This repository has been archived by the owner on Jul 11, 2023. It is now read-only.

[Snyk] Fix for 6 vulnerabilities #91

Open

snyk-bot wants to merge 1 commit into master from snyk-fix-20bf546b9b6ba8e25415b1db9316fc0d

snyk-bot commented May 26, 2020

Snyk has created this PR to fix one or more vulnerable packages in the `rubygems` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- Gemfile

⚠️

Warning

Failed to update the Gemfile.lock, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Cross-site Request Forgery (CSRF) SNYK-RUBY-ACTIONPACK-569599	Yes	No Known Exploit
	Information Exposure SNYK-RUBY-ACTIONPACK-569600	Yes	No Known Exploit
	Cross-site Request Forgery (CSRF) SNYK-RUBY-ACTIONVIEW-569601	Yes	No Known Exploit
	Deserialization of Untrusted Data SNYK-RUBY-ACTIVESUPPORT-569598	Yes	No Known Exploit
	HTTP Request Smuggling SNYK-RUBY-PUMA-570205	No	No Known Exploit
	HTTP Request Smuggling SNYK-RUBY-PUMA-570206	No	No Known Exploit

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


          fix: Gemfile to reduce vulnerabilities

85fc1b7

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-569599
- https://snyk.io/vuln/SNYK-RUBY-ACTIONPACK-569600
- https://snyk.io/vuln/SNYK-RUBY-ACTIONVIEW-569601
- https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-569598
- https://snyk.io/vuln/SNYK-RUBY-PUMA-570205
- https://snyk.io/vuln/SNYK-RUBY-PUMA-570206

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet