Devise vulnerability: CVE-2019-5421

- heartcombo/devise#4981

Gemfile

@@ -19,7 +19,7 @@ gem "countries", "~> 2.1.4"
 gem "country_select"
 gem "daemons"
 gem "delayed_job_active_record"
-gem "devise"
+gem "devise", ">= 4.6.0"
 gem "devise-async"
 gem "dotenv-rails"
 gem "faker"

Gemfile.lock

@@ -207,7 +207,7 @@ GEM
     delayed_job_active_record (4.1.3)
       activerecord (>= 3.0, < 5.3)
       delayed_job (>= 3.0, < 5)
-    devise (4.4.3)
+    devise (4.6.1)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
       railties (>= 4.1.0, < 6.0)
@@ -429,9 +429,9 @@ GEM
     rb-inotify (0.9.10)
       ffi (>= 0.5.0, < 2)
     remotipart (1.4.2)
-    responders (2.4.0)
-      actionpack (>= 4.2.0, < 5.3)
-      railties (>= 4.2.0, < 5.3)
+    responders (2.4.1)
+      actionpack (>= 4.2.0, < 6.0)
+      railties (>= 4.2.0, < 6.0)
     rspec (3.7.0)
       rspec-core (~> 3.7.0)
       rspec-expectations (~> 3.7.0)
@@ -537,8 +537,8 @@ GEM
     uniform_notifier (1.11.0)
     validates_email_format_of (1.6.3)
       i18n
-    warden (1.2.7)
-      rack (>= 1.0)
+    warden (1.2.8)
+      rack (>= 2.0.6)
     web-console (3.6.2)
       actionview (>= 5.0)
       activemodel (>= 5.0)
@@ -590,7 +590,7 @@ DEPENDENCIES
   daemons
   database_cleaner
   delayed_job_active_record
-  devise
+  devise (>= 4.6.0)
   devise-async
   dotenv-rails
   email_spec