Dependency | Version | Upgrade to | Vulnerabilities | Defined in -- | -- | -- | -- | -- ffi | < 1.9.24 | ~> 1.9.24 | CVE-2018-1000201 Moderate severity | Gemfile.lock rubyzip | <= 1.2.1 | ~> 1.2.2 | CVE-2018-1000544 Moderate severity | Gemfile.lock