madmin icon indicating copy to clipboard operation
madmin copied to clipboard

A robust Admin Interface for Ruby on Rails apps

Results 38 madmin issues
Sort by recently updated
recently updated
newest added

I'm currently getting a 404 when madmin attempts to import Stimulus from the Skypack CDN. The import URL madmin uses is: `https://cdn.skypack.dev/stimulus` When I access that in the browser, I...

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) Commits See full diff in compare...

dependencies
javascript

Bumps [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) from 1.4.2 to 1.4.3. Release notes Sourced from rails-html-sanitizer's releases. 1.4.3 / 2022-06-09 Address a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. Prevent the combination of select...

dependencies
ruby

Bumps [eventsource](https://github.com/EventSource/eventsource) from 1.1.0 to 1.1.1. Changelog Sourced from eventsource's changelog. 1.1.1 Do not include authorization and cookie headers on redirect to different origin (#273 Espen Hovlandsdal) Commits aa7a408 1.1.1...

dependencies
javascript

These lines are not resolving for me to valid URLs from madmin's `application.html.erb` template. ``` ``` In my main Rails app I get forms + typograhy by adding plugins to...

Bumps [async](https://github.com/caolan/async) from 2.6.3 to 2.6.4. Changelog Sourced from async's changelog. v2.6.4 Fix potential prototype pollution exploit (#1828) Commits c6bdaca Version 2.6.4 8870da9 Update built files 4df6754 update changelog 8f7f903...

dependencies
javascript

Bumps [puma](https://github.com/puma/puma) from 5.5.2 to 5.6.4. Release notes Sourced from puma's releases. 5.6.4 Security Close several HTTP Request Smuggling exploits (CVE-2022-24790) The 5.6.3 release was a mistake (released the wrong...

dependencies
ruby

Follow up from #143 Per @excid3 suggestion, this commit removes pinned references to Tailwind packages in favor of their Play CDN, with additions to the README explaining its implications. Fixes...

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependencies
javascript

Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.5.3 to 1.5.10. Commits 8cd4c6c 1.5.10 ce7a01f [fix] Improve handling of empty port 0071490 [doc] Update JSDoc comment a7044e3 [minor] Use more descriptive variable name d547792 [security]...

dependencies
javascript