Merge branch '0.15.X'

boxyhq · Apr 30, 2021 · 6164c21 · 6164c21
2 parents 40fc1d0 + 9cc74ea
commit 6164c21
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -11,6 +11,10 @@
 * Fix ruby 2.7 deprecation warnings [#241](https://github.com/Sorcery/sorcery/pull/241)
 * Use set to ensure unique arrays [#233](https://github.com/Sorcery/sorcery/pull/233)
 
+## 0.15.1
+
+* Update `oauth` dependency per CVE-2016-11086
+
 ## 0.15.0
 
 * Fix brute force vuln due to callbacks no being ran [#235](https://github.com/Sorcery/sorcery/pull/235)

diff --git a/sorcery.gemspec b/sorcery.gemspec
@@ -34,7 +34,7 @@ Gem::Specification.new do |s|
   s.required_ruby_version = '>= 2.4.9'
 
   s.add_dependency 'bcrypt', '~> 3.1'
-  s.add_dependency 'oauth', '~> 0.4', '>= 0.4.4'
+  s.add_dependency 'oauth', '~> 0.5', '>= 0.5.5'
   s.add_dependency 'oauth2', '~> 1.0', '>= 0.8.0'
 
   s.add_development_dependency 'byebug', '~> 10.0.0'