[Snyk-dev] Fix for 47 vulnerabilities

[Nealm03]

Snyk has created this PR to fix 47 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile
• Gemfile.lock

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Deserialization of Untrusted Data SNYK-RUBY-ACTIVESUPPORT-569598	834
	Arbitrary Code Injection SNYK-RUBY-ACTIONPACK-20264	794
	Cross-site Scripting (XSS) SNYK-RUBY-JQUERYRAILS-565439	744
	Remote Code Execution (RCE) SNYK-RUBY-ACTIVERECORD-2960802	704
	Arbitrary Code Injection SNYK-RUBY-RACK-2848599	704
	Directory Traversal SNYK-RUBY-SPROCKETS-22032	696
	Arbitrary Code Injection SNYK-RUBY-RAKE-552000	686
	Denial of Service (DoS) SNYK-RUBY-JSON-560838	679
	Prototype Pollution SNYK-RUBY-JQUERYRAILS-450225	666
	Cross-site Request Forgery (CSRF) SNYK-RUBY-ACTIONPACK-569599	646
	Information Exposure SNYK-RUBY-ACTIONPACK-569600	646
	Cross-site Request Forgery (CSRF) SNYK-RUBY-RACK-572377	646
	Directory Traversal SNYK-RUBY-ACTIONPACK-20158	644
	Command Injection SNYK-RUBY-RDOC-1279617	619
	Web Cache Poisoning SNYK-RUBY-RACK-1061917	616
	Denial of Service (DoS) SNYK-RUBY-ACTIONPACK-1290052	589
	Denial of Service (DoS) SNYK-RUBY-ACTIONPACK-20255	589
	Denial of Service (DoS) SNYK-RUBY-ACTIONPACK-20256	589
	Denial of Service (DoS) SNYK-RUBY-I18N-72582	589
	Denial of Service (DoS) SNYK-RUBY-RACK-2848600	589
	Directory Traversal SNYK-RUBY-RACK-569066	589
	Directory Traversal SNYK-RUBY-TZINFO-2958048	589
	Information Exposure SNYK-RUBY-ACTIONPACK-1290051	586
	Information Exposure SNYK-RUBY-ACTIONPACK-2400638	584
	SQL Injection SNYK-RUBY-ACTIVERECORD-20184	579
	Arbitrary Data Injection SNYK-RUBY-ACTIVERECORD-20190	579
	Command Injection SNYK-RUBY-RDOC-1316279	564
	Cross-site Request Forgery (CSRF) SNYK-RUBY-JQUERYRAILS-575390	539
	Cross-site Scripting (XSS) SNYK-RUBY-TURBOLINKS-20429	539
	Improper minification of non-boolean comparisons SNYK-RUBY-UGLIFIER-20236	539
	Data Injection SNYK-RUBY-ACTIVERECORD-20149	529
	SMTP Injection SNYK-RUBY-MAIL-20244	519
	Cross-site Scripting (XSS) SNYK-RUBY-RACK-72567	519
	Arbitrary File Existence Exposure SNYK-RUBY-ACTIONPACK-20200	479
	Nested Attributes Rejection Bypass SNYK-RUBY-ACTIVERECORD-20259	479
	Denial of Service (DoS) SNYK-RUBY-ACTIVESUPPORT-20229	479
	Cross-site Request Forgery (CSRF) SNYK-RUBY-JQUERYRAILS-20225	479
	Denial of Service (DoS) SNYK-RUBY-RACK-20230	479
	IP Spoofing SNYK-RUBY-RACK-20399	479
	Denial of Service (DoS) SNYK-RUBY-RACK-20400	479
	Information Exposure SNYK-RUBY-RACK-538324	479
	Timing Attack SNYK-RUBY-RAILTIES-20454	479
	Arbitrary File Existence Exposure SNYK-RUBY-SPROCKETS-20199	479
	Cross-site Scripting (XSS) SNYK-RUBY-ACTIONPACK-20147	429
	Arbitrary File Existence Exposure SNYK-RUBY-ACTIONPACK-20198	429
	Cross-site Scripting (XSS) SNYK-RUBY-ERUBIS-20482	424
	Timing Attack SNYK-RUBY-ACTIONPACK-20258	399

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Information Exposure
🦉 Denial of Service (DoS)
🦉 Cross-site Scripting (XSS)
🦉 More lessons are available in Snyk Learn