From 49f1cc3675973741005a72de4679d171d941fa5a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 18 May 2024 06:03:52 +0000 Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-REXML-6861566 --- Gemfile | 2 +- Gemfile.lock | 7 +++++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/Gemfile b/Gemfile index 0139efb..ae04e91 100644 --- a/Gemfile +++ b/Gemfile @@ -11,7 +11,7 @@ gem 'matrix' gem 'prawn' gem 'prawn-table', github: 'prawnpdf/prawn-table' gem 'pygments.rb' -gem 'rexml' +gem 'rexml', '>= 3.2.7' gem 'rghost' gem 'rouge' gem 'specific_install' diff --git a/Gemfile.lock b/Gemfile.lock index 94fab65..7ef43f6 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -151,7 +151,8 @@ GEM pygments.rb (2.4.1) rainbow (3.1.1) rake (13.2.1) - rexml (3.2.6) + rexml (3.2.8) + strscan (>= 3.0.9) rghost (0.9.9) rouge (4.2.1) ruby-rc4 (0.1.5) @@ -159,6 +160,7 @@ GEM addressable (>= 2.3.5) faraday (>= 0.17.3, < 3) specific_install (0.3.8) + strscan (3.1.0) text-hyphen (1.5.0) timers (4.3.5) traces (0.11.1) @@ -170,6 +172,7 @@ GEM PLATFORMS arm64-darwin-21 + ruby x86_64-darwin-21 x86_64-darwin-22 x86_64-linux @@ -184,7 +187,7 @@ DEPENDENCIES prawn prawn-table! pygments.rb - rexml + rexml (>= 3.2.7) rghost rouge specific_install