Add CVE entry to changelog

Author: jsmestad

CHANGELOG.md

@@ -7,6 +7,7 @@
 * Resolve outstanding TODO entries (#179)
 * A bunch of gem structure cleanup (thanks @olleolleolle)
 * Set winning strategy when :warden is thrown (#174)
+* Bump rack dependency to >= 2.0.9 due to CVEs
 
 ## Version 1.2.8 / 2018-11-15
 

warden.gemspec

@@ -21,5 +21,5 @@ Gem::Specification.new do |spec|
     f.match(%r{^(test|spec|features)/})
   end
   spec.require_paths = ["lib"]
-  spec.add_dependency "rack", ">= 2.0.6"
+  spec.add_dependency "rack", ">= 2.0.9"
 end