[Git][security-tracker-team/security-tracker][master] new ruby-devise issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
14fb6346 by Moritz Muehlenhoff at 2026-03-19T12:45:37+01:00
new ruby-devise issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -52,7 +52,11 @@ CVE-2026-32722 (Memray is a memory profiler for Python. Prior to Memray 1.19.2,
 CVE-2026-32703 (OpenProject is an open-source, web-based project management software.  ...)
 	NOT-FOR-US: OpenProject
 CVE-2026-32700 (Devise is an authentication solution for Rails based on Warden. Prior  ...)
-	TODO: check
+	- ruby-devise <removed>
+	[bookworm] - ruby-devise <ignored> (Minor issue)
+	NOTE: https://github.com/heartcombo/devise/security/advisories/GHSA-57hq-95w6-v4fc
+	NOTE: https://github.com/heartcombo/devise/issues/5783
+	NOTE: https://github.com/heartcombo/devise/pull/5784
 CVE-2026-32698 (OpenProject is an open-source, web-based project management software.  ...)
 	NOT-FOR-US: OpenProject
 CVE-2026-32638 (StudioCMS is a server-side-rendered, Astro native, headless content ma ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14fb6346348181c1312cafcc4a4c629d76a1186e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14fb6346348181c1312cafcc4a4c629d76a1186e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260319/2c80aefb/attachment.htm>