Échec pipeline #487194

Problème rencontré

Le pipeline 487194 a échoué :

$ bundle exec bundle audit check --update
Download ruby-advisory-db ...
Cloning into '/root/.local/share/ruby-advisory-db'...
ruby-advisory-db:
  advisories:	541 advisories
  last updated:	2022-02-02 09:51:17 -0800
Name: nokogiri
Version: 1.11.7
CVE: CVE-2021-41098
GHSA: GHSA-2rr5-8q37-2w7h
Criticality: High
URL: https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-2rr5-8q37-2w7h
Title: Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby
Solution: upgrade to >= 1.12.5
Name: puma
Version: 5.3.2
CVE: CVE-2021-41136
GHSA: GHSA-48w2-rm65-62xx
Criticality: Low
URL: https://github.com/puma/puma/security/advisories/GHSA-48w2-rm65-62xx
Title: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma
Solution: upgrade to ~> 4.3.9, >= 5.5.1
Vulnerabilities found!

Comment reproduire ?

1. Considérant le code de Filaé
2. Lorsque je lance make audit-api
3. Alors j'ai le message d'erreur ci-dessus

Comportement attendu

1. Considérant le code de Filaé
2. Lorsque je lance make audit-api
3. Alors je n'ai pas de message d'erreur