Address vulnerabilities in Rack

kpumuk · Jens-G · commit 2007f018b20a · 2026-04-15T23:28:05.000+02:00
diff --git a/lib/rb/Gemfile b/lib/rb/Gemfile
@@ -6,4 +6,4 @@ gemspec
 gem 'cgi'
 gem 'ostruct'
 
-eval_gemfile File.expand_path("Gemfile.linters", __dir__)
+eval_gemfile "Gemfile.linters"
diff --git a/lib/rb/Gemfile.lock b/lib/rb/Gemfile.lock
@@ -38,7 +38,7 @@ GEM
       binding_of_caller (>= 0.7)
       pry (>= 0.9.11)
     racc (1.8.1)
-    rack (2.2.22)
+    rack (2.2.23)
     rack-test (0.8.3)
       rack (>= 1.0, < 3)
     rainbow (3.1.1)
@@ -103,7 +103,7 @@ DEPENDENCIES
   pry (~> 0.11.3)
   pry-byebug (~> 3.6)
   pry-stack_explorer (~> 0.4.9.2)
-  rack (>= 2.2.20)
+  rack (>= 2.2.23)
   rack-test (~> 0.8.3)
   rake (~> 13.3)
   rspec (~> 3.7)
diff --git a/lib/rb/thrift.gemspec b/lib/rb/thrift.gemspec
@@ -32,7 +32,7 @@ Gem::Specification.new do |s|
   s.add_development_dependency 'pry',                '~> 0.11.3'
   s.add_development_dependency 'pry-byebug',         '~> 3.6'
   s.add_development_dependency 'pry-stack_explorer', '~> 0.4.9.2'
-  s.add_development_dependency 'rack',               '>= 2.2.20'
+  s.add_development_dependency 'rack',               '>= 2.2.23'
   s.add_development_dependency 'rack-test',          '~> 0.8.3'
   s.add_development_dependency 'rake',               '~> 13.3'
   s.add_development_dependency 'rspec',              '~> 3.7'
diff --git a/test/rb/Gemfile b/test/rb/Gemfile
@@ -3,8 +3,8 @@ source "https://rubygems.org"
 # Make sure all dependencies are in sync with the main library.
 gem 'thrift', path: '../../lib/rb'
 
-gem 'rack', '~> 2.2'
+gem 'rack', '~> 2.2', '>= 2.2.23'
 gem 'thin', '~> 1.7', '>= 1.7.2'
 gem 'test-unit', '~> 3.2', '>= 3.2.7'
 
-eval_gemfile File.expand_path("../../lib/rb/Gemfile.linters", __dir__)
+eval_gemfile "../../lib/rb/Gemfile.linters"
diff --git a/test/rb/Gemfile.lock b/test/rb/Gemfile.lock
@@ -21,7 +21,7 @@ GEM
     power_assert (3.0.1)
     prism (1.9.0)
     racc (1.8.1)
-    rack (2.2.22)
+    rack (2.2.23)
     rainbow (3.1.1)
     regexp_parser (2.11.3)
     rubocop (1.82.1)
@@ -64,7 +64,7 @@ PLATFORMS
   x86_64-linux
 
 DEPENDENCIES
-  rack (~> 2.2)
+  rack (~> 2.2, >= 2.2.23)
   rubocop (~> 1.82.0)
   rubocop-performance (~> 1.26.1)
   rubocop-rspec (~> 3.8.0)
