Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump trix from 2.1.8 to 2.1.10 #2721

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Bump trix from 2.1.8 to 2.1.10

f7f22ab
Select commit
Loading
Failed to load commit list.
Open

Bump trix from 2.1.8 to 2.1.10 #2721

Bump trix from 2.1.8 to 2.1.10
f7f22ab
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Dec 16, 2024 in 3s

2 new alerts including 1 high severity security vulnerability

New alerts in code changed by this pull request

Security Alerts:

  • 1 high
  • 1 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 7539 in app/assets/builds/administrate/application.js

See this annotation in the file changed.

Code scanning / CodeQL

Unsafe jQuery plugin Medium

Potential XSS vulnerability in the
'$.fn.selectize' plugin
Loading
.

Check failure on line 14984 in app/assets/builds/administrate/application.js

See this annotation in the file changed.

Code scanning / CodeQL

Insecure randomness High

This uses a cryptographically insecure random number generated at
Math.random()
Loading
in a security context.
This uses a cryptographically insecure random number generated at
Math.random()
Loading
in a security context.