From b88363c992c527cb1ef5e4252f0646c79b934af4 Mon Sep 17 00:00:00 2001 From: Victor Koronen Date: Tue, 20 Mar 2018 21:43:39 +0100 Subject: [PATCH] Bump loofah to address CVE-2018-8048 As reported by `bundler-audit`: > Name: loofah > Version: 2.1.1 > Advisory: CVE-2018-8048 > Criticality: Unknown > URL: https://github.com/flavorjones/loofah/issues/144 > Title: Loofah XSS Vulnerability > Solution: upgrade to >= 2.2.1 Ref: --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index 8b3bcf184..cb989ecf0 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -65,7 +65,7 @@ GEM i18n (0.7.0) json (1.8.3) kgio (2.10.0) - loofah (2.1.1) + loofah (2.2.1) crass (~> 1.0.2) nokogiri (>= 1.5.9) method_source (0.8.2)