Repo uses a vulnerable version of rubocop: https://github.com/bbatsov/rubocop/issues/4336 Vulnerability is low severity and only affects developers. Fix should be as simple as updating the rubocop gem