pdfkit-0.8.7.2 fixes CVE-2022-25765 (closes #517).

postmodern · postmodern · commit 6ef8634562c0 · 2022-10-18T13:08:11.000-07:00
diff --git a/gems/pdfkit/CVE-2022-25765.yml b/gems/pdfkit/CVE-2022-25765.yml
@@ -13,3 +13,5 @@ related:
   url:
   - "https://github.com/pdfkit/pdfkit/blob/master/lib/pdfkit/source.rb#L44-L50"
   - https://security.snyk.io/vuln/SNYK-RUBY-PDFKIT-2869795
+patched_versions:
+  - ">= 0.8.7.2"
