@@ -225,3 +225,63 @@ rm -f gems/kobako/CVE-2026-55107.yml
 # GHSA-mqcp-p2hv-vw6x - CVE-2025-54314 (thor/Withdrawn)
 # GHSA-9jfq-54vc-9rr2 - CVE-2022-3874  (foreman/Withdrawn)
 # GHSA-w9fp-2996-hhwx - CVE-2019-16254 (ruby/Disputed)
+
+# 8/31/2026: Newly discovered withdrawns and duplicates.
+# ....................................................................
+# DUPLICATES:
+# spree_auth_devise | https://github.com/advisories/GHSA-gpqc-4pp7-5954 (duplicate)
+# spree_auth_devise | https://github.com/advisories/GHSA-8xfw-5q82-3652 (duplicate)
+# audited | https://github.com/advisories/GHSA-v444-jggx-6v7f (duplicate)
+# camaleon_cms | https://github.com/advisories/GHSA-3hp8-6j24-m5gm (duplicate)
+# commonmarker | https://github.com/advisories/GHSA-c2v4-chx5-vff6 (duplicate)
+# encoded_id-rails | https://github.com/advisories/GHSA-4553-hq82-8654 (duplicate)
+# iodine | https://github.com/advisories/GHSA-qwf7-rv77-fcr3 (duplicate)
+# httparty | https://github.com/advisories/GHSA-g47j-3m2m-74qv (duplicate)
+# ====================================================================
+# WITHDRAWNS:
+# nokogiri | https://github.com/advisories/GHSA-jc9r-qcgw-fxq9 (withdrawn)
+# nokogiri | https://github.com/advisories/GHSA-pf9w-gvcf-gv7m (withdrawn)
+# nokogiri | https://github.com/advisories/GHSA-5mwf-688x-mr7x (withdrawn)
+# nokogiri | https://github.com/advisories/GHSA-r3w4-36x6-7r99 (withdrawn)
+# nokogiri | https://github.com/advisories/GHSA-vcc3-rw6f-jv97 (withdrawn)
+# ....................................................................
+# rails-html-sanitizer | https://github.com/advisories/GHSA-77pc-q5q7-qg9h (withdrawn)
+# rails-html-sanitizer | https://github.com/advisories/GHSA-mrhj-2g4v-39qx (withdrawn)
+# rails-html-sanitizer | https://github.com/advisories/GHSA-qc8j-m8j3-rjq6 (withdrawn)
+# ....................................................................
+# actionpack | https://github.com/advisories/GHSA-9chr-4fjh-5rgw (withdrawn)
+# actionpack | https://github.com/advisories/GHSA-vwfg-qj3r-6v3r (withdrawn)
+# actionpack | https://github.com/advisories/GHSA-m53f-rhq8-q6hf (withdrawn)
+# actionpack | https://github.com/advisories/GHSA-5xmj-wm96-fmw8 (withdrawn)
+# actionpack | https://github.com/advisories/GHSA-23v3-qfrj-wmgh (withdrawn)
+# actionpack | https://github.com/advisories/GHSA-qf5x-qgx7-437h (withdrawn)
+# actionpack | https://github.com/advisories/GHSA-544j-77x9-h938 (withdrawn)
+# actionpack | https://github.com/advisories/GHSA-hx46-vwmx-wx95 (withdrawn)
+# actionview | https://github.com/advisories/GHSA-6834-r92f-jj42 (withdrawn)
+# actionview | https://github.com/advisories/GHSA-2pwf-xwr3-hp55 (withdrawn)
+# activemodel | https://github.com/advisories/GHSA-v543-gqhh-6gww (withdrawn)
+# activerecord | https://github.com/advisories/GHSA-7phj-gmgx-2r66 (withdrawn)
+# activerecord | https://github.com/advisories/GHSA-hm48-76wh-q86v (withdrawn)
+# activerecord | https://github.com/advisories/GHSA-m8h6-m9p5-p2f8 (withdrawn)
+# activesupport | https://github.com/advisories/GHSA-35c4-f3rq-f9g3 (withdrawn)
+# ....................................................................
+# archive-tar-minitar | https://github.com/advisories/GHSA-cwp3-834g-x79g (withdrawn)
+# bootstrap | https://github.com/advisories/GHSA-9mvj-f7w8-pvh2 (withdrawn)
+# colorscore | https://github.com/advisories/GHSA-9wcm-rrvh-qjc8 (withdrawn)
+# devise_invitable | https://github.com/advisories/GHSA-wj5j-xpcj-45gc (withdrawn)
+# doorkeeper | https://github.com/advisories/GHSA-5p9f-55j8-922m (withdrawn)
+# espeak-ruby | https://github.com/advisories/GHSA-w655-w578-99pq (withdrawn)
+# festivaltts4r | https://github.com/advisories/GHSA-9wv8-jgw4-4g28 (withdrawn)
+# govuk_tech_docs | https://github.com/advisories/GHSA-4mvm-xh8j-fv27 (withdrawn)
+# jquery-ui-rails | https://github.com/advisories/GHSA-g8q2-24jh-5hpc (withdrawn)
+# metasploit-framework | https://github.com/advisories/GHSA-6pm2-j2v8-h3cj (withdrawn)
+# minitar | https://github.com/advisories/GHSA-cwp3-834g-x79g (withdrawn)
+# prosemirror_to_html | https://github.com/advisories/GHSA-vfpf-xmwh-8m65 (withdrawn)
+# rack | https://github.com/advisories/GHSA-9vc2-p34x-jhxh (withdrawn)
+# rack-mini-profiler | https://github.com/advisories/GHSA-995j-587r-259w (withdrawn)
+# resque-scheduler | https://github.com/advisories/GHSA-q7jc-v6f2-q9jr (withdrawn)
+# rubyzip | https://github.com/advisories/GHSA-3q5q-f79q-7hr2 (withdrawn)
+# safemode | https://github.com/advisories/GHSA-44vc-fpcg-5cc5 (withdrawn)
+# safemode | https://github.com/advisories/GHSA-8474-rc7c-wrhp (withdrawn)
+# spree_auth_devise | https://github.com/advisories/GHSA-6mqr-q86q-6gwr (withdrawn)
+# web-console | https://github.com/advisories/GHSA-82x2-g7vr-39wq (withdrawn)