Security Advisories (1)
CVE-2020-7746 (2020-10-29)

This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.

NAME

ukigumo-server - ukigumo server launcher

SYNOPSIS

% ukigumo-server
    --host|h=127.0.0.1   # Bind host   (Default: 0)
    --port|p=80          # Bind port   (Default: 2828)
    --max-workers        # Max workers (Default: 4)
    --config|c=config.pl # Configuration file

DESCRIPTION

ukigumo-server is a Ukigumo::Server launcher.

CONFIGURATION

Config file is '.pl' format and has two configuration items.

DBI

DBI connect information. You can use SQLite or MySQL.

Text::Xslate

Text::Xslate constructor options. If you set this option, you can use original template file.

max_num_of_reports_by_branch

Upper limit of number of reports to preserve for each branch. If you omit this configuration, it will be unlimited.

max_num_of_reports

Upper limit of number of all reports. If you omit this configuration, it will be unlimited.

enable_compression

Compress reports if this option is enabled