Gemfile.lock is raising critical vulnerabilities in AWS inspector #95

Open

opened

on Feb 18, 2026

AWS inspector is doing static analysis of our Dockerized Rails app, and it finding an old version of Nokogiri in Gemfile.lock. Excluding it from the Gem would be the best solution.

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests