From 35e4764c97fe37ce1ebc9547575e90714f9817bc Mon Sep 17 00:00:00 2001
From: Al Snow <43523+jasnow@users.noreply.github.com>
Date: Wed, 7 Oct 2026 11:56:40 -0400
Subject: [PATCH] Added cvss_v4 to 1 existing camaleon_cms advisory

---
 gems/camaleon_cms/CVE-2024-48652.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/gems/camaleon_cms/CVE-2024-48652.yml b/gems/camaleon_cms/CVE-2024-48652.yml
index 4c4d2c2a1c..4d81873807 100644
--- a/gems/camaleon_cms/CVE-2024-48652.yml
+++ b/gems/camaleon_cms/CVE-2024-48652.yml
@@ -10,6 +10,7 @@ description: |
   remote attacker to execute arbitrary code via the content group
   name field.
 cvss_v3: 4.8
+cvss_v4: 4.8
 patched_versions:
   - ">= 2.8.0"
 related:
@@ -25,4 +26,5 @@ related:
     - https://github.com/advisories/GHSA-hhxg-rvc9-8726
 notes: |
   - cvss_v3 from nvd.nist.gov URL
+  - cvss_v3 from GHSA URL
   - PR#1075 mentions "content groups"