Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency nokogiri to v1.13.6 #217

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update dependency nokogiri to v1.13.6 #217

wants to merge 1 commit into from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Mar 26, 2023 •
edited

This PR contains the following updates:

Package Update Change
nokogiri minor 1.11.2 -> 1.13.6

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 8.8 WS-2022-0089 #127
High 8.2 CVE-2022-29181 #148
High 7.5 CVE-2021-41098 #76
High 7.5 CVE-2022-24836 #140
  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Mar 26, 2023
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/nokogiri-1.x-lockfile branch 2 times, most recently from c6f2816 to 178b769 Compare June 14, 2023 08:51
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/nokogiri-1.x-lockfile branch 2 times, most recently from 590ca80 to 004c6a8 Compare November 6, 2023 02:27
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/nokogiri-1.x-lockfile branch from 004c6a8 to ddca523 Compare May 21, 2024 00:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
0 participants