From cdb4d726477fadcd285ee658b81f3c8657608c9e Mon Sep 17 00:00:00 2001 From: Al Snow <43523+jasnow@users.noreply.github.com> Date: Sat, 15 Aug 2026 15:19:01 -0400 Subject: [PATCH] Add dup advisories to ignore script --- lib/rad-ignores.sh | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/lib/rad-ignores.sh b/lib/rad-ignores.sh index 79baa6654e..6a12841299 100755 --- a/lib/rad-ignores.sh +++ b/lib/rad-ignores.sh @@ -164,6 +164,14 @@ rm -f gems/sqlite3-ruby/CVE-2026-54619.yml \ # https://github.com/rubygems/rubygems.org/security/advisories/GHSA-4vc5-whwr-7hh2 # https://nvd.nist.gov/vuln/detail/CVE-2024-35221 +# 8/15/2026: Using GHSA filenames (new policy) instead of CVE filenames. +rm -f gems/action_text-trix/CVE-2026-73426.yml \ + gems/action_text-trix/CVE-2026-73427.yml \ + gems/action_text-trix/CVE-2026-73428.yml \ + gems/loofah/CVE-2026-73490.yml \ + gems/loofah/CVE-2026-73491.yml \ + gems/rails-html-sanitizer/CVE-2026-73648.yml + exit # AL>> QUESTION (ruby or jruby)?