Commit 36924d5
committed
fix(deps): Bump faraday to 1.10.6 in performance-tests
Addresses GHSA-98m9-hrrm-r99r (CVE-2026-54297): uncontrolled recursion in Faraday::NestedParamsEncoder allowing a stack-exhaustion DoS via deeply nested query parameters.
The fix is shipped in faraday 1.10.6 (backport) and 2.14.3. Bumps the locked version in performance-tests/Gemfile.lock from 1.10.5 to 1.10.6; the gem stays on the 1.x line to remain compatible with fastlane 2.228.0 and faraday-* 1.x sub-gems.1 parent 56958a5 commit 36924d5
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
46 | 46 | | |
47 | 47 | | |
48 | 48 | | |
49 | | - | |
| 49 | + | |
50 | 50 | | |
51 | 51 | | |
52 | 52 | | |
| |||
0 commit comments