Problem:
GitHub Dependabot alerts on old libraries, pointing out security vulnerabilities.

gem names e.g.:
kramdown
nokogiri
addressable

Solution:
Add particular gem version in GEMFILE e.g.:
gem 'kramdown', '>= 2.3.0'

Update the libraries.
bundle update <gem name> for particular.
bundle update for all.