Adding Advisory GHSA-vg3r-rm7w-2xgh for ruby-3.2 (#4960)

Co-authored-by: octo-sts[bot] <157150467+octo-sts@users.noreply.github.com>
wolfi-dev · May 17, 2024 · 3df81eb · 3df81eb
1 parent b5bfd85
commit 3df81eb
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/ruby-3.2.advisories.yaml b/ruby-3.2.advisories.yaml
@@ -100,3 +100,20 @@ advisories:
         type: fixed
         data:
           fixed-version: 3.2.3-r3
+
+  - id: CVE-2024-35176
+    aliases:
+      - GHSA-vg3r-rm7w-2xgh
+    events:
+      - timestamp: 2024-05-17T08:38:53Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: ruby-3.2
+            componentID: a1219a302da5c7f4
+            componentName: rexml
+            componentVersion: 3.2.5
+            componentType: gem
+            componentLocation: /usr/lib/ruby/gems/3.2.0/specifications/rexml-3.2.5.gemspec
+            scanner: grype