[Snyk] Security upgrade rails from 5.2.3 to 7.1.0

[nathan-snyk]

Snyk has created this PR to fix 57 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile

⚠️ Warning

Failed to update the Gemfile.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Deserialization of Untrusted Data SNYK-RUBY-ACTIVESUPPORT-569598	670
	Stack-based Buffer Overflow SNYK-RUBY-NOKOGIRI-8732769	202
	Use After Free SNYK-RUBY-NOKOGIRI-8732779	202
	Use After Free SNYK-RUBY-NOKOGIRI-9510795	202
	Arbitrary Code Injection SNYK-RUBY-RACK-2848599	191
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-WEBSOCKETEXTENSIONS-570830	187
	Expired Pointer Dereference SNYK-RUBY-NOKOGIRI-10674179	178
	Uncontrolled Memory Allocation SNYK-RUBY-NOKOGIRI-534637	169
	Command Injection SNYK-RUBY-NOKOGIRI-459107	167
	Use After Free SNYK-RUBY-NOKOGIRI-2413994	164
	Denial of Service (DoS) SNYK-RUBY-NOKOGIRI-1293239	160
	Denial of Service (DoS) SNYK-RUBY-NOKOGIRI-6056551	159
	Denial of Service (DoS) SNYK-RUBY-NOKOGIRI-6056552	159
	Denial of Service (DoS) SNYK-RUBY-NOKOGIRI-6056553	159
	Denial of Service (DoS) SNYK-RUBY-NOKOGIRI-6056554	159
	Denial of Service (DoS) SNYK-RUBY-NOKOGIRI-6056555	159
	Heap-based Buffer Overflow SNYK-RUBY-NOKOGIRI-7164639	159
	Arbitrary Code Injection SNYK-RUBY-RAKE-552000	149
	Directory Traversal SNYK-RUBY-TZINFO-2958048	143
	Web Cache Poisoning SNYK-RUBY-RACK-1061917	141
	Improper Handling of Unexpected Data Type SNYK-RUBY-NOKOGIRI-2840634	139
	Improper Output Neutralization for Logs SNYK-RUBY-RACK-8720151	134
	Use After Free SNYK-RUBY-NOKOGIRI-9510789	130
	Stack-based Buffer Overflow SNYK-RUBY-NOKOGIRI-10674176	124
	Expired Pointer Dereference SNYK-RUBY-NOKOGIRI-10674184	124
	Out-of-bounds Read SNYK-RUBY-NOKOGIRI-10674192	124
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-10074187	124
	Relative Path Traversal SNYK-RUBY-RACK-9398129	124
	Denial of Service (DoS) SNYK-RUBY-RACK-3356639	117
	XML External Entity (XXE) Injection SNYK-RUBY-NOKOGIRI-1726792	115
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-NOKOGIRI-2620374	115
	NULL Pointer Dereference SNYK-RUBY-NOKOGIRI-3052880	115
	Denial of Service (DoS) SNYK-RUBY-RACK-2848600	115
	Out-of-bounds Write SNYK-RUBY-NOKOGIRI-2630623	114
	Denial of Service (DoS) SNYK-RUBY-NOKOGIRI-2630898	114
	Denial of Service (DoS) SNYK-RUBY-NOKOGIRI-552159	114
	Directory Traversal SNYK-RUBY-RACK-569066	114
	Denial of Service (DoS) SNYK-RUBY-RACK-6274385	114
	Cross-site Request Forgery (CSRF) SNYK-RUBY-RACK-572377	112
	Use After Free SNYK-RUBY-NOKOGIRI-6228056	85
	Race Condition SNYK-RUBY-RACK-10074188	70
	Cross-site Scripting (XSS) SNYK-RUBY-ACTIVESUPPORT-3360028	66
	Cross-site Scripting (XSS) SNYK-RUBY-NOKOGIRI-8453714	64
	Buffer Under-read SNYK-RUBY-NOKOGIRI-9789079	50
	Improper Output Neutralization for Logs SNYK-RUBY-RACK-9058602	49
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-ACTIVESUPPORT-3237242	46
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-GLOBALID-3237234	46
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-RACK-3237233	46
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-RACK-3237240	46
	Information Exposure SNYK-RUBY-RACK-538324	46
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-RACK-3237237	45
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-RACK-3360233	45
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-RACK-6274383	45
	Regular Expression Denial of Service (ReDoS) SNYK-RUBY-RACK-6274384	45
	Information Exposure SNYK-RUBY-ACTIVESUPPORT-5851458	41
	XML External Entity (XXE) Injection SNYK-RUBY-NOKOGIRI-1055008	26
	Stack-based Buffer Overflow SNYK-RUBY-NOKOGIRI-10674188	22

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Cross-site Scripting (XSS)
🦉 Deserialization of Untrusted Data
🦉 More lessons are available in Snyk Learn