From 8bdfe967036e812a0ca58374efef803d6abcf18e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 13 Mar 2025 01:54:40 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-RACK-9398129 --- Gemfile | 2 +- Gemfile.lock | 14 ++++++++++---- 2 files changed, 11 insertions(+), 5 deletions(-) diff --git a/Gemfile b/Gemfile index c5c59f73..9969d0fc 100644 --- a/Gemfile +++ b/Gemfile @@ -9,7 +9,7 @@ end group :test do gem 'actionpack', '~>2.3.8' gem 'mocha', '>=0.9.8' - gem 'typhoeus', '>=0.1.13' + gem 'typhoeus', '>= 0.2.0' gem 'em-http-request', "0.2.11" gem 'curb', ">= 0.6.6.0" gem 'webmock' diff --git a/Gemfile.lock b/Gemfile.lock index 7bdaa94e..a901142c 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -11,7 +11,10 @@ GEM em-http-request (0.2.11) addressable (>= 2.0.0) eventmachine (>= 0.12.9) + ethon (0.16.0) + ffi (>= 1.15.0) eventmachine (0.12.10) + ffi (1.17.1) gemcutter (0.4.1) json_pure git (1.2.5) @@ -22,12 +25,12 @@ GEM json_pure (1.4.3) mocha (0.9.8) rake - rack (1.1.0) + rack (1.1.6) rake (0.8.7) rubyforge (2.0.4) json_pure (>= 1.1.7) - typhoeus (0.1.31) - rack + typhoeus (1.4.1) + ethon (>= 0.9.0) webmock (1.3.5) addressable (>= 2.1.1) crack (>= 0.1.7) @@ -42,5 +45,8 @@ DEPENDENCIES jeweler mocha (>= 0.9.8) rake - typhoeus (>= 0.1.13) + typhoeus (>= 0.2.0) webmock + +BUNDLED WITH + 2.1.4