added spec to make sure data.json is correct
stealing some recent CVEs from ruby-advisory-db

ftpd, dragonfly, rdoc