Skip to content

Removed disputed unpatched advisory + added to ignore file - #1271

Merged
flavorjones merged 1 commit into
rubysec:masterfrom
jasnow:disputed-adv
Oct 26, 2026
Merged

flavorjones merged 1 commit into
rubysec:masterfrom
jasnow:disputed-adv

Conversation

@jasnow

@jasnow jasnow commented Oct 24, 2026 •

Copy link
Copy Markdown
Member

Removed disputed unpatched advisory + added to ignore file

  • Removed: gems/camaleon_cms/CVE-2018-18260.yml
  • Added above to: lib/rad-ignores.sh.

NOTES:

@jasnow
jasnow requested review from flavorjones and simi October 24, 2026 14:04

@flavorjones flavorjones left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, @jasnow. NVD marks this CVE disputed, and the file's version range made bundler-audit flag every camaleon_cms release since 2.4.0.

@flavorjones
flavorjones merged commit c479e4c into rubysec:master Oct 26, 2026
2 checks passed
@jasnow
jasnow deleted the disputed-adv branch October 26, 2026 19:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants