Publish Advisories

GHSA-r4mg-4433-c7g3
GHSA-4486-gxhx-5mg7
GHSA-gch2-phqh-fg9q
GHSA-jfpc-wj3m-qw2m

Author: advisory-database[bot]

advisories/github-reviewed/2025/08/GHSA-r4mg-4433-c7g3/GHSA-r4mg-4433-c7g3.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-r4mg-4433-c7g3",
-  "modified": "2025-08-21T21:35:37Z",
+  "modified": "2026-01-31T03:54:44Z",
   "published": "2025-08-14T00:06:00Z",
   "aliases": [
     "CVE-2025-24293"
@@ -78,6 +78,10 @@
       "type": "WEB",
       "url": "https://github.com/rails/rails/security/advisories/GHSA-r4mg-4433-c7g3"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24293"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/rails/rails/commit/1b1adf6ee6ca0f3104fcfce79360b2ec1e06a354"
@@ -90,6 +94,10 @@
       "type": "WEB",
       "url": "https://github.com/rails/rails/commit/fb8f3a18c3d97524c0efc29150d1e5f3162fbb13"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-r4mg-4433-c7g3"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/rails/rails"
@@ -106,6 +114,6 @@
     "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2025-08-14T00:06:00Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-01-30T21:15:55Z"
   }
 }

advisories/github-reviewed/2026/01/GHSA-4486-gxhx-5mg7/GHSA-4486-gxhx-5mg7.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4486-gxhx-5mg7",
-  "modified": "2026-01-30T21:28:44Z",
+  "modified": "2026-01-31T03:54:31Z",
   "published": "2026-01-30T21:28:44Z",
   "aliases": [
     "CVE-2026-25129"
@@ -65,6 +65,10 @@
       "type": "WEB",
       "url": "https://github.com/bobthecow/psysh/security/advisories/GHSA-4486-gxhx-5mg7"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25129"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/bobthecow/psysh"
@@ -85,6 +89,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2026-01-30T21:28:44Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-01-30T21:15:58Z"
   }
 }

advisories/github-reviewed/2026/01/GHSA-gch2-phqh-fg9q/GHSA-gch2-phqh-fg9q.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gch2-phqh-fg9q",
-  "modified": "2026-01-30T21:17:25Z",
+  "modified": "2026-01-31T03:54:21Z",
   "published": "2026-01-30T21:17:25Z",
   "aliases": [
     "CVE-2026-25141"
@@ -59,6 +59,14 @@
       "type": "WEB",
       "url": "https://github.com/orval-labs/orval/security/advisories/GHSA-gch2-phqh-fg9q"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/orval-labs/orval/security/advisories/GHSA-h526-wf6g-67jv"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25141"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/orval-labs/orval"
@@ -78,11 +86,12 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-84"
+      "CWE-84",
+      "CWE-94"
     ],
     "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2026-01-30T21:17:25Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-01-30T21:15:58Z"
   }
 }

advisories/github-reviewed/2026/01/GHSA-jfpc-wj3m-qw2m/GHSA-jfpc-wj3m-qw2m.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jfpc-wj3m-qw2m",
-  "modified": "2026-01-30T20:38:35Z",
+  "modified": "2026-01-31T03:53:45Z",
   "published": "2026-01-30T20:38:35Z",
   "aliases": [
     "CVE-2026-25130"
@@ -40,6 +40,10 @@
       "type": "WEB",
       "url": "https://github.com/aliasrobotics/cai/security/advisories/GHSA-jfpc-wj3m-qw2m"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25130"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/aliasrobotics/cai/commit/e22a1220f764e2d7cf9da6d6144926f53ca01cde"
@@ -60,6 +64,6 @@
     "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2026-01-30T20:38:35Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-01-30T21:15:58Z"
   }
 }