Merge pull request #1109 from kwent/view-component-3.25.0-patch

Add view_component 3.25.0 as patched for CVE-2026-44836 and CVE-2026-44837.

Thanks for you contribution.

Author: jasnow

gems/view_component/CVE-2026-44836.yml

@@ -25,9 +25,11 @@ unaffected_versions:
   - "< 3.0.0"
 patched_versions:
   - ">= 4.9.0"
+  - ">= 3.25.0, < 4.0.0"
 related:
   url:
     - https://viewcomponent.org/CHANGELOG.html#490
     - https://github.com/ViewComponent/view_component/releases/tag/v4.9.0
+    - https://github.com/ViewComponent/view_component/releases/tag/v3.25.0
     - https://github.com/ViewComponent/view_component/security/advisories/GHSA-7f3r-gwc9-2995
     - https://github.com/advisories/GHSA-7f3r-gwc9-2995

gems/view_component/CVE-2026-44837.yml

@@ -18,9 +18,11 @@ unaffected_versions:
   - "< 3.0.0"
 patched_versions:
   - ">= 4.9.0"
+  - ">= 3.25.0, < 4.0.0"
 related:
   url:
     - https://viewcomponent.org/CHANGELOG.html#490
     - https://github.com/ViewComponent/view_component/releases/tag/v4.9.0
+    - https://github.com/ViewComponent/view_component/releases/tag/v3.25.0
     - https://github.com/ViewComponent/view_component/security/advisories/GHSA-hg3h-g7xc-f7vp
     - https://github.com/advisories/GHSA-hg3h-g7xc-f7vp