[Snyk] Fix for 40 vulnerabilities

[pnegri]

Snyk has created this PR to fix 40 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile

⚠️ Warning

Failed to update the Gemfile.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Heap-based Buffer Overflow SNYK-RUBY-NOKOGIRI-7164639	696
	Arbitrary Command Injection SNYK-RUBY-ACTIVESTORAGE-11800135	674
	Stack-based Buffer Overflow SNYK-RUBY-NOKOGIRI-8732769	671
	Use After Free SNYK-RUBY-NOKOGIRI-8732779	671
	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-RUBY-REXML-7577227	666
	Expired Pointer Dereference SNYK-RUBY-NOKOGIRI-10674179	654
	Stack-based Buffer Overflow SNYK-RUBY-NOKOGIRI-10674176	649
	Expired Pointer Dereference SNYK-RUBY-NOKOGIRI-10674184	649
	Out-of-bounds Read SNYK-RUBY-NOKOGIRI-10674192	649
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-10074187	649
	Relative Path Traversal SNYK-RUBY-RACK-9398129	649
	Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') SNYK-RUBY-REXML-7814166	624
	Cross-site Scripting (XSS) SNYK-RUBY-ACTIONTEXT-7247324	591
	Denial of Service (DoS) SNYK-RUBY-RACK-6274385	589
	Exposure of Data Element to Wrong Session SNYK-RUBY-ACTIONPACK-6274388	586
	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-RUBY-REXML-6861566	586
	Denial of Service (DoS) SNYK-RUBY-REXML-7462086	586
	Use After Free SNYK-RUBY-NOKOGIRI-9510795	576
	Memory Allocation with Excessive Size Value SNYK-RUBY-NETIMAP-10006666	569
	Improper Output Neutralization for Logs SNYK-RUBY-RACK-8720151	569
	OS Command Injection SNYK-RUBY-THOR-10843853	569
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-ACTIONMAILER-8220269	559
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-ACTIONPACK-8220162	559
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-ACTIONPACK-8220268	559
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-ACTIONTEXT-8220270	559
	Improper Neutralization SNYK-RUBY-ACTIVERECORD-11800112	559
	Improper Output Neutralization for Logs SNYK-RUBY-RACK-9058602	559
	Denial of Service (DoS) SNYK-RUBY-REXML-7577228	559
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-REXML-8309365	559
	Use After Free SNYK-RUBY-NOKOGIRI-6228056	524
	Cross-site Scripting (XSS) SNYK-RUBY-ACTIONPACK-6274386	519
	Improper Input Validation SNYK-RUBY-ACTIONPACK-7210237	484
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-RACK-6274383	479
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-RACK-6274384	479
	Use After Free SNYK-RUBY-NOKOGIRI-9510789	469
	Buffer Under-read SNYK-RUBY-NOKOGIRI-9789079	426
	Race Condition SNYK-RUBY-RACK-10074188	329
	Cross-site Scripting (XSS) SNYK-RUBY-ACTIONPACK-8496389	319
	Cross-site Scripting (XSS) SNYK-RUBY-NOKOGIRI-8453714	319
	Stack-based Buffer Overflow SNYK-RUBY-NOKOGIRI-10674188	304

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Cross-site Scripting (XSS)
🦉 Improper Input Validation
🦉 More lessons are available in Snyk Learn