From 9525191496c16c5481c6e26578e316f4132c0e32 Mon Sep 17 00:00:00 2001 From: Al Snow <43523+jasnow@users.noreply.github.com> Date: Mon, 31 Aug 2026 13:57:22 -0400 Subject: [PATCH] Adding more dups and withdrawns --- lib/rad-ignores.sh | 60 ++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 60 insertions(+) diff --git a/lib/rad-ignores.sh b/lib/rad-ignores.sh index a20ba14a4b..7e141a090a 100755 --- a/lib/rad-ignores.sh +++ b/lib/rad-ignores.sh @@ -225,3 +225,63 @@ rm -f gems/kobako/CVE-2026-55107.yml # GHSA-mqcp-p2hv-vw6x - CVE-2025-54314 (thor/Withdrawn) # GHSA-9jfq-54vc-9rr2 - CVE-2022-3874 (foreman/Withdrawn) # GHSA-w9fp-2996-hhwx - CVE-2019-16254 (ruby/Disputed) + +# 8/31/2026: Newly discovered withdrawns and duplicates. +# .................................................................... +# DUPLICATES: +# spree_auth_devise | https://github.com/advisories/GHSA-gpqc-4pp7-5954 (duplicate) +# spree_auth_devise | https://github.com/advisories/GHSA-8xfw-5q82-3652 (duplicate) +# audited | https://github.com/advisories/GHSA-v444-jggx-6v7f (duplicate) +# camaleon_cms | https://github.com/advisories/GHSA-3hp8-6j24-m5gm (duplicate) +# commonmarker | https://github.com/advisories/GHSA-c2v4-chx5-vff6 (duplicate) +# encoded_id-rails | https://github.com/advisories/GHSA-4553-hq82-8654 (duplicate) +# iodine | https://github.com/advisories/GHSA-qwf7-rv77-fcr3 (duplicate) +# httparty | https://github.com/advisories/GHSA-g47j-3m2m-74qv (duplicate) +# ==================================================================== +# WITHDRAWNS: +# nokogiri | https://github.com/advisories/GHSA-jc9r-qcgw-fxq9 (withdrawn) +# nokogiri | https://github.com/advisories/GHSA-pf9w-gvcf-gv7m (withdrawn) +# nokogiri | https://github.com/advisories/GHSA-5mwf-688x-mr7x (withdrawn) +# nokogiri | https://github.com/advisories/GHSA-r3w4-36x6-7r99 (withdrawn) +# nokogiri | https://github.com/advisories/GHSA-vcc3-rw6f-jv97 (withdrawn) +# .................................................................... +# rails-html-sanitizer | https://github.com/advisories/GHSA-77pc-q5q7-qg9h (withdrawn) +# rails-html-sanitizer | https://github.com/advisories/GHSA-mrhj-2g4v-39qx (withdrawn) +# rails-html-sanitizer | https://github.com/advisories/GHSA-qc8j-m8j3-rjq6 (withdrawn) +# .................................................................... +# actionpack | https://github.com/advisories/GHSA-9chr-4fjh-5rgw (withdrawn) +# actionpack | https://github.com/advisories/GHSA-vwfg-qj3r-6v3r (withdrawn) +# actionpack | https://github.com/advisories/GHSA-m53f-rhq8-q6hf (withdrawn) +# actionpack | https://github.com/advisories/GHSA-5xmj-wm96-fmw8 (withdrawn) +# actionpack | https://github.com/advisories/GHSA-23v3-qfrj-wmgh (withdrawn) +# actionpack | https://github.com/advisories/GHSA-qf5x-qgx7-437h (withdrawn) +# actionpack | https://github.com/advisories/GHSA-544j-77x9-h938 (withdrawn) +# actionpack | https://github.com/advisories/GHSA-hx46-vwmx-wx95 (withdrawn) +# actionview | https://github.com/advisories/GHSA-6834-r92f-jj42 (withdrawn) +# actionview | https://github.com/advisories/GHSA-2pwf-xwr3-hp55 (withdrawn) +# activemodel | https://github.com/advisories/GHSA-v543-gqhh-6gww (withdrawn) +# activerecord | https://github.com/advisories/GHSA-7phj-gmgx-2r66 (withdrawn) +# activerecord | https://github.com/advisories/GHSA-hm48-76wh-q86v (withdrawn) +# activerecord | https://github.com/advisories/GHSA-m8h6-m9p5-p2f8 (withdrawn) +# activesupport | https://github.com/advisories/GHSA-35c4-f3rq-f9g3 (withdrawn) +# .................................................................... +# archive-tar-minitar | https://github.com/advisories/GHSA-cwp3-834g-x79g (withdrawn) +# bootstrap | https://github.com/advisories/GHSA-9mvj-f7w8-pvh2 (withdrawn) +# colorscore | https://github.com/advisories/GHSA-9wcm-rrvh-qjc8 (withdrawn) +# devise_invitable | https://github.com/advisories/GHSA-wj5j-xpcj-45gc (withdrawn) +# doorkeeper | https://github.com/advisories/GHSA-5p9f-55j8-922m (withdrawn) +# espeak-ruby | https://github.com/advisories/GHSA-w655-w578-99pq (withdrawn) +# festivaltts4r | https://github.com/advisories/GHSA-9wv8-jgw4-4g28 (withdrawn) +# govuk_tech_docs | https://github.com/advisories/GHSA-4mvm-xh8j-fv27 (withdrawn) +# jquery-ui-rails | https://github.com/advisories/GHSA-g8q2-24jh-5hpc (withdrawn) +# metasploit-framework | https://github.com/advisories/GHSA-6pm2-j2v8-h3cj (withdrawn) +# minitar | https://github.com/advisories/GHSA-cwp3-834g-x79g (withdrawn) +# prosemirror_to_html | https://github.com/advisories/GHSA-vfpf-xmwh-8m65 (withdrawn) +# rack | https://github.com/advisories/GHSA-9vc2-p34x-jhxh (withdrawn) +# rack-mini-profiler | https://github.com/advisories/GHSA-995j-587r-259w (withdrawn) +# resque-scheduler | https://github.com/advisories/GHSA-q7jc-v6f2-q9jr (withdrawn) +# rubyzip | https://github.com/advisories/GHSA-3q5q-f79q-7hr2 (withdrawn) +# safemode | https://github.com/advisories/GHSA-44vc-fpcg-5cc5 (withdrawn) +# safemode | https://github.com/advisories/GHSA-8474-rc7c-wrhp (withdrawn) +# spree_auth_devise | https://github.com/advisories/GHSA-6mqr-q86q-6gwr (withdrawn) +# web-console | https://github.com/advisories/GHSA-82x2-g7vr-39wq (withdrawn)