Updated rexml dependency version to resolve the DoS vulnerability.

yolk · Sep 2, 2024 · 5cf4be6 · 5cf4be6
1 parent 3cb889c
commit 5cf4be6
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/CHANGES.md b/CHANGES.md
@@ -3,6 +3,8 @@
 
 [full changelog](http://github.com/yolk/valvat/compare/v1.4.4...master)
 
+* Resolved the rexml security vulnerabilities that affected versions < 3.3.6 by [Riana Ferreira](https://github.com/bad-vegan)
+
 ### 1.4.4 / 2024-07-11
 
 [full changelog](http://github.com/yolk/valvat/compare/v1.4.3...v1.4.4)

diff --git a/valvat.gemspec b/valvat.gemspec
@@ -24,5 +24,5 @@ Gem::Specification.new do |s|
     'rubygems_mfa_required' => 'true'
   }
 
-  s.add_dependency('rexml', '>= 3.2.7', '< 4.0.0')
+  s.add_dependency('rexml', '>= 3.3.6', '< 4.0.0')
 end