Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nogogiri security vulnerability #207

Open
crkoehnen opened this issue Dec 28, 2017 · 0 comments
Open

nogogiri security vulnerability #207

crkoehnen opened this issue Dec 28, 2017 · 0 comments
Assignees

Comments

@crkoehnen
Copy link

"We found a potential security vulnerability in one of your dependencies.
The nokogiri dependency defined in Gemfile.lock has a known critical severity security vulnerability in version range < 1.8.1 and should be updated.

Review vulnerable dependency
Only users who have been granted access to vulnerability alerts for this repository can see this message.
Learn more about vulnerability alerts"

  • Do we really need nokogiri?
  • Do we upgrade nokogiri?
  • Can we move to a static site generator? (If so, which?)
@crkoehnen crkoehnen self-assigned this Dec 28, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant