Skip to content

Commit 6c63bab

Browse files
committed
Bump nokogiri to address CVE-2018-8048 and CVE-2018-14404
As reported by `bundler-audit`: Name: nokogiri Version: 1.8.2 Advisory: CVE-2018-8048 Criticality: Unknown URL: sparklemotion/nokogiri#1746 Title: Revert libxml2 behavior in Nokogiri gem that could cause XSS Solution: upgrade to >= 1.8.3 Name: nokogiri Version: 1.8.2 Advisory: CVE-2018-14404 Criticality: Unknown URL: sparklemotion/nokogiri#1785 Title: Nokogiri gem, via libxml2, is affected by multiple vulnerabilities Solution: upgrade to >= 1.8.5
1 parent c8c9144 commit 6c63bab

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

Diff for: Gemfile.lock

+2-2
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,7 @@ GEM
7676
minitest (5.11.3)
7777
multi_json (1.12.1)
7878
multipart-post (2.0.0)
79-
nokogiri (1.8.2)
79+
nokogiri (1.8.5)
8080
mini_portile2 (~> 2.3.0)
8181
parser (2.3.0.6)
8282
ast (~> 2.2)
@@ -222,4 +222,4 @@ RUBY VERSION
222222
ruby 2.3.3p222
223223

224224
BUNDLED WITH
225-
1.16.1
225+
1.17.1

0 commit comments

Comments
 (0)