Skip to content

Commit

Permalink
Update gems with security vulnerabilities
Browse files Browse the repository at this point in the history
ruby-advisory-db: 323 advisories
Name: nokogiri
Version: 1.8.4
Advisory: CVE-2018-14404
Criticality: Unknown
URL: sparklemotion/nokogiri#1785
Title: Nokogiri gem, via libxml2, is affected by multiple vulnerabilities
Solution: upgrade to >= 1.8.5

Name: rubyzip
Version: 1.2.1
Advisory: CVE-2018-1000544
Criticality: Unknown
URL: rubyzip/rubyzip#369
Title: Directory Traversal in rubyzip
Solution: upgrade to >= 1.2.2
  • Loading branch information
AdrianCann committed Oct 14, 2018
1 parent 86d992b commit 373dd8c
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 7 deletions.
2 changes: 1 addition & 1 deletion Gemfile
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ gem "normalize-rails", "~> 3.0.0"
gem "pg"
gem 'puma'
gem "rack-canonical-host"
gem "rails", "~> 5.0.1"
gem "rails"
gem "recipient_interceptor"
gem "redcarpet"
gem "refills"
Expand Down
12 changes: 6 additions & 6 deletions Gemfile.lock
Original file line number Diff line number Diff line change
Expand Up @@ -152,7 +152,7 @@ GEM
activesupport (>= 4.2.0)
hashdiff (0.3.7)
highline (1.7.8)
i18n (1.0.1)
i18n (1.1.0)
concurrent-ruby (~> 1.0)
i18n-tasks (0.9.5)
activesupport (>= 4.0.2)
Expand Down Expand Up @@ -181,7 +181,7 @@ GEM
mime-types (3.1)
mime-types-data (~> 3.2015)
mime-types-data (3.2016.0521)
mini_mime (1.0.0)
mini_mime (1.0.1)
mini_portile2 (2.3.0)
minitest (5.11.3)
multipart-post (2.0.0)
Expand All @@ -192,7 +192,7 @@ GEM
net-ssh (>= 2.6.5)
net-ssh (4.1.0)
nio4r (2.3.1)
nokogiri (1.8.3)
nokogiri (1.8.5)
mini_portile2 (~> 2.3.0)
normalize-rails (3.0.3)
oj (2.18.5)
Expand Down Expand Up @@ -259,7 +259,7 @@ GEM
rspec-mocks (~> 3.5.0)
rspec-support (~> 3.5.0)
rspec-support (3.5.0)
rubyzip (1.2.1)
rubyzip (1.2.2)
safe_yaml (1.0.4)
sass (3.4.22)
sass-rails (5.0.6)
Expand Down Expand Up @@ -372,7 +372,7 @@ DEPENDENCIES
puma
rack-canonical-host
rack-timeout
rails (~> 5.0.1)
rails
recipient_interceptor
redcarpet
refills
Expand All @@ -396,4 +396,4 @@ RUBY VERSION
ruby 2.5.1p57

BUNDLED WITH
1.16.2
1.16.5

0 comments on commit 373dd8c

Please sign in to comment.