fix: vulnerability CVE-2024-35176

Fixes googleapis#18987
gdubicki · May 29, 2024 · 452e66f · 452e66f
1 parent 6bf6707
commit 452e66f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/google-apis-core/google-apis-core.gemspec b/google-apis-core/google-apis-core.gemspec
@@ -26,5 +26,5 @@ Gem::Specification.new do |gem|
   gem.add_runtime_dependency "mini_mime", "~> 1.0"
   gem.add_runtime_dependency "googleauth", "~> 1.9"
   gem.add_runtime_dependency "httpclient", ">= 2.8.1", "< 3.a"
-  gem.add_runtime_dependency "rexml"
+  gem.add_runtime_dependency "rexml", ">= 3.2.7", "< 4.0"
 end