ruby-oauth / oauth-tty / 42392538335

99%

push

github

🔒️ Update nokogiri to 1.19.7 (security)

bundler-audit flags nokogiri 1.19.4 with three published advisories,
all fixed in >= 1.19.5:
- GHSA-v995-44v6-5fqm (SSRF on JRuby resolving external DTDs with NONET)
- GHSA-3w22-6jfg-527w (use-after-free replacing an attribute value)
- GHSA-4p39-36wj-23h4 (mutation XSS serializing noscript in HTML5)

Conservative update; only the nokogiri platform pins and their
checksums moved. Verified: `rake bundle:audit:check` → No
vulnerabilities found; 0 local PATH remotes in Gemfile.lock.

28 of 29 branches covered (96.55%)

Branch coverage included in aggregate %.

311 of 312 relevant lines covered (99.68%)

22.05 hits per line