Skip to content

Commit 7428f2f

Browse files
jasnowRubySec CI
authored andcommitted
Updated advisory posts against rubysec/ruby-advisory-db@0c1a72a
1 parent 50608df commit 7428f2f

1 file changed

Lines changed: 12 additions & 1 deletion

File tree

advisories/_posts/2026-03-10-CVE-2026-1776.md

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,13 +30,24 @@ advisory:
3030
cvss_v4: 6.0
3131
unaffected_versions:
3232
- "< 2.4.5.0"
33-
notes: Never patched; last release was 2.9.1
33+
patched_versions:
34+
- ">= 2.9.2"
3435
related:
3536
url:
3637
- https://nvd.nist.gov/vuln/detail/CVE-2026-1776
38+
- https://rubygems.org/gems/camaleon_cms/versions/2.9.2
39+
- https://github.com/owen2345/camaleon-cms/releases/tag/2.9.2
3740
- https://github.com/owen2345/camaleon-cms/pull/1127
3841
- https://github.com/owen2345/camaleon-cms/commit/f54a77e2a7be601215ea1b396038c589a0cab9af
3942
- https://camaleon.website
4043
- https://www.vulncheck.com/advisories/camaleon-cms-aws-uploader-authenticated-path-traversal-arbitrary-file-read
4144
- https://github.com/advisories/GHSA-jw5g-f64p-6x78
45+
notes: |
46+
- Note that the rubygem name is "camaleon_cms" and
47+
repo name is "camaleon-cms".
48+
- Found PR#1127 (from GHSA and nvd.nist.gov) in
49+
https://github.com/owen2345/camaleon-cms/releases/tag/2.9.2
50+
release notes.
51+
- cvss_v3 from nvd.nist.gov URL.
52+
- cvss_v4 from GHSA and nvd.nist.gov URLs.
4253
---

0 commit comments

Comments
 (0)