Publish Advisories

GHSA-57hq-95w6-v4fc
GHSA-qmpg-8xg6-ph5q

Author: advisory-database[bot]

advisories/github-reviewed/2026/03/GHSA-57hq-95w6-v4fc/GHSA-57hq-95w6-v4fc.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-57hq-95w6-v4fc",
-  "modified": "2026-03-17T17:24:17Z",
+  "modified": "2026-03-18T19:37:07Z",
   "published": "2026-03-17T17:24:17Z",
   "aliases": [
     "CVE-2026-32700"
@@ -54,6 +54,10 @@
     {
       "type": "PACKAGE",
       "url": "https://github.com/heartcombo/devise"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/devise/GHSA-57hq-95w6-v4fc.yml"
     }
   ],
   "database_specific": {

advisories/github-reviewed/2026/03/GHSA-qmpg-8xg6-ph5q/GHSA-qmpg-8xg6-ph5q.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qmpg-8xg6-ph5q",
-  "modified": "2026-03-12T17:29:30Z",
+  "modified": "2026-03-18T19:37:52Z",
   "published": "2026-03-12T17:29:30Z",
   "aliases": [],
   "summary": "Trix has a Stored XSS vulnerability through serialized attributes",
@@ -72,6 +72,10 @@
     {
       "type": "WEB",
       "url": "https://github.com/basecamp/trix/releases/tag/v2.1.17"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/action_text-trix/GHSA-qmpg-8xg6-ph5q.yml"
     }
   ],
   "database_specific": {