GHSA SYNC: 1 new advisory

[kiskoza]

• gems/httparty/CVE-2025-68696.yml

[jasnow]

Three references that can have cvss v2 to v4 are
nvd.nist.gov, https://github.com/advisories, and the security advisory inside the repo.

[jasnow]

Two things you can do to hep @postmodern before pushing a PR is:

• Run yamlint: https://yamllint.readthedocs.io/en/stable
• Run "rake" and see that it is clean.

This probably needs to be added to README.

[kiskoza]

Thanks for the feedback, I hope it looks better now

[jasnow]

Add "cvss_v4: 8.8" based on nvd.nist.gov reference.

[postmodern]

YAML formatting of description: is wrong. Should use inline block text for readability.

[postmodern]

description: should use inline block text:

description: |
  Foo bar baz ...
  quux ...

You could copy/paste the text into irb to remove the YAML String encoding:

$ irb
>> puts("giant string here ...")

and then copy/paste the output back into the YAML.

[postmodern]

If you paste the full YAML advisory into this command it will reformat the description properly:

ruby -r yaml -e 'puts YAML.load(STDIN.read)["description"]'

Then indent each line by two spaces and copy/paste back into the advisory under description: |.

[kiskoza]

thanks, I updated it