Bump sprockets to 3.7.2 to address CVE-2018-3760 (!20109) · Merge requests · GitLab.org / GitLab FOSS · GitLab

Robert Speicher requested to merge rs-update-sprockets into master Jun 22, 2018

https://blog.heroku.com/rails-asset-pipeline-vulnerability