100644
--- a/rubies/ruby/CVE-2014-8080.yml
+++ b/rubies/ruby/CVE-2014-8080.yml
@@ -1,15 +1,25 @@
 ---
 engine: ruby
 cve: 2014-8080
+ghsa: ggvr-v7qh-jwjh
 osvdb: 113747
-url: http://www.osvdb.org/show/osvdb/113747
-title: 'CVE-2014-8080 ruby: REXML billion laughs attack via parameter entity expansion'
+url: https://www.ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080
+title: "CVE-2014-8080 ruby: REXML billion laughs attack via parameter entity expansion"
 date: 2014-10-27
-description: The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594,
-  and 2.1.x before 2.1.4 allows remote attackers to cause a denial of service (memory
-  consumption) via a crafted XML document, aka an XML Entity Expansion (XEE) attack.
+description: |
+  The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594,
+  and 2.1.x before 2.1.4 allows remote attackers to cause a denial of
+  service (memory consumption) via a crafted XML document, aka an
+  XML Entity Expansion (XEE) attack.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.9.3.550
-- ~> 2.0.0.594
-- '>= 2.1.4'
+  - "~> 1.9.3.550"
+  - "~> 2.0.0.594"
+  - ">= 2.1.4"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080
+    - https://nvd.nist.gov/vuln/detail/CVE-2014-8080
+    - https://github.com/advisories/GHSA-ggvr-v7qh-jwjh
+    - https://github.com/thesp0nge/dawnscanner/issues/116
+    - http://www.osvdb.org/show/osvdb/113747
diff --git a/rubies/ruby/CVE-2014-8090.yml b/rubies/ruby/CVE-2014-8090.yml
index 25f7b2ae0b..648d5efdfb 100644
--- a/rubies/ruby/CVE-2014-8090.yml
+++ b/rubies/ruby/CVE-2014-8090.yml
@@ -1,18 +1,29 @@
 ---
 engine: ruby
 cve: 2014-8090
+ghsa: 2x97-vvh4-m4q4
 osvdb: 114641
-url: http://www.osvdb.org/show/osvdb/114641
-title: 'CVE-2014-8090 ruby: REXML incomplete fix for CVE-2014-8080'
+url: https://www.ruby-lang.org/en/news/2014/11/13/rexml-dos-cve-2014-8090
+title: "CVE-2014-8090 ruby: REXML incomplete fix for CVE-2014-8080"
 date: 2014-11-13
-description: 'The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before
-  2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a
-  denial of service (CPU and memory consumption) a crafted XML document containing
-  an empty string in an entity that is used in a large number of nested entity references,
-  aka an XML Entity Expansion (XEE) attack.  NOTE: this vulnerability exists because
-  of an incomplete fix for CVE-2013-1821 and CVE-2014-8080.'
+description: |
+  The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551,
+  2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows
+  remote attackers to cause a denial of service (CPU and memory
+  consumption) a crafted XML document containing an empty string
+  in an entity that is used in a large number of nested entity
+  references, aka an XML Entity Expansion (XEE) attack.
+
+  NOTE: this vulnerability exists because of an incomplete
+  fix for CVE-2013-1821 and CVE-2014-8080.
 cvss_v2: 5.0
 patched_versions:
-- ~> 1.9.3.551
-- ~> 2.0.0.598
-- '>= 2.1.5'
+  - "~> 1.9.3.551"
+  - "~> 2.0.0.598"
+  - ">= 2.1.5"
+related:
+  url:
+    - https://www.ruby-lang.org/en/news/2014/11/13/rexml-dos-cve-2014-8090
+    - https://nvd.nist.gov/vuln/detail/cve-2014-8090
+    - https://github.com/advisories/GHSA-2x97-vvh4-m4q4
+    - http://www.osvdb.org/show/osvdb/114641
diff --git a/rubies/ruby/CVE-2015-1855.yml b/rubies/ruby/CVE-2015-1855.yml
index 04858fa2dc..f9dfe34344 100644
--- a/rubies/ruby/CVE-2015-1855.yml
+++ b/rubies/ruby/CVE-2015-1855.yml
@@ -12,6 +12,6 @@ description: |
   matching of more than one wildcard per subject/SAN is no-longer allowed. As well,
   comparison of these values is now case-insensitive.
 patched_versions:
-- ~> 2.0.0.645
-- ~> 2.1.6
-- '>= 2.2.2'
+  - "~> 2.0.0.645"
+  - "~> 2.1.6"
+  - ">= 2.2.2"
diff --git a/rubies/ruby/CVE-2015-7551.yml b/rubies/ruby/CVE-2015-7551.yml
index 16586f4447..d0c53fcfbf 100644
--- a/rubies/ruby/CVE-2015-7551.yml
+++ b/rubies/ruby/CVE-2015-7551.yml
@@ -11,9 +11,9 @@ description: |
   And, about DL, CVE-2009-5147 was fixed at Ruby 1.9.1, but not fixed at other
   branches, then rubies which bundled DL except Ruby 1.9.1 are still vulnerable.
 patched_versions:
-- ~> 2.0.0.648
-- ~> 2.1.8
-- ~> 2.2.4
-- '>= 2.3.0'
+  - "~> 2.0.0.648"
+  - "~> 2.1.8"
+  - "~> 2.2.4"
+  - ">= 2.3.0"
 unaffected_versions:
-- ~> 1.9.1.129
+  - "~> 1.9.1.129"
diff --git a/rubies/ruby/CVE-2015-9096.yml b/rubies/ruby/CVE-2015-9096.yml
index c2181eb409..97eacf4dcf 100644
--- a/rubies/ruby/CVE-2015-9096.yml
+++ b/rubies/ruby/CVE-2015-9096.yml
@@ -16,5 +16,5 @@ description: |
   Recipient Email Addresses." 2015. The attacks described in the paper
   (Terada, p. 4) can be applied to without any modification.
 patched_versions:
-- '>= 2.4.0'
-- ~> 2.3.5
+  - ">= 2.4.0"
+  - "~> 2.3.5"
diff --git a/rubies/ruby/CVE-2017-0898.yml b/rubies/ruby/CVE-2017-0898.yml
index df7adcd350..0540111947 100644
--- a/rubies/ruby/CVE-2017-0898.yml
+++ b/rubies/ruby/CVE-2017-0898.yml
@@ -14,6 +14,6 @@ description: |
 
   All users running an affected release should upgrade immediately.
 patched_versions:
-- ~> 2.2.8
-- ~> 2.3.5
-- '>= 2.4.2'
+  - "~> 2.2.8"
+  - "~> 2.3.5"
+  - ">= 2.4.2"
diff --git a/rubies/ruby/CVE-2017-10784.yml b/rubies/ruby/CVE-2017-10784.yml
index 117292fb4f..a85c2153bb 100644
--- a/rubies/ruby/CVE-2017-10784.yml
+++ b/rubies/ruby/CVE-2017-10784.yml
@@ -20,6 +20,6 @@ description: |
 
   All users running an affected release should upgrade immediately.
 patched_versions:
-- ~> 2.2.8
-- ~> 2.3.5
-- '>= 2.4.2'
+  - "~> 2.2.8"
+  - "~> 2.3.5"
+  - ">= 2.4.2"
diff --git a/rubies/ruby/CVE-2017-14033.yml b/rubies/ruby/CVE-2017-14033.yml
index 279d391e19..88925623a2 100644
--- a/rubies/ruby/CVE-2017-14033.yml
+++ b/rubies/ruby/CVE-2017-14033.yml
@@ -17,6 +17,6 @@ description: |
   only available with Ruby 2.4 series. When using Ruby 2.2 series or 2.3
   series, the gem does not override the bundled version of OpenSSL.
 patched_versions:
-- ~> 2.2.8
-- ~> 2.3.5
-- '>= 2.4.2'
+  - "~> 2.2.8"
+  - "~> 2.3.5"
+  - ">= 2.4.2"
diff --git a/rubies/ruby/CVE-2017-14064.yml b/rubies/ruby/CVE-2017-14064.yml
index f4a96d915e..f6933b8151 100644
--- a/rubies/ruby/CVE-2017-14064.yml
+++ b/rubies/ruby/CVE-2017-14064.yml
@@ -15,6 +15,6 @@ description: |
   The JSON library is also distributed as a gem. If you can’t upgrade Ruby
   itself, install JSON gem newer than version 2.0.4.
 patched_versions:
-- ~> 2.2.8
-- ~> 2.3.5
-- '>= 2.4.2'
+  - "~> 2.2.8"
+  - "~> 2.3.5"
+  - ">= 2.4.2"
diff --git a/rubies/ruby/CVE-2017-17405.yml b/rubies/ruby/CVE-2017-17405.yml
index 8b68d8ef3d..1d022eeb9b 100644
--- a/rubies/ruby/CVE-2017-17405.yml
+++ b/rubies/ruby/CVE-2017-17405.yml
@@ -16,7 +16,7 @@ description: |
 
   All users running an affected release should upgrade immediately.
 patched_versions:
-- ~> 2.2.9
-- ~> 2.3.6
-- ~> 2.4.3
-- '> 2.5.0.preview.1'
+  - "~> 2.2.9"
+  - "~> 2.3.6"
+  - "~> 2.4.3"
+  - "> 2.5.0.preview.1"
diff --git a/rubies/ruby/CVE-2017-17742.yml b/rubies/ruby/CVE-2017-17742.yml
index 2f4bf642fd..77be50bd70 100644
--- a/rubies/ruby/CVE-2017-17742.yml
+++ b/rubies/ruby/CVE-2017-17742.yml
@@ -15,8 +15,8 @@ description: |
 
   All users running an affected release should upgrade immediately.
 patched_versions:
-- ~> 2.2.10
-- ~> 2.3.7
-- ~> 2.4.4
-- ~> 2.5.1
-- '> 2.6.0-preview1'
+  - "~> 2.2.10"
+  - "~> 2.3.7"
+  - "~> 2.4.4"
+  - "~> 2.5.1"
+  - "> 2.6.0-preview1"
diff --git a/rubies/ruby/CVE-2017-17790.yml b/rubies/ruby/CVE-2017-17790.yml
new file mode 100644
index 0000000000..4b9011f760
--- /dev/null
+++ b/rubies/ruby/CVE-2017-17790.yml
@@ -0,0 +1,35 @@
+---
+engine: ruby
+cve: 2017-17790
+url: https://nvd.nist.gov/vuln/detail/CVE-2017-17790
+title: The lazy_initialize function in lib/resolv.rb in Ruby
+date: 2017-12-20
+description: |
+  The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3
+  uses Kernel#open, which might allow Command Injection attacks, as
+  demonstrated by a Resolv::Hosts::new argument beginning with a '|'
+  character, a different vulnerability than CVE-2017-17405.
+  NOTE: situations with untrusted input may be highly unlikely.
+
+  CWE: CWE-74 - Improper Neutralization of Special Elements
+
+  CVSS_V3: 9.8 - CRITICAL - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
+
+cvss_v3: 9.8
+patched_versions:
+  - "~> 2.2.8"
+  - "~> 2.3.5"
+  - ">= 2.4.3"
+# related:
+#  url:
+#     - https://nvd.nist.gov/vuln/detail/CVE-2017-17790
+#     - https://github.com/ruby/ruby/pull/1777
+#     - https://access.redhat.com/errata/RHSA-2018:0378
+#     - https://access.redhat.com/errata/RHSA-2018:0583
+#     - https://access.redhat.com/errata/RHSA-2018:0584
+#     - https://access.redhat.com/errata/RHSA-2018:0585
+#     - https://lists.debian.org/debian-lts-announce/2017/12/msg00024.html
+#     - https://lists.debian.org/debian-lts-announce/2017/12/msg00025.html
+#     - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html
+#     - https://www.debian.org/security/2018/dsa-4259
+#     - https://github.com/advisories/GHSA-qf67-vmxx-gp4jGHSA-47cm-jxff-w8wg.json
diff --git a/rubies/ruby/CVE-2018-16395.yml b/rubies/ruby/CVE-2018-16395.yml
index b49bd1bbf4..dd0d475615 100644
--- a/rubies/ruby/CVE-2018-16395.yml
+++ b/rubies/ruby/CVE-2018-16395.yml
@@ -30,7 +30,7 @@ description: |
   with `openssl` gem. Please upgrade your Ruby installation to the latest
   version.
 patched_versions:
-- ~> 2.3.8
-- ~> 2.4.5
-- ~> 2.5.2
-- '>= 2.6.0-preview3'
+  - "~> 2.3.8"
+  - "~> 2.4.5"
+  - "~> 2.5.2"
+  - ">= 2.6.0-preview3"
diff --git a/rubies/ruby/CVE-2018-16396.yml b/rubies/ruby/CVE-2018-16396.yml
index 88bdffec65..631cfe2cb8 100644
--- a/rubies/ruby/CVE-2018-16396.yml
+++ b/rubies/ruby/CVE-2018-16396.yml
@@ -20,7 +20,7 @@ description: |
 
   All users running an affected release should upgrade immediately.
 patched_versions:
-- ~> 2.3.8
-- ~> 2.4.5
-- ~> 2.5.2
-- '>= 2.6.0-preview3'
+  - "~> 2.3.8"
+  - "~> 2.4.5"
+  - "~> 2.5.2"
+  - ">= 2.6.0-preview3"
diff --git a/rubies/ruby/CVE-2018-6914.yml b/rubies/ruby/CVE-2018-6914.yml
index b5346f1b1c..8f79aaffb6 100644
--- a/rubies/ruby/CVE-2018-6914.yml
+++ b/rubies/ruby/CVE-2018-6914.yml
@@ -21,8 +21,8 @@ description: |
 
   All users running an affected release should upgrade immediately.
 patched_versions:
-- ~> 2.2.10
-- ~> 2.3.7
-- ~> 2.4.4
-- ~> 2.5.1
-- '> 2.6.0-preview1'
+  - "~> 2.2.10"
+  - "~> 2.3.7"
+  - "~> 2.4.4"
+  - "~> 2.5.1"
+  - "> 2.6.0-preview1"
diff --git a/rubies/ruby/CVE-2018-8777.yml b/rubies/ruby/CVE-2018-8777.yml
index 8a6e0b00cb..441a87d46c 100644
--- a/rubies/ruby/CVE-2018-8777.yml
+++ b/rubies/ruby/CVE-2018-8777.yml
@@ -14,8 +14,8 @@ description: |
 
   All users running an affected release should upgrade immediately.
 patched_versions:
-- ~> 2.2.10
-- ~> 2.3.7
-- ~> 2.4.4
-- ~> 2.5.1
-- '> 2.6.0-preview1'
+  - "~> 2.2.10"
+  - "~> 2.3.7"
+  - "~> 2.4.4"
+  - "~> 2.5.1"
+  - "> 2.6.0-preview1"
diff --git a/rubies/ruby/CVE-2018-8778.yml b/rubies/ruby/CVE-2018-8778.yml
index 5ddb239ea0..056054fe9e 100644
--- a/rubies/ruby/CVE-2018-8778.yml
+++ b/rubies/ruby/CVE-2018-8778.yml
@@ -13,8 +13,8 @@ description: |
 
   All users running an affected release should upgrade immediately.
 patched_versions:
-- ~> 2.2.10
-- ~> 2.3.7
-- ~> 2.4.4
-- ~> 2.5.1
-- '> 2.6.0-preview1'
+  - "~> 2.2.10"
+  - "~> 2.3.7"
+  - "~> 2.4.4"
+  - "~> 2.5.1"
+  - "> 2.6.0-preview1"
diff --git a/rubies/ruby/CVE-2018-8779.yml b/rubies/ruby/CVE-2018-8779.yml
index 8343d465fe..1d1504d611 100644
--- a/rubies/ruby/CVE-2018-8779.yml
+++ b/rubies/ruby/CVE-2018-8779.yml
@@ -21,8 +21,8 @@ description: |
 
   All users running an affected release should upgrade immediately.
 patched_versions:
-- ~> 2.2.10
-- ~> 2.3.7
-- ~> 2.4.4
-- ~> 2.5.1
-- '> 2.6.0-preview1'
+  - "~> 2.2.10"
+  - "~> 2.3.7"
+  - "~> 2.4.4"
+  - "~> 2.5.1"
+  - "> 2.6.0-preview1"
diff --git a/rubies/ruby/CVE-2018-8780.yml b/rubies/ruby/CVE-2018-8780.yml
index 72f5dcfa89..6948cfe5d4 100644
--- a/rubies/ruby/CVE-2018-8780.yml
+++ b/rubies/ruby/CVE-2018-8780.yml
@@ -15,8 +15,8 @@ description: |
 
   All users running an affected release should upgrade immediately.
 patched_versions:
-- ~> 2.2.10
-- ~> 2.3.7
-- ~> 2.4.4
-- ~> 2.5.1
-- '> 2.6.0-preview1'
+  - "~> 2.2.10"
+  - "~> 2.3.7"
+  - "~> 2.4.4"
+  - "~> 2.5.1"
+  - "> 2.6.0-preview1"
diff --git a/rubies/ruby/CVE-2019-15845.yml b/rubies/ruby/CVE-2019-15845.yml
index 3d4c3b06e8..06cde88107 100644
--- a/rubies/ruby/CVE-2019-15845.yml
+++ b/rubies/ruby/CVE-2019-15845.yml
@@ -12,7 +12,7 @@ description: |
   argument, an attacker can make it wrongly match a pathname that is the second
   parameter.
 patched_versions:
-- ~> 2.4.8
-- ~> 2.5.7
-- ~> 2.6.5
-- '> 2.7.0-preview1'
+  - "~> 2.4.8"
+  - "~> 2.5.7"
+  - "~> 2.6.5"
+  - "> 2.7.0-preview1"
diff --git a/rubies/ruby/CVE-2019-16201.yml b/rubies/ruby/CVE-2019-16201.yml
index e6652b122b..93d2971f7a 100644
--- a/rubies/ruby/CVE-2019-16201.yml
+++ b/rubies/ruby/CVE-2019-16201.yml
@@ -10,7 +10,7 @@ description: |
   authentication module was found. An attacker can exploit this vulnerability
   to cause an effective denial of service against a WEBrick service.
 patched_versions:
-- ~> 2.4.8
-- ~> 2.5.7
-- ~> 2.6.5
-- '> 2.7.0-preview1'
+  - "~> 2.4.8"
+  - "~> 2.5.7"
+  - "~> 2.6.5"
+  - "> 2.7.0-preview1"
diff --git a/rubies/ruby/CVE-2019-16254.yml b/rubies/ruby/CVE-2019-16254.yml
index 6d9cca61dc..dd32ae88e3 100644
--- a/rubies/ruby/CVE-2019-16254.yml
+++ b/rubies/ruby/CVE-2019-16254.yml
@@ -13,7 +13,7 @@ description: |
   which addressed the CRLF vector, but did not address an isolated CR or an
   isolated LF.
 patched_versions:
-- ~> 2.4.8
-- ~> 2.5.7
-- ~> 2.6.5
-- '> 2.7.0-preview1'
+  - "~> 2.4.8"
+  - "~> 2.5.7"
+  - "~> 2.6.5"
+  - "> 2.7.0-preview1"
diff --git a/rubies/ruby/CVE-2019-16255.yml b/rubies/ruby/CVE-2019-16255.yml
index 0410ea89f1..d41053fccb 100644
--- a/rubies/ruby/CVE-2019-16255.yml
+++ b/rubies/ruby/CVE-2019-16255.yml
@@ -14,7 +14,7 @@ description: |
   vulnerability because the purpose of Shell#[] and Shell#[] is considered file
   testing.
 patched_versions:
-- ~> 2.4.8
-- ~> 2.5.7
-- ~> 2.6.5
-- '> 2.7.0-preview1'
+  - "~> 2.4.8"
+  - "~> 2.5.7"
+  - "~> 2.6.5"
+  - "> 2.7.0-preview1"
diff --git a/rubies/ruby/CVE-2020-10663.yml b/rubies/ruby/CVE-2020-10663.yml
index ba7eb9fbe3..60d942ef68 100644
--- a/rubies/ruby/CVE-2020-10663.yml
+++ b/rubies/ruby/CVE-2020-10663.yml
@@ -23,7 +23,7 @@ description: |
   json` to update it. If you are using bundler, please add `gem "json", ">= 2.3.0"`
   to your Gemfile
 patched_versions:
-- ~> 2.4.10
-- ~> 2.5.8
-- ~> 2.6.6
-- '>= 2.7.1'
+  - "~> 2.4.10"
+  - "~> 2.5.8"
+  - "~> 2.6.6"
+  - ">= 2.7.1"
diff --git a/rubies/ruby/CVE-2020-10933.yml b/rubies/ruby/CVE-2020-10933.yml
index a443d56ee6..f04a9c4e70 100644
--- a/rubies/ruby/CVE-2020-10933.yml
+++ b/rubies/ruby/CVE-2020-10933.yml
@@ -18,8 +18,8 @@ description: |
   This issue is exploitable only on Linux. This issue had been since Ruby
   2.5.0; 2.4 series is not vulnerable.
 patched_versions:
-- ~> 2.5.8
-- ~> 2.6.6
-- '>= 2.7.1'
+  - "~> 2.5.8"
+  - "~> 2.6.6"
+  - ">= 2.7.1"
 unaffected_versions:
-- ~> 2.4.0
+  - "~> 2.4.0"
diff --git a/rubies/ruby/CVE-2021-33621.yml b/rubies/ruby/CVE-2021-33621.yml
new file mode 100644
index 0000000000..ef1cbb1c58
--- /dev/null
+++ b/rubies/ruby/CVE-2021-33621.yml
@@ -0,0 +1,15 @@
+---
+engine: ruby
+cve: 2021-33621
+url: https://www.ruby-lang.org/en/news/2022/11/22/http-response-splitting-in-cgi-cve-2021-33621/
+title: HTTP response splitting in CGI
+date: 2022-11-22
+description: |
+  If an application that generates HTTP responses using the cgi gem with untrusted user input, an attacker can exploit it to inject a malicious HTTP response header and/or body.
+
+  Also, the contents for a CGI::Cookie object were not checked properly. If an application creates a CGI::Cookie object based on user input, an attacker may exploit it to inject invalid attributes in Set-Cookie header. We think such applications are unlikely, but we have included a change to check arguments for CGI::Cookie#initialize preventatively.
+cvss_v3: 8.8
+patched_versions:
+  - "~> 2.7.7"
+  - "~> 3.0.5"
+  - ">= 3.1.3"
diff --git a/rubies/ruby/CVE-2022-28738.yml b/rubies/ruby/CVE-2022-28738.yml
new file mode 100644
index 0000000000..b7280846f2
--- /dev/null
+++ b/rubies/ruby/CVE-2022-28738.yml
@@ -0,0 +1,18 @@
+---
+engine: ruby
+cve: 2022-28738
+url: https://www.ruby-lang.org/en/news/2022/04/12/double-free-in-regexp-compilation-cve-2022-28738/
+title: Double free in Regexp compilation
+date: 2022-04-12
+description: |
+  A double-free vulnerability is discovered in Regexp compilation. This vulnerability has been assigned the CVE identifier CVE-2022-28738. We strongly recommend upgrading Ruby.
+
+  Due to a bug in the Regexp compilation process, creating a Regexp object with a crafted source string could cause the same memory to be freed twice. This is known as a “double free” vulnerability. Note that, in general, it is considered unsafe to create and use a Regexp object generated from untrusted input. In this case, however, following a comprehensive assessment, we treat this issue as a vulnerability.
+
+  Please update Ruby to 3.0.4, or 3.1.2.
+patched_versions:
+  - "~> 3.0.4"
+  - ">= 3.1.2"
+unaffected_versions:
+  - "~> 2.6.0"
+  - "~> 2.7.0"
diff --git a/rubies/ruby/CVE-2022-28739.yml b/rubies/ruby/CVE-2022-28739.yml
new file mode 100644
index 0000000000..136e4eaea4
--- /dev/null
+++ b/rubies/ruby/CVE-2022-28739.yml
@@ -0,0 +1,17 @@
+---
+engine: ruby
+cve: 2022-28739
+url: https://www.ruby-lang.org/en/news/2022/04/12/buffer-overrun-in-string-to-float-cve-2022-28739/
+title: Buffer overrun in String-to-Float conversion
+date: 2022-04-12
+description: |
+  A buffer-overrun vulnerability is discovered in a conversion algorithm from a String to a Float. This vulnerability has been assigned the CVE identifier CVE-2022-28739. We strongly recommend upgrading Ruby.
+
+  Due to a bug in an internal function that converts a String to a Float, some convertion methods like Kernel#Float and String#to_f could cause buffer over-read. A typical consequence is a process termination due to segmentation fault, but in a limited circumstances, it may be exploitable for illegal memory read.
+
+  Please update Ruby to 2.6.10, 2.7.6, 3.0.4, or 3.1.2.
+patched_versions:
+  - "~> 2.6.10"
+  - "~> 2.7.6"
+  - "~> 3.0.4"
+  - ">= 3.1.2"
diff --git a/rubies/ruby/CVE-2024-27282.yml b/rubies/ruby/CVE-2024-27282.yml
new file mode 100644
index 0000000000..d4a9f581f8
--- /dev/null
+++ b/rubies/ruby/CVE-2024-27282.yml
@@ -0,0 +1,22 @@
+---
+engine: ruby
+cve: 2024-27282
+url: https://www.ruby-lang.org/en/news/2024/04/23/arbitrary-memory-address-read-regexp-cve-2024-27282/
+title: Arbitrary memory address read vulnerability with Regex search
+date: 2024-04-23
+description: |
+  If attacker-supplied data is provided to the Ruby regex compiler, it is
+  possible to extract arbitrary heap data relative to the start of the text,
+  including pointers and sensitive strings.
+
+  We recommend to update the Ruby to version 3.3.1 or later. In order to ensure compatibility with older Ruby series, you may update as follows instead:
+
+  * For Ruby 3.0 users: Update to 3.0.7
+  * For Ruby 3.1 users: Update to 3.1.5
+  * For Ruby 3.2 users: Update to 3.2.4
+  * For Ruby 3.3 users: Update to 3.3.1
+patched_versions:
+  - "~> 3.0.7"
+  - "~> 3.1.5"
+  - "~> 3.2.4"
+  - ">= 3.3.1"
diff --git a/spec/advisories_spec.rb b/spec/advisories_spec.rb
index 1228b3ee8d..f8d8229734 100644
--- a/spec/advisories_spec.rb
+++ b/spec/advisories_spec.rb
@@ -1,23 +1,34 @@
-load File.join(File.dirname(__FILE__), 'spec_helper.rb')
-require 'gem_example'
-require 'library_example'
-require 'ruby_example'
+require 'spec_helper'
+require 'gem_advisory_example'
+require 'ruby_advisory_example'
 
 describe "gems" do
-  Dir.glob(File.join(File.dirname(__FILE__), '../gems/*/*')) do |path|
+  Dir.glob(File.join(ROOT,'gems/*/*')) do |path|
     include_examples 'Gem Advisory', path
   end
-end
 
-describe "libraries" do
-  Dir.glob(File.join(File.dirname(__FILE__), '../libraries/*/*')) do |path|
-    include_examples 'Libraries Advisory', path
+  let(:dir)           { File.join(ROOT,'gems') }
+  let(:advisory_dirs) { Dir.glob('*', base: dir) }
+
+  it "must not have any case-insensitive conflicting directory names" do
+    case_sensitive_dirs = advisory_dirs.grep(/[A-Z]/)
+
+    case_insensitive_mapping = case_sensitive_dirs.to_h { |dir|
+                                 [dir, dir.downcase]
+                               }
+
+    conflicting_dirs = case_insensitive_mapping.select { |dir,lowercase_dir|
+                         advisory_dirs.include?(lowercase_dir)
+                       }
+
+    expect(conflicting_dirs).to be_empty, -> {
+      "#{conflicting_dirs.keys.join(', ')} conflicts with #{conflicting_dirs.values.join(', ')}"
+    }
   end
 end
 
 describe "rubies" do
-  Dir.glob(File.join(File.dirname(__FILE__), '../rubies/*/*')) do |path|
+  Dir.glob(File.join(ROOT, 'rubies/*/*')) do |path|
     include_examples 'Rubies Advisory', path
   end
 end
-
diff --git a/spec/advisory_example.rb b/spec/advisory_example.rb
index 496f19540d..6097bbfd4a 100644
--- a/spec/advisory_example.rb
+++ b/spec/advisory_example.rb
@@ -1,4 +1,6 @@
-load File.join(File.dirname(__FILE__), 'spec_helper.rb')
+require 'spec_helper'
+require 'versions_example'
+
 require 'yaml'
 
 shared_examples_for 'Advisory' do |path|
@@ -26,27 +28,26 @@
     end
 
     it "should be correctly named CVE-XXX or OSVDB-XXX or GHSA-XXX" do
-      expect(filename).
-        to match(/^(CVE-\d{4}-(0\d{3}|[1-9]\d{3,})|OSVDB-\d+|GHSA(-[a-z0-9]{4}){3})\.yml$/)
+      expect(filename).to match(
+        /\A
+          (?:
+             CVE-\d{4}-(?:0\d{3}|[1-9]\d{3,})|
+             OSVDB-\d+|
+             GHSA(-[a-z0-9]{4}){3}
+          )\.yml\z
+        /x
+      )
     end
 
     it "should have CVE or OSVDB or GHSA" do
       expect(advisory['cve'] || advisory['osvdb'] || advisory['ghsa']).not_to be_nil
     end
 
-    describe "library" do
-      subject { advisory['library'] }
-
-      it "may be nil or a String" do
-        expect(subject).to be_kind_of(String).or(be_nil)
-      end
-    end
-
-    describe "framework" do
-      subject { advisory['framework'] }
-
-      it "may be nil or a String" do
-        expect(subject).to be_kind_of(String).or(be_nil)
+    it "should CVE-XXX if cve field has a value" do
+      if advisory['cve']
+        expect(filename).to start_with('CVE-')
+      elsif advisory['ghsa']
+        expect(filename).to start_with('GHSA-')
       end
     end
 
@@ -64,9 +65,10 @@
       it "may be nil or a String" do
         expect(subject).to be_kind_of(String).or(be_nil)
       end
+
       it "should be id in filename if filename is CVE-XXX" do
         if filename_cve
-          is_expected.to eq(filename_cve.chomp('.yml'))
+          expect(subject).to eq(filename_cve.chomp('.yml'))
         end
       end
     end
@@ -80,7 +82,7 @@
 
        it "should be id in filename if filename is OSVDB-XXX" do
         if filename_osvdb
-          is_expected.to eq(filename_osvdb.to_i)
+          expect(subject).to eq(filename_osvdb.to_i)
         end
       end
     end
@@ -93,7 +95,7 @@
       end
       it "should be id in filename if filename is GHSA-XXX" do
         if filename_ghsa
-          is_expected.to eq(filename_ghsa.chomp('.yml'))
+          expect(subject).to eq(filename_ghsa.chomp('.yml'))
         end
       end
     end
@@ -101,28 +103,49 @@
     describe "url" do
       subject { advisory['url'] }
 
-      it { is_expected.to be_kind_of(String) }
-      it { is_expected.not_to be_empty }
+      it { expect(subject).to be_kind_of(String) }
+      it { expect(subject).to_not match(%r{\Ahttp(s)?://osvdb\.org}) }
+      it { expect(subject).not_to be_empty }
     end
 
     describe "title" do
       subject { advisory['title'] }
 
-      it { is_expected.to be_kind_of(String) }
-      it { is_expected.not_to be_empty }
+      it { expect(subject).to be_kind_of(String) }
+      it { expect(subject).not_to be_empty }
+
+      it "must be one line" do
+        expect(subject).to_not include("\n")
+      end
+
+      it "must not start with or end with additional whitespace" do
+        expect(subject).to_not match(/\A\s|\s\z/)
+      end
     end
 
     describe "date" do
       subject { advisory['date'] }
 
-      it { is_expected.to be_kind_of(Date) }
+      it { expect(subject).to be_kind_of(Date) }
     end
 
     describe "description" do
       subject { advisory['description'] }
 
-      it { is_expected.to be_kind_of(String) }
-      it { is_expected.not_to be_empty }
+      it "must not be one line" do
+        expect(subject).to include("\n")
+      end
+
+      it "must not have double embbedded newlines" do
+        expect(subject).to_not include("\\n\\n")
+      end
+
+      it "must not have PoC sections" do
+        expect(subject).to_not include("### PoC")
+      end
+
+      it { expect(subject).to be_kind_of(String) }
+      it { expect(subject).not_to be_empty }
     end
 
     describe "cvss_v2" do
@@ -135,7 +158,7 @@
       case advisory['cvss_v2']
       when Float
         context "when a Float" do
-          it { expect((0.0)..(10.0)).to include(subject) }
+          it { expect(subject).to be_between(0.0, 10.0) }
         end
       end
     end
@@ -150,7 +173,7 @@
       case advisory['cvss_v3']
       when Float
         context "when a Float" do
-          it { expect((0.0)..(10.0)).to include(subject) }
+          it { expect(subject).to be_between(0.0, 10.0) }
         end
       end
 
@@ -161,6 +184,21 @@
       end
     end
 
+    describe "cvss_v4" do
+      subject { advisory['cvss_v4'] }
+
+      it "may be nil or a Float" do
+        expect(subject).to be_kind_of(Float).or(be_nil)
+      end
+
+      case advisory['cvss_v4']
+      when Float
+        context "when a Float" do
+          it { expect(subject).to be_between(0.0, 10.0) }
+        end
+      end
+    end
+
     describe "patched_versions" do
       subject { advisory['patched_versions'] }
 
@@ -168,20 +206,8 @@
         expect(subject).to be_kind_of(Array).or(be_nil)
       end
 
-      describe "each patched version" do
-        if advisory['patched_versions']
-          advisory['patched_versions'].each do |version|
-            describe version do
-              subject { version.split(', ') }
-
-              it "should contain valid RubyGem version requirements" do
-                expect {
-                Gem::Requirement.new(*subject)
-                }.not_to raise_error
-              end
-            end
-          end
-        end
+      if advisory['patched_versions'].kind_of?(Array)
+        include_examples "Versions", advisory['patched_versions']
       end
     end
 
@@ -192,19 +218,8 @@
         expect(subject).to be_kind_of(Array).or(be_nil)
       end
 
-      case advisory['unaffected_versions']
-      when Array
-        advisory['unaffected_versions'].each do |version|
-          describe version do
-            subject { version.split(', ') }
-
-            it "should contain valid RubyGem version requirements" do
-              expect {
-                Gem::Requirement.new(*subject)
-              }.not_to raise_error
-            end
-          end
-        end
+      if advisory['unaffected_versions'].kind_of?(Array)
+        include_examples "Versions", advisory['unaffected_versions']
       end
     end
 
@@ -217,8 +232,8 @@
 
       case advisory["related"]
       when Hash
-        advisory["related"].each_pair do |name, values|
-          describe name do
+        advisory["related"].each_pair do |name,values|
+          describe(name) do
             it "should be either a cve, an osvdb, a ghsa, or a url" do
               expect(["cve", "osvdb", "ghsa", "url"]).to include(name)
             end
@@ -238,6 +253,5 @@
         expect(subject).to be_kind_of(String).or(be_nil)
       end
     end
-
   end
 end
diff --git a/spec/gem_example.rb b/spec/gem_advisory_example.rb
similarity index 64%
rename from spec/gem_example.rb
rename to spec/gem_advisory_example.rb
index 2712bce9c7..5d40a5b250 100644
--- a/spec/gem_example.rb
+++ b/spec/gem_advisory_example.rb
@@ -1,4 +1,4 @@
-load File.join(File.dirname(__FILE__), 'spec_helper.rb')
+require 'spec_helper'
 require 'advisory_example'
 
 shared_examples_for "Gem Advisory" do |path|
@@ -13,11 +13,28 @@
       subject { advisory['gem'] }
 
       it { is_expected.to be_kind_of(String) }
+
       it "should be equal to filename (case-insensitive)" do
         expect(subject.downcase).to eq(gem.downcase)
       end
     end
 
+    describe "library" do
+      subject { advisory['library'] }
+
+      it "may be nil or a String" do
+        expect(subject).to be_kind_of(String).or(be_nil)
+      end
+    end
+
+    describe "framework" do
+      subject { advisory['framework'] }
+
+      it "may be nil or a String" do
+        expect(subject).to be_kind_of(String).or(be_nil)
+      end
+    end
+
     describe "versions" do
       it "assumes that future versions will be patched" do
         unaffected_versions = advisory['unaffected_versions'] || []
@@ -29,15 +46,18 @@
 
         # If a gem is unpatched this test makes no sense
         unless patched_versions.none?
-          expect(versions.last.match(/^>=|^>/)).to be_truthy
+          expect(versions.last).to match(/^(?:>=|>) /)
         end
       end
     end
 
+    let(:schema_file) { File.join(__dir__, 'schemas/gem.yml') }
+
     it "should have valid schema" do
-      schema = YAML.safe_load_file(File.join(File.dirname(__FILE__), 'schemas/gem.yml'))
+      schema    = YAML.safe_load_file(schema_file)
       validator = Kwalify::Validator.new(schema)
-      errors = validator.validate(advisory)
+      errors    = validator.validate(advisory)
+
       expect(errors).to be_empty
     end
   end
diff --git a/spec/library_example.rb b/spec/library_example.rb
deleted file mode 100644
index 58b993fe4c..0000000000
--- a/spec/library_example.rb
+++ /dev/null
@@ -1,21 +0,0 @@
-load File.join(File.dirname(__FILE__), 'spec_helper.rb')
-require 'advisory_example'
-
-shared_examples_for "Libraries Advisory" do |path|
-  include_examples 'Advisory', path
-
-  advisory = YAML.safe_load_file(path)
-
-  describe path do
-    let(:library) { File.basename(File.dirname(path)) }
-
-    describe "library" do
-      subject { advisory['library'] }
-
-      it { is_expected.to be_kind_of(String) }
-      it "should be equal to filename (case-insensitive)" do
-        expect(subject.downcase).to eq(library.downcase)
-      end
-    end
-  end
-end
diff --git a/spec/ruby_example.rb b/spec/ruby_advisory_example.rb
similarity index 76%
rename from spec/ruby_example.rb
rename to spec/ruby_advisory_example.rb
index 5bec95d252..2c580f59ba 100644
--- a/spec/ruby_example.rb
+++ b/spec/ruby_advisory_example.rb
@@ -1,4 +1,4 @@
-load File.join(File.dirname(__FILE__), 'spec_helper.rb')
+require 'spec_helper'
 require 'advisory_example'
 
 shared_examples_for "Rubies Advisory" do |path|
@@ -13,17 +13,20 @@
       subject { advisory['engine'] }
 
       it { is_expected.to be_kind_of(String) }
+
       it "should be equal to filename (case-insensitive)" do
         expect(subject.downcase).to eq(engine.downcase)
       end
     end
 
+    let(:schema_file) { File.join(__dir__, 'schemas/ruby.yml') }
+
     it "should have valid schema" do
-      schema = YAML.safe_load_file(File.join(File.dirname(__FILE__), 'schemas/ruby.yml'))
+      schema    = YAML.safe_load_file(schema_file)
       validator = Kwalify::Validator.new(schema)
-      errors = validator.validate(advisory)
+      errors    = validator.validate(advisory)
+
       expect(errors).to be_empty
     end
   end
 end
-
diff --git a/spec/schemas/gem.yml b/spec/schemas/gem.yml
index 5729a69036..2af1ee5aef 100644
--- a/spec/schemas/gem.yml
+++ b/spec/schemas/gem.yml
@@ -35,6 +35,8 @@ mapping:
     type: float
   "cvss_v3":
     type: float
+  "cvss_v4":
+    type: float
   "unaffected_versions":
     type: seq
     sequence:
diff --git a/spec/schemas/ruby.yml b/spec/schemas/ruby.yml
index ad901e4e0f..b496002c2a 100644
--- a/spec/schemas/ruby.yml
+++ b/spec/schemas/ruby.yml
@@ -4,12 +4,17 @@ mapping:
   "engine":
     type: str
     required: true
-    enum: [jruby, rbx, ruby]
+    enum: [jruby, rbx, ruby, mruby]
+  "platform":
+    type: str
   "cve":
     type: str
     pattern: /\d+-\d+/
   "osvdb":
     type: int
+  "ghsa":
+    type: str
+    pattern: /[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}/
   "url":
     type: str
     required: true
@@ -27,6 +32,8 @@ mapping:
     type: float
   "cvss_v3":
     type: float
+  "cvss_v4":
+    type: float
   "unaffected_versions":
     type: seq
     sequence:
@@ -35,3 +42,27 @@ mapping:
     type: seq
     sequence:
       - type: str
+  "related":
+    type: map
+    mapping:
+      "cve":
+        type: seq
+        sequence:
+          - type: str
+            pattern: /\d+-\d+/
+      "ghsa":
+        type: seq
+        sequence:
+          - type: str
+            pattern: /[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}/
+      "osvdb":
+        type: seq
+        sequence:
+          - type: int
+      "url":
+        type: seq
+        sequence:
+          - type: str
+            pattern: /https?:\/\//
+  "notes":
+    type: str
diff --git a/spec/spec_helper.rb b/spec/spec_helper.rb
index 118f22ea5d..ab66791556 100644
--- a/spec/spec_helper.rb
+++ b/spec/spec_helper.rb
@@ -1,3 +1,5 @@
 require 'date'
 require 'kwalify'
 require 'rspec'
+
+ROOT = File.expand_path(File.join(__dir__,'..'))
diff --git a/spec/versions_example.rb b/spec/versions_example.rb
new file mode 100644
index 0000000000..fb473f09d3
--- /dev/null
+++ b/spec/versions_example.rb
@@ -0,0 +1,23 @@
+require 'rspec'
+
+RSpec.shared_examples_for "Versions" do |versions|
+  versions.each do |version|
+    describe(version) do
+      subject { version.split(', ') }
+
+      it "must contain between 1-2 version ranges" do
+        expect(subject.length).to be_between(1,2)
+      end
+
+      it "each version must start with a valid operator" do
+        expect(subject).to all(match(/^(?:<=|<|>=|>|~>|=) /))
+      end
+
+      it "should contain valid RubyGem version requirements" do
+        expect {
+          Gem::Requirement.new(*subject)
+        }.not_to raise_error
+      end
+    end
+  end
+end
