LeadMagnet/leadchat
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity

chore: Fix Bundle Audit Breakages (#9016)

Browse Source 
Name: actionpack
Version: 7.0.8
CVE: CVE-2024-26143
Criticality: Unknown
URL: https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947

-----

Name: rack
Version: 2.2.8
CVE: CVE-2024-25126
Criticality: Unknown
URL: https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941
This commit is contained in:
Sojan Jose
2024-02-26 15:25:21 +05:30
committed by GitHub
parent fa305d76e8
commit ab56374b2f
2 changed files with 56 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Gemfile
View File

@@ -4,7 +4,7 @@ ruby '3.2.2'
##-- base gems for rails --## ##-- base gems for rails --##
gem 'rack-cors', require: 'rack/cors' gem 'rack-cors', require: 'rack/cors'
gem 'rails', '~> 7.0.8.0' gem 'rails', '~> 7.0.8.1'
# Reduces boot times through caching; required in config/boot.rb # Reduces boot times through caching; required in config/boot.rb
gem 'bootsnap', require: false gem 'bootsnap', require: false

110
Gemfile.lock
View File

@@ -33,70 +33,70 @@ GIT
GEM GEM
remote: https://rubygems.org/ remote: https://rubygems.org/
specs: specs:
actioncable (7.0.8) actioncable (7.0.8.1)
actionpack (= 7.0.8) actionpack (= 7.0.8.1)
activesupport (= 7.0.8) activesupport (= 7.0.8.1)
nio4r (~> 2.0) nio4r (~> 2.0)
websocket-driver (>= 0.6.1) websocket-driver (>= 0.6.1)
actionmailbox (7.0.8) actionmailbox (7.0.8.1)
actionpack (= 7.0.8) actionpack (= 7.0.8.1)
activejob (= 7.0.8) activejob (= 7.0.8.1)
activerecord (= 7.0.8) activerecord (= 7.0.8.1)
activestorage (= 7.0.8) activestorage (= 7.0.8.1)
activesupport (= 7.0.8) activesupport (= 7.0.8.1)
mail (>= 2.7.1) mail (>= 2.7.1)
net-imap net-imap
net-pop net-pop
net-smtp net-smtp
actionmailer (7.0.8) actionmailer (7.0.8.1)
actionpack (= 7.0.8) actionpack (= 7.0.8.1)
actionview (= 7.0.8) actionview (= 7.0.8.1)
activejob (= 7.0.8) activejob (= 7.0.8.1)
activesupport (= 7.0.8) activesupport (= 7.0.8.1)
mail (~> 2.5, >= 2.5.4) mail (~> 2.5, >= 2.5.4)
net-imap net-imap
net-pop net-pop
net-smtp net-smtp
rails-dom-testing (~> 2.0) rails-dom-testing (~> 2.0)
actionpack (7.0.8) actionpack (7.0.8.1)
actionview (= 7.0.8) actionview (= 7.0.8.1)
activesupport (= 7.0.8) activesupport (= 7.0.8.1)
rack (~> 2.0, >= 2.2.4) rack (~> 2.0, >= 2.2.4)
rack-test (>= 0.6.3) rack-test (>= 0.6.3)
rails-dom-testing (~> 2.0) rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.0, >= 1.2.0) rails-html-sanitizer (~> 1.0, >= 1.2.0)
actiontext (7.0.8) actiontext (7.0.8.1)
actionpack (= 7.0.8) actionpack (= 7.0.8.1)
activerecord (= 7.0.8) activerecord (= 7.0.8.1)
activestorage (= 7.0.8) activestorage (= 7.0.8.1)
activesupport (= 7.0.8) activesupport (= 7.0.8.1)
globalid (>= 0.6.0) globalid (>= 0.6.0)
nokogiri (>= 1.8.5) nokogiri (>= 1.8.5)
actionview (7.0.8) actionview (7.0.8.1)
activesupport (= 7.0.8) activesupport (= 7.0.8.1)
builder (~> 3.1) builder (~> 3.1)
erubi (~> 1.4) erubi (~> 1.4)
rails-dom-testing (~> 2.0) rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.1, >= 1.2.0) rails-html-sanitizer (~> 1.1, >= 1.2.0)
active_record_query_trace (1.8) active_record_query_trace (1.8)
activejob (7.0.8) activejob (7.0.8.1)
activesupport (= 7.0.8) activesupport (= 7.0.8.1)
globalid (>= 0.3.6) globalid (>= 0.3.6)
activemodel (7.0.8) activemodel (7.0.8.1)
activesupport (= 7.0.8) activesupport (= 7.0.8.1)
activerecord (7.0.8) activerecord (7.0.8.1)
activemodel (= 7.0.8) activemodel (= 7.0.8.1)
activesupport (= 7.0.8) activesupport (= 7.0.8.1)
activerecord-import (1.4.1) activerecord-import (1.4.1)
activerecord (>= 4.2) activerecord (>= 4.2)
activestorage (7.0.8) activestorage (7.0.8.1)
actionpack (= 7.0.8) actionpack (= 7.0.8.1)
activejob (= 7.0.8) activejob (= 7.0.8.1)
activerecord (= 7.0.8) activerecord (= 7.0.8.1)
activesupport (= 7.0.8) activesupport (= 7.0.8.1)
marcel (~> 1.0) marcel (~> 1.0)
mini_mime (>= 1.1.0) mini_mime (>= 1.1.0)
activesupport (7.0.8) activesupport (7.0.8.1)
concurrent-ruby (~> 1.0, >= 1.0.2) concurrent-ruby (~> 1.0, >= 1.0.2)
i18n (>= 1.6, < 2) i18n (>= 1.6, < 2)
minitest (>= 5.1) minitest (>= 5.1)
@@ -559,7 +559,7 @@ GEM
activesupport (>= 3.0.0) activesupport (>= 3.0.0)
raabro (1.4.0) raabro (1.4.0)
racc (1.7.3) racc (1.7.3)
rack (2.2.8) rack (2.2.8.1)
rack-attack (6.7.0) rack-attack (6.7.0)
rack (>= 1.0, < 4) rack (>= 1.0, < 4)
rack-contrib (2.4.0) rack-contrib (2.4.0)
@@ -575,20 +575,20 @@ GEM
rack-test (2.1.0) rack-test (2.1.0)
rack (>= 1.3) rack (>= 1.3)
rack-timeout (0.6.3) rack-timeout (0.6.3)
rails (7.0.8) rails (7.0.8.1)
actioncable (= 7.0.8) actioncable (= 7.0.8.1)
actionmailbox (= 7.0.8) actionmailbox (= 7.0.8.1)
actionmailer (= 7.0.8) actionmailer (= 7.0.8.1)
actionpack (= 7.0.8) actionpack (= 7.0.8.1)
actiontext (= 7.0.8) actiontext (= 7.0.8.1)
actionview (= 7.0.8) actionview (= 7.0.8.1)
activejob (= 7.0.8) activejob (= 7.0.8.1)
activemodel (= 7.0.8) activemodel (= 7.0.8.1)
activerecord (= 7.0.8) activerecord (= 7.0.8.1)
activestorage (= 7.0.8) activestorage (= 7.0.8.1)
activesupport (= 7.0.8) activesupport (= 7.0.8.1)
bundler (>= 1.15.0) bundler (>= 1.15.0)
railties (= 7.0.8) railties (= 7.0.8.1)
rails-dom-testing (2.2.0) rails-dom-testing (2.2.0)
activesupport (>= 5.0.0) activesupport (>= 5.0.0)
minitest minitest
@@ -596,9 +596,9 @@ GEM
rails-html-sanitizer (1.6.0) rails-html-sanitizer (1.6.0)
loofah (~> 2.21) loofah (~> 2.21)
nokogiri (~> 1.14) nokogiri (~> 1.14)
railties (7.0.8) railties (7.0.8.1)
actionpack (= 7.0.8) actionpack (= 7.0.8.1)
activesupport (= 7.0.8) activesupport (= 7.0.8.1)
method_source method_source
rake (>= 12.2) rake (>= 12.2)
thor (~> 1.0) thor (~> 1.0)
@@ -921,7 +921,7 @@ DEPENDENCIES
rack-cors rack-cors
rack-mini-profiler (>= 3.2.0) rack-mini-profiler (>= 3.2.0)
rack-timeout rack-timeout
rails (~> 7.0.8.0) rails (~> 7.0.8.1)
redis redis
redis-namespace redis-namespace
responders (>= 3.1.1) responders (>= 3.1.1)