Security vulnerabilities.

- https://nvd.nist.gov/vuln/detail/CVE-2018-16471 - https://nvd.nist.gov/vuln/detail/CVE-2018-16470
archivesunleashed · Nov 15, 2018 · f67109907d10152320640c1fc42ef13841d1f4b6 · f671099
1 parent c30c152
commit f67109907d10152320640c1fc42ef13841d1f4b6
Unified Split

Showing with 3 additions and 1 deletion.

+1 −0 Gemfile

+2 −1 Gemfile.lock
diff --git a/Gemfile b/Gemfile
@@ -81,6 +81,7 @@ gem 'omniauth-github'
 gem 'omniauth-twitter'
 gem 'os'
 gem 'parallel'
+gem 'rack', '>= 2.0.6' # https://nvd.nist.gov/vuln/detail/CVE-2018-16471 https://nvd.nist.gov/vuln/detail/CVE-2018-16470
 gem 'rails-html-sanitizer', '~> 1.0.4' # https://nvd.nist.gov/vuln/detail/CVE-2018-3741
 gem 'rubocop', '~> 0.48.1'
 gem 'rubocop-rspec', '~> 1.15.0'
diff --git a/Gemfile.lock b/Gemfile.lock
@@ -195,7 +195,7 @@ GEM
    powerpack (0.1.2)
    public_suffix (3.0.3)
    puma (3.12.0)
-    rack (2.0.5)
+    rack (2.0.6)
    rack-test (1.1.0)
      rack (>= 1.0, < 3)
    rails (5.1.6)
@@ -334,6 +334,7 @@ DEPENDENCIES
  parallel
  pg (= 0.21.0)
  puma (~> 3.7)
+  rack (>= 2.0.6)
  rails (~> 5.1.4)
  rails-html-sanitizer (~> 1.0.4)
  rubocop (~> 0.48.1)