Updated advisory posts against rubysec/ruby-advisory-db@4c738a9

Author: jasnow

advisories/_posts/2024-02-26-CVE-2024-27456.md

@@ -0,0 +1,23 @@
+---
+layout: advisory
+title: 'CVE-2024-27456 (rack-cors): Rack CORS Middleware has Insecure File Permissions'
+comments: false
+categories:
+- rack-cors
+advisory:
+  gem: rack-cors
+  cve: 2024-27456
+  ghsa: 785g-282q-pwvx
+  url: https://github.com/advisories/GHSA-785g-282q-pwvx
+  title: Rack CORS Middleware has Insecure File Permissions
+  date: 2024-02-26
+  description: |
+    rack-cors (aka Rack CORS Middleware) 2.0.1 has 0666 permissions
+    for the .rb files.
+  notes: Never patched
+  related:
+    url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-27456
+    - https://github.com/cyu/rack-cors/issues/274
+    - https://github.com/advisories/GHSA-785g-282q-pwvx
+---