Skip to content

GHSA SYNC: 1 new advisory#947

Merged
postmodern merged 1 commit intorubysec:masterfrom
kiskoza:CVE-2025-68696
Jan 10, 2026
Merged

GHSA SYNC: 1 new advisory#947
postmodern merged 1 commit intorubysec:masterfrom
kiskoza:CVE-2025-68696

Conversation

@kiskoza
Copy link
Copy Markdown
Contributor

@kiskoza kiskoza commented Jan 6, 2026

@jasnow
Copy link
Copy Markdown
Contributor

jasnow commented Jan 6, 2026

Three references that can have cvss v2 to v4 are
nvd.nist.gov, https://github.com/advisories, and the security advisory inside the repo.

@jasnow
Copy link
Copy Markdown
Contributor

jasnow commented Jan 6, 2026

Two things you can do to hep @postmodern before pushing a PR is:

This probably needs to be added to README.

@kiskoza
Copy link
Copy Markdown
Contributor Author

kiskoza commented Jan 6, 2026

Thanks for the feedback, I hope it looks better now

@jasnow
Copy link
Copy Markdown
Contributor

jasnow commented Jan 6, 2026

Add "cvss_v4: 8.8" based on nvd.nist.gov reference.

Copy link
Copy Markdown
Member

@postmodern postmodern left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

YAML formatting of description: is wrong. Should use inline block text for readability.

Comment thread gems/httparty/CVE-2025-68696.yml Outdated
@postmodern postmodern merged commit fb5cfa5 into rubysec:master Jan 10, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants