From f8ab179e50b7339fb82028bdcf42f7a1d965c287 Mon Sep 17 00:00:00 2001
From: Al Snow <43523+jasnow@users.noreply.github.com>
Date: Tue, 21 Jul 2026 11:13:16 -0400
Subject: [PATCH 1/2] Deleted advisory; Added note to rad-ignores.sh file

---
 gems/omniauth-saml/GHSA-cgp2-2cmh-pf7x.yml | 28 ----------------------
 lib/rad-ignores.sh                         |  4 ++++
 2 files changed, 4 insertions(+), 28 deletions(-)
 delete mode 100644 gems/omniauth-saml/GHSA-cgp2-2cmh-pf7x.yml

diff --git a/gems/omniauth-saml/GHSA-cgp2-2cmh-pf7x.yml b/gems/omniauth-saml/GHSA-cgp2-2cmh-pf7x.yml
deleted file mode 100644
index 0d7b78ce20..0000000000
--- a/gems/omniauth-saml/GHSA-cgp2-2cmh-pf7x.yml
+++ /dev/null
@@ -1,28 +0,0 @@
----
-gem: omniauth-saml
-ghsa: cgp2-2cmh-pf7x
-url: https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-cgp2-2cmh-pf7x
-title: Bad documentation for idp_cert_fingerprint_validator
-date: 2025-05-27
-description: |
-  Documentation:
-  https://github.com/omniauth/omniauth-saml#:~:text=%2C%0A%20%20%3Aidp_cert_fingerprint%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3D%3E%20%22E7%3A91%3AB2%3AE1%3A...%22%2C-,%3Aidp_cert_fingerprint_validator%20%20%20%20%20%3D%3E%20lambda%20%7B%20%7Cfingerprint%7C%20fingerprint%20%7D%2C,-%3Aname_identifier_format%20%20%20%20%20%20%20%20%20%20%20%20%20%3D%3E%20%22urn%3Aoasis%3Anames%3Atc%3ASAML%3A1.1%3Anameid%2Dformat
-
-  Has the line:
-    :idp_cert_fingerprint_validator     => lambda { |fingerprint| fingerprint },
-
-  This proc returns true for any fingerprint, allowing any certificate
-   to be trusted.
-
-  Update documentation to encourage secure defaults.
-patched_versions:
-  - ">= 2.2.4"
-related:
-  url:
-    - https://rubygems.org/gems/omniauth-saml/versions/2.2.4
-    - https://github.com/omniauth/omniauth-saml/releases/tag/v2.2.4
-    - https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-cgp2-2cmh-pf7x
-notes: |
-  - No CVE.
-  - GHSA has "low" severity.
-  - date from GHSA
diff --git a/lib/rad-ignores.sh b/lib/rad-ignores.sh
index 22739d096e..0b0181792c 100755
--- a/lib/rad-ignores.sh
+++ b/lib/rad-ignores.sh
@@ -88,6 +88,10 @@ rm -f gems/webrick/CVE-2026-38969.yml
 # https://github.com/github/cmark-gfm/security/advisories/GHSA-cgh3-p57x-9q7q
 # are not a Ruby gems, no Ruby code.
 
+# https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-cgp2-2cmh-pf7x
+# Dev said, so removed advisory: "The listed vulnerability is an error in
+# their documented usage. Updating the gem does not make an app more secure."
+
 exit
 
 # AL>> QUESTION (ruby or jruby)?

From ebd8a1869c37b0fde8dc6e46c6d9fb8629c4aa2a Mon Sep 17 00:00:00 2001
From: Al Snow <43523+jasnow@users.noreply.github.com>
Date: Tue, 21 Jul 2026 16:41:02 -0400
Subject: [PATCH 2/2] Delete omniauth-saml security advisory file

Remove obsolete security advisory for omniauth-saml.
---
 lib/rad-ignores.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/rad-ignores.sh b/lib/rad-ignores.sh
index 0b0181792c..1ddcc24e33 100755
--- a/lib/rad-ignores.sh
+++ b/lib/rad-ignores.sh
@@ -91,6 +91,7 @@ rm -f gems/webrick/CVE-2026-38969.yml
 # https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-cgp2-2cmh-pf7x
 # Dev said, so removed advisory: "The listed vulnerability is an error in
 # their documented usage. Updating the gem does not make an app more secure."
+rm -f gems/omniauth-saml/GHSA-cgp2-2cmh-pf7x.yml
 
 exit