linuxfr.org icon indicating copy to clipboard operation
linuxfr.org copied to clipboard

LinuxFr.org content management system, in Ruby on Rails. It was NoNo's resolution for 2009, deployed in 2011. You may add other enhancements at https://linuxfr.org/suivi/ as you have a look at the web...

Results 53 linuxfr.org issues
Sort by recently updated
recently updated
newest added

Bumps [minimist](https://github.com/minimistjs/minimist), [mkdirp](https://github.com/isaacs/node-mkdirp) and [gonzales-pe](https://github.com/tonyganch/gonzales-pe). These dependencies needed to be updated together. Updates `minimist` from 1.2.0 to 1.2.8 Changelog Sourced from minimist's changelog. v1.2.8 - 2023-02-09 Merged [Fix] Fix long...

dependencies
javascript

Bumps [globalid](https://github.com/rails/globalid) from 0.4.2 to 1.0.1. Release notes Sourced from globalid's releases. v1.0.1 Possible ReDoS based DoS vulnerability in GlobalID There is a ReDoS based DoS vulnerability in the GlobalID...

dependencies
ruby

Bumps [json5](https://github.com/json5/json5) from 2.1.0 to 2.2.3. Release notes Sourced from json5's releases. v2.2.3 Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299) v2.2.2 Fix: Properties...

dependencies
javascript

Bumps [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) from 1.3.0 to 1.4.4. Release notes Sourced from rails-html-sanitizer's releases. 1.4.4 / 2022-12-13 Address inefficient regular expression complexity with certain configurations of Rails::Html::Sanitizer. Fixes CVE-2022-23517. See GHSA-5x79-w82f-gw8w for...

dependencies
ruby

Bumps [loofah](https://github.com/flavorjones/loofah) from 2.7.0 to 2.19.1. Release notes Sourced from loofah's releases. 2.19.1 / 2022-12-13 Security Address CVE-2022-23514, inefficient regular expression complexity. See GHSA-486f-hjj9-9vhh for more information. Address CVE-2022-23515, improper...

dependencies
ruby

Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. Release notes Sourced from decode-uri-component's releases. v0.2.2 Prevent overwriting previously decoded tokens 980e0bf https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2 v0.2.1 Switch to GitHub workflows 76abc93 Fix issue where decode...

dependencies
javascript

Bumps [set-value](https://github.com/jonschlinkert/set-value) and [union-value](https://github.com/jonschlinkert/union-value). These dependencies needed to be updated together. Updates `set-value` from 2.0.0 to 2.0.1 Commits bb0f038 2.0.1 cb12f14 ensure only valid keys are used See full diff...

dependencies
javascript

Bumps [better_errors](https://github.com/BetterErrors/better_errors) from 2.5.0 to 2.8.0. Release notes Sourced from better_errors's releases. v2.8.0 Support for Rails ActionableError #465 Allow editor links to work inside an iframe or with CSP that...

dependencies
ruby

Bumps [postcss](https://github.com/postcss/postcss) from 7.0.14 to 7.0.39. Release notes Sourced from postcss's releases. 7.0.39 Reduce package size. Backport nanocolors to picocolors migration. 7.0.38 Update Processor#version. 7.0.37 Backport chalk to nanocolors migration....

dependencies
javascript

Bumps [ansi-regex](https://github.com/chalk/ansi-regex) from 4.1.0 to 4.1.1. Commits 64735d2 v4.1.1 75a657d Fix potential ReDoS (#37) See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ansi-regex&package-manager=npm_and_yarn&previous-version=4.1.0&new-version=4.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this...

dependencies
javascript