From 48b9dd610f42279d58975408edda68c77f965b5e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 19 Jan 2024 15:29:15 +0000 Subject: [PATCH] fix: web_dev/book_viewer/Gemfile & web_dev/book_viewer/Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-RACK-1061917 --- web_dev/book_viewer/Gemfile | 4 +-- web_dev/book_viewer/Gemfile.lock | 49 ++++++++++++++++++-------------- 2 files changed, 29 insertions(+), 24 deletions(-) diff --git a/web_dev/book_viewer/Gemfile b/web_dev/book_viewer/Gemfile index 582b1c2..ede22c5 100644 --- a/web_dev/book_viewer/Gemfile +++ b/web_dev/book_viewer/Gemfile @@ -1,8 +1,8 @@ source 'https://rubygems.org' gem 'ruby' -gem 'sinatra', '~>1.4.6' -gem 'sinatra-contrib' +gem 'sinatra', '~> 4.0.0' +gem 'sinatra-contrib', '>= 4.0.0' gem 'erubis' group :production do diff --git a/web_dev/book_viewer/Gemfile.lock b/web_dev/book_viewer/Gemfile.lock index f860dbe..1c35140 100644 --- a/web_dev/book_viewer/Gemfile.lock +++ b/web_dev/book_viewer/Gemfile.lock @@ -1,28 +1,33 @@ GEM remote: https://rubygems.org/ specs: - backports (3.6.8) + base64 (0.2.0) erubis (2.7.0) - multi_json (1.11.2) + multi_json (1.15.0) + mustermann (3.0.0) + ruby2_keywords (~> 0.0.1) puma (3.1.0) - rack (1.6.4) - rack-protection (1.5.3) - rack - rack-test (0.6.3) - rack (>= 1.0) + rack (3.0.8) + rack-protection (4.0.0) + base64 (>= 0.1.0) + rack (>= 3.0.0, < 4) + rack-session (2.0.0) + rack (>= 3.0.0) ruby (0.1.0) - sinatra (1.4.7) - rack (~> 1.5) - rack-protection (~> 1.4) - tilt (>= 1.3, < 3) - sinatra-contrib (1.4.6) - backports (>= 2.0) - multi_json - rack-protection - rack-test - sinatra (~> 1.4.0) - tilt (>= 1.3, < 3) - tilt (2.0.2) + ruby2_keywords (0.0.5) + sinatra (4.0.0) + mustermann (~> 3.0) + rack (>= 3.0.0, < 4) + rack-protection (= 4.0.0) + rack-session (>= 2.0.0, < 3) + tilt (~> 2.0) + sinatra-contrib (4.0.0) + multi_json (>= 0.0.2) + mustermann (~> 3.0) + rack-protection (= 4.0.0) + sinatra (= 4.0.0) + tilt (~> 2.0) + tilt (2.3.0) PLATFORMS ruby @@ -31,8 +36,8 @@ DEPENDENCIES erubis puma ruby - sinatra (~> 1.4.6) - sinatra-contrib + sinatra (~> 4.0.0) + sinatra-contrib (>= 4.0.0) BUNDLED WITH - 1.10.6 + 1.17.3