Skip to content

GHSA/SYNC: Add cvss_v3 field/value to 1 advisory - #1027

Merged
reedloden merged 1 commit into
rubysec:masterfrom
jasnow:ghsa-syncbot-2026-03-31-09_04_47
May 12, 2026
Merged

GHSA/SYNC: Add cvss_v3 field/value to 1 advisory#1027
reedloden merged 1 commit into
rubysec:masterfrom
jasnow:ghsa-syncbot-2026-03-31-09_04_47

Conversation

@jasnow

@jasnow jasnow commented Mar 31, 2026

Copy link
Copy Markdown
Member

GHSA/SYNC: Add cvss_v3 field/value to 1 advisory

@rakvium

rakvium commented May 4, 2026

Copy link
Copy Markdown
Contributor

@reedloden I have noticed that Hal Brodigan @postmodern has not approved any updates to Ruby Advisory Database since 30th March 2026.
There also were no other GitHub contributions from them and no social media updates since the same day.
This seems very unusual for them, and there was no announcement on planned inactivity.
Do you, by chance, have any means to check if they are safe and sound?

And, if possible, could you please take care of the pull requests for now?

@jasnow

jasnow commented May 6, 2026

Copy link
Copy Markdown
Member Author

@reedloden I have noticed that Hal Brodigan @postmodern has not approved any updates to Ruby Advisory Database since 30th March 2026. There also were no other GitHub contributions from them and no social media updates since the same day. This seems very unusual for them, and there was no announcement on planned inactivity.

  • I am safe and concur with your observations. I have had one email from
    @reedloden in response to an email from me since 3/30/26.
  • This morning I posted an update to bundle.slack.com and rails-link.slack.com.

@rakvium

rakvium commented May 6, 2026

Copy link
Copy Markdown
Contributor

@jasnow nice to know this. What's about @postmodern though?

@jasnow

jasnow commented May 6, 2026

Copy link
Copy Markdown
Member Author

What's about @postmodern though?

See nothing from him across multiple platforms.
Only communicate with him by email and Discord DM and no response since March 30th.

@jasnow

jasnow commented May 7, 2026

Copy link
Copy Markdown
Member Author

Just created a ruby-advisory issue #1040 for additional discussion. Expect to close my current PRs at some point.

@reedloden
reedloden merged commit 06ac537 into rubysec:master May 12, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants