commit-lint[bot]
commented
1 year ago Bug Fixes
- Gmright/Milestones/Gmright-market/Commerce/Net_holder/Blue-sky/Gemfile to reduce vulnerabilities (527b46a)
Contributors
Commit-Lint commands
You can trigger Commit-Lint actions by commenting on this PR: - `@Commit-Lint merge patch` will merge dependabot PR on "patch" versions (X.X.Y - Y change) - `@Commit-Lint merge minor` will merge dependabot PR on "minor" versions (X.Y.Y - Y change) - `@Commit-Lint merge major` will merge dependabot PR on "major" versions (Y.Y.Y - Y change) - `@Commit-Lint merge disable` will desactivate merge dependabot PR - `@Commit-Lint review` will approve dependabot PR - `@Commit-Lint stop review` will stop approve dependabot PR
Snyk has created this PR to fix one or more vulnerable packages in the `rubygems` dependencies of this project.
Changes included in this PR
⚠️ Warning
``` Failed to update the Gemfile.lock, please update manually before merging. ```Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 3.3
SNYK-RUBY-COMMONMARKER-3318398
Why? Recently disclosed, Has a fix available, CVSS 3.5
SNYK-RUBY-COMMONMARKER-3318399
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.5
SNYK-RUBY-COMMONMARKER-3318400
Why? Recently disclosed, Has a fix available, CVSS 3.5
SNYK-RUBY-COMMONMARKER-3318401
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Denial of Service (DoS) 🦉 Denial of Service (DoS) 🦉 Denial of Service (DoS)