Name: rack-attack

Version: 4.2.0
Advisory: 132234
Criticality: Unknown
URL: https://github.com/kickstarter/rack-attack/releases/tag/v4.3.1
Title: rack-attack Gem for Ruby missing normalization before request path
processing
Solution: upgrade to >= 4.3.1

Gemfile.lock

@@ -251,7 +251,7 @@ GEM
     quiet_assets (1.1.0)
       railties (>= 3.1, < 5.0)
     rack (1.5.5)
-    rack-attack (4.2.0)
+    rack-attack (5.0.1)
       rack
     rack-cors (0.3.1)
     rack-pjax (0.8.0)