Adding Advisory GHSA-vg3r-rm7w-2xgh for ruby-3.0 (#4957)

Co-authored-by: octo-sts[bot] <157150467+octo-sts@users.noreply.github.com>
wolfi-dev · May 17, 2024 · 779db7a · 779db7a
1 parent 38d6c41
commit 779db7a
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/ruby-3.0.advisories.yaml b/ruby-3.0.advisories.yaml
@@ -140,3 +140,20 @@ advisories:
         type: fixed
         data:
           fixed-version: 3.0.6-r5
+
+  - id: CVE-2024-35176
+    aliases:
+      - GHSA-vg3r-rm7w-2xgh
+    events:
+      - timestamp: 2024-05-17T08:08:12Z
+        type: detection
+        data:
+          type: scan/v1
+          data:
+            subpackageName: ruby-3.0
+            componentID: e7145b2b626943e3
+            componentName: rexml
+            componentVersion: 3.2.5
+            componentType: gem
+            componentLocation: /usr/lib/ruby/gems/3.0.0/specifications/rexml-3.2.5.gemspec
+            scanner: grype