Skip to content

Commit 4173d5f

Browse files
fix(deps): Upgrade rack gem version >= 3.1.21 to mitigate Unbounded-Parameter DoS vulnerability (#69)
1 parent 2ff84ff commit 4173d5f

2 files changed

Lines changed: 3 additions & 1 deletion

File tree

Gemfile

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@ gem 'packwerk', github: 'Shopify/packwerk', branch: 'main'
1010

1111
# Development dependencies
1212
gem 'pry'
13+
gem 'rack', '>= 3.1.21'
1314
gem 'railties'
1415
gem 'rake'
1516
gem 'rspec', '~> 3.0'

Gemfile.lock

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -197,7 +197,7 @@ GEM
197197
stringio
198198
public_suffix (6.0.1)
199199
racc (1.8.1)
200-
rack (3.1.12)
200+
rack (3.2.6)
201201
rack-session (2.1.2)
202202
base64 (>= 0.1.0)
203203
rack (>= 3.0.0)
@@ -340,6 +340,7 @@ DEPENDENCIES
340340
danger-packwerk!
341341
packwerk!
342342
pry
343+
rack (>= 3.1.21)
343344
railties
344345
rake
345346
rspec (~> 3.0)

0 commit comments

Comments
 (0)