diff --git a/gems/spree/CVE-2013-2506.yml b/gems/spree/CVE-2013-2506.yml
deleted file mode 100644
index 0352dd3f66..0000000000
--- a/gems/spree/CVE-2013-2506.yml
+++ /dev/null
@@ -1,20 +0,0 @@
----
-gem: spree
-cve: 2013-2506
-osvdb: 90865
-url: https://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
-title:
-  Spree app/models/spree/user.rb Mass Role Assignment Remote Privilege
-  Escalation
-date: 2013-02-21
-description: |
-  Spree contains a flaw that leads to unauthorized privileges being gained. The
-  issue is triggered as certain input related to mass role assignment in
-  app/models/spree/user.rb is not properly verified before being used to update
-  a user. This may allow a remote attacker to assign arbitrary roles and gain
-  elevated administrative privileges.
-cvss_v2: 4.0
-patched_versions:
-  - "~> 1.1.6"
-  - "~> 1.2.0"
-  - ">= 1.3.0"
diff --git a/gems/spree_auth/CVE-2013-2506.yml b/gems/spree_auth/CVE-2013-2506.yml
deleted file mode 100644
index d25bdd8327..0000000000
--- a/gems/spree_auth/CVE-2013-2506.yml
+++ /dev/null
@@ -1,16 +0,0 @@
----
-gem: spree_auth
-cve: 2013-2506
-osvdb: 90865
-url: https://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
-title:
-  Spree app/models/spree/user.rb Mass Role Assignment Remote Privilege
-  Escalation
-date: 2013-02-21
-description: |
-  Spree contains a flaw that leads to unauthorized privileges being gained. The
-  issue is triggered as certain input related to mass role assignment in
-  app/models/spree/user.rb is not properly verified before being used to update
-  a user. This may allow a remote attacker to assign arbitrary roles and gain
-  elevated administrative privileges.
-cvss_v2: 4.0
diff --git a/gems/spree_auth_devise/CVE-2013-2506.yml b/gems/spree_auth_devise/CVE-2013-2506.yml
index df7ddb4596..00f139afcb 100644
--- a/gems/spree_auth_devise/CVE-2013-2506.yml
+++ b/gems/spree_auth_devise/CVE-2013-2506.yml
@@ -3,8 +3,9 @@ gem: spree_auth_devise
 cve: 2013-2506
 osvdb: 90865
 ghsa: jp57-9j37-5476
-url: https://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
-title: Spree app/models/spree/user.rb Mass Role Assignment Remote Privilege Escalation
+url: https://nvd.nist.gov/vuln/detail/CVE-2013-2506
+title: Spree app/models/spree/user.rb
+  Mass Role Assignment Remote Privilege Escalation
 date: 2013-02-21
 description: |
   Spree contains a flaw that leads to unauthorized privileges being gained. The
@@ -16,4 +17,20 @@ cvss_v2: 4.0
 patched_versions:
   - "~> 1.1.6"
   - "~> 1.2.0"
-  - ">= 1.3.0"
+  - ">= 1.3.1"
+related:
+  url:
+    - https://nvd.nist.gov/vuln/detail/CVE-2013-2506
+    - https://rubygems.org/gems/spree_auth_devise/versions/1.3.1
+    - https://rubygems.org/gems/spree_auth_devise/versions/1.2.0
+    - https://github.com/spree/spree_auth_devise/commit/038d74771d3b5c13d13b738b73dfda1033a99f65
+    - https://github.com/spree/spree_auth_devise/commit/fda3ab9fb536c64fe18a9b78bb21c6176b3ea24d
+    - https://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
+    - https://web.archive.org/web/20160331131233/https://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed
+    - https://github.com/advisories/GHSA-jp57-9j37-5476
+notes: |
+  - patched_versions, cvss_v2, and Commit URLs from nvd.nist.gov URL.
+  - (YANKED) https://rubygems.org/gems/spree_auth_devise/versions/1.3.0
+  - 1.1.6 not on https://rubygems.org/gems/spree_auth_devise/versions
+  - osvdb from found osvdb.csv file: "90865;Spree app/models/spree/user.rb
+    Mass Role Assignment Remote Privilege Escalation"