[Git][security-tracker-team/security-tracker][master] Updat status for three rails issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Nov 4 15:27:58 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8ea359a6 by Salvatore Bonaccorso at 2026-11-04T16:27:34+01:00
Updat status for three rails issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8,7 +8,7 @@ CVE-2026-XXXX [GHSA-wm3x-v3qw-4jh3]
 	- rails <unfixed>
 	NOTE: https://github.com/rails/rails/security/advisories/GHSA-wm3x-v3qw-4jh3
 CVE-2026-XXXX [GHSA-2gff-2mmg-m73p]
-	- rails <unfixed>
+	- rails <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/rails/rails/security/advisories/GHSA-2gff-2mmg-m73p
 CVE-2026-XXXX [GHSA-8474-xrp6-wh69]
 	- rails <unfixed>
@@ -26,13 +26,13 @@ CVE-2026-XXXX [GHSA-68p9-83h6-5wpj]
 	- rails <unfixed>
 	NOTE: https://github.com/rails/rails/security/advisories/GHSA-68p9-83h6-5wpj
 CVE-2026-XXXX [GHSA-2w9f-fxwj-w2qf]
-	- rails <unfixed>
+	- rails <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/rails/rails/security/advisories/GHSA-2w9f-fxwj-w2qf
 CVE-2026-XXXX [GHSA-rwvh-fw6r-pwvp]
 	- rails <unfixed>
 	NOTE: https://github.com/rails/rails/security/advisories/GHSA-rwvh-fw6r-pwvp
 CVE-2026-XXXX [GHSA-4v2w-w6g6-f8f8]
-	- rails <unfixed>
+	- rails <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/rails/rails/security/advisories/GHSA-4v2w-w6g6-f8f8
 CVE-2026-XXXX [GHSA-p2pm-g2h6-7j5j]
 	- rails <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ea359a6da40c887495b23bae7bab5958ee83b1f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ea359a6da40c887495b23bae7bab5958ee83b1f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/52a51d4c/attachment.htm>


More information about the debian-security-tracker-commits mailing list