Open snyk-bot opened 1 year ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Directory Traversal 🦉 Denial of Service (DoS) 🦉 Cross-site Scripting (XSS) 🦉 More lessons are available in Snyk Learn
Snyk has created this PR to fix one or more vulnerable packages in the `rubygems` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Has a fix available, CVSS 7.3
SNYK-RUBY-ACTIONPACK-1016639
Why? Has a fix available, CVSS 5.4
SNYK-RUBY-ACTIONPACK-1080916
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
SNYK-RUBY-ACTIONPACK-1290051
Why? Has a fix available, CVSS 7.5
SNYK-RUBY-ACTIONPACK-1290052
Why? Has a fix available, CVSS 7.5
SNYK-RUBY-ACTIONPACK-1290053
Why? Has a fix available, CVSS 6.1
SNYK-RUBY-ACTIONPACK-2320175
Why? Has a fix available, CVSS 7.4
SNYK-RUBY-ACTIONPACK-2400638
Why? Has a fix available, CVSS 5.4
SNYK-RUBY-ACTIONPACK-2803847
Why? Proof of Concept exploit, Has a fix available, CVSS 5.4
SNYK-RUBY-ACTIONVIEW-2803851
Why? Has a fix available, CVSS 4.7
SNYK-RUBY-ACTIONVIEW-632514
Why? Has a fix available, CVSS 7.5
SNYK-RUBY-ACTIVERECORD-1080913
Why? Has a fix available, CVSS 9.8
SNYK-RUBY-ACTIVERECORD-2960802
Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
SNYK-RUBY-ACTIVESTORAGE-2420035
Why? Has a fix available, CVSS 7.5
SNYK-RUBY-ADDRESSABLE-1316242
Why? Has a fix available, CVSS 6.3
SNYK-RUBY-BETTERERRORS-1583446
Why? Has a fix available, CVSS 2.6
SNYK-RUBY-NOKOGIRI-1055008
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-RUBY-NOKOGIRI-1293239
Why? Has a fix available, CVSS 7.5
SNYK-RUBY-NOKOGIRI-1726792
Why? Has a fix available, CVSS 8.1
SNYK-RUBY-NOKOGIRI-2413994
Why? Has a fix available, CVSS 7.5
SNYK-RUBY-NOKOGIRI-2620374
Why? Has a fix available, CVSS 7.5
SNYK-RUBY-NOKOGIRI-2630623
Why? Has a fix available, CVSS 7.5
SNYK-RUBY-NOKOGIRI-2630898
Why? Has a fix available, CVSS 8.2
SNYK-RUBY-NOKOGIRI-2840634
Why? Has a fix available, CVSS 7.5
SNYK-RUBY-PUMA-1291014
Why? Has a fix available, CVSS 3.7
SNYK-RUBY-PUMA-1730572
Why? Has a fix available, CVSS 8
SNYK-RUBY-PUMA-2400629
Why? Has a fix available, CVSS 9.1
SNYK-RUBY-PUMA-2437090
Why? Has a fix available, CVSS 9.8
SNYK-RUBY-RACK-2848599
Why? Has a fix available, CVSS 7.5
SNYK-RUBY-RACK-2848600
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-RUBY-RAILS-1071903
Why? Has a fix available, CVSS 7.6
SNYK-RUBY-RAILS-1567785
Why? Proof of Concept exploit, Has a fix available, CVSS 4.2
SNYK-RUBY-RAILSHTMLSANITIZER-2935879
Why? Has a fix available, CVSS 5.4
SNYK-RUBY-SIDEKIQ-1090607
Why? Has a fix available, CVSS 5.4
SNYK-RUBY-SIDEKIQ-1729733
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-RUBY-SIDEKIQ-2359050
Why? Has a fix available, CVSS 7.5
SNYK-RUBY-TZINFO-2958048
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Directory Traversal 🦉 Denial of Service (DoS) 🦉 Cross-site Scripting (XSS) 🦉 More lessons are available in Snyk Learn