From d04ed219dbf803f86d9a25f02c182cc62995f160 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 30 Nov 2022 03:30:19 +0000 Subject: [PATCH] fix: demo/Gemfile & demo/Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-SINATRA-3150405 --- demo/Gemfile | 2 +- demo/Gemfile.lock | 23 +++++++++++++++-------- 2 files changed, 16 insertions(+), 9 deletions(-) diff --git a/demo/Gemfile b/demo/Gemfile index 9f5d663..f871d83 100644 --- a/demo/Gemfile +++ b/demo/Gemfile @@ -1,5 +1,5 @@ source 'http://rubygems.org' -gem 'sinatra' +gem 'sinatra', '>= 2.2.3' gem 'fat_fingers' gem 'pony' \ No newline at end of file diff --git a/demo/Gemfile.lock b/demo/Gemfile.lock index 8670547..156494d 100644 --- a/demo/Gemfile.lock +++ b/demo/Gemfile.lock @@ -8,17 +8,21 @@ GEM mime-types (~> 1.16) treetop (~> 1.4.8) mime-types (1.21) + mustermann (3.0.0) + ruby2_keywords (~> 0.0.1) polyglot (0.3.3) pony (1.4) mail (> 2.0) - rack (1.5.2) - rack-protection (1.3.2) + rack (2.2.4) + rack-protection (3.0.4) rack - sinatra (1.3.5) - rack (~> 1.4) - rack-protection (~> 1.3) - tilt (~> 1.3, >= 1.3.3) - tilt (1.3.3) + ruby2_keywords (0.0.5) + sinatra (3.0.4) + mustermann (~> 3.0) + rack (~> 2.2, >= 2.2.4) + rack-protection (= 3.0.4) + tilt (~> 2.0) + tilt (2.0.11) treetop (1.4.12) polyglot polyglot (>= 0.3.1) @@ -29,4 +33,7 @@ PLATFORMS DEPENDENCIES fat_fingers pony - sinatra + sinatra (>= 2.2.3) + +BUNDLED WITH + 2.1.4