roo-rb/roo

nokogiri vulnerabilities

r-kanai opened this issue · 0 comments

spec.add_dependency 'nokogiri', '~> 1'

Version nokogiri before 1.12.5 is vulnerable and violates dependabot. So I ask you to increase the version to 1.12.5.
https://snyk.io/vuln/rubygems:nokogiri