Skip to content

Conversation

@kiskoza
Copy link
Contributor

@kiskoza kiskoza commented Jan 6, 2026

@jasnow
Copy link
Contributor

jasnow commented Jan 6, 2026

Three references that can have cvss v2 to v4 are
nvd.nist.gov, https://github.com/advisories, and the security advisory inside the repo.

@jasnow
Copy link
Contributor

jasnow commented Jan 6, 2026

Two things you can do to hep @postmodern before pushing a PR is:

This probably needs to be added to README.

@kiskoza
Copy link
Contributor Author

kiskoza commented Jan 6, 2026

Thanks for the feedback, I hope it looks better now

@jasnow
Copy link
Contributor

jasnow commented Jan 6, 2026

Add "cvss_v4: 8.8" based on nvd.nist.gov reference.

Copy link
Member

@postmodern postmodern left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

YAML formatting of description: is wrong. Should use inline block text for readability.

@postmodern postmodern merged commit fb5cfa5 into rubysec:master Jan 10, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants