use rexml ~> 3.2.5 due to CVE-2021-28965

GHSA-8cr8-4vfw-mr7h
prontolabs · May 6, 2021 · 928a51e · 928a51e
1 parent 999d0b9
commit 928a51e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pronto.gemspec b/pronto.gemspec
@@ -44,7 +44,7 @@ Gem::Specification.new do |s|
   s.add_runtime_dependency('httparty', '>= 0.13.7')
   s.add_runtime_dependency('octokit', '~> 4.7', '>= 4.7.0')
   s.add_runtime_dependency('rainbow', '>= 2.2', '< 4.0')
-  s.add_runtime_dependency('rexml', '~> 3.2')
+  s.add_runtime_dependency('rexml', '~> 3.2', '>= 3.2.5')
   s.add_runtime_dependency('rugged', '>= 0.23.0', '< 1.1.0')
   s.add_runtime_dependency('thor', '>= 0.20.3', '< 2.0')
   s.add_development_dependency('bundler', '>= 1.15')