From 336ec8978c015449d322cce9c05ce24fbc4e1e12 Mon Sep 17 00:00:00 2001 From: Beth Skurrie Date: Mon, 4 Jan 2021 11:17:57 +1100 Subject: [PATCH] fix(deps): update nokogiri for CVE-2020-26247 --- pact_broker.gemspec | 1 + 1 file changed, 1 insertion(+) diff --git a/pact_broker.gemspec b/pact_broker.gemspec index 48895b19f..47e6c03e3 100644 --- a/pact_broker.gemspec +++ b/pact_broker.gemspec @@ -64,4 +64,5 @@ Gem::Specification.new do |gem| gem.add_runtime_dependency 'table_print', '~> 1.5' gem.add_runtime_dependency 'semantic_logger', '~> 4.3' gem.add_runtime_dependency 'sanitize', '>= 5.2.1', '~> 5.2' + gem.add_runtime_dependency 'nokogiri', '< 2.0', '>= 1.11.0.rc4' # For CVE-2020-26247 Remove when 1.11 is released properly end