New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Deface requires vulnerable version of nokogiri #170

Closed

hxegon opened this issue Apr 19, 2017 · 1 comment

hxegon commented Apr 19, 2017

I found this with bundle audit using 1.0.2, but the new versions also require nokogiri ~> 1.6.x, which is vulnerable.

More info here: sparklemotion/nokogiri#1582

domcleal commented Apr 20, 2017

Newer versions (i.e. deface 1.2.0) require ~> 1.6, which permits the very latest version of nokogiri, 1.7.1.

damianlegawiec closed this as completed

factor4 mentioned this issue

Update dependencies for save version of nokogiri spree/spree#8201

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment