Skip to content

Security: Bump uri dependency to 1.0.3 to address CVE-2025-27221 #159

@SArnett

Description

@SArnett

Hello. We're currently using your gem (thank you!), and our Vanta account is flagging that in this repo's Gemfile.lock it is still using uri 1.0.2, which has an active CVE (CVE-2025-27221). The fix was released in uri 1.0.3. Would you be so kind as to bump that dependency or would you be open to a PR that does so? Thank you for your time.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions