|
| 1 | +#!/usr/bin/env bash |
| 2 | + |
| 3 | +echo "In rad-ignores.sh" |
| 4 | + |
| 5 | +REPON="ruby-advisory-db" |
| 6 | +if [ "X`pwd |sed -e "s,.*/,,"`X" == "X${REPON}X" ] ; then |
| 7 | + : |
| 8 | +else |
| 9 | + echo "Change dir to [${REPON}] first." |
| 10 | + exit |
| 11 | +fi |
| 12 | + |
| 13 | +# 10/26/2024, 5/25/2026: Autolab is not a Rubygem so remove it. |
| 14 | +rm -f gems/Autolab/CVE-2024-49376.yml |
| 15 | + |
| 16 | +# 1/29/2026, 5/25/2026: rails is not a Rubygem so remove it. |
| 17 | +# Covered by gems/actionpack/CVE-2024-26143.yml file |
| 18 | +rm -f gems/rails/CVE-2024-26143.yml |
| 19 | + |
| 20 | +# Extra GHSA advisory. |
| 21 | +# 3/31/2026, 5/25/2026: Using GHSA-46fp-8f5p-pf2m.yml so |
| 22 | +# GHSA-2j22-pr5w-6gq8.yml is dup. |
| 23 | +rm -f gems/loofah/GHSA-2j22-pr5w-6gq8.yml |
| 24 | + |
| 25 | +# Use CVE over GHSA prefix. |
| 26 | +# 9/23/2024, 1/19/2026: 5/25/2026: Using gems/omniauth-saml/CVE-2024-45409.yml |
| 27 | +rm -f gems/omniauth-saml/GHSA-cvp8-5r8g-fhvq.yml |
| 28 | + |
| 29 | +# Use CVE over GHSA prefix. |
| 30 | +# 1/29/2026, 5/25/2026; Using gems/user_agent_parser/CVE-2020-5243.yml |
| 31 | +# https://github.com/advisories/GHSA-cmcx-xhr8-3w9p |
| 32 | +# https://github.com/advisories/GHSA-pcqq-5962-hvcw |
| 33 | +rm -f gems/user_agent_parser/GHSA-pcqq-5962-hvcw.yml |
| 34 | + |
| 35 | +# Use CVE over GHSA prefix. |
| 36 | +# 1/29/2026, 5/25/2026: Using gems/nokogiri/CVE-2021-30560.yml |
| 37 | +#https://github.com/advisories/GHSA-fq42-c5rg-92c2 |
| 38 | +#https://github.com/advisories/GHSA-59gp-qqm7-cw4j |
| 39 | +rm -f gems/nokogiri/GHSA-fq42-c5rg-92c2.yml |
| 40 | + |
| 41 | +# Use CVE over GHSA prefix. |
| 42 | +# 1/19/2026, 5/25/2026: Using gems/nokogiri/CVE-2018-25032.yml |
| 43 | +# https://github.com/advisories/GHSA-v6gp-9mmm-c6p5 |
| 44 | +# https://github.com/advisories/GHSA-jc36-42cf-vqwj |
| 45 | +rm -f gems/nokogiri/GHSA-v6gp-9mmm-c6p5.yml |
| 46 | + |
| 47 | +# Use CVE over GHSA prefix. |
| 48 | +# 1/29/2026, 5/25/2026: Using gems/nokogiri/CVE-2022-23437.yml |
| 49 | +# https://github.com/advisories/GHSA-xxx9-3xcr-gjj3 |
| 50 | +rm -rf gems/nokogiri/GHSA-xxx9-3xcr-gjj3.yml |
| 51 | + |
| 52 | +# Use CVE over GHSA prefix. |
| 53 | +# 5/31/2026: gems/nokogiri/CVE-2022-24839.yml |
| 54 | +rm -rf gems/nokogiri/GHSA-gx8x-g87m-h5q6.yml |
| 55 | + |
| 56 | +exit |
| 57 | + |
| 58 | +# AL>> QUESTION (ruby or jruby)? |
| 59 | +# 5/25/2026: Using gems/nokogiri/CVE-2022-24839.yml (On JRuby) |
| 60 | +# https://github.com/advisories/GHSA-gx8x-g87m-h5q6 (on JRuby) |
| 61 | +#rm -f gems/nokogiri/GHSA-gx8x-g87m-h5q6.yml |
| 62 | + |
| 63 | +# 5/25/2026: In PR queue |
| 64 | +#gems/erb/CVE-2026-41316.yml |
| 65 | +#gems/faraday/CVE-2026-33637.yml |
| 66 | +#gems/jwt/CVE-2026-45363.yml |
0 commit comments