fix(deps): update nokogiri for CVE-2020-26247

pact-foundation · Jan 4, 2021 · 336ec89 · 336ec89
1 parent 5097507
commit 336ec89
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pact_broker.gemspec b/pact_broker.gemspec
@@ -64,4 +64,5 @@ Gem::Specification.new do |gem|
   gem.add_runtime_dependency 'table_print', '~> 1.5'
   gem.add_runtime_dependency 'semantic_logger', '~> 4.3'
   gem.add_runtime_dependency 'sanitize', '>= 5.2.1', '~> 5.2'
+  gem.add_runtime_dependency 'nokogiri', '< 2.0', '>= 1.11.0.rc4' # For CVE-2020-26247 Remove when 1.11 is released properly
 end