Bump puma to 8.0.2 to fix CVE-2026-47736 and CVE-2026-47737

bundler-audit (fresh advisory DB) flagged two High-severity PROXY Protocol v1 vulnerabilities in puma 8.0.1. Update to 8.0.2 as advised.
2026-06-07 21:34:29 -03:00
1 changed files with 1 additions and 1 deletions
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -193,7 +193,7 @@ GEM
    psych (5.3.1)
      date
      stringio
-    puma (8.0.1)
+    puma (8.0.2)
      nio4r (~> 2.0)
    raabro (1.4.0)
    racc (1.8.1)