search

DroptuneHQ / droptune-og

New music notifications for Spotify & Apple Music. Follow your favorite artists so you never miss a beat.
https://droptune.co
MIT License
93 stars 16 forks source link

Gem security updates. #70

Closed rimenes closed 6 years ago

rimenes commented 6 years ago

Name: nokogiri Version: 1.8.4 Advisory: CVE-2018-14404 Criticality: Unknown URL: https://github.com/sparklemotion/nokogiri/issues/1785 Title: Nokogiri gem, via libxml2, is affected by multiple vulnerabilities Solution: upgrade to >= 1.8.5

Name: rubyzip Version: 1.2.1 Advisory: CVE-2018-1000544 Criticality: Unknown URL: https://github.com/rubyzip/rubyzip/issues/369 Title: Directory Traversal in rubyzip Solution: upgrade to >= 1.2.2