Hi @decsecre583, I just realized what happened. This PR appears to be for GHSA-hvf8-h2qh-37m9 and #5633 appears to be for GHSA-48w2-rm65-62xx. I agree with adding puma/puma@436c718 and puma/puma@fb6ad8f to the references of GHSA-48w2-rm65-62xx. I also agree with adding electron/electron@5c8e7e8, electron/electron@4294000, electron/electron@36c695c, and electron/electron@0bbd268, to GHSA-hvf8-h2qh-37m9. I'll get help from a colleague to make sure you get credit on both advisories. Since GitHub is the CNA for both corresponding CVE records, I'll also add puma/puma@436c718 and puma/puma@fb6ad8f to the references of https://www.cve.org/CVERecord?id=CVE-2021-41136 and electron/electron@5c8e7e8, electron/electron@4294000, electron/electron@36c695c, and electron/electron@0bbd268, to the references of https://www.cve.org/CVERecord?id=CVE-2020-26272.

Hi @decsecre583! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!