Pact Foundation

<https://github.com/pact-foundation/pact-ruby-standalone/issues/164|#164 Please bump Rack to &gt;=3.1.11>
Issue created by <https://github.com/milda-a|milda-a>
Hi there,
We have a raised vulnerability for rack 3.1.10 within the pact ruby standalone, please bump at least to 3.1.11 to fix this (appears to be used on quite a few internal dependencies too, so please ensure only versions above 3.1.10 are in the image).  
<https://github.com/pact-foundation/pact-ruby-standalone/blob/22b3939b74b1a816192f3935c230e909f8d82c8b/packaging/Gemfile.lock#L87|pact-ruby-standalone/packaging/Gemfile.lock> 
 Line 87 in&lt;/pact-foundation/pact-ruby-standalone/commit/22b3939b74b1a816192f3935c230e909f8d82c8b|22b3939&gt; 

| rack (3.1.10) |
| ------------- |

Thanks a bunch!
<https://github.com/pact-foundation/pact-ruby-standalone|pact-foundation/pact-ruby-standalone>

:eyes:  if anyone could action this, would be much appreciated

There is no published version of 3.1.11 :shrug: do you have a link to the CVE, if there is one

FYI - <https://github.com/rack/rack/issues/2286>

cheers for that Yousaf, will pass that on to the team

Looks like a 3.1.11 has just been published

<https://rubygems.org/gems/rack/versions/3.1.11>

This is the stable branch

<https://github.com/rack/rack/commits/3-1-stable/>

Dependabot pulled it in, so i’ll go through the release motions

<https://github.com/pact-foundation/pact-ruby-standalone/pull/165>

<https://github.com/pact-foundation/pact-ruby-standalone/issues/164|#164 Please bump Rack to &gt;=3.1.11>
Issue closed as completed by <https://github.com/YOU54F|YOU54F>
<https://github.com/pact-foundation/pact-ruby-standalone|pact-foundation/pact-ruby-standalone>