Sync with GitHub Security Advisories

* Add CVE-2020-36624 for text_helpers

Author: reedloden

gems/text_helpers/CVE-2020-36624.yml

@@ -0,0 +1,23 @@
+---
+gem: text_helpers
+cve: 2020-36624
+ghsa: 74hc-57m5-83ch
+url: https://github.com/ahorner/text-helpers/pull/19
+title: text_helpers uses web link to untrusted target with window.opener access
+date: 2022-12-22
+description: A vulnerability was found in ahorner text-helpers 1.1.0/1.1.1. It has
+  been declared as critical. This vulnerability affects unknown code of the file lib/text_helpers/translation.rb.
+  The manipulation of the argument link leads to use of web link to untrusted target
+  with window.opener access. The attack can be initiated remotely. Upgrading to version
+  1.2.0 can address this issue. The name of the patch is 184b60ded0e43c985788582aca2d1e746f9405a3.
+  It is recommended to upgrade the affected component. The identifier of this vulnerability
+  is VDB-216520.
+unaffected_versions:
+- "< 1.1.0"
+patched_versions:
+- ">= 1.2.0"
+related:
+  url:
+  - https://github.com/ahorner/text-helpers/commit/184b60ded0e43c985788582aca2d1e746f9405a3
+  - https://github.com/ahorner/text-helpers/releases/tag/v1.2.0
+  - https://vuldb.com/?id.216520