Updated advisory posts against rubysec/ruby-advisory-db@d608525

Author: jasnow

advisories/_posts/2019-08-19-CVE-2019-15224.md

@@ -1,21 +1,29 @@
 ---
 layout: advisory
-title: 'CVE-2019-15224 (rest-client): Code execution backdoor in rest-client'
+title: 'CVE-2019-15224 (rest-client): Code execution backdoor in rest-client (Contains
+  Malicious Code)'
 comments: false
 categories:
 - rest-client
 advisory:
   gem: rest-client
   cve: 2019-15224
   ghsa: 333g-rpr4-7hxq
-  url: https://github.com/rest-client/rest-client/issues/713
-  title: Code execution backdoor in rest-client
+  url: https://nvd.nist.gov/vuln/detail/CVE-2019-15224
+  title: Code execution backdoor in rest-client (Contains Malicious Code)
   date: 2019-08-19
   description: |-
     The rest-client gem 1.6.13 for Ruby, as distributed on RubyGems.org,
     included a code-execution backdoor inserted by a third party.
+  cvss_v2: 7.5
   cvss_v3: 9.8
   unaffected_versions:
   - "<= 1.6.9"
   - ">= 1.6.14"
+  patched_versions:
+  - ">= 1.7.0"
+  related:
+    url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2019-15224
+    - https://github.com/advisories/GHSA-333g-rpr4-7hxq
 ---

advisories/_posts/2026-06-19-CVE-2026-54905.md

@@ -9,7 +9,7 @@ advisory:
   gem: concurrent-ruby
   cve: 2026-54905
   ghsa: wv3x-4vxv-whpp
-  url: https://www.cve.org/CVERecord/SearchResults?query=CVE-2026-54905
+  url: https://nvd.nist.gov/vuln/detail/CVE-2026-54905
   title: Concurrent Ruby - `ReentrantReadWriteLock` read-count overflow grants a write
     lock without exclusivity
   date: 2026-06-19
@@ -40,19 +40,19 @@ advisory:
     ### Credit
 
     Pranjali Thakur - depthfirst ([depthfirst.com](<http://depthfirst.com>))
+  cvss_v3: 5.5
   cvss_v4: 2.0
   patched_versions:
   - ">= 1.3.7"
   related:
     url:
-    - https://www.cve.org/CVERecord/SearchResults?query=CVE-2026-54905
+    - https://nvd.nist.gov/vuln/detail/CVE-2026-54905
     - https://rubygems.org/gems/concurrent-ruby/versions/1.3.7
     - https://github.com/ruby-concurrency/concurrent-ruby/releases/tag/v1.3.7
     - https://advisories.gitlab.com/gem/concurrent-ruby/CVE-2026-54905
     - https://github.com/ruby-concurrency/concurrent-ruby/security/advisories/GHSA-wv3x-4vxv-whpp
     - https://github.com/advisories/GHSA-wv3x-4vxv-whpp
   notes: |
     - cvss_v4 from GHSA
-    - CVE is reserved, but not published.
-      - Not on nvd.nist.gov so no cvss_v2 or cvss_v3.
+    - cvss_v3 from nvd.nist.gov
 ---