From e10bfe0cc148f5e96fe1aa0ef6cca9678921e583 Mon Sep 17 00:00:00 2001 From: Alan Guo Xiang Tan Date: Fri, 31 Mar 2023 07:51:45 +0800 Subject: [PATCH] SECURITY: Update URI gem to 0.12.1 to address CVE-2023-28755 (#20906) See https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/ --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index 7b3bb64adc9..fd76fd91cad 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -497,7 +497,7 @@ GEM kgio (~> 2.6) raindrops (~> 0.7) uniform_notifier (1.16.0) - uri (0.12.0) + uri (0.12.1) uri_template (0.7.0) version_gem (1.1.2) web-push (3.0.0)