From cfa851829cfd53bdb9c0476e5e2562c209e036f1 Mon Sep 17 00:00:00 2001
From: Al Snow <43523+jasnow@users.noreply.github.com>
Date: Mon, 17 Aug 2026 20:24:34 -0400
Subject: [PATCH 1/2] One new mail gem advisory

---
 gems/mail/GHSA-mvxr-6m87-mv2q.yml | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 gems/mail/GHSA-mvxr-6m87-mv2q.yml

diff --git a/gems/mail/GHSA-mvxr-6m87-mv2q.yml b/gems/mail/GHSA-mvxr-6m87-mv2q.yml
new file mode 100644
index 0000000000..ad89b91919
--- /dev/null
+++ b/gems/mail/GHSA-mvxr-6m87-mv2q.yml
@@ -0,0 +1,28 @@
+---
+gem: mail
+ghsa: mvxr-6m87-mv2q
+url: https://github.com/mikel/mail/security/advisories/GHSA-mvxr-6m87-mv2q
+title: Email address spoofing via malformed RFC 2047 encoded-words in mail
+date: 2026-07-1
+description: |
+  ## Summary
+
+  Mail::Utilities.q_value_decode and Mail::Utilities.b_value_decode
+  decoded only the first RFC 2047 encoded-word in a string and used
+  an overly greedy pattern to match the charset token. A crafted,
+  malformed encoded-word embedded in an address display name or local
+  part could cause the decoded output to differ from what a human
+  reviewer or downstream parser would expect, allowing an attacker
+  to spoof the apparent sender/recipient address.
+cvss_v3: 5.1
+patched_versions:
+  - ">= 2.9.1"
+related:
+  url:
+    - https://rubygems.org/gems/mail/versions/2.9.1
+    - https://github.com/mikel/mail/releases/tag/2.9.1
+    - https://github.com/mikel/mail/pull/1664
+    - https://github.com/mikel/mail/security/advisories/GHSA-mvxr-6m87-mv2q
+notes: |
+  - cvss_v3, date from repo GHSA
+  - No CVE value.

From 9bade9d9af5011bbf245c187220af216d545cc95 Mon Sep 17 00:00:00 2001
From: Al Snow <43523+jasnow@users.noreply.github.com>
Date: Mon, 17 Aug 2026 20:31:35 -0400
Subject: [PATCH 2/2] Fix date format in GHSA-mvxr-6m87-mv2q.yml

---
 gems/mail/GHSA-mvxr-6m87-mv2q.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gems/mail/GHSA-mvxr-6m87-mv2q.yml b/gems/mail/GHSA-mvxr-6m87-mv2q.yml
index ad89b91919..9d9b51e94e 100644
--- a/gems/mail/GHSA-mvxr-6m87-mv2q.yml
+++ b/gems/mail/GHSA-mvxr-6m87-mv2q.yml
@@ -3,7 +3,7 @@ gem: mail
 ghsa: mvxr-6m87-mv2q
 url: https://github.com/mikel/mail/security/advisories/GHSA-mvxr-6m87-mv2q
 title: Email address spoofing via malformed RFC 2047 encoded-words in mail
-date: 2026-07-1
+date: 2026-07-01
 description: |
   ## Summary