update json-jwt dependency for CVE-2018-1000539

keratin · Feb 5, 2019 · 2dc3302 · 2dc3302
1 parent 643e496
commit 2dc3302
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/keratin-authn.gemspec b/keratin-authn.gemspec
@@ -29,7 +29,7 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'json-jwt', '!= 1.8.0'
+  spec.add_dependency 'json-jwt', '~> 1.9.4'
   spec.add_dependency 'lru_redux'
 
   spec.add_development_dependency 'bundler', '~> 1.13'