Updated advisory posts against rubysec/ruby-advisory-db@27c668b

Author: jasnow

advisories/_posts/2016-02-04-CVE-2016-1000305.md

@@ -8,6 +8,7 @@ categories:
 advisory:
   gem: guard-livereload
   cve: 2016-1000305
+  ghsa: g65v-27r3-5p6m
   url: https://security.snyk.io/vuln/SNYK-RUBY-GUARDLIVERELOAD-20361
   title: Directory traversal vulnerability in guard-livereload
   date: 2016-02-04
@@ -27,6 +28,7 @@ advisory:
     A directory traversal vulnerability exists in
     guard-livereload before version 2.5.2.
   cvss_v3: 5.3
+  cvss_v4: 6.9
   patched_versions:
   - ">= 2.5.2"
   related:
@@ -40,12 +42,14 @@ advisory:
     - https://github.com/guard/guard-livereload/issues/159
     - https://github.com/rubysec/ruby-advisory-db/issues/289
     - https://github.com/rubysec/ruby-advisory-db/pull/1026
+    - https://advisories.gitlab.com/gem/guard-livereload/CVE-2016-1000305
+    - https://github.com/advisories/GHSA-g65v-27r3-5p6m
   notes: |
     - 1/11/2026, 6/8/2026 Notes
       - 1. Deal with cve-2016-1000305
            - real, reserved, published?(NONE OF THE ABOVE)
              - (DEAD) https://cve.report/CVE-2016-1000305 (CVE NOT PUBLISHED)
-      - 2. No GHSA for guard-livereload gem. (checked/fyi)
+      - 2. (UPDATED) No GHSA for guard-livereload gem. (checked/fyi)
       - 3. "date: 2016-02-03" came from gem release date. (fyi)
       - 4. Pick which description: text to use. (done)
       - 5. Check "unaffected_versions:" and "patched_versions:" values. (done)
@@ -61,4 +65,7 @@ advisory:
       - WARNING: The gem has not been released after fixing this
          vulnerability in version 2.5.2.
          - Users should consider migrating to rack-livereload as an alternative.
+    - 8/11/2026
+      - 1. Added GHSA.
+      - 2. cvss_v4 came from GHSA
 ---

advisories/_posts/2026-06-09-CVE-2026-54522.md

@@ -25,13 +25,19 @@ advisory:
     cleared-and-rewritten buffer discloses the second buffer's bytes — a
     same-process use-after-free with cross-buffer information
     disclosure (and the symmetric write-corruption).
+  cvss_v4: 2.1
   patched_versions:
   - ">= 1.8.2"
   related:
     url:
     - https://www.cve.org/CVERecord/SearchResults?query=CVE-2026-54522
     - https://github.com/msgpack/msgpack-ruby/blob/master/ChangeLog
     - https://github.com/msgpack/msgpack-ruby/compare/v1.8.1...v1.8.2
+    - https://advisories.gitlab.com/gem/msgpack/CVE-2026-54522
+    - https://osv.dev/vulnerability/GHSA-4mrv-5p47-p938
     - https://github.com/msgpack/msgpack-ruby/security/advisories/GHSA-4mrv-5p47-p938
-  notes: "- CVE is reserved, but not published so no cvss values.\n"
+    - https://github.com/advisories/GHSA-4mrv-5p47-p938
+  notes: |
+    - CVE is reserved, but not published so no cvss values.
+    - cvss_v4 from GHSA
 ---

advisories/_posts/2026-06-10-CVE-2026-53510.md

@@ -35,7 +35,9 @@ advisory:
     - https://github.com/savonrb/savon/blob/main/CHANGELOG.md#2172---2026-06-10
     - https://github.com/savonrb/savon/blob/v2.17.1/lib/savon/model.rb#L30-L45
     - https://gist.github.com/connorshea/6cdc951abe0e1ffd2d1cc0fa7cd6b74d
+    - https://advisories.gitlab.com/gem/savon/CVE-2026-53510
     - https://github.com/savonrb/savon/security/advisories/GHSA-mx5j-mp4f-g8jg
+    - https://github.com/advisories/GHSA-mx5j-mp4f-g8jg
   notes: |
     - Found CVE # in CHANGELOG file.
     - CVE is reserved, but not published so no non-GHSA cvss values.