Postmodern

Results 523 comments of Postmodern

Closing this as the scope of [ruby-advisory-db](https://github.com/rubysec/ruby-advisory-db) is security advisories for vulnerabilities.

Confirmed CVE-2013-2065 is discussing the `DL::Function#call` tainting issue.

Updated the README in 183a5806ea381630329c87ec76361089dd9d52ac.

@jasnow has added the `related:` CVE and GHSA IDs to the two vulnerabilities (PR #646) . We should avoid merging CVEs as they are supposed to be individually enumerated vulnerabilities.

@jasnow I believe this would be a Ruby library for interacting with the `ruby-advisory-db`, so that other tools could interface with it in the same way that `bundler-audit` does.

Maybe it could have a rudimentary CLI that could update the DB or query a specific advisory or `gem-version`.

We could create a static JSON feed for the website as yet-another-way to get the advisory data. Might be worth creating a separate issue in the [website repo](https://github.com/rubysec/rubysec.github.io/issues).

I noticed this PR was approved, but still think it's out of scope of tracking security advisories. The amount of data to track whether a gem is currently maintained is...