Skip to content

GHSA SYNC: 1 new advisory - #947

Merged
postmodern merged 1 commit into
rubysec:masterfrom
kiskoza:CVE-2025-68696
Jan 10, 2026
Merged

GHSA SYNC: 1 new advisory#947
postmodern merged 1 commit into
rubysec:masterfrom
kiskoza:CVE-2025-68696

Conversation

@kiskoza

@kiskoza kiskoza commented Jan 6, 2026

Copy link
Copy Markdown
Contributor

@jasnow

jasnow commented Jan 6, 2026

Copy link
Copy Markdown
Member

Three references that can have cvss v2 to v4 are
nvd.nist.gov, https://github.com/advisories, and the security advisory inside the repo.

@jasnow

jasnow commented Jan 6, 2026

Copy link
Copy Markdown
Member

Two things you can do to hep @postmodern before pushing a PR is:

This probably needs to be added to README.

@kiskoza

kiskoza commented Jan 6, 2026

Copy link
Copy Markdown
Contributor Author

Thanks for the feedback, I hope it looks better now

@jasnow

jasnow commented Jan 6, 2026

Copy link
Copy Markdown
Member

Add "cvss_v4: 8.8" based on nvd.nist.gov reference.

@postmodern postmodern left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

YAML formatting of description: is wrong. Should use inline block text for readability.

Comment thread gems/httparty/CVE-2025-68696.yml Outdated
@postmodern
postmodern merged commit fb5cfa5 into rubysec:master Jan 10, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants