titusfortner / webdrivers

Keep your Selenium WebDrivers updated automatically
MIT License
593 stars 111 forks source link

Update Nokogiri #167

Closed OmriSama closed 4 years ago

OmriSama commented 4 years ago

Summary

Update Nokogiri to resolve CVE issues

Debug Info

Please provide the following information for bug reports:

Hi. There's CVE issue with Nokogiri and it's causing our CI pipeline to fail, specifically in our bundler-audit stage.

image

Webdrivers currently has the version of Nokogiri pinned. Would it be possible to update to the latest Nokogiri?

I've also opened a similar issue in the xpath repo: https://github.com/teamcapybara/xpath/issues/97

luke-hill commented 4 years ago

Nokogiri in master and 4.2.0 is only pinned to ~> 1.6 so nothing is stopping you upgrading nokogiri in the version you are using.

Run bundle update nokogiri and you're fine.