chore: CVE-2025-25184: ensure rack version 3.1.10 or greater.

pact-foundation · Feb 17, 2025 · cc365ce · cc365ce
1 parent 87f7c5d
commit cc365ce
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pact_broker.gemspec b/pact_broker.gemspec
@@ -57,7 +57,7 @@ Gem::Specification.new do |gem|
   gem.add_runtime_dependency "sequel", "~> 5.28"
   gem.add_runtime_dependency "webmachine", ">= 2.0.0.beta", "< 3.0"
   gem.add_runtime_dependency "semver2", "~> 3.4.2"
-  gem.add_runtime_dependency "rack", "~> 3.1"
+  gem.add_runtime_dependency "rack", "~> 3.1", ">= 3.1.10"
   gem.add_runtime_dependency "redcarpet", ">= 3.5.1", "~>3.5"
   gem.add_runtime_dependency "pact-support" , ">= 1.21.2", "~> 1.21"
   gem.add_runtime_dependency "haml", "~>5.0"