Nokogiri 1.10.9 / CVE 2020-7595
From the GitLab 12.10.2 security release notes:
The Nokogiri dependency has been upgraded to 1.10.9. This upgrade includes a security fix for CVE-2020-7595.
Being a general HTML / XML parser, unless it's obvious from the CVE that Heptapod can't be affected, this probably has to be fixed, but that will lead to complications in the case of the Docker image.