Adding Advisory GHSA-vg3r-rm7w-2xgh for ruby-3.1 (#4958)

Co-authored-by: octo-sts[bot] <157150467+octo-sts@users.noreply.github.com>
wolfi-dev · May 17, 2024 · 0510a24 · 0510a24
1 parent 779db7a
commit 0510a24
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/ruby-3.1.advisories.yaml b/ruby-3.1.advisories.yaml
@@ -268,3 +268,20 @@ advisories:
         type: fixed
         data:
           fixed-version: 3.1.4-r6
+
+  - id: CVE-2024-35176
+    aliases:
+      - GHSA-vg3r-rm7w-2xgh
+    events:
+      - timestamp: 2024-05-17T08:15:27Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: ruby-3.1
+            componentID: b9aa8c178471f53b
+            componentName: rexml
+            componentVersion: 3.2.5
+            componentType: gem
+            componentLocation: /usr/lib/ruby/gems/3.1.0/specifications/rexml-3.2.5.gemspec
+            scanner: grype