Updated the dependency on rack due to CVE-2018-16471

ncr / rack-proxy

A request/response rewriting HTTP proxy. A Rack app.

MIT License

269 stars 94 forks source link

Closed kamilc closed 3 years ago

kamilc commented 4 years ago

We've noticed that the version of rack as locked in the Gemfile.lock was vulnerable to CVE-2018-16471.

This pull request locks it at 2.0.7 which is considered safe.

ncr commented 3 years ago

Updated rack in another PR. Thanks!