[Snyk] Fix for 1 vulnerabilities

[sgonzalez-r7]

Snyk has created this PR to fix 1 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile

⚠️ Warning

Failed to update the Gemfile.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Server-side Request Forgery (SSRF) SNYK-RUBY-FARADAY-15253521	631

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)

[sgonzalez-r7]

metasploit-framework @ 5.0.31 → 6.0.33

Risk: HIGH

This is a major version upgrade with significant and breaking changes. The most critical change is a complete overhaul of the payload communication protocol.

Breaking Changes:

• Payload Incompatibility: Payloads generated with Metasploit v5 are not compatible with the v6 framework, and vice-versa. [2] This is due to the introduction of end-to-end AES encryption for all Meterpreter communications. [1, 2]
• Dropped OS Support: Meterpreter support for Windows versions older than XP SP2 has been removed. [1]
• Internal Changes: Meterpreter commands have been changed from strings to integer equivalents, which may break custom scripts that rely on the old string-based commands. [1]

Recommendation:
All active sessions using v5 payloads must be terminated before upgrading. After upgrading to v6, all payloads must be regenerated. Do not upgrade during an active operation. [2]

Source: Metasploit 6.0 Release Notes, Rapid7 Blog

---

octokit @ 4.14.0 → 4.23.0

Risk: MEDIUM

This is a minor version upgrade. While no specific breaking changes were identified, a consolidated changelog for this exact version range was not found. The risk is assessed as medium due to this uncertainty.

Highlights:

• As a minor version upgrade within the v4 series, major API changes are not expected.
• The changes likely include new features, bug fixes, and support for new GitHub APIs.

Recommendation:
Review your usage of the library and test thoroughly, as minor behavioral changes or new deprecations could be present.

Source: Package documentation

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.