From 4bb46fa5585111fa3b5c13f83ac694d2bb5f15ec Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 3 May 2022 00:14:50 -0700 Subject: [PATCH 1/2] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-SINATRA-2806372 --- Gemfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Gemfile b/Gemfile index 52b1f60..87d8654 100644 --- a/Gemfile +++ b/Gemfile @@ -4,8 +4,8 @@ gem 'bcrypt' gem 'data_mapper' gem 'dm-postgres-adapter' gem 'pg' -gem 'sinatra' -gem 'sinatra-contrib' +gem 'sinatra', '>= 2.2.0' +gem 'sinatra-contrib', '>= 2.2.0' gem 'twilio-ruby', '>= 5.0.0' group :test, :development do From 887cb9d59ff4c7b94ca0a528e916190d06f53e3a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 3 May 2022 00:14:51 -0700 Subject: [PATCH 2/2] fix: Gemfile & Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-SINATRA-2806372 --- Gemfile.lock | 42 ++++++++++++++++++++++-------------------- 1 file changed, 22 insertions(+), 20 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 24500d5..751dcc1 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -2,7 +2,6 @@ GEM remote: https://rubygems.org/ specs: addressable (2.4.0) - backports (3.6.8) bcrypt (3.1.11) bcrypt-ruby (3.1.5) bcrypt (>= 3.1.3) @@ -64,16 +63,18 @@ GEM jwt (1.5.6) libxml-ruby (3.0.0) mini_portile2 (2.0.0) - multi_json (1.11.2) + multi_json (1.15.0) multipart-post (2.0.0) + mustermann (1.1.1) + ruby2_keywords (~> 0.0.1) nokogiri (1.6.7.2) mini_portile2 (~> 2.0.0.rc2) pg (0.18.4) - rack (1.6.4) - rack-protection (1.5.3) + rack (2.2.3) + rack-protection (2.2.0) rack - rack-test (0.6.3) - rack (>= 1.0) + rack-test (1.1.0) + rack (>= 1.0, < 3) rake (11.1.1) rspec (3.4.0) rspec-core (~> 3.4.0) @@ -88,19 +89,20 @@ GEM diff-lcs (>= 1.2.0, < 2.0) rspec-support (~> 3.4.0) rspec-support (3.4.1) - sinatra (1.4.7) - rack (~> 1.5) - rack-protection (~> 1.4) - tilt (>= 1.3, < 3) - sinatra-contrib (1.4.6) - backports (>= 2.0) + ruby2_keywords (0.0.5) + sinatra (2.2.0) + mustermann (~> 1.0) + rack (~> 2.2) + rack-protection (= 2.2.0) + tilt (~> 2.0) + sinatra-contrib (2.2.0) multi_json - rack-protection - rack-test - sinatra (~> 1.4.0) - tilt (>= 1.3, < 3) + mustermann (~> 1.0) + rack-protection (= 2.2.0) + sinatra (= 2.2.0) + tilt (~> 2.0) stringex (1.5.1) - tilt (2.0.2) + tilt (2.0.10) twilio-ruby (5.0.0) faraday (~> 0.9) jwt (~> 1.5) @@ -120,9 +122,9 @@ DEPENDENCIES rack-test rake rspec - sinatra - sinatra-contrib + sinatra (>= 2.2.0) + sinatra-contrib (>= 2.2.0) twilio-ruby (>= 5.0.0) BUNDLED WITH - 1.15.1 + 1.17.3