Skip to content

Commit

Permalink
Update gems with security vulnerabilities
Browse files Browse the repository at this point in the history
ruby-advisory-db: 323 advisories
Name: nokogiri
Version: 1.8.4
Advisory: CVE-2018-14404
Criticality: Unknown
URL: sparklemotion/nokogiri#1785
Title: Nokogiri gem, via libxml2, is affected by multiple vulnerabilities
Solution: upgrade to >= 1.8.5

Name: rubyzip
Version: 1.2.1
Advisory: CVE-2018-1000544
Criticality: Unknown
URL: rubyzip/rubyzip#369
Title: Directory Traversal in rubyzip
Solution: upgrade to >= 1.2.2
  • Loading branch information
AdrianCann committed Oct 14, 2018
1 parent 86d992b commit 92be435
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions Gemfile.lock
Expand Up @@ -152,7 +152,7 @@ GEM
activesupport (>= 4.2.0)
hashdiff (0.3.7)
highline (1.7.8)
i18n (1.0.1)
i18n (1.1.0)
concurrent-ruby (~> 1.0)
i18n-tasks (0.9.5)
activesupport (>= 4.0.2)
Expand Down Expand Up @@ -181,7 +181,7 @@ GEM
mime-types (3.1)
mime-types-data (~> 3.2015)
mime-types-data (3.2016.0521)
mini_mime (1.0.0)
mini_mime (1.0.1)
mini_portile2 (2.3.0)
minitest (5.11.3)
multipart-post (2.0.0)
Expand All @@ -192,7 +192,7 @@ GEM
net-ssh (>= 2.6.5)
net-ssh (4.1.0)
nio4r (2.3.1)
nokogiri (1.8.3)
nokogiri (1.8.5)
mini_portile2 (~> 2.3.0)
normalize-rails (3.0.3)
oj (2.18.5)
Expand Down Expand Up @@ -259,7 +259,7 @@ GEM
rspec-mocks (~> 3.5.0)
rspec-support (~> 3.5.0)
rspec-support (3.5.0)
rubyzip (1.2.1)
rubyzip (1.2.2)
safe_yaml (1.0.4)
sass (3.4.22)
sass-rails (5.0.6)
Expand Down Expand Up @@ -396,4 +396,4 @@ RUBY VERSION
ruby 2.5.1p57

BUNDLED WITH
1.16.2
1.16.5

0 comments on commit 92be435

Please sign in to comment.