Skip to content

Commit a1389c9

Browse files
committed
(MAINT) Remove version constraint for rake
Prior to this commit the version of rake installed with this project was vulnerable to an OS command injection attach. The CVE ID for this is: CVE-2020-8130 This commit fixes the above by removing the version constraint and ensuring that the latest version of rake is always pulled.
1 parent 6fc3d5e commit a1389c9

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Gemfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ source 'https://rubygems.org'
33
gemspec
44

55
group :test do
6-
gem 'rake', '~> 10.0'
6+
gem 'rake'
77
gem 'rspec-its', '~> 1.0'
88
gem 'rspec-collection_matchers', '~> 1.0'
99

0 commit comments

Comments
 (0)