Merge pull request #288 from chef/rack

Require Rack 2.0.6 or later to resolve CVEs
chef · Nov 15, 2018 · 0e8fa4b · 0e8fa4b
2 parents 911a8ad + 96e8b20
commit 0e8fa4b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/chef-zero.gemspec b/chef-zero.gemspec
@@ -17,7 +17,7 @@ Gem::Specification.new do |s|
   s.add_dependency "hashie", ">= 2.0", "< 4.0"
   s.add_dependency "uuidtools", "~> 2.1"
   s.add_dependency "ffi-yajl", "~> 2.2"
-  s.add_dependency "rack", "~> 2.0"
+  s.add_dependency "rack", "~> 2.0", ">= 2.0.6"
 
   s.add_development_dependency "rake"
   s.add_development_dependency "rspec"