Security Advisories (2)
CVE-2022-24785 (2022-04-04)

Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This problem is patched in 2.29.2, and the patch can be applied to all affected versions. As a workaround, sanitize the user-provided locale name before passing it to Moment.js.

CVE-2020-11022 (2020-04-29)

In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

NAME

nd-dbic-versions - Create DB Schema Versions for Netdisco

USAGE

This script creates SQL DDL files of the Netdisco database schema.

If called without any CLI options, it makes one SQL DDL file which will initialize the complete schema to the current DBIx::Class specification.

If called with the "-p <version>" option, upgrade SQL DDL command files are created between the specified version and the current DBIx::Class specification.

NEW VERSION

  1. Alter the DBIC DDL files as you wish.

  2. Increment the Schema's $VERSION number.

  3. Run this script with "-p $current_db_version".