Fix: CVE-2020-8130 (#78)

* Fix OS command injection on Rake version 10 * Update changelog
rodolfobandeira · Mar 14, 2020 · 2c02184 · 2c02184
1 parent 705c228
commit 2c02184
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,6 +1,7 @@
 ### 1.0.3 (next)
 
 * Your contribution here.
+* [#74](https://github.com/rodolfobandeira/spacex/pull/74): Fix vulnerable dependency: Rake. Bump to version 12 [@rodolfobandeira](https://github.com/rodolfobandeira).
 
 ### 1.0.2 (2019/10/06)
 

diff --git a/spacex.gemspec b/spacex.gemspec
@@ -21,7 +21,7 @@ Gem::Specification.new do |s|
   s.add_dependency 'faraday_middleware', '~> 0.12'
   s.add_dependency 'hashie', '3.6.0'
   s.add_development_dependency 'coveralls'
-  s.add_development_dependency 'rake', '~> 10'
+  s.add_development_dependency 'rake', '>= 12.3.3'
   s.add_development_dependency 'rspec', '~> 3.8'
   s.add_development_dependency 'rubocop', '0.51.0'
   s.add_development_dependency 'vcr', '~> 4'