From fb9324fade79e64182d4942eb8fbaf67bd16b1d3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 Aug 2025 20:11:19 +0000 Subject: [PATCH] fix: Gemfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-RUBYSAML-11342367 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674179 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674176 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674184 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674192 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674188 --- Gemfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Gemfile b/Gemfile index e1b6a3fca466c..a78b5d91eda95 100644 --- a/Gemfile +++ b/Gemfile @@ -95,8 +95,8 @@ gem 'doorkeeper', '~> 5.8', '>= 5.8.1', feature_category: :system_access gem 'doorkeeper-openid_connect', '~> 1.8.10', feature_category: :system_access gem 'doorkeeper-device_authorization_grant', '~> 1.0.0', feature_category: :system_access gem 'rexml', '~> 3.4.0', feature_category: :shared -gem 'ruby-saml', '~> 1.18', feature_category: :system_access -gem 'omniauth-saml', '~> 2.2.1', feature_category: :system_access +gem 'ruby-saml', '~> 1.18', '>= 1.18.1', feature_category: :system_access +gem 'omniauth-saml', '~> 2.2.4', feature_category: :system_access gem 'omniauth', '~> 2.1.0', feature_category: :system_access gem 'omniauth-auth0', '~> 3.1', feature_category: :system_access gem 'omniauth-azure-activedirectory-v2', '~> 2.0', feature_category: :system_access