Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump loofah to address CVE-2018-8048 #478

Merged
merged 1 commit into from
Mar 30, 2018
Merged

Bump loofah to address CVE-2018-8048 #478

merged 1 commit into from
Mar 30, 2018

Conversation

Koronen
Copy link
Contributor

@Koronen Koronen commented Mar 20, 2018

As reported by bundler-audit:

Name: loofah
Version: 2.1.1
Advisory: CVE-2018-8048
Criticality: Unknown
URL: flavorjones/loofah#144
Title: Loofah XSS Vulnerability
Solution: upgrade to >= 2.2.1

Ref: https://github.com/flavorjones/loofah/blob/v2.2.1/CHANGELOG.md#221--2018-03-19

As reported by `bundler-audit`:

> Name: loofah
> Version: 2.1.1
> Advisory: CVE-2018-8048
> Criticality: Unknown
> URL: flavorjones/loofah#144
> Title: Loofah XSS Vulnerability
> Solution: upgrade to >= 2.2.1

Ref:
<https://github.com/flavorjones/loofah/blob/v2.2.1/CHANGELOG.md#221--2018-03-19>
@gabrielpoca gabrielpoca merged commit 074c53b into master Mar 30, 2018
@Koronen Koronen deleted the vk-bump-loofah branch March 31, 2018 16:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants