aeonvera

aeonvera copied to clipboard

Openly index API key found in GIT repo

3

# AMAZON_S3_BUCKET - secure: "qkeYGn2mpgsgU5tKS9GWvFp/utUF/9O8++Shch24DMnq8OB01TrV5QQ2Elj7sSjMWqw2Pbe56nUCA9eOWXhPglGyIq2AI9E0umsEGZxdRlqqobpiMWs5wl8KZ0cFD1rZm6CwfL8atmcNfTt5TnvsaQ2l/k3TerOT2e66R/Mibk8=" # AMAZON_ACCESS_KEY_ID - secure: "rTYGUFH9SPN0L7QtdE6Liyy/1z7nGKxqDF9LMRsmNsIfsqxoTPKZ8bCctQ4ksuk9svynGQsLfsda5pA+YvuALzjdWmGcID6ENgOGvoFnhZO5LuJ5f6t0k8gFpV9oBquQgDWzhzrcPYvCUrUYg3GSlHjFSXdPdht3SoYn7PiDaNs=" # AMAZON_SECRET_ACCESS_KEY - secure: "VJ4qiWMzoleLojCcluX+w0RtaFVc9ybRNo6NODkGhHSaao8+4EX4rETBQG67tNSInk1iuNqCcZAGwC8V/12RXdao3PguRSLD5IiKeT+D78dqFEoP0+yHg4PbmZ6TJXADW3gUv/IOqkW7f/UYGinRaPu7hloyiC498FpQdmMWSNI=" Link - https://github.com/NullVoxPopuli/aeonvera/blob/755df8917ee4715c550460fa09cd1d5383588ac6/vendor/bundle/ruby/2.4.0/gems/devise-3.4.1/.travis.yml Impact - Anyone can steal these and can use them, leading to...

Shaunak-Chatterjee

Bumps [sprockets](http://getsprockets.org/) from 3.7.1 to 3.7.2. **This update includes security fixes.** Vulnerabilities fixed *Sourced from [The Ruby Advisory Database](https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sprockets/CVE-2018-3760.yml).* > **Path Traversal in Sprockets** > Specially crafted requests can be...

dependabot-preview[bot]

Bumps [sidekiq-scheduler](https://github.com/moove-it/sidekiq-scheduler) from 2.2.1 to 2.2.2. Release notes *Sourced from [sidekiq-scheduler's releases](https://github.com/moove-it/sidekiq-scheduler/releases).* > ## v2.2.2 > - Add pt-BR translation > - Add Polish translation > - Wait for rufus-scheduler...

dependabot-preview[bot]

Bumps [rubocop](https://github.com/bbatsov/rubocop) from 0.52.1 to 0.56.0. Release notes *Sourced from [rubocop's releases](https://github.com/bbatsov/rubocop/releases).* > ## RuboCop 0.56 > ### New features > > * [#5848](https://github-redirect.dependabot.com/bbatsov/rubocop/pull/5848): Add new `Performance/InefficientHashSearch` cop. ([[**JacobEvelyn**](https://github.com/JacobEvelyn)][]) >...

dependabot-preview[bot]

Bumps [oj](https://github.com/ohler55/oj) from 3.4.0 to 3.6.0. Changelog *Sourced from [oj's changelog](https://github.com/ohler55/oj/blob/master/CHANGELOG.md).* > ## 3.6.0 - 2018-05-01 > > - Add optimization for Rails ActiveRecord::Result encoding. > > ## 3.5.1 -...

dependabot-preview[bot]

Bumps [stripe-ruby-mock](https://github.com/rebelidealist/stripe-ruby-mock) from 2.2.4 to 2.5.4. Commits - [`94f6fd0`](https://github.com/rebelidealist/stripe-ruby-mock/commit/94f6fd0dec5f58b1a01cef132eede8383840955b) version 2.5.4 - [`b3f7ac5`](https://github.com/rebelidealist/stripe-ruby-mock/commit/b3f7ac5c1d63d2c5599b4e8281705b91d66ac4fb) Merge pull request [#509](https://github-redirect.dependabot.com/rebelidealist/stripe-ruby-mock/issues/509) from pwim/patch-1 - [`6f7a102`](https://github.com/rebelidealist/stripe-ruby-mock/commit/6f7a1027404056f591c994df063081c34d62500a) Merge pull request [#533](https://github-redirect.dependabot.com/rebelidealist/stripe-ruby-mock/issues/533) from cgunther/billing-cycle-anchor - [`46d34a4`](https://github.com/rebelidealist/stripe-ruby-mock/commit/46d34a4b54349a6b8e79cd9fe673c98102c8f0e1) Merge...

dependabot-preview[bot]

Bumps [uglifier](https://github.com/lautis/uglifier) from 3.2.0 to 4.1.10. Changelog *Sourced from uglifier's [changelog](https://github.com/lautis/uglifier/blob/master/CHANGELOG.md).* > ## 4.1.10 (21 April 2018) > > - update UglifyJS to [3.3.22](https://github.com/mishoo/UglifyJS2/compare/v3.3.20...v3.3.22) > > ## 4.1.9 (11 April...

dependabot-preview[bot]

Bumps [annotate](https://github.com/ctran/annotate_models) from 2.7.2 to 2.7.3. Changelog *Sourced from annotate's [changelog](https://github.com/ctran/annotate_models/blob/develop/CHANGELOG.rdoc).* > == 2.7.3 > See https://github.com/ctran/annotate_models/releases/tag/v2.7.3 > > == 2.7.2 > See https://github.com/ctran/annotate_models/releases/tag/v2.7.2 > > == 2.7.1 > See...

dependabot-preview[bot]

Bumps [database_cleaner](https://github.com/DatabaseCleaner/database_cleaner) from 1.6.1 to 1.7.0. Changelog *Sourced from database_cleaner's [changelog](https://github.com/DatabaseCleaner/database_cleaner/blob/master/History.rdoc).* > == Development (master) > > === Bug Fixes > === Changes > > == 1.7.0 2017-04-19 > >...

dependabot-preview[bot]

Bumps [rollbar](https://github.com/rollbar/rollbar-gem) from 2.15.5 to 2.15.6. Release notes *Sourced from rollbar's [releases](https://github.com/rollbar/rollbar-gem/releases).* > ## v2.15.6 > * Update rollbar.js snippet to `v2.3.8` [#680](https://github-redirect.dependabot.com/rollbar/rollbar-gem/issues/680) > > * Update `delayed_job` dependency to...

dependabot-preview[bot]