rubysec/ruby-advisory-db — pull request #66 by joergschiller (2013-12-17 13:37:20+00:00)
Title: Added will_paginate 3.0.5 bugfix & security release

A few months ago the autor of will_paginate publishes a new release stating that it fixes a XSS vulnerability. I would like to add the matching Ruby Advisory DB entry.

Please see https://groups.google.com/forum/#!topic/will_paginate/Dguinf-5Sbw

There is no CVE or OSVDB identifier yet. How do you manage this circumstance? I've set CVE to an empty string in order to pass the tests as a quick fix and reported the vulnerability to OSVDB.

Thanks
Joerg