Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unirest is depending on insecure rest-client gem version #24

Open
paneq opened this issue Sep 15, 2015 · 10 comments
Open

Unirest is depending on insecure rest-client gem version #24

paneq opened this issue Sep 15, 2015 · 10 comments

Comments

@paneq
Copy link

paneq commented Sep 15, 2015

security

Could you please upgrade the dependency from s.add_dependency('rest-client', '~> 1.6.7') to s.add_dependency('rest-client', '~> 1.8.0') ?

@guizmaii
Copy link
Contributor

guizmaii commented Oct 7, 2015

+1

1 similar comment
@justinsoong
Copy link

👍

@justinsoong
Copy link

i need this

@guizmaii
Copy link
Contributor

guizmaii commented Oct 8, 2015

Use rest_client directly

@noam87
Copy link

noam87 commented Jan 27, 2016

this is starting to cause dependency issues with other widely used libraries (urbanairship).... is this thing being maintained?

@tunglam14
Copy link

👍 upgrade please

@guizmaii
Copy link
Contributor

IMHO, you should not use this gem because of the rest_client version problem and because of the problem addressed by #29 !

This gem is not well coded and not maintained. It could add bugs and security problems in your app.

@nikz
Copy link
Contributor

nikz commented Mar 26, 2016

We've fixed this now, apologies for the slowness. The gem is maintained and we'll be updating a few of the issues, including the one you've mentioned @guizmaii :)

@jakubkosinski
Copy link

@nikz could you release new gem version so that we can use rest-client 1.8.0?

@jack-fin
Copy link

I'd like to chime in, it would be great to release a new gem with the rest-client 1.8.0 update that is in master.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

8 participants