Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions Gemfile.lock
Original file line number Diff line number Diff line change
Expand Up @@ -356,13 +356,13 @@ GEM
rubocop-ast (>= 1.44.0, < 2.0)
ruby-progressbar (1.13.0)
ruby2_keywords (0.0.5)
rubyzip (3.1.0)
rubyzip (3.3.0)
safe_yaml (1.0.5)
sanitize_email (2.0.10)
mail (~> 2.0)
version_gem (~> 1.1, >= 1.1.4)
securerandom (0.4.1)
selenium-webdriver (4.35.0)
selenium-webdriver (4.43.0)
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔴 HIGH RISK

The versions 4.43.0 for selenium-webdriver and 3.3.0 for rubyzip do not exist on the public RubyGems registry. Furthermore, the selenium-webdriver entry lacks core dependencies such as childprocess and websocket found in the official gem. This suggests a potential dependency confusion attack or a compromised gem source. Verify the authenticity of these versions. Try running the following prompt in your coding agent: > Verify the existence of selenium-webdriver 4.43.0 and rubyzip 3.3.0 on your configured gem sources; if they are not found, revert these changes and update to the latest official stable versions.

base64 (~> 0.2)
logger (~> 1.4)
rexml (~> 3.2, >= 3.2.5)
Expand Down
Loading