From 9e7ac95c7f1a5d27e8ee6e522a52a53093043313 Mon Sep 17 00:00:00 2001 From: Anna Carey Date: Tue, 30 Oct 2018 23:49:13 -0400 Subject: [PATCH] update loofah gem to address CVE CVE-2018-16468 - Loofah XSS Vulnerability https://github.com/flavorjones/loofah/issues/154 --- Gemfile.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 0d9297723fc..96b5bbfedb3 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -712,7 +712,7 @@ GEM connection_pool (2.2.1) crack (0.4.3) safe_yaml (~> 1.0.0) - crass (1.0.3) + crass (1.0.4) date_validator (0.9.0) activemodel activesupport @@ -806,7 +806,7 @@ GEM listen (3.0.6) rb-fsevent (>= 0.9.3) rb-inotify (>= 0.9.7) - loofah (2.2.2) + loofah (2.2.3) crass (~> 1.0.2) nokogiri (>= 1.5.9) lumberjack (1.0.10)