Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Relax version constraint on addressable to avoid CVE-2021-32740 #278

Closed
wants to merge 1 commit into from
Closed

Relax version constraint on addressable to avoid CVE-2021-32740 #278

wants to merge 1 commit into from

Conversation

cyclotron3k
Copy link

Relax version constraint on addressable to avoid CVE-2021-32740

Fixes #277

@cyclotron3k cyclotron3k requested a review from a team as a code owner July 13, 2021 08:44
@Widcket
Copy link
Contributor

Widcket commented Jul 13, 2021

Hi @cyclotron3k, I've merged #276 that bumps addressable to 2.8.0.

@Widcket Widcket closed this Jul 13, 2021
@prateekkish
Copy link

@Widcket Can we expect a minor release soon?

@Widcket
Copy link
Contributor

Widcket commented Jul 15, 2021

@prateekkish we'll be doing a patch release later today.

@Widcket
Copy link
Contributor

Widcket commented Jul 15, 2021

The v5.1.2 release is out now.

@prateekkish
Copy link

Thanks a bunch @Widcket

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

The dependency on addressable '~> 2.7.0' is forcing the usage of an insecure gem
3 participants